last executing test programs:

4.479043715s ago: executing program 3 (id=4283):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r0, &(0x7f0000000000)={'b', ' *:* ', 'rw\x00'}, 0x9)

4.313066426s ago: executing program 3 (id=4286):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4001af84, &(0x7f0000000140)={0x2})

4.16781983s ago: executing program 3 (id=4288):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4a0, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x1d0, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)

3.96119176s ago: executing program 3 (id=4293):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1018056, &(0x7f0000000080)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@noquota}, {}, {@nodiscard}, {@usrquota}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x24, 0x6260, &(0x7f0000000340)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2.672972069s ago: executing program 3 (id=4310):
r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000080)='\x00', 0x0)

2.464992373s ago: executing program 0 (id=4314):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.287127379s ago: executing program 0 (id=4318):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffbfffd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0xa, 0x2, '*/^\\^\x00'}}}]}, 0x38}}, 0x0)

2.026749985s ago: executing program 0 (id=4321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000540), 0x0}, 0x20)

1.833520403s ago: executing program 0 (id=4325):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x20000000000004, 0xfb, 0x800074, 0x80000000, 0x6, 0x7, 0x20000001000, 0xf64, 0x8})

1.708165336s ago: executing program 4 (id=4327):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x401, 0x70bd2d, 0x0, {{{@in6=@dev={0xfe, 0x80, '\x00', 0xf}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0xfffe, 0x0, 0x0, 0xa, 0x80, 0x20}, {@in=@multicast1, 0x1ffffffe, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x21}, {0x4, 0xfffffffffffffffe, 0x8, 0x6, 0x80000}, {0x2, 0x0, 0x0, 0x4}, {0xe9, 0x400, 0x3}, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0xd0}, 0x8, 0x8e}, [@sec_ctx={0xc, 0x8e, {0x8, 0x8, 0x1, 0xe}}]}, 0x104}, 0x1, 0x0, 0x0, 0x8801}, 0x6484c)

1.635010411s ago: executing program 1 (id=4328):
r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_WATCH_KEY(0x11, r0, 0xffffffffffffffff, 0xe1)

1.634927384s ago: executing program 2 (id=4329):
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000140)="fc00000018000703ab092500090007000a070000000000060000369321000700ff2500000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddefefe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc)

1.391334906s ago: executing program 3 (id=4330):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ac0)="a2"}, 0x4c)

1.369756808s ago: executing program 1 (id=4331):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448dc, 0x0)

1.31393334s ago: executing program 4 (id=4332):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, 0x0, &(0x7f0000000140))

1.300855717s ago: executing program 2 (id=4333):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

873.669035ms ago: executing program 32 (id=4330):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ac0)="a2"}, 0x4c)

865.95823ms ago: executing program 0 (id=4335):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000022c0), 0xa0003, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x18)

865.379184ms ago: executing program 1 (id=4336):
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0xfffffffffffffffc)

865.119403ms ago: executing program 2 (id=4337):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000640)={0x4c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000010)

864.698073ms ago: executing program 4 (id=4338):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2003, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000001f00)=@s={0x5, @generic=0x4, 0x4, 0x6})

702.255003ms ago: executing program 2 (id=4339):
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always')

701.865858ms ago: executing program 4 (id=4340):
r0 = socket(0x2c, 0x3, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xe1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c)

672.377531ms ago: executing program 1 (id=4341):
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="636865636b3d7374726963742c6e6f646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c007db9b87a3b22e5cdbfd3408bf7f26c6f9e2e5a33a3de79757cd012da0fa08b018021308de4ff8e18c85136d66ca70f9e0202d9f4ae6ea8be44247a411f017b3641e72534ed28887e107245165398cb2190b1c94e503b949600a547d22bd1f5389f7d4c9888f5cf2358d4258a2647e5563c5bf7447ab02ee8751259a8c6ee852e305393a69052893580c4820d1ce2dcfccf9b1f8250ea0de206b8ef12366ebe20bc74087f57f579b70bd08afcf902e41a55b58f624e5ce5a03cf74baddfb64769c330584e79449ff96c074b0065a305dd039b056c50c00d1d6a"], 0x1, 0x236, &(0x7f0000000000)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x171)

462.324296ms ago: executing program 4 (id=4342):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x4d6)

435.57225ms ago: executing program 2 (id=4343):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001240)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b02"], 0x84}}, 0x10)

226.933147ms ago: executing program 0 (id=4344):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x70, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600a8}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x8}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x5}]}}}]}, 0x70}}, 0x24008040)

226.577766ms ago: executing program 4 (id=4345):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a310000000044030000090a030000000000000009000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8e8020980a00002804400018008000140"], 0x38c}}, 0x0)

142.025524ms ago: executing program 1 (id=4346):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@alg={0xe8, 0x10, 0x1, 0x70bd26, 0x25dfdbff, {{'drbg_pr_ctr_aes128\x00'}, '\x00', '\x00', 0x2000, 0x4000}, [{0x8, 0x1, 0x6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

6.577392ms ago: executing program 2 (id=4347):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0)

0s ago: executing program 1 (id=4348):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

kernel console output (not intermixed with test programs):

ard
[  525.924689][ T6010] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40
[  525.946568][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.946687][T14690] BTRFS info (device loop0): enabling free space tree
[  525.978729][ T6010] usb 3-1: Product: syz
[  525.993131][ T6010] usb 3-1: Manufacturer: syz
[  526.004043][T14690] BTRFS info (device loop0): max_inline set to 0
[  526.007479][ T6010] usb 3-1: SerialNumber: syz
[  526.291796][ T5934] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  526.324419][ T6010] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input46
[  526.476105][ T6010] usb 3-1: USB disconnect, device number 123
[  526.476146][    C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  526.610525][ T6010] appletouch 3-1:1.0: input: appletouch disconnected
[  527.027111][ T6138] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  527.198576][ T6138] usb 5-1: Using ep0 maxpacket: 8
[  527.215783][ T6138] usb 5-1: unable to get BOS descriptor or descriptor too short
[  527.244303][ T6138] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  527.279605][ T6138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.317825][ T6138] usb 5-1: Product: syz
[  527.338621][ T6138] usb 5-1: Manufacturer: syz
[  527.362384][ T6138] usb 5-1: SerialNumber: syz
[  527.532394][T14745] loop2: detected capacity change from 0 to 8192
[  527.596963][T14726] loop3: detected capacity change from 0 to 40427
[  527.612859][ T5938]  loop2: p1 p3
[  527.623162][ T5938] loop2: partition table partially beyond EOD, truncated
[  527.635250][ T6138] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  527.659586][ T5938] loop2: p1 start 51379968 is beyond EOD, truncated
[  527.667472][ T6138] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  527.686412][ T5938] loop2: p3 size 100663552 extends beyond EOD, truncated
[  527.719020][T14745]  loop2: p1 p3
[  527.729893][T14745] loop2: partition table partially beyond EOD, truncated
[  527.764407][T14745] loop2: p1 start 51379968 is beyond EOD, truncated
[  527.798440][T14745] loop2: p3 size 100663552 extends beyond EOD, truncated
[  527.905040][ T6138] usb 5-1: USB disconnect, device number 115
[  528.044760][ T6010] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  528.138668][ T6105] udevd[6105]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  528.198710][T14757] loop1: detected capacity change from 0 to 4096
[  528.230516][T14757] ntfs3(loop1): Failed to load $MFT (-22).
[  528.251035][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  528.286306][ T6010] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  528.295566][ T6105] udevd[6105]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  528.328244][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  528.370670][ T6010] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  528.420426][ T6010] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  528.424956][ T6105] udevd[6105]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  528.450124][ T6003] usb 3-1: new full-speed USB device number 124 using dummy_hcd
[  528.466691][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.525093][ T6010] usb 1-1: Product: syz
[  528.541548][ T6010] usb 1-1: Manufacturer: syz
[  528.560090][ T6010] usb 1-1: SerialNumber: syz
[  528.576706][ T6010] usb 1-1: config 0 descriptor??
[  528.602880][ T6010] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  528.610199][T14769] loop3: detected capacity change from 0 to 8
[  528.656214][T14769] squashfs image failed sanity check
[  528.670838][ T6003] usb 3-1: unable to get BOS descriptor or descriptor too short
[  528.689344][ T6003] usb 3-1: not running at top speed; connect to a high speed hub
[  528.709803][T14768] loop4: detected capacity change from 0 to 4096
[  528.721296][T14768] ntfs3(loop4): Primary boot: invalid bytes per sector 40960.
[  528.722320][ T6003] usb 3-1: config 1 has an invalid interface number: 86 but max is 0
[  528.752972][T14768] ntfs3(loop4): try to read out of volume at offset 0x1ffe00
[  528.760190][ T6003] usb 3-1: config 1 has no interface number 0
[  528.793892][ T6003] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=54.05
[  528.836228][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.854058][ T6010] scsi host1: usb-storage 1-1:0.0
[  528.876415][ T6003] usb 3-1: Product: syz
[  528.901000][ T6003] usb 3-1: Manufacturer: syz
[  528.932109][ T6003] usb 3-1: SerialNumber: syz
[  528.936951][ T6010] usb 1-1: USB disconnect, device number 118
[  529.069043][ T6138] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  529.097516][T14778] exfat: Deprecated parameter 'utf8'
[  529.114426][T14778] exfat: Unexpected value for 'utf8'
[  529.215213][ T6003] usbhid 3-1:1.86: couldn't find an input interrupt endpoint
[  529.251350][ T6003] usb 3-1: USB disconnect, device number 124
[  529.256931][ T6138] usb 4-1: config 0 has an invalid interface number: 168 but max is 0
[  529.287621][ T6138] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  529.332133][ T6138] usb 4-1: config 0 has no interface number 0
[  529.355779][ T6138] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  529.382107][T14782] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  529.389664][ T6138] usb 4-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16
[  529.439420][ T6138] usb 4-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98
[  529.456813][ T6138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.458890][T14782] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  529.482854][ T6138] usb 4-1: config 0 descriptor??
[  529.492170][T14782] EXT4-fs (loop1): orphan cleanup on readonly fs
[  529.503266][T14782] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.3767: Freeing blocks not in datazone - block = 0, count = 4096
[  529.518246][ T6138] HFC-S_USB 4-1:0.168: probe with driver HFC-S_USB failed with error -5
[  529.518619][T14782] loop1: lost filesystem error report for type 5 error -117
[  529.539621][    C1] EXT4-fs (loop1): initial error at time 1791664292: ext4_free_blocks:6728
[  529.556704][    C1] EXT4-fs (loop1): last error at time 1791664292: ext4_free_blocks:6728
[  529.567389][T14782] EXT4-fs (loop1): Remounting filesystem read-only
[  529.575772][T14782] EXT4-fs (loop1): 1 orphan inode deleted
[  529.593616][T14782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  529.697167][ T5942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.767736][   T29] usb 4-1: USB disconnect, device number 124
[  529.955436][   T30] audit: type=1326 audit(1791664293.361:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14798 comm="syz.2.3775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa479c819 code=0x0
[  529.997113][T14797] set_capacity_and_notify: 2 callbacks suppressed
[  529.997128][T14797] loop4: detected capacity change from 0 to 4096
[  530.010298][ T6138] usb 1-1: new low-speed USB device number 119 using dummy_hcd
[  530.069462][T14797] ntfs3(loop4): ino=b, mi_enum_attr
[  530.088183][ T3111] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  530.091424][T14797] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  530.104728][T14797] ntfs3(loop4): Failed to load $Extend (-22).
[  530.111542][T14797] ntfs3(loop4): Failed to initialize $Extend.
[  530.173509][ T6138] usb 1-1: unable to get BOS descriptor or descriptor too short
[  530.201955][ T6138] usb 1-1: config 242 has an invalid interface number: 40 but max is 0
[  530.221577][ T6138] usb 1-1: config 242 has no interface number 0
[  530.234207][ T6138] usb 1-1: config 242 interface 40 has no altsetting 0
[  530.251067][ T6138] usb 1-1: string descriptor 0 read error: -22
[  530.265643][ T6138] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=44.11
[  530.275651][ T3111] usb 2-1: Using ep0 maxpacket: 8
[  530.281256][ T6138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.310549][ T3111] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab
[  530.342542][ T6138] hdpvr 1-1:242.40: Could not find bulk-in endpoint
[  530.349635][ T3111] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  530.375026][ T6138] hdpvr 1-1:242.40: probe with driver hdpvr failed with error -12
[  530.397820][ T3111] usb 2-1: Product: syz
[  530.408443][ T3111] usb 2-1: Manufacturer: syz
[  530.425023][ T3111] usb 2-1: SerialNumber: syz
[  530.444546][ T3111] usb 2-1: config 0 descriptor??
[  530.543907][T14809] loop3: detected capacity change from 0 to 2048
[  530.578187][ T6003] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  530.585618][ T6138] usb 1-1: USB disconnect, device number 119
[  530.596209][T14809] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2)
[  530.644585][T14813] loop4: detected capacity change from 0 to 1024
[  530.680432][T14813] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  530.780798][ T6003] usb 3-1: Using ep0 maxpacket: 32
[  530.803897][ T6003] usb 3-1: unable to get BOS descriptor or descriptor too short
[  530.835431][ T6003] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 147, changing to 7
[  530.880887][ T6003] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  530.881345][ T3111] usb 2-1: USB disconnect, device number 119
[  530.910473][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.958388][ T6003] usb 3-1: Product: syz
[  530.972632][ T6003] usb 3-1: Manufacturer: syz
[  530.992339][ T6003] usb 3-1: SerialNumber: syz
[  531.050907][T14818] loop4: detected capacity change from 0 to 736
[  531.255311][T14821] IPv6: addrconf: prefix option has invalid lifetime
[  531.259142][ T6003] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  531.310580][ T6003] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  531.469214][ T6003] usb 3-1: USB disconnect, device number 125
[  531.569070][T14828] loop3: detected capacity change from 0 to 512
[  531.616903][ T6105] udevd[6105]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  531.639824][T14828] EXT4-fs (loop3): 1 truncate cleaned up
[  531.679403][T14828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.861328][ T5945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.042605][ T3111] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  532.066611][T14839] loop1: detected capacity change from 0 to 4096
[  532.092157][T14839] ntfs3(loop1): ino=0, mi_enum_attr
[  532.100318][T14839] ntfs3(loop1): ino=0, mi_enum_attr
[  532.110858][T14839] ntfs3(loop1): Failed to load $MFT (-22).
[  532.246303][ T3111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  532.265910][ T6010] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[  532.268812][ T3111] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  532.315135][ T3111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  532.351310][ T3111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  532.384609][ T3111] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  532.430960][ T3111] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  532.449563][ T6010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  532.452939][ T3111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.468586][ T6010] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  532.493925][ T3111] usb 1-1: Product: syz
[  532.500705][ T6010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.503205][ T3111] usb 1-1: Manufacturer: syz
[  532.523658][ T3111] usb 1-1: SerialNumber: syz
[  532.534028][ T6010] usb 4-1: config 0 descriptor??
[  532.538294][ T3111] usb 1-1: config 0 descriptor??
[  532.557919][T14825] loop4: detected capacity change from 0 to 40427
[  532.560042][ T6010] smsusb:smsusb_probe: board id=8, interface number 0
[  532.568771][ T3111] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected
[  532.581926][T14847] loop1: detected capacity change from 0 to 8192
[  532.601269][ T6010] smsusb:smsusb_probe: Device initialized with return code -19
[  532.611115][T14825] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(1) root(3)
[  532.628066][ T3111] garmin_gps ttyUSB0: failed to submit interrupt urb: -90
[  532.642255][T14825] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  532.652965][ T6105] Dev loop1: RDB in block 1 has bad checksum
[  532.659542][ T3111] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90
[  532.677491][T14825] F2FS-fs (loop4): invalid crc value
[  532.677590][T14847] Dev loop1: RDB in block 1 has bad checksum
[  532.788653][ T6010] usb 4-1: USB disconnect, device number 125
[  532.951672][  T995] usb 1-1: USB disconnect, device number 120
[  532.994247][  T995] garmin_gps 1-1:0.0: device disconnected
[  533.036442][T14825] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  533.088477][T14843] loop2: detected capacity change from 0 to 32768
[  533.096385][T14825] F2FS-fs (loop4): Start checkpoint disabled!
[  533.108128][T14843] JBD2: Ignoring recovery information on journal
[  533.140710][T14825] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  533.165961][T14825] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  533.176382][T14825] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  533.191041][T14843] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  533.217103][ T5936] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  533.319178][ T5935] ocfs2: Unmounting device (7,2) on (node local)
[  533.387969][ T5936] usb 2-1: Using ep0 maxpacket: 8
[  533.407537][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short
[  533.428334][ T5936] usb 2-1: config 1 has an invalid interface number: 235 but max is 0
[  533.460459][ T5936] usb 2-1: config 1 has no interface number 0
[  533.479276][ T5936] usb 2-1: config 1 interface 235 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  533.535112][ T5936] usb 2-1: config 1 interface 235 has no altsetting 0
[  533.569853][ T5936] usb 2-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=22.52
[  533.588814][T14856] loop3: detected capacity change from 0 to 512
[  533.609373][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.623744][T14856] EXT4-fs: Ignoring removed mblk_io_submit option
[  533.635917][ T5936] usb 2-1: Product: syz
[  533.650396][ T5936] usb 2-1: Manufacturer: syz
[  533.665765][ T5936] usb 2-1: SerialNumber: syz
[  533.692410][T14856] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  533.745407][T14856] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3802: invalid indirect mapped block 33554432 (level 0)
[  533.785937][T14856] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  533.794166][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  533.810054][    C0] EXT4-fs (loop3): initial error at time 1791664296: ext4_free_branches:1023: inode 13
[  533.814509][T14856] EXT4-fs (loop3): Remounting filesystem read-only
[  533.819786][    C0] EXT4-fs (loop3): last error at time 1791664296: ext4_free_branches:1023: inode 13
[  533.900509][T14856] EXT4-fs (loop3): 1 truncate cleaned up
[  533.957637][ T5936] rndis_host 2-1:1.235: invalid descriptor buffer length
[  533.970946][T14856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  533.981140][ T5936] rndis_host 2-1:1.235: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  534.031353][ T5936] cdc_acm 2-1:1.235: invalid descriptor buffer length
[  534.038481][T14868] trusted_key: encrypted_key: insufficient parameters specified
[  534.071209][ T5936] usb 2-1: USB disconnect, device number 120
[  534.212439][ T5945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.335555][T14878] EXT4-fs: Ignoring removed orlov option
[  534.361673][T14878] EXT4-fs: Ignoring removed mblk_io_submit option
[  534.383425][T14878] EXT4-fs: Ignoring removed nomblk_io_submit option
[  534.398610][T14878] EXT4-fs: test_dummy_encryption requires encrypt feature
[  534.510517][ T6010] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  534.682197][ T6010] usb 5-1: Using ep0 maxpacket: 32
[  534.692328][ T5936] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  534.705810][ T6010] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  534.737060][ T6010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  534.753181][ T6010] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  534.773923][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.788905][ T3111] usb 3-1: new full-speed USB device number 126 using dummy_hcd
[  534.793922][ T6010] usb 5-1: Product: syz
[  534.806422][ T6010] usb 5-1: Manufacturer: syz
[  534.817139][ T6010] usb 5-1: SerialNumber: syz
[  534.833715][ T6010] usb 5-1: config 0 descriptor??
[  534.853511][ T6010] usb 5-1: no audio or video endpoints found
[  534.895355][ T5936] usb 1-1: Using ep0 maxpacket: 32
[  534.903501][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  534.913706][ T5936] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  534.927048][ T5936] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  534.936778][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.944970][ T5936] usb 1-1: Product: syz
[  534.949566][ T5936] usb 1-1: Manufacturer: syz
[  534.954241][ T5936] usb 1-1: SerialNumber: syz
[  534.964826][ T5936] usb 1-1: config 0 descriptor??
[  534.976210][ T5936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  534.993833][ T3111] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[  535.018026][ T3111] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  535.041617][ T3111] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  535.059095][T14880] F2FS-fs (loop3): invalid crc value
[  535.066217][ T3111] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  535.082307][T14880] F2FS-fs (loop3): Mismatch valid blocks 5 vs. 6
[  535.095724][ T6138] loop3: lost filesystem error report for type 5 error -108
[  535.095790][ T3111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  535.115367][T14880] loop3: lost filesystem error report for type 5 error -117
[  535.115401][T14880] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[  535.126577][ T6010] usb 5-1: USB disconnect, device number 116
[  535.158608][ T3111] usb 3-1: SerialNumber: syz
[  535.331190][ T5936] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12
[  535.385430][ T5936] usb 1-1: USB disconnect, device number 121
[  535.450334][ T3111] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -22
[  535.480382][T10096] udevd[10096]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  535.530753][ T3111] usb 3-1: USB disconnect, device number 126
[  535.889965][   T29] usb 2-1: new full-speed USB device number 121 using dummy_hcd
[  535.900412][ T5936] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  536.082112][ T5936] usb 4-1: Using ep0 maxpacket: 32
[  536.094989][ T5936] usb 4-1: config 4 has an invalid interface number: 44 but max is 0
[  536.097157][   T29] usb 2-1: not running at top speed; connect to a high speed hub
[  536.111133][ T5936] usb 4-1: config 4 has no interface number 0
[  536.118325][   T29] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  536.121971][  T995] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  536.140527][   T29] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b
[  536.144010][ T5936] usb 4-1: config 4 interface 44 has no altsetting 0
[  536.155031][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.159789][ T5936] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee
[  536.174078][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.182662][ T5936] usb 4-1: Product: syz
[  536.187044][ T5936] usb 4-1: Manufacturer: syz
[  536.192238][   T29] usb 2-1: Product: syz
[  536.196785][   T29] usb 2-1: Manufacturer: syz
[  536.205079][   T29] usb 2-1: SerialNumber: syz
[  536.206400][ T5936] usb 4-1: SerialNumber: syz
[  536.243470][ T3111] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  536.317280][  T995] usb 5-1: Using ep0 maxpacket: 16
[  536.324910][  T995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 67, setting to 64
[  536.339851][  T995] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  536.349571][  T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.357735][  T995] usb 5-1: Product: syz
[  536.362277][  T995] usb 5-1: Manufacturer: syz
[  536.366952][  T995] usb 5-1: SerialNumber: syz
[  536.378767][  T995] usb 5-1: config 0 descriptor??
[  536.406586][  T995] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  536.424614][ T3111] usb 1-1: Using ep0 maxpacket: 32
[  536.451518][ T5936] kl5kusb105 4-1:4.44: KL5KUSB105D / PalmConnect converter detected
[  536.457242][ T3111] usb 1-1: unable to get BOS descriptor or descriptor too short
[  536.504825][ T3111] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  536.505876][ T5936] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  536.515354][   T29] usb 2-1: USB disconnect, device number 121
[  536.534220][ T3111] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  536.545449][ T3111] usb 1-1: config 1 has no interface number 0
[  536.566080][ T3111] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  536.573096][ T5936] usb 4-1: USB disconnect, device number 126
[  536.584565][ T3111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.593123][ T3111] usb 1-1: Product: syz
[  536.602034][ T3111] usb 1-1: Manufacturer: syz
[  536.609552][ T3111] usb 1-1: SerialNumber: syz
[  536.640865][  T201] usb 5-1: Failed to submit usb control message: -71
[  536.641220][  T995] usb 5-1: USB disconnect, device number 117
[  536.657418][  T201] usb 5-1: unable to send the bmi data to the device: -71
[  536.682084][  T201] usb 5-1: unable to get target info from device
[  536.706333][ T5936] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  536.706623][  T201] usb 5-1: could not get target info (-71)
[  536.742898][ T5936] kl5kusb105 4-1:4.44: device disconnected
[  536.754063][  T201] usb 5-1: could not probe fw (-71)
[  537.060758][ T3111] usb 1-1: USB disconnect, device number 122
[  537.160239][ T6105] udevd[6105]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  537.537438][  T995] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  537.716077][T14943] set_capacity_and_notify: 2 callbacks suppressed
[  537.716099][T14943] loop1: detected capacity change from 0 to 512
[  537.717642][  T995] usb 4-1: Using ep0 maxpacket: 32
[  537.805389][  T995] usb 4-1: unable to get BOS descriptor or descriptor too short
[  537.826214][  T995] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 177, changing to 7
[  537.841717][T14943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  537.861529][  T995] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  537.881981][  T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.899386][  T995] usb 4-1: Product: syz
[  537.906748][  T995] usb 4-1: Manufacturer: syz
[  537.913788][  T995] usb 4-1: SerialNumber: syz
[  537.943400][T14943] ext4 filesystem being mounted at /740/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  538.153395][ T5942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.205999][  T995] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  538.341116][T14939] loop2: detected capacity change from 0 to 32768
[  538.363211][T14939] (syz.2.3836,14939,1):ocfs2_validate_inode_block:1449 ERROR: Invalid dinode #65: Corrupt state (nlink = 0 or mode = 2541) detected!
[  538.399630][T14939] (syz.2.3836,14939,1):ocfs2_read_locked_inode:599 ERROR: status = -117
[  538.424986][T14939] (syz.2.3836,14939,1):ocfs2_init_global_system_inodes:444 ERROR: status = -117
[  538.444845][T14939] (syz.2.3836,14939,1):ocfs2_init_global_system_inodes:476 ERROR: status = -117
[  538.481604][T14939] (syz.2.3836,14939,1):ocfs2_initialize_super:2198 ERROR: status = -117
[  538.519169][  T995] usb 4-1: USB disconnect, device number 127
[  538.523604][T14939] (syz.2.3836,14939,1):ocfs2_fill_super:1177 ERROR: status = -117
[  538.601426][T14958] loop1: detected capacity change from 0 to 4096
[  538.648752][T14958] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  538.689002][T14958] ntfs3(loop1): ino=3, mi_enum_attr
[  538.716546][T14958] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  538.792697][T14958] ntfs3(loop1): volume is dirty and "force" flag is not set!
[  539.242793][T14965] loop2: detected capacity change from 0 to 8192
[  539.327754][T14965]  loop2: p4 < >
[  539.739516][T14959] loop4: detected capacity change from 0 to 32768
[  539.760815][  T995] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  539.780094][T14959] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3845 (14959)
[  539.833016][T14959] BTRFS info (device loop4): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1
[  539.859898][T14959] BTRFS info (device loop4): using crc32c checksum algorithm
[  539.935758][ T6105] udevd[6105]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  539.966262][  T995] usb 2-1: unable to get BOS descriptor or descriptor too short
[  539.999850][  T995] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  540.016279][ T3111] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  540.050890][T14959] BTRFS info (device loop4): enabling ssd optimizations
[  540.072135][  T995] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  540.091164][T14959] BTRFS info (device loop4): turning on async discard
[  540.110561][T14959] BTRFS info (device loop4): enabling free space tree
[  540.119521][  T995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  540.164770][  T995] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  540.184822][  T995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.196086][  T995] usb 2-1: Product: syz
[  540.200644][  T995] usb 2-1: Manufacturer: syz
[  540.211278][ T3111] usb 4-1: Using ep0 maxpacket: 8
[  540.218356][  T995] usb 2-1: SerialNumber: syz
[  540.228597][ T3111] usb 4-1: config 190 has an invalid interface number: 221 but max is 0
[  540.228747][  T995] usb 2-1: config 0 descriptor??
[  540.258812][ T3111] usb 4-1: config 190 has no interface number 0
[  540.265930][T14979] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  540.283041][ T3111] usb 4-1: config 190 interface 221 has no altsetting 0
[  540.283271][ T5953] BTRFS info (device loop4): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1
[  540.302273][  T995] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  540.312894][ T3111] usb 4-1: New USB device found, idVendor=12d1, idProduct=1c05, bcdDevice=9b.e9
[  540.332778][ T3111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.341223][   T29] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  540.371605][ T3111] usb 4-1: Product: syz
[  540.376596][ T3111] usb 4-1: Manufacturer: syz
[  540.383580][ T3111] usb 4-1: SerialNumber: syz
[  540.541279][   T29] usb 1-1: Using ep0 maxpacket: 32
[  540.548851][  T995] usb 2-1: USB disconnect, device number 122
[  540.564258][   T29] usb 1-1: config 0 has an invalid interface number: 202 but max is 1
[  540.599502][   T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  540.625526][   T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  540.635880][T15003] loop2: detected capacity change from 0 to 32768
[  540.665979][T15003] (syz.2.3862,15003,0):ocfs2_verify_volume:2322 ERROR: Superblock slots found greater than file system maximum: found 65535, max 255
[  540.667647][   T29] usb 1-1: config 0 has no interface number 0
[  540.693331][ T3111] rndis_host 4-1:190.221: ACM capabilities 06, not really RNDIS?
[  540.719243][   T29] usb 1-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30
[  540.730401][T15003] (syz.2.3862,15003,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  540.730437][T15003] (syz.2.3862,15003,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  540.730457][T15003] (syz.2.3862,15003,0):ocfs2_fill_super:1177 ERROR: status = -22
[  540.755494][ T3111] option 4-1:190.221: GSM modem (1-port) converter detected
[  540.767237][ T6039] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  540.776293][ T3111] usb 4-1: USB disconnect, device number 2
[  540.800719][ T3111] option 4-1:190.221: device disconnected
[  540.871514][   T29] usb 1-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  540.906331][   T29] usb 1-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182
[  540.953028][   T29] usb 1-1: config 0 interface 202 has no altsetting 0
[  540.982678][   T29] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[  540.993859][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.011465][ T6039] usb 5-1: config 1 has an invalid interface number: 93 but max is 0
[  541.021496][ T6039] usb 5-1: config 1 has no interface number 0
[  541.028960][   T29] usb 1-1: Product: syz
[  541.042529][ T6039] usb 5-1: config 1 interface 93 has no altsetting 0
[  541.049420][   T29] usb 1-1: Manufacturer: syz
[  541.055123][ T6039] usb 5-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02
[  541.064444][   T29] usb 1-1: SerialNumber: syz
[  541.079833][   T29] usb 1-1: config 0 descriptor??
[  541.085501][ T6039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.108835][   T29] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  541.192527][  T808] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  541.310111][T15021] loop1: detected capacity change from 0 to 512
[  541.324722][ T6039] usb 5-1: string descriptor 0 read error: -71
[  541.348769][ T6039] gl620a 5-1:1.93: probe with driver gl620a failed with error -22
[  541.366263][T15021] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  541.387361][  T808] usb 3-1: Using ep0 maxpacket: 8
[  541.395743][ T6039] usb 5-1: USB disconnect, device number 118
[  541.412087][  T808] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7
[  541.423199][T15021] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  541.423233][T15021] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3867: Corrupt directory, running e2fsck is recommended
[  541.428382][T15021] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  541.434080][  T808] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  541.474679][  T808] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  541.496260][  T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.506293][  T808] usb 3-1: Product: syz
[  541.510580][  T808] usb 3-1: Manufacturer: syz
[  541.516965][  T808] usb 3-1: SerialNumber: syz
[  541.518566][   T29] usb 1-1: USB disconnect, device number 123
[  541.523356][   T12] usb 1-1: Failed to submit usb control message: -71
[  541.535722][   T12] usb 1-1: unable to send the bmi data to the device: -71
[  541.539658][T15021] EXT4-fs error (device loop1): ext4_iget_extra_inode:5043: inode #15: comm syz.1.3867: corrupted in-inode xattr: e_name out of bounds
[  541.544625][   T12] usb 1-1: unable to get target info from device
[  541.575056][T15021] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  541.575289][   T12] usb 1-1: could not get target info (-71)
[  541.584619][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  541.584646][    C1] EXT4-fs (loop1): initial error at time 1791664304: ext4_iget_extra_inode:5043: inode 15
[  541.584682][    C1] EXT4-fs (loop1): last error at time 1791664304: ext4_iget_extra_inode:5043: inode 15
[  541.598856][T15021] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3867: couldn't read orphan inode 15 (err -117)
[  541.609677][   T12] usb 1-1: could not probe fw (-71)
[  541.618954][T15021] loop1: lost filesystem error report for type 5 error -117
[  541.641123][T15021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  541.736808][ T5942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.801338][  T808] usb 3-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  541.815975][  T808] usb 3-1: found format II with max.bitrate = 32769, frame size=1
[  541.828575][  T808] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  541.837420][  T808] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  541.843351][T15027] loop1: detected capacity change from 0 to 512
[  541.856894][T15027] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  541.910277][T15027] EXT4-fs (loop1): orphan cleanup on readonly fs
[  541.925999][  T808] usb 3-1: USB disconnect, device number 127
[  541.951396][T15027] EXT4-fs error (device loop1): __ext4_iget:5396: inode #11: block 6: comm syz.1.3869: invalid block
[  541.971481][T15027] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  541.972557][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  541.988241][    C0] EXT4-fs (loop1): initial error at time 1791664304: __ext4_iget:5396: inode 11: block 6
[  541.991017][T15027] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3869: couldn't read orphan inode 11 (err -117)
[  541.998152][    C0] EXT4-fs (loop1): last error at time 1791664304: __ext4_iget:5396: inode 11: block 6
[  542.032331][T15027] loop1: lost filesystem error report for type 5 error -117
[  542.043628][T15027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  542.075728][ T6105] udevd[6105]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  542.202278][ T5942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.296284][T15032] loop0: detected capacity change from 0 to 4096
[  542.317385][T15032] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  542.355857][T15032] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  542.369301][ T6039] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  542.388853][T15025] orangefs_mount: mount request failed with -4
[  542.577460][ T6039] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  542.611282][ T6039] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  542.655852][ T6039] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  542.675865][T15042] loop1: detected capacity change from 0 to 512
[  542.681104][ T6039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.695552][ T6039] usb 5-1: Product: syz
[  542.701374][ T6039] usb 5-1: Manufacturer: syz
[  542.706928][T15042] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  542.728387][ T6039] usb 5-1: SerialNumber: syz
[  542.753165][T15045] MINIX-fs: bad superblock
[  542.763117][ T6039] rtl8150 5-1:1.0: couldn't find required endpoints
[  542.793413][T15046] EXT4-fs: Ignoring removed nobh option
[  542.804936][ T6039] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5
[  542.813567][T15046] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  542.881250][   T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  543.003907][ T6039] usb 5-1: USB disconnect, device number 119
[  543.052423][   T29] usb 4-1: Using ep0 maxpacket: 32
[  543.082462][   T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  543.090204][T15048] set_capacity_and_notify: 2 callbacks suppressed
[  543.090222][T15048] loop1: detected capacity change from 0 to 4096
[  543.132977][   T29] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  543.136285][T15048] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  543.174565][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.225272][   T29] usb 4-1: Product: syz
[  543.230185][   T29] usb 4-1: Manufacturer: syz
[  543.237764][   T29] usb 4-1: SerialNumber: syz
[  543.250736][T15048] ntfs3(loop1): Failed to load $Bitmap (-22).
[  543.258567][   T29] usb 4-1: config 0 descriptor??
[  543.267540][   T29] usb 4-1: No union descriptors
[  543.274850][   T29] usb 4-1: unsupported MDLM descriptors
[  543.308935][ T3111] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  543.495923][ T6138] usb 4-1: USB disconnect, device number 3
[  543.504045][ T3111] usb 3-1: Using ep0 maxpacket: 16
[  543.516927][ T3111] usb 3-1: config index 0 descriptor too short (expected 526, got 367)
[  543.529835][ T3111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  543.541562][T15057] loop1: detected capacity change from 0 to 4096
[  543.546627][ T3111] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96
[  543.564884][T15057] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  543.566496][ T3111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.584207][T15057] ntfs3(loop1): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only.
[  543.601413][ T3111] usb 3-1: Product: syz
[  543.613966][ T3111] usb 3-1: Manufacturer: syz
[  543.625630][ T3111] usb 3-1: SerialNumber: syz
[  543.649609][ T3111] usb 3-1: config 0 descriptor??
[  543.695557][T15057] ntfs3(loop1): $Secure::$SDH is corrupted.
[  543.709643][T15057] ntfs3(loop1): Failed to initialize $Secure (-22).
[  543.758000][   T29] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  543.893126][ T5949] Bluetooth: hci2: unexpected event for opcode 0x2002
[  543.929049][   T29] usb 1-1: Using ep0 maxpacket: 8
[  543.953667][   T29] usb 1-1: unable to get BOS descriptor or descriptor too short
[  543.988627][   T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  544.005109][ T3111] usb 3-1: USB disconnect, device number 2
[  544.026281][   T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  544.064272][   T29] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  544.101066][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.127478][   T29] usb 1-1: Product: syz
[  544.139187][   T29] usb 1-1: Manufacturer: syz
[  544.156814][   T29] usb 1-1: SerialNumber: syz
[  544.255743][T15077] loop3: detected capacity change from 0 to 1024
[  544.326971][T15077] hfsplus: invalid file type 0113366 for inode 2
[  544.358051][T15077] hfsplus: failed to load root directory
[  544.439464][   T29] usb 1-1: cannot find UAC_HEADER
[  544.529749][T15079] loop4: detected capacity change from 0 to 8192
[  544.606375][   T29] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  544.653903][   T29] usb 1-1: USB disconnect, device number 124
[  544.788955][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  544.964360][T15074] loop1: detected capacity change from 0 to 32768
[  545.009531][T15074] o2cb: This node has not been configured.
[  545.021539][T15074] o2cb: Cluster check failed. Fix errors before retrying.
[  545.036812][T15074] (syz.1.3892,15074,0):ocfs2_dlm_init:3354 ERROR: status = -22
[  545.049591][T15090] loop4: detected capacity change from 0 to 1764
[  545.049776][T15074] (syz.1.3892,15074,0):ocfs2_mount_volume:1735 ERROR: status = -22
[  545.080468][T15090] ISOFS: Bad logical zone size 1280
[  545.111219][T15074] (syz.1.3892,15074,1):ocfs2_fill_super:1177 ERROR: status = -22
[  545.971544][ T6010] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  546.167850][ T6010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  546.200126][ T6010] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  546.235332][ T6010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  546.278201][ T6010] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  546.300268][ T6010] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  546.321411][ T6010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.352906][ T6010] usb 2-1: config 0 descriptor??
[  546.409858][T15099] loop2: detected capacity change from 0 to 32768
[  546.421227][T15099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3903 (15099)
[  546.466505][T15099] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  546.482952][T15087] loop3: detected capacity change from 0 to 32768
[  546.504647][T15123] loop4: detected capacity change from 0 to 128
[  546.514331][T15099] BTRFS info (device loop2): using crc32c checksum algorithm
[  546.600201][ T6010] hdpvr 2-1:0.0: unexpected answer of status request, len -71
[  546.618274][T15087] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  546.636328][ T6010] hdpvr 2-1:0.0: device init failed
[  546.643121][T15123] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  546.654616][ T6010] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  546.678878][T15087] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  546.692471][ T6010] usb 2-1: USB disconnect, device number 123
[  546.703066][  T201] BTRFS warning (device loop2 state E): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0
[  546.721985][T15123] hpfs: filesystem error: improperly stopped
[  546.750268][T15123] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  546.764954][T15087] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms
[  546.780856][T15123] hpfs: You really don't want any checks? You are crazy...
[  546.781310][T15099] BTRFS error (device loop2 state E): failed to read chunk root
[  546.790089][T15123] hpfs: hpfs_map_sector(): read error
[  546.803003][T15123] hpfs: code page support is disabled
[  546.809887][T15123] hpfs: hpfs_map_sector(): read error
[  546.815519][T15123] hpfs: hpfs_map_sector(): read error
[  546.823681][T15123] hpfs: filesystem error: unable to find root dir
[  546.842160][T15087] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 6 2078, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 449
[  546.865349][T15087] gfs2: fsid=syz:syz.0: G:  s:EX n:2/81e f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  546.886279][T15087] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:0 [(none)] init_inodes+0xdb/0x320
[  546.912981][T15087] gfs2: fsid=syz:syz.0:  I: n:6/2078 t:8 f:0x00 d:0x00000201 s:24 p:0
[  546.938310][T15087] CPU: 1 UID: 0 PID: 15087 Comm: syz.3.3897 Not tainted syzkaller #0 PREEMPT(full) 
[  546.938342][T15087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  546.938356][T15087] Call Trace:
[  546.938366][T15087]  <TASK>
[  546.938375][T15087]  dump_stack_lvl+0xe8/0x150
[  546.938417][T15087]  gfs2_withdraw+0xc3/0x1b0
[  546.938448][T15087]  inode_go_instantiate+0xab4/0x1220
[  546.938473][T15087]  ? __pfx_bit_wait+0x10/0x10
[  546.938508][T15087]  ? __pfx_bit_wait+0x10/0x10
[  546.938536][T15087]  ? __pfx_inode_go_instantiate+0x10/0x10
[  546.938565][T15087]  ? __pfx_wake_bit_function+0x10/0x10
[  546.938600][T15087]  gfs2_instantiate+0x168/0x220
[  546.938629][T15087]  gfs2_glock_wait+0x1d4/0x2a0
[  546.938660][T15087]  init_journal+0x1585/0x2280
[  546.938699][T15087]  ? init_inodes+0xdb/0x320
[  546.938728][T15087]  ? __pfx_init_journal+0x10/0x10
[  546.938771][T15087]  ? snprintf+0xe8/0x140
[  546.938795][T15087]  ? init_inodes+0xdb/0x320
[  546.938822][T15087]  ? __pfx_snprintf+0x10/0x10
[  546.938845][T15087]  ? gfs2_glock_nq_num+0x13d/0x170
[  546.938879][T15087]  init_inodes+0xdb/0x320
[  546.938905][T15087]  gfs2_fill_super+0x1a38/0x21d0
[  546.938949][T15087]  ? __pfx_gfs2_fill_super+0x10/0x10
[  546.938981][T15087]  ? init_locking+0xb8/0x210
[  546.939006][T15087]  ? sb_set_blocksize+0x155/0x240
[  546.939034][T15087]  ? setup_bdev_super+0x4c1/0x5b0
[  546.939071][T15087]  get_tree_bdev_flags+0x431/0x4f0
[  546.939096][T15087]  ? __pfx_gfs2_fill_super+0x10/0x10
[  546.939123][T15087]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  546.939142][T15087]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  546.939175][T15087]  gfs2_get_tree+0x51/0x1e0
[  546.939206][T15087]  vfs_get_tree+0x92/0x2a0
[  546.939232][T15087]  do_new_mount+0x341/0xd30
[  546.939259][T15087]  ? apparmor_capable+0x126/0x170
[  546.939291][T15087]  ? __pfx_do_new_mount+0x10/0x10
[  546.939317][T15087]  ? ns_capable+0x89/0xe0
[  546.939360][T15087]  ? user_path_at+0xd4/0x160
[  546.939394][T15087]  __se_sys_mount+0x31d/0x420
[  546.939429][T15087]  ? __pfx___se_sys_mount+0x10/0x10
[  546.939466][T15087]  ? __x64_sys_mount+0x20/0xc0
[  546.939494][T15087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.939518][T15087]  do_syscall_64+0x15f/0xf80
[  546.939545][T15087]  ? trace_irq_disable+0x3b/0x140
[  546.939572][T15087]  ? clear_bhb_loop+0x40/0x90
[  546.939599][T15087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.939619][T15087] RIP: 0033:0x7f05b679da8a
[  546.939641][T15087] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.939665][T15087] RSP: 002b:00007f05b75a0e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  546.939690][T15087] RAX: ffffffffffffffda RBX: 00007f05b75a0ee0 RCX: 00007f05b679da8a
[  546.939707][T15087] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f05b75a0ea0
[  546.939722][T15087] RBP: 00002000000124c0 R08: 00007f05b75a0ee0 R09: 0000000000000000
[  546.939736][T15087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500
[  546.939750][T15087] R13: 00007f05b75a0ea0 R14: 0000000000012649 R15: 0000200000000180
[  546.939784][T15087]  </TASK>
[  546.939812][T15087] gfs2: fsid=syz:syz.0: can't lock local "sc" file: -5
[  547.137823][T15099] BTRFS error (device loop2 state E): open_ctree failed: -5
[  547.234474][T15119] loop0: detected capacity change from 0 to 32768
[  547.338568][T15119] (syz.0.3913,15119,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=11, slot=0
[  547.419719][T15119] (syz.0.3913,15119,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  547.474507][T15119] (syz.0.3913,15119,0):ocfs2_mount_volume:1758 ERROR: status = -22
[  547.510549][T15119] (syz.0.3913,15119,0):ocfs2_fill_super:1177 ERROR: status = -22
[  547.723474][ T6010] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  547.951206][ T6010] usb 2-1: too many configurations: 65, using maximum allowed: 8
[  547.980978][ T6010] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  548.048014][ T6010] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  548.117685][ T6010] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  548.164688][ T6010] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  548.202665][ T6010] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  548.253712][ T6010] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  548.316227][ T6010] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  548.350995][ T6010] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  548.404216][ T6010] usb 2-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d
[  548.439577][ T6010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.512321][ T6010] pwc: Logitech QuickCam detected (reserved ID).
[  548.534854][ T6010] pwc: Warning: more than 1 configuration available.
[  548.705276][ T6010] pwc: Failed to set LED on/off time (-71)
[  548.721147][ T6010] pwc: send_video_command error -71
[  548.737593][ T6010] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  548.759723][ T6010] Philips webcam 2-1:250.0: probe with driver Philips webcam failed with error -71
[  548.793655][ T6010] usb 2-1: USB disconnect, device number 124
[  548.953558][T15149] set_capacity_and_notify: 1 callbacks suppressed
[  548.953579][T15149] loop0: detected capacity change from 0 to 32768
[  548.979929][T15149] BTRFS error: failed to parse compression option 'zlib:nobarrier'
[  549.096193][ T6105] udevd[6105]: incorrect btrfs checksum on /dev/loop0
[  549.172252][T15155] loop2: detected capacity change from 0 to 32768
[  549.179209][ T3111] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  549.200305][T15155] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3923 (15155)
[  549.300140][T15155] BTRFS info (device loop2): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1
[  549.328897][T15155] BTRFS info (device loop2): using crc32c checksum algorithm
[  549.363491][ T3111] usb 5-1: Using ep0 maxpacket: 32
[  549.393713][ T3111] usb 5-1: unable to get BOS descriptor or descriptor too short
[  549.404348][ T3111] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  549.414863][ T3111] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  549.431689][ T3111] usb 5-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40
[  549.443053][ T3111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.456512][ T3111] usb 5-1: Product: syz
[  549.473677][ T3111] usb 5-1: Manufacturer: syz
[  549.484891][T15155] BTRFS info (device loop2): enabling ssd optimizations
[  549.493291][ T3111] usb 5-1: SerialNumber: syz
[  549.498558][T15155] BTRFS info (device loop2): turning on async discard
[  549.507778][T15155] BTRFS info (device loop2): enabling free space tree
[  549.663191][ T5935] BTRFS info (device loop2): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1
[  549.745444][ T6010] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  549.767169][ T3111] usb 5-1: unable to issue vendor read request (ret = -71)
[  549.804606][ T3111] usb 5-1: unable to issue vendor read request (ret = -71)
[  549.834724][ T3111] usb 5-1: unable to issue vendor read request (ret = -71)
[  549.861830][ T3111] usb 5-1: unable to issue vendor read request (ret = -71)
[  549.875878][T15163] loop3: detected capacity change from 0 to 32768
[  549.889795][ T3111] usb 5-1: unable to issue vendor read request (ret = -71)
[  549.918882][ T3111] usb 5-1: unable to issue vendor read request (ret = -71)
[  549.943622][T15163] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum"
[  549.950047][ T6010] usb 2-1: Using ep0 maxpacket: 8
[  549.957589][ T3111] usb 5-1: unable to issue vendor read request (ret = -71)
[  549.977202][ T6010] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  549.985331][T15163] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)...
[  550.001231][ T3111] usb 5-1: unable to issue vendor read request (ret = -71)
[  550.036146][ T6010] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  550.074260][T15163] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms
[  550.083791][ T6010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.147100][ T6010] usb 2-1: config 0 descriptor??
[  550.164841][ T3111] usb 5-1: USB disconnect, device number 120
[  550.166616][ T6010] iowarrior 2-1:0.0: no interrupt-in endpoint found
[  550.300978][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  550.491497][ T6010] usb 2-1: USB disconnect, device number 125
[  550.535386][T15194] loop2: detected capacity change from 0 to 4096
[  550.563519][T15163] gfs2: fsid=statfs_quantum.s: first mount done, others may mount
[  550.581032][T15194] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  550.645742][T15194] ntfs3(loop2): ino=3, mi_enum_attr
[  550.734366][T15194] ntfs3(loop2): MFT: r=b, expect seq=b instead of 0!
[  550.759841][T15171] loop0: detected capacity change from 0 to 32768
[  550.767014][T15194] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  550.767068][T15194] ntfs3(loop2): Failed to load $Extend (-22).
[  550.767090][T15194] ntfs3(loop2): Failed to initialize $Extend.
[  550.835658][T15171] XFS (loop0): invalid log iosize: 2 [not 12-30]
[  551.258324][T15209] cgroup: Bad value for 'name'
[  552.084232][T15226] loop1: detected capacity change from 0 to 4096
[  552.118573][T15226] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  552.161131][T15228] loop3: detected capacity change from 0 to 4096
[  552.168057][T15226] ntfs3(loop1): $Volume is corrupted.
[  552.189724][T15228] EXT4-fs (loop3): Test dummy encryption mode enabled
[  552.243764][T15228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  552.262410][T15204] loop0: detected capacity change from 0 to 32768
[  552.339363][T15204] JBD2: Ignoring recovery information on journal
[  552.368868][T15228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  552.450660][  T995] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  552.475426][T15204] (syz.0.3940,15204,0):ocfs2_clear_journal_error:1137 ERROR: File system error 33023 recorded in journal 0.
[  552.523677][T15204] (syz.0.3940,15204,0):ocfs2_clear_journal_error:1139 ERROR: File system on device loop0 needs checking.
[  552.565777][T15204] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  552.630522][  T995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 4
[  552.683533][   T49] (kworker/u8:3,49,0):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #4104: rec_len is smaller than minimal - offset=0, inode=4104, rec_len=8, name_len=0
[  552.706785][  T995] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  552.730926][  T995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.761449][  T995] usb 3-1: Product: syz
[  552.781292][  T995] usb 3-1: Manufacturer: syz
[  552.826508][  T995] usb 3-1: SerialNumber: syz
[  552.851725][  T995] usb 3-1: config 0 descriptor??
[  552.862937][  T995] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0295
[  552.928932][ T5934] ocfs2: Unmounting device (7,0) on (node local)
[  552.968092][T15242] loop3: detected capacity change from 0 to 2048
[  553.020312][T15242]  loop3: p2 < > p3 < p5 > p4
[  553.037531][T15242] loop3: partition table partially beyond EOD, truncated
[  553.057681][T15242] loop3: p2 start 4278190080 is beyond EOD, truncated
[  553.069432][T15242] loop3: p4 size 8192 extends beyond EOD, truncated
[  553.095992][T15242] loop3: p5 size 8192 extends beyond EOD, truncated
[  553.096296][  T808] usb 3-1: USB disconnect, device number 3
[  553.108814][ T5936] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  553.139983][ T5211]  loop3: p2 < > p3 < p5 > p4
[  553.150495][ T5211] loop3: partition table partially beyond EOD, truncated
[  553.174025][ T5211] loop3: p2 start 4278190080 is beyond EOD, truncated
[  553.195271][ T5211] loop3: p4 size 8192 extends beyond EOD, truncated
[  553.208021][ T5211] loop3: p5 size 8192 extends beyond EOD, truncated
[  553.294353][ T5936] usb 2-1: config 1 interface 0 has no altsetting 0
[  553.301492][ T6119] udevd[6119]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  553.312450][ T6105] udevd[6105]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  553.322886][ T5938] udevd[5938]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  553.332013][ T5936] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40
[  553.334949][T15244] loop3: detected capacity change from 0 to 16
[  553.359838][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.368064][T15244] erofs (device loop3): unidentified incompatible feature 100000, please upgrade kernel
[  553.388369][ T5936] usb 2-1: Product: syz
[  553.423470][ T5936] usb 2-1: Manufacturer: syz
[  553.434260][ T5936] usb 2-1: SerialNumber: syz
[  553.451564][ T6119] udevd[6119]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  553.463596][ T5938] udevd[5938]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  553.476355][ T6105] udevd[6105]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  553.729156][ T5936] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input47
[  553.743638][T15250] FAT-fs (loop3): bogus sectors per cluster 248
[  553.759233][T15250] FAT-fs (loop3): Can't find a valid FAT filesystem
[  553.770473][ T5196] bcm5974 2-1:1.0: could not read from device
[  553.819384][ T5936] usb 2-1: USB disconnect, device number 126
[  553.831930][ T5196] bcm5974 2-1:1.0: could not read from device
[  554.007892][T15254] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  554.054363][T15254] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[  554.109155][T15254] EXT4-fs (loop2): journal inode is deleted
[  554.222637][T15260] hfsplus: invalid length 32517 has been corrected to 255
[  554.850574][   T29] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  554.897509][T15280] set_capacity_and_notify: 3 callbacks suppressed
[  554.897529][T15280] loop0: detected capacity change from 0 to 8
[  554.956031][T15280] SQUASHFS error: xz decompression failed, data probably corrupt
[  554.967137][T15280] SQUASHFS error: Failed to read block 0x108: -5
[  554.973555][T15280] SQUASHFS error: Unable to read metadata cache entry [106]
[  554.979146][T15278] loop3: detected capacity change from 0 to 2048
[  554.981370][T15280] SQUASHFS error: Unable to read inode 0x11f
[  555.041641][ T5938]  loop3: p1 < > p4 < >
[  555.050356][   T29] usb 2-1: unable to get BOS descriptor or descriptor too short
[  555.064468][ T5938] loop3: partition table partially beyond EOD, truncated
[  555.084963][   T29] usb 2-1: config 13 has an invalid interface number: 50 but max is 3
[  555.096136][ T5938] loop3: p1 start 262144 is beyond EOD, truncated
[  555.119406][   T29] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  555.150958][   T29] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4
[  555.157060][T15278]  loop3: p1 < > p4 < >
[  555.169072][   T29] usb 2-1: config 13 has no interface number 0
[  555.183906][T15278] loop3: partition table partially beyond EOD, truncated
[  555.193469][   T29] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  555.208099][T15278] loop3: p1 start 262144 is beyond EOD, truncated
[  555.216870][T15266] loop2: detected capacity change from 0 to 32768
[  555.233221][   T29] usb 2-1: config 13 interface 50 has no altsetting 0
[  555.268722][   T29] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8
[  555.272836][T15266] JBD2: Ignoring recovery information on journal
[  555.296224][T15282] loop0: detected capacity change from 0 to 512
[  555.304324][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.312649][   T29] usb 2-1: Product: syz
[  555.318864][   T29] usb 2-1: Manufacturer: syz
[  555.323928][   T29] usb 2-1: SerialNumber: syz
[  555.325978][T15282] EXT4-fs: Ignoring removed orlov option
[  555.372325][T15266] (syz.2.3967,15266,1):ocfs2_clear_journal_error:1137 ERROR: File system error 33023 recorded in journal 0.
[  555.396645][T15266] (syz.2.3967,15266,1):ocfs2_clear_journal_error:1139 ERROR: File system on device loop2 needs checking.
[  555.419935][T15266] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  555.454482][T15282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  555.528237][T15282] EXT4-fs (loop0): orphan cleanup on readonly fs
[  555.588996][T15282] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3976: bg 0: block 248: padding at end of block bitmap is not set
[  555.598741][ T3551] (kworker/u8:8,3551,0):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #4104: rec_len is smaller than minimal - offset=0, inode=4104, rec_len=8, name_len=0
[  555.637876][T15282] loop0: lost filesystem error report for type 5 error -117
[  555.647353][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  555.661246][    C0] EXT4-fs (loop0): last error at time 1791664317: ext4_validate_block_bitmap:441
[  555.701256][T15282] Quota error (device loop0): write_blk: dquota write failed
[  555.732633][   T29] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  555.742563][T15282] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  555.750732][   T29] usb 2-1: USB disconnect, device number 127
[  555.767720][T15282] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.3976: Failed to acquire dquot type 1
[  555.772894][   T12] usb 2-1: Failed to submit usb control message: -71
[  555.781124][T15282] loop0: lost filesystem error report for type 5 error -117
[  555.788952][T15282] EXT4-fs (loop0): 1 truncate cleaned up
[  555.811949][   T12] usb 2-1: unable to send the bmi data to the device: -71
[  555.835874][ T5935] ocfs2: Unmounting device (7,2) on (node local)
[  555.840684][ T5938] udevd[5938]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  555.868997][   T12] usb 2-1: unable to get target info from device
[  555.870071][T15282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  555.879806][   T12] usb 2-1: could not get target info (-71)
[  555.903120][   T12] usb 2-1: could not probe fw (-71)
[  556.022015][ T6003] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  556.134123][ T5934] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.192740][ T6003] usb 4-1: Using ep0 maxpacket: 32
[  556.206614][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  556.253852][ T6003] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  556.287691][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  556.312156][T15294] loop0: detected capacity change from 0 to 128
[  556.324926][ T6003] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  556.342745][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.363382][ T6003] usb 4-1: Product: syz
[  556.371143][ T6003] usb 4-1: Manufacturer: syz
[  556.379766][ T6003] usb 4-1: SerialNumber: syz
[  556.388977][ T6003] usb 4-1: config 0 descriptor??
[  556.503610][   T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  556.525468][T15298] loop0: detected capacity change from 0 to 128
[  556.647950][ T6003] usb 4-1: USB disconnect, device number 4
[  556.688262][   T29] usb 3-1: unable to get BOS descriptor or descriptor too short
[  556.718959][   T29] usb 3-1: config 119 has an invalid interface number: 120 but max is 0
[  556.746133][   T29] usb 3-1: config 119 has no interface number 0
[  556.763752][   T29] usb 3-1: config 119 interface 120 has no altsetting 0
[  556.802826][   T29] usb 3-1: New USB device found, idVendor=0408, idProduct=4035, bcdDevice=65.3b
[  556.824730][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.849677][   T29] usb 3-1: Product: syz
[  556.864064][   T29] usb 3-1: Manufacturer: syz
[  556.872776][   T29] usb 3-1: SerialNumber: syz
[  556.880561][T15302] loop0: detected capacity change from 0 to 16
[  556.913486][T15302] erofs (device loop0): mounted with root inode @ nid 36.
[  557.128292][   T29] uvcvideo 3-1:119.120: Found UVC 0.00 device syz (0408:4035)
[  557.151500][   T29] uvcvideo 3-1:119.120: Forcing UVC version to 1.0a
[  557.174423][   T29] uvcvideo 3-1:119.120: No valid video chain found.
[  557.192837][   T29] usb 3-1: USB disconnect, device number 4
[  557.367158][T15306] loop3: detected capacity change from 0 to 256
[  557.382208][T15296] loop1: detected capacity change from 0 to 40427
[  557.389936][T15306] exfat: Deprecated parameter 'namecase'
[  557.397442][T15296] F2FS-fs: quotafile must be on filesystem root
[  557.410193][T15306] exfat: Bad value for 'gid'
[  557.411620][ T3111] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  557.437692][T15306] exfat: Bad value for 'gid'
[  557.626976][ T3111] usb 1-1: Using ep0 maxpacket: 16
[  557.641882][ T3111] usb 1-1: config 251 has an invalid interface number: 202 but max is 0
[  557.669966][ T3111] usb 1-1: config 251 has no interface number 0
[  557.696337][ T3111] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  557.737664][ T3111] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  557.765388][ T3111] usb 1-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  557.812490][ T3111] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  557.851551][ T3111] usb 1-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  557.884589][ T3111] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 56
[  557.914435][ T3111] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  557.950614][T15314] loop2: detected capacity change from 0 to 2048
[  557.958641][ T3111] usb 1-1: config 251 interface 202 has no altsetting 0
[  557.984138][ T3111] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  558.012381][T15314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  558.018542][ T3111] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  558.033196][ T3111] usb 1-1: Product: syz
[  558.037606][ T3111] usb 1-1: SerialNumber: syz
[  558.044249][T15314] ext4 filesystem being mounted at /776/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  558.058312][T15304] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  558.259571][ T5935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.358378][ T3111] cxacru 1-1:251.202: submit of write urb for cm 0x90 failed (-90)
[  558.392106][ T3111] cxacru 1-1:251.202: usbatm_usb_probe: invalid endpoint 02!
[  558.424071][ T3111] cxacru 1-1:251.202: probe with driver cxacru failed with error -22
[  558.480551][ T3111] usb 1-1: USB disconnect, device number 125
[  558.551657][T15310] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3987 (15310)
[  558.581688][T15310] BTRFS info (device loop3): first mount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8
[  558.597593][T15310] BTRFS info (device loop3): using xxhash64 checksum algorithm
[  558.705730][T15310] BTRFS info (device loop3): enabling ssd optimizations
[  558.716918][   T29] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  558.737682][T15310] BTRFS info (device loop3): turning on async discard
[  558.766275][T15310] BTRFS info (device loop3): enabling free space tree
[  558.889482][   T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  558.901317][ T5945] BTRFS info (device loop3): last unmount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8
[  558.931159][   T29] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  558.971658][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.011163][   T29] usb 3-1: Product: syz
[  559.013084][T15312] (syz.1.3988,15312,0):ocfs2_read_blocks:239 ERROR: status = -12
[  559.060401][   T29] usb 3-1: Manufacturer: syz
[  559.065310][T15312] (syz.1.3988,15312,0):ocfs2_read_virt_blocks:1037 ERROR: status = -12
[  559.081133][   T29] usb 3-1: SerialNumber: syz
[  559.107034][T15312] (syz.1.3988,15312,0):ocfs2_read_dir_block:524 ERROR: status = -12
[  559.142095][   T29] usb 3-1: config 0 descriptor??
[  559.157288][T15312] (syz.1.3988,15312,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  559.169969][   T29] usb 3-1: No union descriptors
[  559.206074][T15312] (syz.1.3988,15312,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  559.206120][T15312] (syz.1.3988,15312,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  559.240739][   T29] usb 3-1: unsupported MDLM descriptors
[  559.281041][T15312] (syz.1.3988,15312,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  559.313547][T15312] (syz.1.3988,15312,0):ocfs2_fill_super:1177 ERROR: status = -22
[  559.481226][ T6138] usb 3-1: USB disconnect, device number 5
[  559.834493][T15338] affs: No valid root block on device loop0
[  559.913597][   T29] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  560.120995][   T29] usb 2-1: Using ep0 maxpacket: 32
[  560.151858][   T29] usb 2-1: config 3 has an invalid interface number: 166 but max is 0
[  560.185613][   T29] usb 2-1: config 3 has no interface number 0
[  560.212111][   T29] usb 2-1: config 3 interface 166 has no altsetting 0
[  560.242467][   T29] usb 2-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04
[  560.274345][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.290372][T15345] set_capacity_and_notify: 3 callbacks suppressed
[  560.290395][T15345] loop2: detected capacity change from 0 to 512
[  560.297357][   T29] usb 2-1: Product: syz
[  560.329732][   T29] usb 2-1: Manufacturer: syz
[  560.342592][   T29] usb 2-1: SerialNumber: syz
[  560.407679][T15345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  560.421370][T15336] loop3: detected capacity change from 0 to 32768
[  560.482005][ T5935] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  560.484465][T15336] JBD2: Ignoring recovery information on journal
[  560.660419][   T29] go7007 2-1:3.166: probe with driver go7007 failed with error -12
[  560.689306][T15336] (syz.3.3991,15336,1):ocfs2_read_journal_inode:1649 ERROR: status = -13
[  560.709515][T15336] (syz.3.3991,15336,1):ocfs2_mark_dead_nodes:1932 ERROR: status = -13
[  560.723283][   T29] usb 2-1: USB disconnect, device number 2
[  560.748764][T15336] (syz.3.3991,15336,1):ocfs2_check_volume:2420 ERROR: status = -13
[  560.770675][T15336] (syz.3.3991,15336,1):ocfs2_check_volume:2432 ERROR: status = -13
[  560.794050][T15336] (syz.3.3991,15336,1):ocfs2_mount_volume:1764 ERROR: status = -13
[  560.901686][T15336] (syz.3.3991,15336,0):ocfs2_fill_super:1177 ERROR: status = -13
[  561.215496][T15348] loop0: detected capacity change from 0 to 32768
[  561.239574][T15348] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3996 (15348)
[  561.315131][T15348] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  561.363467][T15348] BTRFS info (device loop0 state S): using crc32c checksum algorithm
[  561.445709][T15359] loop1: detected capacity change from 0 to 512
[  561.507943][   T12] BTRFS warning (device loop0 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  561.537582][T15359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  561.617021][T15359] ext4 filesystem being mounted at /773/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  561.652762][  T201] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  561.719807][  T201] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  561.721375][T15370] loop3: detected capacity change from 0 to 512
[  561.772638][T15348] BTRFS error (device loop0 state ECS): logical 6881280 len 1638400 found bg but no related chunk
[  561.824611][T15348] BTRFS info (device loop0 state ECS): enabling ssd optimizations
[  561.826142][ T5942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.859105][T15348] BTRFS info (device loop0 state ECS): disabling log replay at mount time
[  561.870531][T15352] loop2: detected capacity change from 0 to 32768
[  561.878828][T15348] BTRFS info (device loop0 state ECS): enabling free space tree
[  561.891911][T15370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  561.951552][T15348] BTRFS info (device loop0 state ECS): ignoring bad roots
[  561.962839][T15352] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3997 (15352)
[  561.977881][T15348] BTRFS info (device loop0 state ECS): ignoring data csums
[  561.979448][T15376] loop1: detected capacity change from 0 to 2048
[  561.985193][T15348] BTRFS info (device loop0 state ECS): ignoring meta csums
[  561.999302][T15348] BTRFS info (device loop0 state ECS): ignoring unknown super block flags
[  562.008958][  T201] BTRFS warning (device loop0 state ECS): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x0e76b713 level 0, ignored
[  562.028242][T15352] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  562.052160][T15352] BTRFS info (device loop2): using crc32c checksum algorithm
[  562.100505][ T5945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.122032][ T5211]  loop1: p4 < >
[  562.184399][ T5211]  loop1: p4 < >
[  562.235239][T15352] BTRFS info (device loop2): enabling ssd optimizations
[  562.248487][T15376]  loop1: p4 < >
[  562.291013][T15352] BTRFS info (device loop2): turning on async discard
[  562.343653][ T5934] BTRFS info (device loop0 state ECS): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  562.355201][T15352] BTRFS info (device loop2): enabling free space tree
[  562.678064][ T5935] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  562.704247][ T6138] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  562.773009][ T6119] udevd[6119]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  562.886747][ T6138] usb 4-1: Using ep0 maxpacket: 16
[  562.901524][ T6119] udevd[6119]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  562.925601][ T6138] usb 4-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  562.996236][ T6138] usb 4-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=97.93
[  563.058670][ T6138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.060229][ T6119] udevd[6119]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  563.101734][ T6138] usb 4-1: Product: syz
[  563.127050][ T6138] usb 4-1: Manufacturer: syz
[  563.154361][ T6138] usb 4-1: SerialNumber: syz
[  563.456749][ T6138] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[  563.513584][ T2364] pvrusb2: Invalid write control endpoint
[  563.527207][ T6138] usb 4-1: USB disconnect, device number 5
[  564.200604][ T2364] pvrusb2: Invalid write control endpoint
[  564.254535][ T2364] pvrusb2: Invalid write control endpoint
[  564.275507][ T2364] pvrusb2: Invalid write control endpoint
[  564.297120][ T2364] pvrusb2: Invalid write control endpoint
[  564.324610][ T2364] pvrusb2: Invalid write control endpoint
[  564.352414][ T2364] pvrusb2: Invalid write control endpoint
[  564.375129][ T2364] pvrusb2: Invalid write control endpoint
[  564.391800][ T2364] pvrusb2: Invalid write control endpoint
[  564.412595][ T2364] pvrusb2: Invalid write control endpoint
[  564.432617][ T2364] pvrusb2: Invalid write control endpoint
[  564.452692][ T2364] pvrusb2: Invalid write control endpoint
[  564.473851][ T2364] pvrusb2: Invalid write control endpoint
[  564.496435][ T2364] pvrusb2: Invalid write control endpoint
[  564.516020][ T2364] pvrusb2: Invalid write control endpoint
[  564.533468][ T2364] pvrusb2: Invalid write control endpoint
[  564.551822][ T2364] pvrusb2: Invalid write control endpoint
[  564.576886][ T2364] pvrusb2: Invalid write control endpoint
[  564.595513][ T2364] pvrusb2: Invalid write control endpoint
[  564.613899][ T2364] pvrusb2: Invalid write control endpoint
[  564.632327][ T2364] pvrusb2: Invalid write control endpoint
[  564.650116][ T2364] pvrusb2: Invalid write control endpoint
[  564.673748][ T2364] pvrusb2: Invalid write control endpoint
[  564.691894][ T2364] pvrusb2: Invalid write control endpoint
[  564.712117][ T2364] pvrusb2: Invalid write control endpoint
[  564.736147][ T2364] pvrusb2: Invalid write control endpoint
[  564.742275][T15402] loop0: detected capacity change from 0 to 40427
[  564.757035][ T2364] pvrusb2: Invalid write control endpoint
[  564.768804][T15402] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  564.784637][ T2364] pvrusb2: Invalid write control endpoint
[  564.796986][ T2364] pvrusb2: Invalid write control endpoint
[  564.803151][T15402] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  564.826190][ T2364] pvrusb2: Invalid write control endpoint
[  564.839809][T15402] F2FS-fs (loop0): invalid crc value
[  564.847654][ T2364] pvrusb2: Invalid write control endpoint
[  564.856727][T15402] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root and reserve_node
[  564.874566][ T2364] pvrusb2: Invalid write control endpoint
[  564.893508][ T2364] pvrusb2: Invalid write control endpoint
[  564.971950][ T2364] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  565.204455][T15402] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  565.237193][ T2364] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  565.257988][T15402] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[  565.273528][ T2364] pvrusb2: Invalid write control endpoint
[  565.283340][T15402] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  565.294714][ T2364] pvrusb2: Invalid write control endpoint
[  565.313983][ T2364] pvrusb2: Invalid write control endpoint
[  565.335220][ T2364] pvrusb2: Invalid write control endpoint
[  565.354018][ T2364] pvrusb2: Invalid write control endpoint
[  565.373406][T15404] loop2: detected capacity change from 0 to 32768
[  565.381934][ T2364] pvrusb2: Invalid write control endpoint
[  565.405850][T15404] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[  565.407581][ T2364] pvrusb2: Invalid write control endpoint
[  565.420529][ T2364] pvrusb2: Invalid write control endpoint
[  565.426520][ T2364] pvrusb2: Invalid write control endpoint
[  565.434015][ T2364] pvrusb2: Invalid write control endpoint
[  565.439976][ T2364] pvrusb2: Invalid write control endpoint
[  565.448762][T15404] dlm: no local IP address has been set
[  565.456072][ T2364] pvrusb2: Invalid write control endpoint
[  565.466734][T15404] dlm: cannot start dlm midcomms -107
[  565.472240][ T2364] pvrusb2: Invalid write control endpoint
[  565.478281][T15404] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[  565.485432][ T2364] pvrusb2: Invalid write control endpoint
[  565.496850][ T2364] pvrusb2: Invalid write control endpoint
[  565.526545][ T2364] pvrusb2: Invalid write control endpoint
[  565.545233][ T2364] pvrusb2: Invalid write control endpoint
[  565.558952][ T2364] pvrusb2: Invalid write control endpoint
[  565.589303][ T2364] pvrusb2: Invalid write control endpoint
[  565.601025][ T2364] pvrusb2: Invalid write control endpoint
[  565.620933][ T2364] pvrusb2: Invalid write control endpoint
[  565.690362][ T2364] pvrusb2: Attached sub-driver cs53l32a
[  565.882417][ T2364] pvrusb2: Invalid write control endpoint
[  565.918139][ T2364] pvrusb2: Invalid write control endpoint
[  565.954611][ T2364] pvrusb2: Invalid write control endpoint
[  565.977416][ T2364] pvrusb2: Invalid write control endpoint
[  566.002863][ T2364] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  566.072567][ T2364] pvrusb2: Device being rendered inoperable
[  566.101030][ T2364] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  566.159504][ T2364] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  566.370817][T15419] loop4: detected capacity change from 0 to 132
[  566.781492][T15423] loop0: detected capacity change from 0 to 512
[  566.879756][T15423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  566.931851][ T6138] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  567.079271][ T5934] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.168028][ T6138] usb 4-1: unable to get BOS descriptor or descriptor too short
[  567.198732][ T6138] usb 4-1: not running at top speed; connect to a high speed hub
[  567.236765][ T6138] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  567.272946][T15415] loop2: detected capacity change from 0 to 32768
[  567.289347][ T6138] usb 4-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  567.298030][T15428] loop0: detected capacity change from 0 to 1024
[  567.319828][T15415] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4010 (15415)
[  567.345205][ T6138] usb 4-1: config 1 interface 0 has no altsetting 0
[  567.361914][ T6138] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  567.397254][ T6138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.397550][T15415] BTRFS info (device loop2): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7
[  567.435966][ T6138] usb 4-1: Product: syz
[  567.456864][ T6138] usb 4-1: Manufacturer: syz
[  567.474287][T15415] BTRFS info (device loop2): using sha256 checksum algorithm
[  567.482876][ T6138] usb 4-1: SerialNumber: syz
[  567.649248][ T6138] usb 4-1: can't set config #1, error -71
[  567.759210][ T6138] usb 4-1: USB disconnect, device number 6
[  567.789207][T15415] BTRFS info (device loop2): enabling ssd optimizations
[  567.870270][T15415] BTRFS info (device loop2): turning on async discard
[  567.890019][T15415] BTRFS info (device loop2): enabling free space tree
[  568.135197][T15421] loop4: detected capacity change from 0 to 32768
[  568.172808][T15421] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4013 (15421)
[  568.194676][ T5935] BTRFS info (device loop2): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7
[  568.230770][T15421] BTRFS info (device loop4): first mount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc
[  568.313976][T15421] BTRFS info (device loop4): using sha256 checksum algorithm
[  568.628642][T15421] BTRFS info (device loop4): enabling ssd optimizations
[  568.661955][T15421] BTRFS info (device loop4): turning on async discard
[  568.690784][T15421] BTRFS info (device loop4): enabling free space tree
[  568.926645][ T5953] BTRFS info (device loop4): last unmount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc
[  569.101953][ T5936] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  569.305888][ T5936] usb 3-1: Using ep0 maxpacket: 16
[  569.317474][T15446] loop3: detected capacity change from 0 to 32768
[  569.329272][ T5936] usb 3-1: unable to get BOS descriptor or descriptor too short
[  569.347765][T15446] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4016 (15446)
[  569.360615][ T5936] usb 3-1: config 1 has an invalid interface number: 18 but max is 2
[  569.360646][ T5936] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  569.360667][ T5936] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[  569.360689][ T5936] usb 3-1: config 1 has no interface number 3
[  569.360763][ T5936] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 147, using maximum allowed: 30
[  569.483331][T15446] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  569.520262][T15446] BTRFS info (device loop3): using sha256 checksum algorithm
[  569.557380][ T5936] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 147
[  569.575952][T15470] loop4: detected capacity change from 0 to 128
[  569.601485][ T5936] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7
[  569.625419][ T5936] usb 3-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  569.655040][ T5936] usb 3-1: config 1 interface 2 has no altsetting 0
[  569.664675][ T5936] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  569.674042][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.691206][ T5936] usb 3-1: Product: syz
[  569.700844][ T5936] usb 3-1: Manufacturer: syz
[  569.733342][ T5936] usb 3-1: SerialNumber: syz
[  569.786957][T15446] BTRFS info (device loop3): enabling ssd optimizations
[  569.810198][T15446] BTRFS info (device loop3): turning on async discard
[  569.848901][T15446] BTRFS info (device loop3): enabling free space tree
[  570.026753][ T5936] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  570.096363][ T5936] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  570.130290][ T5945] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  570.160995][ T5936] usb 3-1: selecting invalid altsetting 0
[  570.378566][ T5936] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  570.421833][ T5936] snd-usb-audio 3-1:1.18: probe with driver snd-usb-audio failed with error -22
[  570.483090][ T5936] usb 3-1: USB disconnect, device number 6
[  571.457505][T15487] loop4: detected capacity change from 0 to 32768
[  571.496416][T15487] BTRFS: device fsid e5ec6bdf-b4e4-4163-9622-8db3a33753bd devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4021 (15487)
[  571.552952][T15497] loop0: detected capacity change from 0 to 512
[  571.597604][T15487] BTRFS info (device loop4): first mount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd
[  571.652140][T15489] loop1: detected capacity change from 0 to 32768
[  571.656097][T15487] BTRFS info (device loop4): using xxhash64 checksum algorithm
[  571.862627][T15487] BTRFS info (device loop4): enabling ssd optimizations
[  571.903315][T15487] BTRFS info (device loop4): turning on async discard
[  571.939841][T15487] BTRFS info (device loop4): enabling free space tree
[  572.186234][T15493] loop3: detected capacity change from 0 to 32768
[  572.193358][ T5953] BTRFS info (device loop4): last unmount of filesystem e5ec6bdf-b4e4-4163-9622-8db3a33753bd
[  572.232321][T15493] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4024 (15493)
[  572.298112][T15493] BTRFS info (device loop3): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc
[  572.339360][T15493] BTRFS info (device loop3): using blake2b checksum algorithm
[  572.348901][ T5936] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  572.535311][ T5936] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  572.610265][ T5936] usb 2-1: config 0 has no interface number 0
[  572.628761][T15493] BTRFS info (device loop3): enabling ssd optimizations
[  572.651599][ T5936] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  572.672785][T15493] BTRFS info (device loop3): turning on async discard
[  572.701502][T15493] BTRFS info (device loop3): enabling free space tree
[  572.735099][ T5936] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  572.762342][ T5936] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  572.806919][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  572.853969][ T5936] usb 2-1: Product: syz
[  572.868502][ T5936] usb 2-1: SerialNumber: syz
[  572.944075][ T5936] usb 2-1: config 0 descriptor??
[  572.946083][T15495] loop2: detected capacity change from 0 to 40427
[  572.981083][ T5936] cm109 2-1:0.8: invalid payload size 0, expected 4
[  572.996630][T15514] loop0: detected capacity change from 0 to 32768
[  573.010882][T15495] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  573.055939][T15495] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  573.057513][ T5945] BTRFS info (device loop3): last unmount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc
[  573.089630][T15495] F2FS-fs (loop2): invalid crc value
[  573.106291][T15514] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4027 (15514)
[  573.153832][ T5936] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input48
[  573.201721][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  573.209070][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -32
[  573.220259][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  573.227460][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -32
[  573.236145][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  573.243236][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -32
[  573.250713][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  573.257822][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -32
[  573.268457][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  573.275593][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -32
[  573.283796][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  573.290921][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -32
[  573.299492][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  573.307282][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  573.315201][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  573.327065][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  573.350542][T15514] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  573.410974][ T5936] usb 2-1: USB disconnect, device number 3
[  573.416912][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  573.429574][T15514] BTRFS info (device loop0): using crc32c checksum algorithm
[  573.687251][ T5936] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  573.709472][T15514] BTRFS info (device loop0): enabling ssd optimizations
[  573.737475][T15514] BTRFS info (device loop0): turning on async discard
[  573.775550][T15514] BTRFS info (device loop0): enabling free space tree
[  573.796353][T15495] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  573.929823][T15495] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  573.976698][T15495] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  574.096179][ T5934] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  574.305882][T15557] loop1: detected capacity change from 0 to 512
[  574.403148][T15557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  574.674326][ T5942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.751796][T15537] loop4: detected capacity change from 0 to 32768
[  574.795796][T15537] BTRFS: device fsid 9399ba92-402c-46cb-a272-9c4c6c4f62f5 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4030 (15537)
[  574.868487][T15537] BTRFS info (device loop4): first mount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5
[  574.899646][T15537] BTRFS info (device loop4): using sha256 checksum algorithm
[  575.183512][T15566] loop1: detected capacity change from 0 to 2364
[  575.205956][T15537] BTRFS info (device loop4): enabling ssd optimizations
[  575.258761][T15537] BTRFS info (device loop4): turning on async discard
[  575.290637][T15537] BTRFS info (device loop4): enabling free space tree
[  575.619430][ T5953] BTRFS info (device loop4): last unmount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5
[  575.719974][T15585] loop1: detected capacity change from 0 to 2048
[  575.893059][T15559] loop3: detected capacity change from 0 to 32768
[  575.957737][T15559] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4033 (15559)
[  576.041453][T15559] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  576.111370][T15559] BTRFS info (device loop3): using crc32c checksum algorithm
[  576.124339][T15587] loop2: detected capacity change from 0 to 512
[  576.450816][T15559] BTRFS info (device loop3): enabling ssd optimizations
[  576.496931][T15559] BTRFS info (device loop3): turning on async discard
[  576.528309][T15559] BTRFS info (device loop3): enabling free space tree
[  576.737323][ T5945] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  576.808333][T15580] loop0: detected capacity change from 0 to 32768
[  576.899878][T15580] (syz.0.4037,15580,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  576.927639][T15580] (syz.0.4037,15580,1):ocfs2_fill_super:1177 ERROR: status = -22
[  577.217673][T15612] syz.3.4042: attempt to access beyond end of device
[  577.217673][T15612] loop3: rw=2048, sector=0, nr_sectors = 8 limit=1
[  577.249799][T15612] SQUASHFS error: Failed to read block 0x0: -5
[  577.299759][T15612] unable to read squashfs_super_block
[  577.666472][T15616] set_capacity_and_notify: 1 callbacks suppressed
[  577.666493][T15616] loop3: detected capacity change from 0 to 128
[  577.752589][T15616] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  577.786313][T15616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  578.194790][T15618] loop3: detected capacity change from 0 to 2048
[  578.241622][T15618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  578.540029][T15620] loop3: detected capacity change from 0 to 128
[  578.564806][T15620] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  578.601019][T15620] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  578.675761][T15598] loop4: detected capacity change from 0 to 32768
[  578.776443][T15598] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[  578.802220][T15598] dlm: no local IP address has been set
[  578.850728][T15598] dlm: cannot start dlm midcomms -107
[  578.886014][T15598] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[  579.867988][T15624] loop3: detected capacity change from 0 to 32768
[  579.923125][T15624] JBD2: Ignoring recovery information on journal
[  579.960167][T15629] loop1: detected capacity change from 0 to 2048
[  580.029856][T15629] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  580.057301][T15629] UDF-fs: Scanning with blocksize 512 failed
[  580.088721][T15629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  580.119123][T15624] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  580.289049][T15626] loop4: detected capacity change from 0 to 32768
[  580.341249][T15626] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4048 (15626)
[  580.399449][T15626] BTRFS info (device loop4): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2
[  580.455880][T15626] BTRFS info (device loop4): using blake2b checksum algorithm
[  580.525634][ T5945] ocfs2: Unmounting device (7,3) on (node local)
[  580.631258][T15634] loop1: detected capacity change from 0 to 4096
[  580.667845][T15626] BTRFS info (device loop4): enabling ssd optimizations
[  580.719497][T15651] loop0: detected capacity change from 0 to 128
[  580.725679][T15634] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  580.728217][T15651] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  580.733698][T15626] BTRFS info (device loop4): turning on async discard
[  580.746605][T15651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  580.778820][T15634] UDF-fs: Scanning with blocksize 512 failed
[  580.802662][T15626] BTRFS info (device loop4): enabling free space tree
[  580.845743][T15634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  581.061412][T15653] loop0: detected capacity change from 0 to 2048
[  581.096894][ T5953] BTRFS info (device loop4): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2
[  581.785134][T15633] (syz.2.4051,15633,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  581.948217][T15633] (syz.2.4051,15633,1):ocfs2_fill_super:1177 ERROR: status = -22
[  582.715909][T15657] (syz.3.4052,15657,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  582.749441][T15657] (syz.3.4052,15657,1):ocfs2_fill_super:1177 ERROR: status = -22
[  583.600824][T15661] set_capacity_and_notify: 3 callbacks suppressed
[  583.600845][T15661] loop4: detected capacity change from 0 to 65536
[  583.635997][T15661] (syz.4.4056,15661,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  583.738417][T15661] (syz.4.4056,15661,1):ocfs2_fill_super:1177 ERROR: status = -22
[  583.841111][T15663] loop1: detected capacity change from 0 to 65536
[  583.880904][T15663] (syz.1.4058,15663,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  583.963055][T15663] (syz.1.4058,15663,0):ocfs2_fill_super:1177 ERROR: status = -22
[  584.058184][T15673] loop3: detected capacity change from 0 to 32768
[  584.256898][T15679] loop1: detected capacity change from 0 to 256
[  584.598973][T15683] loop1: detected capacity change from 0 to 1
[  584.631046][T15683] syz.1.4066: attempt to access beyond end of device
[  584.631046][T15683] loop1: rw=2048, sector=0, nr_sectors = 8 limit=1
[  584.709434][T15683] SQUASHFS error: Failed to read block 0x0: -5
[  584.737880][T15683] unable to read squashfs_super_block
[  585.059278][T15685] loop1: detected capacity change from 0 to 256
[  585.100821][T15685] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  585.133933][T15685] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  585.171659][T15685] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  585.193838][T15685] UDF-fs: Scanning with blocksize 512 failed
[  585.234753][T15685] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  585.302892][T15685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  585.399402][T15677] loop4: detected capacity change from 0 to 32768
[  585.494783][T15677] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  585.626351][T15677] XFS (loop4): Ending clean mount
[  585.767972][T15697] netlink: 'syz.3.4069': attribute type 2 has an invalid length.
[  585.892180][ T5953] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  586.038995][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  586.047249][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  586.072340][T15697] �9�: entered promiscuous mode
[  586.877585][T15710] loop4: detected capacity change from 0 to 4096
[  586.916260][T15710] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  586.970673][T15700] loop2: detected capacity change from 0 to 32768
[  587.228163][T15716] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  587.332423][T15704] loop0: detected capacity change from 0 to 32768
[  587.389873][T15704] JBD2: Ignoring recovery information on journal
[  587.605022][T15704] (syz.0.4073,15704,0):ocfs2_read_journal_inode:1649 ERROR: status = -13
[  587.642481][T15704] (syz.0.4073,15704,0):ocfs2_mark_dead_nodes:1932 ERROR: status = -13
[  587.705726][T15704] (syz.0.4073,15704,0):ocfs2_check_volume:2420 ERROR: status = -13
[  587.749144][T15704] (syz.0.4073,15704,0):ocfs2_check_volume:2432 ERROR: status = -13
[  587.792589][T15704] (syz.0.4073,15704,0):ocfs2_mount_volume:1764 ERROR: status = -13
[  587.921032][T15714] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  587.940832][T15704] (syz.0.4073,15704,0):ocfs2_fill_super:1177 ERROR: status = -13
[  588.110141][T15714] XFS (loop3): Ending clean mount
[  588.156837][ T5945] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  589.433209][T15751] set_capacity_and_notify: 2 callbacks suppressed
[  589.433234][T15751] loop0: detected capacity change from 0 to 16
[  589.461830][T15751] erofs (device loop0): mounted with root inode @ nid 36.
[  589.778476][T15741] loop3: detected capacity change from 0 to 32768
[  589.828702][T15741] (syz.3.4084,15741,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  589.856085][T15741] (syz.3.4084,15741,0):ocfs2_fill_super:1177 ERROR: status = -22
[  590.276982][T15771] xt_TCPMSS: Only works on TCP SYN packets
[  590.308486][T15769] loop3: detected capacity change from 0 to 2048
[  590.513696][T15730] loop4: detected capacity change from 0 to 65536
[  590.584961][T15730] XFS (loop4): Mounting V5 Filesystem 3e7e19ec-4fa8-4c61-9f42-f376546f3591
[  590.934370][T15730] XFS (loop4): Ending clean mount
[  591.009403][ T6003] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  591.045741][ T5953] XFS (loop4): Unmounting Filesystem 3e7e19ec-4fa8-4c61-9f42-f376546f3591
[  591.209010][ T6003] usb 4-1: Using ep0 maxpacket: 32
[  591.224901][ T6003] usb 4-1: unable to get BOS descriptor or descriptor too short
[  591.259667][ T6003] usb 4-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[  591.306634][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.328479][ T6003] usb 4-1: Product: syz
[  591.337327][ T5936] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  591.355448][ T6003] usb 4-1: Manufacturer: syz
[  591.371608][ T6003] usb 4-1: SerialNumber: syz
[  591.523855][ T5936] usb 3-1: not running at top speed; connect to a high speed hub
[  591.546921][ T5936] usb 3-1: config 7 has an invalid interface number: 116 but max is 0
[  591.563631][ T5936] usb 3-1: config 7 has no interface number 0
[  591.585312][ T5936] usb 3-1: config 7 interface 116 has no altsetting 0
[  591.618090][ T5936] usb 3-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ca.2d
[  591.643803][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.657726][ T6003] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  591.672303][ T5936] usb 3-1: Product: syz
[  591.681544][ T5936] usb 3-1: Manufacturer: syz
[  591.692356][ T6003] usb 4-1: unit 37 not found!
[  591.698483][ T5936] usb 3-1: SerialNumber: syz
[  591.704867][ T6003] usb 4-1: unit 0 not found!
[  591.722039][T15784] loop1: detected capacity change from 0 to 32768
[  591.785392][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4114'.
[  591.813646][T15784] XFS (loop1): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  591.858674][T15784] XFS (loop1): Log size 516 blocks too small, minimum size is 636 blocks
[  591.912593][ T6003] usb 4-1: USB disconnect, device number 7
[  591.925485][T15784] XFS (loop1): AAIEEE! Log failed size checks. Abort!
[  591.996914][T15784] XFS (loop1): log mount failed
[  592.004557][ T5936] usb-storage 3-1:7.116: USB Mass Storage device detected
[  592.273191][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  592.282255][ T5936] usb 3-1: USB disconnect, device number 7
[  592.448680][T15831] loop1: detected capacity change from 0 to 128
[  592.492613][T15831] FAT-fs (loop1): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  592.564285][T15831] /dev/loop1: Can't open blockdev
[  592.953522][T15842] Cannot find del_set index 0 as target
[  592.959440][T15843] loop2: detected capacity change from 0 to 64
[  593.132304][T15847] process 'syz.4.4127' launched '/dev/fd/3' with NULL argv: empty string added
[  593.301544][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4128'.
[  593.492848][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4132'.
[  593.862724][T15869] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4138'.
[  593.900653][T15869] tc_dump_action: action bad kind
[  594.126957][T15880] sg_write: data in/out 294012/2 bytes for SCSI command 0xaf-- guessing data in;
[  594.126957][T15880]    program syz.3.4143 not setting count and/or reply_len properly
[  594.312080][T15829] loop0: detected capacity change from 0 to 65536
[  594.369586][T15829] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  594.394086][T15894] loop3: detected capacity change from 0 to 1024
[  594.433852][T15829] XFS (loop0): Ending clean mount
[  594.502945][ T5934] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  594.717513][   T49] hfsplus: b-tree write err: -5, ino 25
[  594.739289][   T49] hfsplus: b-tree write err: -5, ino 4
[  594.800237][T15905] loop2: detected capacity change from 0 to 256
[  594.801343][   T49] hfsplus: b-tree write err: -5, ino 2
[  594.830860][T15905] exfat: Deprecated parameter 'namecase'
[  594.865443][T15905] exfat: Deprecated parameter 'utf8'
[  594.912472][T15905] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  594.954372][T15907] netlink: 'syz.0.4151': attribute type 1 has an invalid length.
[  594.979570][T15907] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4151'.
[  595.761937][T15927] loop2: detected capacity change from 0 to 64
[  595.783074][T15903] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.4150'.
[  595.791834][   T30] audit: type=1326 audit(1791664354.935:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.0.4163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f849c19c819 code=0x0
[  596.571250][   T30] audit: type=1326 audit(1791664355.665:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15949 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0279c819 code=0x7ffc0000
[  596.617528][   T30] audit: type=1326 audit(1791664355.665:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15949 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0279c819 code=0x7ffc0000
[  596.668027][   T30] audit: type=1326 audit(1791664355.693:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15949 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fca0279c819 code=0x7ffc0000
[  596.777675][   T30] audit: type=1326 audit(1791664355.693:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15949 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0279c819 code=0x7ffc0000
[  596.830530][   T30] audit: type=1326 audit(1791664355.693:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15949 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0279c819 code=0x7ffc0000
[  597.086497][T15925] loop3: detected capacity change from 0 to 32768
[  597.136931][T15925] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  597.413298][T15925] XFS (loop3): Ending clean mount
[  597.582559][T15992] hsr0: entered promiscuous mode
[  597.596590][T15992] hsr0: entered allmulticast mode
[  597.616325][T15992] hsr_slave_0: entered allmulticast mode
[  597.643633][ T5945] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  597.660565][T15994] loop1: detected capacity change from 0 to 16
[  597.672906][T15992] hsr_slave_1: entered allmulticast mode
[  597.706757][T15994] erofs (device loop1): mounted with root inode @ nid 36.
[  597.742528][  T808] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  597.937454][  T808] usb 3-1: config 0 has an invalid interface number: 15 but max is 0
[  597.957392][  T808] usb 3-1: config 0 has no interface number 0
[  597.973876][  T808] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  597.994204][  T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.019749][  T808] usb 3-1: Product: syz
[  598.028713][  T808] usb 3-1: Manufacturer: syz
[  598.043467][  T808] usb 3-1: SerialNumber: syz
[  598.058537][  T808] usb 3-1: config 0 descriptor??
[  598.222633][T16004] loop1: detected capacity change from 0 to 1024
[  598.318650][T16004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  598.369742][ T6003] usb 3-1: USB disconnect, device number 8
[  598.375679][T16004] EXT4-fs error (device loop1): ext4_lookup:1782: inode #2: comm syz.1.4195: 'file2' linked to parent dir
[  598.439476][T16004] EXT4-fs (loop1): Remounting filesystem read-only
[  598.531090][ T5942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  598.722853][T16014] loop1: detected capacity change from 0 to 512
[  598.818559][T16014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  598.879214][T16014] ext4 filesystem being mounted at /812/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  598.900809][T16023] loop4: detected capacity change from 0 to 256
[  599.007032][ T5942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.127878][T16023] FAT-fs (loop4): Directory bread(block 64) failed
[  599.167699][T16023] FAT-fs (loop4): Directory bread(block 65) failed
[  599.180073][T16026] loop2: detected capacity change from 0 to 256
[  599.204112][T16023] FAT-fs (loop4): Directory bread(block 66) failed
[  599.231998][T16023] FAT-fs (loop4): Directory bread(block 67) failed
[  599.260473][T16023] FAT-fs (loop4): Directory bread(block 68) failed
[  599.315104][T16023] FAT-fs (loop4): Directory bread(block 69) failed
[  599.319313][T16026] FAT-fs (loop2): Directory bread(block 64) failed
[  599.346801][T16023] FAT-fs (loop4): Directory bread(block 70) failed
[  599.355413][T16026] FAT-fs (loop2): Directory bread(block 65) failed
[  599.381006][T16023] FAT-fs (loop4): Directory bread(block 71) failed
[  599.383354][T16026] FAT-fs (loop2): Directory bread(block 66) failed
[  599.398630][T16023] FAT-fs (loop4): Directory bread(block 72) failed
[  599.424552][T16026] FAT-fs (loop2): Directory bread(block 67) failed
[  599.435378][T16023] FAT-fs (loop4): Directory bread(block 73) failed
[  599.448154][T16026] FAT-fs (loop2): Directory bread(block 68) failed
[  599.484941][T16026] FAT-fs (loop2): Directory bread(block 69) failed
[  599.516523][T16026] FAT-fs (loop2): Directory bread(block 70) failed
[  599.541678][T16026] FAT-fs (loop2): Directory bread(block 71) failed
[  599.584717][T16026] FAT-fs (loop2): Directory bread(block 72) failed
[  599.620681][T16026] FAT-fs (loop2): Directory bread(block 73) failed
[  599.895434][T16045] loop0: detected capacity change from 0 to 2048
[  599.981105][T16054] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  600.166986][T16045] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1
[  600.272254][T16045] Remounting filesystem read-only
[  600.501869][T16070] xt_l2tp: missing protocol rule (udp|l2tpip)
[  600.605494][T16076] Illegal XDP return value 4294967282 on prog  (id 286) dev N/A, expect packet loss!
[  600.739174][T16081] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  600.948999][T16084] loop0: detected capacity change from 0 to 8192
[  600.998334][T16084] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  601.200759][T16084] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  601.224643][T16092] loop1: detected capacity change from 0 to 764
[  601.236300][T16084] FAT-fs (loop0): Filesystem has been set read-only
[  601.296643][T16092] Symlink component flag not implemented
[  601.329722][T16092] Symlink component flag not implemented
[  601.361053][T16092] Symlink component flag not implemented
[  601.388138][T16092] Symlink component flag not implemented (129)
[  601.413976][T16092] Symlink component flag not implemented (6)
[  601.458583][T16092] Symlink component flag not implemented (105)
[  601.608392][T16104] loop3: detected capacity change from 0 to 512
[  601.632420][T16104] EXT4-fs: Ignoring removed oldalloc option
[  601.660781][T16103] loop2: detected capacity change from 0 to 1764
[  601.700877][T16104] EXT4-fs (loop3): 1 truncate cleaned up
[  601.720416][T16104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  601.828614][T16104] Process accounting resumed
[  602.081712][ T5945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.226297][T16124] netlink: 'syz.0.4251': attribute type 1 has an invalid length.
[  602.260381][T16124] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4251'.
[  602.570204][T16135] delete_channel: no stack
[  602.797337][T16147] capability: warning: `syz.3.4261' uses deprecated v2 capabilities in a way that may be insecure
[  602.838344][T16152] loop0: detected capacity change from 0 to 64
[  602.984968][T16154] loop4: detected capacity change from 0 to 512
[  603.051347][T16154] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  603.075763][T16154] EXT4-fs (loop4): orphan cleanup on readonly fs
[  603.095364][T16154] Quota error (device loop4): v2_read_file_info: Can't read info structure
[  603.180273][T16154] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  603.197330][T16154] EXT4-fs (loop4): Cannot turn on quotas: error -5
[  603.212362][T16154] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4265: bg 0: block 64: padding at end of block bitmap is not set
[  603.252381][T16154] loop4: lost filesystem error report for type 5 error -117
[  603.252907][T16154] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  603.260329][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  603.260356][    C1] EXT4-fs (loop4): initial error at time 1791664361: ext4_validate_block_bitmap:441
[  603.260415][    C1] EXT4-fs (loop4): last error at time 1791664361: ext4_validate_block_bitmap:441
[  603.365336][T16154] loop4: lost filesystem error report for type 5 error -117
[  603.370388][T16154] EXT4-fs (loop4): 1 truncate cleaned up
[  603.457013][T16154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  603.479059][T16170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4270'.
[  603.492629][T16169] IPv6: sit1: Disabled Multicast RS
[  603.691383][ T5953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.917560][T16179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  604.084920][T16187] loop2: detected capacity change from 0 to 256
[  604.201369][T16187] FAT-fs (loop2): Directory bread(block 64) failed
[  604.221953][T16187] FAT-fs (loop2): Directory bread(block 65) failed
[  604.245328][T16187] FAT-fs (loop2): Directory bread(block 66) failed
[  604.266601][T16187] FAT-fs (loop2): Directory bread(block 67) failed
[  604.281100][T16187] FAT-fs (loop2): Directory bread(block 68) failed
[  604.306300][T16187] FAT-fs (loop2): Directory bread(block 69) failed
[  604.331985][T16187] FAT-fs (loop2): Directory bread(block 70) failed
[  604.355547][T16187] FAT-fs (loop2): Directory bread(block 71) failed
[  604.389824][T16187] FAT-fs (loop2): Directory bread(block 72) failed
[  604.399211][T16198] netlink: 'syz.1.4284': attribute type 11 has an invalid length.
[  604.418466][T16187] FAT-fs (loop2): Directory bread(block 73) failed
[  604.425245][T16198] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4284'.
[  604.513309][   T30] audit: type=1800 audit(1791664363.100:22): pid=16187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4279" name="file1" dev="loop2" ino=1048659 res=0 errno=0
[  604.583919][T16204] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  604.994740][ T5949] Bluetooth: hci4: unexpected event for opcode 0x200c
[  605.010742][T16189] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  605.157911][T16224] loop2: detected capacity change from 0 to 16
[  605.174194][T16224] erofs (device loop2): mounted with root inode @ nid 36.
[  605.249028][T16228] comedi comedi3: board detection failed
[  605.264090][T16224] erofs (device loop2): readahead error at folio 2 @ nid 89
[  605.369624][ T5949] erofs (device loop2): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192
[  605.401513][T16224] erofs (device loop2): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192
[  605.421451][T16224] erofs (device loop2): read error -117 @ 1 of nid 89
[  605.431757][   T30] audit: type=1800 audit(1791664363.961:23): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4297" name="file3" dev="loop2" ino=89 res=0 errno=0
[  605.671190][T16214] loop3: detected capacity change from 0 to 32768
[  606.056369][ T5945] read_mapping_page failed!
[  606.117896][ T5945] ERROR: (device loop3): txCommit: 
[  606.117896][ T5945] 
[  606.194819][ T5945] ERROR: (device loop3): remounting filesystem as read-only
[  606.395510][ T5949] Bluetooth: hci0: command 0x0406 tx timeout
[  606.947122][T16280] loop0: detected capacity change from 0 to 1024
[  606.972550][T16280] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  607.060662][T16280] EXT4-fs error (device loop0): ext4_map_blocks:789: inode #3: block 2: comm syz.0.4325: lblock 2 mapped to illegal pblock 2 (length 1)
[  607.102298][T16280] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  607.106277][T16280] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  607.115676][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  607.115705][    C0] EXT4-fs (loop0): initial error at time 1791664365: ext4_map_blocks:789: inode 3: block 2
[  607.115751][    C0] EXT4-fs (loop0): last error at time 1791664365: ext4_map_blocks:789: inode 3: block 2
[  607.150461][T16284] unsupported nla_type 142
[  607.156621][T16280] EXT4-fs error (device loop0): ext4_map_blocks:789: inode #3: block 48: comm syz.0.4325: lblock 0 mapped to illegal pblock 48 (length 1)
[  607.181030][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.206675][T16280] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  607.209476][T16280] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  607.247016][T16280] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.4325: Failed to acquire dquot type 0
[  607.304352][T16280] loop0: lost filesystem error report for type 5 error -117
[  607.304818][T16280] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6294: Corrupt filesystem
[  607.353195][T16280] loop0: lost filesystem error report for type 5 error -117
[  607.353969][T16280] EXT4-fs error (device loop0): ext4_evict_inode:265: inode #11: comm syz.0.4325: mark_inode_dirty error
[  607.438968][T16280] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  607.442856][T16280] EXT4-fs warning (device loop0): ext4_evict_inode:268: couldn't mark inode dirty (err -117)
[  607.488659][T16280] EXT4-fs (loop0): 1 orphan inode deleted
[  607.512781][T12669] EXT4-fs error (device loop0): ext4_map_blocks:789: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  607.534640][T12669] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  607.534862][T16280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  607.573844][T12669] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  607.597938][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.609065][T12669] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0
[  607.699133][  T137] EXT4-fs error (device loop0): ext4_map_blocks:789: inode #3: block 2: comm kworker/u8:5: lblock 2 mapped to illegal pblock 2 (length 1)
[  607.756368][  T137] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  607.764813][  T137] EXT4-fs error (device loop0): ext4_write_dquot:6981: comm kworker/u8:5: Failed to commit dquot type 0
[  607.782001][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.803156][  T137] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  607.844298][ T5934] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.877438][ T5934] EXT4-fs error (device loop0): __ext4_get_inode_loc:4800: comm syz-executor: Invalid inode table block 1 in block_group 0
[  607.946095][ T5934] loop0: lost filesystem error report for type 5 error -117
[  607.975202][ T5934] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6294: Corrupt filesystem
[  608.010156][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.046451][ T5934] loop0: lost filesystem error report for type 5 error -117
[  608.046969][ T5934] EXT4-fs error (device loop0): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error
[  608.065673][T16305] No source specified
[  608.087212][ T5934] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  608.139101][T16307] loop1: detected capacity change from 0 to 512
[  608.401119][T16313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4343'.
[  608.496516][ T5937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  608.513760][ T5937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  608.524385][ T5937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  608.535430][ T5937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  608.546092][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4345'.
[  608.557547][ T5937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  608.596524][T16318] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4345'.
[  608.606966][T16318] netlink: 580 bytes leftover after parsing attributes in process `syz.4.4345'.
[  608.616904][T16318] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4345'.
[  608.709900][  T137] 
[  608.712293][  T137] ======================================================
[  608.719331][  T137] WARNING: possible circular locking dependency detected
[  608.726373][  T137] syzkaller #0 Not tainted
[  608.730823][  T137] ------------------------------------------------------
[  608.738039][  T137] kworker/u8:5/137 is trying to acquire lock:
[  608.744194][  T137] ffff88803683e938 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a9/0x280
[  608.753958][  T137] 
[  608.753958][  T137] but task is already holding lock:
[  608.761320][  T137] ffff888036d38b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  608.771680][  T137] 
[  608.771680][  T137] which lock already depends on the new lock.
[  608.771680][  T137] 
[  608.782090][  T137] 
[  608.782090][  T137] the existing dependency chain (in reverse order) is:
[  608.791107][  T137] 
[  608.791107][  T137] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  608.799648][  T137]        percpu_down_read_internal+0x48/0x1c0
[  608.805726][  T137]        ext4_writepages+0x205/0x3b0
[  608.811023][  T137]        do_writepages+0x32e/0x550
[  608.816140][  T137]        __writeback_single_inode+0x133/0x10e0
[  608.822310][  T137]        writeback_single_inode+0x4ac/0xdc0
[  608.828209][  T137]        write_inode_now+0x1c2/0x290
[  608.833494][  T137]        iput+0x8c1/0xe80
[  608.837831][  T137]        ext4_xattr_block_set+0x1fd4/0x2ad0
[  608.843814][  T137]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  608.850232][  T137]        __ext4_expand_extra_isize+0x30d/0x400
[  608.856401][  T137]        __ext4_mark_inode_dirty+0x45c/0x710
[  608.862388][  T137]        ext4_evict_inode+0x8c9/0x1010
[  608.867855][  T137]        evict+0x61e/0xb10
[  608.872277][  T137]        ext4_orphan_cleanup+0xc38/0x1470
[  608.878016][  T137]        ext4_fill_super+0x59ff/0x6320
[  608.883483][  T137]        get_tree_bdev_flags+0x431/0x4f0
[  608.889126][  T137]        vfs_get_tree+0x92/0x2a0
[  608.894064][  T137]        do_new_mount+0x341/0xd30
[  608.899095][  T137]        __se_sys_mount+0x31d/0x420
[  608.904297][  T137]        do_syscall_64+0x15f/0xf80
[  608.909410][  T137]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.915827][  T137] 
[  608.915827][  T137] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  608.923386][  T137]        down_read+0x47/0x2e0
[  608.928069][  T137]        ext4_setattr+0x884/0x1da0
[  608.933279][  T137]        notify_change+0xc1a/0xf40
[  608.938389][  T137]        chown_common+0x466/0x6b0
[  608.943503][  T137]        do_fchownat+0x14c/0x250
[  608.948468][  T137]        __x64_sys_chown+0x82/0xa0
[  608.953583][  T137]        do_syscall_64+0x15f/0xf80
[  608.958785][  T137]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.965199][  T137] 
[  608.965199][  T137] -> #0 (jbd2_handle){++++}-{0:0}:
[  608.972500][  T137]        __lock_acquire+0x15a5/0x2cf0
[  608.977970][  T137]        lock_acquire+0x106/0x350
[  608.983090][  T137]        wait_transaction_locked+0x1c2/0x280
[  608.989250][  T137]        start_this_handle+0x7dc/0x2290
[  608.994802][  T137]        jbd2__journal_start+0x2c0/0x5b0
[  609.000433][  T137]        __ext4_journal_start_sb+0x203/0x5d0
[  609.006416][  T137]        ext4_do_writepages+0xf76/0x4670
[  609.012054][  T137]        ext4_writepages+0x241/0x3b0
[  609.017487][  T137]        do_writepages+0x32e/0x550
[  609.022599][  T137]        __writeback_single_inode+0x133/0x10e0
[  609.028798][  T137]        writeback_sb_inodes+0x979/0x19d0
[  609.034639][  T137]        __writeback_inodes_wb+0x111/0x240
[  609.040553][  T137]        wb_writeback+0x459/0xb00
[  609.045668][  T137]        wb_workfn+0xb12/0xf10
[  609.050433][  T137]        process_scheduled_works+0xb5d/0x1860
[  609.056507][  T137]        worker_thread+0xa53/0xfc0
[  609.061623][  T137]        kthread+0x388/0x470
[  609.066215][  T137]        ret_from_fork+0x514/0xb70
[  609.071515][  T137]        ret_from_fork_asm+0x1a/0x30
[  609.076971][  T137] 
[  609.076971][  T137] other info that might help us debug this:
[  609.076971][  T137] 
[  609.087203][  T137] Chain exists of:
[  609.087203][  T137]   jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem
[  609.087203][  T137] 
[  609.100764][  T137]  Possible unsafe locking scenario:
[  609.100764][  T137] 
[  609.108215][  T137]        CPU0                    CPU1
[  609.113575][  T137]        ----                    ----
[  609.119034][  T137]   rlock(&sbi->s_writepages_rwsem);
[  609.124342][  T137]                                lock(&ei->xattr_sem);
[  609.131209][  T137]                                lock(&sbi->s_writepages_rwsem);
[  609.138937][  T137]   lock(jbd2_handle);
[  609.143013][  T137] 
[  609.143013][  T137]  *** DEADLOCK ***
[  609.143013][  T137] 
[  609.151163][  T137] 4 locks held by kworker/u8:5/137:
[  609.156469][  T137]  #0: ffff88801be82940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  609.167740][  T137]  #1: ffffc90002ec7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  609.180364][  T137]  #2: ffff888036d3a0d8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
[  609.190938][  T137]  #3: ffff888036d38b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  609.201499][  T137] 
[  609.201499][  T137] stack backtrace:
[  609.207502][  T137] CPU: 0 UID: 0 PID: 137 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  609.207523][  T137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  609.207534][  T137] Workqueue: writeback wb_workfn (flush-8:0)
[  609.207562][  T137] Call Trace:
[  609.207572][  T137]  <TASK>
[  609.207580][  T137]  dump_stack_lvl+0xe8/0x150
[  609.207605][  T137]  print_circular_bug+0x2e1/0x300
[  609.207625][  T137]  check_noncircular+0x12e/0x150
[  609.207644][  T137]  __lock_acquire+0x15a5/0x2cf0
[  609.207669][  T137]  ? irqentry_exit+0x61a/0x700
[  609.207688][  T137]  ? trace_irq_disable+0x3b/0x140
[  609.207707][  T137]  ? __pfx___schedule+0x10/0x10
[  609.207727][  T137]  ? wait_transaction_locked+0x1a9/0x280
[  609.207746][  T137]  lock_acquire+0x106/0x350
[  609.207767][  T137]  ? wait_transaction_locked+0x1a9/0x280
[  609.207787][  T137]  ? preempt_schedule_thunk+0x16/0x30
[  609.207807][  T137]  ? wait_transaction_locked+0x1a9/0x280
[  609.207825][  T137]  wait_transaction_locked+0x1c2/0x280
[  609.207843][  T137]  ? wait_transaction_locked+0x1a9/0x280
[  609.207862][  T137]  ? __pfx_wait_transaction_locked+0x10/0x10
[  609.207881][  T137]  ? __pfx_autoremove_wake_function+0x10/0x10
[  609.207900][  T137]  ? __pfx_stack_trace_save+0x10/0x10
[  609.207919][  T137]  ? jbd2__journal_start+0x1db/0x5b0
[  609.207937][  T137]  start_this_handle+0x7dc/0x2290
[  609.207952][  T137]  ? kasan_save_track+0x3e/0x80
[  609.207978][  T137]  ? ret_from_fork_asm+0x1a/0x30
[  609.208005][  T137]  ? __pfx_start_this_handle+0x10/0x10
[  609.208027][  T137]  ? rcu_is_watching+0x15/0xb0
[  609.208042][  T137]  ? trace_kmem_cache_alloc+0x29/0xe0
[  609.208064][  T137]  ? jbd2__journal_start+0x1db/0x5b0
[  609.208080][  T137]  ? kmem_cache_alloc_noprof+0x307/0x650
[  609.208101][  T137]  ? jbd2__journal_start+0x1db/0x5b0
[  609.208119][  T137]  jbd2__journal_start+0x2c0/0x5b0
[  609.208136][  T137]  __ext4_journal_start_sb+0x203/0x5d0
[  609.208157][  T137]  ext4_do_writepages+0xf76/0x4670
[  609.208187][  T137]  ? __pfx_ext4_do_writepages+0x10/0x10
[  609.208211][  T137]  ? ext4_writepages+0x205/0x3b0
[  609.208230][  T137]  ? ext4_writepages+0x205/0x3b0
[  609.208255][  T137]  ext4_writepages+0x241/0x3b0
[  609.208276][  T137]  ? __pfx_ext4_writepages+0x10/0x10
[  609.208300][  T137]  ? do_raw_spin_unlock+0xf5/0x210
[  609.208318][  T137]  ? __pfx_ext4_writepages+0x10/0x10
[  609.208338][  T137]  do_writepages+0x32e/0x550
[  609.208358][  T137]  ? reacquire_held_locks+0x104/0x190
[  609.208373][  T137]  ? writeback_sb_inodes+0x463/0x19d0
[  609.208394][  T137]  __writeback_single_inode+0x133/0x10e0
[  609.208415][  T137]  ? do_raw_spin_unlock+0xf5/0x210
[  609.208434][  T137]  writeback_sb_inodes+0x979/0x19d0
[  609.208462][  T137]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  609.208491][  T137]  ? __pfx_down_read_trylock+0x10/0x10
[  609.208509][  T137]  ? __pfx_move_expired_inodes+0x10/0x10
[  609.208531][  T137]  __writeback_inodes_wb+0x111/0x240
[  609.208553][  T137]  wb_writeback+0x459/0xb00
[  609.208573][  T137]  ? queue_io+0x211/0x470
[  609.208593][  T137]  ? __pfx_wb_writeback+0x10/0x10
[  609.208610][  T137]  ? do_raw_spin_lock+0x12b/0x2f0
[  609.208633][  T137]  wb_workfn+0xb12/0xf10
[  609.208648][  T137]  ? __lock_acquire+0x6b5/0x2cf0
[  609.208668][  T137]  ? look_up_lock_class+0x57/0x110
[  609.208693][  T137]  ? __pfx_wb_workfn+0x10/0x10
[  609.208708][  T137]  ? do_raw_spin_lock+0x12b/0x2f0
[  609.208726][  T137]  ? lock_acquire+0x106/0x350
[  609.208749][  T137]  ? process_scheduled_works+0xa70/0x1860
[  609.208772][  T137]  ? process_scheduled_works+0xa70/0x1860
[  609.208796][  T137]  ? process_scheduled_works+0xa70/0x1860
[  609.208818][  T137]  ? process_scheduled_works+0xa70/0x1860
[  609.208840][  T137]  process_scheduled_works+0xb5d/0x1860
[  609.208871][  T137]  ? __pfx_process_scheduled_works+0x10/0x10
[  609.208895][  T137]  ? assign_work+0x3d5/0x5e0
[  609.208918][  T137]  worker_thread+0xa53/0xfc0
[  609.208950][  T137]  kthread+0x388/0x470
[  609.208967][  T137]  ? __pfx_worker_thread+0x10/0x10
[  609.208989][  T137]  ? __pfx_kthread+0x10/0x10
[  609.209012][  T137]  ret_from_fork+0x514/0xb70
[  609.209036][  T137]  ? __pfx_ret_from_fork+0x10/0x10
[  609.209057][  T137]  ? __switch_to+0xc7d/0x1420
[  609.209078][  T137]  ? __pfx_kthread+0x10/0x10
[  609.209095][  T137]  ret_from_fork_asm+0x1a/0x30
[  609.209115][  T137]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  609.772666][T16322] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  609.835119][   T49] bridge_slave_1: left allmulticast mode
[  609.840816][   T49] bridge_slave_1: left promiscuous mode
[  609.851779][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.927524][   T49] bridge_slave_0: left allmulticast mode
[  609.935621][   T49] bridge_slave_0: left promiscuous mode
[  609.942935][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.139338][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  610.186796][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  610.214571][   T49] bond0 (unregistering): Released all slaves
[  610.346585][   T49] �9�: left promiscuous mode
[  610.698515][   T49] hsr_slave_0: left promiscuous mode
[  610.716145][   T49] hsr_slave_1: left promiscuous mode
[  610.726684][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  610.737057][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  610.755174][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  610.764261][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  610.783177][   T49] veth1_macvtap: left promiscuous mode
[  610.789037][   T49] veth0_macvtap: left promiscuous mode
[  610.794680][   T49] veth1_vlan: left promiscuous mode
[  610.802499][   T49] veth0_vlan: left promiscuous mode
[  610.963231][   T49] team0 (unregistering): Port device team_slave_1 removed
[  610.977530][   T49] team0 (unregistering): Port device team_slave_0 removed
[  611.426446][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.489590][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.542624][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.572022][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.677363][   T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.700994][   T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.751325][   T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.825266][   T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.945143][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.046780][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.114823][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.182452][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.297827][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.364611][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.436672][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.487551][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.569546][   T49] bridge_slave_1: left allmulticast mode
[  612.575526][   T49] bridge_slave_1: left promiscuous mode
[  612.581230][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.590489][   T49] bridge_slave_0: left allmulticast mode
[  612.596654][   T49] bridge_slave_0: left promiscuous mode
[  612.602409][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.611742][   T49] bridge_slave_1: left allmulticast mode
[  612.617547][   T49] bridge_slave_1: left promiscuous mode
[  612.623616][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.631798][   T49] bridge_slave_0: left allmulticast mode
[  612.637668][   T49] bridge_slave_0: left promiscuous mode
[  612.643317][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.652111][   T49] bridge_slave_1: left allmulticast mode
[  612.657849][   T49] bridge_slave_1: left promiscuous mode
[  612.663485][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.671622][   T49] bridge_slave_0: left allmulticast mode
[  612.677376][   T49] bridge_slave_0: left promiscuous mode
[  612.683627][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.692643][   T49] bridge_slave_1: left allmulticast mode
[  612.698347][   T49] bridge_slave_1: left promiscuous mode
[  612.704533][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.712697][   T49] bridge_slave_0: left allmulticast mode
[  612.718350][   T49] bridge_slave_0: left promiscuous mode
[  612.724626][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.906478][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  612.916816][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  612.926267][   T49] bond0 (unregistering): Released all slaves
[  613.025626][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  613.035568][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  613.045374][   T49] bond0 (unregistering): Released all slaves
[  613.126351][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  613.136153][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  613.145820][   T49] bond0 (unregistering): Released all slaves
[  613.249155][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  613.259439][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  613.268902][   T49] bond0 (unregistering): Released all slaves
[  613.904615][   T49] hsr_slave_0: left promiscuous mode
[  613.910799][   T49] hsr_slave_1: left promiscuous mode
[  613.916746][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  613.924963][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  613.933092][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  613.943641][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  613.954418][   T49] hsr_slave_0: left promiscuous mode
[  613.960411][   T49] hsr_slave_1: left promiscuous mode
[  613.967626][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  613.975372][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  613.985613][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  613.993059][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  614.007683][   T49] hsr_slave_0: left promiscuous mode
[  614.016606][   T49] hsr_slave_1: left promiscuous mode
[  614.022493][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  614.030970][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  614.039006][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  614.046429][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  614.056393][   T49] hsr_slave_0: left promiscuous mode
[  614.062332][   T49] hsr_slave_1: left promiscuous mode
[  614.068848][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  614.076561][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  614.084998][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  614.092932][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  614.112950][   T49] veth1_macvtap: left promiscuous mode
[  614.118520][   T49] veth0_macvtap: left promiscuous mode
[  614.124578][   T49] veth1_vlan: left promiscuous mode
[  614.129882][   T49] veth0_vlan: left promiscuous mode
[  614.137465][   T49] veth1_macvtap: left promiscuous mode
[  614.143010][   T49] veth0_macvtap: left promiscuous mode
[  614.149534][   T49] veth1_vlan: left promiscuous mode
[  614.154860][   T49] veth0_vlan: left promiscuous mode
[  614.163239][   T49] veth1_macvtap: left promiscuous mode
[  614.169585][   T49] veth0_macvtap: left promiscuous mode
[  614.175611][   T49] veth1_vlan: left promiscuous mode
[  614.180912][   T49] veth0_vlan: left promiscuous mode
[  614.187431][   T49] veth1_macvtap: left promiscuous mode
[  614.192979][   T49] veth0_macvtap: left promiscuous mode
[  614.397043][   T49] team0 (unregistering): Port device team_slave_1 removed
[  614.413787][   T49] team0 (unregistering): Port device team_slave_0 removed
[  614.514338][   T49] team0 (unregistering): Port device team_slave_1 removed
[  614.524701][   T49] team0 (unregistering): Port device team_slave_0 removed
[  614.637963][   T49] team0 (unregistering): Port device team_slave_1 removed
[  614.648748][   T49] team0 (unregistering): Port device team_slave_0 removed
[  614.729620][   T49] team0 (unregistering): Port device team_slave_1 removed
[  614.740088][   T49] team0 (unregistering): Port device team_slave_0 removed