last executing test programs:

7.098242913s ago: executing program 1 (id=782):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e05043e20", @ANYRES64], 0x8)

7.012991231s ago: executing program 1 (id=783):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000005c0)={[{0x2b, 'cpu'}, {0x2b, 'devices'}]}, 0xe)

6.990264694s ago: executing program 1 (id=784):
syz_mount_image$omfs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x8010, &(0x7f0000000100)={[{@dmask={'dmask', 0x3d, 0x4}}]}, 0x1, 0x9dc3, &(0x7f0000009ec0)="$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")

6.880056594s ago: executing program 1 (id=785):
ustat(0x7fff, 0x0)

6.721228508s ago: executing program 1 (id=786):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x4]}, 0x8)
fsmount(r0, 0x0, 0xa)

6.711461579s ago: executing program 1 (id=787):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.656044766s ago: executing program 0 (id=828):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0)

4.545319466s ago: executing program 0 (id=829):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x3)
r1 = accept4(r0, 0x0, 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

4.446714625s ago: executing program 0 (id=831):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000), 0xff, 0x50d4, &(0x7f00000051c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x2, 0x2, 0x7, 0x2})

3.656503857s ago: executing program 0 (id=841):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x24, &(0x7f0000000180)={0x0, 0x8, 0x1, "a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.692364585s ago: executing program 3 (id=853):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0xfffffff9, 0xbf27, 0x500}, 0x50)

2.597247723s ago: executing program 3 (id=855):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x1c}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80)

2.563300276s ago: executing program 3 (id=857):
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x80108906, 0x0)

2.453234966s ago: executing program 3 (id=859):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000005440), 0x26, 0x75c, &(0x7f0000005480)="$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")
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
truncate(&(0x7f0000000100)='./file0\x00', 0x8000000)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x44200, 0x40)

2.273499233s ago: executing program 4 (id=863):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r0, 0x2000)

1.717255003s ago: executing program 4 (id=868):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e)
connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'veth1_to_batadv\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/234)
ioctl$PPPIOCGFLAGS1(r2, 0x40047435, &(0x7f0000000280))

1.714369243s ago: executing program 4 (id=870):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @initial, {0x4, 0xff7}}, @smps}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x58)

1.64034174s ago: executing program 4 (id=871):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
socket$inet_udplite(0x2, 0x2, 0x88)
close_range(r1, 0xffffffffffffffff, 0x0)

1.461864287s ago: executing program 3 (id=875):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xffffffff)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
syz_open_procfs(0xffffffffffffffff, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.165222904s ago: executing program 2 (id=881):
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x6c02, 0x41}, 0x48)

1.068504193s ago: executing program 2 (id=882):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
modify_ldt$write(0x1, &(0x7f0000000040)={0xc}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.043611755s ago: executing program 2 (id=883):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x800}, 0x1001)
sendmmsg$unix(r2, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)='+', 0x1}], 0x1}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

993.025319ms ago: executing program 2 (id=884):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0)

719.553194ms ago: executing program 4 (id=885):
syz_emit_ethernet(0x3e, &(0x7f0000000780)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @broadcast}, @dest_unreach={0x3, 0xd, 0x0, 0x0, 0x7, 0x5, {0x5, 0x4, 0x3, 0x3, 0x6009, 0x67, 0x98, 0x9, 0x0, 0x9, @broadcast, @loopback}}}}}}, 0x0)

614.435423ms ago: executing program 4 (id=886):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001340)=""/188, 0xbc}], 0x1}}], 0x2, 0x10122, 0x0)

549.6487ms ago: executing program 2 (id=887):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x2d, 0x4000000, @val=@netfilter={0x2, 0x0, 0xfffffed4, 0x2000000}}, 0x40)

485.835716ms ago: executing program 2 (id=888):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000001a80)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,iocharset=macgreek,iocharset=cp775,integrity,nodiscard,noquota,uid=', @ANYRESHEX=0xee01, @ANYBLOB], 0x24, 0x61b6, &(0x7f00000075c0)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)

293.020713ms ago: executing program 3 (id=889):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

73.454793ms ago: executing program 0 (id=890):
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a80), 0x125101, 0x0)

0s ago: executing program 0 (id=891):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000f40)=ANY=[@ANYBLOB="12011001942f9920936901b0d1590102030109021b0001080990040904d0070103000009090504"], 0x0)

kernel console output (not intermixed with test programs):

DEV_CHANGE): vlan0: link becomes ready
[   72.641350][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.653588][ T4188] device veth0_vlan entered promiscuous mode
[   72.664306][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.697323][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.715878][ T4188] device veth1_vlan entered promiscuous mode
[   72.734241][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.743237][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.750806][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.817813][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.831673][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.845614][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.881532][ T4188] device veth0_macvtap entered promiscuous mode
[   72.901968][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.912286][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.923291][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.936287][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.950850][ T4182] device veth0_vlan entered promiscuous mode
[   72.960377][ T4188] device veth1_macvtap entered promiscuous mode
[   72.969755][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.978775][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.988379][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.998288][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.007557][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.016548][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.025440][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.034491][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.042488][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.051151][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.061227][ T4183] device veth0_vlan entered promiscuous mode
[   73.109978][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.129841][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.139060][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.147067][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.157912][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.168266][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.177537][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.189301][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.197858][ T4182] device veth1_vlan entered promiscuous mode
[   73.209115][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.231302][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.240562][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.252297][ T4183] device veth1_vlan entered promiscuous mode
[   73.278135][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.287401][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.297484][ T4195] device veth0_vlan entered promiscuous mode
[   73.307336][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.316948][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.327831][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.337111][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.373301][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.381259][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.391594][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.401270][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.426488][ T4182] device veth0_macvtap entered promiscuous mode
[   73.438625][ T4195] device veth1_vlan entered promiscuous mode
[   73.447135][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.455890][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.465994][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.475562][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.484620][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.497242][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.510791][ T4182] device veth1_macvtap entered promiscuous mode
[   73.521840][ T4183] device veth0_macvtap entered promiscuous mode
[   73.537644][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.547528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.556068][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.565390][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.574348][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.583255][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.591687][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.602173][ T4181] device veth0_vlan entered promiscuous mode
[   73.615696][ T4183] device veth1_macvtap entered promiscuous mode
[   73.635018][ T4181] device veth1_vlan entered promiscuous mode
[   73.676121][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.688680][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.700450][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.711831][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.725752][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.737182][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.757615][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.769316][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.778868][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.790208][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.799592][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.808557][   T23] Bluetooth: hci1: command 0x040f tx timeout
[   73.815088][   T23] Bluetooth: hci2: command 0x040f tx timeout
[   73.821757][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.830930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.845935][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.855770][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.865148][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.874468][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.883893][   T23] Bluetooth: hci4: command 0x040f tx timeout
[   73.890225][   T23] Bluetooth: hci3: command 0x040f tx timeout
[   73.896943][   T23] Bluetooth: hci0: command 0x040f tx timeout
[   73.917871][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.928609][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.940236][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.951060][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.964735][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.976845][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.986057][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.995895][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.006461][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.018527][ T4195] device veth0_macvtap entered promiscuous mode
[   74.028718][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.037686][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.048231][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.061690][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.083122][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.099413][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.110294][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.122370][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.136573][ T4181] device veth0_macvtap entered promiscuous mode
[   74.147301][ T4195] device veth1_macvtap entered promiscuous mode
[   74.163445][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.171814][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.180955][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.191277][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.204409][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.214302][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.223616][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.232357][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.245940][ T4181] device veth1_macvtap entered promiscuous mode
[   74.314752][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.329230][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.338716][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.349971][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.361951][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.379191][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.389487][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.400681][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.412235][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.426214][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.437037][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.448387][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.460712][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.470917][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.481823][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.491991][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.502985][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.516424][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.537709][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.549406][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.563805][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.572747][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.581391][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.592079][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.603502][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.613768][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.624411][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.636571][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.647477][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.658767][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.669095][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.680659][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.691154][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.702230][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.712281][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.723118][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.733007][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.743722][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.755510][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.773837][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.789791][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.802414][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.811517][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.831496][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.840442][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.850919][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.861582][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.874963][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.884235][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.893171][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.901928][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.934203][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.942236][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.981830][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.077798][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.118467][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.130209][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.160360][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.212398][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.235131][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.252042][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.252050][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.252109][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.277023][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.297781][ T4300] Zero length message leads to an empty skb
[   75.298590][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.317829][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.369506][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.391394][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.443381][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.481607][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.509641][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.528075][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.542092][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.575649][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.665455][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.673894][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.695363][ T4309] binder: Binderfs stats mode cannot be changed during a remount
[   75.709552][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.747122][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.893499][ T4262] Bluetooth: hci2: command 0x0419 tx timeout
[   75.917284][ T4262] Bluetooth: hci1: command 0x0419 tx timeout
[   75.963772][ T4262] Bluetooth: hci0: command 0x0419 tx timeout
[   75.977912][ T4262] Bluetooth: hci3: command 0x0419 tx timeout
[   76.026930][ T4262] Bluetooth: hci4: command 0x0419 tx timeout
[   76.084834][ T4323] IPv6: NLM_F_REPLACE set, but no existing node found!
[   76.237845][ T4334] loop2: detected capacity change from 0 to 16
[   76.282080][ T4334] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   76.420472][ T4340] netlink: 'syz.3.19': attribute type 29 has an invalid length.
[   76.429038][ T4298] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   76.479506][ T4340] netlink: 'syz.3.19': attribute type 29 has an invalid length.
[   76.507601][ T4342] netlink: 'syz.3.19': attribute type 29 has an invalid length.
[   76.520252][ T4345] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   76.539569][ T4345] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   76.621065][ T4348] loop2: detected capacity change from 0 to 1024
[   76.677580][ T4348] EXT4-fs (loop2): Ignoring removed bh option
[   76.686780][ T4348] EXT4-fs (loop2): inline encryption not supported
[   76.705683][ T4348] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[   76.791596][ T4348] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.23: lblock 2 mapped to illegal pblock 2 (length 1)
[   76.854462][ T4298] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   76.863293][ T4298] usb 2-1: config 0 has no interface number 0
[   76.869456][ T4298] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   76.881038][ T4298] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[   76.892341][ T4298] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   76.901757][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.910497][ T4348] Quota error (device loop2): qtree_write_dquot: dquota write failed
[   76.925757][ T4298] usb 2-1: config 0 descriptor??
[   76.931417][ T4348] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.23: lblock 0 mapped to illegal pblock 48 (length 1)
[   76.960194][ T4348] Quota error (device loop2): v2_write_file_info: Can't write info structure
[   76.983936][ T4325] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   77.012872][ T4298] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   77.034063][ T4348] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.23: Failed to acquire dquot type 0
[   77.082462][ T4348] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5850: Corrupt filesystem
[   77.103646][ T4348] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.23: mark_inode_dirty error
[   77.116880][ T4356] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   77.140924][ T4348] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[   77.154540][ T4348] EXT4-fs (loop2): 1 orphan inode deleted
[   77.160351][ T4348] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback.
[   77.187271][  T155] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[   77.229599][  T155] Quota error (device loop2): remove_tree: Can't read quota data block 1
[   77.242316][ T4298] usb 2-1: USB disconnect, device number 2
[   77.248939][    C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[   77.269772][  T155] EXT4-fs error (device loop2): ext4_release_dquot:6245: comm kworker/u4:3: Failed to release dquot type 0
[   77.296569][ T4346] loop4: detected capacity change from 0 to 32768
[   77.343632][ T4348] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.23: Invalid inode table block 1 in block_group 0
[   77.365075][ T4348] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5850: Corrupt filesystem
[   77.375573][ T4346] =======================================================
[   77.375573][ T4346] WARNING: The mand mount option has been deprecated and
[   77.375573][ T4346]          and is ignored by this kernel. Remove the mand
[   77.375573][ T4346]          option from the mount to silence this warning.
[   77.375573][ T4346] =======================================================
[   77.410575][    C1] vkms_vblank_simulate: vblank timer overrun
[   77.433166][ T4348] EXT4-fs error (device loop2): ext4_quota_off:6515: inode #3: comm syz.2.23: mark_inode_dirty error
[   77.508400][ T4346] JBD2: Ignoring recovery information on journal
[   77.594683][ T4346] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   77.606158][ T4370] loop3: detected capacity change from 0 to 4096
[   77.707031][ T4370] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[   77.751149][ T4195] ocfs2: Unmounting device (7,4) on (node local)
[   77.899450][ T4370] ntfs3: loop3: Inode r=19 is not in use!
[   77.944780][ T4370] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   77.983751][ T4298] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   78.026603][ T4370] ntfs3: loop3: ino=1d, "file1" failed to open parent directory r=400 to update
[   78.093807][ T4284] ntfs3: loop3: ino=1d, failed to open parent directory r=400 to update
[   78.272996][ T4298] usb 1-1: Using ep0 maxpacket: 16
[   78.381736][ T4397] process 'syz.3.39' launched './file0' with NULL argv: empty string added
[   78.393341][ T4262] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   78.401139][ T4298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.412661][ T4298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.423144][ T4298] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   78.438587][ T4298] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   78.449945][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.462696][ T4257] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   78.467589][ T4298] usb 1-1: config 0 descriptor??
[   78.631137][ T4396] loop4: detected capacity change from 0 to 32768
[   78.651608][ T4396] (syz.4.40,4396,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[   78.664271][ T4396] (syz.4.40,4396,0):ocfs2_fill_super:1177 ERROR: status = -22
[   78.803771][ T4401] loop4: detected capacity change from 0 to 736
[   78.822792][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.835605][ T4257] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   78.845885][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.858030][ T4257] usb 2-1: config 0 descriptor??
[   78.924826][ T4401] rock: directory entry would overflow storage
[   78.931605][ T4401] rock: sig=0x3b10, size=4, remaining=3
[   78.971099][ T4298] microsoft 0003:045E:07DA.0001: unknown main item tag 0x4
[   78.983280][ T4262] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[   78.997927][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.020469][ T4298] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input5
[   79.035534][ T4262] usb 3-1: Product: syz
[   79.044292][ T4262] usb 3-1: Manufacturer: syz
[   79.054751][ T4262] usb 3-1: SerialNumber: syz
[   79.073846][ T4262] usb 3-1: config 0 descriptor??
[   79.125019][ T4262] powermate: probe of 3-1:0.0 failed with error -22
[   79.157797][ T4298] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   79.202866][ T4257] usbhid 2-1:0.0: can't add hid device: -71
[   79.208944][ T4257] usbhid: probe of 2-1:0.0 failed with error -71
[   79.231365][ T4298] usb 1-1: USB disconnect, device number 2
[   79.246417][ T4257] usb 2-1: USB disconnect, device number 3
[   79.388643][ T4408] loop3: detected capacity change from 0 to 512
[   79.418213][ T4406] fido_id[4406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   79.487485][ T4408] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   79.507153][ T4408] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   79.639738][ T4403] loop4: detected capacity change from 0 to 32768
[   79.722863][ T4257] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   79.752095][ T4403] JBD2: Ignoring recovery information on journal
[   79.879417][ T4403] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[   79.982798][ T4257] usb 2-1: Using ep0 maxpacket: 16
[   80.047060][ T4195] ocfs2: Unmounting device (7,4) on (node local)
[   80.103037][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.129453][ T4257] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[   80.168266][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'.
[   80.186133][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.218937][ T4257] usb 2-1: config 0 descriptor??
[   80.706845][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.726255][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.746076][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.755221][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.764503][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.771961][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.779920][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.787823][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.795727][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.812689][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.820179][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.828436][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.837184][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.867688][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.882948][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.893342][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.900812][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.933186][ T4262] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   80.945594][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.958358][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   80.984892][ T4298] usb 3-1: USB disconnect, device number 2
[   80.996095][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.052797][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.060385][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.072704][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.080210][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.136326][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.145696][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.154001][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.161521][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.169892][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.182843][ T4262] usb 4-1: Using ep0 maxpacket: 8
[   81.215029][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.255263][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.265709][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.276736][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.285127][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.292956][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.300405][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.308745][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.332459][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.349177][ T4262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.362286][ T4262] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.374788][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.384578][ T4262] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00
[   81.388469][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.402017][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.403895][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.417247][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.426426][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.434625][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.442193][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.450098][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.457860][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.465631][ T4262] usb 4-1: config 0 descriptor??
[   81.473658][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.481137][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.489568][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.498353][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.506070][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.513617][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.521885][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.530739][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.538382][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.546082][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.553696][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.561142][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.568846][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.576465][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.584038][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.591461][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.599225][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.603186][ T4298] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   81.607032][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.634801][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.665910][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.684735][ T4493] loop1: detected capacity change from 0 to 16
[   81.692063][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.706054][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.738403][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.747540][ T4493] erofs: (device loop1): mounted with root inode @ nid 36.
[   81.757626][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.782690][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.797502][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.806051][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.813611][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.821262][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.825564][ T4493] overlayfs: fs on './file0/../file0' does not support file handles, falling back to index=off,nfs_export=off.
[   81.829919][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.849053][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.866519][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.879731][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.891960][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.904279][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.918178][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.931493][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.946295][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.958419][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.971876][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.986317][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   81.999694][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.014065][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.027241][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.041585][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.049294][ T4298] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   82.056926][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.069350][ T4298] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.076584][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.089483][ T4298] usb 1-1: config 0 interface 0 has no altsetting 0
[   82.096296][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.096328][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.096352][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.111660][ T4298] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   82.138198][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.138367][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.153607][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.170620][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.188365][ T4262] usb 4-1: string descriptor 0 read error: -71
[   82.193144][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.194901][ T4298] usb 1-1: config 0 descriptor??
[   82.210945][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.224635][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.232868][ T4262] uclogic 0003:5543:006E.0003: failed retrieving string descriptor #200: -71
[   82.240402][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.252282][ T4262] uclogic 0003:5543:006E.0003: failed retrieving pen parameters: -71
[   82.258259][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.272036][ T4262] uclogic 0003:5543:006E.0003: failed probing pen v2 parameters: -71
[   82.278056][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.288427][ T4262] uclogic 0003:5543:006E.0003: failed probing parameters: -71
[   82.288468][ T4262] uclogic: probe of 0003:5543:006E.0003 failed with error -71
[   82.291486][ T4262] usb 4-1: USB disconnect, device number 2
[   82.354189][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.371048][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.385439][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.400212][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.414799][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.426792][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.435066][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.442793][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.451314][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.481644][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.489434][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.507248][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.522950][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.540663][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.558819][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.576603][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.584435][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.602242][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.620368][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.635936][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.644908][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.653933][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.661416][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.670441][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.680977][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.688418][ T4298] holtek_mouse 0003:04D9:A067.0004: bogus close delimiter
[   82.688440][ T4298] holtek_mouse 0003:04D9:A067.0004: item 0 2 2 10 parsing failed
[   82.689422][ T4298] holtek_mouse 0003:04D9:A067.0004: hid parse failed: -22
[   82.717534][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.725609][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.729093][ T4298] holtek_mouse: probe of 0003:04D9:A067.0004 failed with error -22
[   82.754366][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.799768][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.810160][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.824114][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.832087][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.846802][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.855843][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.870102][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.879091][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.891316][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.899053][ T4298] usb 1-1: USB disconnect, device number 3
[   82.915249][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.941363][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.949273][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.965286][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.975443][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.986644][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   82.996911][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   83.008510][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   83.019434][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   83.031109][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   83.041566][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   83.055682][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   83.067662][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   83.079226][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   83.089619][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   83.102155][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   83.112510][ T4257] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0
[   83.129367][ T4257] hid-generic 0003:0458:5016.0002: hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0
[   83.151756][ T4257] usb 2-1: USB disconnect, device number 4
[   83.259972][ T4496] netlink: 'syz.3.72': attribute type 3 has an invalid length.
[   83.325259][ T4501] fido_id[4501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   83.365209][ T4504] loop2: detected capacity change from 0 to 1024
[   83.481021][ T4504] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   83.533366][ T4504] EXT4-fs (loop2): group descriptors corrupted!
[   83.646189][ T4515] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[   84.075013][ T4341] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   84.100388][ T4539] loop4: detected capacity change from 0 to 24
[   84.172754][ T4543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'.
[   84.189187][ T4539] MTD: Attempt to mount non-MTD device "/dev/loop4"
[   84.248144][ T4539] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   84.668810][ T4341] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[   84.688251][ T4341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.712672][ T4341] usb 4-1: Product: syz
[   84.716996][ T4341] usb 4-1: Manufacturer: syz
[   84.742061][ T4341] usb 4-1: SerialNumber: syz
[   84.761984][ T4341] usb 4-1: config 0 descriptor??
[   84.896498][ T4536] loop0: detected capacity change from 0 to 32768
[   84.995241][ T4536] XFS (loop0): Mounting V5 Filesystem
[   84.999215][ T4550] loop2: detected capacity change from 0 to 32768
[   85.048587][ T4341] usb-storage 4-1:0.0: USB Mass Storage device detected
[   85.075198][ T4550] JBD2: Invalid start block of journal: 21504
[   85.094577][ T4550] (syz.2.96,4550,1):ocfs2_journal_wipe:1154 ERROR: status = -22
[   85.105194][ T4550] (syz.2.96,4550,0):ocfs2_check_volume:2424 ERROR: status = -22
[   85.113571][ T4550] (syz.2.96,4550,0):ocfs2_check_volume:2493 ERROR: status = -22
[   85.121275][ T4550] (syz.2.96,4550,0):ocfs2_mount_volume:1824 ERROR: status = -22
[   85.142307][ T4550] (syz.2.96,4550,0):ocfs2_fill_super:1177 ERROR: status = -22
[   85.293175][ T4298] usb 4-1: USB disconnect, device number 3
[   85.349314][ T4536] XFS (loop0): Ending clean mount
[   85.410461][ T4181] XFS (loop0): Unmounting Filesystem
[   85.604020][ T4341] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   85.687041][ T4591] netlink: 'syz.0.109': attribute type 1 has an invalid length.
[   85.694908][ T4591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.702145][ T4591] IPv6: NLM_F_CREATE should be set when creating new route
[   86.012793][ T4341] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   86.026752][ T4341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.047984][ T4341] usb 2-1: config 0 descriptor??
[   86.097266][ T4341] cp210x 2-1:0.0: cp210x converter detected
[   86.125489][ T4298] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   86.258271][ T4622] loop2: detected capacity change from 0 to 256
[   86.326016][ T4341] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: 0
[   86.336088][ T4341] cp210x 2-1:0.0: querying part number failed
[   86.365800][ T4622] FAT-fs (loop2): Directory bread(block 64) failed
[   86.382659][ T4625] loop0: detected capacity change from 0 to 1024
[   86.390236][ T4341] usb 2-1: cp210x converter now attached to ttyUSB0
[   86.397005][ T4298] usb 4-1: Using ep0 maxpacket: 32
[   86.402516][ T4622] FAT-fs (loop2): Directory bread(block 65) failed
[   86.409702][ T4622] FAT-fs (loop2): Directory bread(block 66) failed
[   86.420629][ T4622] FAT-fs (loop2): Directory bread(block 67) failed
[   86.427913][ T4622] FAT-fs (loop2): Directory bread(block 68) failed
[   86.435200][ T4622] FAT-fs (loop2): Directory bread(block 69) failed
[   86.444157][ T4622] FAT-fs (loop2): Directory bread(block 70) failed
[   86.450861][ T4622] FAT-fs (loop2): Directory bread(block 71) failed
[   86.458275][ T4622] FAT-fs (loop2): Directory bread(block 72) failed
[   86.468936][ T4625] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   86.482775][ T4622] FAT-fs (loop2): Directory bread(block 73) failed
[   86.491530][ T4625] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 8192
[   86.513682][ T4298] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   86.528532][ T4298] usb 4-1: config 0 has no interface number 0
[   86.547629][ T4341] usb 2-1: USB disconnect, device number 5
[   86.583774][ T4341] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   86.603514][ T4341] cp210x 2-1:0.0: device disconnected
[   86.610518][ T4622] FAT-fs (loop2): Filesystem has been set read-only
[   86.629220][   T26] audit: type=1800 audit(1767275884.517:2): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.124" name="cgroup.kill" dev="loop2" ino=1048590 res=0 errno=0
[   86.656754][ T4622] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000616b)
[   86.741041][ T4630] loop0: detected capacity change from 0 to 16
[   86.765021][ T4298] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   86.776320][ T3157] cfg80211: failed to load regulatory.db
[   86.783981][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.792035][ T4298] usb 4-1: Product: syz
[   86.797368][ T4298] usb 4-1: Manufacturer: syz
[   86.802015][ T4298] usb 4-1: SerialNumber: syz
[   86.817609][ T4630] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version
[   86.867077][ T4298] usb 4-1: config 0 descriptor??
[   86.914024][ T4298] smsc95xx v2.0.0
[   87.265067][ T4626] loop4: detected capacity change from 0 to 32768
[   87.310283][ T4626] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.125 (4626)
[   87.384333][ T4643] loop2: detected capacity change from 0 to 1024
[   87.424226][ T4645] bridge0: port 3(syz_tun) entered blocking state
[   87.430965][ T4645] bridge0: port 3(syz_tun) entered disabled state
[   87.439063][ T4626] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   87.452521][ T4646] overlayfs: overlapping lowerdir path
[   87.463099][ T4626] BTRFS info (device loop4): using free space tree
[   87.481341][ T4626] BTRFS info (device loop4): has skinny extents
[   87.494560][ T4645] device syz_tun entered promiscuous mode
[   87.502969][ T4643] EXT4-fs (loop2): Ignoring removed nobh option
[   87.509643][ T4643] EXT4-fs (loop2): Ignoring removed bh option
[   87.524164][ T4645] bridge0: port 3(syz_tun) entered blocking state
[   87.526587][ T4643] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   87.531208][ T4645] bridge0: port 3(syz_tun) entered forwarding state
[   87.663590][ T4643] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,data_err=abort,barrier=0x0000000000000007,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback.
[   87.862935][ T4626] BTRFS info (device loop4): enabling ssd optimizations
[   88.213546][ T4298] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[   88.244988][ T4298] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   88.288602][ T3157] Bluetooth: hci4: command 0x0406 tx timeout
[   88.312985][ T4298] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   88.331453][ T4298] smsc95xx: probe of 4-1:0.67 failed with error -71
[   88.407246][ T4298] usb 4-1: USB disconnect, device number 4
[   88.492511][ T4673] loop0: detected capacity change from 0 to 32768
[   88.509192][ T4691] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   88.780248][ T4673] XFS (loop0): Mounting V5 Filesystem
[   88.904670][ T4712] netlink: 80 bytes leftover after parsing attributes in process `syz.3.148'.
[   88.933807][ T4723] syz.1.150 uses obsolete (PF_INET,SOCK_PACKET)
[   88.969013][ T4673] XFS (loop0): Ending clean mount
[   89.013458][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.021293][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.115087][   T26] audit: type=1800 audit(1767275887.007:3): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.137" name="bus" dev="loop0" ino=6153 res=0 errno=0
[   89.227345][ T4181] XFS (loop0): Unmounting Filesystem
[   89.323204][ T4730] loop1: detected capacity change from 0 to 2048
[   89.354104][ T4734] raw_sendmsg: syz.4.156 forgot to set AF_INET. Fix it!
[   89.408193][ T4730] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   89.428538][ T4730] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.577306][ T4730] fs-verity: sha512 using implementation "sha512-avx2"
[   89.746557][ T4725] loop2: detected capacity change from 0 to 32768
[   89.878430][ T4725] XFS (loop2): Mounting V5 Filesystem
[   90.074120][ T4725] XFS (loop2): Ending clean mount
[   90.104636][ T4725] XFS (loop2): Quotacheck needed: Please wait.
[   90.131680][ T4730] fs-verity (loop1, inode 13): Error -4 building Merkle tree
[   90.218166][ T4725] XFS (loop2): Quotacheck: Done.
[   90.283955][ T4702] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   90.356900][ T4183] XFS (loop2): Unmounting Filesystem
[   90.381800][ T4771] loop1: detected capacity change from 0 to 256
[   90.494274][ T4771] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   90.553881][ T4702] usb 1-1: Using ep0 maxpacket: 16
[   90.578824][ T4771] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   90.618854][ T4771] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   90.633043][ T4771] UDF-fs: Scanning with blocksize 512 failed
[   90.650409][ T4771] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   90.692755][ T4779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.170'.
[   90.707880][ T4702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.732661][ T4702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.753250][ T4702] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[   90.782620][ T4702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.794900][ T4771] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[   90.817378][ T4702] usb 1-1: config 0 descriptor??
[   90.989088][ T4787] loop3: detected capacity change from 0 to 512
[   91.044287][ T4789] tmpfs: Bad value for 'nr_inodes'
[   91.192383][ T4787] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   91.238397][ T4787] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.275877][ T4702] hid-generic 0003:1532:011B.0005: unknown main item tag 0x0
[   91.315090][ T4702] hid-generic 0003:1532:011B.0005: unknown main item tag 0x0
[   91.335344][ T4702] hid-generic 0003:1532:011B.0005: unknown main item tag 0x0
[   91.370459][ T4702] hid-generic 0003:1532:011B.0005: unknown main item tag 0x0
[   91.402822][ T4702] hid-generic 0003:1532:011B.0005: unknown main item tag 0x0
[   91.411896][ T4810] sock: sock_timestamping_bind_phc: sock not bind to device
[   91.438565][ T4702] hid-generic 0003:1532:011B.0005: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.0-1/input0
[   91.548404][ T4814] loop1: detected capacity change from 0 to 128
[   91.649639][ T4814] omfs: Invalid superblock (7b3184f9)
[   92.102113][ T4800] loop2: detected capacity change from 0 to 40427
[   92.110515][ T4836] loop1: detected capacity change from 0 to 2048
[   92.141657][ T4800] F2FS-fs (loop2): Found nat_bits in checkpoint
[   92.166950][ T4836] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2)
[   92.175839][ T4298] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   92.262629][ T1108] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   92.272106][ T4800] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   92.454902][ T4298] usb 4-1: Using ep0 maxpacket: 32
[   92.474158][ T4183] attempt to access beyond end of device
[   92.474158][ T4183] loop2: rw=2049, want=45104, limit=40427
[   92.583028][ T1108] usb 5-1: not running at top speed; connect to a high speed hub
[   92.641676][ T4850] loop1: detected capacity change from 0 to 2048
[   92.673030][ T1108] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   92.690193][ T1108] usb 5-1: config 1 has no interface number 1
[   92.700995][ T1108] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   92.763773][ T4850] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,noblock_validity,errors=remount-ro,. Quota mode: writeback.
[   92.783697][ T4850] EXT4-fs error (device loop1): ext4_ext_precache:626: inode #2: comm syz.1.197: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   92.810100][ T4850] EXT4-fs (loop1): Remounting filesystem read-only
[   92.903743][ T1108] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   92.914132][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.922257][ T1108] usb 5-1: Product: syz
[   92.927595][ T1108] usb 5-1: Manufacturer: syz
[   92.933080][ T1108] usb 5-1: SerialNumber: syz
[   92.952981][ T4298] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[   92.971210][ T1324] usb 1-1: USB disconnect, device number 4
[   92.983128][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.025577][ T4298] usb 4-1: config 0 descriptor??
[   93.095053][ T4298] gspca_main: 0ac8:0321 too many config
[   93.267794][ T4865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.202'.
[   93.279179][ T4865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.202'.
[   93.303708][ T4298] usb 4-1: USB disconnect, device number 5
[   93.322977][ T1108] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc
[   93.415794][ T1108] usb 5-1: USB disconnect, device number 2
[   93.422833][ T1324] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   93.710820][ T4301] udevd[4301]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   93.788789][ T4868] loop1: detected capacity change from 0 to 32768
[   93.829627][ T4883] kernel read not supported for file / 
 (pid: 4883 comm: syz.2.209)
[   93.842900][ T1324] usb 1-1: unable to get BOS descriptor or descriptor too short
[   93.863116][ T4868] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.203 (4868)
[   93.891012][ T1324] usb 1-1: not running at top speed; connect to a high speed hub
[   93.919427][   T26] audit: type=1800 audit(1767275891.807:4): pid=4883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.209" name=2001 dev="mqueue" ino=33699 res=0 errno=0
[   93.961588][ T4868] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   93.982973][ T1324] usb 1-1: config 2 has an invalid interface number: 239 but max is 0
[   93.991218][ T1324] usb 1-1: config 2 has no interface number 0
[   94.015655][ T4868] BTRFS info (device loop1): setting nodatacow, compression disabled
[   94.042694][ T1324] usb 1-1: config 2 interface 239 has no altsetting 0
[   94.061324][ T4868] BTRFS info (device loop1): turning on flush-on-commit
[   94.098871][ T4868] BTRFS info (device loop1): using free space tree
[   94.131310][ T4868] BTRFS info (device loop1): has skinny extents
[   94.232745][ T1324] usb 1-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=bf.40
[   94.263054][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.271195][ T1324] usb 1-1: Product: syz
[   94.278352][ T1324] usb 1-1: Manufacturer: syz
[   94.286506][ T1324] usb 1-1: SerialNumber: syz
[   94.477983][ T4868] BTRFS info (device loop1): enabling ssd optimizations
[   94.613528][ T1324] usb 1-1: bad CDC descriptors
[   94.628265][ T1324] usb 1-1: USB disconnect, device number 5
[   94.644837][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   94.663045][ T4868] loop1: detected capacity change from 32768 to 64
[   94.684536][ T4927] attempt to access beyond end of device
[   94.684536][ T4927] loop1: rw=2049, want=10328, limit=64
[   94.706747][ T4927] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[   94.812764][   T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   94.882774][ T1108] usb 5-1: Using ep0 maxpacket: 8
[   94.924397][  T154] attempt to access beyond end of device
[   94.924397][  T154] loop1: rw=6145, want=10248, limit=64
[   94.936005][  T154] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[   94.962501][ T4182] BTRFS: error (device loop1) in __btrfs_run_delayed_items:1089: errno=-5 IO failure
[   94.980287][ T4182] BTRFS info (device loop1): forced readonly
[   94.987142][ T4182] BTRFS warning (device loop1): Skipping commit of aborted transaction.
[   94.995845][ T4182] BTRFS: error (device loop1) in cleanup_transaction:2020: errno=-5 IO failure
[   95.006057][ T1108] usb 5-1: config 0 has an invalid interface number: 130 but max is 0
[   95.016250][ T1108] usb 5-1: config 0 has no interface number 0
[   95.062925][   T13] usb 3-1: Using ep0 maxpacket: 16
[   95.172885][ T1108] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56
[   95.182102][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.190834][   T13] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.211063][   T13] usb 3-1: config 0 interface 0 has no altsetting 0
[   95.233670][ T1108] usb 5-1: Product: syz
[   95.237914][ T1108] usb 5-1: Manufacturer: syz
[   95.249023][   T13] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   95.268731][ T1108] usb 5-1: SerialNumber: syz
[   95.281925][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.298049][ T1108] usb 5-1: config 0 descriptor??
[   95.328335][   T13] usb 3-1: config 0 descriptor??
[   95.383961][ T1108] as10x_usb: device has been detected
[   95.390071][ T1108] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[   95.413344][ T4946] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[   95.460544][ T1108] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))...
[   95.534228][ T1108] as10x_usb: error during firmware upload part1
[   95.549489][ T1108] Registered device PCTV Systems picoStick (74e)
[   95.611954][ T4949] loop3: detected capacity change from 0 to 2048
[   95.629059][ T4695] usb 5-1: USB disconnect, device number 3
[   95.680942][ T4695] Unregistered device PCTV Systems picoStick (74e)
[   95.686504][ T4949] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   95.714408][ T4695] as10x_usb: device has been disconnected
[   95.782424][ T4954] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   95.835776][   T13] hid-generic 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[   96.039523][ T4960] loop0: detected capacity change from 0 to 2048
[   96.128499][ T4960] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[   96.228580][   T13] usb 3-1: USB disconnect, device number 3
[   96.244210][ T4960] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,mblk_io_submit,i_version,,errors=continue. Quota mode: none.
[   96.437300][ T4975] device syzkaller0 entered promiscuous mode
[   96.742802][ T1108] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   96.864433][ T4991] loop2: detected capacity change from 0 to 16
[   96.890832][ T4994] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   96.913102][ T4991] erofs: (device loop2): mounted with root inode @ nid 36.
[   96.962106][ T4991] attempt to access beyond end of device
[   96.962106][ T4991] loop2: rw=0, want=34359739352, limit=16
[   97.005451][   T26] audit: type=1800 audit(1767275894.897:5): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.246" name="file0" dev="overlay" ino=34858 res=0 errno=0
[   97.024303][ T4991] attempt to access beyond end of device
[   97.024303][ T4991] loop2: rw=524288, want=34359739344, limit=16
[   97.049427][ T4991] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[   97.067731][ T4991] attempt to access beyond end of device
[   97.067731][ T4991] loop2: rw=524288, want=34359740336, limit=16
[   97.102871][ T1108] usb 4-1: config 0 has an invalid interface number: 93 but max is 0
[   97.111058][ T1108] usb 4-1: config 0 has no interface number 0
[   97.118383][ T5000] loop4: detected capacity change from 0 to 128
[   97.153857][ T5000] FAT-fs (loop4): Directory bread(block 3236) failed
[   97.161139][ T5000] FAT-fs (loop4): Directory bread(block 3237) failed
[   97.168482][ T5000] FAT-fs (loop4): Directory bread(block 3238) failed
[   97.176143][ T5000] FAT-fs (loop4): Directory bread(block 3239) failed
[   97.183274][ T5000] FAT-fs (loop4): Directory bread(block 3240) failed
[   97.190021][ T5000] FAT-fs (loop4): Directory bread(block 3241) failed
[   97.204128][ T5000] FAT-fs (loop4): Directory bread(block 3242) failed
[   97.210995][ T5000] FAT-fs (loop4): Directory bread(block 3243) failed
[   97.294095][ T1108] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[   97.302822][ T4695] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   97.317053][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.336402][ T1108] usb 4-1: Product: syz
[   97.340903][ T1108] usb 4-1: Manufacturer: syz
[   97.350818][ T1108] usb 4-1: SerialNumber: syz
[   97.360285][ T1108] usb 4-1: config 0 descriptor??
[   97.469802][ T5006] netlink: 32 bytes leftover after parsing attributes in process `syz.4.251'.
[   97.572945][ T4695] usb 2-1: Using ep0 maxpacket: 8
[   97.622916][ T1108] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[   97.673090][ T1108] dvb-usb: will use the device's hardware PID filter (table count: 32).
[   97.707261][ T1108] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[   97.729856][ T4695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   97.732992][ T1108] usb 4-1: media controller created
[   97.749476][ T5002] loop2: detected capacity change from 0 to 32768
[   97.758391][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   97.773853][ T4695] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   97.803958][ T4695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.833049][ T5002] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.249 (5002)
[   97.857903][ T4695] usb 2-1: config 0 descriptor??
[   97.884896][ T5002] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   97.904607][ T1108] DVB: Unable to find symbol dib7000p_attach()
[   97.911311][ T1108] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[   97.937999][ T5002] BTRFS info (device loop2): using free space tree
[   97.949806][ T1108] dvb-usb: will use the device's hardware PID filter (table count: 32).
[   97.974907][ T5002] BTRFS info (device loop2): has skinny extents
[   97.988286][ T5019] loop0: detected capacity change from 0 to 1024
[   98.013338][ T1108] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[   98.028592][ T1108] usb 4-1: media controller created
[   98.039776][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   98.051626][ T1108] dib0700: the master dib7090 has to be initialized first
[   98.059323][ T5002] BTRFS info (device loop2): enabling ssd optimizations
[   98.070308][ T1108] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[   98.142728][ T4257] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   98.153657][ T4695] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   98.252671][ T1108] rc_core: IR keymap rc-dib0700-rc5 not found
[   98.268877][ T1108] Registered IR keymap rc-empty
[   98.301151][ T1108] dvb-usb: could not initialize remote control.
[   98.317367][ T1108] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[   98.392731][ T4257] usb 5-1: Using ep0 maxpacket: 16
[   98.528340][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   98.552667][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   98.573926][ T4257] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   98.588868][   T21] usb 2-1: USB disconnect, device number 6
[   98.594795][ T4257] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[   98.594826][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.599589][ T4257] usb 5-1: config 0 descriptor??
[   98.642144][ T4702] usb 4-1: USB disconnect, device number 6
[   98.656778][ T5017] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   98.723411][ T4257] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7
[   98.779103][ T4702] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[   98.885737][ T5056] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   98.913982][ T4695] usb 5-1: USB disconnect, device number 4
[   98.932891][ T3544] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[   99.463732][ T5086] fuse: Bad value for 'fd'
[   99.513010][ T5086] 9pnet: p9_fd_create_tcp (5086): problem connecting socket to 127.0.0.1
[   99.579513][ T5090] loop4: detected capacity change from 0 to 2048
[   99.758339][ T5100] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.836335][   T26] audit: type=1800 audit(1767275897.727:6): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.275" name="bus" dev="loop4" ino=2097152 res=0 errno=0
[   99.930335][ T5090] attempt to access beyond end of device
[   99.930335][ T5090] loop4: rw=0, want=281474976710724, limit=2048
[   99.964469][ T5090] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  100.013167][ T5101] loop_set_status: loop4 () has still dirty pages (nrpages=2)
[  100.028940][ T5090] attempt to access beyond end of device
[  100.028940][ T5090] loop4: rw=0, want=281474976710724, limit=2048
[  100.062808][ T5090] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  100.105449][ T5090] NILFS (loop4): error -5 truncating bmap (ino=16)
[  100.958732][ T5122] loop2: detected capacity change from 0 to 32768
[  100.996267][ T5122] (syz.2.289,5122,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  101.023765][ T5122] (syz.2.289,5122,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  101.040049][ T5128] loop0: detected capacity change from 0 to 32768
[  101.072946][ T5141] loop1: detected capacity change from 0 to 4096
[  101.122631][ T5122] JBD2: Ignoring recovery information on journal
[  101.259068][ T5122] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  101.266146][ T5128] ERROR: (device loop0): dbAllocAG: unable to allocate blocks
[  101.266146][ T5128] 
[  101.428068][ T4183] ocfs2: Unmounting device (7,2) on (node local)
[  101.775231][ T5157] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  101.872781][ T4702] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  102.172759][ T4702] usb 4-1: Using ep0 maxpacket: 32
[  102.260099][ T5185] loop2: detected capacity change from 0 to 128
[  102.326314][   T26] audit: type=1800 audit(1767275900.217:7): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.317" name="bus" dev="loop2" ino=1048591 res=0 errno=0
[  102.346796][    C1] vkms_vblank_simulate: vblank timer overrun
[  102.409020][   T26] audit: type=1800 audit(1767275900.257:8): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.317" name="bus" dev="loop2" ino=1048591 res=0 errno=0
[  102.488033][ T5197] program syz.1.321 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.502899][ T4702] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  102.519906][ T4702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.540779][ T4702] usb 4-1: Product: syz
[  102.557782][ T4702] usb 4-1: Manufacturer: syz
[  102.568900][ T4702] usb 4-1: SerialNumber: syz
[  102.574518][ T5201] netlink: 104 bytes leftover after parsing attributes in process `syz.0.323'.
[  102.589526][ T4702] usb 4-1: config 0 descriptor??
[  102.645062][ T4702] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  103.295266][    T9] Bluetooth: hci5: Frame reassembly failed (-84)
[  103.773945][ T5250] netlink: 'syz.2.345': attribute type 4 has an invalid length.
[  104.022632][   T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  104.179643][ T5253] loop2: detected capacity change from 0 to 32768
[  104.182466][ T5267] capability: warning: `syz.4.353' uses deprecated v2 capabilities in a way that may be insecure
[  104.204785][ T4298] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  104.219982][ T5253] JBD2: Ignoring recovery information on journal
[  104.240747][ T4298] Bluetooth: hci3: Injecting HCI hardware error event
[  104.269540][ T4194] Bluetooth: hci3: hardware error 0x00
[  104.301435][ T5273] netlink: 104 bytes leftover after parsing attributes in process `syz.4.355'.
[  104.311902][   T21] usb 1-1: Using ep0 maxpacket: 8
[  104.376544][ T5253] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  104.415498][ T4702] gspca_stk1135: reg_w 0x200 err -71
[  104.427869][ T4702] gspca_stk1135: serial bus timeout: status=0x00
[  104.438241][ T4702] gspca_stk1135: Sensor write failed
[  104.450850][ T4702] gspca_stk1135: serial bus timeout: status=0x00
[  104.460459][ T4702] gspca_stk1135: Sensor write failed
[  104.468483][ T4702] gspca_stk1135: serial bus timeout: status=0x00
[  104.475638][ T4702] gspca_stk1135: Sensor read failed
[  104.480945][ T4702] gspca_stk1135: serial bus timeout: status=0x00
[  104.487607][ T4702] gspca_stk1135: Sensor read failed
[  104.493119][ T4702] gspca_stk1135: Detected sensor type unknown (0x0)
[  104.500058][ T4702] gspca_stk1135: serial bus timeout: status=0x00
[  104.510757][ T4702] gspca_stk1135: Sensor read failed
[  104.516691][ T4702] gspca_stk1135: serial bus timeout: status=0x00
[  104.523677][ T4702] gspca_stk1135: Sensor read failed
[  104.528949][ T4702] gspca_stk1135: serial bus timeout: status=0x00
[  104.539866][ T4702] gspca_stk1135: Sensor write failed
[  104.545567][ T4702] gspca_stk1135: serial bus timeout: status=0x00
[  104.552199][ T4702] gspca_stk1135: Sensor write failed
[  104.558343][ T4702] stk1135: probe of 4-1:0.0 failed with error -71
[  104.568631][ T5279] (syz.2.347,5279,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount
[  104.580191][ T4702] usb 4-1: USB disconnect, device number 8
[  104.602958][   T21] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  104.621767][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.636313][   T21] usb 1-1: Product: syz
[  104.640668][ T5253] loop_set_status: loop2 () has still dirty pages (nrpages=6)
[  104.640677][   T21] usb 1-1: Manufacturer: syz
[  104.640695][   T21] usb 1-1: SerialNumber: syz
[  104.670286][   T21] usb 1-1: config 0 descriptor??
[  104.716448][   T21] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  104.739865][ T4183] ocfs2: Unmounting device (7,2) on (node local)
[  104.961788][ T5285] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  104.972188][ T5285] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  105.002255][ T5288] loop3: detected capacity change from 0 to 512
[  105.050239][ T5288] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,block_validity,,errors=continue. Quota mode: none.
[  105.523454][ T4298] Bluetooth: hci5: command 0x1003 tx timeout
[  105.529870][ T4192] Bluetooth: hci5: sending frame failed (-49)
[  105.556824][ T5300] loop3: detected capacity change from 0 to 256
[  105.603928][ T5300] exfat: Unknown parameter 'zero_size_dir'
[  106.055472][ T4192] Bluetooth: hci3: unexpected event for opcode 0x1405
[  106.358134][ T5329] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  106.544726][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.641194][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.662695][ T4192] Bluetooth: hci3: unexpected event for opcode 0x2016
[  107.057206][ T5326] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.106152][ T5326] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.571616][ T5042] Bluetooth: hci5: command 0x1001 tx timeout
[  107.578325][ T4192] Bluetooth: hci5: sending frame failed (-49)
[  107.622458][ T5326] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.631586][ T5326] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.642307][ T5326] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.652091][ T5326] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.376284][ T5367] loop3: detected capacity change from 0 to 1024
[  108.442814][ T4688] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  108.468280][  T154] hfsplus: b-tree write err: -5, ino 4
[  108.591682][ T5375] loop3: detected capacity change from 0 to 1024
[  108.598328][   T21] gspca_sonixj: reg_w1 err -71
[  108.612639][   T21] sonixj: probe of 1-1:0.0 failed with error -71
[  108.631193][   T21] usb 1-1: USB disconnect, device number 6
[  108.753112][ T4688] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  108.770411][    T9] hfsplus: b-tree write err: -5, ino 8
[  108.852342][ T4688] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  108.882251][ T4688] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  108.922804][ T4688] usb 3-1: config 64 interface 0 has no altsetting 0
[  109.003159][ T4688] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  109.022192][ T5390] loop3: detected capacity change from 0 to 1024
[  109.031007][ T4688] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  109.052824][ T4688] usb 3-1: config 64 interface 0 has no altsetting 0
[  109.175202][ T4688] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  109.192714][ T4688] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  109.212647][ T4688] usb 3-1: config 64 interface 0 has no altsetting 0
[  109.322881][ T4688] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  109.335059][ T5399] loop3: detected capacity change from 0 to 2048
[  109.342226][ T4688] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  109.354270][ T4688] usb 3-1: config 64 interface 0 has no altsetting 0
[  109.386944][ T4301]  loop3: p3 < > p4 < >
[  109.391334][ T4301] loop3: partition table partially beyond EOD, truncated
[  109.414735][ T4301] loop3: p3 start 4284289 is beyond EOD, truncated
[  109.443035][ T4688] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  109.463582][ T4688] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  109.474706][ T5386] loop0: detected capacity change from 0 to 32768
[  109.485499][ T5399]  loop3: p3 < > p4 < >
[  109.489754][ T5399] loop3: partition table partially beyond EOD, truncated
[  109.499017][ T5399] loop3: p3 start 4284289 is beyond EOD, truncated
[  109.511367][ T4688] usb 3-1: config 64 interface 0 has no altsetting 0
[  109.547900][ T5386] XFS (loop0): Mounting V5 Filesystem
[  109.612903][ T4688] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  109.622309][ T4688] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  109.634168][ T4688] usb 3-1: config 64 interface 0 has no altsetting 0
[  109.642771][ T4298] Bluetooth: hci5: command 0x1009 tx timeout
[  109.659502][ T5386] XFS (loop0): Ending clean mount
[  109.732974][ T4688] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  109.752445][ T4688] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  109.764071][ T4688] usb 3-1: config 64 interface 0 has no altsetting 0
[  109.812858][ T5041] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  109.858198][ T4688] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  109.872642][ T4688] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  109.903768][ T4688] usb 3-1: config 64 interface 0 has no altsetting 0
[  110.055768][ T5041] usb 4-1: Using ep0 maxpacket: 16
[  110.093709][ T4688] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  110.118692][ T4688] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  110.127897][ T4688] usb 3-1: Product: syz
[  110.132284][ T4688] usb 3-1: Manufacturer: syz
[  110.137409][ T4688] usb 3-1: SerialNumber: syz
[  110.172895][ T5041] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8288, setting to 64
[  110.211837][ T4688] yurex 3-1:64.0: USB YUREX device now attached to Yurex #0
[  110.251899][ T4181] XFS (loop0): Unmounting Filesystem
[  110.348094][ T5041] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  110.364837][ T5041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.387187][ T5041] usb 4-1: Product: syz
[  110.391429][ T5041] usb 4-1: Manufacturer: syz
[  110.403132][ T5041] usb 4-1: SerialNumber: syz
[  110.419539][ T5041] usb 4-1: config 0 descriptor??
[  110.486413][ T5420] netlink: 60 bytes leftover after parsing attributes in process `syz.4.416'.
[  110.496483][ T5420] netlink: 60 bytes leftover after parsing attributes in process `syz.4.416'.
[  110.509232][ T5418] netlink: 60 bytes leftover after parsing attributes in process `syz.4.416'.
[  110.523142][ T5420] netlink: 60 bytes leftover after parsing attributes in process `syz.4.416'.
[  110.869707][ T5428] loop3: detected capacity change from 0 to 2048
[  110.911908][ T5399] kvm: emulating exchange as write
[  110.949782][ T4688] usb 4-1: USB disconnect, device number 9
[  111.452614][    C1] usb 3-1: yurex_control_callback - control failed: -2
[  111.499808][ T5042] usb 3-1: USB disconnect, device number 4
[  111.524195][ T5042] yurex 3-1:64.0: USB YUREX #0 now disconnected
[  111.587127][ T5457] loop2: detected capacity change from 0 to 512
[  111.634679][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'.
[  111.660408][ T5457] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  111.689759][ T5461] 8021q: adding VLAN 0 to HW filter on device batadv1
[  111.770382][ T5457] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #17: comm syz.2.432: inode has both inline data and extents flags
[  111.840022][ T5453] loop0: detected capacity change from 0 to 32768
[  111.855644][ T5457] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.432: couldn't read orphan inode 17 (err -117)
[  111.876917][ T5457] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: writeback.
[  111.987836][ T5453] XFS (loop0): Mounting V5 Filesystem
[  112.107518][ T5453] XFS (loop0): Ending clean mount
[  112.127228][ T5453] XFS (loop0): Quotacheck needed: Please wait.
[  112.209960][ T5453] XFS (loop0): Quotacheck: Done.
[  112.357494][ T4181] XFS (loop0): Unmounting Filesystem
[  112.743909][ T5498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'.
[  112.879431][ T5502] loop0: detected capacity change from 0 to 4096
[  112.921404][ T5502] ntfs3: loop0: ino=3, Correct links count -> 2.
[  113.041686][ T5494] loop2: detected capacity change from 0 to 32768
[  113.179964][ T5494] XFS (loop2): Mounting V5 Filesystem
[  113.357258][ T5494] XFS (loop2): Ending clean mount
[  113.630642][ T4183] XFS (loop2): Unmounting Filesystem
[  113.646162][ T5525] netlink: 'syz.0.454': attribute type 10 has an invalid length.
[  113.737682][ T5525] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.745177][ T5525] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.819066][ T5525] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.826356][ T5525] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.835149][ T5525] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.842328][ T5525] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.874423][ T5525] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  113.905152][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'.
[  113.928193][ T5526] device bridge_slave_1 left promiscuous mode
[  113.938335][ T5526] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.960252][ T5526] device bridge_slave_0 left promiscuous mode
[  113.968102][ T5526] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.039653][ T5526] bond0: (slave bridge0): Releasing backup interface
[  114.105494][ T5529] bridge0: port 3(syz_tun) entered blocking state
[  114.144086][ T5529] bridge0: port 3(syz_tun) entered disabled state
[  114.164095][ T5529] device syz_tun entered promiscuous mode
[  114.172500][ T5529] bridge0: port 3(syz_tun) entered blocking state
[  114.179215][ T5529] bridge0: port 3(syz_tun) entered forwarding state
[  114.491587][ T5552] loop1: detected capacity change from 0 to 1024
[  114.531902][ T5552] EXT4-fs (loop1): Ignoring removed orlov option
[  114.551222][ T5552] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  114.614594][ T5552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002]
[  114.638354][ T5552] System zones: 0-1, 3-36
[  114.657388][ T5552] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000002,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  115.145187][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'.
[  115.209115][ T5578] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  115.230228][ T5578] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  115.288195][ T5578] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  115.317526][ T5578] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  115.761839][ T5599] loop2: detected capacity change from 0 to 4096
[  115.933367][ T5608] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  116.361757][ T5629] loop2: detected capacity change from 0 to 128
[  116.464647][ T5591] loop1: detected capacity change from 0 to 32768
[  116.476891][ T5629] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.496286][ T5629] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  116.505273][ T5632] xt_policy: too many policy elements
[  116.524208][ T5591] XFS: attr2 mount option is deprecated.
[  116.530701][ T5591] XFS (loop1): invalid log iosize: 0 [not 12-30]
[  116.630441][ T5643] loop3: detected capacity change from 0 to 1024
[  116.920463][  T155] hfsplus: b-tree write err: -5, ino 8
[  117.102815][ T4689] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  117.318796][ T5670] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  117.362639][ T4689] usb 3-1: Using ep0 maxpacket: 16
[  117.385260][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  117.420290][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  117.444014][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  117.461453][ T5672] bond0: (slave bond_slave_0): Releasing backup interface
[  117.497221][ T5672] bond0: (slave bond_slave_1): Releasing backup interface
[  117.498829][ T4689] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  117.628659][ T5672] team0: Port device team_slave_0 removed
[  117.656432][ T5672] team0: Port device team_slave_1 removed
[  117.683624][ T5672] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.691188][ T5672] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.715072][ T5672] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.742934][ T4689] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  117.756662][ T4689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.768319][ T5672] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.786238][ T4689] usb 3-1: Product: syz
[  117.795158][ T4689] usb 3-1: Manufacturer: syz
[  117.805559][ T4689] usb 3-1: SerialNumber: syz
[  117.819655][ T4689] usb 3-1: config 0 descriptor??
[  117.857282][ T5658] loop3: detected capacity change from 0 to 32768
[  117.891263][ T5673] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.927985][ T5673] bond0: (slave caif0): The slave device specified does not support setting the MAC address
[  117.950302][ T5673] bond0: (slave caif0): Error -95 calling set_mac_address
[  117.969056][ T5658] XFS (loop3): Mounting V5 Filesystem
[  118.029610][ T5675] device bond1 entered promiscuous mode
[  118.082359][ T5658] XFS (loop3): Ending clean mount
[  118.099935][ T5675] 8021q: adding VLAN 0 to HW filter on device bond1
[  118.337892][ T5692] loop0: detected capacity change from 0 to 1024
[  118.805824][ T4188] XFS (loop3): Unmounting Filesystem
[  118.869345][ T5712] loop1: detected capacity change from 0 to 4096
[  119.174971][ T5730] x_tables: duplicate underflow at hook 2
[  119.208455][ T5728] loop0: detected capacity change from 0 to 2048
[  119.279697][ T5728] NILFS (loop0): invalid segment: Magic number mismatch
[  119.332615][ T5728] NILFS (loop0): trying rollback from an earlier position
[  119.370423][ T5728] NILFS (loop0): recovery complete
[  119.422127][ T5734] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.861530][ T5041] usb 3-1: USB disconnect, device number 5
[  120.262648][ T4689] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  120.444367][ T5749] loop3: detected capacity change from 0 to 32768
[  120.483297][ T5749] XFS: ikeep mount option is deprecated.
[  120.652820][ T4689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.666910][ T4689] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  120.676725][ T4689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.700269][ T4689] usb 1-1: config 0 descriptor??
[  120.728689][ T5749] XFS (loop3): Mounting V5 Filesystem
[  120.782827][ T5766] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  120.789950][ T5766] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  120.804656][ T5766] vhci_hcd vhci_hcd.0: Device attached
[  120.847634][ T5749] XFS (loop3): Ending clean mount
[  120.865296][ T5749] XFS (loop3): Quotacheck needed: Please wait.
[  120.990317][ T5749] XFS (loop3): Quotacheck: Done.
[  121.012767][ T4688] vhci_hcd: vhci_device speed not set
[  121.052780][   T21] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[  121.093080][ T4688] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  121.120649][ T4188] XFS (loop3): Unmounting Filesystem
[  121.204422][ T4689] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  121.231327][ T4689] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0007/input/input10
[  121.418075][ T4689] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  121.444776][    C1] keyboard: can't emulate rawmode for keycode 240
[  121.456297][   T21] usb 2-1: config 0 has no interfaces?
[  121.462226][   T21] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  121.480298][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.488599][    C1] keyboard: can't emulate rawmode for keycode 240
[  121.512870][    C1] keyboard: can't emulate rawmode for keycode 240
[  121.534619][    C1] keyboard: can't emulate rawmode for keycode 240
[  121.541124][    C1] keyboard: can't emulate rawmode for keycode 240
[  121.547680][    C1] keyboard: can't emulate rawmode for keycode 240
[  121.554147][    C1] keyboard: can't emulate rawmode for keycode 240
[  121.572820][    C1] keyboard: can't emulate rawmode for keycode 240
[  121.579462][    C1] keyboard: can't emulate rawmode for keycode 240
[  121.604012][    C1] keyboard: can't emulate rawmode for keycode 240
[  121.613673][   T21] usb 2-1: config 0 descriptor??
[  121.859433][   T21] usb 2-1: USB disconnect, device number 7
[  121.869401][ T5770] vhci_hcd: connection reset by peer
[  121.884239][    T9] vhci_hcd: stop threads
[  121.889861][    T9] vhci_hcd: release socket
[  121.914882][    T9] vhci_hcd: disconnect device
[  121.934825][ T4688] vhci_hcd: vhci_device speed not set
[  122.459070][ T5810] loop3: detected capacity change from 0 to 64
[  122.932872][ T4688] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  122.948001][ T4688] Bluetooth: hci1: Injecting HCI hardware error event
[  122.975164][ T4194] Bluetooth: hci1: hardware error 0x00
[  123.063327][ T5041] usb 1-1: USB disconnect, device number 7
[  123.122334][ T5835] xt_CT: You must specify a L4 protocol and not use inversions on it
[  123.530643][ T5861] xt_CT: You must specify a L4 protocol and not use inversions on it
[  123.915783][ T5881] netlink: 'syz.2.603': attribute type 21 has an invalid length.
[  123.962743][ T5881] netlink: 156 bytes leftover after parsing attributes in process `syz.2.603'.
[  124.053769][ T5881] netlink: 'syz.2.603': attribute type 21 has an invalid length.
[  124.086882][ T5881] netlink: 6 bytes leftover after parsing attributes in process `syz.2.603'.
[  124.427985][ T5917] loop3: detected capacity change from 0 to 164
[  124.522888][ T4689] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  124.540142][ T5917] iso9660: Corrupted directory entry in block 4 of inode 1792
[  124.662895][ T4692] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  124.888279][ T5938] loop3: detected capacity change from 0 to 512
[  124.942948][ T5938] EXT4-fs (loop3): Unrecognized mount option "dax=inode"errors=continue" or missing value
[  124.943752][ T4692] usb 1-1: Using ep0 maxpacket: 8
[  124.958678][ T4689] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  124.975788][ T4689] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  124.995826][ T4689] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  125.143094][ T4689] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  125.143128][ T4689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  125.143150][ T4689] usb 3-1: SerialNumber: syz
[  125.144053][ T4692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.144074][ T4692] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  125.144113][ T4692] usb 1-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=29.ac
[  125.144138][ T4692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.146918][ T4692] usb 1-1: config 0 descriptor??
[  125.209251][ T4692] qmi_wwan: probe of 1-1:0.0 failed with error -22
[  125.412218][ T4688] usb 1-1: USB disconnect, device number 8
[  125.413257][ T5041] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  125.468616][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'.
[  125.494703][ T4689] usbtest 3-1:1.0: Linux user mode ISO test driver
[  125.501290][ T4689] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  125.510125][ T5946] fuse: Bad value for 'fd'
[  125.527517][ T4689] usb 3-1: USB disconnect, device number 6
[  125.672833][ T5041] usb 4-1: Using ep0 maxpacket: 16
[  125.793063][ T5041] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  125.801166][ T5041] usb 4-1: config 0 has no interface number 0
[  125.812636][ T5041] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 108, changing to 10
[  125.824828][ T5041] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 26478, setting to 1024
[  125.953830][ T5041] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  125.987821][ T5041] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  126.006590][ T5041] usb 4-1: Product: syz
[  126.010853][ T5041] usb 4-1: SerialNumber: syz
[  126.035697][ T5041] usb 4-1: config 0 descriptor??
[  126.058921][ T5938] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  126.096009][ T5041] cm109 4-1:0.8: invalid payload size 1024, expected 4
[  126.117597][ T5041] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input11
[  126.342876][    C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71
[  126.526119][ T5042] usb 4-1: USB disconnect, device number 10
[  126.542865][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  126.549895][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  126.563667][ T5042] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  126.732904][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  126.762669][ T5041] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  126.972823][ T1108] usb 3-1: Using ep0 maxpacket: 8
[  127.010410][ T6007] loop0: detected capacity change from 0 to 764
[  127.092055][ T6007] Symlink component flag not implemented
[  127.098913][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  127.112780][ T6007] Symlink component flag not implemented
[  127.123226][ T5041] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.159400][ T5041] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  127.193044][ T5041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.228307][ T5041] usb 2-1: config 0 descriptor??
[  127.273056][ T1108] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  127.284547][ T5041] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  127.303117][ T1108] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  127.321912][ T5041] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  127.331170][ T1108] usb 3-1: Product: syz
[  127.340274][ T1108] usb 3-1: Manufacturer: syz
[  127.367772][ T1108] usb 3-1: SerialNumber: syz
[  127.488636][ T4689] usb 2-1: USB disconnect, device number 8
[  127.652797][ T1108] usb 3-1: Invalid connection information received from device
[  127.662776][ T5041] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  127.855358][ T1108] usb 3-1: USB disconnect, device number 7
[  127.902680][ T5041] usb 1-1: Using ep0 maxpacket: 16
[  128.022863][ T5041] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  128.049825][ T5041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.088307][ T5041] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  128.143426][ T5041] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  128.162380][ T5041] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.173672][ T5041] usb 1-1: config 0 descriptor??
[  128.239857][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'.
[  128.310628][ T6053] loop3: detected capacity change from 0 to 1024
[  128.356971][ T6053] EXT4-fs (loop3): blocks per group (0) and clusters per group (8192) inconsistent
[  128.654638][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.684624][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.705104][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.726640][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.751543][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.780507][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.794495][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.801702][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.816421][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.848969][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.860215][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.860216][ T6065] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  128.875458][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.909977][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.937647][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  128.971780][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.008818][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.040550][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.055618][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.069188][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.086641][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.118219][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.150552][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.165811][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.183612][ T6069] loop3: detected capacity change from 0 to 4096
[  129.189061][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.217791][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.239831][ T6069] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  129.246588][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.267955][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.288461][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.308495][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.321247][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.331668][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.346672][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.357595][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.379451][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.408482][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.431690][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.456141][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.483611][ T6057] loop2: detected capacity change from 0 to 40427
[  129.490220][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.509567][ T6057] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x1ffff
[  129.521832][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.547165][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.571254][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.594959][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.618555][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.668976][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.693868][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.708796][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.722796][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.737713][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.755421][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.790081][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.812669][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.827603][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.842870][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.857883][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.874919][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.889977][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.908766][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.937842][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.958762][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.978465][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  129.996199][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.006350][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.022934][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.038779][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.073742][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.108858][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.118767][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.136642][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.146787][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.167864][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.187980][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.208260][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.216476][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.233996][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.244125][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.258766][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.276120][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.288771][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.306305][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.316436][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.334026][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.347449][ T6088] loop0: detected capacity change from 0 to 32768
[  130.354324][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.361491][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.380666][ T6088] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.698 (6088)
[  130.393822][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.401647][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.415496][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.424807][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.432748][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.440174][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.448933][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.459214][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.468861][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.478158][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.487517][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.508523][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.523064][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.530447][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.537650][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.544990][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.552140][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.559423][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.566612][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.573932][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.581692][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.589030][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.598210][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.610139][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.619850][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.631861][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.641660][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.655923][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.666688][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.677427][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.685735][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.693065][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.700306][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.707451][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.714731][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.721877][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.729264][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.736384][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.752457][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.768797][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.778956][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.786733][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.794033][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.801268][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.809221][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.816871][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.824152][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.831397][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.838592][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.846188][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.853648][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.860988][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.868873][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.876092][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.884119][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.891522][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.898821][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.906022][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.913529][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.920998][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.929621][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.936972][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.944480][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.951770][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.959052][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.966549][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.973828][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.981102][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  130.988538][ T6093] loop1: detected capacity change from 0 to 32768
[  130.990426][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  131.003050][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  131.010586][ T5041] belkin 0003:1020:0006.0008: unknown main item tag 0x0
[  131.021830][ T5041] belkin 0003:1020:0006.0008: unbalanced collection at end of report description
[  131.039272][ T5041] belkin 0003:1020:0006.0008: parse failed
[  131.047300][ T5041] belkin: probe of 0003:1020:0006.0008 failed with error -22
[  131.075606][ T5041] usb 1-1: USB disconnect, device number 9
[  131.108558][ T6093] XFS (loop1): Mounting V5 Filesystem
[  131.178016][   T26] kauditd_printk_skb: 58 callbacks suppressed
[  131.178036][   T26] audit: type=1326 audit(1767275929.067:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.2.697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3ff2c6749 code=0x0
[  131.252058][ T6088] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  131.316721][ T6088] BTRFS info (device loop0): using free space tree
[  131.342909][ T6088] BTRFS info (device loop0): has skinny extents
[  131.367459][ T6093] XFS (loop1): Ending clean mount
[  131.441107][ T6093] XFS (loop1): Quotacheck needed: Please wait.
[  131.625364][ T6093] XFS (loop1): Quotacheck: Done.
[  131.803193][ T4182] XFS (loop1): Unmounting Filesystem
[  131.821725][ T6088] BTRFS info (device loop0): enabling ssd optimizations
[  132.338257][ T6125] loop3: detected capacity change from 0 to 512
[  132.693916][ T6164] loop1: detected capacity change from 0 to 64
[  132.711442][ T6125] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  132.749709][ T6125] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  132.824667][ T6125] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #13: comm syz.3.707: iget: bad i_size value: 12154757448730
[  132.848098][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.854495][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.903684][ T6125] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.707: couldn't read orphan inode 13 (err -117)
[  132.945042][ T6125] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback.
[  132.964635][ T3157] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  133.043802][ T6179] hfs: walked past end of dir
[  133.372908][ T3157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.397981][ T3157] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  133.442791][ T3157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.484889][ T3157] usb 3-1: config 0 descriptor??
[  133.836218][ T6177] loop0: detected capacity change from 0 to 32768
[  133.949778][   T26] audit: type=1800 audit(1767275931.837:10): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.722" name="file1" dev="loop0" ino=4 res=0 errno=0
[  133.983935][ T3157] hid-generic 0003:05AC:027D.0009: unknown main item tag 0x1
[  134.032873][ T3157] hid-generic 0003:05AC:027D.0009: hidraw0: USB HID vff.ff Device [HID 05ac:027d] on usb-dummy_hcd.2-1/input0
[  134.162710][ T1108] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  134.237479][ T3157] usb 3-1: USB disconnect, device number 8
[  134.264642][ T6219] device veth1_to_team entered promiscuous mode
[  134.280934][ T6218] device veth1_to_team left promiscuous mode
[  134.415184][ T1108] usb 2-1: Using ep0 maxpacket: 8
[  134.542997][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.578649][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.612747][ T1108] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[  134.621858][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.659010][ T1108] usb 2-1: config 0 descriptor??
[  134.767008][ T6234] loop0: detected capacity change from 0 to 128
[  134.902322][ T6234] qnx6: superblock #1 checksum error
[  135.099547][ T6242] loop0: detected capacity change from 0 to 512
[  135.134819][ T6242] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  135.150949][ T1108] hid-generic 0003:18D1:9400.000A: item fetching failed at offset 6/7
[  135.175411][ T1108] hid-generic: probe of 0003:18D1:9400.000A failed with error -22
[  135.176988][ T6242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  135.242837][ T3157] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  135.300028][ T6242] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.752: corrupted in-inode xattr
[  135.343199][ T6242] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.752: couldn't read orphan inode 15 (err -117)
[  135.359165][   T21] usb 2-1: USB disconnect, device number 9
[  135.391200][ T6236] loop3: detected capacity change from 0 to 32768
[  135.404514][ T6242] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,max_dir_size_kb=0x00000000000000ad,auto_da_alloc=0x0000000000000007,nouid32,,errors=continue. Quota mode: none.
[  135.500830][ T6236] XFS (loop3): Mounting V5 Filesystem
[  135.542706][ T3157] usb 3-1: Using ep0 maxpacket: 32
[  135.579979][ T6236] XFS (loop3): Ending clean mount
[  135.670956][ T4188] XFS (loop3): Unmounting Filesystem
[  135.692952][ T3157] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  135.707619][ T3157] usb 3-1: config 0 has no interface number 0
[  135.872930][ T3157] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  135.892162][ T3157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.911543][ T3157] usb 3-1: Product: syz
[  135.930867][ T3157] usb 3-1: Manufacturer: syz
[  135.945755][ T3157] usb 3-1: SerialNumber: syz
[  135.966516][ T3157] usb 3-1: config 0 descriptor??
[  136.033773][ T3157] smsc95xx v2.0.0
[  136.283718][   T26] audit: type=1326 audit(1767278001.178:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.4.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169c6c7749 code=0x7fc00000
[  136.462867][ T3157] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  136.504207][ T3157] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  137.102393][ T6322] loop1: detected capacity change from 0 to 128
[  137.176842][ T6310] loop3: detected capacity change from 0 to 32768
[  137.212782][ T3157] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32
[  137.234767][ T3157] smsc95xx: probe of 3-1:0.67 failed with error -32
[  137.294228][ T6310] XFS (loop3): Mounting V5 Filesystem
[  137.391344][    T9] Bluetooth: hci5: Frame reassembly failed (-84)
[  137.435556][ T6310] XFS (loop3): Ending clean mount
[  137.482698][ T4188] XFS (loop3): Unmounting Filesystem
[  138.178110][ T6369] loop3: detected capacity change from 0 to 512
[  138.227146][ T6369] EXT4-fs (loop3): Ignoring removed orlov option
[  138.267597][   T21] usb 3-1: USB disconnect, device number 9
[  138.338829][ T6369] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,orlov,minixdf,,errors=continue. Quota mode: writeback.
[  138.399647][ T6369] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  138.776049][ T6396] device syz_tun left promiscuous mode
[  138.781753][ T6396] bridge0: port 3(syz_tun) entered disabled state
[  138.791268][ T6399] tmpfs: Unknown parameter 'quota'
[  138.805765][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  138.818527][ T6396] device bridge_slave_0 left promiscuous mode
[  138.826129][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.837475][ T6396] device bridge_slave_1 left promiscuous mode
[  138.859506][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.883820][ T6396] bond0: (slave bond_slave_0): Releasing backup interface
[  138.916711][ T6396] bond0: (slave bond_slave_1): Releasing backup interface
[  138.978188][ T6396] team0: Port device team_slave_0 removed
[  138.999196][ T6396] team0: Port device team_slave_1 removed
[  139.012207][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.020391][ T6396] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.029452][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.037824][ T6396] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.054544][ T6401] team0: Mode changed to "broadcast"
[  139.138349][ T6408] overlayfs: failed to clone upperpath
[  139.162650][ T5043] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  139.408832][ T4693] Bluetooth: hci5: command 0x1003 tx timeout
[  139.423648][ T4193] Bluetooth: hci5: sending frame failed (-49)
[  139.552063][ T4193] Bluetooth: hci0: link tx timeout
[  139.567406][ T5043] usb 3-1: config 9 has an invalid interface number: 12 but max is 0
[  139.575848][ T5043] usb 3-1: config 9 has no interface number 0
[  139.582102][ T5043] usb 3-1: config 9 interface 12 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  139.638263][ T5043] usb 3-1: config 9 interface 12 has no altsetting 0
[  139.832907][ T5043] usb 3-1: New USB device found, idVendor=0499, idProduct=1008, bcdDevice=ca.03
[  139.842009][ T5043] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.862716][ T5043] usb 3-1: Product: syz
[  139.866956][ T5043] usb 3-1: Manufacturer: syz
[  139.871700][ T5043] usb 3-1: SerialNumber: syz
[  139.890191][ T6433] loop0: detected capacity change from 0 to 32768
[  139.941599][ T6433] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.831 (6433)
[  139.991488][ T6433] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  140.048560][ T6433] BTRFS info (device loop0): using free space tree
[  140.072802][ T6433] BTRFS info (device loop0): has skinny extents
[  140.269840][ T5043] snd-usb-audio: probe of 3-1:9.12 failed with error -2
[  140.280656][ T5043] usb 3-1: USB disconnect, device number 10
[  140.287014][ T6433] BTRFS info (device loop0): enabling ssd optimizations
[  140.519932][ T4301] udevd[4301]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.12/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  140.956837][ T6487] loop2: detected capacity change from 0 to 128
[  141.025734][ T6487] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  141.049039][ T6487] hpfs: filesystem error: improperly stopped
[  141.055658][ T6487] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  141.063915][ T6487] hpfs: You really don't want any checks? You are crazy...
[  141.075405][ T6487] hpfs: hpfs_map_sector(): read error
[  141.080959][ T6487] hpfs: code page support is disabled
[  141.105587][ T6487] hpfs: hpfs_map_4sectors(): unaligned read
[  141.129036][ T6487] hpfs: hpfs_map_4sectors(): unaligned read
[  141.139750][ T6487] hpfs: filesystem error: unable to find root dir
[  141.206967][ T6487] hpfs: hpfs_map_4sectors(): unaligned read
[  141.221734][ T6487] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  141.482974][ T4693] Bluetooth: hci5: command 0x1001 tx timeout
[  141.489192][ T4193] Bluetooth: hci5: sending frame failed (-49)
[  141.620202][ T6512] loop3: detected capacity change from 0 to 2048
[  141.643935][ T6506] loop2: detected capacity change from 0 to 4096
[  141.710685][ T6506] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  141.781864][ T6512] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  141.792938][ T6512] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.815467][ T6506] ntfs3: loop2: ino=1b, "file0" directory corrupted
[  142.450267][   T26] audit: type=1326 audit(1767278007.338:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.4.871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f169c6c7749 code=0x0
[  142.528996][ T6512] fs-verity (loop3, inode 13): Error -4 building Merkle tree
[  142.923718][   T26] audit: type=1326 audit(1767278007.818:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.3.875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d9a673749 code=0x0
[  142.965726][ T6568] capability: warning: `syz.2.882' uses 32-bit capabilities (legacy support in use)
[  143.575699][ T3157] Bluetooth: hci5: command 0x1009 tx timeout
[  143.884811][ T6583] loop2: detected capacity change from 0 to 32768
[  144.005667][ T6583] find_entry called with index = 0
[  144.012004][ T6583] read_mapping_page failed!
[  144.022360][ T6583] ERROR: (device loop2): txCommit: 
[  144.022360][ T6583] 
[  144.062608][ T1108] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  144.075285][ T6583] ERROR: (device loop2): remounting filesystem as read-only
[  144.131594][  T276] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0)
[  144.141306][  T276] ------------[ cut here ]------------
[  144.147283][  T276] kernel BUG at fs/jfs/jfs_txnmgr.c:932!
[  144.153371][  T276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  144.159478][  T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted syzkaller #0
[  144.166705][  T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  144.176812][  T276] RIP: 0010:txUnlock+0xc87/0xcb0
[  144.181915][  T276] Code: af 8c c9 06 0f 0b e8 b8 e9 a9 fe 48 c7 c7 00 60 42 8a 48 c7 c6 f9 5b 42 8a ba a4 03 00 00 48 c7 c1 c0 6a 42 8a e8 89 8c c9 06 <0f> 0b e8 92 e9 a9 fe 48 c7 c7 00 60 42 8a 48 c7 c6 f9 5b 42 8a ba
[  144.201550][  T276] RSP: 0018:ffffc9000268fd28 EFLAGS: 00010246
[  144.207631][  T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: f64d91038a185400
[  144.215636][  T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  144.223624][  T276] RBP: ffffc900028c2090 R08: dffffc0000000000 R09: ffffed10172067b0
[  144.231740][  T276] R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffff888025e0a3e0
[  144.239736][  T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900026a1220
[  144.247727][  T276] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  144.256802][  T276] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  144.263401][  T276] CR2: 00007fff33b4eeb8 CR3: 000000002a9b5000 CR4: 00000000003506f0
[  144.271490][  T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  144.279553][  T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  144.287743][  T276] Call Trace:
[  144.291059][  T276]  <TASK>
[  144.294007][  T276]  ? lockdep_hardirqs_on+0x94/0x140
[  144.299225][  T276]  jfs_lazycommit+0x583/0xb20
[  144.304299][  T276]  ? txFreelock+0x5a0/0x5a0
[  144.308835][  T276]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  144.314890][  T276]  ? sched_dynamic_update+0x210/0x210
[  144.321496][  T276]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  144.327415][  T276]  ? __kthread_parkme+0x157/0x1b0
[  144.332485][  T276]  kthread+0x436/0x520
[  144.336583][  T276]  ? txFreelock+0x5a0/0x5a0
[  144.341090][  T276]  ? kthread_blkcg+0xd0/0xd0
[  144.345729][  T276]  ret_from_fork+0x1f/0x30
[  144.350182][  T276]  </TASK>
[  144.353219][  T276] Modules linked in:
[  144.360668][  T276] ---[ end trace 10d804f5c9d8cace ]---
[  144.366832][  T276] RIP: 0010:txUnlock+0xc87/0xcb0
[  144.372451][  T276] Code: af 8c c9 06 0f 0b e8 b8 e9 a9 fe 48 c7 c7 00 60 42 8a 48 c7 c6 f9 5b 42 8a ba a4 03 00 00 48 c7 c1 c0 6a 42 8a e8 89 8c c9 06 <0f> 0b e8 92 e9 a9 fe 48 c7 c7 00 60 42 8a 48 c7 c6 f9 5b 42 8a ba
[  144.392579][  T276] RSP: 0018:ffffc9000268fd28 EFLAGS: 00010246
[  144.398910][  T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: f64d91038a185400
[  144.407596][  T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  144.415954][  T276] RBP: ffffc900028c2090 R08: dffffc0000000000 R09: ffffed10172067b0
[  144.424317][  T276] R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffff888025e0a3e0
[  144.432395][  T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900026a1220
[  144.440624][  T276] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  144.449875][  T276] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  144.456564][  T276] CR2: 00007fff33b4eeb8 CR3: 0000000064c5a000 CR4: 00000000003506f0
[  144.466199][  T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  144.474305][ T1108] usb 4-1: Using ep0 maxpacket: 8
[  144.479415][  T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  144.487531][  T276] Kernel panic - not syncing: Fatal exception
[  144.493977][  T276] Kernel Offset: disabled
[  144.498408][  T276] Rebooting in 86400 seconds..