last executing test programs:

6.155269425s ago: executing program 1 (id=1355):
syz_mount_image$minix(&(0x7f0000000e80), &(0x7f0000001300)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0x2, 0x1c9, &(0x7f0000000580)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
rmdir(&(0x7f0000000140)='./bus\x00')

5.792040426s ago: executing program 2 (id=1358):
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009b00), 0x7, 0x9864, &(0x7f0000000140)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]})

5.482382076s ago: executing program 1 (id=1360):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000800000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x22eb, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.447247601s ago: executing program 2 (id=1370):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x3c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x7040}, 0x20004800)

2.857734779s ago: executing program 1 (id=1375):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400c800}, 0x40)

2.692409475s ago: executing program 1 (id=1377):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x11, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg(r1, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0x4, r2, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000180)="d09b6d42fd81685544f46c3f0800", 0xe}, {&(0x7f0000000080)="4987", 0x2}, {&(0x7f00000000c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604388d00436db1d308c82c", 0x2a}], 0x3, 0x0, 0x0, 0x11000000}, 0x24008814)

2.567394428s ago: executing program 1 (id=1378):
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4106, 0x8}], 0x8)

2.413756154s ago: executing program 1 (id=1380):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2)
chdir(&(0x7f0000000400)='./file0\x00')
mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0xd02)

2.295248127s ago: executing program 2 (id=1381):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.090314354s ago: executing program 2 (id=1382):
r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101})
mq_timedreceive(r0, &(0x7f0000001140)=""/4127, 0x101f, 0x0, 0x0)
r1 = mq_open(&(0x7f0000000640)='rmdF\x17\x16\xbc\xec', 0x2, 0x100, 0x0)
mq_timedsend(r1, &(0x7f00000006c0)="7333ddb554fae6bf7095", 0xa, 0x6, 0x0)

1.868532401s ago: executing program 2 (id=1385):
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x800000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0xee01)

1.860257131s ago: executing program 3 (id=1386):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00')
getdents64(r0, &(0x7f0000001f80)=""/4110, 0x100e)

1.278155689s ago: executing program 4 (id=1387):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x408c4)

1.130360574s ago: executing program 3 (id=1388):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60)
r1 = dup(r0)
getsockopt$inet_buf(r1, 0x118, 0x1, 0x0, &(0x7f0000000000))

973.473699ms ago: executing program 4 (id=1390):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002025252700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x70000000, 0x0, 0x1c, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

878.988642ms ago: executing program 3 (id=1391):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

787.806525ms ago: executing program 0 (id=1392):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x0)

718.869397ms ago: executing program 3 (id=1393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

674.097209ms ago: executing program 0 (id=1394):
r0 = socket$inet(0x2, 0x3, 0x2f)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendto$inet(r0, &(0x7f0000000000)="25803c000000bc66189500000000", 0xe, 0x2004082c, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10)

591.897321ms ago: executing program 2 (id=1395):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802, &(0x7f0000000940)={[{@fat=@quiet}, {@shortname_lower}, {@rodir}, {@utf8no}, {@rodir}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@numtail}, {@utf8no}, {@fat=@flush}]}, 0x1, 0x33e, &(0x7f0000000480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$FUSE_STATFS(r0, &(0x7f0000005f00)={0x60, 0x0, 0x0, {{0xffffffffffffffff, 0x17, 0x4, 0x20004, 0x8, 0xfffffc00, 0x1, 0x5}}}, 0x60)
fadvise64(r0, 0x0, 0x60, 0x4)

528.059613ms ago: executing program 4 (id=1396):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r1, &(0x7f0000000080)=""/1, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

474.208085ms ago: executing program 0 (id=1397):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10)

390.036508ms ago: executing program 3 (id=1398):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = dup(r0)
unshare(0x28000600)
ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, 0x0)

375.688618ms ago: executing program 4 (id=1399):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004a40)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x6, 0xfffffe9a, 0x4000000, 0x4, 0x6}}]}}}]}, 0x8c}}, 0x0)

340.818149ms ago: executing program 0 (id=1400):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x50}}, 0x0)

301.143671ms ago: executing program 0 (id=1401):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='ALTPCM \'Line Capture\' 00000000000000000000\nLINE2\nDIGITAL3\nSPEAKER \'Synth\' 0000000000C'], 0xf7)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

215.001444ms ago: executing program 3 (id=1402):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
waitid(0x0, r0, 0x0, 0x1000008, 0x0)
ptrace$setopts(0x4200, r0, 0x6, 0x80000)

100.336697ms ago: executing program 4 (id=1403):
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x48850)
r0 = getpgrp(0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0xc, 0xf2a, 0xfffffff8}, 0x0)

91.990477ms ago: executing program 0 (id=1404):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8000}]}, 0x30}}, 0x0)

0s ago: executing program 4 (id=1405):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@newtaction={0x248, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x234, 0x1, [@m_ife={0x90, 0xb, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_METALST={0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x49, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad3660799f8b78cf33d02da7d6acb22261a61dc99ee70038b350979cbf8e56f4d7cee654dcd1431a97a4670"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xc8, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x99, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1573ff3fe388a502702c7e7d4eb99cd479f52be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xd8, 0x0, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0x5, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x6f, 0x6, "a0e988b2fa7e2ad0dddad3cdaa9b380000006034293d9d0e7476f9878bc66aa46f5acb7af3c9dadb019742d8ac97382c5d0054c3b3f524410517ef94a5e1f85254b9140dd2616743b6032053410a167c0d137dd0847eaabd717ddaf33d69380a8962986d3c15f3dae1e535"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4054020}, 0x24000800)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x9}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/191, 0x41}, 0x2ad6}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

kernel console output (not intermixed with test programs):

appen!! Data will be lost
[   91.634061][  T144] 
[   91.651660][ T4840] BTRFS info (device loop0): use lzo compression, level 0
[   91.662002][ T4880] erofs: (device loop3): mounted with root inode @ nid 36.
[   91.669763][ T4840] BTRFS info (device loop0): turning on flush-on-commit
[   91.679586][ T4840] BTRFS info (device loop0): enabling auto defrag
[   91.697214][ T4840] BTRFS info (device loop0): max_inline at 4096
[   91.733237][ T4840] BTRFS info (device loop0): using free space tree
[   91.742468][ T4880] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   91.796109][ T4840] BTRFS info (device loop0): has skinny extents
[   91.812141][ T4880] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851]
[   91.887043][ T4880] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[   92.265588][ T4840] BTRFS info (device loop0): enabling ssd optimizations
[   92.516725][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'.
[   92.542853][   T26] audit: type=1800 audit(1781188757.569:4): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.224" name="file1" dev="loop0" ino=260 res=0 errno=0
[   92.616971][ T4935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.258'.
[   92.827773][ T4944] overlayfs: upper fs does not support tmpfile.
[   93.023417][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   93.074345][ T4948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.174958][ T4234] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   93.208007][ T4948] syz.4.265 (4948) used greatest stack depth: 20144 bytes left
[   93.480066][ T4234] usb 2-1: Using ep0 maxpacket: 32
[   93.504804][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'.
[   93.609685][ T4981] loop0: detected capacity change from 0 to 512
[   93.630678][ T4234] usb 2-1: config 0 has an invalid interface number: 115 but max is 0
[   93.661809][ T4234] usb 2-1: config 0 has no interface number 0
[   93.667985][ T4234] usb 2-1: config 0 interface 115 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[   93.699332][ T4234] usb 2-1: config 0 interface 115 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0
[   93.715856][ T4234] usb 2-1: config 0 interface 115 has no altsetting 0
[   93.911167][ T4234] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff55, bcdDevice=72.3e
[   93.925125][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.946492][ T4234] usb 2-1: Product: syz
[   93.951025][ T4234] usb 2-1: Manufacturer: syz
[   93.955660][ T4234] usb 2-1: SerialNumber: syz
[   93.971728][ T4234] usb 2-1: config 0 descriptor??
[   94.022064][ T4234] option 2-1:0.115: GSM modem (1-port) converter detected
[   94.245198][ T5009] loop0: detected capacity change from 0 to 64
[   94.284808][   T21] usb 2-1: USB disconnect, device number 4
[   94.322069][   T21] option 2-1:0.115: device disconnected
[   94.427701][ T5015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.285'.
[   94.445531][ T5015] netem: change failed
[   94.487754][ T5018] loop4: detected capacity change from 0 to 24
[   94.510224][ T4234] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   94.790205][ T4234] usb 4-1: Using ep0 maxpacket: 32
[   94.848956][ T5037] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   94.903547][ T5037] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   94.950152][ T4234] usb 4-1: config 0 has no interfaces?
[   94.955709][ T4234] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   95.000635][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.031094][ T4234] usb 4-1: config 0 descriptor??
[   95.231940][ T5045] loop2: detected capacity change from 0 to 8192
[   95.294572][   T21] usb 4-1: USB disconnect, device number 4
[   95.328529][ T5045] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   95.328657][ T5045] REISERFS (device loop2): using ordered data mode
[   95.328672][ T5045] reiserfs: using flush barriers
[   95.330672][ T5045] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   95.331021][ T5045] REISERFS (device loop2): checking transaction log (loop2)
[   95.332818][ T5045] REISERFS (device loop2): Using rupasov hash to sort names
[   95.332869][ T5045] REISERFS (device loop2): using 3.5.x disk format
[   95.333181][ T5045] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[   95.333328][ T5045] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[   95.333648][ T5045] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[   95.333711][ T5045] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   95.874645][ T5056] tipc: Started in network mode
[   95.874727][ T5056] tipc: Node identity ac14140f, cluster identity 4711
[   95.875420][ T5056] tipc: New replicast peer: 255.255.255.255
[   95.876439][ T5056] tipc: Enabled bearer <udp:syz2>, priority 10
[   95.928764][ T5050] loop0: detected capacity change from 0 to 32768
[   96.052992][ T5050] ERROR: (device loop0): dbAllocAG: Corrupt dmapctl page
[   96.052992][ T5050] 
[   96.054999][ T5050] ERROR: (device loop0): remounting filesystem as read-only
[   96.055115][ T5050] jfs_mkdir: dtInsert returned -EIO
[   96.055234][ T5050] ERROR: (device loop0): jfs_mkdir: 
[   96.055234][ T5050] 
[   96.074110][ T3104] Bluetooth: hci5: Frame reassembly failed (-84)
[   96.088707][ T5050] ERROR: (device loop0): dbAllocAG: Corrupt dmapctl page
[   96.088707][ T5050] 
[   96.088920][ T5050] ERROR: (device loop0): dbDiscardAG: -EIO
[   96.088920][ T5050] 
[   96.437435][ T5077] loop1: detected capacity change from 0 to 64
[   96.585129][   T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   96.841153][ T5092] bridge0: port 3(syz_tun) entered blocking state
[   96.866865][ T5092] bridge0: port 3(syz_tun) entered disabled state
[   96.970635][   T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[   96.998062][   T23] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[   97.017369][   T21] tipc: Node number set to 2886997007
[   97.170358][   T23] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[   97.195912][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.214654][   T23] usb 3-1: Product: syz
[   97.218970][   T23] usb 3-1: Manufacturer: syz
[   97.227811][ T5104] loop0: detected capacity change from 0 to 2048
[   97.234488][   T23] usb 3-1: SerialNumber: syz
[   97.309303][ T5104] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: writeback.
[   97.337809][ T5104] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.324: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   97.360640][ T5104] EXT4-fs (loop0): Remounting filesystem read-only
[   97.397552][ T5104] EXT4-fs error (device loop0): ext4_ext_precache:608: inode #2: comm syz.0.324: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[   97.422716][ T5104] EXT4-fs (loop0): Remounting filesystem read-only
[   97.457188][ T5093] loop1: detected capacity change from 0 to 32768
[   97.520928][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'.
[   97.530911][ T5093] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.318 (5093)
[   97.565535][ T5093] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   97.589036][ T5093] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   97.654966][ T5093] BTRFS info (device loop1): use zstd compression, level 3
[   97.673346][ T5093] BTRFS info (device loop1): using free space tree
[   97.687465][ T5093] BTRFS info (device loop1): has skinny extents
[   97.700468][   T23] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   97.951513][   T23] usb 3-1: USB disconnect, device number 3
[   98.003469][ T5093] BTRFS info (device loop1): enabling ssd optimizations
[   98.057703][ T5144] loop4: detected capacity change from 0 to 64
[   98.163742][ T4235] Bluetooth: hci5: command 0x1003 tx timeout
[   98.171122][ T4199] Bluetooth: hci5: sending frame failed (-49)
[   98.214074][ T4550] udevd[4550]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   98.495647][ T5150] netlink: 'syz.4.334': attribute type 20 has an invalid length.
[   98.778484][   T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   99.010532][   T23] usb 3-1: Using ep0 maxpacket: 32
[   99.209069][ T5152] loop0: detected capacity change from 0 to 32768
[   99.215786][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[   99.320133][   T23] usb 3-1: unable to read config index 0 descriptor/start: -71
[   99.338010][   T23] usb 3-1: can't read configurations, error -71
[   99.431601][ T5173] loop1: detected capacity change from 0 to 512
[   99.455489][ T5152] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   99.503642][ T5173] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   99.871334][ T4190] ocfs2: Unmounting device (7,0) on (node local)
[   99.925623][ T5186] program syz.2.347 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.233525][ T5156] Bluetooth: hci5: command 0x1001 tx timeout
[  100.239677][ T4199] Bluetooth: hci5: sending frame failed (-49)
[  100.373229][   T26] audit: type=1326 audit(1781188765.399:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5198 comm="syz.4.352" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a65223e59 code=0x7ffc0000
[  100.423609][ T5199] loop4: detected capacity change from 0 to 512
[  100.450414][   T26] audit: type=1326 audit(1781188765.399:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5198 comm="syz.4.352" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a65223e59 code=0x7ffc0000
[  100.494270][ T5182] loop1: detected capacity change from 0 to 32768
[  100.511052][   T26] audit: type=1326 audit(1781188765.429:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5198 comm="syz.4.352" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a65223e59 code=0x7ffc0000
[  100.535008][    C1] vkms_vblank_simulate: vblank timer overrun
[  100.542797][ T5201] loop0: detected capacity change from 0 to 8
[  100.552646][   T26] audit: type=1326 audit(1781188765.429:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5198 comm="syz.4.352" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a65223e59 code=0x7ffc0000
[  100.579281][   T26] audit: type=1326 audit(1781188765.429:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5198 comm="syz.4.352" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7a65223e59 code=0x7ffc0000
[  100.603272][    C1] vkms_vblank_simulate: vblank timer overrun
[  100.624784][ T5182] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.343 (5182)
[  100.664465][ T5199] EXT4-fs (loop4): 1 truncate cleaned up
[  100.673785][   T26] audit: type=1326 audit(1781188765.429:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5198 comm="syz.4.352" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a65223bc2 code=0x7ffc0000
[  100.698634][   T26] audit: type=1326 audit(1781188765.429:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5198 comm="syz.4.352" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a651e468e code=0x7ffc0000
[  100.722417][    C1] vkms_vblank_simulate: vblank timer overrun
[  100.731347][   T26] audit: type=1326 audit(1781188765.449:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5198 comm="syz.4.352" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7a65223c87 code=0x7ffc0000
[  100.750229][ T5199] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback.
[  100.755878][    C1] vkms_vblank_simulate: vblank timer overrun
[  100.766155][   T26] audit: type=1326 audit(1781188765.449:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5198 comm="syz.4.352" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a651e468e code=0x7ffc0000
[  100.784394][ T5201] SQUASHFS error: lzo decompression failed, data probably corrupt
[  100.808876][   T26] audit: type=1326 audit(1781188765.449:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5198 comm="syz.4.352" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a65223aeb code=0x7ffc0000
[  100.839031][    C1] vkms_vblank_simulate: vblank timer overrun
[  100.911415][ T5182] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  100.939113][ T5182] BTRFS info (device loop1): using free space tree
[  100.946030][ T5201] SQUASHFS error: Failed to read block 0x91: -5
[  100.982822][ T5201] SQUASHFS error: Unable to read metadata cache entry [8f]
[  100.998254][ T5182] BTRFS info (device loop1): has skinny extents
[  101.056080][ T5201] SQUASHFS error: Unable to read inode 0x11f
[  101.252957][ T5191] loop2: detected capacity change from 0 to 32768
[  101.347863][ T5182] BTRFS info (device loop1): enabling ssd optimizations
[  101.401700][ T5191] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  101.401700][ T5191] 
[  101.451063][ T5191] ERROR: (device loop2): remounting filesystem as read-only
[  101.458563][ T5226] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  101.458563][ T5226] 
[  101.513094][   T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  101.759880][ T4181] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 9 /dev/loop1 scanned by udevd (4181)
[  101.772318][   T23] usb 1-1: Using ep0 maxpacket: 32
[  101.850466][ T4232] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  101.890501][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 158, changing to 11
[  101.906170][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58832, setting to 1024
[  101.928197][   T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  101.948520][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.003711][   T23] usb 1-1: config 0 descriptor??
[  102.026188][ T5201] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  102.061451][   T23] hub 1-1:0.0: USB hub found
[  102.120270][ T4232] usb 5-1: Using ep0 maxpacket: 16
[  102.261458][ T4232] usb 5-1: config 0 has no interfaces?
[  102.267050][ T4232] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  102.280249][   T23] hub 1-1:0.0: 26 ports detected
[  102.300141][   T23] hub 1-1:0.0: insufficient power available to use all downstream ports
[  102.341963][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.348909][ T5239] Bluetooth: hci5: command 0x1009 tx timeout
[  102.391632][ T4232] usb 5-1: config 0 descriptor??
[  102.424684][ T5245] input: syz0 as /devices/virtual/input/input6
[  102.500621][   T23] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  102.518764][   T23] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  102.677772][ T5228] loop4: detected capacity change from 0 to 2048
[  102.684788][   T23] usbhid 1-1:0.0: can't add hid device: -71
[  102.696622][   T23] usbhid: probe of 1-1:0.0 failed with error -71
[  102.758600][   T23] usb 1-1: USB disconnect, device number 3
[  102.810063][ T5256] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.858746][ T4236] usb 5-1: USB disconnect, device number 3
[  103.206748][ T5261] loop2: detected capacity change from 0 to 8192
[  103.307344][ T5261] FAT-fs (loop2): Unrecognized mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value
[  103.826133][ T5286] loop2: detected capacity change from 0 to 256
[  103.950518][ T5286] FAT-fs (loop2): Directory bread(block 64) failed
[  103.957145][ T5286] FAT-fs (loop2): Directory bread(block 65) failed
[  104.005499][ T5286] FAT-fs (loop2): Directory bread(block 66) failed
[  104.030425][ T5286] FAT-fs (loop2): Directory bread(block 67) failed
[  104.037140][ T5286] FAT-fs (loop2): Directory bread(block 68) failed
[  104.087254][ T5286] FAT-fs (loop2): Directory bread(block 69) failed
[  104.110454][ T5286] FAT-fs (loop2): Directory bread(block 70) failed
[  104.117091][ T5286] FAT-fs (loop2): Directory bread(block 71) failed
[  104.129388][ T5290] loop1: detected capacity change from 0 to 2048
[  104.146991][ T5286] FAT-fs (loop2): Directory bread(block 72) failed
[  104.178547][ T5286] FAT-fs (loop2): Directory bread(block 73) failed
[  104.188872][ T5290] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.387517][ T5295] loop1: detected capacity change from 0 to 256
[  104.405083][ T5295] exfat: Deprecated parameter 'utf8'
[  104.412277][ T5295] exfat: Deprecated parameter 'namecase'
[  104.418129][ T5295] exfat: Deprecated parameter 'namecase'
[  104.458381][ T5295] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  104.485237][ T5297] loop0: detected capacity change from 0 to 1024
[  104.794702][ T5307] kvm [5306]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x6
[  104.990030][   T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  105.128362][ T5318] loop0: detected capacity change from 0 to 512
[  105.134763][ T5322] input: syz1 as /devices/virtual/input/input7
[  105.230055][   T23] usb 3-1: Using ep0 maxpacket: 8
[  105.271543][ T5324] loop4: detected capacity change from 0 to 512
[  105.305986][ T5318] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  105.350969][   T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  105.359035][   T23] usb 3-1: config 0 has no interface number 0
[  105.375715][   T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  105.380511][ T5324] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  105.407553][   T23] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  105.416815][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.436942][ T5318] EXT4-fs (loop0): shut down requested (1)
[  105.444475][   T23] usb 3-1: config 0 descriptor??
[  105.471340][ T5329] openvswitch: netlink: Actions may not be safe on all matching packets
[  105.502788][ T5324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002]
[  105.514882][   T23] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  105.531315][ T5324] System zones: 1-12
[  105.559760][ T5324] EXT4-fs (loop4): orphan cleanup on readonly fs
[  105.618773][ T5324] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.396: invalid indirect mapped block 12 (level 1)
[  105.730042][ T5324] EXT4-fs (loop4): Remounting filesystem read-only
[  105.758505][ T5324] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.396: invalid indirect mapped block 2 (level 2)
[  105.813163][   T23] usb 3-1: USB disconnect, device number 6
[  105.881921][ T5324] EXT4-fs (loop4): Remounting filesystem read-only
[  105.889246][ T5324] EXT4-fs (loop4): 1 truncate cleaned up
[  105.921021][ T5324] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,i_version. Quota mode: none.
[  106.009793][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'.
[  106.858400][ T5373] input: syz0 as /devices/virtual/input/input8
[  106.912691][ T5376] loop3: detected capacity change from 0 to 1024
[  107.024488][ T5377] loop4: detected capacity change from 0 to 4096
[  107.099136][ T5377] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  107.562606][ T5350] XFS (loop1): Mounting V5 Filesystem
[  107.861586][ T5350] XFS (loop1): Ending clean mount
[  107.989402][ T4188] XFS (loop1): Unmounting Filesystem
[  108.001673][ T5409] set_capacity_and_notify: 1 callbacks suppressed
[  108.001689][ T5409] loop2: detected capacity change from 0 to 2048
[  108.227000][ T5409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.642128][ T5403] loop3: detected capacity change from 0 to 32768
[  108.770033][ T5403] JBD2: Ignoring recovery information on journal
[  108.926799][ T5435] loop2: detected capacity change from 0 to 4096
[  108.939345][ T5437] netlink: 80 bytes leftover after parsing attributes in process `syz.4.436'.
[  108.964662][ T5403] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  109.064483][ T5435] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  109.158168][ T4198] ocfs2: Unmounting device (7,3) on (node local)
[  109.426736][ T5419] loop0: detected capacity change from 0 to 32768
[  109.534527][ T5419] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.431 (5419)
[  109.601240][ T5419] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  109.637769][ T5419] BTRFS warning (device loop0): excessive commit interval 3581
[  109.692037][ T5419] BTRFS info (device loop0): force zlib compression, level 3
[  109.699576][ T5419] BTRFS info (device loop0): metadata ratio 107050
[  109.750098][ T5419] BTRFS info (device loop0): turning on flush-on-commit
[  109.766331][ T5419] BTRFS info (device loop0): max_inline at 4096
[  109.778922][ T5419] BTRFS info (device loop0): using free space tree
[  109.796620][ T5419] BTRFS info (device loop0): has skinny extents
[  110.036329][ T5470] loop1: detected capacity change from 0 to 128
[  110.269555][ T5470] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.290935][ T5470] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  110.349379][ T5449] loop2: detected capacity change from 0 to 32768
[  110.367374][ T5419] BTRFS info (device loop0): enabling ssd optimizations
[  110.438462][ T5449] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  110.472721][ T5461] loop4: detected capacity change from 0 to 40427
[  110.515542][ T5461] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  110.551105][ T5461] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  110.626141][ T5461] F2FS-fs (loop4): invalid crc value
[  110.751055][ T5461] F2FS-fs (loop4): Found nat_bits in checkpoint
[  110.817402][ T4181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4181)
[  111.059353][ T5461] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  111.093830][ T5461] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  111.177732][ T4189] ocfs2: Unmounting device (7,2) on (node local)
[  111.281955][ T5510] misc userio: Can't change port type on an already running userio instance
[  111.855426][ T5519] loop2: detected capacity change from 0 to 4096
[  111.968050][ T5519] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  112.032481][ T5511] loop0: detected capacity change from 0 to 32768
[  112.047516][ T5511] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.452 (5511)
[  112.135893][ T5521] loop3: detected capacity change from 0 to 8192
[  112.164509][ T5521] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  112.194835][ T5511] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  112.274602][ T5521] REISERFS (device loop3): using ordered data mode
[  112.294107][ T5525] netlink: 'syz.1.460': attribute type 10 has an invalid length.
[  112.303430][ T5511] BTRFS info (device loop0): enabling ssd optimizations
[  112.313210][ T5511] BTRFS info (device loop0): not using ssd optimizations
[  112.320511][ T5511] BTRFS info (device loop0): turning off barriers
[  112.327182][ T5511] BTRFS info (device loop0): using free space tree
[  112.340204][ T5511] BTRFS info (device loop0): has skinny extents
[  112.347907][ T5521] reiserfs: using flush barriers
[  112.360843][ T5525] device macvlan0 entered promiscuous mode
[  112.396551][ T5521] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  112.437871][ T5525] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  112.460257][ T5526] netlink: 'syz.1.460': attribute type 4 has an invalid length.
[  112.476393][ T5521] REISERFS (device loop3): checking transaction log (loop3)
[  112.486623][ T5526] netlink: 156 bytes leftover after parsing attributes in process `syz.1.460'.
[  112.680905][ T5546] EXT4-fs (loop1): Test dummy encryption mode enabled
[  112.720476][ T5546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  112.728511][ T5546] System zones: 1-3, 19-19, 35-36
[  112.781049][ T5546] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  112.799572][    C1] vkms_vblank_simulate: vblank timer overrun
[  112.809764][ T5546] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.862650][ T5546] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback.
[  112.892078][ T5553] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  112.934568][ T5553] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.090517][ T5521] REISERFS (device loop3): Using tea hash to sort names
[  113.097868][ T5521] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  113.176028][ T4551] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop0 scanned by udevd (4551)
[  113.860076][   T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  114.208445][ T5566] set_capacity_and_notify: 2 callbacks suppressed
[  114.208464][ T5566] loop4: detected capacity change from 0 to 32768
[  114.258292][ T5592] loop1: detected capacity change from 0 to 8
[  114.274709][   T13] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  114.310779][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.346538][   T13] usb 1-1: config 0 descriptor??
[  114.432113][   T13] cp210x 1-1:0.0: cp210x converter detected
[  114.834312][ T4965] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  114.850338][   T13] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  114.906542][   T13] usb 1-1: cp210x converter now attached to ttyUSB0
[  114.913523][ T4951] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  115.100100][ T4965] usb 3-1: Using ep0 maxpacket: 32
[  115.112475][ T5162] usb 1-1: USB disconnect, device number 4
[  115.125295][ T5162] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  115.140799][ T5162] cp210x 1-1:0.0: device disconnected
[  115.170409][ T4951] usb 2-1: Using ep0 maxpacket: 32
[  115.191534][ T4233] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  115.230301][ T4965] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  115.238992][ T4965] usb 3-1: config 0 has no interface number 0
[  115.410286][ T4965] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  115.419647][ T4965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.428453][ T4965] usb 3-1: Product: syz
[  115.433594][ T4965] usb 3-1: Manufacturer: syz
[  115.438243][ T4965] usb 3-1: SerialNumber: syz
[  115.446381][ T4965] usb 3-1: config 0 descriptor??
[  115.480285][ T4951] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  115.489842][ T4951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.498456][ T4951] usb 2-1: Product: syz
[  115.505701][ T4965] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  115.515271][ T4951] usb 2-1: Manufacturer: syz
[  115.521908][ T4951] usb 2-1: SerialNumber: syz
[  115.528477][ T4951] usb 2-1: config 0 descriptor??
[  115.550553][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.561953][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.571880][ T4233] usb 5-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00
[  115.581385][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.624651][ T4233] usb 5-1: config 0 descriptor??
[  115.680420][ T5618] loop3: detected capacity change from 0 to 8192
[  115.714558][ T5618] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  115.726441][ T4965] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  115.736037][ T5618] REISERFS (device loop3): using ordered data mode
[  115.744978][ T5618] reiserfs: using flush barriers
[  115.751110][ T4965] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  115.753722][ T5618] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  115.798042][ T5618] REISERFS (device loop3): checking transaction log (loop3)
[  115.814553][ T4951] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 005
[  115.970040][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 170
[  116.042026][ T5605] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read)
[  116.062267][ T4965] usb 2-1: USB disconnect, device number 5
[  116.104709][ T4233] hid-generic 0003:5443:0042.0001: unbalanced collection at end of report description
[  116.139488][ T4233] hid-generic: probe of 0003:5443:0042.0001 failed with error -22
[  116.163389][ T5618] REISERFS (device loop3): Using tea hash to sort names
[  116.181873][ T5618] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  116.182891][ T4951] usb 3-1: USB disconnect, device number 7
[  116.200012][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  116.235839][ T4951] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  116.280828][ T4951] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  116.320511][ T4951] quatech2 3-1:0.51: device disconnected
[  116.341627][ T4233] usb 5-1: USB disconnect, device number 4
[  116.874409][ T5646] loop0: detected capacity change from 0 to 256
[  116.919402][ T5649] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  116.941168][ T5646] exfat: Deprecated parameter 'utf8'
[  116.956808][ T5652] netlink: 56 bytes leftover after parsing attributes in process `syz.4.502'.
[  116.975096][ T5646] exfat: Deprecated parameter 'namecase'
[  116.977021][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'.
[  116.999298][ T5653] loop2: detected capacity change from 0 to 128
[  117.005817][ T5646] exfat: Unknown parameter 'keep_last_dots'
[  117.067944][ T5653] hpfs: hpfs_map_sector(): read error
[  117.078704][ T5653] hpfs: filesystem error: can't load hotfix map; already mounted read-only
[  117.167898][ T5653] hpfs: hpfs_map_sector(): read error
[  117.408655][ T5646] loop0: detected capacity change from 0 to 8192
[  117.448486][ T5668] loop2: detected capacity change from 0 to 64
[  117.463455][ T5646] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  117.484411][ T5646] REISERFS (device loop0): using ordered data mode
[  117.497004][ T5646] reiserfs: using flush barriers
[  117.513933][ T5646] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  117.533737][ T5646] REISERFS (device loop0): checking transaction log (loop0)
[  117.604978][ T5670] program syz.1.510 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  117.747175][ T5668] hfs: inconsistency in B*Tree (1,0,2,2,3)
[  117.849776][ T5678] loop1: detected capacity change from 0 to 512
[  117.857256][ T5646] REISERFS (device loop0): Using tea hash to sort names
[  117.866571][ T5646] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  117.940573][ T5678] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  118.012424][ T5678] EXT4-fs (loop1): 1 truncate cleaned up
[  118.019132][ T5678] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  118.073399][ T5685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'.
[  118.190210][ T4965] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  118.302756][ T5695] netlink: 7986 bytes leftover after parsing attributes in process `syz.0.519'.
[  118.573053][ T5701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'.
[  118.620886][ T5704] program syz.2.525 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  118.700567][ T4965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.884443][ T5710] loop4: detected capacity change from 0 to 256
[  118.947334][ T5710] exfat: Deprecated parameter 'utf8'
[  118.978315][ T5710] exfat: Deprecated parameter 'namecase'
[  118.997923][ T5710] exfat: Unknown parameter 'keep_last_dots'
[  119.004346][ T4965] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  119.029816][ T5712] loop2: detected capacity change from 0 to 4096
[  119.036487][ T4965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.062801][ T4965] usb 4-1: Product: syz
[  119.067038][ T4965] usb 4-1: Manufacturer: syz
[  119.072274][ T4965] usb 4-1: SerialNumber: syz
[  119.100623][ T4965] usb 4-1: config 0 descriptor??
[  119.148600][ T4965] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  119.399470][ T5710] loop4: detected capacity change from 0 to 8192
[  119.586231][ T5710] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  119.691463][ T5710] REISERFS (device loop4): using ordered data mode
[  119.698068][ T5710] reiserfs: using flush barriers
[  119.783825][ T5710] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  119.817271][ T4189] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  119.840380][ T4189] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  119.842136][ T5710] REISERFS (device loop4): checking transaction log (loop4)
[  120.078530][ T5730] program syz.0.537 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.087930][ T4965] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[  120.088000][ T4965] gspca_pac7302: probe of 4-1:0.0 failed with error -71
[  120.113900][ T4965] usb 4-1: USB disconnect, device number 5
[  120.209244][ T5710] REISERFS (device loop4): Using tea hash to sort names
[  120.224257][ T5710] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  120.786265][ T5738] loop3: detected capacity change from 0 to 4096
[  120.859198][ T5740] loop0: detected capacity change from 0 to 1024
[  121.022528][ T5738] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  121.096403][ T5738] ntfs3: loop3: Failed to load $Extend.
[  121.297255][ T4198] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22.
[  121.360398][ T4198] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22.
[  121.402083][ T5732] loop2: detected capacity change from 0 to 40427
[  121.436778][ T5732] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  121.473833][ T5732] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  121.646269][ T5732] F2FS-fs (loop2): invalid crc value
[  121.771419][ T5732] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  121.996258][ T5759] hsr0: VLAN not yet supported
[  122.122340][ T5732] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  122.201300][ T5732] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  122.353982][   T26] kauditd_printk_skb: 24 callbacks suppressed
[  122.353997][   T26] audit: type=1800 audit(1781188787.379:39): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.535" name="file1" dev="loop2" ino=10 res=0 errno=0
[  122.571080][ T4189] attempt to access beyond end of device
[  122.571080][ T4189] loop2: rw=2049, want=45112, limit=40427
[  123.036286][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'.
[  123.129617][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'.
[  123.717113][ T5817] loop3: detected capacity change from 0 to 256
[  123.835725][ T5823] loop2: detected capacity change from 0 to 256
[  123.892694][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'.
[  124.248310][ T5840] netlink: 52 bytes leftover after parsing attributes in process `syz.4.583'.
[  124.335096][ T5836] loop0: detected capacity change from 0 to 4096
[  124.733271][ T4190] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  124.743234][ T4190] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  125.258418][ T5860] loop4: detected capacity change from 0 to 512
[  125.602129][ T4177] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  125.751260][ T5860] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  125.819803][ T5860] EXT4-fs (loop4): 1 truncate cleaned up
[  125.847006][ T5860] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  125.860366][ T4177] usb 3-1: Using ep0 maxpacket: 32
[  125.980567][ T4177] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  125.993777][ T4177] usb 3-1: config 0 has no interface number 0
[  126.155998][ T5905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.610'.
[  126.166658][ T4177] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  126.187477][ T4177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.213634][ T4177] usb 3-1: Product: syz
[  126.229444][ T4177] usb 3-1: Manufacturer: syz
[  126.254788][ T4177] usb 3-1: SerialNumber: syz
[  126.282263][ T4177] usb 3-1: config 0 descriptor??
[  126.351885][ T4177] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  126.373560][ T5913] loop0: detected capacity change from 0 to 256
[  126.573437][ T4177] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  126.587884][ T5913] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  126.608262][ T5913] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  126.618248][ T4177] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  126.660573][ T5913] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  126.701634][ T2138] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  126.742050][ T5921] netlink: 232 bytes leftover after parsing attributes in process `syz.4.617'.
[  126.800262][ T5921] netlink: 56 bytes leftover after parsing attributes in process `syz.4.617'.
[  127.015746][ T4177] usb 3-1: USB disconnect, device number 8
[  127.030199][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  127.072324][ T4177] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  127.096999][ T4177] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  127.113390][ T4177] quatech2 3-1:0.51: device disconnected
[  127.164106][ T5907] loop3: detected capacity change from 0 to 32768
[  127.244943][ T2138] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  127.263593][ T2138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.282596][ T2138] usb 2-1: Product: syz
[  127.295205][ T2138] usb 2-1: Manufacturer: syz
[  127.307033][ T2138] usb 2-1: SerialNumber: syz
[  127.314474][ T2138] usb 2-1: config 0 descriptor??
[  127.411321][ T5907] XFS (loop3): Mounting V5 Filesystem
[  127.570891][ T2138] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  127.609339][ T5942] loop4: detected capacity change from 0 to 4096
[  127.681955][ T5946] netem: incorrect ge model size
[  127.687942][ T5946] netem: change failed
[  128.034462][ T5907] XFS (loop3): Ending clean mount
[  128.080577][ T2138] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  128.098532][ T2138] usb 2-1: USB disconnect, device number 6
[  128.277224][ T5907] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x189/0x240, xfs_agfl block 0x3 
[  128.343684][ T5962] device erspan0 entered promiscuous mode
[  128.356055][ T5907] XFS (loop3): Unmount and run xfs_repair
[  128.363723][ T5907] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  128.393585][ T5942] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  128.400854][ T5907] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00  XAFL......BN....
[  128.427215][ T5942] ntfs3: loop4: Failed to load $Extend.
[  128.447624][ T5907] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00  .... ...........
[  128.490097][ T5907] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1  ................
[  128.499025][ T5907] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5  ................
[  128.582068][ T5907] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  128.629127][ T5907] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  128.656236][ T5907] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  128.704969][   T26] audit: type=1800 audit(1781188793.729:40): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.623" name="file1" dev="loop4" ino=30 res=0 errno=0
[  128.755914][ T5907] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  128.783667][ T5907] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x1d3/0x360" at daddr 0x3 len 1 error 74
[  128.876814][ T4192] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22.
[  128.918275][ T5907] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  128.946567][ T4192] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22.
[  129.006062][ T5907] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  129.155801][ T4198] XFS (loop3): Unmounting Filesystem
[  129.551353][ T2138] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  129.671171][ T4177] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  129.757826][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'.
[  129.800610][ T2138] usb 3-1: Using ep0 maxpacket: 32
[  129.920448][ T2138] usb 3-1: unable to get BOS descriptor or descriptor too short
[  129.928249][ T2138] usb 3-1: too many configurations: 245, using maximum allowed: 8
[  130.020172][ T2138] usb 3-1: unable to read config index 0 descriptor/start: -71
[  130.034464][ T4177] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  130.057097][ T2138] usb 3-1: can't read configurations, error -71
[  130.065291][ T4177] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.089167][ T6007] loop1: detected capacity change from 0 to 512
[  130.098485][ T4177] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  130.114446][ T4177] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10
[  130.127279][ T4177] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33088, setting to 1024
[  130.226221][ T6007] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  130.260303][ T4177] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  130.279466][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  130.290060][ T5162] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  130.300599][ T4177] usb 5-1: Product: syz
[  130.304812][ T4177] usb 5-1: Manufacturer: syz
[  130.362182][ T4177] cdc_wdm 5-1:1.0: skipping garbage
[  130.371962][ T4177] cdc_wdm 5-1:1.0: skipping garbage
[  130.386901][ T4177] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  130.450197][ T4177] cdc_wdm 5-1:1.0: Unknown control protocol
[  130.548531][ T6017] netlink: 'syz.1.658': attribute type 11 has an invalid length.
[  130.583675][ T6017] netlink: 'syz.1.658': attribute type 11 has an invalid length.
[  130.606850][ T6017] netlink: 2704 bytes leftover after parsing attributes in process `syz.1.658'.
[  130.660246][ T5162] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.677752][ T5162] usb 1-1: config 0 has no interfaces?
[  130.690483][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  130.695293][ T5162] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  130.697892][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  130.719470][ T5162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.744732][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  130.751420][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  130.768981][ T4951] usb 5-1: USB disconnect, device number 5
[  130.778392][ T5162] usb 1-1: config 0 descriptor??
[  131.079262][ T5162] usb 1-1: USB disconnect, device number 5
[  131.902951][ T6053] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only
[  131.928079][ T6025] loop1: detected capacity change from 0 to 32768
[  132.020448][ T6053] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  132.182541][ T6065] loop2: detected capacity change from 0 to 512
[  132.190452][ T6025] XFS (loop1): Mounting V5 Filesystem
[  132.282486][ T6065] EXT4-fs (loop2): 1 truncate cleaned up
[  132.312982][ T6065] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,quota,,errors=continue. Quota mode: writeback.
[  132.424928][ T6025] XFS (loop1): Ending clean mount
[  132.711950][ T4188] XFS (loop1): Unmounting Filesystem
[  132.816937][ T6085] netlink: 32 bytes leftover after parsing attributes in process `syz.4.687'.
[  132.861852][ T6085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.687'.
[  132.875588][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.882046][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  132.948007][ T6087] device erspan0 entered promiscuous mode
[  133.514114][ T6071] loop3: detected capacity change from 0 to 40427
[  133.525600][ T6108] loop0: detected capacity change from 0 to 512
[  133.584684][ T6108] FAT-fs (loop0): Directory bread(block 199916) failed
[  133.606259][ T6108] FAT-fs (loop0): Directory bread(block 199917) failed
[  133.630446][ T6108] FAT-fs (loop0): Directory bread(block 199918) failed
[  133.637410][ T6108] FAT-fs (loop0): Directory bread(block 199919) failed
[  133.683857][ T6108] FAT-fs (loop0): Directory bread(block 199920) failed
[  133.710458][ T6108] FAT-fs (loop0): Directory bread(block 199921) failed
[  133.717414][ T6108] FAT-fs (loop0): Directory bread(block 199922) failed
[  133.755547][ T6108] FAT-fs (loop0): Directory bread(block 199923) failed
[  133.874158][ T6071] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  133.896146][ T6071] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  133.928203][ T6117] program syz.2.699 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  134.134925][ T6071] F2FS-fs (loop3): Found nat_bits in checkpoint
[  134.590410][ T6071] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  134.601103][ T6071] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  135.035107][ T6153] loop2: detected capacity change from 0 to 256
[  135.827305][ T6176] loop2: detected capacity change from 0 to 4096
[  135.956639][ T6187] netlink: 48 bytes leftover after parsing attributes in process `syz.4.720'.
[  136.261712][ T6210] loop3: detected capacity change from 0 to 256
[  136.795597][ T6176] ntfs: volume version 3.1.
[  137.046430][   T26] audit: type=1800 audit(1781188802.069:41): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.727" name="file1" dev="loop3" ino=1048594 res=0 errno=0
[  137.081361][ T6210] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  137.124081][ T6210] FAT-fs (loop3): Filesystem has been set read-only
[  137.895836][ T6228] loop4: detected capacity change from 0 to 40427
[  137.956266][ T6228] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  137.973554][ T6228] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  138.015540][ T6228] F2FS-fs (loop4): invalid crc value
[  138.086575][ T6228] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  138.475231][ T6228] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  138.486475][ T6228] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  138.609827][ T6258] loop1: detected capacity change from 0 to 512
[  138.805123][ T6258] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  138.816516][ T4192] attempt to access beyond end of device
[  138.816516][ T4192] loop4: rw=2049, want=45104, limit=40427
[  138.834799][ T6258] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  139.144825][ T6258] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 44 vs 41 free clusters
[  139.195480][ T6251] loop0: detected capacity change from 0 to 32768
[  139.246531][ T6258] EXT4-fs (loop1): Remounting filesystem read-only
[  139.276156][ T6258] EXT4-fs (loop1): 1 orphan inode deleted
[  139.313085][ T6258] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,lazytime,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,mblk_io_submit,barrier,quota,. Quota mode: writeback.
[  139.367516][ T6251] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  139.396091][ T6258] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.587008][ T6251] JBD2: Ignoring recovery information on journal
[  139.738084][ T6251] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  139.760593][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.759'.
[  139.952112][ T6285] loop1: detected capacity change from 0 to 1024
[  140.099144][ T6285] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  140.190138][ T6285] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.293154][ T6285] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.760: bg 0: block 112: padding at end of block bitmap is not set
[  140.388751][ T6285] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  140.472957][ T6293] loop2: detected capacity change from 0 to 4096
[  140.525722][ T6285] EXT4-fs (loop1): This should not happen!! Data will be lost
[  140.525722][ T6285] 
[  140.624623][ T6285] EXT4-fs (loop1): Total free blocks count 0
[  140.728526][ T4190] ocfs2: Unmounting device (7,0) on (node local)
[  140.740342][ T6293] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,,errors=continue. Quota mode: writeback.
[  140.749143][ T6285] EXT4-fs (loop1): Free/Dirty block details
[  140.836008][ T6285] EXT4-fs (loop1): free_blocks=0
[  140.870020][ T6285] EXT4-fs (loop1): dirty_blocks=16
[  140.896190][ T6285] EXT4-fs (loop1): Block reservation details
[  140.924541][ T6285] EXT4-fs (loop1): i_reserved_data_blocks=1
[  141.140103][ T4177] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  141.362754][ T6303] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  141.392065][ T4177] usb 4-1: Using ep0 maxpacket: 32
[  141.417067][ T6303] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  141.516904][ T4177] usb 4-1: config 2 has an invalid interface number: 88 but max is 0
[  141.532734][ T6289] loop4: detected capacity change from 0 to 40427
[  141.548622][ T4177] usb 4-1: config 2 has no interface number 0
[  141.581649][ T4177] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  141.617234][ T4177] usb 4-1: config 2 interface 88 has no altsetting 0
[  141.688535][ T6289] F2FS-fs (loop4): invalid crc value
[  141.725666][ T6289] F2FS-fs (loop4): Found nat_bits in checkpoint
[  141.735425][ T4951] kernel write not supported for file /cpuinfo (pid: 4951 comm: kworker/0:8)
[  141.840745][ T4177] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  141.881583][ T4177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.889646][ T4177] usb 4-1: Product: syz
[  141.951612][ T4177] usb 4-1: Manufacturer: syz
[  141.986801][ T4177] usb 4-1: SerialNumber: syz
[  142.008467][ T6289] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  142.030360][ T6297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  142.207277][ T4192] attempt to access beyond end of device
[  142.207277][ T4192] loop4: rw=2049, want=45104, limit=40427
[  142.283334][ T6297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  142.855705][ T6338] loop1: detected capacity change from 0 to 512
[  142.970194][ T4177] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  143.006304][ T4177] asix: probe of 4-1:2.88 failed with error -71
[  143.062066][ T6338] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback.
[  143.084801][ T4177] usb 4-1: USB disconnect, device number 6
[  143.091162][ T6338] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.844834][ T6369] tipc: Started in network mode
[  143.853957][ T6371] loop3: detected capacity change from 0 to 256
[  143.870239][ T6369] tipc: Node identity ac14140f, cluster identity 4711
[  143.910690][ T6369] tipc: New replicast peer: 255.255.255.255
[  143.917163][ T6369] tipc: Enabled bearer <udp:syz2>, priority 10
[  143.970902][ T6371] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  144.010051][ T6371] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  144.146758][ T6371] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  144.275838][ T2138] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  144.456460][ T6382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  144.650422][ T2138] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  144.671909][ T2138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  144.728481][ T2138] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  144.775608][ T2138] usb 3-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00
[  144.823965][ T2138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.850458][ T2138] usb 3-1: config 0 descriptor??
[  144.871619][ T6375] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  145.031017][ T5162] tipc: Node number set to 2886997007
[  145.082837][ T6372] loop1: detected capacity change from 0 to 32768
[  145.265644][ T6396] loop4: detected capacity change from 0 to 4096
[  145.325759][ T6372] XFS (loop1): Mounting V5 Filesystem
[  145.356634][ T2138] wacom 0003:056A:00E5.0002: ignoring exceeding usage max
[  145.418658][ T2138] wacom 0003:056A:00E5.0002: unknown main item tag 0x0
[  145.457715][ T2138] wacom 0003:056A:00E5.0002: unknown main item tag 0x2
[  145.491672][ T2138] wacom 0003:056A:00E5.0002: hidraw0: USB HID v0.05 Device [HID 056a:00e5] on usb-dummy_hcd.2-1/input0
[  145.632488][ T6396] ntfs: volume version 3.1.
[  145.673445][ T6372] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  145.696262][ T2138] usb 3-1: USB disconnect, device number 11
[  145.857029][ T6372] XFS (loop1): Starting recovery (logdev: internal)
[  145.864259][ T6417] fido_id[6417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  146.058737][ T6372] XFS (loop1): Ending recovery (logdev: internal)
[  146.296639][ T4188] XFS (loop1): Unmounting Filesystem
[  147.174929][ T6426] loop0: detected capacity change from 0 to 32768
[  147.490964][ T6426] XFS (loop0): Mounting V5 Filesystem
[  147.734082][ T6441] loop4: detected capacity change from 0 to 32768
[  147.829143][ T6426] XFS (loop0): Ending clean mount
[  147.886118][ T6426] XFS (loop0): Quotacheck needed: Please wait.
[  148.072421][ T6447] loop3: detected capacity change from 0 to 32768
[  148.176414][ T6426] XFS (loop0): Quotacheck: Done.
[  148.198849][ T6490] cgroup: Need name or subsystem set
[  148.265504][   T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  148.539808][ T6496] loop2: detected capacity change from 0 to 256
[  148.653142][ T6496] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  148.713487][   T13] usb 2-1: Using ep0 maxpacket: 32
[  148.785321][ T4190] XFS (loop0): Unmounting Filesystem
[  149.212133][   T13] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  149.250301][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.259022][   T13] usb 2-1: Product: syz
[  149.279703][   T13] usb 2-1: Manufacturer: syz
[  149.290722][   T13] usb 2-1: SerialNumber: syz
[  149.315427][   T13] usb 2-1: config 0 descriptor??
[  149.409455][   T13] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  149.451524][   T13] dvb-usb: bulk message failed: -22 (2/0)
[  149.474344][   T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  149.537562][   T13] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  149.555781][   T13] usb 2-1: media controller created
[  149.609754][ T6482] dvb-usb: bulk message failed: -22 (7/0)
[  149.637099][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  149.808745][   T13] usb 2-1: selecting invalid altsetting 7
[  149.846549][   T13] cxusb: set interface failed
[  149.864274][   T13] dvb-usb: bulk message failed: -22 (1/0)
[  149.980365][   T13] DVB: Unable to find symbol lgdt330x_attach()
[  150.021429][   T13] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  150.060650][ T6514] loop3: detected capacity change from 0 to 16
[  150.158517][ T6514] erofs: (device loop3): mounted with root inode @ nid 36.
[  150.245867][   T26] audit: type=1800 audit(1781188815.269:42): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.840" name="file1" dev="loop3" ino=86 res=0 errno=0
[  150.363526][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.835'.
[  150.393183][   T13] rc_core: IR keymap rc-dvico-portable not found
[  150.399604][   T13] Registered IR keymap rc-empty
[  150.419506][   T13] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  150.499809][   T13] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input13
[  150.567723][   T13] dvb-usb: schedule remote query interval to 100 msecs.
[  150.629987][   T13] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  150.715481][ T6536] loop0: detected capacity change from 0 to 512
[  150.735976][   T13] usb 2-1: USB disconnect, device number 7
[  150.825471][ T6536] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  150.862940][   T13] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  151.003582][ T6536] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000007,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  151.066025][ T6548] loop1: detected capacity change from 0 to 4096
[  151.073866][ T6536] ext4 filesystem being mounted at /183/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.146162][ T6553] loop4: detected capacity change from 0 to 256
[  151.516179][ T6553] FAT-fs (loop4): Directory bread(block 64) failed
[  151.564367][ T6553] FAT-fs (loop4): Directory bread(block 65) failed
[  151.618280][ T6553] FAT-fs (loop4): Directory bread(block 66) failed
[  151.625902][ T6548] ntfs: volume version 3.1.
[  151.660974][ T6553] FAT-fs (loop4): Directory bread(block 67) failed
[  151.667705][ T6553] FAT-fs (loop4): Directory bread(block 68) failed
[  151.710215][ T6553] FAT-fs (loop4): Directory bread(block 69) failed
[  151.728633][ T6553] FAT-fs (loop4): Directory bread(block 70) failed
[  151.748940][ T6553] FAT-fs (loop4): Directory bread(block 71) failed
[  151.770768][ T6553] FAT-fs (loop4): Directory bread(block 72) failed
[  151.834347][ T6553] FAT-fs (loop4): Directory bread(block 73) failed
[  152.158270][   T26] audit: type=1800 audit(1781188817.179:43): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.849" name="file1" dev="loop0" ino=15 res=0 errno=0
[  152.607905][ T6578] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.866'.
[  152.672023][ T6578] netlink: zone id is out of range
[  152.690533][ T6578] netlink: zone id is out of range
[  152.705282][ T6582] loop2: detected capacity change from 0 to 128
[  152.719621][ T6578] netlink: zone id is out of range
[  152.731363][ T6578] netlink: zone id is out of range
[  152.762738][ T6578] netlink: zone id is out of range
[  152.773910][ T6578] netlink: zone id is out of range
[  152.799277][ T6578] netlink: zone id is out of range
[  152.805106][ T6578] netlink: zone id is out of range
[  152.810701][ T6578] netlink: zone id is out of range
[  152.815910][ T6578] netlink: zone id is out of range
[  152.833532][ T6587] netlink: 64 bytes leftover after parsing attributes in process `syz.0.864'.
[  152.867983][ T6582] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  152.886909][ T6582] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  152.918984][    C1] vkms_vblank_simulate: vblank timer overrun
[  152.959691][ T6582] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 3391 (only 1 groups)
[  152.997335][ T6590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  153.107293][ T6590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  153.109301][ T6595] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead
[  153.109513][   T13] kernel read not supported for file /dsp1 (pid: 13 comm: kworker/0:1)
[  153.142854][ T6590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  153.156409][ T6595] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  153.560168][ T5162] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  153.624181][ T6604] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  153.658488][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'.
[  153.721964][ T6606] netlink: 'syz.0.877': attribute type 15 has an invalid length.
[  153.756444][ T6606] netlink: 'syz.0.877': attribute type 25 has an invalid length.
[  153.775996][   T13] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  153.784694][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'.
[  153.930681][ T5162] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  153.953992][ T5162] usb 4-1: config 0 has no interface number 0
[  153.975655][ T5162] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  153.996857][ T6611] loop0: detected capacity change from 0 to 1024
[  154.015846][ T6594] loop4: detected capacity change from 0 to 32768
[  154.049185][ T6613] loop2: detected capacity change from 0 to 1024
[  154.088656][ T6594] 
[  154.088656][ T6594]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.088656][ T6594] 
[  154.124557][ T6594] ERROR: (device loop4): diWrite: ixpxd invalid
[  154.124557][ T6594] 
[  154.181325][ T5162] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  154.183891][ T6594] ERROR: (device loop4): remounting filesystem as read-only
[  154.211897][ T5162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.226944][ T6594] ERROR: (device loop4): txCommit: 
[  154.226944][ T6594] 
[  154.280106][ T5162] usb 4-1: Product: syz
[  154.298989][ T5162] usb 4-1: Manufacturer: syz
[  154.317692][ T5162] usb 4-1: SerialNumber: syz
[  154.357011][   T13] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  154.382723][ T5162] usb 4-1: config 0 descriptor??
[  154.390370][   T13] usb 2-1: config 0 has no interface number 0
[  154.396555][   T13] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  154.443997][   T13] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.469364][ T6613] hfsplus: request for non-existent node -65536 in B*Tree
[  154.486005][   T13] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.495400][  T298] hfsplus: b-tree write err: -5, ino 25
[  154.499824][ T6613] hfsplus: request for non-existent node -65536 in B*Tree
[  154.531868][   T13] usb 2-1: config 0 interface 1 has no altsetting 0
[  154.539470][   T13] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  154.541906][ T5162] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  154.590758][  T298] hfsplus: b-tree write err: -5, ino 4
[  154.592751][ T6613] hfsplus: request for non-existent node -65536 in B*Tree
[  154.596648][  T298] hfsplus: b-tree write err: -5, ino 2
[  154.606301][ T6613] hfsplus: request for non-existent node -65536 in B*Tree
[  154.638258][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.704537][ T4192] 
[  154.704537][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.704537][ T4192] 
[  154.717179][   T13] usb 2-1: config 0 descriptor??
[  154.750486][ T4192] 
[  154.750486][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.750486][ T4192] 
[  154.763392][ T5162] usb 4-1: USB disconnect, device number 7
[  154.787359][ T5162] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  154.808812][ T6616] netlink: 'syz.0.882': attribute type 1 has an invalid length.
[  154.838563][ T6616] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.882'.
[  154.878994][ T4918] hfsplus: bad catalog file entry
[  155.857253][ T4965] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  156.019066][   T13] uclogic 0003:145F:0212.0003: failed retrieving string descriptor #100: -71
[  156.029769][   T13] uclogic 0003:145F:0212.0003: failed retrieving pen parameters: -71
[  156.060968][   T13] uclogic 0003:145F:0212.0003: pen probing failed: -71
[  156.068220][   T13] uclogic 0003:145F:0212.0003: failed probing parameters: -71
[  156.081997][   T13] uclogic: probe of 0003:145F:0212.0003 failed with error -71
[  156.125179][   T13] usb 2-1: USB disconnect, device number 8
[  156.169109][ T4965] usb 3-1: Using ep0 maxpacket: 8
[  156.226894][ T6638] loop0: detected capacity change from 0 to 32768
[  156.264144][ T6638] XFS: ikeep mount option is deprecated.
[  156.294563][ T6638] XFS: ikeep mount option is deprecated.
[  156.362511][ T4965] usb 3-1: unable to get BOS descriptor or descriptor too short
[  156.370477][ T6638] XFS (loop0): Mounting V5 Filesystem
[  156.402085][ T4965] usb 3-1: no configurations
[  156.419365][ T4965] usb 3-1: can't read configurations, error -22
[  156.456039][ T6638] XFS (loop0): Ending clean mount
[  156.503624][ T6638] XFS (loop0): Quotacheck needed: Please wait.
[  156.757816][ T6638] XFS (loop0): Quotacheck: Done.
[  156.939194][ T6658] program syz.1.896 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.941032][ T4177] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  157.074178][ T4190] XFS (loop0): Unmounting Filesystem
[  157.280385][ T4177] usb 4-1: Using ep0 maxpacket: 32
[  157.406037][ T4177] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  157.417288][ T4177] usb 4-1: config 0 has no interface number 0
[  157.590413][ T4177] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  157.620142][ T4177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.663998][ T4177] usb 4-1: Product: syz
[  157.668261][ T4177] usb 4-1: Manufacturer: syz
[  157.704887][ T4177] usb 4-1: SerialNumber: syz
[  157.744066][ T4177] usb 4-1: config 0 descriptor??
[  157.816424][ T4177] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  157.836146][ T4177] usb 4-1: selecting invalid altsetting 1
[  157.847476][ T4177] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  157.873841][ T4177] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  157.923658][ T4177] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  157.978440][ T4177] usb 4-1: media controller created
[  157.993453][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.898'.
[  158.039875][ T4177] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  158.202881][ T4177] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  158.245008][ T4177] zl10353_read_register: readreg error (reg=127, ret==-71)
[  158.290137][ T4177] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  158.441779][ T4177] usb 4-1: USB disconnect, device number 8
[  158.840451][    C1] vkms_vblank_simulate: vblank timer overrun
[  158.924342][ T6717] netlink: 76 bytes leftover after parsing attributes in process `syz.1.921'.
[  159.378805][ T6733] loop2: detected capacity change from 0 to 64
[  160.015589][ T6724] loop1: detected capacity change from 0 to 32768
[  160.174552][ T6724] 
[  160.174552][ T6724]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  160.174552][ T6724] 
[  160.216538][ T6724] ERROR: (device loop1): diWrite: ixpxd invalid
[  160.216538][ T6724] 
[  160.268452][ T6724] ERROR: (device loop1): remounting filesystem as read-only
[  160.296137][ T6724] ERROR: (device loop1): txCommit: 
[  160.296137][ T6724] 
[  160.356893][ T6751] loop4: detected capacity change from 0 to 512
[  160.474714][ T4188] 
[  160.474714][ T4188]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  160.474714][ T4188] 
[  160.510379][ T6751] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  160.512632][ T4188] 
[  160.512632][ T4188]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  160.512632][ T4188] 
[  160.777203][ T6751] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000007,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  160.868608][ T6751] ext4 filesystem being mounted at /207/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.968083][ T6738] loop0: detected capacity change from 0 to 32768
[  161.045928][ T6758] loop3: detected capacity change from 0 to 2048
[  161.141731][ T6758] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  161.232260][ T6738] XFS (loop0): Mounting V5 Filesystem
[  161.246031][ T6758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.427209][ T6738] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  161.460081][   T26] audit: type=1800 audit(1781188826.479:44): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.936" name="file1" dev="loop4" ino=15 res=0 errno=0
[  161.577220][ T6738] XFS (loop0): Starting recovery (logdev: internal)
[  161.675728][ T6738] XFS (loop0): Ending recovery (logdev: internal)
[  161.864501][ T4190] XFS (loop0): Unmounting Filesystem
[  162.136517][   T13] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  162.161085][ T6780] loop4: detected capacity change from 0 to 512
[  162.259680][ T6780] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  162.368628][ T6788] loop3: detected capacity change from 0 to 128
[  162.439807][ T6780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  162.490533][ T6780] System zones: 1-12
[  162.498353][ T6780] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  162.543722][ T6780] EXT4-fs (loop4): 1 truncate cleaned up
[  162.549440][ T6780] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none.
[  162.605572][ T6788] FAT-fs (loop3): Directory bread(block 162) failed
[  162.640369][ T6788] FAT-fs (loop3): Directory bread(block 163) failed
[  162.673245][ T6788] FAT-fs (loop3): Directory bread(block 164) failed
[  162.706254][ T6788] FAT-fs (loop3): Directory bread(block 165) failed
[  162.718182][   T13] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0
[  162.733652][ T6788] FAT-fs (loop3): Directory bread(block 166) failed
[  162.750362][ T6788] FAT-fs (loop3): Directory bread(block 167) failed
[  162.769978][   T13] usb 3-1: config 0 interface 0 has no altsetting 0
[  162.804669][ T6788] FAT-fs (loop3): Directory bread(block 168) failed
[  162.850477][ T6788] FAT-fs (loop3): Directory bread(block 169) failed
[  162.914794][ T6788] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  162.995239][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'.
[  163.042841][   T13] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  163.057182][ T6788] FAT-fs (loop3): Directory bread(block 162) failed
[  163.067025][   T13] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  163.095860][ T6788] FAT-fs (loop3): Directory bread(block 163) failed
[  163.118432][   T13] usb 3-1: Product: syz
[  163.134333][   T13] usb 3-1: Manufacturer: syz
[  163.139004][   T13] usb 3-1: SerialNumber: syz
[  163.152753][ T6788] attempt to access beyond end of device
[  163.152753][ T6788] loop3: rw=3, want=232, limit=128
[  163.200514][   T13] usb 3-1: config 0 descriptor??
[  163.209532][ T6788] attempt to access beyond end of device
[  163.209532][ T6788] loop3: rw=2051, want=234, limit=128
[  163.285569][   T13] usb 3-1: selecting invalid altsetting 0
[  163.594776][ T6775] usb 3-1: selecting invalid altsetting 0
[  163.631270][ T6775] usb 3-1: 0:0: usb_set_interface failed (-22)
[  163.667032][   T13] usb 3-1: USB disconnect, device number 14
[  164.024033][ T6817] loop3: detected capacity change from 0 to 64
[  164.269453][   T26] audit: type=1800 audit(1781188829.269:45): pid=6817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.958" name="bus" dev="loop3" ino=8 res=0 errno=0
[  164.400128][ T4177] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  164.803002][ T4177] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  164.824143][ T4177] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  164.872873][ T4177] usb 1-1: config 220 has no interface number 2
[  164.896841][ T4177] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  164.960310][ T4177] usb 1-1: config 220 interface 0 has no altsetting 0
[  164.988832][ T4177] usb 1-1: config 220 interface 76 has no altsetting 0
[  165.024490][ T4177] usb 1-1: config 220 interface 1 has no altsetting 0
[  165.100193][ T6830] loop4: detected capacity change from 0 to 128
[  165.198363][ T6830] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  165.210632][ T4177] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  165.226848][ T4177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.276347][ T6830] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  165.293006][ T4177] usb 1-1: Product: syz
[  165.297309][ T4177] usb 1-1: Manufacturer: syz
[  165.333405][ T4177] usb 1-1: SerialNumber: syz
[  165.352295][ T6838] binder: BC_ATTEMPT_ACQUIRE not supported
[  165.358978][ T6838] binder: 6837:6838 ioctl c0306201 2000000003c0 returned -22
[  165.385504][ T6830] EXT4-fs warning (device loop4): ext4_group_extend:1847: will only finish group (8193 blocks, 8129 new)
[  165.399076][ T6830] EXT4-fs warning (device loop4): ext4_group_extend:1852: can't read last block, resize aborted
[  165.427929][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'.
[  165.646608][ T6842] netlink: 64 bytes leftover after parsing attributes in process `syz.2.970'.
[  165.746271][ T4177] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  165.767405][ T4177] usb 1-1: No valid video chain found.
[  165.791763][ T4177] usb 1-1: selecting invalid altsetting 0
[  165.921616][ T4177] usb 1-1: selecting invalid altsetting 0
[  165.927788][ T4177] usbtest: probe of 1-1:220.1 failed with error -22
[  165.977522][ T6852] usb usb7: selecting invalid altsetting 6
[  165.992523][ T4177] usb 1-1: USB disconnect, device number 6
[  166.018455][   T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  166.439256][ T6862] loop2: detected capacity change from 0 to 4096
[  166.640109][   T13] usb 4-1: unable to get BOS descriptor or descriptor too short
[  166.759263][   T13] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  166.774760][   T13] usb 4-1: config 66 has 1 interface, different from the descriptor's value: 2
[  166.798118][   T13] usb 4-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  166.837690][   T13] usb 4-1: config 66 interface 0 has no altsetting 0
[  167.093578][ T6872] loop4: detected capacity change from 0 to 4096
[  167.116368][   T13] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  167.126268][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.189968][   T13] usb 4-1: Product: syz
[  167.194425][   T13] usb 4-1: Manufacturer: syz
[  167.199420][   T13] usb 4-1: SerialNumber: syz
[  167.201152][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'.
[  167.261960][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'.
[  167.396715][ T6872] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  167.647697][   T13] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint
[  167.728768][   T13] usb 4-1: USB disconnect, device number 9
[  167.894801][ T6890] loop2: detected capacity change from 0 to 1024
[  168.141435][ T6890] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block
[  168.141435][ T6890] 
[  168.172985][ T6896] program syz.3.991 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  168.204831][ T6890] netlink: 'syz.2.988': attribute type 1 has an invalid length.
[  168.240465][ T6890] netlink: 244 bytes leftover after parsing attributes in process `syz.2.988'.
[  168.320140][ T4177] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  168.498031][   T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  168.560071][ T4177] usb 1-1: Using ep0 maxpacket: 8
[  168.586047][ T6900] loop2: detected capacity change from 0 to 4096
[  168.690605][ T4177] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  168.698981][ T4177] usb 1-1: config 179 has no interface number 0
[  168.740200][ T4177] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  168.768877][ T4177] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  168.790075][ T4177] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  168.822701][ T4177] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  168.851968][ T6905] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  168.917525][ T4177] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  168.969658][ T4177] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  168.995708][ T4177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.034141][ T6888] loop1: detected capacity change from 0 to 40427
[  169.041140][ T6892] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  169.066538][   T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.079840][   T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  169.141569][ T6888] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff
[  169.213887][ T6888] F2FS-fs (loop1): invalid crc value
[  169.257992][   T13] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  169.293837][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  169.303507][   T13] usb 5-1: SerialNumber: syz
[  169.310923][ T6888] F2FS-fs (loop1): Found nat_bits in checkpoint
[  169.428930][ T2138] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input16
[  169.538912][ T4965] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  169.574647][ T6888] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  169.633041][   T13] usb 5-1: 0:2 : does not exist
[  169.652228][ T2138] usb 1-1: USB disconnect, device number 7
[  169.660002][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  169.690283][ T2138] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  169.782573][   T13] usb 5-1: USB disconnect, device number 6
[  169.873838][ T4188] attempt to access beyond end of device
[  169.873838][ T4188] loop1: rw=2049, want=45104, limit=40427
[  169.918317][ T4965] usb 4-1: Using ep0 maxpacket: 8
[  170.113665][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.132795][ T4951] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  170.145667][ T4965] usb 4-1: unable to get BOS descriptor or descriptor too short
[  170.279853][ T4965] usb 4-1: config 1 has an invalid interface descriptor of length 7, skipping
[  170.324945][ T4965] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.373470][ T4965] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  170.423593][ T6924] loop4: detected capacity change from 0 to 4096
[  170.522046][ T4951] usb 3-1: Using ep0 maxpacket: 32
[  170.540181][ T6927] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.607251][ T4965] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[  170.627887][ T4965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.653346][ T4965] usb 4-1: Product: syz
[  170.664146][ T4965] usb 4-1: Manufacturer: syz
[  170.684674][ T4965] usb 4-1: SerialNumber: syz
[  170.717230][ T4951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.745475][   T26] audit: type=1800 audit(1781188835.759:46): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1003" name="file1" dev="loop4" ino=15 res=0 errno=0
[  170.783196][ T4951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.815655][ T4951] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  170.843234][ T4951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.872245][ T4951] usb 3-1: config 0 descriptor??
[  170.963642][ T4177] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  170.985880][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'.
[  171.200197][ T4965] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  171.237679][ T4965] usb 4-1: 0:2 : does not exist
[  171.298882][ T4965] usb 4-1: USB disconnect, device number 10
[  171.330396][ T4177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.362871][ T4177] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  171.407288][ T6945] loop1: detected capacity change from 0 to 1024
[  171.425410][ T4177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.434075][ T4951] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x6
[  171.468903][ T4177] usb 1-1: config 0 descriptor??
[  171.493369][ T4951] savu 0003:1E7D:2D5A.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  171.581470][ T6945] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  171.634882][ T4951] usb 3-1: USB disconnect, device number 15
[  171.692368][ T4550] udevd[4550]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  171.868129][ T6952] fido_id[6952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  171.955711][ T4177] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  171.996319][ T4177] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input17
[  172.294581][ T4177] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  172.598378][ T6977] netlink: 'syz.3.1020': attribute type 11 has an invalid length.
[  172.759422][ T4177] usb 1-1: USB disconnect, device number 8
[  173.012571][ T6979] loop2: detected capacity change from 0 to 8192
[  173.166730][ T6979] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  173.200990][ T6979] REISERFS (device loop2): using ordered data mode
[  173.207553][ T6979] reiserfs: using flush barriers
[  173.254798][ T6979] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  173.297435][ T6979] REISERFS (device loop2): checking transaction log (loop2)
[  173.347716][ T6979] REISERFS (device loop2): Using r5 hash to sort names
[  173.390362][ T6979] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  173.710987][ T6981] loop1: detected capacity change from 0 to 32768
[  174.047164][ T7022] loop4: detected capacity change from 0 to 512
[  174.073411][ T7024] loop3: detected capacity change from 0 to 512
[  174.125186][ T7022] EXT4-fs (loop4): Ignoring removed oldalloc option
[  174.137962][ T7022] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  174.194680][ T7022] EXT4-fs (loop4): 1 truncate cleaned up
[  174.210306][ T7022] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none.
[  174.236974][ T7026] loop2: detected capacity change from 0 to 4096
[  174.295873][ T7024] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  174.372663][ T7024] EXT4-fs (loop3): invalid journal inode
[  174.378795][ T7024] EXT4-fs (loop3): can't get journal size
[  174.384559][ T6981] XFS (loop1): Mounting V5 Filesystem
[  174.634930][ T6981] XFS (loop1): Ending clean mount
[  174.687679][ T7024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[  174.708142][ T6981] XFS (loop1): User initiated shutdown received.
[  174.745263][ T7024] System zones: 1-12, 13-13
[  174.764566][ T6981] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  174.806124][ T7024] EXT4-fs (loop3): 1 truncate cleaned up
[  174.860068][ T6981] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  174.868770][ T7024] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback.
[  175.014043][ T4188] XFS (loop1): Unmounting Filesystem
[  175.033115][ T4951] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  175.092457][   T26] audit: type=1800 audit(1781188840.119:47): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1038" name="file1" dev="loop3" ino=15 res=0 errno=0
[  175.112847][    C1] vkms_vblank_simulate: vblank timer overrun
[  175.500417][ T4265] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  175.528294][ T7052] loop0: detected capacity change from 0 to 4096
[  175.684989][ T4951] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.710355][ T4951] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.750295][ T4265] usb 3-1: Using ep0 maxpacket: 16
[  175.870195][ T4265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.900092][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  175.937311][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  175.957692][ T4265] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  175.973163][ T4190] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  175.979656][ T4190] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  175.987979][ T4265] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  176.047453][ T4951] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  176.068703][ T4951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.077227][ T4951] usb 5-1: Product: syz
[  176.099979][ T4951] usb 5-1: Manufacturer: syz
[  176.127666][ T4951] usb 5-1: SerialNumber: syz
[  176.141160][ T4265] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  176.156284][ T4265] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  176.205438][ T4265] usb 3-1: Manufacturer: syz
[  176.243151][ T4265] usb 3-1: config 0 descriptor??
[  176.369651][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'.
[  176.523219][ T4951] usb 5-1: unit 255 not found!
[  176.563987][ T4951] usb 5-1: USB disconnect, device number 7
[  176.592294][ T4953] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  176.720267][ T4265] rc_core: IR keymap rc-hauppauge not found
[  176.726622][ T4265] Registered IR keymap rc-empty
[  176.748647][ T4265] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  176.790500][ T4265] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  176.831074][ T4265] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  176.854883][ T7083] loop0: detected capacity change from 0 to 2048
[  176.864647][ T4265] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18
[  176.926603][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.944476][ T4953] usb 4-1: Using ep0 maxpacket: 32
[  176.964910][ T4265] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  177.000526][ T4265] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  177.070198][ T4265] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  177.120906][ T4265] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  177.150525][ T4265] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  177.164704][ T4953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  177.212733][ T4265] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  177.273361][ T4265] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  177.308240][ T7096] loop4: detected capacity change from 0 to 164
[  177.320166][ T4265] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  177.333152][ T7097] netlink: 'syz.1.1065': attribute type 12 has an invalid length.
[  177.359700][ T4265] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  177.368532][ T7097] netlink: 'syz.1.1065': attribute type 29 has an invalid length.
[  177.409047][ T7097] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1065'.
[  177.420366][ T4265] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  177.459892][ T4265] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  177.474037][ T4953] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  177.483154][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'.
[  177.500052][ T4265] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  177.519982][ T4953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.547690][ T4953] usb 4-1: Product: syz
[  177.556317][ T4953] usb 4-1: Manufacturer: syz
[  177.582063][ T4953] usb 4-1: SerialNumber: syz
[  177.595903][ T4953] usb 4-1: config 0 descriptor??
[  177.601314][ T4265] usb 3-1: USB disconnect, device number 16
[  177.726727][ T4953] hub 4-1:0.0: bad descriptor, ignoring hub
[  177.739340][ T4953] hub: probe of 4-1:0.0 failed with error -5
[  177.751347][ T7102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1068'.
[  178.111925][ T4177] usb 4-1: USB disconnect, device number 11
[  178.596804][ T7123] loop0: detected capacity change from 0 to 4096
[  178.710781][ T7123] EXT4-fs (loop0): Test dummy encryption mode enabled
[  178.717672][ T7123] EXT4-fs (loop0): Ignoring removed oldalloc option
[  178.749418][ T7143] loop1: detected capacity change from 0 to 764
[  178.882088][ T7123] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003]
[  178.940349][ T7123] System zones: 0-5
[  179.038251][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'.
[  179.068598][ T7123] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  179.097804][ T7153] netlink: 'syz.2.1092': attribute type 1 has an invalid length.
[  179.344591][ T7165] device veth1_to_team entered promiscuous mode
[  179.376952][ T7165] device veth1_to_team left promiscuous mode
[  179.891486][ T7184] net_ratelimit: 110 callbacks suppressed
[  179.891506][ T7184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.482903][ T7210] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1117'.
[  180.546986][ T4177] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  180.549547][ T7210] netlink: 'syz.3.1117': attribute type 1 has an invalid length.
[  180.732496][ T7216] loop3: detected capacity change from 0 to 512
[  180.864349][ T7172] loop0: detected capacity change from 0 to 40427
[  180.920430][ T4177] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  180.938860][ T4177] usb 2-1: config 0 has no interface number 0
[  180.945492][ T7172] F2FS-fs (loop0): Invalid Fs Meta Ino: node(2305) meta(2) root(3)
[  180.970361][ T7172] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  180.991546][ T4177] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  181.016055][ T7216] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002]
[  181.081071][ T7216] System zones: 1-12
[  181.130930][ T7172] F2FS-fs (loop0): invalid crc value
[  181.143882][ T4177] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.158765][ T7216] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1119: Directory hole found for htree index block 0
[  181.195126][ T7172] F2FS-fs (loop0): Found nat_bits in checkpoint
[  181.231215][ T7216] EXT4-fs (loop3): Remounting filesystem read-only
[  181.249021][ T7216] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  181.267514][ T4177] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  181.296213][ T7216] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.1119: Directory hole found for htree index block 0
[  181.322400][ T7224] loop4: detected capacity change from 0 to 128
[  181.343245][ T4177] usb 2-1: config 0 interface 1 has no altsetting 0
[  181.368460][ T7216] EXT4-fs (loop3): Remounting filesystem read-only
[  181.380165][ T4177] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  181.391695][ T7216] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  181.403283][ T4177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.417039][ T7216] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback.
[  181.423463][ T4177] usb 2-1: config 0 descriptor??
[  181.533592][ T7172] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  181.549565][ T7216] EXT4-fs (loop3): shut down requested (2)
[  181.565514][ T7172] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  181.572330][ T7226] device macvlan2 entered promiscuous mode
[  181.738492][ T7229] attempt to access beyond end of device
[  181.738492][ T7229] loop0: rw=10241, want=45104, limit=40427
[  181.852591][ T4190] attempt to access beyond end of device
[  181.852591][ T4190] loop0: rw=2049, want=45112, limit=40427
[  182.016168][ T7235] loop2: detected capacity change from 0 to 256
[  182.159486][ T4177] uclogic 0003:145F:0212.0006: pen parameters not found
[  182.183258][ T4177] uclogic 0003:145F:0212.0006: interface is invalid, ignoring
[  182.366598][ T4177] usb 2-1: USB disconnect, device number 9
[  182.543572][ T7235] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x246dc941, utbl_chksum : 0xe619d30d)
[  182.577830][ T7247] loop3: detected capacity change from 0 to 512
[  182.714308][ T7247] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  182.782508][ T7247] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  183.079828][ T7258] loop0: detected capacity change from 0 to 512
[  183.185007][ T7258] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  183.413838][ T7258] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  183.533598][ T7258] Quota error (device loop0): write_blk: dquota write failed
[  183.550392][ T7258] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  183.596514][ T7258] Quota error (device loop0): write_blk: dquota write failed
[  183.646826][ T7258] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  183.710098][ T7258] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1125: Failed to acquire dquot type 1
[  183.800400][ T7284] loop9: detected capacity change from 0 to 524287999
[  183.832052][ T7258] EXT4-fs (loop0): 1 truncate cleaned up
[  183.837768][ T7258] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000010000,resgid=0x0000000000000000,norecovery,abort,auto_da_alloc,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  183.862963][    C1] vkms_vblank_simulate: vblank timer overrun
[  183.895976][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  183.907283][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  184.184370][ T7258] EXT4-fs error (device loop0): ext4_remount:6062: comm syz.0.1125: Abort forced by user
[  184.233421][ T7258] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[  184.294840][ T7287] loop_set_block_size: loop9 (3Ÿ¾‚³˜) has still dirty pages (nrpages=1)
[  184.336622][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  184.347640][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  184.370356][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  184.381373][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  184.400529][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  184.411545][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  184.450414][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  184.461429][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  184.476682][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  184.487698][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  184.565221][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  184.576199][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  184.592088][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  184.603109][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  184.611067][ T7284] ldm_validate_partition_table(): Disk read failed.
[  184.619237][ T7299] loop4: detected capacity change from 0 to 4096
[  184.650924][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  184.662442][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  184.710850][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  184.721851][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  184.812424][ T7284] Dev loop9: unable to read RDB block 0
[  184.838559][ T7284]  loop9: unable to read partition table
[  184.882326][ T7284] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  185.089250][ T4192] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  185.116768][ T4192] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  185.118626][ T7312] loop2: detected capacity change from 0 to 128
[  185.310432][ T7312] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  185.330420][ T7312] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.431832][   T26] audit: type=1800 audit(1781188850.459:48): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1158" name="file1" dev="loop2" ino=12 res=0 errno=0
[  185.718055][ T7333] loop1: detected capacity change from 0 to 512
[  185.853922][ T7333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  185.897135][ T7333] System zones: 1-12
[  185.946426][ T7333] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1166: invalid indirect mapped block 1819239214 (level 1)
[  186.057997][ T7333] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1166: bg 0: block 361: padding at end of block bitmap is not set
[  186.126918][ T7333] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  186.158661][ T7333] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1166: attempt to clear invalid blocks 33619980 len 1
[  186.232988][ T7333] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1166: invalid indirect mapped block 1819239214 (level 0)
[  186.318034][ T7333] EXT4-fs (loop1): 1 truncate cleaned up
[  186.336140][ T7333] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none.
[  186.607325][ T7356] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1179'.
[  187.440513][ T7381] loop4: detected capacity change from 0 to 64
[  187.526731][ T7383] loop2: detected capacity change from 0 to 256
[  187.621870][ T7388] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1191'.
[  187.906100][ T7394] loop0: detected capacity change from 0 to 1024
[  188.001846][ T7381] hfs: bad catalog entry type 0
[  188.194693][ T7396] loop3: detected capacity change from 0 to 256
[  188.330462][ T7396] exfat: Deprecated parameter 'utf8'
[  188.335850][ T7396] exfat: Deprecated parameter 'utf8'
[  188.546142][ T7396] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  188.848293][ T7420] loop2: detected capacity change from 0 to 512
[  189.260749][ T7432] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  190.173779][ T7475] loop1: detected capacity change from 0 to 512
[  190.187622][ T7477] tap0: tun_chr_ioctl cmd 1074025692
[  190.294737][ T7475] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  190.314103][ T7483] loop3: detected capacity change from 0 to 512
[  190.348396][ T7475] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  190.402074][ T7475] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  190.464568][ T7475] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  190.479680][ T7475] System zones: 0-2, 18-18, 34-35
[  190.521154][ T7475] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none.
[  190.603914][ T7483] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  190.648291][ T7483] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.723575][ T7495] loop2: detected capacity change from 0 to 512
[  190.791568][ T7475] EXT4-fs (loop1): resizing filesystem from 128 to 2 blocks
[  190.801966][ T7475] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted
[  190.906303][ T7495] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1240: inode #1: comm syz.2.1240: iget: illegal inode #
[  191.061729][ T7495] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1240: error while reading EA inode 1 err=-117
[  191.119817][ T7495] EXT4-fs (loop2): 1 orphan inode deleted
[  191.180433][ T7495] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  191.270134][ T4233] Bluetooth: hci4: command 0x0406 tx timeout
[  191.280581][ T4233] Bluetooth: hci2: command 0x0406 tx timeout
[  191.332415][ T4233] Bluetooth: hci1: command 0x0406 tx timeout
[  191.360195][ T4233] Bluetooth: hci0: command 0x0406 tx timeout
[  191.552219][ T7516] netlink: 'syz.2.1248': attribute type 4 has an invalid length.
[  191.820235][ T7520] lo speed is unknown, defaulting to 1000
[  191.908206][ T7520] lo speed is unknown, defaulting to 1000
[  191.996445][ T7520] lo speed is unknown, defaulting to 1000
[  192.319992][ T4233] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  192.463487][ T7533] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  192.530173][ T7533] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  192.570368][ T4233] usb 4-1: Using ep0 maxpacket: 8
[  192.618440][ T7533] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  192.685473][ T7533] overlayfs: conflicting lowerdir path
[  192.693011][ T4233] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  192.709310][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.828540][ T4236] lo speed is unknown, defaulting to 1000
[  192.836030][ T4233] pvrusb2: Hardware description: Terratec Grabster AV400
[  192.872586][ T4233] pvrusb2: **********
[  192.876052][ T7520] infiniband s
z1: set down
[  192.884734][ T4233] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  192.920409][ T7520] infiniband s
z1: added lo
[  192.930248][ T4233] pvrusb2: Important functionality might not be entirely working.
[  192.973005][ T4233] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  192.994778][ T7510] loop1: detected capacity change from 0 to 32768
[  193.038529][ T7520] infiniband s
z1: Couldn't open port 1
[  193.042279][ T4233] pvrusb2: **********
[  193.125896][ T2424] pvrusb2: Invalid write control endpoint
[  193.208783][ T7520] RDS/IB: s
z1: added
[  193.222391][ T7520] smc: adding ib device s
z1 with port count 1
[  193.237221][ T7520] smc:    ib device s
z1 port 1 has pnetid 
[  193.271034][ T2424] pvrusb2: Invalid write control endpoint
[  193.277357][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  193.295121][ T4951] lo speed is unknown, defaulting to 1000
[  193.309556][ T7520] lo speed is unknown, defaulting to 1000
[  193.338385][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  193.356361][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  193.366954][ T5162] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  193.384159][ T2424] pvrusb2: Device being rendered inoperable
[  193.429990][ T7525] pvrusb2: Attempted to execute control transfer when device not ok
[  193.468343][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  193.484444][ T2138] usb 4-1: USB disconnect, device number 12
[  193.510073][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  193.557218][ T2424] pvrusb2: Attached sub-driver cx25840
[  193.566729][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  193.596474][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  193.659785][ T7510] find_entry called with index >= next_index
[  193.694128][ T7510] find_entry called with index >= next_index
[  193.739606][ T7510] find_entry called with index >= next_index
[  193.756453][ T5162] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  193.786069][ T7510] find_entry called with index >= next_index
[  193.800372][ T5162] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  193.833250][ T7520] lo speed is unknown, defaulting to 1000
[  193.841691][ T7510] find_entry called with index >= next_index
[  193.851700][ T5162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.874703][ T7510] add_index: next_index = 0.  Resetting!
[  193.886128][ T7510] find_entry called with index >= next_index
[  193.904273][ T5162] usb 1-1: config 0 descriptor??
[  193.928343][ T7510] find_entry called with index >= next_index
[  193.952290][ T7510] find_entry called with index >= next_index
[  193.982482][ T5162] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  194.063732][ T7510] non-latin1 character 0x3ff found in JFS file name
[  194.106882][ T7560] netlink: 'syz.3.1266': attribute type 5 has an invalid length.
[  194.181490][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1266'.
[  194.192006][ T7510] mount with iocharset=utf8 to access
[  194.199730][ T5162] usb 1-1: USB disconnect, device number 9
[  194.302701][ T7562] loop4: detected capacity change from 0 to 24
[  194.328087][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.334646][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  194.610125][ T7520] lo speed is unknown, defaulting to 1000
[  194.664015][ T7566] loop3: detected capacity change from 0 to 1024
[  194.826043][ T7566] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  194.840124][ T7568] loop4: detected capacity change from 0 to 2048
[  194.944216][ T7573] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.976167][ T7566] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,dioread_nolock,barrier,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none.
[  195.065407][ T7566] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.183894][ T7566] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.1270: Freeing blocks not in datazone - block = 0, count = 16
[  195.216147][ T7520] lo speed is unknown, defaulting to 1000
[  195.313252][ T7566] EXT4-fs (loop3): Remounting filesystem read-only
[  195.843537][ T7520] lo speed is unknown, defaulting to 1000
[  195.933825][ T7589] netlink: 'syz.3.1276': attribute type 1 has an invalid length.
[  196.193390][ T7595] user requested TSC rate below hardware speed
[  196.343774][ T7599] team0: No ports can be present during mode change
[  196.380113][ T5162] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  196.590118][ T7601] loop3: detected capacity change from 0 to 1024
[  196.620177][ T5162] usb 2-1: Using ep0 maxpacket: 32
[  196.659772][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'.
[  196.741111][ T5162] usb 2-1: config 0 interface 0 has no altsetting 0
[  196.747880][ T5162] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[  196.771902][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'.
[  196.788924][ T5162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.809112][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'.
[  196.831559][ T5162] usb 2-1: config 0 descriptor??
[  196.934016][ T7613] trusted_key: encrypted_key: key user:syz not found
[  197.060957][ T4236] kernel write not supported for file /amidi2 (pid: 4236 comm: kworker/0:6)
[  197.322562][ T5162] logitech 0003:046D:C287.0007: unknown main item tag 0xe
[  197.344943][ T5162] logitech 0003:046D:C287.0007: unknown main item tag 0xd
[  197.390044][ T5162] logitech 0003:046D:C287.0007: unknown main item tag 0x1
[  197.422446][ T5162] logitech 0003:046D:C287.0007: hidraw0: USB HID v0.04 Device [HID 046d:c287] on usb-dummy_hcd.1-1/input0
[  197.462463][ T5162] logitech 0003:046D:C287.0007: no inputs found
[  197.529223][ T7623] loop0: detected capacity change from 0 to 2048
[  197.554838][ T5162] usb 2-1: USB disconnect, device number 10
[  197.757199][ T7626] fido_id[7626]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  197.855709][ T7630] program syz.0.1296 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  198.106973][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1299'.
[  198.387302][ T7648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1304'.
[  198.658567][ T7662] vcan0: tx address claim with dlc 0
[  199.069856][ T7676] loop2: detected capacity change from 0 to 512
[  199.263698][ T7676] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.1317: corrupted inode contents
[  199.279106][ T7676] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  199.288672][ T7676] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.1317: corrupted inode contents
[  199.302258][ T7676] EXT4-fs error (device loop2): ext4_evict_inode:332: inode #15: comm syz.2.1317: mark_inode_dirty error
[  199.331882][ T7676] EXT4-fs (loop2): 1 orphan inode deleted
[  199.386115][ T7676] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  199.457626][ T7650] loop4: detected capacity change from 0 to 32768
[  199.525299][ T7650] (syz.4.1306,7650,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  199.569389][ T7650] (syz.4.1306,7650,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  199.678151][ T7687] loop0: detected capacity change from 0 to 128
[  199.679490][ T7650] JBD2: Ignoring recovery information on journal
[  199.796172][ T7687] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported.
[  199.839972][ T7687] MINIX-fs: bad superblock
[  199.876790][ T7650] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  200.265923][ T7650] ocfs2: Unmounting device (7,4) on (node local)
[  200.376553][ T7673] loop3: detected capacity change from 0 to 40427
[  200.714894][ T7708] loop1: detected capacity change from 0 to 512
[  200.866767][ T7710] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1332'.
[  200.886052][ T7693] loop2: detected capacity change from 0 to 32768
[  201.143009][ T7673] F2FS-fs (loop3): invalid crc value
[  201.185971][ T7673] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  201.549710][ T7673] F2FS-fs (loop3): Start checkpoint disabled!
[  201.666048][ T7673] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  201.948189][    T9] attempt to access beyond end of device
[  201.948189][    T9] loop3: rw=2049, want=45104, limit=40427
[  202.249421][ T7725] loop4: detected capacity change from 0 to 32768
[  202.265403][ T7746] syzkaller0: tun_chr_ioctl cmd 1074025694
[  202.327638][ T7725] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1337 (7725)
[  202.440583][ T4236] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  202.476564][ T7725] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  202.534002][ T7725] BTRFS info (device loop4): using free space tree
[  202.573328][ T7725] BTRFS info (device loop4): has skinny extents
[  203.018934][ T7725] BTRFS info (device loop4): enabling ssd optimizations
[  203.042487][ T7783] loop1: detected capacity change from 0 to 64
[  203.102283][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.124735][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.165831][ T4236] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  203.210356][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.238289][ T4236] usb 1-1: config 0 descriptor??
[  203.287224][ T7787] loop3: detected capacity change from 0 to 256
[  203.771640][ T4236] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  203.797268][ T4236] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input19
[  203.961358][ T4236] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  204.086500][   T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  204.193146][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1363'.
[  204.295601][ T4236] usb 1-1: USB disconnect, device number 10
[  204.376424][ T7798] fido_id[7798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  204.531856][ T7789] loop2: detected capacity change from 0 to 32768
[  204.722224][   T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.733801][   T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.771571][   T13] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  204.795824][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.859738][   T13] usb 2-1: config 0 descriptor??
[  205.170577][ T7789] XFS (loop2): Mounting V5 Filesystem
[  205.186729][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'.
[  205.277502][ T7789] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  205.290721][ T4236] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  205.310292][ T5155] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  205.335058][ T7789] XFS (loop2): Starting recovery (logdev: internal)
[  205.388546][   T13] sony 0003:054C:0BA0.0009: item fetching failed at offset 0/7
[  205.390384][ T7789] XFS (loop2): Ending recovery (logdev: internal)
[  205.403042][   T13] sony 0003:054C:0BA0.0009: parse failed
[  205.403118][   T13] sony: probe of 0003:054C:0BA0.0009 failed with error -22
[  205.550435][ T5155] usb 4-1: Using ep0 maxpacket: 16
[  205.625607][   T13] usb 2-1: USB disconnect, device number 11
[  205.670779][ T5155] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.683013][ T4189] XFS (loop2): Unmounting Filesystem
[  205.701187][ T5155] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.723831][ T5155] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  205.746582][ T5155] usb 4-1: config 0 interface 0 has no altsetting 0
[  205.755080][ T5155] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  205.771226][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.788475][ T7823] Failed to get privilege flags for destination (handle=0x2:0x400)
[  205.813945][ T5155] usb 4-1: config 0 descriptor??
[  205.859128][ T4236] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  205.875049][ T4236] usb 1-1: config 0 has no interface number 0
[  205.899990][ T4236] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  205.924387][ T4236] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  205.964751][ T4236] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  205.989165][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.052921][ T4236] usb 1-1: config 0 descriptor??
[  206.102889][ T7808] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  206.154798][ T4236] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  206.392376][   T13] usb 1-1: USB disconnect, device number 11
[  206.518907][ T5155] usb 4-1: USB disconnect, device number 13
[  208.065024][ T7858] loop2: detected capacity change from 0 to 4096
[  208.181544][ T7865] netlink: 'syz.0.1389': attribute type 1 has an invalid length.
[  208.189362][ T7865] netlink: 'syz.0.1389': attribute type 2 has an invalid length.
[  208.242785][ T7843] loop1: detected capacity change from 0 to 32768
[  208.252413][ T7865] netlink: 'syz.0.1389': attribute type 1 has an invalid length.
[  208.274809][ T7865] netlink: 'syz.0.1389': attribute type 2 has an invalid length.
[  208.305715][ T7858] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  208.380565][ T7843] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1380 (7843)
[  208.537519][ T7843] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  208.563105][ T7843] BTRFS info (device loop1): using free space tree
[  208.569692][ T7843] BTRFS info (device loop1): has skinny extents
[  208.776787][ T7893] netem: change failed
[  208.953218][ T7906] loop2: detected capacity change from 0 to 256
[  209.044768][  T144] wlan1: Trigger new scan to find an IBSS to join
[  209.138403][  T144] ------------[ cut here ]------------
[  209.145122][  T144] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20
[  209.158170][  T144] WARNING: CPU: 0 PID: 144 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880
[  209.168196][  T144] Modules linked in:
[  209.172215][  T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0
[  209.179723][  T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  209.189867][  T144] Workqueue: phy12 ieee80211_scan_work
[  209.195461][  T144] RIP: 0010:__rate_control_send_low+0x630/0x880
[  209.202228][  T144] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 00 a0 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 01 6a 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff
[  209.222007][  T144] RSP: 0018:ffffc9000165f488 EFLAGS: 00010246
[  209.228124][  T144] RAX: 32aa7077b9795700 RBX: 000000000000000c RCX: ffff888017b98000
[  209.236271][  T144] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[  209.245820][  T144] RBP: 0000000000000084 R08: ffffc9000165efa7 R09: 1ffff920002cbdf4
[  209.254060][  T144] R10: dffffc0000000000 R11: fffff520002cbdf5 R12: ffff88802abd5a28
[  209.262111][  T144] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020
[  209.270162][  T144] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  209.279140][  T144] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  209.285957][  T144] CR2: 00007f55b67e5000 CR3: 0000000062075000 CR4: 00000000003506f0
[  209.294381][  T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  209.302652][  T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  209.310706][  T144] Call Trace:
[  209.314029][  T144]  <TASK>
[  209.317019][  T144]  rate_control_send_low+0x194/0x790
[  209.322402][  T144]  ? ieee80211_scan_work+0x4eb/0x1b40
[  209.323160][ T7906] FAT-fs (loop2): Directory bread(block 64) failed
[  209.327893][  T144]  rate_control_get_rate+0x207/0x5c0
[  209.339823][  T144]  ieee80211_tx_h_rate_ctrl+0xb02/0x1700
[  209.345569][  T144]  ? ieee80211_tx_h_select_key+0x17f0/0x17f0
[  209.351790][  T144]  ? sta_info_hash_lookup+0x53e/0x580
[  209.357248][  T144]  ? ieee80211_queue_skb+0xbc/0x2060
[  209.362626][  T144]  invoke_tx_handlers_late+0xaa/0x16a0
[  209.368137][  T144]  ? ieee80211_tx_h_select_key+0x12c0/0x17f0
[  209.374209][  T144]  ? sta_info_get+0x220/0x230
[  209.378959][  T144]  ? invoke_tx_handlers_early+0xa11/0x1d10
[  209.385009][  T144]  ieee80211_tx+0x2d4/0x460
[  209.389603][  T144]  ? ieee80211_skb_resize+0x630/0x630
[  209.395386][  T144]  __ieee80211_tx_skb_tid_band+0x165/0x200
[  209.401594][  T144]  ieee80211_scan_state_send_probe+0x526/0x8a0
[  209.407857][  T144]  ieee80211_scan_work+0x4eb/0x1b40
[  209.413336][  T144]  process_one_work+0x85f/0x1010
[  209.420120][  T144]  ? worker_detach_from_pool+0x240/0x240
[  209.425824][  T144]  ? lockdep_hardirqs_off+0x70/0x100
[  209.433953][  T144]  ? _raw_spin_lock_irq+0xb7/0xf0
[  209.439035][  T144]  ? _raw_spin_lock_irqsave+0x100/0x100
[  209.440716][ T7906] FAT-fs (loop2): Directory bread(block 65) failed
[  209.444660][  T144]  ? wq_worker_running+0x97/0x170
[  209.456270][  T144]  worker_thread+0xaa6/0x1290
[  209.461348][  T144]  kthread+0x436/0x520
[  209.465477][  T144]  ? rcu_lock_release+0x20/0x20
[  209.470446][  T144]  ? kthread_blkcg+0xd0/0xd0
[  209.475093][  T144]  ret_from_fork+0x1f/0x30
[  209.479574][  T144]  </TASK>
[  209.482695][  T144] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  209.490011][  T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0
[  209.497508][  T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  209.507644][  T144] Workqueue: phy12 ieee80211_scan_work
[  209.513184][  T144] Call Trace:
[  209.516499][  T144]  <TASK>
[  209.519461][  T144]  dump_stack_lvl+0x188/0x250
[  209.524190][  T144]  ? show_regs_print_info+0x20/0x20
[  209.527016][ T7906] FAT-fs (loop2): Directory bread(block 66) failed
[  209.529435][  T144]  ? load_image+0x400/0x400
[  209.529477][  T144]  panic+0x2e5/0x810
[  209.544432][  T144]  ? bpf_jit_dump+0xd0/0xd0
[  209.548996][  T144]  ? ret_from_fork+0x1f/0x30
[  209.553634][  T144]  ? __rate_control_send_low+0x630/0x880
[  209.559318][  T144]  __warn+0x248/0x2b0
[  209.563347][  T144]  ? __rate_control_send_low+0x630/0x880
[  209.569038][  T144]  report_bug+0x1b7/0x2e0
[  209.573431][  T144]  handle_bug+0x3a/0x70
[  209.577643][  T144]  exc_invalid_op+0x16/0x40
[  209.582205][  T144]  asm_exc_invalid_op+0x16/0x20
[  209.582603][ T7906] FAT-fs (loop2): Directory bread(block 67) failed
[  209.587104][  T144] RIP: 0010:__rate_control_send_low+0x630/0x880
[  209.587137][  T144] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 00 a0 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 01 6a 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff
[  209.587156][  T144] RSP: 0018:ffffc9000165f488 EFLAGS: 00010246
[  209.628692][  T144] RAX: 32aa7077b9795700 RBX: 000000000000000c RCX: ffff888017b98000
[  209.636709][  T144] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[  209.644769][  T144] RBP: 0000000000000084 R08: ffffc9000165efa7 R09: 1ffff920002cbdf4
[  209.652797][  T144] R10: dffffc0000000000 R11: fffff520002cbdf5 R12: ffff88802abd5a28
[  209.660817][  T144] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020
[  209.668855][  T144]  ? __rate_control_send_low+0x630/0x880
[  209.674554][  T144]  rate_control_send_low+0x194/0x790
[  209.679891][  T144]  ? ieee80211_scan_work+0x4eb/0x1b40
[  209.685317][  T144]  rate_control_get_rate+0x207/0x5c0
[  209.690650][  T144]  ieee80211_tx_h_rate_ctrl+0xb02/0x1700
[  209.696346][  T144]  ? ieee80211_tx_h_select_key+0x17f0/0x17f0
[  209.702391][  T144]  ? sta_info_hash_lookup+0x53e/0x580
[  209.707861][  T144]  ? ieee80211_queue_skb+0xbc/0x2060
[  209.713203][  T144]  invoke_tx_handlers_late+0xaa/0x16a0
[  209.714808][ T7906] FAT-fs (loop2): Directory bread(block 68) failed
[  209.718713][  T144]  ? ieee80211_tx_h_select_key+0x12c0/0x17f0
[  209.731232][  T144]  ? sta_info_get+0x220/0x230
[  209.735971][  T144]  ? invoke_tx_handlers_early+0xa11/0x1d10
[  209.742499][  T144]  ieee80211_tx+0x2d4/0x460
[  209.747062][  T144]  ? ieee80211_skb_resize+0x630/0x630
[  209.752513][  T144]  __ieee80211_tx_skb_tid_band+0x165/0x200
[  209.758385][  T144]  ieee80211_scan_state_send_probe+0x526/0x8a0
[  209.764629][  T144]  ieee80211_scan_work+0x4eb/0x1b40
[  209.769974][  T144]  process_one_work+0x85f/0x1010
[  209.774981][  T144]  ? worker_detach_from_pool+0x240/0x240
[  209.780662][  T144]  ? lockdep_hardirqs_off+0x70/0x100
[  209.786096][  T144]  ? _raw_spin_lock_irq+0xb7/0xf0
[  209.791434][  T144]  ? _raw_spin_lock_irqsave+0x100/0x100
[  209.797122][  T144]  ? wq_worker_running+0x97/0x170
[  209.802472][  T144]  worker_thread+0xaa6/0x1290
[  209.807251][  T144]  kthread+0x436/0x520
[  209.811383][  T144]  ? rcu_lock_release+0x20/0x20
[  209.816299][  T144]  ? kthread_blkcg+0xd0/0xd0
[  209.820941][  T144]  ret_from_fork+0x1f/0x30
[  209.825433][  T144]  </TASK>
[  209.829163][  T144] Kernel Offset: disabled
[  209.834066][  T144] Rebooting in 86400 seconds..