last executing test programs:

3.768486388s ago: executing program 0 (id=1030):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0)

3.561818999s ago: executing program 0 (id=1036):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

3.369945452s ago: executing program 0 (id=1052):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000022c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)

3.246546113s ago: executing program 0 (id=1043):
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x1010003, &(0x7f00000002c0)=ANY=[@ANYBLOB="696e746567726974792c646973636172643d3078303030303030303030303030303030302c75737271756f74612c696f636861727365743d6370383530006572726f72733d72656d6f756e742d726f2c64697363ea7353b72433e73b", @ANYRESHEX=0x0, @ANYRESDEC], 0x23, 0x61fb, &(0x7f0000009680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

2.911050147s ago: executing program 2 (id=1048):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000340)=0xfffffffe, 0x4)
connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

2.781861999s ago: executing program 2 (id=1049):
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x20}], 0x1, 0x0, 0x0, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10010, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0xa0180, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086e8b, &(0x7f0000000100)={0x8001, 0x1000, 0x3, 0x0, 0x3, 0x0, 0x2401})

2.331781313s ago: executing program 1 (id=1055):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x82100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x20000, 0xffffff}]})

2.268094104s ago: executing program 3 (id=1058):
r0 = socket(0x2, 0x80805, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000000000200000000002000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0)

2.066696227s ago: executing program 3 (id=1060):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xbbe3}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x110}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840)

2.030887927s ago: executing program 1 (id=1061):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000740)={0x1, 0x0, [{0x40000084, 0x0, 0x7}]})

1.965453808s ago: executing program 3 (id=1062):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0)

1.931506978s ago: executing program 1 (id=1063):
r0 = userfaultfd(0x80801)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000000})
ppoll(&(0x7f0000007380)=[{r1, 0x280}], 0x1, &(0x7f0000007400), 0x0, 0x0)

1.843561379s ago: executing program 2 (id=1064):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x101, @private0, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000240)='B', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x9403, 0x3, 0x4, 0x9, 0x9, 0x8, 0x8000}, 0x20)

1.839669279s ago: executing program 1 (id=1076):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='./bus\x00', 0x10000, &(0x7f00000009c0)={[{@utf8}, {@dmask={'dmask', 0x3d, 0x6}}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x1}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x1, 0x1535, &(0x7f0000002c00)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc042, 0x0)
unlink(&(0x7f0000000280)='./file1\x00')
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC=0x0, @ANYRESOCT], 0xff, 0x5512, &(0x7f00000079c0)="$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")

1.79769251s ago: executing program 0 (id=1066):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000005880)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@max_inline={'max_inline', 0x3d, [0x30, 0x30, 0x32, 0x74, 0x74, 0x0]}}, {@noautodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x6d]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.641667921s ago: executing program 2 (id=1068):
unshare(0x26020480)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file7\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0)

1.272045096s ago: executing program 4 (id=1072):
r0 = socket(0x2, 0x80805, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000000000200000000002000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0)

1.108155838s ago: executing program 4 (id=1073):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfa, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c891}, 0x84)

1.012888239s ago: executing program 4 (id=1074):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xfffd, 0xb, @dev={0xfe, 0x80, '\x00', 0x2f}}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r0, 0x8b2c, &(0x7f0000000040))

1.007010168s ago: executing program 3 (id=1085):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, 0x40000000, 0x0, 0x0, 0xfffffe, 0x4, 0xfffffffd, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0xd1b, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0xd6, 0x0, 0xfffffffd, 0x5, 0x0, 0xffffffff, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x1, 0x1000, 0xe], [0x8, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x4, 0x0, 0x0, 0xfffffffd, 0xb, 0x0, 0x2, 0x9000000, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x3, 0x0, 0x0, 0x0, 0x5fa, 0x7, 0x0, 0x80, 0x100, 0xfffffffd, 0x0, 0x0, 0x7, 0x1, 0x2000, 0x80000003], [0x8000000, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000000, 0x100000, 0x0, 0x0, 0x400, 0x40, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x6a1a, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xfffffffe, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x5, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x80000000, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x683, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4058, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x2, 0x0, 0x0, 0xffffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
read$FUSE(r0, 0x0, 0x0)

912.43436ms ago: executing program 4 (id=1075):
r0 = socket$inet6(0xa, 0x3, 0x3c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0x80}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

663.925092ms ago: executing program 4 (id=1077):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

663.184112ms ago: executing program 3 (id=1088):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x3c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x7040}, 0x20004800)

653.034833ms ago: executing program 2 (id=1078):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123202, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa77, &(0x7f0000000e80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)

578.227373ms ago: executing program 3 (id=1079):
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220500000051d4b3"], 0x0}, 0x0)

491.104974ms ago: executing program 4 (id=1080):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86)

143.504829ms ago: executing program 0 (id=1081):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0xa10450, &(0x7f0000000200)=ANY=[], 0x1, 0x1ab, &(0x7f0000001f80)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000280)=""/202, 0xca)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

142.635419ms ago: executing program 1 (id=1093):
r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x168503)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x22)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0x82)

122.394739ms ago: executing program 2 (id=1082):
setresgid(0x0, 0xee01, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000023c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000002400)=0xc)
setresgid(0x0, 0x0, r1)

0s ago: executing program 1 (id=1083):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000008140)={0x2020}, 0x207f)
pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35)
read$FUSE(r0, &(0x7f0000003340)={0x2020}, 0x2066)

kernel console output (not intermixed with test programs):

block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   88.458612][ T2286] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   88.476475][  T155] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1599 with error 28
[   88.494476][ T4621] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[   88.517546][ T4621] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   88.522869][  T155] EXT4-fs (loop0): This should not happen!! Data will be lost
[   88.522869][  T155] 
[   88.545191][ T4623] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   88.589457][ T4623] EXT4-fs (loop3): orphan cleanup on readonly fs
[   88.608073][  T155] EXT4-fs (loop0): Total free blocks count 0
[   88.635736][ T4623] __quota_error: 36 callbacks suppressed
[   88.635753][ T4623] Quota error (device loop3): v2_read_file_info: Can't read info structure
[   88.651086][ T4623] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   88.666183][ T4623] EXT4-fs (loop3): Cannot turn on quotas: error -5
[   88.718740][ T4623] EXT4-fs (loop3): 1 truncate cleaned up
[   88.726150][  T155] EXT4-fs (loop0): Free/Dirty block details
[   88.727317][ T4623] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback.
[   88.760314][ T4632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.135'.
[   88.781487][  T155] EXT4-fs (loop0): free_blocks=65280
[   88.786845][  T155] EXT4-fs (loop0): dirty_blocks=1599
[   88.835918][  T155] EXT4-fs (loop0): Block reservation details
[   88.848273][  T155] EXT4-fs (loop0): i_reserved_data_blocks=1599
[   88.876607][ T2286] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[   89.077375][ T4639] loop2: detected capacity change from 0 to 4096
[   89.098763][ T2286] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   89.107871][ T2286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.137364][ T2286] usb 5-1: Product: syz
[   89.147503][ T2286] usb 5-1: Manufacturer: syz
[   89.156029][ T2286] usb 5-1: SerialNumber: syz
[   89.176831][ T2286] usb 5-1: config 0 descriptor??
[   89.191678][ T4639] EXT4-fs (loop2): Ignoring removed bh option
[   89.245060][ T2286] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   89.262802][ T2286] usb 5-1: setting power ON
[   89.286013][ T4639] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback.
[   89.327219][ T2286] dvb-usb: bulk message failed: -22 (2/0)
[   89.401679][ T2286] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   89.421500][ T4639] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz.2.137: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   89.455426][ T4639] EXT4-fs (loop2): Remounting filesystem read-only
[   89.503695][ T2286] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19)
[   89.518402][ T4639] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.137: directory missing '..'
[   89.541933][ T2286] dvb_usb_cxusb: probe of 5-1:0.0 failed with error -22
[   89.608590][ T2286] usb 5-1: USB disconnect, device number 4
[   89.908801][   T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   90.032102][ T4669] loop1: detected capacity change from 0 to 256
[   90.043458][ T4668] loop4: detected capacity change from 0 to 512
[   90.083979][ T4665] loop2: detected capacity change from 0 to 4096
[   90.109879][ T4669] exfat: Deprecated parameter 'utf8'
[   90.119117][ T4669] exfat: Deprecated parameter 'namecase'
[   90.124852][ T4669] exfat: Deprecated parameter 'namecase'
[   90.137474][ T4665] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   90.212772][ T4669] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[   90.227698][ T4668] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   90.248744][ T4668] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.284084][   T23] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[   90.308091][   T23] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   90.329641][ T4674] capability: warning: `syz.1.147' uses deprecated v2 capabilities in a way that may be insecure
[   90.387425][   T23] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   90.442175][   T23] usb 4-1: config 220 has no interface number 2
[   90.469900][   T23] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   90.489113][  T154] ntfs3: loop2: ino=1b, Internal error
[   90.506935][  T154] ntfs3: loop2: ntfs3_write_inode r=1b failed, -22.
[   90.534833][ T4190] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[   90.546956][ T4190] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[   90.565580][   T23] usb 4-1: config 220 interface 0 has no altsetting 0
[   90.579683][ T4190] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   90.609003][   T23] usb 4-1: config 220 interface 76 has no altsetting 0
[   90.628293][   T23] usb 4-1: config 220 interface 1 has no altsetting 0
[   90.730549][ T4682] loop1: detected capacity change from 0 to 128
[   90.765362][ T4682] FAT-fs (loop1): bogus number of reserved sectors
[   90.816032][ T4682] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   90.868341][   T23] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   90.887803][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.896261][ T4682] FAT-fs (loop1): Can't find a valid FAT filesystem
[   90.921208][   T23] usb 4-1: Product: syz
[   90.933885][   T23] usb 4-1: Manufacturer: syz
[   90.953896][   T23] usb 4-1: SerialNumber: syz
[   91.165394][    T9] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   91.199870][    T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[   91.224591][    T9] EXT4-fs (loop4): This should not happen!! Data will be lost
[   91.224591][    T9] 
[   91.234989][    T9] EXT4-fs (loop4): Total free blocks count 0
[   91.241453][    T9] EXT4-fs (loop4): Free/Dirty block details
[   91.247495][    T9] EXT4-fs (loop4): free_blocks=65280
[   91.253347][    T9] EXT4-fs (loop4): dirty_blocks=3741
[   91.266224][    T9] EXT4-fs (loop4): Block reservation details
[   91.272696][    T9] EXT4-fs (loop4): i_reserved_data_blocks=3741
[   91.346585][ T4694] loop0: detected capacity change from 0 to 512
[   91.359672][   T23] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[   91.367048][    T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1692 with error 28
[   91.376751][   T23] usb 4-1: No valid video chain found.
[   91.386069][   T23] usb 4-1: selecting invalid altsetting 0
[   91.398289][    T9] EXT4-fs (loop4): This should not happen!! Data will be lost
[   91.398289][    T9] 
[   91.456689][ T4694] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback.
[   91.504588][ T4694] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.538194][   T23] usb 4-1: selecting invalid altsetting 0
[   91.544190][   T23] usbtest: probe of 4-1:220.1 failed with error -22
[   91.560612][   T23] usb 4-1: USB disconnect, device number 4
[   91.614477][ T4694] EXT4-fs error (device loop0): ext4_get_first_dir_block:3608: inode #12: comm syz.0.160: directory missing '.'
[   91.642479][ T4694] EXT4-fs (loop0): Remounting filesystem read-only
[   91.669616][ T4684] loop2: detected capacity change from 0 to 32768
[   91.830114][ T4700] loop4: detected capacity change from 0 to 256
[   91.966675][ T4709] loop3: detected capacity change from 0 to 512
[   91.978302][ T4700] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   92.022884][ T4700] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[   92.060245][ T4700] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   92.098425][ T4709] EXT4-fs (loop3): Ignoring removed oldalloc option
[   92.121066][ T4709] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   92.148722][ T4713] mkiss: ax0: crc mode is auto.
[   92.185370][ T4716] loop2: detected capacity change from 0 to 256
[   92.208351][ T4709] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   92.226705][ T4709] EXT4-fs (loop3): 1 truncate cleaned up
[   92.233532][ T4709] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none.
[   92.354993][ T4721] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   92.399303][ T4721] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.565342][ T4727] EXT4-fs (loop0): Ignoring removed oldalloc option
[   92.586272][ T4732] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[   92.596892][ T4727] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   92.674843][ T4727] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[   92.689570][ T4727] EXT4-fs (loop0): orphan cleanup on readonly fs
[   92.715989][ T4727] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.174: bad orphan inode 267
[   92.824659][ T4727] EXT4-fs (loop0): Remounting filesystem read-only
[   92.867514][ T4727] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none.
[   92.956327][ T4727] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.174: dx entry: limit 0 != root limit 125
[   93.071684][ T4727] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.174: Corrupt directory, running e2fsck is recommended
[   93.341834][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'.
[   93.551197][ T4248] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   93.577323][ T4760] Zero length message leads to an empty skb
[   93.583052][ T4248] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[   93.601926][ T4248] EXT4-fs (loop4): This should not happen!! Data will be lost
[   93.601926][ T4248] 
[   93.613015][ T4248] EXT4-fs (loop4): Total free blocks count 0
[   93.635538][ T4248] EXT4-fs (loop4): Free/Dirty block details
[   93.648090][ T4248] EXT4-fs (loop4): free_blocks=65280
[   93.662427][ T4248] EXT4-fs (loop4): dirty_blocks=3967
[   93.671097][ T4248] EXT4-fs (loop4): Block reservation details
[   93.677303][ T4248] EXT4-fs (loop4): i_reserved_data_blocks=3967
[   93.812278][ T4248] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1918 with error 28
[   93.877462][ T4248] EXT4-fs (loop4): This should not happen!! Data will be lost
[   93.877462][ T4248] 
[   94.020998][ T4770] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   94.037623][ T4775] input: syz0 as /devices/virtual/input/input6
[   94.060672][ T4770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.218449][ T4481] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   94.232213][ T4778] set_capacity_and_notify: 5 callbacks suppressed
[   94.232229][ T4778] loop4: detected capacity change from 0 to 512
[   94.269699][ T4778] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   94.318089][ T4778] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.187: invalid indirect mapped block 9 (level 0)
[   94.379143][ T4778] EXT4-fs (loop4): 1 truncate cleaned up
[   94.385857][ T4778] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[   94.418195][ T4783] loop2: detected capacity change from 0 to 4096
[   94.556463][ T4758] loop3: detected capacity change from 0 to 40427
[   94.638037][ T4190] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[   94.661684][ T4190] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   94.668832][ T4481] usb 2-1: unable to get BOS descriptor or descriptor too short
[   94.681964][ T4758] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff
[   94.737500][ T4789] loop4: detected capacity change from 0 to 512
[   94.745042][ T4758] F2FS-fs (loop3): invalid crc value
[   94.750852][ T4481] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.766085][ T4481] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   94.795270][ T4758] F2FS-fs (loop3): Found nat_bits in checkpoint
[   94.900101][ T4789] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   94.938528][ T4481] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   94.957853][ T4481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.970627][ T4481] usb 2-1: Product: syz
[   94.974912][ T4481] usb 2-1: Manufacturer: syz
[   94.983376][ T4481] usb 2-1: SerialNumber: syz
[   94.994354][ T4789] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.074537][ T4758] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   95.275592][ T4481] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   95.381879][ T4481] usb 2-1: USB disconnect, device number 3
[   95.660929][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   95.686412][ T4521] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   95.711795][ T4521] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[   95.747698][ T4521] EXT4-fs (loop4): This should not happen!! Data will be lost
[   95.747698][ T4521] 
[   95.768369][ T4521] EXT4-fs (loop4): Total free blocks count 0
[   95.778485][ T4521] EXT4-fs (loop4): Free/Dirty block details
[   95.818104][ T4521] EXT4-fs (loop4): free_blocks=65280
[   95.827539][ T4521] EXT4-fs (loop4): dirty_blocks=3775
[   95.894831][ T4521] EXT4-fs (loop4): Block reservation details
[   95.928332][ T4521] EXT4-fs (loop4): i_reserved_data_blocks=3775
[   96.073361][ T4521] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1726 with error 28
[   96.131547][ T4813] loop2: detected capacity change from 0 to 4096
[   96.141660][ T4521] EXT4-fs (loop4): This should not happen!! Data will be lost
[   96.141660][ T4521] 
[   96.200178][ T4813] EXT4-fs (loop2): Ignoring removed oldalloc option
[   96.207904][ T4813] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   96.290980][ T4813] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,dioread_nolock,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,usrjquota=,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[   96.596021][ T4832] loop0: detected capacity change from 0 to 512
[   96.668619][ T4835] pimreg: tun_chr_ioctl cmd 1074025680
[   96.722045][ T4837] tap0: tun_chr_ioctl cmd 2147767507
[   96.736411][ T4832] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   96.756556][ T4832] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.999041][ T4845] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96
[   97.646483][  T154] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   97.665091][ T4867] netlink: 64 bytes leftover after parsing attributes in process `syz.3.229'.
[   97.687959][  T154] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[   97.725185][  T154] EXT4-fs (loop0): This should not happen!! Data will be lost
[   97.725185][  T154] 
[   97.738061][ T4851] loop2: detected capacity change from 0 to 32768
[   97.751736][  T154] EXT4-fs (loop0): Total free blocks count 0
[   97.780136][  T154] EXT4-fs (loop0): Free/Dirty block details
[   97.805808][  T154] EXT4-fs (loop0): free_blocks=65280
[   97.830761][  T154] EXT4-fs (loop0): dirty_blocks=2913
[   97.860923][  T154] EXT4-fs (loop0): Block reservation details
[   97.872945][  T154] EXT4-fs (loop0): i_reserved_data_blocks=2913
[   97.906708][ T4853] loop1: detected capacity change from 0 to 32768
[   97.927867][ T4851] JBD2: Ignoring recovery information on journal
[   98.005091][  T154] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 864 with error 28
[   98.018089][  T154] EXT4-fs (loop0): This should not happen!! Data will be lost
[   98.018089][  T154] 
[   98.061997][ T4851] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   98.230668][ T4876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'.
[   98.286446][ T4851] overlayfs: upper fs does not support tmpfile.
[   98.353304][ T4851] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   98.399717][ T4877] loop4: detected capacity change from 0 to 4096
[   98.444866][ T4885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.236'.
[   98.473454][ T4851] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[   98.514712][ T4851] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   98.558427][ T4851] OCFS2: File system is now read-only.
[   98.576710][ T4851] (syz.2.222,4851,0):ocfs2_search_chain:1761 ERROR: status = -30
[   98.593634][ T4877] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[   98.615589][ T4851] (syz.2.222,4851,0):ocfs2_search_chain:1871 ERROR: status = -30
[   98.657456][ T4851] (syz.2.222,4851,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[   98.707646][ T4851] (syz.2.222,4851,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[   98.748325][ T4851] (syz.2.222,4851,0):ocfs2_claim_metadata:2018 ERROR: status = -30
[   98.756326][ T4851] (syz.2.222,4851,0):ocfs2_claim_metadata:2031 ERROR: status = -30
[   98.841774][ T4851] (syz.2.222,4851,0):ocfs2_create_xattr_block:2891 ERROR: status = -30
[   98.868014][ T4851] (syz.2.222,4851,0):ocfs2_xattr_block_set:2972 ERROR: status = -30
[   98.898390][ T4897] loop0: detected capacity change from 0 to 512
[   98.905174][ T4851] overlayfs: failed to set xattr on upper
[   98.938353][ T4851] overlayfs: ...falling back to index=off,metacopy=off.
[   98.955636][ T4851] overlayfs: upper fs missing required features.
[   99.044804][ T4897] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   99.077769][ T4897] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.140821][ T4904] input: syz1 as /devices/virtual/input/input7
[   99.175719][ T4190] ocfs2: Unmounting device (7,2) on (node local)
[   99.328626][ T4912] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.658309][ T1324] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   99.863697][ T4928] sg_write: process 90 (syz.4.255) changed security contexts after opening file descriptor, this is not allowed.
[   99.890769][ T4521] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   99.925291][ T4521] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[   99.944163][ T4521] EXT4-fs (loop0): This should not happen!! Data will be lost
[   99.944163][ T4521] 
[   99.981469][ T4521] EXT4-fs (loop0): Total free blocks count 0
[   99.987538][ T4521] EXT4-fs (loop0): Free/Dirty block details
[   99.999028][ T4521] EXT4-fs (loop0): free_blocks=65280
[  100.038090][ T4521] EXT4-fs (loop0): dirty_blocks=2425
[  100.049838][ T4521] EXT4-fs (loop0): Block reservation details
[  100.056169][ T4931] set_capacity_and_notify: 2 callbacks suppressed
[  100.056184][ T4931] loop2: detected capacity change from 0 to 512
[  100.078502][ T1324] usb 2-1: unable to get BOS descriptor or descriptor too short
[  100.085829][ T4521] EXT4-fs (loop0): i_reserved_data_blocks=2425
[  100.126950][  T144] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 376 with error 28
[  100.158253][  T144] EXT4-fs (loop0): This should not happen!! Data will be lost
[  100.158253][  T144] 
[  100.179618][ T1324] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.208334][ T1324] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  100.217392][ T1324] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  100.284276][ T1324] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  100.312760][ T1324] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  100.353413][ T1324] usb 2-1: config 1 interface 1 has no altsetting 0
[  100.363789][ T4926] loop3: detected capacity change from 0 to 32768
[  100.402951][ T4931] EXT4-fs (loop2): Test dummy encryption mode enabled
[  100.412089][ T4926] find_entry called with index = 0
[  100.417805][ T4931] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  100.427986][ T4926] read_mapping_page failed!
[  100.428055][ T4926] ERROR: (device loop3): txCommit: 
[  100.428055][ T4926] 
[  100.504071][ T4939] jfs_create: dtSearch returned -17
[  100.533848][ T4931] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.257: bad orphan inode 131083
[  100.566827][ T4931] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,nobarrier,,errors=continue. Quota mode: none.
[  100.599449][ T1324] usb 2-1: string descriptor 0 read error: -22
[  100.605772][ T1324] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  100.625451][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.711174][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'.
[  100.738859][ T4931] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  101.101492][ T4960] loop3: detected capacity change from 0 to 64
[  101.154644][   T26] audit: type=1800 audit(1778487484.109:25): pid=4960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.266" name="file1" dev="loop3" ino=21 res=0 errno=0
[  101.197705][ T4960] hfs: keylen 1794 too large
[  101.219477][ T4960] hfs: keylen 1794 too large
[  101.287973][ T4964] loop2: detected capacity change from 0 to 512
[  101.498601][ T4964] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  101.528453][ T4964] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.544375][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.268'.
[  101.566016][ T4230] usb 2-1: USB disconnect, device number 4
[  101.716619][ T4952] loop0: detected capacity change from 0 to 32768
[  101.875948][ T4952] XFS (loop0): Mounting V5 Filesystem
[  101.931968][ T4977] kvm [4976]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffff
[  102.030769][ T4952] XFS (loop0): Ending clean mount
[  102.114675][ T4952] XFS (loop0): Quotacheck needed: Please wait.
[  102.311221][ T4952] XFS (loop0): Quotacheck: Done.
[  102.512026][ T1454] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  102.548752][ T1454] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28
[  102.565204][ T1454] EXT4-fs (loop2): This should not happen!! Data will be lost
[  102.565204][ T1454] 
[  102.576047][ T1454] EXT4-fs (loop2): Total free blocks count 0
[  102.582631][ T1454] EXT4-fs (loop2): Free/Dirty block details
[  102.589571][ T1454] EXT4-fs (loop2): free_blocks=65280
[  102.594894][ T1454] EXT4-fs (loop2): dirty_blocks=4371
[  102.601029][ T1454] EXT4-fs (loop2): Block reservation details
[  102.607581][ T1454] EXT4-fs (loop2): i_reserved_data_blocks=4371
[  102.629985][ T4191] XFS (loop0): Unmounting Filesystem
[  102.653988][ T4995] loop3: detected capacity change from 0 to 1024
[  102.746321][ T1454] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28
[  102.780657][ T1454] EXT4-fs (loop2): This should not happen!! Data will be lost
[  102.780657][ T1454] 
[  102.923264][   T26] audit: type=1800 audit(1778487485.869:26): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.279" name="file1" dev="loop3" ino=20 res=0 errno=0
[  103.278389][ T1324] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  103.355968][ T5011] overlayfs: statfs failed on './file0'
[  103.494866][ T5019] loop4: detected capacity change from 0 to 512
[  103.576295][ T5019] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  103.618548][ T5019] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.648903][ T1324] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[  103.688145][ T1324] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  103.758272][ T1324] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.800168][ T1324] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  103.835935][ T1324] usb 2-1: config 0 interface 0 has no altsetting 0
[  103.846064][ T1324] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  103.866307][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.890839][ T1324] usb 2-1: config 0 descriptor??
[  103.934593][ T5030] Falling back ldisc for ptm0.
[  103.959654][ T5004] loop3: detected capacity change from 0 to 32768
[  103.993382][ T5004] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.283 (5004)
[  104.066807][ T5004] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  104.100189][ T5004] BTRFS info (device loop3): enabling auto defrag
[  104.133449][ T5004] BTRFS info (device loop3): use no compression
[  104.170738][ T5004] BTRFS info (device loop3): max_inline at 4096
[  104.202066][ T5004] BTRFS info (device loop3): using free space tree
[  104.237011][ T5039] loop2: detected capacity change from 0 to 256
[  104.245324][ T5004] BTRFS info (device loop3): has skinny extents
[  104.341288][   T26] audit: type=1800 audit(1778487487.299:27): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.292" name="bus" dev="loop2" ino=1048599 res=0 errno=0
[  104.390437][ T1324] ryos 0003:1E7D:3138.0002: unknown main item tag 0x5
[  104.410821][ T1324] ryos 0003:1E7D:3138.0002: item fetching failed at offset 2/5
[  104.428957][ T1324] ryos 0003:1E7D:3138.0002: parse failed
[  104.434718][ T1324] ryos: probe of 0003:1E7D:3138.0002 failed with error -22
[  104.486263][   T26] audit: type=1800 audit(1778487487.339:28): pid=5019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.287" name="file1" dev="loop4" ino=15 res=0 errno=0
[  104.592722][ T1324] usb 2-1: USB disconnect, device number 5
[  104.727539][ T5004] BTRFS info (device loop3): enabling ssd optimizations
[  104.922284][ T5076] loop0: detected capacity change from 0 to 2048
[  105.061022][ T5076] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,dioread_lock,,errors=continue. Quota mode: none.
[  105.115279][ T5091] loop4: detected capacity change from 0 to 2048
[  105.142438][ T5076] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.233189][ T5091] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  105.310230][ T5094] loop2: detected capacity change from 0 to 2048
[  105.342114][ T4311] udevd[4311]: incorrect nilfs2 checksum on /dev/loop4
[  105.376509][ T5094] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.418340][ T5100] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.764231][ T5114] loop1: detected capacity change from 0 to 8
[  105.812945][ T5116] loop3: detected capacity change from 0 to 128
[  105.910694][ T5116] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  105.974849][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'.
[  105.997755][ T5116] hpfs: filesystem error: improperly stopped
[  106.019455][ T5116] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  106.058554][ T5116] hpfs: You really don't want any checks? You are crazy...
[  106.066319][ T5116] hpfs: hpfs_map_sector(): read error
[  106.148561][ T5116] hpfs: code page support is disabled
[  106.173445][ T5116] hpfs: hpfs_map_4sectors(): unaligned read
[  106.248622][ T5116] hpfs: hpfs_map_4sectors(): unaligned read
[  106.254599][ T5116] hpfs: filesystem error: unable to find root dir
[  106.270401][ T5131] loop2: detected capacity change from 0 to 1024
[  106.641230][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.705567][ T5148] device bridge_slave_0 left promiscuous mode
[  106.743025][ T5148] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.254586][ T5184] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  107.321282][ T5188] loop4: detected capacity change from 0 to 512
[  107.347628][ T5188] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.334: iget: bad i_size value: 38620345925642
[  107.378779][ T5188] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.334: couldn't read orphan inode 15 (err -117)
[  107.414118][ T5188] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  107.466958][ T5188] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.334: bg 0: block 5: invalid block bitmap
[  107.484207][ T5188] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  107.498810][ T5188] EXT4-fs (loop4): This should not happen!! Data will be lost
[  107.498810][ T5188] 
[  107.509168][ T5188] EXT4-fs (loop4): Total free blocks count 0
[  107.515928][ T5188] EXT4-fs (loop4): Free/Dirty block details
[  107.522235][ T5188] EXT4-fs (loop4): free_blocks=0
[  107.527344][ T5188] EXT4-fs (loop4): dirty_blocks=1
[  107.532919][ T5188] EXT4-fs (loop4): Block reservation details
[  107.546209][ T5188] EXT4-fs (loop4): i_reserved_data_blocks=1
[  107.617658][ T5194] loop2: detected capacity change from 0 to 512
[  107.658656][   T26] audit: type=1800 audit(1778487490.609:29): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.336" name="file1" dev="loop2" ino=1048601 res=0 errno=0
[  107.947520][ T5204] loop0: detected capacity change from 0 to 1024
[  108.019524][ T5204] EXT4-fs (loop0): inline encryption not supported
[  108.105113][ T5204] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,resgid=0x000000000000ee00,noquota,inlinecrypt,abort,nodioread_nolock,journal_ioprio=0x0000000000000006,,errors=continue. Quota mode: none.
[  108.162499][ T5191] loop3: detected capacity change from 0 to 32768
[  108.208171][ T5204] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.225777][ T5204] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 3: comm syz.0.341: lblock 3 mapped to illegal pblock 3 (length 2)
[  108.251642][ T5204] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.341: lblock 0 mapped to illegal pblock 0 (length 3)
[  108.276165][ T5204] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  108.298323][ T5204] EXT4-fs (loop0): This should not happen!! Data will be lost
[  108.298323][ T5204] 
[  108.323009][ T5191] XFS (loop3): Mounting V5 Filesystem
[  108.392442][    T9] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 4: comm kworker/u4:0: lblock 4 mapped to illegal pblock 4 (length 1)
[  108.528165][ T5201] loop2: detected capacity change from 0 to 40427
[  108.542494][    T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117
[  108.560695][ T5191] XFS (loop3): Ending clean mount
[  108.587531][ T5201] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  108.597966][    T9] EXT4-fs (loop0): This should not happen!! Data will be lost
[  108.597966][    T9] 
[  108.617504][ T5201] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  108.672022][ T4193] XFS (loop3): Unmounting Filesystem
[  108.729837][ T5201] F2FS-fs (loop2): invalid crc value
[  108.738545][ T4481] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  108.771128][ T5201] F2FS-fs (loop2): Found nat_bits in checkpoint
[  108.913934][ T5201] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  108.929932][ T5201] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  109.008587][ T4481] usb 5-1: Using ep0 maxpacket: 16
[  109.056347][ T4234] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  109.128977][ T4481] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  109.142954][ T4481] usb 5-1: config 0 has no interface number 0
[  109.154152][ T4481] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  109.207449][ T4481] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  109.378642][ T4481] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  109.407573][ T4481] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  109.416120][ T5232] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  109.442898][ T4481] usb 5-1: Product: syz
[  109.448545][ T4481] usb 5-1: SerialNumber: syz
[  109.460347][ T4481] usb 5-1: config 0 descriptor??
[  109.489519][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.502182][ T4481] cm109 5-1:0.8: invalid payload size 0, expected 4
[  109.510772][ T4481] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input8
[  109.559176][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.597310][ T4234] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  109.635086][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.656790][ T4234] usb 1-1: config 0 descriptor??
[  109.705502][ T5224] udc-core: couldn't find an available UDC or it's busy
[  109.718845][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'.
[  109.731426][ T5224] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  109.768492][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'.
[  109.780939][ T4481] usb 5-1: USB disconnect, device number 5
[  109.798601][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -2
[  109.806558][ T4481] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  110.150489][ T4234] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  110.162458][ T4234] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  110.176548][ T4234] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  110.198330][ T4234] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  110.221362][ T4234] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0
[  110.289861][ T4234] kone 0003:1E7D:2CED.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0
[  110.352294][ T4234] usb 1-1: USB disconnect, device number 4
[  110.543229][ T5255] set_capacity_and_notify: 2 callbacks suppressed
[  110.543247][ T5255] loop4: detected capacity change from 0 to 4096
[  110.602771][ T5258] fido_id[5258]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  110.834645][ T4189] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  110.851945][ T4189] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  111.023649][ T5273] option changes via remount are deprecated (pid=5270 comm=syz.1.366)
[  111.132776][ T5273] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  111.454735][ T5291] netlink: 464 bytes leftover after parsing attributes in process `syz.1.373'.
[  111.486652][ T5262] loop3: detected capacity change from 0 to 32768
[  111.587465][ T5262] JBD2: Ignoring recovery information on journal
[  111.654379][ T5262] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75
[  111.701697][ T4481] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  111.729901][ T5262] JBD2: bad block at offset 32
[  111.782052][ T5303] loop0: detected capacity change from 0 to 512
[  111.808459][ T5262] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  111.980557][ T4193] ocfs2: Unmounting device (7,3) on (node local)
[  112.023922][   T26] audit: type=1326 audit(1778487494.979:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.0.381" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b58859dd9 code=0x7ffc0000
[  112.088600][ T4481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.128304][ T4481] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  112.158392][   T26] audit: type=1326 audit(1778487495.029:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.0.381" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b58859dd9 code=0x7ffc0000
[  112.198325][ T4481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.217631][ T4481] usb 3-1: config 0 descriptor??
[  112.278633][   T26] audit: type=1326 audit(1778487495.029:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.0.381" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b58859dd9 code=0x7ffc0000
[  112.302796][    C1] vkms_vblank_simulate: vblank timer overrun
[  112.366774][   T26] audit: type=1326 audit(1778487495.029:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.0.381" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b58859dd9 code=0x7ffc0000
[  112.390758][    C1] vkms_vblank_simulate: vblank timer overrun
[  112.405120][ T5102] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  112.458298][   T26] audit: type=1326 audit(1778487495.029:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.0.381" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b58859dd9 code=0x7ffc0000
[  112.497222][   T26] audit: type=1326 audit(1778487495.029:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.0.381" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9b58859dd9 code=0x7ffc0000
[  112.521631][    C1] vkms_vblank_simulate: vblank timer overrun
[  112.553892][   T26] audit: type=1326 audit(1778487495.029:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.0.381" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9b58859dd9 code=0x7ffc0000
[  112.562858][ T5298] loop4: detected capacity change from 0 to 32768
[  112.638941][ T5298] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.377 (5298)
[  112.674720][ T5298] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  112.684727][ T5298] BTRFS info (device loop4): using free space tree
[  112.691775][ T5298] BTRFS info (device loop4): has skinny extents
[  112.719835][ T4481] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[  112.728320][ T5102] usb 4-1: Using ep0 maxpacket: 32
[  112.755692][ T4481] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input9
[  112.868397][ T5298] BTRFS info (device loop4): enabling ssd optimizations
[  112.868744][ T5102] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  112.897348][ T5102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.943052][ T4481] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  112.968124][ T5102] gspca_main: nw80x-2.14.0 probing 055f:d001
[  113.161895][ T5311] udc-core: couldn't find an available UDC or it's busy
[  113.174687][ T5311] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  113.450526][ T5350] usb 3-1: USB disconnect, device number 3
[  113.642240][ T5102] usb 4-1: USB disconnect, device number 5
[  114.088326][ T4234] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  114.324185][ T5385] program syz.3.404 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.368579][ T4234] usb 1-1: Using ep0 maxpacket: 32
[  114.411455][ T5387] loop3: detected capacity change from 0 to 512
[  114.488937][ T4234] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  114.505853][ T4234] usb 1-1: config 0 interface 0 has no altsetting 0
[  114.517794][ T5387] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  114.528857][ T4234] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  114.538113][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.571457][ T4234] usb 1-1: config 0 descriptor??
[  114.578424][ T5102] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  114.822763][ T5102] usb 3-1: Using ep0 maxpacket: 32
[  114.958534][ T5102] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  114.988375][ T5102] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  115.008343][ T5102] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  115.028241][ T5102] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  115.051905][ T5102] usb 3-1: config 0 interface 0 has no altsetting 0
[  115.064937][ T4234] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0
[  115.074190][ T5397] loop3: detected capacity change from 0 to 8
[  115.120819][ T5399] loop4: detected capacity change from 0 to 128
[  115.269192][ T5102] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  115.293484][ T5102] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  115.302811][ T5102] usb 3-1: Product: syz
[  115.307113][ T5102] usb 3-1: Manufacturer: syz
[  115.320405][ T5102] usb 3-1: SerialNumber: syz
[  115.335788][ T5102] usb 3-1: config 0 descriptor??
[  115.405544][ T5102] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  115.439838][ T5102] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  115.466470][ T5403] loop4: detected capacity change from 0 to 2048
[  115.497684][ T4234] corsair-cpro: probe of 0003:1B1C:0C10.0005 failed with error -71
[  115.517342][ T4234] usb 1-1: USB disconnect, device number 5
[  115.564135][ T5403] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  115.610101][ T5348] usb 3-1: USB disconnect, device number 4
[  115.635615][ T5348] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  115.670479][ T5409] loop3: detected capacity change from 0 to 256
[  115.798167][   T26] audit: type=1800 audit(1778487498.749:37): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.414" name="file1" dev="loop3" ino=1048606 res=0 errno=0
[  115.818947][    C1] vkms_vblank_simulate: vblank timer overrun
[  115.941779][ T5410] fido_id[5410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  116.608636][ T5444] usb usb7: usbfs: process 5444 (syz.4.430) did not claim interface 0 before use
[  116.902591][ T5461] net_ratelimit: 110 callbacks suppressed
[  116.902608][ T5461] openvswitch: netlink: Actions may not be safe on all matching packets
[  116.938986][ T5419] loop0: detected capacity change from 0 to 32768
[  116.945791][ T5457] loop1: detected capacity change from 0 to 4096
[  116.977729][ T5463] loop5: detected capacity change from 0 to 7
[  116.997440][ T5463] Dev loop5: unable to read RDB block 7
[  117.005098][ T5465] netlink: 140 bytes leftover after parsing attributes in process `syz.4.438'.
[  117.018564][ T5419] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.418 (5419)
[  117.034103][  T155] loop: Write error at byte offset 36, length 3584.
[  117.041396][ T5350] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  117.052393][ T5463]  loop5: unable to read partition table
[  117.061326][    C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  117.072963][    C0] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  117.096201][ T5463] loop5: partition table beyond EOD, truncated
[  117.100462][ T5467] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.119275][ T5419] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  117.130484][ T5463] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[  117.148762][   T26] audit: type=1800 audit(1778487500.109:38): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.434" name="file1" dev="loop1" ino=15 res=0 errno=0
[  117.190536][ T5419] BTRFS info (device loop0): using free space tree
[  117.197120][ T5419] BTRFS info (device loop0): has skinny extents
[  117.308426][ T5350] usb 4-1: Using ep0 maxpacket: 32
[  117.588686][ T5350] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  117.593836][ T5419] BTRFS info (device loop0): enabling ssd optimizations
[  117.638500][ T5350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.669237][ T5350] usb 4-1: Product: syz
[  117.673477][ T5350] usb 4-1: Manufacturer: syz
[  117.715780][ T5350] usb 4-1: SerialNumber: syz
[  117.744664][ T5350] usb 4-1: config 0 descriptor??
[  117.830419][ T5350] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  117.880634][ T5350] dvb-usb: bulk message failed: -22 (4/0)
[  117.889884][ T5350] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  117.918035][ T5350] dvb-usb: bulk message failed: -22 (5/0)
[  117.939057][ T5350] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  118.027878][ T4179] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop0 scanned by udevd (4179)
[  118.057045][ T5451] dvb-usb: bulk message failed: -22 (7/0)
[  118.082647][ T5350] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  118.098923][ T5451] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  118.130714][ T5451] ttusb2: i2c transfer failed.
[  118.151500][ T5350] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  118.183763][ T5350] usb 4-1: media controller created
[  118.276727][ T5350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  118.339627][ T5350] usb 4-1: selecting invalid altsetting 3
[  118.356972][ T5350] ttusb2: set interface to alts=3 failed
[  118.459196][ T5350] DVB: Unable to find symbol tda10086_attach()
[  118.466668][ T5350] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  118.518910][ T5350] dvb-usb: bulk message failed: -22 (4/0)
[  118.538969][ T5350] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  118.562110][ T5532] loop1: detected capacity change from 0 to 256
[  118.592579][ T5532] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  118.594558][ T5350] dvb-usb: bulk message failed: -22 (5/0)
[  118.632330][ T5350] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  118.652938][ T5350] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  118.678482][ T5532] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  118.720062][ T5350] usb 4-1: USB disconnect, device number 6
[  118.729688][ T5532] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d)
[  118.833850][ T5350] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  118.878883][ T5541] loop3: detected capacity change from 0 to 256
[  118.952814][ T5543] binder: 5542:5543 ioctl c0306201 0 returned -14
[  119.002335][ T5541] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  119.445866][ T5568] loop2: detected capacity change from 0 to 512
[  119.502417][ T5568] EXT4-fs (loop2): Ignoring removed nobh option
[  119.545042][ T5568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  119.598550][ T5581] loop1: detected capacity change from 0 to 65
[  119.690377][ T5568] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  119.733978][ T5581] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  119.773435][ T5585] loop3: detected capacity change from 0 to 8192
[  119.789582][ T5585] FAT-fs (loop3): Unrecognized mount option "dïts" or missing value
[  119.818172][ T5568] EXT4-fs (loop2): 1 truncate cleaned up
[  119.832732][ T5568] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  120.212803][ T5600] program syz.4.487 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.233084][ T5602] loop1: detected capacity change from 0 to 164
[  120.548297][ T4232] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  120.786902][ T5628] loop4: detected capacity change from 0 to 4096
[  120.798419][ T4232] usb 4-1: Using ep0 maxpacket: 8
[  120.969775][ T5611] loop2: detected capacity change from 0 to 32768
[  121.005092][ T5611] (syz.2.493,5611,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.032365][ T5611] (syz.2.493,5611,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.050232][ T4189] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  121.057031][ T4189] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  121.074480][ T5611] JBD2: Ignoring recovery information on journal
[  121.141042][ T5611] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  121.158702][ T4232] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  121.173377][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.182144][ T4232] usb 4-1: Product: syz
[  121.198633][ T5350] kernel write not supported for file /sg0 (pid: 5350 comm: kworker/0:17)
[  121.225039][ T4232] usb 4-1: Manufacturer: syz
[  121.235597][ T4232] usb 4-1: SerialNumber: syz
[  121.288453][ T5350] kernel read not supported for file /dsp1 (pid: 5350 comm: kworker/0:17)
[  121.301058][ T4232] usb 4-1: config 0 descriptor??
[  121.387242][ T4190] ocfs2: Unmounting device (7,2) on (node local)
[  121.422908][ T5635] loop4: detected capacity change from 0 to 4096
[  121.450925][ T5635] EXT4-fs (loop4): inline encryption not supported
[  121.458177][ T5635] EXT4-fs (loop4): Test dummy encryption mode enabled
[  121.499908][ T5635] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  121.551028][ T5635] System zones: 0-5
[  121.577144][ T5635] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  121.632257][ T4232] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  121.906865][ T5635] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  121.989513][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'.
[  122.075087][ T5663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'.
[  122.154711][ T5668] loop1: detected capacity change from 0 to 1024
[  122.216706][ T5668] EXT4-fs (loop1): Ignoring removed bh option
[  122.256547][ T5668] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,noblock_validity,stripe=0x0000000000000010,bh,init_itable,,errors=continue. Quota mode: none.
[  122.283305][ T5676] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  122.283305][ T5676] The task syz.2.516 (5676) triggered the difference, watch for misbehavior.
[  122.308524][ T4232] usb write operation failed. (-71)
[  122.335255][ T5668] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.517: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  122.357383][ T4232] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  122.368251][ T4232] dvbdev: DVB: registering new adapter (Terratec H7)
[  122.375009][ T4232] usb 4-1: media controller created
[  122.399446][ T4232] usb read operation failed. (-71)
[  122.410626][ T5677] EXT4-fs error (device loop1): ext4_check_all_de:667: inode #12: block 7: comm syz.1.517: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  122.430631][    C1] vkms_vblank_simulate: vblank timer overrun
[  122.437508][ T4232] usb write operation failed. (-71)
[  122.450045][ T4232] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5
[  122.483107][ T4232] usb 4-1: USB disconnect, device number 7
[  122.606215][ T5681] loop4: detected capacity change from 0 to 2048
[  122.655421][ T5681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.075078][ T5701] Failed to get privilege flags for destination (handle=0x2:0x400)
[  123.213951][ T5698] loop3: detected capacity change from 0 to 4096
[  123.247061][ T5712] netlink: 'syz.4.533': attribute type 12 has an invalid length.
[  123.269435][ T5712] netlink: 'syz.4.533': attribute type 29 has an invalid length.
[  123.314399][ T5712] netlink: 148 bytes leftover after parsing attributes in process `syz.4.533'.
[  123.332620][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'.
[  123.343001][ T5716] loop0: detected capacity change from 0 to 256
[  123.410619][ T5716] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  123.711818][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.752802][ T5721] netlink: 'syz.0.537': attribute type 4 has an invalid length.
[  123.850341][ T5725] loop3: detected capacity change from 0 to 1024
[  123.894283][ T5724] lo speed is unknown, defaulting to 1000
[  123.921875][ T5724] lo speed is unknown, defaulting to 1000
[  123.950470][ T5725] hfsplus: inconsistency in B*Tree (-1,0,1,1,0)
[  123.963633][ T5725] hfsplus: failed to load root directory
[  123.989826][ T5724] lo speed is unknown, defaulting to 1000
[  124.234998][ T5733] netlink: 'syz.4.542': attribute type 6 has an invalid length.
[  124.258955][ T5710] loop1: detected capacity change from 0 to 32768
[  124.330568][ T5710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.531 (5710)
[  124.395370][ T5710] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  124.413349][ T5715] loop2: detected capacity change from 0 to 32768
[  124.437397][ T5710] BTRFS info (device loop1): setting nodatasum
[  124.455832][ T5710] BTRFS info (device loop1): force zlib compression, level 3
[  124.529833][ T5710] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  124.574681][ T5710] BTRFS info (device loop1): use lzo compression, level 0
[  124.591978][ T5739] tipc: Started in network mode
[  124.599850][ T5710] BTRFS info (device loop1): turning on flush-on-commit
[  124.606863][ T5710] BTRFS info (device loop1): enabling auto defrag
[  124.636375][ T5739] tipc: Node identity ac14140f, cluster identity 4711
[  124.623596][ T5724] infiniband s
z1: set down
[  124.652653][ T5739] tipc: Enabled bearer <udp:syz2>, priority 10
[  124.659899][ T5710] BTRFS info (device loop1): max_inline at 4096
[  124.666298][ T5710] BTRFS info (device loop1): using free space tree
[  124.673735][ T5724] infiniband s
z1: added lo
[  124.684676][ T5102] lo speed is unknown, defaulting to 1000
[  124.728439][ T5710] BTRFS info (device loop1): has skinny extents
[  124.811539][ T5724] RDS/IB: s
z1: added
[  124.816613][ T5724] smc: adding ib device s
z1 with port count 1
[  124.824166][ T5724] smc:    ib device s
z1 port 1 has pnetid 
[  124.834180][ T5350] lo speed is unknown, defaulting to 1000
[  124.843407][ T5724] lo speed is unknown, defaulting to 1000
[  124.984526][ T5710] BTRFS info (device loop1): enabling ssd optimizations
[  125.067775][ T5735] (syz.3.543,5735,0):ocfs2_find_slot:468 ERROR: no free slots available!
[  125.082391][   T26] audit: type=1800 audit(1778487508.039:39): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.531" name="file1" dev="loop1" ino=260 res=0 errno=0
[  125.141780][ T5735] (syz.3.543,5735,0):ocfs2_mount_volume:1811 ERROR: status = -22
[  125.280976][ T5735] (syz.3.543,5735,0):ocfs2_fill_super:1177 ERROR: status = -22
[  125.322759][ T5768] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  125.430524][ T5768] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  125.588750][ T5768] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.550: invalid indirect mapped block 2683928664 (level 1)
[  125.715713][ T4179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4179)
[  125.739624][ T5724] lo speed is unknown, defaulting to 1000
[  125.838085][ T5101] tipc: Node number set to 2886997007
[  125.886108][ T5768] EXT4-fs (loop4): Remounting filesystem read-only
[  125.929496][ T5768] EXT4-fs (loop4): 1 truncate cleaned up
[  125.943435][ T5768] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback.
[  126.195931][ T5768] EXT4-fs (loop4): Remounting file system with no journal so ignoring journalled data option
[  126.259393][ T5768] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  126.277803][ T5724] lo speed is unknown, defaulting to 1000
[  126.306914][ T5768] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring
[  126.607827][ T5806] set_capacity_and_notify: 2 callbacks suppressed
[  126.607844][ T5806] loop4: detected capacity change from 0 to 512
[  126.680751][ T5724] lo speed is unknown, defaulting to 1000
[  126.701673][ T5806] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  126.773629][ T5806] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.562: bad orphan inode 131083
[  126.802555][ T5813] loop2: detected capacity change from 0 to 512
[  126.827988][ T5806] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  126.884861][ T5813] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  126.907182][   T26] audit: type=1800 audit(1778487509.859:40): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.562" name="file1" dev="loop4" ino=15 res=0 errno=0
[  126.978779][ T5813] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.567: casefold flag without casefold feature
[  127.008184][ T5813] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.567: couldn't read orphan inode 15 (err -117)
[  127.026494][ T5813] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none.
[  127.046209][ T5813] EXT4-fs (loop2): shut down requested (2)
[  127.159013][ T5724] lo speed is unknown, defaulting to 1000
[  127.436988][ T5827] loop1: detected capacity change from 0 to 128
[  127.588534][ T5348] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  127.634981][ T5834] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  127.916313][ T5841] loop4: detected capacity change from 0 to 256
[  127.930885][ T5838] cgroup: noprefix used incorrectly
[  128.128571][ T5348] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  128.158355][ T5348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.216796][ T5348] usb 3-1: Product: syz
[  128.243456][ T5348] usb 3-1: Manufacturer: syz
[  128.248137][ T5348] usb 3-1: SerialNumber: syz
[  128.335590][ T5831] loop3: detected capacity change from 0 to 131072
[  128.431106][ T5831] F2FS-fs (loop3): Test dummy encryption mode enabled
[  128.439265][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  128.520599][ T5831] F2FS-fs (loop3): Found nat_bits in checkpoint
[  128.565838][ T5859] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  128.601961][ T5831] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b
[  128.842912][ T5868] loop0: detected capacity change from 0 to 512
[  128.862591][ T2286] Bluetooth: hci0: command 0x0401 tx timeout
[  128.899536][ T5868] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.589: corrupted in-inode xattr
[  128.923688][ T5868] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.589: couldn't read orphan inode 15 (err -117)
[  128.944424][ T5868] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,nodelalloc,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: none.
[  129.053258][ T5879] loop3: detected capacity change from 0 to 512
[  129.064529][ T5348] rtl8150 3-1:1.0: eth1: rtl8150 is detected
[  129.166438][ T5885] loop1: detected capacity change from 0 to 256
[  129.236382][ T5348] usb 3-1: USB disconnect, device number 5
[  129.262943][ T5879] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  129.276928][ T5885] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1349, utbl_chksum : 0xe619d30d)
[  129.579851][ T5897] loop3: detected capacity change from 0 to 64
[  129.728358][ T5902] loop1: detected capacity change from 0 to 256
[  129.850699][ T5897] Trying to free block not in datazone
[  129.856799][ T5897] Trying to free block not in datazone
[  129.907787][ T5897] Trying to free block not in datazone
[  129.928169][ T5907] Bluetooth: hci0: load_link_keys: too big key_count value 37305
[  130.595966][ T5883] find_entry called with index >= next_index
[  130.646660][ T5883] find_entry called with index >= next_index
[  130.673847][ T5883] find_entry called with index >= next_index
[  130.688264][ T5883] find_entry called with index >= next_index
[  130.742318][ T5883] find_entry called with index >= next_index
[  130.778300][ T5883] add_index: next_index = 0.  Resetting!
[  130.798367][ T5883] find_entry called with index >= next_index
[  130.804774][ T5883] find_entry called with index >= next_index
[  130.874602][ T5883] find_entry called with index >= next_index
[  130.920233][ T5883] non-latin1 character 0x3ff found in JFS file name
[  130.927436][ T5883] mount with iocharset=utf8 to access
[  131.387424][ T5912] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  131.387424][ T5912] 
[  131.464999][ T5912] ERROR: (device loop2): remounting filesystem as read-only
[  131.524571][ T5912] xtLookup: xtSearch returned -5
[  131.530056][ T5912] free_index: error reading directory table
[  131.709323][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'.
[  131.931940][ T5944] set_capacity_and_notify: 2 callbacks suppressed
[  131.958455][ T5944] loop3: detected capacity change from 0 to 32768
[  131.997296][ T5943] loop1: detected capacity change from 0 to 32768
[  132.097931][ T5943] ialloc: diAlloc returned -28!
[  132.193590][ T5979] netlink: 7 bytes leftover after parsing attributes in process `syz.2.626'.
[  132.221378][ T5944] XFS (loop3): Mounting V5 Filesystem
[  132.268583][ T5105] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  132.311081][ T5955] loop0: detected capacity change from 0 to 32768
[  132.350596][ T5944] XFS (loop3): Ending clean mount
[  132.359548][ T5944] XFS (loop3): Quotacheck needed: Please wait.
[  132.472739][ T5944] XFS (loop3): Quotacheck: Done.
[  132.487505][ T5955] XFS (loop0): Mounting V5 Filesystem
[  132.624153][ T5955] XFS (loop0): Ending clean mount
[  132.678600][ T5105] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  132.695519][ T4191] XFS (loop0): Unmounting Filesystem
[  132.711857][ T4193] XFS (loop3): Unmounting Filesystem
[  132.730896][ T6003] loop2: detected capacity change from 0 to 1024
[  132.745405][ T5105] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  132.771038][ T5105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.848605][ T6003] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,data_err=ignore,,errors=continue. Quota mode: writeback.
[  132.890137][ T5105] gspca_main: stv0680-2.14.0 probing 041e:4007
[  132.929770][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  133.317633][ T6010] loop2: detected capacity change from 0 to 256
[  133.367911][ T6010] exfat: Deprecated parameter 'utf8'
[  133.373787][ T6010] exfat: Deprecated parameter 'namecase'
[  133.417194][ T6010] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  133.473380][ T6007] loop1: detected capacity change from 0 to 32768
[  133.492256][   T26] audit: type=1800 audit(1778487516.449:41): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.635" name="file1" dev="loop2" ino=1048616 res=0 errno=0
[  133.604460][ T6013] loop0: detected capacity change from 0 to 256
[  133.635690][ T6013] exfat: Deprecated parameter 'namecase'
[  133.673934][ T6013] exfat: Deprecated parameter 'utf8'
[  133.712850][ T6013] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  133.833311][ T6013] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d)
[  134.288418][ T5105] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71
[  134.296563][ T5105] stv0680 5-1:4.0: Could not get descriptor 0200
[  134.358574][ T5105] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  134.383701][ T5105] stv0680 5-1:4.0: last error: 9,  command = 0x21
[  134.408442][ T5105] usb 5-1: USB disconnect, device number 6
[  134.755888][ T6015] loop1: detected capacity change from 0 to 40427
[  134.797157][ T6017] loop3: detected capacity change from 0 to 40427
[  134.826668][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'.
[  134.852488][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'.
[  134.877418][ T6017] F2FS-fs (loop3): invalid crc value
[  134.902122][ T6017] F2FS-fs (loop3): Found nat_bits in checkpoint
[  134.922699][ T6015] F2FS-fs (loop1): Found nat_bits in checkpoint
[  134.936645][ T6040] loop4: detected capacity change from 0 to 64
[  134.987485][ T6017] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  135.116753][ T6017] attempt to access beyond end of device
[  135.116753][ T6017] loop3: rw=2049, want=77960, limit=40427
[  135.134242][ T6015] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  135.187708][   T26] audit: type=1800 audit(1778487518.139:42): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.636" name="file1" dev="loop1" ino=10 res=0 errno=0
[  135.284092][ T4193] attempt to access beyond end of device
[  135.284092][ T4193] loop3: rw=2049, want=45104, limit=40427
[  135.286801][ T4202] attempt to access beyond end of device
[  135.286801][ T4202] loop1: rw=2049, want=45104, limit=40427
[  135.355959][ T6046] FAT-fs (loop4): Directory bread(block 199916) failed
[  135.404597][ T6046] FAT-fs (loop4): Directory bread(block 199917) failed
[  135.434500][ T6046] FAT-fs (loop4): Directory bread(block 199918) failed
[  135.463012][ T6046] FAT-fs (loop4): Directory bread(block 199919) failed
[  135.493893][ T6046] FAT-fs (loop4): Directory bread(block 199920) failed
[  135.513203][ T6046] FAT-fs (loop4): Directory bread(block 199921) failed
[  135.530292][ T6046] FAT-fs (loop4): Directory bread(block 199922) failed
[  135.541375][ T6046] FAT-fs (loop4): Directory bread(block 199923) failed
[  135.727885][ T6046] FAT-fs (loop4): FAT read failed (blocknr 128)
[  136.218163][ T6043] XFS (loop2): Mounting V5 Filesystem
[  136.314046][ T6065] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,barrier=0x000000000000008e,bsddf,errors=remount-ro,init_itable,auto_da_alloc=0x00000000000000eb,quota,. Quota mode: writeback.
[  136.363539][ T6065] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.426838][ T6043] XFS (loop2): Ending clean mount
[  136.470116][ T6065] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.653: directory missing '..'
[  136.530201][ T6043] XFS (loop2): Quotacheck needed: Please wait.
[  136.558529][ T6085] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  136.596425][ T6085] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  136.668270][ T6043] XFS (loop2): Quotacheck: Done.
[  136.957465][ T4190] XFS (loop2): Unmounting Filesystem
[  136.966296][ T6099] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.664: inode has both inline data and extents flags
[  137.032848][ T6110] set_capacity_and_notify: 5 callbacks suppressed
[  137.032866][ T6110] loop1: detected capacity change from 0 to 512
[  137.055890][ T6099] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.664: couldn't read orphan inode 15 (err -117)
[  137.068702][ T6099] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  137.090461][ T6110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  137.248616][ T6110] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.670: bad orphan inode 131083
[  137.312175][ T6110] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  137.613544][ T6127] loop4: detected capacity change from 0 to 256
[  137.694261][ T6127] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  137.784221][ T6131] netlink: 44 bytes leftover after parsing attributes in process `syz.1.679'.
[  138.169981][ T6121] loop3: detected capacity change from 0 to 32768
[  138.198423][ T5350] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  138.284201][ T6121] XFS (loop3): Mounting V5 Filesystem
[  138.467549][ T6121] XFS (loop3): Ending clean mount
[  138.519262][ T6167] loop1: detected capacity change from 0 to 512
[  138.544835][   T26] audit: type=1800 audit(1778487521.499:43): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.675" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  138.598588][ T5350] usb 5-1: unable to get BOS descriptor or descriptor too short
[  138.638507][ T5350] usb 5-1: not running at top speed; connect to a high speed hub
[  138.670278][ T4193] XFS (loop3): Unmounting Filesystem
[  138.748505][ T5350] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 768, setting to 64
[  138.776909][ T6176] loop2: detected capacity change from 0 to 128
[  138.801513][ T5350] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  138.855821][ T6176] FAT-fs (loop2): bogus number of FAT sectors
[  138.876290][ T6176] FAT-fs (loop2): Can't find a valid FAT filesystem
[  138.904665][ T6179] device veth1_macvtap left promiscuous mode
[  138.918929][ T6179] device macsec0 entered promiscuous mode
[  139.022379][ T5350] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  139.053550][ T5350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.064245][ T6180] device veth1_macvtap entered promiscuous mode
[  139.077987][ T5350] usb 5-1: Product: syz
[  139.087790][ T5350] usb 5-1: Manufacturer: syz
[  139.096346][ T6180] device macsec0 left promiscuous mode
[  139.104894][ T5350] usb 5-1: SerialNumber: syz
[  139.130471][ T6185] misc userio: The device must be registered before sending interrupts
[  139.140445][ T6135] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  139.145233][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  139.267308][ T6189] loop2: detected capacity change from 0 to 4096
[  139.415239][ T6192] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.534220][ T5350] usb 5-1: MIDIStreaming interface descriptor not found
[  139.628756][ T5350] usb 5-1: USB disconnect, device number 7
[  139.929622][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  140.014273][ T5107] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  140.022103][ T6218] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  140.101809][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'.
[  140.154164][ T6225] loop2: detected capacity change from 0 to 256
[  140.161689][ T6222] netlink: 3 bytes leftover after parsing attributes in process `syz.1.716'.
[  140.189509][ T6225] exfat: Deprecated parameter 'utf8'
[  140.259641][ T6225] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  140.293122][   T26] audit: type=1800 audit(1778553059.256:44): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.717" name="file1" dev="loop2" ino=1048624 res=0 errno=0
[  140.488738][ T6235] loop2: detected capacity change from 0 to 4096
[  140.504009][ T5107] usb 1-1: unable to get BOS descriptor or descriptor too short
[  140.530791][ T6239] vcan0: tx address claim with dlc 0
[  140.558552][ T5107] usb 1-1: not running at top speed; connect to a high speed hub
[  140.594876][ T6240] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.633790][ T5105] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  140.658589][ T5107] usb 1-1: config 249 has an invalid interface number: 203 but max is 0
[  140.667380][ T5107] usb 1-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config
[  140.680603][ T5107] usb 1-1: config 249 has no interface number 0
[  140.686958][ T5107] usb 1-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.698092][ T5107] usb 1-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  140.712067][ T5107] usb 1-1: config 249 interface 203 has no altsetting 0
[  140.852062][ T6246] loop3: detected capacity change from 0 to 256
[  140.908802][ T5107] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39
[  140.924812][ T5107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.955669][ T5107] usb 1-1: Product: syz
[  140.970083][ T5107] usb 1-1: Manufacturer: syz
[  140.975327][ T6246] FAT-fs (loop3): Directory bread(block 64) failed
[  140.984938][ T5107] usb 1-1: SerialNumber: syz
[  140.989934][ T6246] FAT-fs (loop3): Directory bread(block 65) failed
[  141.017927][ T6246] FAT-fs (loop3): Directory bread(block 66) failed
[  141.035875][ T6246] FAT-fs (loop3): Directory bread(block 67) failed
[  141.043400][ T5105] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  141.055072][ T6246] FAT-fs (loop3): Directory bread(block 68) failed
[  141.064681][ T5105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.078287][ T6246] FAT-fs (loop3): Directory bread(block 69) failed
[  141.095171][ T6246] FAT-fs (loop3): Directory bread(block 70) failed
[  141.103012][ T5105] usb 5-1: config 0 descriptor??
[  141.108483][ T6246] FAT-fs (loop3): Directory bread(block 71) failed
[  141.122328][ T6246] FAT-fs (loop3): Directory bread(block 72) failed
[  141.138265][ T6246] FAT-fs (loop3): Directory bread(block 73) failed
[  141.149908][ T5105] cp210x 5-1:0.0: cp210x converter detected
[  141.172071][ T6258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.732'.
[  141.193796][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'.
[  141.338918][ T5107] rtl8150 1-1:249.203: couldn't find required endpoints
[  141.346050][ T5107] rtl8150: probe of 1-1:249.203 failed with error -5
[  141.395313][ T5107] usb 1-1: USB disconnect, device number 6
[  141.449244][ T6262] loop1: detected capacity change from 0 to 1024
[  141.551522][ T6270] netlink: 'syz.2.738': attribute type 1 has an invalid length.
[  141.565456][ T6270] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.738'.
[  141.578463][ T5105] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  141.594054][  T144] hfsplus: b-tree write err: -5, ino 25
[  141.600172][  T144] hfsplus: b-tree write err: -5, ino 4
[  141.605828][  T144] hfsplus: b-tree write err: -5, ino 2
[  141.616914][  T144] hfsplus: b-tree write err: -5, ino 17
[  141.634513][ T5105] usb 5-1: cp210x converter now attached to ttyUSB0
[  141.831474][ T5105] usb 5-1: USB disconnect, device number 8
[  141.851989][ T6286] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  141.864086][ T5105] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  141.929139][ T6286] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.746: casefold flag without casefold feature
[  141.942705][ T6286] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.746: couldn't read orphan inode 15 (err -117)
[  141.981764][ T5105] cp210x 5-1:0.0: device disconnected
[  142.057545][ T6286] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none.
[  142.089893][ T6286] EXT4-fs (loop2): shut down requested (2)
[  142.245624][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.755'.
[  142.517559][ T6320] set_capacity_and_notify: 2 callbacks suppressed
[  142.517577][ T6320] loop0: detected capacity change from 0 to 256
[  142.548151][ T6323] loop3: detected capacity change from 0 to 1024
[  142.561265][ T6320] exfat: Deprecated parameter 'utf8'
[  142.566727][ T6320] exfat: Deprecated parameter 'namecase'
[  142.576343][ T6325] loop4: detected capacity change from 0 to 512
[  142.642935][ T6320] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  142.662710][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'.
[  142.672752][ T6323] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback.
[  142.687661][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'.
[  142.703598][ T6325] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.764: iget: bad i_size value: 38620345925642
[  142.720357][   T26] audit: type=1326 audit(1778553061.686:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.0.761" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b58859dd9 code=0x0
[  142.740648][ T6323] EXT4-fs (loop3): shut down requested (2)
[  142.754906][ T6325] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.764: couldn't read orphan inode 15 (err -117)
[  142.802719][ T6325] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[  142.899088][ T6337] device batadv_slave_0 entered promiscuous mode
[  142.906291][ T6337] device batadv_slave_0 left promiscuous mode
[  143.098497][ T5105] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  143.348264][ T4476] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  143.414930][ T5106] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  143.508402][ T5105] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  143.527603][ T5105] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.540099][ T5105] usb 3-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00
[  143.549851][ T5105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.592438][ T5105] usb 3-1: config 0 descriptor??
[  143.708501][ T4476] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.708541][ T5106] usb 4-1: Using ep0 maxpacket: 32
[  143.756875][ T4476] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.824017][ T4196] Bluetooth: hci4: link tx timeout
[  143.829966][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.840813][ T4196] Bluetooth: hci4: link tx timeout
[  143.845974][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.854604][ T5106] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.866838][ T4196] Bluetooth: hci4: link tx timeout
[  143.872077][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.880040][ T4196] Bluetooth: hci4: link tx timeout
[  143.881454][ T6344] loop1: detected capacity change from 0 to 40427
[  143.885186][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.885362][ T5106] usb 4-1: config 0 has no interfaces?
[  143.905365][ T4196] Bluetooth: hci4: link tx timeout
[  143.910609][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.918434][ T4196] Bluetooth: hci4: link tx timeout
[  143.923587][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.929435][ T4476] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.931610][ T4196] Bluetooth: hci4: link tx timeout
[  143.945551][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.953339][ T4196] Bluetooth: hci4: link tx timeout
[  143.958858][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.966535][ T4196] Bluetooth: hci4: link tx timeout
[  143.971876][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.984981][ T4476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.994026][ T4196] Bluetooth: hci4: link tx timeout
[  143.999357][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.007162][ T4196] Bluetooth: hci4: link tx timeout
[  144.012558][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.020344][ T4196] Bluetooth: hci4: link tx timeout
[  144.025488][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.033312][ T4196] Bluetooth: hci4: link tx timeout
[  144.037638][ T6344] F2FS-fs (loop1): invalid crc value
[  144.039045][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.052134][ T4196] Bluetooth: hci4: link tx timeout
[  144.057277][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.062517][ T4476] usb 5-1: Product: syz
[  144.065138][ T4196] Bluetooth: hci4: link tx timeout
[  144.074251][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.082113][ T4196] Bluetooth: hci4: link tx timeout
[  144.087250][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.098145][ T6344] F2FS-fs (loop1): Found nat_bits in checkpoint
[  144.111110][ T5105] hid-generic 0003:0925:8066.0006: unbalanced collection at end of report description
[  144.117068][ T4476] usb 5-1: Manufacturer: syz
[  144.126340][ T5105] hid-generic: probe of 0003:0925:8066.0006 failed with error -22
[  144.166468][ T4476] usb 5-1: SerialNumber: syz
[  144.178567][ T5106] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  144.187663][ T5106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.207232][ T5106] usb 4-1: Product: syz
[  144.212004][ T5106] usb 4-1: Manufacturer: syz
[  144.217597][ T5106] usb 4-1: SerialNumber: syz
[  144.236269][ T5106] usb 4-1: config 0 descriptor??
[  144.247220][ T6344] F2FS-fs (loop1): Start checkpoint disabled!
[  144.294645][ T6344] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  144.325174][ T5350] usb 3-1: USB disconnect, device number 6
[  144.568492][ T5107] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  144.694861][ T6368] loop1: detected capacity change from 0 to 256
[  144.707415][ T6368] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  144.723346][ T6368] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  144.735724][ T6368] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  144.830656][ T5107] usb 1-1: Using ep0 maxpacket: 16
[  144.870950][ T6371] loop3: detected capacity change from 0 to 64
[  144.916347][ T6371] hfs: get root inode failed
[  145.009906][ T5107] usb 1-1: unable to get BOS descriptor or descriptor too short
[  145.122648][ T5107] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  145.124711][ T4476] cdc_ncm 5-1:1.0: SET_CRC_MODE failed
[  145.178344][ T4476] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed
[  145.209923][ T6384] loop1: detected capacity change from 0 to 256
[  145.219664][ T4476] cdc_ncm 5-1:1.0: bind() failure
[  145.224827][ T6384] exfat: Deprecated parameter 'namecase'
[  145.231083][ T6384] exfat: Deprecated parameter 'utf8'
[  145.238515][ T4476] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  145.266563][ T6384] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  145.268776][ T4476] cdc_ncm 5-1:1.1: bind() failure
[  145.298151][ T4476] usb 5-1: USB disconnect, device number 9
[  145.308601][ T5107] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  145.327310][ T6384] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d)
[  145.343362][ T5107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.357646][ T5107] usb 1-1: Product: syz
[  145.367192][ T5107] usb 1-1: Manufacturer: syz
[  145.372246][ T5107] usb 1-1: SerialNumber: syz
[  145.544359][ T6379] loop2: detected capacity change from 0 to 32768
[  145.554906][ T6386] loop1: detected capacity change from 0 to 1024
[  145.576809][ T6379] XFS (loop2): Mounting V5 Filesystem
[  145.671105][ T6386] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,jqfmt=vfsv0,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  145.696164][ T6386] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.738101][ T6379] XFS (loop2): Ending clean mount
[  145.865626][ T4190] XFS (loop2): Unmounting Filesystem
[  145.888546][ T5106] Bluetooth: hci4: command 0x0406 tx timeout
[  145.991999][ T6404] loop4: detected capacity change from 0 to 4096
[  146.050845][ T6404] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  146.126688][ T5106] usb 4-1: USB disconnect, device number 8
[  146.418742][ T5107] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  146.506282][ T5107] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  146.542826][ T5107] usb 1-1: USB disconnect, device number 7
[  146.642906][ T6421] erofs: (device loop2): mounted with root inode @ nid 36.
[  146.687406][ T6421] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.715013][    T9] hfsplus: b-tree write err: -5, ino 25
[  146.728501][    T9] hfsplus: b-tree write err: -5, ino 4
[  146.752664][    T9] hfsplus: b-tree write err: -5, ino 2
[  146.980573][ T6441] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.811'.
[  147.000977][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.014894][ T6441] netlink: zone id is out of range
[  147.043319][ T6441] netlink: zone id is out of range
[  147.058597][ T6441] netlink: zone id is out of range
[  147.083116][ T6441] netlink: zone id is out of range
[  147.112376][ T6441] netlink: zone id is out of range
[  147.117561][ T6441] netlink: zone id is out of range
[  147.128539][ T6441] netlink: zone id is out of range
[  147.133904][ T6441] netlink: zone id is out of range
[  147.142276][ T5106] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  147.158535][ T6441] netlink: zone id is out of range
[  147.175505][ T6441] netlink: zone id is out of range
[  147.480366][ T6455] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  147.524197][ T6455] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  147.552328][ T6460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.821'.
[  147.566838][ T6464] set_capacity_and_notify: 4 callbacks suppressed
[  147.566855][ T6464] loop4: detected capacity change from 0 to 1024
[  147.650165][ T6430] XFS (loop1): Mounting V5 Filesystem
[  147.657578][ T6464] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  147.681621][ T6464] EXT4-fs (loop4): orphan cleanup on readonly fs
[  147.718479][ T6464] Quota error (device loop4): v2_read_file_info: Can't read info structure
[  147.727402][ T6464] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  147.753691][ T5106] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  147.758542][ T6464] EXT4-fs (loop4): Cannot turn on quotas: error -5
[  147.764669][ T5106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.777498][ T5106] usb 3-1: Product: syz
[  147.781970][ T5106] usb 3-1: Manufacturer: syz
[  147.786603][ T5106] usb 3-1: SerialNumber: syz
[  147.798280][ T5106] usb 3-1: config 0 descriptor??
[  147.867385][ T6464] EXT4-fs (loop4): 1 truncate cleaned up
[  147.873358][ T6464] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback.
[  147.918442][ T6430] XFS (loop1): Ending clean mount
[  148.118520][ T5104] usb 3-1: USB disconnect, device number 7
[  148.128982][ T4202] XFS (loop1): Unmounting Filesystem
[  148.425330][ T6494] loop3: detected capacity change from 0 to 4096
[  148.536832][ T6494] EXT4-fs (loop3): Ignoring removed bh option
[  148.585559][ T6494] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback.
[  148.760252][ T6494] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz.3.831: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  148.828341][ T5348] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  148.844269][ T6494] EXT4-fs (loop3): Remounting filesystem read-only
[  148.860830][ T6494] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.831: directory missing '..'
[  149.106756][ T6512] loop2: detected capacity change from 0 to 128
[  149.167925][ T6507] loop4: detected capacity change from 0 to 4096
[  149.208443][ T5348] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  149.224633][ T6512] FAT-fs (loop2): bogus number of reserved sectors
[  149.241625][ T6512] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  149.262763][ T6512] FAT-fs (loop2): Can't find a valid FAT filesystem
[  149.286522][ T6507] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  149.368618][ T5348] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  149.388066][ T5348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.464725][ T5348] usb 1-1: Product: syz
[  149.469863][ T6520] loop1: detected capacity change from 0 to 256
[  149.476311][ T5348] usb 1-1: Manufacturer: syz
[  149.490163][ T5348] usb 1-1: SerialNumber: syz
[  149.522020][ T5348] usb 1-1: config 0 descriptor??
[  149.569092][  T154] ntfs3: loop4: ino=1b, Internal error
[  149.578910][  T154] ntfs3: loop4: ntfs3_write_inode r=1b failed, -22.
[  149.629639][ T4189] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22.
[  149.637365][ T4189] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22.
[  149.644250][ T5348] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  149.644286][ T5348] usb 1-1: setting power ON
[  149.665280][ T4189] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  149.673938][ T6524] loop2: detected capacity change from 0 to 512
[  149.683499][ T5348] dvb-usb: bulk message failed: -22 (2/0)
[  149.701870][ T5348] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  149.728137][ T5348] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19)
[  149.737757][ T5348] dvb_usb_cxusb: probe of 1-1:0.0 failed with error -22
[  149.896059][ T5348] usb 1-1: USB disconnect, device number 8
[  149.927147][ T6524] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback.
[  149.940007][ T6524] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.019519][ T5106] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  150.307070][ T6528] loop1: detected capacity change from 0 to 32768
[  150.329028][ T6544] loop2: detected capacity change from 0 to 256
[  150.396777][ T6544] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  150.425393][ T6544] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  150.438532][ T5106] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  150.446850][ T5106] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  150.458650][ T5106] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  150.471325][ T6544] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  150.483523][ T5106] usb 5-1: config 220 has no interface number 2
[  150.493652][ T5106] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  150.553511][ T5106] usb 5-1: config 220 interface 0 has no altsetting 0
[  150.568131][ T5106] usb 5-1: config 220 interface 76 has no altsetting 0
[  150.585473][ T5106] usb 5-1: config 220 interface 1 has no altsetting 0
[  150.733159][ T6550] mkiss: ax0: crc mode is auto.
[  150.768882][ T5106] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  150.782227][ T5106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.791655][ T5106] usb 5-1: Product: syz
[  150.795947][ T5106] usb 5-1: Manufacturer: syz
[  150.813092][ T5106] usb 5-1: SerialNumber: syz
[  150.942519][ T6559] loop0: detected capacity change from 0 to 64
[  150.987368][ T6559] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  151.102943][ T6563] loop2: detected capacity change from 0 to 256
[  151.208633][ T5106] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  151.216736][ T5106] usb 5-1: No valid video chain found.
[  151.249743][ T5106] usb 5-1: selecting invalid altsetting 0
[  151.314682][ T6569] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  151.325764][ T6565] EXT4-fs (loop3): Ignoring removed oldalloc option
[  151.344212][ T6565] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  151.388907][ T6565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  151.399591][ T6565] EXT4-fs (loop3): orphan cleanup on readonly fs
[  151.399818][ T5106] usb 5-1: selecting invalid altsetting 0
[  151.412965][ T5106] usbtest: probe of 5-1:220.1 failed with error -22
[  151.422081][ T5106] usb 5-1: USB disconnect, device number 10
[  151.430166][ T6569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.447271][ T6565] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.862: bad orphan inode 267
[  151.529793][ T6565] EXT4-fs (loop3): Remounting filesystem read-only
[  151.536378][ T6565] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none.
[  151.559721][ T6565] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.862: dx entry: limit 0 != root limit 125
[  151.577954][ T6565] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.862: Corrupt directory, running e2fsck is recommended
[  151.608592][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'.
[  152.023601][ T6597] input: syz0 as /devices/virtual/input/input11
[  152.073849][ T6599] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  152.129981][ T6599] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.876: invalid indirect mapped block 9 (level 0)
[  152.240556][ T6599] EXT4-fs (loop1): 1 truncate cleaned up
[  152.246407][ T6599] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  152.579782][ T4191] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  152.586290][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  152.752707][ T6620] tap0: tun_chr_ioctl cmd 2147767507
[  152.788288][ T4476] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  153.066013][ T6608] set_capacity_and_notify: 5 callbacks suppressed
[  153.066031][ T6608] loop4: detected capacity change from 0 to 40427
[  153.198553][ T4476] usb 3-1: unable to get BOS descriptor or descriptor too short
[  153.234951][ T6608] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff
[  153.272471][ T6608] F2FS-fs (loop4): invalid crc value
[  153.288508][ T4476] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.303721][ T4476] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  153.336380][ T6608] F2FS-fs (loop4): Found nat_bits in checkpoint
[  153.480509][ T6638] pimreg: tun_chr_ioctl cmd 1074025680
[  153.505202][ T6608] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  153.538670][ T4476] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  153.547785][ T4476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.588933][ T4476] usb 3-1: Product: syz
[  153.593261][ T4476] usb 3-1: Manufacturer: syz
[  153.605527][ T4476] usb 3-1: SerialNumber: syz
[  153.662665][ T6642] loop3: detected capacity change from 0 to 4096
[  153.767303][ T6642] EXT4-fs (loop3): Ignoring removed oldalloc option
[  153.806831][ T6642] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  153.846515][ T6642] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,dioread_nolock,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,usrjquota=,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  153.911287][ T4476] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  153.969499][ T4476] usb 3-1: USB disconnect, device number 8
[  154.221052][ T4311] udevd[4311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  154.436099][ T6671] netlink: 64 bytes leftover after parsing attributes in process `syz.1.905'.
[  154.943795][ T6667] loop3: detected capacity change from 0 to 32768
[  155.000920][ T6667] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.916 (6667)
[  155.066991][ T6667] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  155.100251][ T6673] loop2: detected capacity change from 0 to 32768
[  155.109983][ T6667] BTRFS info (device loop3): using free space tree
[  155.168419][ T6667] BTRFS info (device loop3): has skinny extents
[  155.183009][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'.
[  155.341733][ T6696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.912'.
[  155.527236][ T6667] BTRFS info (device loop3): enabling ssd optimizations
[  155.641872][   T26] audit: type=1326 audit(1778553074.606:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.2.919" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94abc6dd9 code=0x7ffc0000
[  155.666236][ T5348] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  155.759021][   T26] audit: type=1326 audit(1778553074.606:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.2.919" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa94abc6dd9 code=0x7ffc0000
[  155.874208][   T26] audit: type=1326 audit(1778553074.626:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.2.919" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94abc6dd9 code=0x7ffc0000
[  155.978328][   T26] audit: type=1326 audit(1778553074.636:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.2.919" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa94abc6dd9 code=0x7ffc0000
[  156.030973][   T26] audit: type=1326 audit(1778553074.636:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.2.919" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94abc6dd9 code=0x7ffc0000
[  156.069653][ T5348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.081358][   T26] audit: type=1326 audit(1778553074.636:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.2.919" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94abc6dd9 code=0x7ffc0000
[  156.108321][ T5348] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  156.127669][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.136019][   T26] audit: type=1326 audit(1778553074.636:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.2.919" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa94abc6dd9 code=0x7ffc0000
[  156.136063][   T26] audit: type=1326 audit(1778553074.646:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.2.919" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa94abc6dd9 code=0x7ffc0000
[  156.192963][ T5348] usb 5-1: config 0 descriptor??
[  156.460038][ T6738] loop3: detected capacity change from 0 to 1024
[  156.505150][ T6723] loop1: detected capacity change from 0 to 32768
[  156.552222][ T6738] EXT4-fs (loop3): inline encryption not supported
[  156.598025][ T6723] JBD2: Ignoring recovery information on journal
[  156.615624][ T6723] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[  156.624862][ T6723] JBD2: bad block at offset 32
[  156.630898][ T6738] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,resgid=0x000000000000ee00,noquota,inlinecrypt,abort,nodioread_nolock,journal_ioprio=0x0000000000000006,,errors=continue. Quota mode: none.
[  156.648490][ T6730] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  156.662192][ T6738] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.682970][ T6723] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  156.707967][ T6738] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.926: lblock 3 mapped to illegal pblock 3 (length 2)
[  156.724101][ T5348] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  156.741873][ T5348] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input12
[  156.761640][ T6738] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.926: lblock 0 mapped to illegal pblock 0 (length 3)
[  156.790221][ T4202] ocfs2: Unmounting device (7,1) on (node local)
[  156.851300][ T6738] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  156.898351][ T6730] usb 3-1: Using ep0 maxpacket: 16
[  156.904324][ T5348] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  156.918656][ T6738] EXT4-fs (loop3): This should not happen!! Data will be lost
[  156.918656][ T6738] 
[  157.020233][ T6730] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  157.039718][ T6730] usb 3-1: config 0 has no interface number 0
[  157.070510][ T6730] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  157.130021][ T6730] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  157.207776][  T144] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 4: comm kworker/u4:1: lblock 4 mapped to illegal pblock 4 (length 1)
[  157.245850][  T144] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117
[  157.266091][  T144] EXT4-fs (loop3): This should not happen!! Data will be lost
[  157.266091][  T144] 
[  157.319218][ T6756] loop0: detected capacity change from 0 to 1024
[  157.320703][ T6730] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  157.342867][ T6730] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  157.362666][ T6730] usb 3-1: Product: syz
[  157.367282][ T6730] usb 3-1: SerialNumber: syz
[  157.419840][ T6730] usb 3-1: config 0 descriptor??
[  157.455895][ T6758] loop1: detected capacity change from 0 to 128
[  157.470274][ T6730] cm109 3-1:0.8: invalid payload size 0, expected 4
[  157.492188][ T5104] usb 5-1: USB disconnect, device number 11
[  157.510200][ T6730] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input13
[  157.524370][ T6758] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  157.545812][ T6758] hpfs: filesystem error: improperly stopped
[  157.566859][ T6758] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  157.577241][ T6758] hpfs: You really don't want any checks? You are crazy...
[  157.627372][ T6758] hpfs: hpfs_map_sector(): read error
[  157.638640][ T6758] hpfs: code page support is disabled
[  157.644130][ T6758] hpfs: hpfs_map_4sectors(): unaligned read
[  157.672022][ T6758] hpfs: hpfs_map_4sectors(): unaligned read
[  157.677981][ T6758] hpfs: filesystem error: unable to find root dir
[  157.736474][ T6728] udc-core: couldn't find an available UDC or it's busy
[  157.801999][ T6728] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  157.830594][ T2286] usb 3-1: USB disconnect, device number 9
[  157.838332][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  157.845436][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  157.916664][ T2286] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  158.001280][ T6774] Falling back ldisc for ptm0.
[  158.214511][ T6783] loop1: detected capacity change from 0 to 64
[  158.270269][   T26] audit: type=1800 audit(1778553077.236:54): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.946" name="file1" dev="loop1" ino=21 res=0 errno=0
[  158.304496][ T6783] hfs: keylen 1794 too large
[  158.316625][ T6783] hfs: keylen 1794 too large
[  158.715328][ T6796] loop2: detected capacity change from 0 to 64
[  158.875330][ T6777] loop3: detected capacity change from 0 to 32768
[  159.062864][ T6777] XFS (loop3): Mounting V5 Filesystem
[  159.230176][ T6777] XFS (loop3): Ending clean mount
[  159.261688][ T6818] loop1: detected capacity change from 0 to 128
[  159.281279][ T6777] XFS (loop3): Quotacheck needed: Please wait.
[  159.398095][ T6777] XFS (loop3): Quotacheck: Done.
[  159.428421][ T5104] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  159.588882][ T4193] XFS (loop3): Unmounting Filesystem
[  159.605301][ T6798] loop4: detected capacity change from 0 to 32768
[  159.718295][ T5104] usb 3-1: Using ep0 maxpacket: 32
[  159.821582][ T6798] JBD2: Ignoring recovery information on journal
[  159.828516][ T5104] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  159.847913][ T5104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.886956][ T6798] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  159.915236][ T5104] gspca_main: nw80x-2.14.0 probing 055f:d001
[  160.034099][ T6798] overlayfs: upper fs does not support tmpfile.
[  160.068293][ T6730] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  160.084525][ T6798] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  160.117427][ T6816] udc-core: couldn't find an available UDC or it's busy
[  160.135454][ T6816] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  160.145491][ T6798] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[  160.186537][ T6798] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  160.214736][ T6798] OCFS2: File system is now read-only.
[  160.240795][ T6798] (syz.4.954,6798,1):ocfs2_search_chain:1761 ERROR: status = -30
[  160.264450][ T6798] (syz.4.954,6798,1):ocfs2_search_chain:1871 ERROR: status = -30
[  160.287167][ T6798] (syz.4.954,6798,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  160.302331][ T6798] (syz.4.954,6798,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  160.313651][ T6798] (syz.4.954,6798,0):ocfs2_claim_metadata:2018 ERROR: status = -30
[  160.321800][ T6730] usb 2-1: Using ep0 maxpacket: 32
[  160.329144][ T6798] (syz.4.954,6798,0):ocfs2_claim_metadata:2031 ERROR: status = -30
[  160.338027][ T6798] (syz.4.954,6798,0):ocfs2_create_xattr_block:2891 ERROR: status = -30
[  160.346880][ T6798] (syz.4.954,6798,0):ocfs2_xattr_block_set:2972 ERROR: status = -30
[  160.362105][ T6798] overlayfs: failed to set xattr on upper
[  160.367976][ T6798] overlayfs: ...falling back to index=off,metacopy=off.
[  160.375302][ T6798] overlayfs: upper fs missing required features.
[  160.425983][ T4189] ocfs2: Unmounting device (7,4) on (node local)
[  160.577072][ T6841] loop0: detected capacity change from 0 to 4096
[  160.598736][ T6730] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  160.608521][ T6730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.616585][ T6730] usb 2-1: Product: syz
[  160.645022][ T5104] usb 3-1: USB disconnect, device number 10
[  160.688785][ T6730] usb 2-1: Manufacturer: syz
[  160.713225][ T6730] usb 2-1: SerialNumber: syz
[  160.748335][ T6730] usb 2-1: config 0 descriptor??
[  160.793183][ T6730] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  160.829130][ T6730] dvb-usb: bulk message failed: -22 (4/0)
[  160.838861][ T6730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  160.871836][ T6730] dvb-usb: bulk message failed: -22 (5/0)
[  160.877696][ T6730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  160.950668][ T6730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  160.988596][ T6730] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  161.006527][ T6824] dvb-usb: bulk message failed: -22 (7/0)
[  161.012535][ T6730] usb 2-1: media controller created
[  161.018328][ T6824] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  161.042201][ T6824] ttusb2: i2c transfer failed.
[  161.052681][ T6730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  161.118146][ T6730] usb 2-1: selecting invalid altsetting 3
[  161.137909][ T6730] ttusb2: set interface to alts=3 failed
[  161.235854][ T6730] DVB: Unable to find symbol tda10086_attach()
[  161.244829][ T6730] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  161.318611][ T6730] dvb-usb: bulk message failed: -22 (4/0)
[  161.324545][ T6730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  161.370649][ T6730] dvb-usb: bulk message failed: -22 (5/0)
[  161.376578][ T6730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  161.434600][ T6730] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  161.451498][ T6864] loop4: detected capacity change from 0 to 2048
[  161.486060][ T6730] usb 2-1: USB disconnect, device number 6
[  161.538558][ T5104] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  161.550097][ T6730] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  161.641546][ T6864] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  161.666494][ T6864] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  161.700915][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.815299][ T6880] loop1: detected capacity change from 0 to 4096
[  161.868613][ T5104] usb 1-1: Using ep0 maxpacket: 8
[  161.912292][ T6880] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  162.103763][ T6886] loop4: detected capacity change from 0 to 8192
[  162.168354][ T5107] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  162.215229][ T5104] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  162.228867][ T5104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.237180][ T5104] usb 1-1: Product: syz
[  162.246103][ T6886] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  162.258326][ T5104] usb 1-1: Manufacturer: syz
[  162.263067][ T5104] usb 1-1: SerialNumber: syz
[  162.278420][ T6886] REISERFS (device loop4): using ordered data mode
[  162.289456][ T5104] usb 1-1: config 0 descriptor??
[  162.298312][ T6886] reiserfs: using flush barriers
[  162.322406][ T6886] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  162.362051][ T6891] loop3: detected capacity change from 0 to 4096
[  162.381511][ T6886] REISERFS (device loop4): checking transaction log (loop4)
[  162.411276][ T6886] REISERFS (device loop4): Using rupasov hash to sort names
[  162.448604][ T6886] REISERFS (device loop4): using 3.5.x disk format
[  162.455381][ T6886] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  162.558710][ T5104] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  162.561851][ T6886] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  162.651431][ T6886] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  162.728498][ T6886] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  162.758764][ T5107] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  162.778155][ T5107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.814311][ T5107] usb 3-1: Product: syz
[  162.820171][ T5107] usb 3-1: Manufacturer: syz
[  162.834227][ T5107] usb 3-1: SerialNumber: syz
[  162.869649][ T5107] usb 3-1: config 0 descriptor??
[  162.986477][ T4193] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  163.010543][ T4193] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  163.188734][ T5107] int51x1: probe of 3-1:0.0 failed with error -71
[  163.208647][ T5104] usb write operation failed. (-71)
[  163.220228][ T5104] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  163.233798][ T5107] usb 3-1: USB disconnect, device number 11
[  163.251783][ T5104] dvbdev: DVB: registering new adapter (Terratec H7)
[  163.271297][ T5104] usb 1-1: media controller created
[  163.319311][ T5104] usb read operation failed. (-71)
[  163.348402][ T5104] usb write operation failed. (-71)
[  163.365485][ T5104] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5
[  163.394721][ T5104] usb 1-1: USB disconnect, device number 9
[  163.425334][ T4311] udevd[4311]: setting owner of /dev/bus/usb/001/009 to uid=0, gid=0 failed: No such file or directory
[  163.612020][ T6899] loop1: detected capacity change from 0 to 32768
[  163.717667][ T6899] (syz.1.991,6899,1):ocfs2_find_slot:468 ERROR: no free slots available!
[  163.741899][ T6899] (syz.1.991,6899,1):ocfs2_mount_volume:1811 ERROR: status = -22
[  163.766684][ T6899] (syz.1.991,6899,1):ocfs2_fill_super:1177 ERROR: status = -22
[  164.000097][ T6903] loop4: detected capacity change from 0 to 32768
[  164.101800][ T6922] loop0: detected capacity change from 0 to 512
[  164.194309][ T6922] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  164.292996][ T6922] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  164.387986][ T6922] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1000: invalid indirect mapped block 2683928664 (level 1)
[  164.439334][ T6922] EXT4-fs (loop0): Remounting filesystem read-only
[  164.446355][ T6922] EXT4-fs (loop0): 1 truncate cleaned up
[  164.473407][ T6926] loop4: detected capacity change from 0 to 64
[  164.489284][ T6922] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback.
[  164.558366][ T5104] kernel read not supported for file /dsp1 (pid: 5104 comm: kworker/1:12)
[  164.717756][ T6922] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option
[  164.805354][ T6922] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  164.856402][ T6922] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring
[  165.086041][ T6920] loop1: detected capacity change from 0 to 32768
[  165.431389][ T6954] loop3: detected capacity change from 0 to 512
[  165.532875][ T6956] Bluetooth: hci0: load_link_keys: too big key_count value 37305
[  165.668751][ T6954] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1014: corrupted in-inode xattr
[  165.757531][ T6954] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1014: couldn't read orphan inode 15 (err -117)
[  165.775659][ T6954] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,nodelalloc,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: none.
[  165.823869][ T6970] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1023'.
[  166.047033][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'.
[  166.500340][ T7004] overlayfs: statfs failed on './file0'
[  166.687738][ T6730] Bluetooth: hci0: command 0x0401 tx timeout
[  166.725466][ T7011] loop4: detected capacity change from 0 to 2048
[  166.853327][ T7011] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,dioread_lock,,errors=continue. Quota mode: none.
[  166.939359][ T7011] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.354444][ T7036] loop2: detected capacity change from 0 to 2048
[  167.386898][ T7040] loop1: detected capacity change from 0 to 256
[  167.410268][ T7042] loop4: detected capacity change from 0 to 8
[  167.428335][ T7036] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  167.483067][ T7043] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.508609][   T26] audit: type=1800 audit(1778553086.476:55): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1065" name="bus" dev="loop1" ino=1048644 res=0 errno=0
[  167.806316][ T7047] kvm [7046]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffff
[  168.231706][ T7067] exfat: Deprecated parameter 'utf8'
[  168.238451][ T7067] exfat: Deprecated parameter 'namecase'
[  168.301623][ T5347] Bluetooth: hci2: command 0x0401 tx timeout
[  168.314145][ T7067] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  168.414913][   T26] audit: type=1800 audit(1778553087.376:56): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1076" name="file1" dev="loop1" ino=1048645 res=0 errno=0
[  168.528120][ T7080] input: syz1 as /devices/virtual/input/input14
[  168.975886][ T7087] input: syz1 as /devices/virtual/input/input15
[  169.054291][ T7069] set_capacity_and_notify: 2 callbacks suppressed
[  169.054308][ T7069] loop0: detected capacity change from 0 to 32768
[  169.086588][ T7069] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1066 (7069)
[  169.166540][ T7069] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  169.184906][ T7069] BTRFS info (device loop0): enabling auto defrag
[  169.215855][ T7069] BTRFS info (device loop0): use no compression
[  169.230405][ T7069] BTRFS info (device loop0): max_inline at 4096
[  169.250193][ T7069] BTRFS info (device loop0): using free space tree
[  169.256869][ T7069] BTRFS info (device loop0): has skinny extents
[  169.413567][ T7103] loop2: detected capacity change from 0 to 2048
[  169.610026][ T7118] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.631988][ T7069] BTRFS info (device loop0): enabling ssd optimizations
[  169.758326][ T5104] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  169.959033][ T1454] wlan1: Trigger new scan to find an IBSS to join
[  170.046005][ T4521] ------------[ cut here ]------------
[  170.052283][ T4521] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20
[  170.063276][ T4521] WARNING: CPU: 0 PID: 4521 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880
[  170.073379][ T4521] Modules linked in:
[  170.077339][ T4521] CPU: 0 PID: 4521 Comm: kworker/u4:7 Not tainted syzkaller #0
[  170.084993][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  170.095374][ T4521] Workqueue: phy12 ieee80211_scan_work
[  170.101050][ T4521] RIP: 0010:__rate_control_send_low+0x630/0x880
[  170.107349][ T4521] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 86 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 80 f1 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff
[  170.127222][ T4521] RSP: 0018:ffffc9000443f488 EFLAGS: 00010246
[  170.133469][ T4521] RAX: 33a6b4aab0d29600 RBX: 000000000000000c RCX: ffff88802972bb80
[  170.141873][ T4521] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[  170.149945][ T4521] RBP: 0000000000000084 R08: ffffc9000443efa7 R09: 1ffff92000887df4
[  170.157968][ T4521] R10: dffffc0000000000 R11: fffff52000887df5 R12: ffff88801f54ba28
[  170.166032][ T4521] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020
[  170.174102][ T4521] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  170.183129][ T4521] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.189192][ T5104] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[  170.189857][ T4521] CR2: 00007f6742bb1dac CR3: 0000000063de1000 CR4: 00000000003506f0
[  170.208615][ T4521] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  170.216721][ T4521] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  170.219906][ T5104] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  170.224790][ T4521] Call Trace:
[  170.224801][ T4521]  <TASK>
[  170.224825][ T4521]  rate_control_send_low+0x194/0x790
[  170.247509][ T4521]  ? ieee80211_scan_work+0x4eb/0x1b40
[  170.252981][ T4521]  rate_control_get_rate+0x207/0x5c0
[  170.258374][ T4521]  ieee80211_tx_h_rate_ctrl+0xb02/0x1700
[  170.264088][ T4521]  ? ieee80211_tx_h_select_key+0x17f0/0x17f0
[  170.270263][ T4521]  ? sta_info_hash_lookup+0x53e/0x580
[  170.275695][ T4521]  ? ieee80211_queue_skb+0xbc/0x2060
[  170.281090][ T4521]  invoke_tx_handlers_late+0xaa/0x16a0
[  170.286617][ T4521]  ? ieee80211_tx_h_select_key+0x12c0/0x17f0
[  170.292707][ T4521]  ? sta_info_get+0x220/0x230
[  170.297622][ T4521]  ? invoke_tx_handlers_early+0xa11/0x1d10
[  170.301446][ T5104] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.303634][ T4521]  ieee80211_tx+0x2d4/0x460
[  170.317965][ T4521]  ? ieee80211_skb_resize+0x630/0x630
[  170.323572][ T4521]  __ieee80211_tx_skb_tid_band+0x165/0x200
[  170.329481][ T4521]  ieee80211_scan_state_send_probe+0x526/0x8a0
[  170.335729][ T4521]  ieee80211_scan_work+0x4eb/0x1b40
[  170.341061][ T4521]  process_one_work+0x85f/0x1010
[  170.346161][ T4521]  ? worker_detach_from_pool+0x240/0x240
[  170.351890][ T4521]  ? lockdep_hardirqs_off+0x70/0x100
[  170.357242][ T4521]  ? _raw_spin_lock_irq+0xb7/0xf0
[  170.362366][ T4521]  ? _raw_spin_lock_irqsave+0x100/0x100
[  170.367979][ T4521]  ? wq_worker_running+0x97/0x170
[  170.372373][ T5104] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  170.373192][ T4521]  worker_thread+0xaa6/0x1290
[  170.390908][ T4521]  ? lockdep_hardirqs_on+0x94/0x140
[  170.396168][ T4521]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  170.402367][ T4521]  kthread+0x436/0x520
[  170.406503][ T4521]  ? rcu_lock_release+0x20/0x20
[  170.411452][ T4521]  ? kthread_blkcg+0xd0/0xd0
[  170.416102][ T4521]  ret_from_fork+0x1f/0x30
[  170.420635][ T4521]  </TASK>
[  170.423717][ T4521] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  170.431045][ T4521] CPU: 0 PID: 4521 Comm: kworker/u4:7 Not tainted syzkaller #0
[  170.438635][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  170.448467][ T5104] usb 4-1: config 0 interface 0 has no altsetting 0
[  170.448818][ T4521] Workqueue: phy12 ieee80211_scan_work
[  170.461026][ T4521] Call Trace:
[  170.464344][ T4521]  <TASK>
[  170.467329][ T4521]  dump_stack_lvl+0x188/0x250
[  170.472073][ T4521]  ? show_regs_print_info+0x20/0x20
[  170.477326][ T4521]  ? load_image+0x400/0x400
[  170.479651][ T5104] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  170.481935][ T4521]  panic+0x2e5/0x810
[  170.481973][ T4521]  ? bpf_jit_dump+0xd0/0xd0
[  170.499584][ T4521]  ? ret_from_fork+0x1f/0x30
[  170.504268][ T4521]  ? __rate_control_send_low+0x630/0x880
[  170.509970][ T4521]  __warn+0x248/0x2b0
[  170.514025][ T4521]  ? __rate_control_send_low+0x630/0x880
[  170.519798][ T4521]  report_bug+0x1b7/0x2e0
[  170.524186][ T4521]  handle_bug+0x3a/0x70
[  170.528396][ T4521]  exc_invalid_op+0x16/0x40
[  170.532952][ T4521]  asm_exc_invalid_op+0x16/0x20
[  170.537879][ T4521] RIP: 0010:__rate_control_send_low+0x630/0x880
[  170.544179][ T4521] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 86 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 80 f1 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff
[  170.558389][ T5104] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.563827][ T4521] RSP: 0018:ffffc9000443f488 EFLAGS: 00010246
[  170.563853][ T4521] RAX: 33a6b4aab0d29600 RBX: 000000000000000c RCX: ffff88802972bb80
[  170.563870][ T4521] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[  170.563884][ T4521] RBP: 0000000000000084 R08: ffffc9000443efa7 R09: 1ffff92000887df4
[  170.602225][ T4521] R10: dffffc0000000000 R11: fffff52000887df5 R12: ffff88801f54ba28
[  170.610246][ T4521] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020
[  170.618404][ T4521]  ? __rate_control_send_low+0x630/0x880
[  170.624099][ T4521]  rate_control_send_low+0x194/0x790
[  170.629524][ T4521]  ? ieee80211_scan_work+0x4eb/0x1b40
[  170.635134][ T4521]  rate_control_get_rate+0x207/0x5c0
[  170.640478][ T4521]  ieee80211_tx_h_rate_ctrl+0xb02/0x1700
[  170.646185][ T4521]  ? ieee80211_tx_h_select_key+0x17f0/0x17f0
[  170.652235][ T4521]  ? sta_info_hash_lookup+0x53e/0x580
[  170.657658][ T4521]  ? ieee80211_queue_skb+0xbc/0x2060
[  170.663102][ T4521]  invoke_tx_handlers_late+0xaa/0x16a0
[  170.668697][ T4521]  ? ieee80211_tx_h_select_key+0x12c0/0x17f0
[  170.674816][ T4521]  ? sta_info_get+0x220/0x230
[  170.680711][ T4521]  ? invoke_tx_handlers_early+0xa11/0x1d10
[  170.686781][ T4521]  ieee80211_tx+0x2d4/0x460
[  170.691335][ T4521]  ? ieee80211_skb_resize+0x630/0x630
[  170.696782][ T4521]  __ieee80211_tx_skb_tid_band+0x165/0x200
[  170.702641][ T4521]  ieee80211_scan_state_send_probe+0x526/0x8a0
[  170.708866][ T4521]  ieee80211_scan_work+0x4eb/0x1b40
[  170.714138][ T4521]  process_one_work+0x85f/0x1010
[  170.719135][ T4521]  ? worker_detach_from_pool+0x240/0x240
[  170.724818][ T4521]  ? lockdep_hardirqs_off+0x70/0x100
[  170.730159][ T4521]  ? _raw_spin_lock_irq+0xb7/0xf0
[  170.735381][ T4521]  ? _raw_spin_lock_irqsave+0x100/0x100
[  170.741072][ T4521]  ? wq_worker_running+0x97/0x170
[  170.746140][ T4521]  worker_thread+0xaa6/0x1290
[  170.750976][ T4521]  ? lockdep_hardirqs_on+0x94/0x140
[  170.756327][ T4521]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  170.762382][ T4521]  kthread+0x436/0x520
[  170.766500][ T4521]  ? rcu_lock_release+0x20/0x20
[  170.771563][ T4521]  ? kthread_blkcg+0xd0/0xd0
[  170.776242][ T4521]  ret_from_fork+0x1f/0x30
[  170.780732][ T4521]  </TASK>
[  170.784360][ T4521] Kernel Offset: disabled
[  170.789179][ T4521] Rebooting in 86400 seconds..