last executing test programs:

9.39502192s ago: executing program 2 (id=1609):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x71)
r1 = dup2(r0, r0)
read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020)

9.137997346s ago: executing program 2 (id=1616):
syz_emit_ethernet(0x4a, 0x0, 0x0)
prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, <r0=>0xffffffffffffffff})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="2e000000010002", 0x7)
r4 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0)
clock_getres(0x6, 0x0)
syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c9"], 0x18)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80, &(0x7f0000000c40)=ANY=[], 0x1, 0x196, &(0x7f0000000200)="$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")

8.437310412s ago: executing program 1 (id=1623):
syz_emit_ethernet(0x4a, 0x0, 0x0)
prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, <r0=>0xffffffffffffffff})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2e000000010002", 0x7)
r5 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0)
clock_getres(0x6, 0x0)
syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c9000101"], 0x18)
brk(0x5d555ede6000)
syz_clone(0xd8024a00, &(0x7f0000000080)="6ff7a4f4232d73565a09c11ecbad662bf0a28b", 0x13, 0x0, &(0x7f0000000400), 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80, &(0x7f0000000c40)=ANY=[], 0x1, 0x196, &(0x7f0000000200)="$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")
socket$nl_route(0x10, 0x3, 0x0)

7.533299682s ago: executing program 3 (id=1627):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000013c0)='./bus\x00', 0x204818, &(0x7f0000001580)={[{@map_off}, {@check_strict}, {@hide}, {@map_normal}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@mode={'mode', 0x3d, 0x7}}, {}, {@check_strict}, {@check_strict}]}, 0x1, 0x571, &(0x7f0000000e40)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d)

6.375667378s ago: executing program 4 (id=1628):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
waitid(0x1, r0, 0x0, 0x61000006, 0x0)
ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0x78})

6.282590289s ago: executing program 1 (id=1630):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)

6.194326972s ago: executing program 1 (id=1632):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0})

6.193811212s ago: executing program 4 (id=1633):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x125f, 0x0)

6.172733562s ago: executing program 3 (id=1634):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"})
r1 = syz_open_pts(r0, 0x2000)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000300)={0x3, 0x2, 0x0, 0x6, 0x4, "29c2df3bf22322639220401c2dceb3e7f4e095"})

6.061512974s ago: executing program 3 (id=1635):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00')
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/128, 0x80}, {&(0x7f0000000480)=""/235, 0xeb}], 0x2, 0x0, 0x10201)

6.060914115s ago: executing program 4 (id=1636):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r3, 0x0, 0x2000c894)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
r4 = dup3(r2, r1, 0x80000)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8)
keyctl$get_persistent(0x16, r6, r5)

5.103006236s ago: executing program 4 (id=1638):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000500)=""/49, 0x31)
getdents(r0, 0x0, 0x58)

5.065909037s ago: executing program 3 (id=1639):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_clone3(0x0, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = shmget$private(0x0, 0x400000, 0x4, &(0x7f000000e000/0x400000)=nil)
r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0xff, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc0405602, &(0x7f00000001c0)=@multiplanar_fd={0x0, 0x1, 0x4, 0x24, 0x8, {0x0, 0x2710}, {0x2, 0xc, 0x3, 0xff, 0xc, 0x7, 'P[9A'}, 0x56b, 0x4, {0x0}, 0xd})
shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
unshare(0x2c020400)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6])
r6 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
setsockopt$llc_int(r6, 0x10c, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = getpid()
process_vm_readv(r7, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/141, 0x8d}], 0x1, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

5.065484227s ago: executing program 2 (id=1641):
syz_emit_ethernet(0x4a, 0x0, 0x0)
prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, <r0=>0xffffffffffffffff})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2e000000010002", 0x7)
r5 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0)
clock_getres(0x6, 0x0)
syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c9000101"], 0x18)
brk(0x5d555ede6000)
syz_clone(0xd8024a00, &(0x7f0000000080)="6ff7a4f4232d73565a09c11ecbad662bf0a28b", 0x13, 0x0, &(0x7f0000000400), 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80, &(0x7f0000000c40)=ANY=[], 0x1, 0x196, &(0x7f0000000200)="$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")
socket$nl_route(0x10, 0x3, 0x0)

5.005959488s ago: executing program 0 (id=1642):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x40002000})

3.353665795s ago: executing program 2 (id=1643):
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file2\x00', 0x180c850, &(0x7f0000001100)=ANY=[@ANYBLOB='rodir,nonumtail=0,nonumtail=0,shortname=lower,rodir,iocharset=maciceland,shortname=win95,check=strict,codepage=863,rodir,utf8=0,iocharset=iso8859-3,\x00l'], 0x1, 0x379, &(0x7f0000000600)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

3.255911727s ago: executing program 0 (id=1644):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000140)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e4d700", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @empty, @loopback={0xfec0ffff00000000, 0xffffac1414aa}}}}}}}}, 0x0)

3.229374648s ago: executing program 3 (id=1645):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000001c0)='./file2\x00', 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYBLOB, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="30873fbc8711048bea9eb55574810b5cbc454ced5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90016069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6fe530f67dbac2443da65608409abd01602b80fbbf5d2af3b0c444c5b6315227c272020000000000000040bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e74b8cdd2c3cba6972ccffb41487a8202816ac3ba65bb5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10"], 0x21, 0x627f, &(0x7f0000001600)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000040)='./bus\x00', 0x2004ca9, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)

3.090803001s ago: executing program 1 (id=1646):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@grpjquota}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x5a1, &(0x7f00000003c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r0, 0xf, 0x5, 0x1, 0x4})

3.064344372s ago: executing program 0 (id=1647):
syz_emit_ethernet(0x4a, 0x0, 0x0)
prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, <r0=>0xffffffffffffffff})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2e000000010002", 0x7)
r5 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0)
clock_getres(0x6, 0x0)
syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c9000101"], 0x18)
brk(0x5d555ede6000)
syz_clone(0xd8024a00, &(0x7f0000000080)="6ff7a4f4232d73565a09c11ecbad662bf0a2", 0x12, 0x0, &(0x7f0000000400), &(0x7f0000000440)="16a33dbdf56c7934cdd41f6240c063e251306436")
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80, &(0x7f0000000c40)=ANY=[], 0x1, 0x196, &(0x7f0000000200)="$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")
socket$nl_route(0x10, 0x3, 0x0)

2.178069041s ago: executing program 1 (id=1648):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac5496f"], 0x18}, 0x2000c894)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
r4 = dup3(r2, r1, 0x80000)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8)
keyctl$get_persistent(0x16, r6, r5)

2.090472163s ago: executing program 0 (id=1649):
r0 = socket$kcm(0x2, 0xa, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4200c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x9, 0x1}]}}}]}, 0x3c}}, 0x4040)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, @hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100000001, 0x3ff})

2.002618255s ago: executing program 2 (id=1650):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="09000000060000000900000008000000400000", @ANYBLOB], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{r0}, &(0x7f0000001240), &(0x7f0000001280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.79121779s ago: executing program 4 (id=1651):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

1.063750796s ago: executing program 1 (id=1652):
syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = shmget$private(0x0, 0x400000, 0x4, &(0x7f000000e000/0x400000)=nil)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0xff, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc0405602, &(0x7f00000001c0)=@multiplanar_fd={0x0, 0x1, 0x4, 0x24, 0x8, {0x0, 0x2710}, {0x2, 0xc, 0x3, 0xff, 0xc, 0x7, 'P[9A'}, 0x56b, 0x4, {0x0}, 0xd})
shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
unshare(0x2c020400)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6])
r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
setsockopt$llc_int(r5, 0x10c, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = getpid()
process_vm_readv(r6, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/141, 0x8d}], 0x1, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x50, r0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

989.283407ms ago: executing program 0 (id=1653):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @mcast1, [{0x4, 0x20, "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"}]}}}}}}, 0x0)

545.062258ms ago: executing program 4 (id=1654):
syz_emit_ethernet(0x4a, 0x0, 0x0)
prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x100, 0x1, 0x2, 0xc, 0x5, <r0=>0xffffffffffffffff})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2e000000010002", 0x7)
r5 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0)
clock_getres(0x6, 0x0)
syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e400c9000101"], 0x18)
brk(0x5d555ede6000)
syz_clone(0xd8024a00, &(0x7f0000000080)="6ff7a4f4232d73565a09c11ecbad662bf0a28b", 0x13, 0x0, &(0x7f0000000400), &(0x7f0000000440))
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80, &(0x7f0000000c40)=ANY=[], 0x1, 0x196, &(0x7f0000000200)="$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")
socket$nl_route(0x10, 0x3, 0x0)

340.751712ms ago: executing program 2 (id=1655):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_clone3(0x0, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = shmget$private(0x0, 0x400000, 0x4, &(0x7f000000e000/0x400000)=nil)
r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0xff, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc0405602, &(0x7f00000001c0)=@multiplanar_fd={0x0, 0x1, 0x4, 0x24, 0x8, {0x0, 0x2710}, {0x2, 0xc, 0x3, 0xff, 0xc, 0x7, 'P[9A'}, 0x56b, 0x4, {0x0}, 0xd})
shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
unshare(0x2c020400)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6])
r6 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
setsockopt$llc_int(r6, 0x10c, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = getpid()
process_vm_readv(r7, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/141, 0x8d}], 0x1, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

158.136096ms ago: executing program 0 (id=1656):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$binfmt_elf32(r0, 0x0, 0x1358)
fdatasync(r0)

0s ago: executing program 3 (id=1657):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r2, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)

kernel console output (not intermixed with test programs):

041] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  303.722236][ T7043] loop2: detected capacity change from 0 to 32768
[  303.809016][ T7043] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  303.858256][ T7043] BTRFS info (device loop2): using free space tree
[  303.926826][ T7043] BTRFS info (device loop2): has skinny extents
[  304.027203][ T4230] ssu100: probe of 1-1:0.0 failed with error -71
[  304.148461][ T4230] usb 1-1: USB disconnect, device number 7
[  304.868876][ T7076] loop4: detected capacity change from 0 to 8
[  304.940462][ T7076] cramfs: empty filesystem
[  304.956450][ T7043] BTRFS info (device loop2): enabling ssd optimizations
[  305.385138][ T7089] loop4: detected capacity change from 0 to 16
[  305.405467][ T4193] Bluetooth: hci1: hcon ffff88801a1ea000 sent 0 < count 257
[  305.431841][ T7089] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36
[  305.813124][ T5713] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5713)
[  306.148148][ T7102] loop4: detected capacity change from 0 to 2048
[  306.181038][ T7102] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  306.186512][ T4245] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  306.359125][ T7107] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  306.716459][ T4245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  307.231823][ T7118] loop4: detected capacity change from 0 to 64
[  307.258086][ T4245] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  307.267240][ T4245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.276860][ T4245] usb 1-1: config 0 descriptor??
[  307.307069][ T7114] loop2: detected capacity change from 0 to 4096
[  307.318014][ T4245] smsusb:smsusb_probe: board id=8, interface number 0
[  307.352080][ T4245] smsusb:smsusb_probe: Device initialized with return code -19
[  307.410767][ T7114] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  307.567866][ T4245] usb 1-1: USB disconnect, device number 8
[  307.634961][ T7114] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[  307.650340][ T7114] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  307.716443][ T4194] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[  307.727044][ T4194] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[  307.735534][ T7123] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  307.796963][ T7123] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  307.826055][ T4193] Bluetooth: hci3: hcon ffff88801a7c2000 sent 0 < count 257
[  307.839322][ T7129] set_capacity_and_notify: 1 callbacks suppressed
[  307.839335][ T7129] loop3: detected capacity change from 0 to 16
[  307.987047][ T7129] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  308.000340][ T7123] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[  309.123356][ T7145] loop4: detected capacity change from 0 to 16
[  309.130006][ T4193] Bluetooth: hci1: hcon ffff88801a1ea000 sent 0 < count 257
[  309.246114][ T7145] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36
[  309.556463][ T5636] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  310.060938][ T7158] loop4: detected capacity change from 0 to 4096
[  310.085975][ T7158] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  310.093906][ T7160] loop2: detected capacity change from 0 to 4096
[  310.103568][ T5636] usb 2-1: Using ep0 maxpacket: 32
[  310.123102][ T7158] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  310.141192][ T7158] ntfs3: loop4: Inode r=b is not in use!
[  310.149476][ T7158] ntfs3: loop4: Failed to load $Extend.
[  310.256704][ T5636] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  310.270564][ T7160] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  310.294590][ T7160] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  310.295163][ T5636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.314728][ T7160] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  310.331821][ T7160] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  310.351594][ T7160] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  310.358132][ T5636] usb 2-1: config 0 descriptor??
[  310.370293][ T7160] ntfs: volume version 3.1.
[  310.377013][ T7160] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  310.399445][ T7160] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  310.413666][ T7160] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  310.425167][ T7160] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  310.439334][ T7160] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  310.636450][    T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  310.893326][ T5636] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x4
[  310.936658][    T7] usb 4-1: Using ep0 maxpacket: 8
[  311.408966][ T5636] zeroplus 0003:0C12:0030.0001: unknown main item tag 0xd
[  311.446436][    T7] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  311.479884][    T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.491832][ T5636] zeroplus 0003:0C12:0030.0001: hidraw0: USB HID v0.81 Device [HID 0c12:0030] on usb-dummy_hcd.1-1/input0
[  311.566174][    T7] usb 4-1: config 0 has no interface number 0
[  311.572562][ T5636] zeroplus 0003:0C12:0030.0001: no inputs found
[  311.586472][ T5636] usb 2-1: USB disconnect, device number 8
[  311.736657][    T7] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  311.816483][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.824850][    T7] usb 4-1: Product: syz
[  311.859627][    T7] usb 4-1: Manufacturer: syz
[  311.864300][    T7] usb 4-1: SerialNumber: syz
[  311.880590][ T7183] fido_id[7183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  311.905218][    T7] usb 4-1: config 0 descriptor??
[  311.934102][ T7187] loop4: detected capacity change from 0 to 4096
[  312.000142][ T7187] ntfs: volume version 3.1.
[  312.185583][ T4230] usb 4-1: USB disconnect, device number 9
[  312.416807][ T7185] loop2: detected capacity change from 0 to 32768
[  313.344377][ T7203] loop3: detected capacity change from 0 to 16
[  313.421960][ T7203] erofs: (device loop3): mounted with root inode @ nid 36.
[  313.754209][ T7203] attempt to access beyond end of device
[  313.754209][ T7203] loop3: rw=524288, want=40, limit=16
[  313.844062][ T7203] attempt to access beyond end of device
[  313.844062][ T7203] loop3: rw=524288, want=104, limit=16
[  313.880605][ T7203] attempt to access beyond end of device
[  313.880605][ T7203] loop3: rw=0, want=24, limit=16
[  314.336400][ T4193] Bluetooth: hci2: hcon ffff888063170000 sent 0 < count 257
[  314.486481][ T4886] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  314.746366][ T4886] usb 4-1: Using ep0 maxpacket: 32
[  314.747502][ T7216] loop1: detected capacity change from 0 to 4096
[  314.805906][ T7216] ntfs: volume version 3.1.
[  314.880699][ T4886] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  314.895813][ T4886] usb 4-1: config 0 has no interface number 0
[  315.176457][ T4886] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  315.185536][ T4886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.884744][ T4886] usb 4-1: Product: syz
[  315.889080][ T4886] usb 4-1: Manufacturer: syz
[  315.893696][ T4886] usb 4-1: SerialNumber: syz
[  315.900506][ T4886] usb 4-1: config 0 descriptor??
[  315.951521][ T4886] smsc95xx v2.0.0
[  317.043231][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.076458][ T4886] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  317.086444][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.124099][ T7237] loop4: detected capacity change from 0 to 256
[  317.132630][ T4886] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  317.306597][ T4886] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  317.322131][ T4886] smsc95xx: probe of 4-1:0.67 failed with error -71
[  317.975117][ T4886] usb 4-1: USB disconnect, device number 10
[  318.126104][ T7251] loop2: detected capacity change from 0 to 128
[  318.297304][ T7251] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  318.321331][ T7251] hpfs: filesystem error: improperly stopped
[  318.351571][ T7251] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  318.396698][ T7251] hpfs: You really don't want any checks? You are crazy...
[  318.417060][ T7251] hpfs: hpfs_map_sector(): read error
[  318.436515][ T7251] hpfs: code page support is disabled
[  318.445524][ T7256] loop3: detected capacity change from 0 to 4096
[  318.471228][ T7251] hpfs: hpfs_map_4sectors(): unaligned read
[  318.490973][ T7251] hpfs: hpfs_map_4sectors(): unaligned read
[  318.503074][ T7251] hpfs: filesystem error: unable to find root dir
[  318.923564][ T7256] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  319.366244][ T7256] ntfs3: loop3: failed to convert "0080" to cp437
[  319.413598][ T7256] ntfs3: loop3: failed to convert name for inode 1e.
[  319.495610][ T7267] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  319.633274][ T7274] loop3: detected capacity change from 0 to 256
[  319.662936][ T7258] loop4: detected capacity change from 0 to 40427
[  319.809717][ T7258] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  319.827891][ T7258] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  319.873633][ T7258] F2FS-fs (loop4): invalid crc value
[  320.087898][ T7258] F2FS-fs (loop4): Found nat_bits in checkpoint
[  320.160260][ T7287] loop3: detected capacity change from 0 to 16
[  320.176096][ T4197] Bluetooth: hci3: hcon ffff88801a7c2000 sent 0 < count 257
[  320.188150][ T7287] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  320.687543][ T7258] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  320.694619][ T7258] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  321.177749][ T7294] loop3: detected capacity change from 0 to 512
[  321.496734][ T7294] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  321.508218][ T7294] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.822428][ T7279] loop2: detected capacity change from 0 to 40427
[  322.817353][ T7279] F2FS-fs (loop2): invalid crc value
[  322.835600][ T7279] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12)
[  323.053610][ T7312] loop4: detected capacity change from 0 to 512
[  323.115935][ T7319] loop1: detected capacity change from 0 to 512
[  323.196651][ T5717] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  323.278241][ T7312] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  323.323296][ T4197] Bluetooth: hci4: hcon ffff88807ab86000 sent 0 < count 257
[  323.327353][ T7323] loop2: detected capacity change from 0 to 16
[  323.377544][ T7323] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36
[  323.516562][ T5717] usb 4-1: Using ep0 maxpacket: 8
[  323.666938][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0
[  323.684743][ T5717] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  323.862914][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.250843][ T5717] usb 4-1: config 0 descriptor??
[  324.278894][ T7331] loop1: detected capacity change from 0 to 1024
[  324.382106][ T7331] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.802: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  324.429721][ T7331] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.802: couldn't read orphan inode 11 (err -117)
[  324.447747][ T7331] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: writeback.
[  324.630705][ T7335] loop4: detected capacity change from 0 to 8192
[  324.663693][ T7335] FAT-fs (loop4): Unrecognized mount option "0x0000000000000000" or missing value
[  325.019483][ T7345] loop1: detected capacity change from 0 to 512
[  325.276814][ T5717] usb 4-1: string descriptor 0 read error: -71
[  325.306823][ T5717] uclogic 0003:5543:3031.0002: failed retrieving string descriptor #200: -71
[  325.549640][ T5717] uclogic 0003:5543:3031.0002: failed retrieving pen parameters: -71
[  325.582754][ T5717] uclogic 0003:5543:3031.0002: failed probing pen v2 parameters: -71
[  325.595229][ T5717] uclogic 0003:5543:3031.0002: failed probing parameters: -71
[  325.630097][ T7345] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  325.642019][ T7345] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.680661][ T5717] uclogic: probe of 0003:5543:3031.0002 failed with error -71
[  325.738862][ T5717] usb 4-1: USB disconnect, device number 11
[  327.073947][ T7364] loop1: detected capacity change from 0 to 512
[  327.175276][ T7364] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  327.227282][ T7364] EXT4-fs (loop1): 1 truncate cleaned up
[  327.242145][ T7364] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback.
[  327.652088][ T7379] loop3: detected capacity change from 0 to 16
[  327.658946][ T4197] Bluetooth: hci3: hcon ffff88801a7c2000 sent 0 < count 257
[  328.042620][ T7379] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  328.064025][ T7376] loop4: detected capacity change from 0 to 512
[  328.261712][ T7376] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  328.883511][ T7391] loop1: detected capacity change from 0 to 512
[  329.250432][ T7391] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  329.291335][ T7391] EXT4-fs (loop1): Remounting filesystem read-only
[  329.322857][ T7391] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.817: corrupted inode contents
[  329.412034][ T7397] loop4: detected capacity change from 0 to 64
[  329.441500][ T7391] EXT4-fs (loop1): Remounting filesystem read-only
[  329.461772][ T7391] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.817: mark_inode_dirty error
[  329.501487][ T7391] EXT4-fs (loop1): Remounting filesystem read-only
[  329.532918][   T25] kauditd_printk_skb: 28 callbacks suppressed
[  329.532932][   T25] audit: type=1800 audit(1784866385.188:21): pid=7397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.818" name="file1" dev="loop4" ino=5 res=0 errno=0
[  329.567371][ T7391] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.817: corrupted inode contents
[  329.616742][ T7391] EXT4-fs (loop1): Remounting filesystem read-only
[  329.653770][ T7391] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.817: mark_inode_dirty error
[  329.740061][ T7391] EXT4-fs (loop1): Remounting filesystem read-only
[  329.813522][ T7391] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.817: corrupted inode contents
[  330.016063][ T7391] EXT4-fs (loop1): Remounting filesystem read-only
[  330.235646][ T7391] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.817: mark_inode_dirty error
[  330.464917][ T7391] EXT4-fs (loop1): Remounting filesystem read-only
[  330.496415][ T7391] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.817: corrupted inode contents
[  330.523410][ T7391] EXT4-fs (loop1): Remounting filesystem read-only
[  330.549639][ T7391] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  330.581474][ T7391] EXT4-fs (loop1): Remounting filesystem read-only
[  330.592230][ T7391] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.817: corrupted inode contents
[  330.624682][ T7391] EXT4-fs (loop1): Remounting filesystem read-only
[  330.641711][ T7391] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.817: mark_inode_dirty error
[  330.673260][ T7391] EXT4-fs (loop1): Remounting filesystem read-only
[  330.709483][ T7391] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  330.746881][ T7395] loop3: detected capacity change from 0 to 40427
[  330.753911][ T7391] EXT4-fs (loop1): Remounting filesystem read-only
[  330.761970][ T7391] EXT4-fs (loop1): 1 truncate cleaned up
[  330.767694][ T7391] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,. Quota mode: writeback.
[  330.833875][ T7391] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.898106][ T7395] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  330.998228][ T7395] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  331.076607][ T5635] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  331.225574][ T7395] F2FS-fs (loop3): invalid crc value
[  331.356527][ T5635] usb 3-1: Using ep0 maxpacket: 16
[  331.415997][ T7395] F2FS-fs (loop3): Found nat_bits in checkpoint
[  331.456213][ T5717] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  331.476486][ T5635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.504794][ T7395] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  331.508395][ T5635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.522194][ T7395] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  331.523880][ T5635] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  331.587872][ T5635] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  331.603868][ T5635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.726555][ T5717] usb 5-1: Using ep0 maxpacket: 8
[  332.056682][ T5717] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  332.073945][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.095531][ T5717] usb 5-1: Product: syz
[  332.110879][ T5717] usb 5-1: Manufacturer: syz
[  332.116075][ T5717] usb 5-1: SerialNumber: syz
[  332.419844][ T5635] usb 3-1: config 0 descriptor??
[  332.425912][ T5717] usb 5-1: config 0 descriptor??
[  332.488273][ T5717] gspca_main: se401-2.14.0 probing 047d:5003
[  332.912371][ T7434] loop3: detected capacity change from 0 to 16
[  332.936487][ T4197] Bluetooth: hci3: hcon ffff88801a7c2000 sent 0 < count 257
[  332.946518][ T5635] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  332.954273][ T5635] microsoft 0003:045E:07DA.0003: report is too long
[  333.058082][ T5635] microsoft 0003:045E:07DA.0003: item 0 4 0 8 parsing failed
[  333.089342][ T7434] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  333.209588][ T5717] gspca_se401: Bayer format not supported!
[  333.230580][ T5635] microsoft 0003:045E:07DA.0003: parse failed
[  333.233551][ T5717] usb 5-1: USB disconnect, device number 9
[  333.246109][ T5635] microsoft: probe of 0003:045E:07DA.0003 failed with error -22
[  333.272684][ T5635] usb 3-1: USB disconnect, device number 8
[  333.561014][ T7440] loop3: detected capacity change from 0 to 2048
[  333.625014][ T7440] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  333.643410][ T7440] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.796084][ T7440] Quota error (device loop3): find_tree_dqentry: Getting block too big (524293 >= 6)
[  333.816383][ T7440] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  333.825801][ T7440] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.832: Failed to acquire dquot type 0
[  333.913465][ T7440] EXT4-fs (loop3): Remounting filesystem read-only
[  334.210852][ T7454] loop4: detected capacity change from 0 to 512
[  334.684608][ T7454] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  334.696221][ T7454] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.980696][ T7475] loop4: detected capacity change from 0 to 512
[  336.244133][ T7475] EXT4-fs (loop4): Ignoring removed nobh option
[  336.256375][ T4193] Bluetooth: hci2: hcon ffff888063170000 sent 0 < count 257
[  336.282076][ T7475] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  336.426637][ T4197] Bluetooth: hci3: hcon ffff88801a7c2000 sent 0 < count 257
[  336.436688][ T7483] loop3: detected capacity change from 0 to 16
[  336.504480][ T7475] EXT4-fs (loop4): 1 truncate cleaned up
[  336.589331][ T7475] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  336.655840][ T7483] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  336.977870][   T25] audit: type=1800 audit(1784866392.638:22): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.841" name="file2" dev="loop4" ino=16 res=0 errno=0
[  337.140002][ T7463] loop2: detected capacity change from 0 to 40427
[  337.166227][ T7463] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  337.261308][ T7493] loop4: detected capacity change from 0 to 4096
[  337.343813][ T7463] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  337.345100][ T7493] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  337.374996][ T7463] F2FS-fs (loop2): invalid crc value
[  337.393017][ T7493] EXT4-fs (loop4): inline encryption not supported
[  337.401811][ T7463] F2FS-fs (loop2): Found nat_bits in checkpoint
[  337.413088][ T7497] loop3: detected capacity change from 0 to 2048
[  337.604028][ T7493] EXT4-fs (loop4): Test dummy encryption mode enabled
[  337.638130][ T7497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  337.707331][ T7493] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  337.780696][ T7493] System zones: 0-5
[  337.814992][ T7493] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback.
[  337.841777][ T7463] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  337.870598][ T7463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  338.027995][ T7493] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback.
[  338.124400][ T7513] netlink: 'syz.1.850': attribute type 1 has an invalid length.
[  338.150350][ T7515] usb usb8: usbfs: process 7515 (syz.0.854) did not claim interface 4 before use
[  338.322583][ T7521] loop4: detected capacity change from 0 to 256
[  338.516382][ T5636] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  338.618834][ T4230] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  338.683550][ T7534] loop3: detected capacity change from 0 to 2048
[  339.856442][ T7534] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  339.866982][ T5636] usb 2-1: Using ep0 maxpacket: 16
[  340.986437][ T5636] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  341.006603][ T5636] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  341.045231][ T5636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.062816][ T5636] usb 2-1: config 0 descriptor??
[  341.070938][ T7549] loop2: detected capacity change from 0 to 8
[  341.137371][ T4230] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  341.159741][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.184928][ T4230] usb 1-1: config 0 descriptor??
[  341.227816][ T4230] cp210x 1-1:0.0: cp210x converter detected
[  341.326519][    T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  341.346604][ T5636] usbhid 2-1:0.0: can't add hid device: -71
[  341.352605][ T5636] usbhid: probe of 2-1:0.0 failed with error -71
[  341.354133][ T7545] loop3: detected capacity change from 0 to 32768
[  341.376441][ T4230] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71
[  341.385886][ T4230] cp210x 1-1:0.0: querying part number failed
[  341.426689][ T5636] usb 2-1: USB disconnect, device number 9
[  341.438977][ T4230] usb 1-1: cp210x converter now attached to ttyUSB0
[  341.478150][ T4230] usb 1-1: USB disconnect, device number 9
[  341.484141][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'.
[  341.501965][ T4230] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  341.533029][ T4230] cp210x 1-1:0.0: device disconnected
[  341.539471][ T7545] XFS (loop3): Mounting V5 Filesystem
[  341.670289][ T7545] XFS (loop3): Ending clean mount
[  341.705973][    T7] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  341.742036][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.826453][ T4199] XFS (loop3): Unmounting Filesystem
[  341.900851][    T7] usb 5-1: config 0 descriptor??
[  342.044116][ T7578] loop2: detected capacity change from 0 to 512
[  342.206639][    T7] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00
[  342.255894][    T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  342.358838][ T7578] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  342.370356][ T7578] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.506610][    T7] [drm:udl_init] *ERROR* Selecting channel failed
[  342.691812][    T7] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  342.709696][    T7] [drm] Initialized udl on minor 2
[  342.767820][    T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  342.781178][    T7] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  342.796082][    T7] usb 5-1: USB disconnect, device number 10
[  342.818164][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  342.860522][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  342.872378][ T4230] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  343.146473][ T4230] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  343.500127][ T7600] loop4: detected capacity change from 0 to 512
[  343.516692][ T4230] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[  343.537982][ T4230] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  343.601271][ T4230] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  343.640405][ T7600] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  343.656517][    T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  343.667912][ T4230] usb 3-1: config 0 interface 0 has no altsetting 0
[  343.674551][ T4230] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  343.683979][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.703741][ T4230] usb 3-1: config 0 descriptor??
[  343.726631][ T7586] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  343.886361][ T4245] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  344.028474][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.056334][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.076358][    T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  344.110584][    T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  344.139387][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.166450][ T4245] usb 2-1: Using ep0 maxpacket: 8
[  344.170242][    T7] usb 4-1: config 0 descriptor??
[  344.190858][ T4230] lenovo 0003:17EF:6062.0004: unknown main item tag 0x2
[  344.200173][ T4230] lenovo 0003:17EF:6062.0004: unknown main item tag 0x3
[  344.218295][ T4230] lenovo 0003:17EF:6062.0004: unknown main item tag 0x1
[  344.235464][ T4230] lenovo 0003:17EF:6062.0004: unknown main item tag 0x2
[  344.261114][ T4230] lenovo 0003:17EF:6062.0004: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0
[  344.326627][ T4245] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.348112][ T4245] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  344.376427][ T4245] usb 2-1: config 0 interface 0 has no altsetting 0
[  344.392271][ T4230] usb 3-1: USB disconnect, device number 9
[  344.393866][ T4245] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  344.421221][ T4245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.451659][ T4245] usb 2-1: config 0 descriptor??
[  344.692377][    T7] plantronics 0003:047F:FFFF.0005: unbalanced collection at end of report description
[  344.718520][    T7] plantronics 0003:047F:FFFF.0005: parse failed
[  344.725321][    T7] plantronics: probe of 0003:047F:FFFF.0005 failed with error -22
[  345.509079][ T4245] elo 0003:04E7:0030.0006: unexpected long global item
[  346.911305][ T4245] elo 0003:04E7:0030.0006: parse failed
[  347.068825][ T4230] usb 4-1: USB disconnect, device number 12
[  347.269453][ T4245] elo: probe of 0003:04E7:0030.0006 failed with error -22
[  347.300110][ T4245] usb 2-1: USB disconnect, device number 10
[  347.399248][ T7625] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  348.336804][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'.
[  348.375249][ T7627] loop4: detected capacity change from 0 to 32768
[  348.654049][ T4197] Bluetooth: hci2: hcon ffff888063170000 sent 0 < count 257
[  348.730983][ T7627] XFS (loop4): Mounting V5 Filesystem
[  348.858848][ T7627] XFS (loop4): Ending clean mount
[  348.925382][ T4186] XFS (loop4): Unmounting Filesystem
[  348.944198][ T7658] loop1: detected capacity change from 0 to 512
[  349.026195][ T7658] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  349.038663][ T4245] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  349.446778][ T4245] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  349.466072][ T4245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.497274][ T4245] usb 4-1: config 0 descriptor??
[  349.566183][ T4245] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  349.623908][ T7668] loop4: detected capacity change from 0 to 512
[  349.724388][ T7668] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  349.755068][ T7668] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.816483][ T5726] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  350.006640][ T4245] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  350.068126][ T4245] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  350.106468][ T5726] usb 1-1: Using ep0 maxpacket: 16
[  350.246737][ T5726] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 65, using maximum allowed: 30
[  350.261890][ T4245] usb 4-1: USB disconnect, device number 13
[  350.317648][ T5726] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  350.548587][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0
[  350.603024][ T5726] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  350.655255][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.801963][ T5726] usb 1-1: config 0 descriptor??
[  351.359069][ T7689] loop4: detected capacity change from 0 to 512
[  351.693706][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x1
[  351.720675][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.788703][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.812787][ T7689] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  351.824095][ T7689] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.866429][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.873443][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.899869][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.915544][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.923804][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.941727][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.960487][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.021703][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.090683][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.104885][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.124135][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.142470][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.161977][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.182548][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.212170][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.226838][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.244968][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.261037][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.281643][ T5726] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  352.547832][ T5726] wacom 0003:056A:0331.0007: hidraw0: USB HID v0.81 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0
[  352.625434][ T7685] loop2: detected capacity change from 0 to 40427
[  352.692999][ T7685] F2FS-fs (loop2): invalid crc value
[  352.711033][ T7685] F2FS-fs (loop2): Found nat_bits in checkpoint
[  352.746679][ T5726] usb 1-1: USB disconnect, device number 10
[  352.886451][ T7685] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  352.890834][ T7713] fido_id[7713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  352.943392][ T7685] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  353.071767][ T7685] F2FS-fs (loop2): Start checkpoint disabled!
[  353.196526][ T5726] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  353.343547][ T7685] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  354.108412][ T7723] loop3: detected capacity change from 0 to 16
[  355.293593][ T4197] Bluetooth: hci3: hcon ffff88801a7c2000 sent 0 < count 257
[  355.301241][ T5726] usb 1-1: Using ep0 maxpacket: 32
[  355.355706][ T7723] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  355.477796][ T5726] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[  355.553840][ T5726] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 2
[  357.546352][ T4232] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  357.796768][ T7735] loop1: detected capacity change from 0 to 16
[  357.805648][ T4197] Bluetooth: hci0: hcon ffff88814cc7a000 sent 0 < count 257
[  357.851696][ T7735] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36
[  358.256502][ T5726] usb 1-1: New USB device found, idVendor=1bbb, idProduct=0003, bcdDevice=68.04
[  358.265584][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.268516][ T4232] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30
[  358.398170][ T7752] loop1: detected capacity change from 0 to 512
[  358.441974][ T4232] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  358.551913][ T4232] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  358.706601][ T4232] usb 4-1: config 0 interface 0 has no altsetting 0
[  358.773586][ T4232] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  358.867871][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.925184][ T5726] usb 1-1: can't set config #246, error -71
[  358.934999][ T5726] usb 1-1: USB disconnect, device number 11
[  358.964421][ T4232] usb 4-1: config 0 descriptor??
[  358.974818][ T7752] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  358.986007][ T7752] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  359.036510][ T4232] usb 4-1: can't set config #0, error -71
[  359.055183][ T4232] usb 4-1: USB disconnect, device number 14
[  359.088042][ T4886] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  359.366109][ T4197] Bluetooth: hci2: hcon ffff888063170000 sent 0 < count 257
[  359.416568][ T4886] usb 5-1: Using ep0 maxpacket: 8
[  359.556971][ T4886] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  359.668151][ T4886] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  359.785603][ T4886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.886206][ T4886] usb 5-1: config 0 descriptor??
[  359.946369][ T4230] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  360.136781][   T26] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  360.207807][ T4197] Bluetooth: hci2: hcon ffff888063170000 sent 0 < count 257
[  360.375102][ T4886] wacom 0003:056A:00B3.0008: unknown main item tag 0x2
[  360.816391][ T4230] usb 3-1: Using ep0 maxpacket: 8
[  360.818364][ T4886] wacom 0003:056A:00B3.0008: unknown main item tag 0x4
[  361.033986][ T4886] wacom 0003:056A:00B3.0008: unknown main item tag 0xd
[  361.049600][ T4886] wacom 0003:056A:00B3.0008: unknown main item tag 0x1
[  361.057847][ T4886] wacom 0003:056A:00B3.0008: unknown main item tag 0x3
[  361.065281][ T4886] wacom 0003:056A:00B3.0008: unknown main item tag 0x1
[  361.074623][ T4886] wacom 0003:056A:00B3.0008: Unknown device_type for 'HID 056a:00b3'. Assuming pen.
[  361.086516][ T4886] wacom 0003:056A:00B3.0008: hidraw0: USB HID v80.09 Device [HID 056a:00b3] on usb-dummy_hcd.4-1/input0
[  361.099841][ T4886] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B3.0008/input/input10
[  361.162054][ T4230] usb 3-1: config 0 interface 0 has no altsetting 0
[  361.168757][ T4230] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  361.179556][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.203155][ T4230] usb 3-1: config 0 descriptor??
[  361.219530][ T4886] usb 5-1: USB disconnect, device number 11
[  361.316832][   T26] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  361.494437][ T4230] usb 3-1: can't set config #0, error -71
[  361.501238][ T4230] usb 3-1: USB disconnect, device number 10
[  361.528746][   T26] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  361.581049][   T26] usb 2-1: config 0 interface 0 has no altsetting 0
[  361.606559][   T26] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  361.640242][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.006955][   T26] usb 2-1: config 0 descriptor??
[  362.117052][ T7776] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  362.490402][ T7796] fido_id[7796]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  362.499298][ T7808] loop4: detected capacity change from 0 to 1024
[  362.651866][ T7808] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  363.058711][ T7818] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  363.113700][   T26] usbhid 2-1:0.0: can't add hid device: -71
[  363.127473][   T26] usbhid: probe of 2-1:0.0 failed with error -71
[  363.165592][   T26] usb 2-1: USB disconnect, device number 11
[  363.176579][ T7818] CIFS: Unable to determine destination address
[  363.352180][ T4197] Bluetooth: hci2: hcon ffff888063170000 sent 0 < count 257
[  364.576587][ T4230] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  364.639849][ T7840] netlink: 'syz.2.950': attribute type 29 has an invalid length.
[  364.648237][ T7840] netlink: 'syz.2.950': attribute type 29 has an invalid length.
[  364.672668][ T7840] netlink: 'syz.2.950': attribute type 29 has an invalid length.
[  364.743099][ T7844] loop2: detected capacity change from 0 to 1024
[  364.821217][ T7844] EXT4-fs (loop2): Ignoring removed bh option
[  364.890782][ T7844] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce028, mo2=0000]
[  364.900470][ T7844] System zones: 0-1, 3-12
[  364.929190][ T7844] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 1: comm syz.2.952: lblock 1 mapped to illegal pblock 1 (length 1)
[  364.943988][ T7844] EXT4-fs (loop2): Remounting filesystem read-only
[  364.950812][ T7844] Quota error (device loop2): write_blk: dquota write failed
[  364.958598][ T7844] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  364.978889][ T7844] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.952: Failed to acquire dquot type 0
[  365.030901][ T7853] loop3: detected capacity change from 0 to 512
[  365.110571][ T7844] EXT4-fs (loop2): Remounting filesystem read-only
[  365.249236][ T7853] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  365.260490][ T7853] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.330614][ T7844] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.952: Freeing blocks not in datazone - block = 0, count = 4096
[  365.480496][ T7844] EXT4-fs (loop2): Remounting filesystem read-only
[  365.489146][ T7844] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.952: Invalid inode bitmap blk 0 in block_group 0
[  365.512196][ T4373] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  365.526600][ T4230] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  365.546666][ T7844] EXT4-fs (loop2): Remounting filesystem read-only
[  365.550400][ T4230] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  365.554367][ T7844] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  365.571587][ T7844] EXT4-fs (loop2): Remounting filesystem read-only
[  365.589872][ T4373] EXT4-fs (loop2): Remounting filesystem read-only
[  365.603434][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.610209][ T7844] EXT4-fs (loop2): 1 orphan inode deleted
[  365.619152][ T4373] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  365.651487][ T7844] EXT4-fs (loop2): mounted filesystem without journal. Opts: ��; usrquota,auto_da_alloc,bh,max_batch_time=0x00000000000008c9,debug,errors=remount-ro,. Quota mode: writeback.
[  365.694093][ T4373] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:9: Failed to release dquot type 0
[  365.742725][ T4230] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1
[  365.867389][ T4373] EXT4-fs (loop2): Remounting filesystem read-only
[  366.352933][ T4230] usb 5-1: USB disconnect, device number 12
[  366.547669][ T7844] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.952: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  366.568391][ T7844] EXT4-fs (loop2): Remounting filesystem read-only
[  366.645672][ T7868] loop3: detected capacity change from 0 to 256
[  366.769158][ T7868] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  366.856857][ T4197] Bluetooth: hci2: hcon ffff888063170000 sent 0 < count 257
[  367.914049][ T7884] loop1: detected capacity change from 0 to 128
[  368.029828][ T7884] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  368.260894][ T7884] hpfs: filesystem error: improperly stopped
[  368.374469][ T7884] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  368.505850][ T7884] hpfs: You really don't want any checks? You are crazy...
[  368.640441][ T7884] hpfs: Code page index out of array
[  368.739536][ T7884] hpfs: code page support is disabled
[  368.790043][ T7884] hpfs: hpfs_map_4sectors(): unaligned read
[  368.796063][ T7884] hpfs: hpfs_map_4sectors(): unaligned read
[  368.836416][ T7884] hpfs: filesystem error: unable to find root dir
[  369.456913][ T7903] loop1: detected capacity change from 0 to 512
[  369.827600][ T7903] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  369.838832][ T7903] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  370.090925][ T7909] loop2: detected capacity change from 0 to 128
[  371.040112][ T7918] loop2: detected capacity change from 0 to 128
[  371.148606][ T7918] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  371.257887][ T7918] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  371.361191][ T7930] loop1: detected capacity change from 0 to 64
[  372.206557][ T7937] loop3: detected capacity change from 0 to 4096
[  373.229975][ T7937] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  373.758738][ T4197] Bluetooth: hci1: hcon ffff88801a1ea000 sent 0 < count 257
[  373.774554][ T7957] loop4: detected capacity change from 0 to 16
[  374.214832][ T7957] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36
[  374.438678][ T7963] loop2: detected capacity change from 0 to 64
[  374.514881][ T7963] attempt to access beyond end of device
[  374.514881][ T7963] loop2: rw=0, want=1026, limit=64
[  374.542114][ T7963] Buffer I/O error on dev loop2, logical block 512, async page read
[  374.564561][ T7963] attempt to access beyond end of device
[  374.564561][ T7963] loop2: rw=0, want=113154, limit=64
[  374.589044][ T7963] Buffer I/O error on dev loop2, logical block 56576, async page read
[  374.686369][ T4230] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  374.799961][ T7959] loop3: detected capacity change from 0 to 32768
[  375.070639][ T4230] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  375.087314][ T4230] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  375.111953][ T4230] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.135899][ T4230] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  375.163508][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0
[  375.177959][ T4230] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  375.195884][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.216990][ T4230] usb 1-1: config 0 descriptor??
[  375.370667][ T4232] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  375.480018][ T7975] loop4: detected capacity change from 0 to 512
[  375.614438][ T7975] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  375.625921][ T7975] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.710169][ T4230] hid-alps 0003:044E:120C.0009: unknown main item tag 0x0
[  375.756722][ T4232] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  375.782556][ T4232] usb 4-1: config 0 has no interface number 0
[  375.833864][ T4230] hid-alps 0003:044E:120C.0009: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.0-1/input0
[  375.861253][ T4232] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  376.029427][ T4230] usb 1-1: USB disconnect, device number 12
[  376.097254][ T4232] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  376.169459][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  376.314407][ T4232] usb 4-1: Manufacturer: syz
[  376.374848][ T4232] usb 4-1: SerialNumber: syz
[  376.389793][ T4232] usb 4-1: config 0 descriptor??
[  376.402795][ T7987] fido_id[7987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  376.565721][ T7998] loop2: detected capacity change from 0 to 164
[  376.913109][ T8008] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1006'.
[  376.944357][ T4886] Bluetooth: hci4: command 0x0405 tx timeout
[  376.993137][ T4197] Bluetooth: hci2: hcon ffff888063170000 sent 0 < count 257
[  377.804497][ T8018] loop1: detected capacity change from 0 to 512
[  377.866996][ T4232] usbtouchscreen: probe of 4-1:0.214 failed with error -71
[  377.895912][ T8018] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nombcache,quota,,errors=continue. Quota mode: writeback.
[  377.896010][ T8018] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  377.897879][ T4232] usb 4-1: USB disconnect, device number 15
[  378.026941][   T26] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  378.462006][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.462048][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  378.540596][ T8030] loop1: detected capacity change from 0 to 16
[  378.585470][ T8028] loop3: detected capacity change from 0 to 512
[  378.597136][ T4197] Bluetooth: hci0: hcon ffff88814cc7a000 sent 0 < count 257
[  378.598772][ T5236] Bluetooth: hci2: command 0x0811 tx timeout
[  378.737855][   T26] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  378.738129][   T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.738285][   T26] usb 5-1: Product: syz
[  378.738999][   T26] usb 5-1: Manufacturer: syz
[  378.739131][   T26] usb 5-1: SerialNumber: syz
[  378.747331][ T8030] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36
[  378.811611][   T26] usb 5-1: config 0 descriptor??
[  378.875662][   T26] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  379.011439][   T26] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  379.026293][ T8028] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  379.026718][ T8028] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.041412][   T26] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  379.042870][   T26] usb 5-1: media controller created
[  379.105679][   T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  379.407000][   T26] DVB: Unable to find symbol mt352_attach()
[  379.477649][ T8044] loop1: detected capacity change from 0 to 512
[  379.652831][ T8044] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  380.486218][   T26] DVB: Unable to find symbol nxt6000_attach()
[  380.500016][   T26] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  380.586652][ T8056] loop1: detected capacity change from 0 to 512
[  380.608113][   T26] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15
[  380.614027][ T8056] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  380.651822][   T26] dvb-usb: schedule remote query interval to 1000 msecs.
[  380.690446][   T26] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  380.711160][   T26] dvb-usb: bulk message failed: -22 (7/0)
[  380.725391][   T26] dvb-usb: bulk message failed: -22 (7/0)
[  380.771040][   T26] usb 5-1: USB disconnect, device number 13
[  380.809082][ T8056] EXT4-fs (loop1): 1 truncate cleaned up
[  380.815305][ T8056] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,barrier,,errors=continue. Quota mode: none.
[  380.835405][   T26] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  381.246532][   T26] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  381.640759][   T26] usb 5-1: Using ep0 maxpacket: 8
[  381.647544][ T5628] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  381.762583][ T8077] loop3: detected capacity change from 0 to 16
[  381.776563][ T4197] Bluetooth: hci3: hcon ffff88801a7c2000 sent 0 < count 257
[  382.006785][ T5628] usb 3-1: config 32 has an invalid interface number: 3 but max is 0
[  382.031858][ T5628] usb 3-1: config 32 has no interface number 0
[  382.091486][ T5628] usb 3-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00
[  382.172673][ T5628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.476481][   T26] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  382.479835][ T8077] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  382.486423][   T26] usb 5-1: config 179 has no interface number 0
[  382.500262][   T26] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  382.511853][   T26] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  382.515757][ T5628] usb-storage 3-1:32.3: USB Mass Storage device detected
[  382.523419][   T26] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  382.543689][   T26] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  382.567164][ T5628] usb-storage 3-1:32.3: Quirks match for vid 057b pid 0000: 1
[  382.581666][   T26] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  382.595359][   T26] usb 5-1: config 179 interface 65 has no altsetting 0
[  382.602419][   T26] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  382.612544][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.619464][ T4193] Bluetooth: hci0: hcon ffff88814cc7a000 sent 0 < count 257
[  382.630004][ T8086] loop1: detected capacity change from 0 to 16
[  382.690891][ T8086] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36
[  382.716846][ T5628] usb 3-1: USB disconnect, device number 11
[  382.746002][   T26] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input16
[  384.123499][   T26] usb 5-1: USB disconnect, device number 14
[  384.136332][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  384.342816][   T26] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  384.506370][ T5628] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  384.950858][ T5628] usb 3-1: Using ep0 maxpacket: 8
[  385.066499][ T5628] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  385.089027][ T8111] loop4: detected capacity change from 0 to 512
[  385.094978][ T5628] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  385.119867][ T5628] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  385.136202][ T5628] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  385.307457][ T5628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  385.322719][ T8116] loop3: detected capacity change from 0 to 512
[  385.335146][ T5628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.344028][ T5628] usb 3-1: Product: syz
[  385.359734][ T5628] usb 3-1: Manufacturer: syz
[  385.364795][ T5628] usb 3-1: SerialNumber: syz
[  385.427796][ T5628] cdc_ether: probe of 3-1:1.0 failed with error -22
[  385.437897][ T8116] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  385.450316][ T8116] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  385.591053][ T8111] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  385.706827][   T26] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  385.746104][ T5628] usb 3-1: USB disconnect, device number 12
[  385.966418][   T26] usb 1-1: Using ep0 maxpacket: 32
[  386.091229][ T8134] loop3: detected capacity change from 0 to 512
[  386.107782][   T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.133556][   T26] usb 1-1: config 0 has no interfaces?
[  386.143269][   T26] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  386.159995][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.190436][ T8134] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1043: bg 0: block 473: padding at end of block bitmap is not set
[  386.237206][   T26] usb 1-1: config 0 descriptor??
[  386.292000][ T8134] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  386.301670][ T8134] EXT4-fs (loop3): 1 orphan inode deleted
[  386.307773][ T8134] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  386.321448][ T8134] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  386.474073][ T8146] device ip6_vti0 entered promiscuous mode
[  387.256776][ T8148] loop3: detected capacity change from 0 to 24
[  387.259880][   T26] usb 1-1: USB disconnect, device number 13
[  387.315508][ T8148] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  387.358933][ T8148] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  387.717472][ T8164] loop2: detected capacity change from 0 to 16
[  388.576340][   T26] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  388.606647][ T5726] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  388.877217][ T5726] usb 1-1: Using ep0 maxpacket: 8
[  388.925702][ T8164] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36
[  388.976835][   T26] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb
[  389.130436][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.141842][   T26] usb 5-1: config 0 descriptor??
[  389.166688][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.198844][   T26] gspca_main: spca505-2.14.0 probing 0733:0430
[  389.205156][ T5726] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  389.239581][ T5726] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  389.264216][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.290071][ T5726] usb 1-1: config 0 descriptor??
[  389.328934][ T8178] loop3: detected capacity change from 0 to 512
[  389.424525][ T8178] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  389.626385][   T26] gspca_spca505: reg write: error -71
[  389.632057][   T26] spca505: probe of 5-1:0.0 failed with error -5
[  389.654823][   T26] usb 5-1: USB disconnect, device number 15
[  389.826844][ T5726] hid (null): unknown global tag 0xa3
[  389.834973][ T5726] uclogic 0003:28BD:0055.000A: unknown main item tag 0x3
[  390.280784][ T8195] loop4: detected capacity change from 0 to 512
[  390.380360][ T8195] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback.
[  390.489270][ T5726] uclogic 0003:28BD:0055.000A: unexpected long global item
[  390.497268][ T5726] uclogic 0003:28BD:0055.000A: parse failed
[  390.503641][ T5726] uclogic: probe of 0003:28BD:0055.000A failed with error -22
[  390.514256][ T5726] usb 1-1: USB disconnect, device number 14
[  390.623721][ T8195] EXT4-fs error (device loop4): ext4_get_first_dir_block:3597: inode #12: comm syz.4.1061: Directory block failed checksum
[  391.051240][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'.
[  391.737518][ T8227] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1069'.
[  391.949033][ T8238] loop4: detected capacity change from 0 to 64
[  392.326879][ T8250] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  392.334340][ T8250] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  392.402380][ T8250] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  392.461739][ T8250] comedi comedi3: 8255: I/O port conflict (0xf0000,4)
[  392.496459][ T8250] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  392.504157][ T8250] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  392.511876][ T8250] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[  392.519762][ T8250] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4)
[  392.527042][ T8250] comedi comedi3: 8255: I/O port conflict (0xa,4)
[  392.533720][ T8250] comedi comedi3: 8255: I/O port conflict (0x3bf,4)
[  392.553354][ T8250] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  392.566938][ T8250] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[  392.584513][ T8250] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4)
[  392.602802][ T8250] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  392.630323][ T8250] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  392.644043][ T8250] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  392.652078][ T8250] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  392.663152][ T8250] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  392.671128][ T8250] comedi comedi3: 8255: I/O port conflict (0x402,4)
[  392.918607][ T8263] loop4: detected capacity change from 0 to 16
[  393.604035][ T8272] loop2: detected capacity change from 0 to 512
[  393.672110][ T8263] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36
[  393.853062][ T8272] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  394.016432][ T5628] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  394.317452][ T5628] usb 4-1: Using ep0 maxpacket: 32
[  394.437228][ T5628] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  394.664970][ T5628] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00
[  394.785481][ T5628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.944742][ T5628] usb 4-1: config 0 descriptor??
[  395.584525][ T8317] loop1: detected capacity change from 0 to 16
[  395.705661][ T8317] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36
[  396.143572][ T5628] logitech-djreceiver 0003:046D:C517.000B: unknown main item tag 0x4
[  396.151766][ T5628] logitech-djreceiver 0003:046D:C517.000B: unknown main item tag 0xd
[  396.227403][ T5635] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  396.239322][ T8306] loop4: detected capacity change from 0 to 40427
[  396.247674][ T5628] logitech-djreceiver 0003:046D:C517.000B: hidraw0: USB HID v0.81 Device [HID 046d:c517] on usb-dummy_hcd.3-1/input0
[  396.339253][ T5628] usb 4-1: USB disconnect, device number 16
[  396.357312][ T8306] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  396.363680][ T8306] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  396.412739][ T8306] F2FS-fs (loop4): invalid crc value
[  396.465611][ T8306] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  396.501050][ T8324] fido_id[8324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  396.597244][ T5635] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  396.631892][ T5635] usb 3-1: config 0 interface 0 has no altsetting 0
[  396.649064][ T5635] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  396.662452][ T8306] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  396.679477][ T5635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.682343][ T8306] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  396.736242][ T5635] usb 3-1: config 0 descriptor??
[  396.740615][ T8335] loop3: detected capacity change from 0 to 64
[  396.852881][   T25] audit: type=1800 audit(1784866452.508:23): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1097" name="file1" dev="loop4" ino=10 res=0 errno=0
[  396.941808][ T4186] attempt to access beyond end of device
[  396.941808][ T4186] loop4: rw=2049, want=45104, limit=40427
[  397.251783][ T5726] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  397.275403][ T8319] loop1: detected capacity change from 0 to 65536
[  397.355407][ T5635] wacom 0003:056A:003F.000C: unknown main item tag 0x7
[  397.375993][ T5635] wacom 0003:056A:003F.000C: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.2-1/input0
[  397.401261][ T8319] XFS: attr2 mount option is deprecated.
[  397.407639][ T8319] XFS: attr2 mount option is deprecated.
[  397.550601][ T5635] usb 3-1: USB disconnect, device number 13
[  397.564135][ T8319] XFS (loop1): Mounting V5 Filesystem
[  397.679494][ T8319] XFS (loop1): Ending clean mount
[  397.724538][ T8319] XFS (loop1): Quotacheck needed: Please wait.
[  397.827688][ T8319] XFS (loop1): Quotacheck: Done.
[  397.895263][ T4187] XFS (loop1): Unmounting Filesystem
[  398.076665][ T5726] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 221, using maximum allowed: 30
[  398.097804][ T5726] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 221
[  398.133939][ T5726] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  398.171362][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'.
[  398.179785][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.271663][ T5726] usb 4-1: config 0 descriptor??
[  398.342722][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'.
[  398.661661][ T8385] loop1: detected capacity change from 0 to 512
[  398.747931][ T5726] hid (null): unknown global tag 0xc
[  398.759775][ T5726] hid (null): unknown global tag 0xd
[  398.774186][ T5726] hid (null): usage index exceeded
[  398.789963][ T8385] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  398.801471][ T8385] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  398.816549][ T4230] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  398.834595][ T5726] elecom 0003:056E:00E6.000D: ignoring exceeding usage max
[  398.847412][ T5726] elecom 0003:056E:00E6.000D: unknown global tag 0xc
[  398.854179][ T5726] elecom 0003:056E:00E6.000D: item 0 4 1 12 parsing failed
[  398.865658][ T5726] elecom: probe of 0003:056E:00E6.000D failed with error -22
[  399.535316][ T5635] usb 4-1: USB disconnect, device number 17
[  399.772598][  T150] block nbd4: Attempted send on invalid socket
[  399.780469][  T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  399.796602][ T4230] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  399.806653][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.824180][ T4230] usb 3-1: config 0 descriptor??
[  400.507462][ T4230] [drm:udl_init] *ERROR* Selecting channel failed
[  400.570855][ T4230] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  400.587456][ T4230] [drm] Initialized udl on minor 2
[  400.606777][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  400.634118][ T4230] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  400.653953][ T4230] usb 3-1: USB disconnect, device number 14
[  400.661497][ T5635] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  400.670586][ T5635] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  400.684754][ T5635] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  400.813931][ T8430] loop3: detected capacity change from 0 to 512
[  400.854196][ T8430] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  400.865682][ T8430] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  401.864839][ T8452] loop2: detected capacity change from 0 to 512
[  402.006498][ T8452] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[  402.006498][ T8452] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  402.006498][ T8452] 
[  402.085876][ T8459] loop1: detected capacity change from 0 to 16
[  402.674243][ T8452] EXT4-fs (loop2): Ignoring removed orlov option
[  402.706541][ T8459] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36
[  402.789799][ T8452] EXT4-fs (loop2): mounted filesystem without journal. Opts: noacl,orlov,,errors=continue. Quota mode: writeback.
[  402.912191][ T8466] loop4: detected capacity change from 0 to 4096
[  402.967350][ T8466] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  403.123686][ T8466] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  403.352126][ T8474] hub 8-0:1.0: USB hub found
[  403.379258][ T8466] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  403.382831][ T8474] hub 8-0:1.0: 1 port detected
[  403.406177][ T8475] loop1: detected capacity change from 0 to 512
[  403.417799][ T8466] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  403.504233][ T8475] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  403.535067][ T8466] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  403.543953][ T8466] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  403.564519][ T8466] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  403.573637][ T8466] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  403.593831][ T8466] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  403.666702][ T8479] loop2: detected capacity change from 0 to 64
[  403.674242][ T8466] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  403.715398][ T8466] ntfs: volume version 3.1.
[  404.239176][ T8489] loop2: detected capacity change from 0 to 512
[  404.799195][ T8494] loop3: detected capacity change from 0 to 512
[  405.004304][ T8489] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  405.063790][ T8494] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  405.075120][ T8494] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  405.542219][ T8529] loop4: detected capacity change from 0 to 512
[  405.583127][ T8524] loop1: detected capacity change from 0 to 256
[  405.702760][ T8529] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  406.208916][ T8524] FAT-fs (loop1): Directory bread(block 64) failed
[  406.208992][ T8524] FAT-fs (loop1): Directory bread(block 65) failed
[  406.209056][ T8524] FAT-fs (loop1): Directory bread(block 66) failed
[  406.209083][ T8524] FAT-fs (loop1): Directory bread(block 67) failed
[  406.209167][ T8524] FAT-fs (loop1): Directory bread(block 68) failed
[  406.209194][ T8524] FAT-fs (loop1): Directory bread(block 69) failed
[  406.209255][ T8524] FAT-fs (loop1): Directory bread(block 70) failed
[  406.209282][ T8524] FAT-fs (loop1): Directory bread(block 71) failed
[  406.209341][ T8524] FAT-fs (loop1): Directory bread(block 72) failed
[  406.209367][ T8524] FAT-fs (loop1): Directory bread(block 73) failed
[  406.581268][ T8540] loop3: detected capacity change from 0 to 16
[  407.245873][ T8543] loop2: detected capacity change from 0 to 16
[  407.304735][ T8548] loop4: detected capacity change from 0 to 512
[  407.465080][ T8540] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  407.473488][ T8543] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36
[  407.490440][ T8555] loop1: detected capacity change from 0 to 1024
[  407.576147][ T8548] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  407.587354][ T8548] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.897054][ T8575] loop2: detected capacity change from 0 to 512
[  408.943407][ T8580] loop4: detected capacity change from 0 to 1024
[  409.007551][ T8575] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  409.090729][ T8562] loop3: detected capacity change from 0 to 40427
[  409.190123][ T8562] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  409.206831][ T8562] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  409.242495][ T8562] F2FS-fs (loop3): Found nat_bits in checkpoint
[  409.387560][ T8595] loop4: detected capacity change from 0 to 512
[  409.490854][ T8562] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  409.581713][ T8562] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  409.603892][ T8595] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  409.615492][ T8595] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  411.305781][ T8630] loop4: detected capacity change from 0 to 512
[  411.568293][ T8630] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  411.665334][ T8641] loop3: detected capacity change from 0 to 16
[  411.728012][ T8641] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  412.510538][ T8655] sp0: Synchronizing with TNC
[  414.261316][ T8690] loop3: detected capacity change from 0 to 16
[  414.441718][ T8690] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  414.900490][ T8697] loop4: detected capacity change from 0 to 512
[  415.713769][ T8697] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  415.800675][ T8708] loop3: detected capacity change from 0 to 1024
[  415.898540][ T8711] loop2: detected capacity change from 0 to 2048
[  415.984442][ T8711] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  416.031295][ T8708] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  416.133130][ T8711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  416.386403][ T4229] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  416.588637][ T8732] loop4: detected capacity change from 0 to 128
[  416.670375][ T8732] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  416.709052][ T8734] loop2: detected capacity change from 0 to 512
[  416.723086][ T8732] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  416.769591][ T8734] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  416.850043][ T8734] EXT4-fs (loop2): 1 truncate cleaned up
[  416.883768][ T8734] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none.
[  417.118485][ T4229] usb 2-1: Using ep0 maxpacket: 16
[  417.367180][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.480143][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.490031][ T4229] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  417.499603][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.543833][ T4229] usb 2-1: config 0 descriptor??
[  417.678850][ T8737] loop4: detected capacity change from 0 to 40427
[  417.706565][ T8737] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  417.714322][ T8737] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  417.746083][ T8737] F2FS-fs (loop4): invalid crc value
[  417.770381][ T5726] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  417.902063][ T8737] F2FS-fs (loop4): Found nat_bits in checkpoint
[  417.981945][ T8754] loop3: detected capacity change from 0 to 512
[  418.166803][ T5726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  418.217180][ T8754] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  418.250730][ T8737] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  418.276337][ T5726] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  418.374776][ T8737] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  418.493514][ T4229] corsair 0003:1B1C:1B02.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  418.526669][ T5726] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  418.549577][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  418.550600][ T4229] corsair 0003:1B1C:1B02.000E: Read invalid backlight brightness: 57.
[  418.574235][ T8759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  418.603431][ T5726] usb 1-1: SerialNumber: syz
[  418.775054][   T26] usb 2-1: USB disconnect, device number 12
[  418.877684][ T8764] loop3: detected capacity change from 0 to 16
[  418.925793][ T8764] erofs: (device loop3): mounted with root inode @ nid 36.
[  418.955593][ T8764] overlayfs: upper fs is r/o, try multi-lower layers mount
[  418.965956][ T5726] usb 1-1: 0:2 : does not exist
[  418.983582][ T5726] usb 1-1: USB disconnect, device number 15
[  419.282360][ T5710] udevd[5710]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  419.333199][ T8778] netlink: 'syz.4.1229': attribute type 1 has an invalid length.
[  419.618077][ T8791] loop1: detected capacity change from 0 to 256
[  419.688940][ T8791] exfat: Deprecated parameter 'utf8'
[  419.694450][ T8791] exfat: Deprecated parameter 'namecase'
[  419.710294][ T8791] exfat: Deprecated parameter 'utf8'
[  419.829637][ T8791] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  419.931289][   T25] kauditd_printk_skb: 9 callbacks suppressed
[  419.931303][   T25] audit: type=1800 audit(1784866475.588:24): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1239" name="file1" dev="loop1" ino=1048614 res=0 errno=0
[  420.040416][ T8786] loop3: detected capacity change from 0 to 40427
[  420.173231][ T8786] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[  420.300174][ T8786] F2FS-fs (loop3): invalid crc value
[  420.435333][ T8786] F2FS-fs (loop3): Found nat_bits in checkpoint
[  420.512930][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1242'.
[  420.587739][ T8804] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1242'.
[  420.683342][ T8786] F2FS-fs (loop3): recover fsync data on readonly fs
[  420.736774][ T8786] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  420.784199][ T8786] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  420.804116][ T8786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  421.020943][ T8816] loop4: detected capacity change from 0 to 512
[  421.157825][ T8816] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  421.169147][ T8816] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.200731][ T8848] program syz.1.1254 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  423.281926][ T8869] loop1: detected capacity change from 0 to 16
[  423.444829][ T8869] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36
[  424.930263][ T8891] loop4: detected capacity change from 0 to 1024
[  424.957600][ T8891] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  426.770090][ T8897] loop2: detected capacity change from 0 to 32768
[  426.864111][ T8897] JBD2: Ignoring recovery information on journal
[  426.877774][ T8897] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75
[  426.926748][ T8903] loop4: detected capacity change from 0 to 40427
[  426.930941][ T8897] JBD2: bad block at offset 32
[  427.004784][ T8897] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  427.030958][ T8903] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  427.045769][ T8903] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  427.196468][ T8903] F2FS-fs (loop4): Found nat_bits in checkpoint
[  427.209045][ T8897] (syz.2.1269,8897,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0
[  427.384345][ T8897] (syz.2.1269,8897,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  427.403663][ T8897] (syz.2.1269,8897,1):ocfs2_symlink:1864 ERROR: status = -2
[  427.471981][ T8897] (syz.2.1269,8897,0):ocfs2_symlink:2065 ERROR: status = -2
[  427.597482][ T8903] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  427.637061][ T8935] loop3: detected capacity change from 0 to 512
[  427.645123][ T8903] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  427.729493][ T4194] ocfs2: Unmounting device (7,2) on (node local)
[  427.786693][ T8935] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  427.798199][ T8935] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.197310][ T8945] loop2: detected capacity change from 0 to 8
[  429.643215][ T8959] loop2: detected capacity change from 0 to 16
[  429.686497][ T5726] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  429.798583][ T8959] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36
[  430.126856][ T5726] usb 5-1: unable to get BOS descriptor or descriptor too short
[  430.356623][ T5726] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  430.375377][ T5726] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  430.586476][ T5726] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  430.595744][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.272167][ T5726] usb 5-1: Product: syz
[  431.277234][ T5726] usb 5-1: Manufacturer: syz
[  431.286731][ T5726] usb 5-1: SerialNumber: syz
[  431.428365][ T5726] usb 5-1: selecting invalid altsetting 1
[  431.436853][ T5726] usb 5-1: unit 6 not found!
[  431.876734][ T8987] loop9: detected capacity change from 0 to 7
[  432.144270][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  432.155196][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  432.165459][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  432.176472][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  432.198827][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  432.209828][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  432.258692][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  432.269679][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  432.286994][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  432.298296][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  432.308104][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  432.320369][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  432.396386][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  432.407761][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  432.424357][ T8987] ldm_validate_partition_table(): Disk read failed.
[  432.488372][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  432.499602][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  432.561730][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  432.573433][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  432.763166][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  432.775711][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  432.979053][ T5726] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3
[  433.173973][ T9002] loop2: detected capacity change from 0 to 256
[  433.179799][ T5726] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  433.186723][ T8987] Dev loop9: unable to read RDB block 0
[  433.190045][ T5726] usb 5-1: USB disconnect, device number 16
[  433.226383][ T8987]  loop9: unable to read partition table
[  433.233791][ T8987] loop9: partition table beyond EOD, truncated
[  433.241407][ T8987] loop_reread_partitions: partition scan of loop9 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  433.598688][ T5710] udevd[5710]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  434.113750][ T9015] loop4: detected capacity change from 0 to 512
[  434.641307][ T9024] program syz.2.1306 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  434.669802][ T9015] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  434.681001][ T9015] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  434.887987][ T9032] loop2: detected capacity change from 0 to 1024
[  436.958461][ T9064] loop2: detected capacity change from 0 to 128
[  437.086485][ T9064] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  437.194030][ T9064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  438.084285][ T9089] loop3: detected capacity change from 0 to 512
[  438.514427][ T9089] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  439.196475][ T5628] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  439.476561][ T5628] usb 3-1: Using ep0 maxpacket: 32
[  439.608168][ T5628] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  439.636328][ T5628] usb 3-1: config 0 has no interface number 0
[  439.860492][ T5628] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  439.878553][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  439.885109][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  439.893618][ T5628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.912172][ T5628] usb 3-1: Product: syz
[  439.920101][ T5628] usb 3-1: Manufacturer: syz
[  439.935041][ T5628] usb 3-1: SerialNumber: syz
[  439.968877][ T5628] usb 3-1: config 0 descriptor??
[  440.020806][ T5628] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  440.130177][ T9114] loop3: detected capacity change from 0 to 512
[  440.267172][ T5628] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  440.312494][ T5628] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  440.341344][ T9114] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  440.352692][ T9114] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.682063][ T5635] usb 3-1: USB disconnect, device number 15
[  440.696341][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  440.723301][ T5635] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  440.774056][ T5635] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  440.817412][ T5635] quatech2 3-1:0.51: device disconnected
[  441.201249][ T4886] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  441.503629][ T9137] loop4: detected capacity change from 0 to 512
[  442.002665][ T9137] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  442.066496][ T4886] usb 4-1: Using ep0 maxpacket: 8
[  442.314322][ T4886] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.333632][ T4886] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.343587][ T4886] usb 4-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  442.356527][ T4886] usb 4-1: config 0 interface 0 has no altsetting 0
[  442.363158][ T4886] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  442.372572][ T4886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.458292][ T4886] usb 4-1: config 0 descriptor??
[  442.826411][ T4886] usbhid 4-1:0.0: can't add hid device: -71
[  442.832420][ T4886] usbhid: probe of 4-1:0.0 failed with error -71
[  443.367372][ T4886] usb 4-1: USB disconnect, device number 18
[  443.422189][ T9166] option changes via remount are deprecated (pid=9165 comm=syz.0.1354)
[  443.432887][ T9166] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  444.383988][ T9208] loop3: detected capacity change from 0 to 4096
[  444.584090][ T9214] loop4: detected capacity change from 0 to 512
[  444.848146][ T9214] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  444.891266][ T9208] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  445.113722][ T9208] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  445.156056][ T9221] loop2: detected capacity change from 0 to 16
[  445.271312][ T9208] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  445.290171][ T9221] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36
[  445.405709][ T9208] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  445.573361][ T9208] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  445.629551][ T9208] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  445.739196][ T9208] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  445.793179][ T9208] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  445.923797][ T9208] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  445.935965][ T9208] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  445.974941][ T9208] ntfs: volume version 3.1.
[  447.422908][ T9247] netlink: 'syz.4.1381': attribute type 29 has an invalid length.
[  447.510286][ T9247] netlink: 'syz.4.1381': attribute type 29 has an invalid length.
[  447.655583][ T9252] netlink: 'syz.4.1381': attribute type 29 has an invalid length.
[  447.680497][ T9253] program syz.1.1383 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  447.690561][ T9250] netlink: 'syz.4.1381': attribute type 29 has an invalid length.
[  449.082819][ T9255] loop3: detected capacity change from 0 to 32768
[  449.317232][ T9259] loop1: detected capacity change from 0 to 32768
[  449.626407][ T5635] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  450.536304][ T5635] usb 3-1: Using ep0 maxpacket: 32
[  450.657179][ T5635] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  450.664230][ T9275] loop3: detected capacity change from 0 to 32768
[  450.675329][ T5635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.738700][ T5635] usb 3-1: config 0 descriptor??
[  450.772572][ T9275] JBD2: Ignoring recovery information on journal
[  450.875312][ T9292] netlink: 'syz.0.1397': attribute type 29 has an invalid length.
[  450.902987][ T9292] netlink: 'syz.0.1397': attribute type 29 has an invalid length.
[  450.940391][ T9275] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  451.013928][ T9296] loop1: detected capacity change from 0 to 16
[  451.149662][ T9296] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36
[  451.167448][ T4199] ocfs2: Unmounting device (7,3) on (node local)
[  451.199873][ T5635] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  451.216001][ T5635] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  451.236663][ T5635] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  451.272079][ T5635] usb 3-1: media controller created
[  451.286775][ T9277] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  451.718468][ T4197] Bluetooth: hci3: hcon ffff88801a7c2000 sent 0 < count 257
[  451.755954][ T9304] loop3: detected capacity change from 0 to 16
[  451.879282][ T9304] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  452.235501][ T5635] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  452.464877][ T5635] az6027: usb out operation failed. (-71)
[  452.566677][ T5635] az6027: usb out operation failed. (-71)
[  452.653884][ T5635] stb0899_attach: Driver disabled by Kconfig
[  452.786655][ T5635] az6027: no front-end attached
[  452.786655][ T5635] 
[  453.216589][ T5635] az6027: usb out operation failed. (-71)
[  453.668618][ T5635] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  453.683093][ T5635] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21
[  453.734360][ T5635] dvb-usb: schedule remote query interval to 400 msecs.
[  453.744223][ T5635] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  454.134774][ T5635] usb 3-1: USB disconnect, device number 16
[  454.322423][ T5635] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  454.777913][ T9333] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  454.891879][ T9333] xt_hashlimit: max too large, truncated to 1048576
[  454.944936][ T9333] xt_hashlimit: Unknown mode mask E0, kernel too old?
[  455.544305][ T9346] loop3: detected capacity change from 0 to 1024
[  456.243404][   T25] kauditd_printk_skb: 9 callbacks suppressed
[  456.243446][   T25] audit: type=1326 audit(1784866511.898:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.0.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788afb8e99 code=0x7fc00000
[  456.424441][   T25] audit: type=1326 audit(1784866511.938:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.0.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f788afb8e99 code=0x7fc00000
[  456.448473][   T25] audit: type=1326 audit(1784866511.938:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.0.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788afb8e99 code=0x7fc00000
[  456.472541][   T25] audit: type=1326 audit(1784866511.938:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.0.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788afb8e99 code=0x7fc00000
[  456.498964][   T25] audit: type=1326 audit(1784866511.938:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.0.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788afb8e99 code=0x7fc00000
[  456.525175][   T25] audit: type=1326 audit(1784866511.948:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.0.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788afb8e99 code=0x7fc00000
[  456.550034][   T25] audit: type=1326 audit(1784866511.958:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.0.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788afb8e99 code=0x7fc00000
[  456.607541][ T4602] hfsplus: b-tree write err: -5, ino 8
[  458.389522][ T9378] loop2: detected capacity change from 0 to 512
[  459.497161][ T9378] EXT4-fs: error -4 creating inode table initialization thread
[  459.839928][ T9378] EXT4-fs (loop2): mount failed
[  462.319142][ T9436] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  463.705620][ T9451] overlayfs: invalid origin (0000)
[  464.231986][ T9464] loop3: detected capacity change from 0 to 128
[  464.281728][ T9464] capability: warning: `syz.3.1446' uses deprecated v2 capabilities in a way that may be insecure
[  464.433592][ T9475] loop1: detected capacity change from 0 to 4096
[  464.466953][ T9475] ntfs3: loop1: ino=3, Correct links count -> 2.
[  465.599348][ T9490] loop3: detected capacity change from 0 to 16
[  465.641376][ T9490] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  466.526403][ T4232] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  466.772772][ T9498] loop4: detected capacity change from 0 to 32768
[  466.779469][ T4232] usb 3-1: Using ep0 maxpacket: 16
[  466.813895][ T9498] xfs: Unknown parameter 'smackfstransmute'
[  466.907382][ T4232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  466.923893][ T4232] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  466.935033][ T4232] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  466.949600][ T4232] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  466.961588][ T4232] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  466.984083][ T4232] usb 3-1: config 1 interface 0 has no altsetting 0
[  467.003077][ T4232] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  467.038304][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.199225][ T4232] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  467.427924][ T9539] loop3: detected capacity change from 0 to 1024
[  467.480584][ T9539] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  467.596535][ T4197] Bluetooth: hci2: hcon ffff888063170000 sent 0 < count 257
[  467.953754][ T9539] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  468.028772][ T4232] ums-sddr09: probe of 3-1:1.0 failed with error -22
[  468.038522][ T4232] usb 3-1: USB disconnect, device number 17
[  468.091981][ T9539] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  468.124927][ T9551] loop2: detected capacity change from 0 to 256
[  468.231693][ T9551] exfat: Deprecated parameter 'utf8'
[  468.277735][ T9551] exfat: Deprecated parameter 'namecase'
[  468.352602][ T9551] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  468.460342][ T9556] block device autoloading is deprecated and will be removed.
[  468.703498][ T9559] loop1: detected capacity change from 0 to 2048
[  468.770620][ T9559] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  469.932434][ T9595] loop1: detected capacity change from 0 to 512
[  470.168807][ T9608] loop4: detected capacity change from 0 to 4096
[  470.171474][ T9595] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback.
[  470.256045][ T9615] loop0: detected capacity change from 0 to 16
[  470.316777][ T4193] Bluetooth: hci2: hcon ffff888063170000 sent 0 < count 257
[  470.361523][ T9615] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 36
[  470.758392][ T9595] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  470.812069][ T9608] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  470.927064][ T9595] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.1487: corrupted inode contents
[  470.951984][ T9595] EXT4-fs (loop1): Remounting filesystem read-only
[  470.959028][ T9595] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.1487: mark_inode_dirty error
[  470.975345][ T9595] EXT4-fs (loop1): Remounting filesystem read-only
[  470.982131][ T9595] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.1487: corrupted inode contents
[  471.022443][ T9617] EXT4-fs (loop1): shut down requested (1)
[  471.036611][ T9595] EXT4-fs (loop1): Remounting filesystem read-only
[  471.043550][ T9595] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.1487: mark_inode_dirty error
[  471.077844][ T9595] EXT4-fs (loop1): Remounting filesystem read-only
[  471.156394][ T9606] loop3: detected capacity change from 0 to 16
[  471.206638][ T4197] Bluetooth: hci3: hcon ffff88801a7c2000 sent 0 < count 1
[  471.326787][ T9606] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36
[  471.560116][    T9] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  471.714914][ T9631] loop3: detected capacity change from 0 to 128
[  471.770310][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'.
[  471.791064][ T9631] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  472.242989][ T9663] loop4: detected capacity change from 0 to 128
[  472.486458][ T5628] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  472.562862][ T9669] FAT-fs (loop4): error, corrupted directory (invalid i_start)
[  472.574877][ T9669] FAT-fs (loop4): Filesystem has been set read-only
[  472.698861][ T9675] loop4: detected capacity change from 0 to 128
[  472.768842][ T5628] usb 1-1: Using ep0 maxpacket: 32
[  472.802922][ T9675] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  472.840647][ T9675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  472.888852][ T5628] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  472.912066][ T5628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.939211][ T5628] usb 1-1: config 0 descriptor??
[  473.015124][ T9690] loop1: detected capacity change from 0 to 8
[  473.099094][ T9690] SQUASHFS error: Failed to read block 0x636: -5
[  473.107433][ T9690] SQUASHFS error: Unable to read metadata cache entry [634]
[  473.216399][ T5628] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  473.316449][ T5726] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  473.959494][ T5628] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  473.992416][ T5628] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  474.008993][ T5628] usb 1-1: media controller created
[  474.027394][ T5628] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  474.164003][ T5726] usb 5-1: Using ep0 maxpacket: 16
[  474.599356][ T5628] az6027: usb out operation failed. (-71)
[  474.616380][ T5726] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.627616][ T5726] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.643641][ T5726] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  474.661649][ T5726] usb 5-1: config 0 interface 0 has no altsetting 0
[  474.717903][ T5628] az6027: usb out operation failed. (-71)
[  474.723735][ T5628] stb0899_attach: Driver disabled by Kconfig
[  474.730303][ T5628] az6027: no front-end attached
[  474.730303][ T5628] 
[  474.744410][ T5726] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  474.758308][ T5628] az6027: usb out operation failed. (-71)
[  474.764238][ T5628] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  474.923961][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.195228][ T5726] usb 5-1: config 0 descriptor??
[  475.257220][ T5628] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22
[  475.275269][ T5628] dvb-usb: schedule remote query interval to 400 msecs.
[  475.282363][ T5628] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  475.292366][ T5628] usb 1-1: USB disconnect, device number 16
[  475.351156][ T5628] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  476.222392][ T5726] hid (null): unknown global tag 0xd
[  476.315306][ T9735] loop3: detected capacity change from 0 to 512
[  476.424384][ T5726] usb 5-1: USB disconnect, device number 17
[  476.767441][ T9735] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  477.278077][ T9735] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  477.636754][ T9755] loop4: detected capacity change from 0 to 16
[  478.221972][ T4193] Bluetooth: hci1: hcon ffff88801a1ea000 sent 0 < count 257
[  478.355525][ T9755] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36
[  478.464214][ T9724] loop1: detected capacity change from 0 to 32768
[  478.780444][ T5710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5710)
[  480.992522][ T9806] loop0: detected capacity change from 0 to 512
[  481.299501][ T9806] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  483.081568][ T9805] loop1: detected capacity change from 0 to 32768
[  483.285240][ T9805] XFS (loop1): Mounting V5 Filesystem
[  483.296609][ T5726] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  483.939828][ T5726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  483.956639][ T5726] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  484.056571][ T5726] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  484.065758][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  484.113811][ T5726] usb 4-1: SerialNumber: syz
[  484.194020][ T9855] loop2: detected capacity change from 0 to 512
[  484.223661][ T9805] XFS (loop1): Ending clean mount
[  484.241221][ T9855] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  484.248653][ T9805] XFS (loop1): Quotacheck needed: Please wait.
[  484.292242][ T9859] loop0: detected capacity change from 0 to 64
[  484.328724][ T9860] loop4: detected capacity change from 0 to 512
[  484.346438][ T9805] XFS (loop1): Quotacheck: Done.
[  484.432551][ T5726] usb 4-1: 0:2 : does not exist
[  484.460227][ T9860] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  484.475912][ T4187] XFS (loop1): Unmounting Filesystem
[  484.523033][ T5726] usb 4-1: USB disconnect, device number 19
[  484.705412][ T9867] loop0: detected capacity change from 0 to 256
[  484.837517][ T5710] udevd[5710]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  485.050957][ T9871] loop3: detected capacity change from 0 to 256
[  485.100618][ T9871] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  485.137249][ T9871] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  485.224556][ T9871] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  485.242071][ T9865] loop2: detected capacity change from 0 to 32768
[  485.938818][ T4230] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  486.102582][ T9886] program syz.3.1574 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  486.206298][ T4230] usb 1-1: Using ep0 maxpacket: 8
[  487.605758][ T9893] loop1: detected capacity change from 0 to 16
[  487.613357][ T4193] Bluetooth: hci0: hcon ffff88814cc7a000 sent 0 < count 257
[  487.848185][ T4230] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  487.904277][ T4230] usb 1-1: config 179 has no interface number 0
[  488.015326][ T9893] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36
[  488.022569][ T9897] input: syz1 as /devices/virtual/input/input23
[  488.032543][ T4230] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  488.058991][ T4230] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  488.099716][ T9899] sd 0:0:1:0: PR command failed: 2
[  488.121876][ T4230] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  488.170457][ T9899] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  488.221399][ T4230] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  488.240346][ T4230] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  488.254344][ T9906] syz.1.1581 uses obsolete (PF_INET,SOCK_PACKET)
[  488.261048][ T4230] usb 1-1: config 179 interface 65 has no altsetting 0
[  488.268324][ T9899] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  488.277863][ T4230] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  488.297107][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.346442][ T4230] usb 1-1: can't set config #179, error -71
[  488.377587][ T4230] usb 1-1: USB disconnect, device number 17
[  488.396479][ T9906] netlink: 'syz.1.1581': attribute type 9 has an invalid length.
[  488.582849][ T9916] loop0: detected capacity change from 0 to 256
[  489.274034][ T9921] loop3: detected capacity change from 0 to 256
[  489.309094][ T5628] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  489.382660][ T9932] program syz.2.1589 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  489.518835][ T9939] loop0: detected capacity change from 0 to 512
[  489.715009][ T9945] loop1: detected capacity change from 0 to 256
[  489.752699][ T5628] usb 5-1: unable to get BOS descriptor or descriptor too short
[  489.769933][ T9945] exfat: Deprecated parameter 'utf8'
[  489.784676][ T9945] exfat: Deprecated parameter 'namecase'
[  489.819904][ T9945] exfat: Deprecated parameter 'namecase'
[  489.836938][ T5628] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  489.840065][ T9950] loop0: detected capacity change from 0 to 64
[  489.867342][ T5628] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  489.877693][ T9945] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  489.879497][ T5628] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  489.938114][ T5628] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  489.971042][ T5628] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  489.988785][ T5628] usb 5-1: config 1 interface 1 has no altsetting 0
[  490.086973][ T5726] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  490.236933][ T5628] usb 5-1: string descriptor 0 read error: -22
[  490.249418][ T5628] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  490.261743][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.416393][ T4232] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  490.666505][ T4232] usb 2-1: Using ep0 maxpacket: 32
[  490.697086][ T5628] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  490.712879][ T5628] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  490.796488][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  490.807116][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  490.816312][ T5726] usb 3-1: Using ep0 maxpacket: 8
[  490.822936][ T4232] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  490.827748][ T5236] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  490.837180][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.854527][ T4232] usb 2-1: config 0 descriptor??
[  490.901283][ T4232] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  490.996586][ T5726] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  491.006056][ T5726] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  491.017221][ T5726] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  491.027654][ T5726] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  491.037969][ T5726] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  491.051308][ T5726] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  491.060623][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.106656][ T5236] usb 1-1: Using ep0 maxpacket: 8
[  491.118868][ T9961] netlink: 'syz.1.1601': attribute type 287 has an invalid length.
[  491.124363][ T9971] overlayfs: failed to clone lowerpath
[  491.131257][   T26] usb 2-1: USB disconnect, device number 13
[  491.236485][ T5236] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  491.254007][ T5236] usb 1-1: config 0 interface 0 has no altsetting 0
[  491.261342][ T5236] usb 1-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[  491.274417][ T5628] usb 5-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4
[  491.282477][ T5236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.297754][ T5628] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4
[  491.300966][ T5236] usb 1-1: config 0 descriptor??
[  491.315251][ T5628] usb 5-1: USB disconnect, device number 18
[  491.337205][ T5726] usb 3-1: GET_CAPABILITIES returned 0
[  491.343056][ T5726] usbtmc 3-1:16.0: can't read capabilities
[  492.053857][ T5726] usb 3-1: USB disconnect, device number 18
[  492.131396][ T5236] wacom 0003:056A:00E3.0010: unknown main item tag 0x7
[  492.197665][ T5710] udevd[5710]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  492.225546][ T5236] wacom 0003:056A:00E3.0010: unknown main item tag 0x0
[  492.313981][ T5236] wacom 0003:056A:00E3.0010: unknown main item tag 0x1
[  492.481541][ T5236] wacom 0003:056A:00E3.0010: unknown main item tag 0xd
[  492.754599][ T5236] wacom 0003:056A:00E3.0010: hidraw0: USB HID v0.77 Device [HID 056a:00e3] on usb-dummy_hcd.0-1/input0
[  492.988929][ T5236] usb 1-1: USB disconnect, device number 18
[  493.120359][T10003] fido_id[10003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  493.212017][T10002] loop1: detected capacity change from 0 to 4096
[  493.382611][T10012] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  493.543413][T10019] loop3: detected capacity change from 0 to 256
[  493.565388][T10020] loop2: detected capacity change from 0 to 16
[  493.570395][T10002] syz.1.1613 (10002) used greatest stack depth: 18576 bytes left
[  493.595386][T10017] pimreg1: tun_chr_ioctl cmd 35108
[  493.629710][T10020] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36
[  493.653618][T10019] FAT-fs (loop3): Directory bread(block 64) failed
[  493.667645][T10019] FAT-fs (loop3): Directory bread(block 65) failed
[  493.696394][T10019] FAT-fs (loop3): Directory bread(block 66) failed
[  493.702980][T10019] FAT-fs (loop3): Directory bread(block 67) failed
[  493.779206][T10019] FAT-fs (loop3): Directory bread(block 68) failed
[  493.801652][T10019] FAT-fs (loop3): Directory bread(block 69) failed
[  493.840074][T10019] FAT-fs (loop3): Directory bread(block 70) failed
[  493.899601][T10019] FAT-fs (loop3): Directory bread(block 71) failed
[  493.951378][T10019] FAT-fs (loop3): Directory bread(block 72) failed
[  493.981370][T10019] FAT-fs (loop3): Directory bread(block 73) failed
[  494.901603][T10037] loop1: detected capacity change from 0 to 16
[  494.909455][ T4193] Bluetooth: hci0: hcon ffff88814cc7a000 sent 0 < count 257
[  495.685324][T10034] loop4: detected capacity change from 0 to 128
[  495.789261][T10034] FAT-fs (loop4): bogus sectors per cluster 0
[  495.826316][T10034] FAT-fs (loop4): Can't find a valid FAT filesystem
[  495.870525][T10037] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36
[  495.924961][T10039] loop3: detected capacity change from 0 to 164
[  496.127958][T10048] loop0: detected capacity change from 0 to 128
[  496.265778][T10048] attempt to access beyond end of device
[  496.265778][T10048] loop0: rw=2049, want=250, limit=128
[  496.311372][T10048] attempt to access beyond end of device
[  496.311372][T10048] loop0: rw=2049, want=154, limit=128
[  497.238648][ T5726] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  498.095418][T10074] loop2: detected capacity change from 0 to 16
[  498.102902][ T4193] Bluetooth: hci4: hcon ffff88807ab86000 sent 0 < count 257
[  498.168933][T10074] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36
[  499.059124][T10078] loop2: detected capacity change from 0 to 256
[  499.142399][T10078] FAT-fs (loop2): Directory bread(block 64) failed
[  499.149461][ T5726] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  499.187221][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.202236][T10078] FAT-fs (loop2): Directory bread(block 65) failed
[  499.226426][T10078] FAT-fs (loop2): Directory bread(block 66) failed
[  499.234187][T10078] FAT-fs (loop2): Directory bread(block 67) failed
[  499.241347][T10078] FAT-fs (loop2): Directory bread(block 68) failed
[  499.266085][ T5726] usb 2-1: config 0 descriptor??
[  499.288318][T10078] FAT-fs (loop2): Directory bread(block 69) failed
[  499.296588][ T5726] usb 2-1: can't set config #0, error -71
[  499.312295][ T5726] usb 2-1: USB disconnect, device number 14
[  499.321800][T10084] loop1: detected capacity change from 0 to 1024
[  499.323751][T10078] FAT-fs (loop2): Directory bread(block 70) failed
[  499.443887][T10084] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  499.456358][T10078] FAT-fs (loop2): Directory bread(block 71) failed
[  499.462963][T10078] FAT-fs (loop2): Directory bread(block 72) failed
[  499.521484][T10078] FAT-fs (loop2): Directory bread(block 73) failed
[  499.614634][T10088] loop0: detected capacity change from 0 to 16
[  499.622838][ T4193] Bluetooth: hci2: hcon ffff888063170000 sent 0 < count 257
[  499.779621][T10088] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 36
[  499.979956][T10084] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpjquota=,noquota,barrier,auto_da_alloc,dioread_nolock,. Quota mode: none.
[  500.139381][T10084] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  500.155684][T10084] EXT4-fs (loop1): Online defrag not supported with bigalloc
[  500.299525][T10093] netlink: 'syz.0.1649': attribute type 9 has an invalid length.
[  500.510639][T10080] loop3: detected capacity change from 0 to 32768
[  500.594011][T10080] add_index: next_index = 0.  Resetting!
[  501.261300][T10080] find_entry called with index >= next_index
[  501.270758][T10080] find_entry called with index >= next_index
[  501.288974][T10080] find_entry called with index >= next_index
[  501.333356][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  501.339716][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  501.347779][T10080] find_entry called with index >= next_index
[  501.534856][T10080] find_entry called with index >= next_index
[  501.748956][T10080] find_entry called with index >= next_index
[  501.847227][T10080] find_entry called with index >= next_index
[  501.993951][T10080] read_mapping_page failed!
[  502.072631][T10080] ERROR: (device loop3): txCommit: 
[  502.072631][T10080] 
[  502.189421][T10080] ERROR: (device loop3): remounting filesystem as read-only
[  502.334725][T10117] loop0: detected capacity change from 0 to 128
[  502.345735][  T275] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0)
[  502.360963][T10117] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  502.425901][T10118] loop4: detected capacity change from 0 to 16
[  503.027259][ T4193] Bluetooth: hci1: hcon ffff88801a1ea000 sent 0 < count 257
[  503.043797][  T275] ------------[ cut here ]------------
[  503.051073][  T275] kernel BUG at fs/jfs/jfs_txnmgr.c:932!
[  503.059703][T10118] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36
[  503.077168][  T275] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  503.083270][  T275] CPU: 1 PID: 275 Comm: jfsCommit Not tainted syzkaller #0
[  503.090453][  T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  503.100508][  T275] RIP: 0010:txUnlock+0xc7d/0xcb0
[  503.105444][  T275] Code: e9 cf e1 06 0f 0b e8 52 50 a6 fe 48 c7 c7 00 3e 62 8a 48 c7 c6 e9 39 62 8a ba a4 03 00 00 48 c7 c1 c0 48 62 8a e8 c3 cf e1 06 <0f> 0b e8 2c 50 a6 fe 48 c7 c7 00 3e 62 8a 48 c7 c6 e9 39 62 8a ba
[  503.125033][  T275] RSP: 0018:ffffc900024afd30 EFLAGS: 00010246
[  503.131080][  T275] RAX: 0000000000000037 RBX: 0000000000000000 RCX: 198dc54a67803a00
[  503.139030][  T275] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  503.146978][  T275] RBP: ffff88806225d7c0 R08: ffff8880b9033d7f R09: 1ffff110172067af
[  503.154929][  T275] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffffc900027723f0
[  503.162879][  T275] R13: dffffc0000000000 R14: 000000000000007e R15: ffff888063055894
[  503.170840][  T275] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  503.179761][  T275] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  503.186360][  T275] CR2: 00007f6f1b389000 CR3: 000000002288a000 CR4: 00000000003506e0
[  503.194323][  T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  503.202273][  T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  503.210543][  T275] Call Trace:
[  503.213817][  T275]  <TASK>
[  503.216735][  T275]  ? _raw_spin_lock_irqsave+0x100/0x100
[  503.222381][  T275]  ? lockdep_hardirqs_on+0x94/0x140
[  503.227610][  T275]  jfs_lazycommit+0x598/0xb60
[  503.232273][  T275]  ? txFreelock+0x5a0/0x5a0
[  503.236754][  T275]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  503.242627][  T275]  ? sched_dynamic_update+0x210/0x210
[  503.248053][  T275]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  503.253930][  T275]  ? __kthread_parkme+0x14e/0x1b0
[  503.258934][  T275]  kthread+0x42e/0x520
[  503.262985][  T275]  ? txFreelock+0x5a0/0x5a0
[  503.267483][  T275]  ? kthread_blkcg+0xd0/0xd0
[  503.272052][  T275]  ret_from_fork+0x1f/0x30
[  503.276475][  T275]  </TASK>
[  503.279490][  T275] Modules linked in:
[  503.320218][  T275] ---[ end trace e01f9e6905108688 ]---
[  503.326750][  T275] RIP: 0010:txUnlock+0xc7d/0xcb0
[  503.332437][  T275] Code: e9 cf e1 06 0f 0b e8 52 50 a6 fe 48 c7 c7 00 3e 62 8a 48 c7 c6 e9 39 62 8a ba a4 03 00 00 48 c7 c1 c0 48 62 8a e8 c3 cf e1 06 <0f> 0b e8 2c 50 a6 fe 48 c7 c7 00 3e 62 8a 48 c7 c6 e9 39 62 8a ba
[  503.353023][  T275] RSP: 0018:ffffc900024afd30 EFLAGS: 00010246
[  503.359728][  T275] RAX: 0000000000000037 RBX: 0000000000000000 RCX: 198dc54a67803a00
[  503.368019][  T275] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  503.372015][T10117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  503.376448][  T275] RBP: ffff88806225d7c0 R08: ffff8880b9033d7f R09: 1ffff110172067af
[  503.408255][  T275] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffffc900027723f0
[  503.416402][  T275] R13: dffffc0000000000 R14: 000000000000007e R15: ffff888063055894
[  503.424484][  T275] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  503.452292][  T275] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  503.459866][  T275] CR2: 0000001b3271bff8 CR3: 0000000063eb8000 CR4: 00000000003506e0
[  503.467944][  T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  503.475929][  T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  503.492120][  T275] Kernel panic - not syncing: Fatal exception
[  503.498435][  T275] Kernel Offset: disabled
[  503.502783][  T275] Rebooting in 86400 seconds..