last executing test programs:

2m46.967325269s ago: executing program 1 (id=173):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="d6", 0x1}], 0x17)

2m46.800776882s ago: executing program 1 (id=175):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006)
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009041001020a16d100090507000000000000090589"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

2m44.828604942s ago: executing program 1 (id=187):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2000082, &(0x7f0000000f40)={[{@utf8no}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@fat=@uid}, {@shortname_mixed}, {@fat=@errors_remount}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x25, 0x35d, &(0x7f0000001100)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

2m44.199383181s ago: executing program 1 (id=192):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x4, 0x339, &(0x7f0000000140)="$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")
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee00)

2m43.852822087s ago: executing program 1 (id=197):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0xffffff01, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)

2m43.313210895s ago: executing program 1 (id=204):
r0 = syz_io_uring_setup(0x5e7e, &(0x7f0000000340)={0x0, 0xc63d, 0x2, 0x2, 0x46}, &(0x7f00000001c0), &(0x7f00000005c0))
unshare(0x2040400)
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300))

2m42.98374827s ago: executing program 32 (id=204):
r0 = syz_io_uring_setup(0x5e7e, &(0x7f0000000340)={0x0, 0xc63d, 0x2, 0x2, 0x46}, &(0x7f00000001c0), &(0x7f00000005c0))
unshare(0x2040400)
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300))

4.016419938s ago: executing program 0 (id=1813):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000002b80)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000006140)={0x0, 0x0, 0x0, 0x6, 0x400000000000000, 0x0, 0x0, 0x808, 0xffffff01})

3.532864806s ago: executing program 0 (id=1819):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x2, 0x0, 0x8, 0x9, 0x6ebd})

3.300676959s ago: executing program 3 (id=1822):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c000180080001"], 0x8c}}, 0x0)

3.24884735s ago: executing program 4 (id=1823):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101501, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r0, 0x89f0, 0x0)

3.107309803s ago: executing program 3 (id=1825):
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x280)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

2.980385524s ago: executing program 4 (id=1827):
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000019180)={0x130003, 0x0, [0x7, 0x2, 0x8, 0x6, 0xfffffffffffffffd, 0x0, 0x3, 0x7fffffff]})
r0 = socket(0x15, 0x80005, 0x0)
getsockopt(r0, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1)

2.822488107s ago: executing program 4 (id=1830):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000)

2.753269258s ago: executing program 2 (id=1831):
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

2.686984599s ago: executing program 4 (id=1832):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESHEX], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000001c0)=""/4096)

2.677403689s ago: executing program 2 (id=1833):
r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000440)=""/4096, 0x1000, 0x5, &(0x7f0000000080)={0x0, 0x989680})

2.357368974s ago: executing program 0 (id=1834):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, 0x0, 0x0, 0x4000050)

2.154663407s ago: executing program 3 (id=1835):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000600)={[{@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@discard}, {@discard}, {}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0)

2.108497468s ago: executing program 0 (id=1836):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x8, {0x8, 0x0, "d75b90993b34"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.885370631s ago: executing program 3 (id=1837):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)

1.764710173s ago: executing program 2 (id=1838):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', <r1=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14)

1.680313154s ago: executing program 2 (id=1839):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x46, 0x50, 0xd3, 0x10, 0xc45, 0x800a, 0xdb47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xa6, 0x37}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x0, 0x16, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.033309114s ago: executing program 4 (id=1840):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
rename(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)

317.553936ms ago: executing program 0 (id=1841):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x29}, 0x8)

266.549116ms ago: executing program 0 (id=1842):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000008da090a0000000000000109022400010000800009040002010300000009210000fe0122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "92ac66ce"}, @main=@item_012={0x1, 0x0, 0xc, 'U'}]}}, 0x0}, 0x0)

137.360008ms ago: executing program 3 (id=1843):
r0 = gettid()
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x7)

136.840128ms ago: executing program 2 (id=1844):
getgroups(0x2, &(0x7f0000000100)=[0xee01, <r0=>0xee01])
setresgid(r0, 0x0, 0x0)
setresgid(0xee00, 0x0, 0xee00)

114.485979ms ago: executing program 4 (id=1845):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2ea, &(0x7f0000000700)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189)
sync()

40.34683ms ago: executing program 2 (id=1846):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

0s ago: executing program 3 (id=1847):
syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={[{@grpquota}, {@nolargeio}, {@logbufs={'logbufs', 0x3d, 0x3}}]}, 0x1, 0xb8aa, &(0x7f000000b880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x5c)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4010586e, 0x0)

kernel console output (not intermixed with test programs):

rrent LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  156.278259][    T9] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x8 
[  156.312630][    T9] XFS (loop0): Unmount and run xfs_repair
[  156.320252][    T9] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  156.329055][    T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  156.350756][    T9] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[  156.377386][    T9] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[  156.405824][    T9] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[  156.416233][    T9] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  156.425946][    T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  156.435664][    T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  156.446511][    T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  156.461372][ T8181] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x8 len 4 error 74
[  156.530276][ T5772] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.708566][ T8238] loop3: detected capacity change from 0 to 4096
[  156.809607][ T8238] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  157.148521][ T8247] loop3: detected capacity change from 0 to 256
[  157.167655][ T8247] exfat: Deprecated parameter 'namecase'
[  157.205282][ T8247] exfat: Deprecated parameter 'utf8'
[  157.237742][ T8247] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  157.319919][ T8247] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  157.799970][ T8263] binder: 8262:8263 ioctl c018620c 200000000380 returned -22
[  158.180055][ T8249] loop0: detected capacity change from 0 to 32768
[  158.190037][ T8253] loop4: detected capacity change from 0 to 32768
[  158.200694][ T8249] XFS: ikeep mount option is deprecated.
[  158.275958][ T8253] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  158.312181][ T8249] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  158.412916][ T8249] XFS (loop0): Ending clean mount
[  158.461621][ T8249] XFS (loop0): Quotacheck needed: Please wait.
[  158.566134][ T8253] XFS (loop4): Ending clean mount
[  158.629875][ T8249] XFS (loop0): Quotacheck: Done.
[  158.797654][ T5772] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  158.846417][ T6364] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  159.279182][ T8317] loop3: detected capacity change from 0 to 16
[  159.302646][ T8317] erofs: (device loop3): mounted with root inode @ nid 36.
[  159.346912][ T8317] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel
[  159.441781][ T5776] Bluetooth: hci0: link tx timeout
[  159.447615][ T5776] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  159.563770][ T8330] loop2: detected capacity change from 0 to 256
[  159.584151][ T8330] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  160.173834][ T8331] loop3: detected capacity change from 0 to 32768
[  160.208917][ T8331] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.335530][ T8351] loop2: detected capacity change from 0 to 512
[  160.391820][ T8351] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  160.402187][ T8331] XFS (loop3): Ending clean mount
[  160.504855][ T8351] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  160.585160][ T8361] loop0: detected capacity change from 0 to 8
[  160.592134][ T8351] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  160.625249][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.642981][ T8351] EXT4-fs (loop2): 1 truncate cleaned up
[  160.699195][ T8351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.735422][ T8361] SQUASHFS error: Unable to read directory block [629:26]
[  160.932103][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.154293][ T8372] loop2: detected capacity change from 0 to 64
[  161.201028][ T8375] loop4: detected capacity change from 0 to 512
[  161.225491][ T8375] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  161.247347][   T28] audit: type=1800 audit(1751065178.465:15): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.920" name="file1" dev="loop2" ino=18 res=0 errno=0
[  161.267019][ T8375] EXT4-fs (loop4): 1 truncate cleaned up
[  161.328410][ T8375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.344680][ T8372] syz.2.920: attempt to access beyond end of device
[  161.344680][ T8372] loop2: rw=34817, sector=18, nr_sectors = 400 limit=64
[  161.361769][ T8372] syz.2.920: attempt to access beyond end of device
[  161.361769][ T8372] loop2: rw=34817, sector=420, nr_sectors = 20 limit=64
[  161.379012][ T8372] syz.2.920: attempt to access beyond end of device
[  161.379012][ T8372] loop2: rw=34817, sector=441, nr_sectors = 64 limit=64
[  161.404112][ T8382] loop3: detected capacity change from 0 to 256
[  161.411415][ T8382] exfat: Deprecated parameter 'utf8'
[  161.416847][ T8382] exfat: Deprecated parameter 'namecase'
[  161.423323][ T8382] exfat: Deprecated parameter 'namecase'
[  161.431416][ T8382] exfat: Deprecated parameter 'utf8'
[  161.460387][ T8382] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d)
[  161.477477][ T5861] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  161.537636][ T5780] Bluetooth: hci0: command 0x0406 tx timeout
[  161.552796][   T28] audit: type=1800 audit(1751065178.775:16): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.924" name="file1" dev="loop3" ino=1048683 res=0 errno=0
[  161.596238][ T6364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.680410][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.702688][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.737439][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.766519][ T5861] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  161.789114][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.833305][ T5861] usb 1-1: config 0 descriptor??
[  161.838920][ T8391] netlink: 'syz.3.928': attribute type 30 has an invalid length.
[  162.288273][ T5861] dragonrise 0003:0079:0011.0015: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0
[  162.380473][ T8413] netlink: 84 bytes leftover after parsing attributes in process `syz.4.938'.
[  162.406684][ T8413] netlink: 84 bytes leftover after parsing attributes in process `syz.4.938'.
[  162.479138][   T27] usb 1-1: USB disconnect, device number 9
[  162.917361][ T5824] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  163.112171][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.125844][ T5824] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  163.137130][ T5824] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  163.167478][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.197694][ T5824] usb 3-1: config 0 descriptor??
[  163.216715][ T5824] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  163.225930][ T5824] dvb-usb: bulk message failed: -22 (3/0)
[  163.244751][ T5824] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  163.266503][ T5824] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  163.286464][ T5824] usb 3-1: media controller created
[  163.299125][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  163.348580][ T5824] dvb-usb: bulk message failed: -22 (6/0)
[  163.388216][ T5824] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  163.428381][ T5824] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15
[  163.447064][ T8421] dibusb: i2c wr: len=61 is too big!
[  163.447064][ T8421] 
[  163.469623][ T5824] dvb-usb: schedule remote query interval to 150 msecs.
[  163.483479][ T5824] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  163.518599][ T5824] usb 3-1: USB disconnect, device number 11
[  163.521945][ T8433] loop4: detected capacity change from 0 to 32768
[  163.589129][ T5824] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  163.620292][ T8446] loop0: detected capacity change from 0 to 2048
[  163.667652][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  163.678902][ T8446]  loop0: p1 < > p3
[  163.703412][ T8446] loop0: p3 size 134217728 extends beyond EOD, truncated
[  163.877400][    T9] usb 4-1: Using ep0 maxpacket: 16
[  163.884585][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.907481][    T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.948771][    T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.984314][    T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  164.010152][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  164.026800][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  164.030368][    T9] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00
[  164.039104][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  164.092067][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.149409][    T9] usb 4-1: config 0 descriptor??
[  164.176399][ T8455] loop4: detected capacity change from 0 to 4096
[  164.223536][ T8460] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.397532][ T5824] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  164.426729][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'.
[  164.575423][    T9] cypress 0003:04B4:ED81.0016: item fetching failed at offset 0/4
[  164.589394][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.589967][    T9] cypress 0003:04B4:ED81.0016: parse failed
[  164.603673][ T5824] usb 1-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[  164.616876][    T9] cypress: probe of 0003:04B4:ED81.0016 failed with error -22
[  164.624589][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.649513][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'.
[  164.658025][ T5824] usb 1-1: config 0 descriptor??
[  164.789054][ T5861] usb 4-1: USB disconnect, device number 11
[  164.851195][   T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  165.047410][   T27] usb 5-1: Using ep0 maxpacket: 8
[  165.055180][   T27] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  165.065206][ T8484] loop2: detected capacity change from 0 to 1764
[  165.069053][   T27] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  165.083148][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.091757][   T27] usb 5-1: Product: syz
[  165.104479][   T27] usb 5-1: Manufacturer: syz
[  165.115422][ T5824] wacom 0003:056A:032B.0017: hidraw0: USB HID v0.04 Device [HID 056a:032b] on usb-dummy_hcd.0-1/input0
[  165.126645][   T27] usb 5-1: SerialNumber: syz
[  165.144451][   T27] usb 5-1: config 0 descriptor??
[  165.160270][   T27] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  165.184330][   T27] usb 5-1: setting power ON
[  165.200766][   T27] dvb-usb: bulk message failed: -22 (2/0)
[  165.212140][   T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  165.230803][   T27] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  165.242798][   T27] usb 5-1: media controller created
[  165.276956][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  165.317754][   T27] usb 5-1: selecting invalid altsetting 6
[  165.327945][   T27] usb 5-1: digital interface selection failed (-22)
[  165.347405][   T27] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  165.377488][   T27] usb 5-1: setting power OFF
[  165.382154][   T27] dvb-usb: bulk message failed: -22 (2/0)
[  165.392260][ T5824] usb 1-1: USB disconnect, device number 10
[  165.411640][   T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  165.411660][ T8470] dvb-usb: bulk message failed: -22 (3/0)
[  165.434737][   T27] (NULL device *): no alternate interface
[  165.459987][ T8470] cxusb: i2c rd: len=143 is too big!
[  165.459987][ T8470] 
[  165.517911][   T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  165.545731][   T27] usb 5-1: USB disconnect, device number 7
[  166.028337][ T8487] loop2: detected capacity change from 0 to 40427
[  166.058897][ T8487] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  166.066687][ T8487] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  166.143291][ T8487] F2FS-fs (loop2): Found nat_bits in checkpoint
[  166.314068][ T8487] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  166.322802][ T8487] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  166.432414][ T8495] loop3: detected capacity change from 0 to 40427
[  166.443198][ T8495] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  166.443248][ T8495] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  166.461661][ T8508] loop0: detected capacity change from 0 to 16
[  166.471025][ T8508] erofs: (device loop0): mounted with root inode @ nid 36.
[  166.479553][ T8495] F2FS-fs (loop3): Found nat_bits in checkpoint
[  166.572708][ T8495] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  166.625078][ T8495] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  166.625107][ T8495] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  167.156638][ T8521] program syz.4.987 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  167.279894][ T8525] netlink: 200 bytes leftover after parsing attributes in process `syz.2.988'.
[  167.569764][ T8533] netlink: 100 bytes leftover after parsing attributes in process `syz.4.992'.
[  167.658770][ T8517] loop0: detected capacity change from 0 to 32768
[  167.682016][ T8517] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.984 (8517)
[  167.737706][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  167.755086][ T8517] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  167.755416][ T8536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.993'.
[  167.775279][ T8517] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  167.784588][ T8517] BTRFS info (device loop0): using free space tree
[  167.930116][ T8517] BTRFS info (device loop0): enabling ssd optimizations
[  167.949559][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.965174][ T8517] BTRFS info (device loop0): auto enabling async discard
[  167.975471][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  167.984813][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.003817][    T9] usb 3-1: Product: syz
[  168.013779][    T9] usb 3-1: Manufacturer: syz
[  168.027310][    T9] usb 3-1: SerialNumber: syz
[  168.143283][ T5772] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  168.262769][    T9] cdc_ncm 3-1:1.0: bind() failure
[  168.301167][    T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  168.327936][    T9] cdc_ncm 3-1:1.1: bind() failure
[  168.337803][ T1188] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  168.367777][    T9] usb 3-1: USB disconnect, device number 12
[  168.455723][ T7590] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (7590)
[  168.527004][ T8552] loop3: detected capacity change from 0 to 32768
[  168.527688][ T1188] usb 5-1: Using ep0 maxpacket: 32
[  168.574016][ T1188] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  168.605830][ T1188] usb 5-1: config 0 has no interface number 0
[  168.628696][   T28] audit: type=1800 audit(1751065185.845:17): pid=8552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.994" name="file1" dev="loop3" ino=4 res=0 errno=0
[  168.641144][ T1188] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  168.665047][ T1188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.676665][ T1188] usb 5-1: Product: syz
[  168.679273][   T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  168.687000][ T1188] usb 5-1: Manufacturer: syz
[  168.693399][ T1188] usb 5-1: SerialNumber: syz
[  168.709333][ T1188] usb 5-1: config 0 descriptor??
[  168.727095][ T1188] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  168.868212][ T8566] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.997' resets device
[  168.892117][   T27] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[  168.917446][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.941798][   T27] usb 1-1: Product: syz
[  168.961258][   T27] usb 1-1: Manufacturer: syz
[  168.965919][   T27] usb 1-1: SerialNumber: syz
[  169.012850][   T27] usb 1-1: config 0 descriptor??
[  169.040049][   T27] gspca_main: sonixb-2.14.0 probing 0c45:608f
[  169.161164][ T8570] loop2: detected capacity change from 0 to 8
[  169.316450][ T1188] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  169.357976][ T1188] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  169.471028][   T27] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19
[  169.680597][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  169.690256][   T27] usb 5-1: USB disconnect, device number 8
[  169.746609][   T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  169.750290][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1004'.
[  169.771698][ T5824] usb 1-1: USB disconnect, device number 11
[  169.809838][   T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  169.847191][   T27] quatech2 5-1:0.51: device disconnected
[  169.950058][ T8588] openvswitch: netlink: Actions may not be safe on all matching packets
[  170.491392][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'.
[  170.661727][ T8618] loop2: detected capacity change from 0 to 256
[  170.670753][ T8618] exfat: Deprecated parameter 'namecase'
[  170.697189][ T8616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1021'.
[  170.732245][ T8618] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  170.936083][ T8629] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1027'.
[  171.336927][ T8646] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1034'.
[  171.943607][ T8636] loop2: detected capacity change from 0 to 32768
[  172.020018][ T8636] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.031838][ T8676] loop4: detected capacity change from 0 to 256
[  172.073288][ T8676] exfat: Deprecated parameter 'utf8'
[  172.078822][ T8676] exfat: Deprecated parameter 'namecase'
[  172.088285][ T8676] exfat: Deprecated parameter 'utf8'
[  172.116525][ T8682] loop3: detected capacity change from 0 to 256
[  172.174649][ T8676] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  172.207440][ T5837] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  172.231309][ T8682] FAT-fs (loop3): Directory bread(block 64) failed
[  172.260568][ T8636] XFS (loop2): Ending clean mount
[  172.283967][ T8682] FAT-fs (loop3): Directory bread(block 65) failed
[  172.301694][ T8682] FAT-fs (loop3): Directory bread(block 66) failed
[  172.304742][ T8636] XFS (loop2): Quotacheck needed: Please wait.
[  172.320247][ T8682] FAT-fs (loop3): Directory bread(block 67) failed
[  172.331393][ T8682] FAT-fs (loop3): Directory bread(block 68) failed
[  172.344255][ T8682] FAT-fs (loop3): Directory bread(block 69) failed
[  172.353983][ T8682] FAT-fs (loop3): Directory bread(block 70) failed
[  172.364474][ T8682] FAT-fs (loop3): Directory bread(block 71) failed
[  172.372838][ T8682] FAT-fs (loop3): Directory bread(block 72) failed
[  172.391555][ T8682] FAT-fs (loop3): Directory bread(block 73) failed
[  172.434831][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.453726][ T8636] XFS (loop2): Quotacheck: Done.
[  172.467895][ T5837] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  172.480941][ T5837] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  172.490637][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.553797][ T5837] usb 1-1: config 0 descriptor??
[  172.605715][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.967045][ T8689] loop3: detected capacity change from 0 to 256
[  172.990726][ T5837] Bluetooth: Can't get version to change to load ram patch err
[  173.005094][ T5837] Bluetooth: Loading patch file failed
[  173.016843][ T8689] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  173.028898][ T5837] ath3k: probe of 1-1:0.0 failed with error -71
[  173.037731][ T5837] usb 1-1: USB disconnect, device number 12
[  173.229982][ T8685] loop4: detected capacity change from 0 to 32768
[  173.883454][ T8691] loop2: detected capacity change from 0 to 32768
[  173.922594][ T8691] XFS: ikeep mount option is deprecated.
[  173.993506][ T8691] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  174.158644][ T8691] XFS (loop2): Ending clean mount
[  174.184556][ T8691] XFS (loop2): Quotacheck needed: Please wait.
[  174.208380][ T8696] loop4: detected capacity change from 0 to 32768
[  174.243542][   T28] audit: type=1800 audit(1751065191.465:18): pid=8696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1054" name="file1" dev="loop4" ino=4 res=0 errno=0
[  174.328558][ T8691] XFS (loop2): Quotacheck: Done.
[  174.498921][ T5771] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  174.792549][ T8725] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1066'.
[  174.895013][ T8713] loop3: detected capacity change from 0 to 32768
[  174.973418][ T8713] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  174.987490][ T8713] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  175.113959][ T8713] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  175.260953][ T8738] loop4: detected capacity change from 0 to 1024
[  175.273905][ T8713] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  175.291480][ T8738] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  175.371870][ T8738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.601463][ T6364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.826796][ T8757] loop0: detected capacity change from 0 to 2048
[  175.853513][ T8757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.932731][ T8761] loop3: detected capacity change from 0 to 256
[  176.104643][ T8765] loop2: detected capacity change from 0 to 512
[  176.146607][ T8765] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  176.204004][ T8765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  176.250505][ T8765] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.476054][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  176.650962][ T8780] loop3: detected capacity change from 0 to 1024
[  176.676987][ T8780] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  176.732511][ T8780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.769162][ T8780] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.898368][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.917508][   T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  177.119165][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  177.131184][   T27] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00
[  177.162031][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.202506][   T27] usb 3-1: config 0 descriptor??
[  177.385909][ T5837] IPVS: starting estimator thread 0...
[  177.487721][ T8805] IPVS: using max 21 ests per chain, 50400 per kthread
[  177.607189][ T8809] loop0: detected capacity change from 0 to 1024
[  177.625582][ T8809] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  177.686080][   T27] aquacomputer_d5next 0003:0C70:F0BD.0018: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.2-1/input0
[  177.729758][ T8809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.809397][ T8800] loop3: detected capacity change from 0 to 32768
[  177.900265][ T8800] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.918340][   T27] usb 3-1: USB disconnect, device number 13
[  178.013701][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.184057][ T8800] XFS (loop3): Ending clean mount
[  178.346760][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.415362][ T8836] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64)
[  178.994522][ T8852] loop2: detected capacity change from 0 to 4096
[  179.015124][ T8852] NILFS (loop2): invalid segment: Checksum error in segment payload
[  179.036751][ T8852] NILFS (loop2): trying rollback from an earlier position
[  179.107379][ T8852] NILFS (loop2): recovery complete
[  179.122378][   T28] audit: type=1326 audit(1751065196.335:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3bb8e929 code=0x7fc00000
[  179.581152][ T8864] Process accounting resumed
[  179.615569][ T8854] loop0: detected capacity change from 0 to 32768
[  179.696351][ T8871] loop4: detected capacity change from 0 to 512
[  179.705781][ T8854] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  179.821248][ T8871] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.1125: corrupted inode contents
[  179.881195][ T8871] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #16: comm syz.4.1125: mark_inode_dirty error
[  179.901817][ T8871] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.1125: corrupted inode contents
[  179.914553][ T5772] ocfs2: Unmounting device (7,0) on (node local)
[  179.963386][ T8871] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.1125: mark_inode_dirty error
[  179.994660][ T8871] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.1125: corrupted inode contents
[  180.028448][ T8871] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  180.053544][ T8871] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.1125: corrupted inode contents
[  180.078890][ T8871] EXT4-fs error (device loop4): ext4_truncate:4288: inode #16: comm syz.4.1125: mark_inode_dirty error
[  180.116066][ T8871] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  180.144233][ T8871] EXT4-fs (loop4): 1 truncate cleaned up
[  180.159564][ T8871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.178831][  T141] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  180.182426][ T8871] ext4 filesystem being mounted at /199/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.207038][  T141] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:5: Failed to release dquot type 1
[  180.327406][   T28] audit: type=1800 audit(1751065197.545:20): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1125" name="file2" dev="loop4" ino=16 res=0 errno=0
[  180.422896][ T6364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.535424][ T8899] loop0: detected capacity change from 0 to 1024
[  180.576251][   T28] audit: type=1800 audit(1751065197.795:21): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1135" name="file2" dev="loop0" ino=22 res=0 errno=0
[  180.637989][   T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  180.729711][ T8903] loop4: detected capacity change from 0 to 1024
[  180.795482][ T8903] hfsplus: bad catalog entry type
[  180.862649][   T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.885707][  T141] hfsplus: b-tree write err: -5, ino 4
[  180.895153][   T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  180.923082][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.951137][   T27] usb 4-1: Product: syz
[  180.958369][   T27] usb 4-1: Manufacturer: syz
[  180.963105][   T27] usb 4-1: SerialNumber: syz
[  180.973356][ T8909] loop2: detected capacity change from 0 to 512
[  180.998651][ T8909] EXT4-fs: Ignoring removed nobh option
[  181.006805][ T8909] ext3: Bad value for 'min_batch_time'
[  181.028236][ T8913] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1140'.
[  181.037700][ T8913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1140'.
[  181.205600][   T27] cdc_ncm 4-1:1.0: bind() failure
[  181.224713][   T27] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  181.235168][   T27] cdc_ncm 4-1:1.1: bind() failure
[  181.254498][   T27] usb 4-1: USB disconnect, device number 12
[  181.327527][ T5837] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  181.437412][ T5861] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  181.521809][ T5837] usb 3-1: Using ep0 maxpacket: 32
[  181.542491][ T5837] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  181.550915][ T5837] usb 3-1: config 0 has no interface number 0
[  181.557044][ T5837] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  181.562346][ T8919] loop0: detected capacity change from 0 to 40427
[  181.567590][ T5837] usb 3-1: config 0 interface 196 has no altsetting 0
[  181.572796][ T5837] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  181.591230][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.592469][ T8919] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7
[  181.599411][ T5837] usb 3-1: Product: syz
[  181.599437][ T5837] usb 3-1: Manufacturer: syz
[  181.599450][ T5837] usb 3-1: SerialNumber: syz
[  181.623742][ T5837] usb 3-1: config 0 descriptor??
[  181.633794][ T8909] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  181.634799][ T8919] F2FS-fs (loop0): invalid crc value
[  181.650501][ T5861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.663400][ T8919] F2FS-fs (loop0): Found nat_bits in checkpoint
[  181.673941][ T5861] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  181.701715][ T5861] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  181.720764][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.733237][ T5861] usb 5-1: config 0 descriptor??
[  181.741545][ T5861] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  181.748608][ T5861] dvb-usb: bulk message failed: -22 (3/0)
[  181.758787][ T5861] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  181.773442][ T5861] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  181.788908][ T5861] usb 5-1: media controller created
[  181.800105][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  181.804304][ T8919] F2FS-fs (loop0): Start checkpoint disabled!
[  181.830686][ T8919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  181.853259][ T5837] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  181.860676][ T5861] dvb-usb: bulk message failed: -22 (6/0)
[  181.860772][ T5861] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  181.869139][ T5861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20
[  181.932790][ T5837] ipheth: probe of 3-1:0.196 failed with error -71
[  181.960718][ T8915] dvb-usb: bulk message failed: -22 (2/0)
[  181.977863][ T5861] dvb-usb: schedule remote query interval to 150 msecs.
[  181.984893][ T5861] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  181.993728][ T5837] usb 3-1: USB disconnect, device number 14
[  182.033853][ T5861] usb 5-1: USB disconnect, device number 9
[  182.116997][ T5861] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  182.202917][ T4922] kworker/u4:11: attempt to access beyond end of device
[  182.202917][ T4922] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  182.232902][ T4922] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  182.241205][ T4922] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  183.110071][ T8933] loop3: detected capacity change from 0 to 32768
[  183.148703][ T8933] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  183.303275][ T7590] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  183.811596][ T8943] loop0: detected capacity change from 0 to 32768
[  183.893723][ T8943] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  183.914018][ T8973] loop4: detected capacity change from 0 to 128
[  183.960951][ T8973] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  184.016924][ T8943] XFS (loop0): Ending clean mount
[  184.044739][ T8943] XFS (loop0): Quotacheck needed: Please wait.
[  184.176814][ T8943] XFS (loop0): Quotacheck: Done.
[  184.249653][ T8973] UDF-fs: bad mount option "noquota" or missing value
[  184.296862][ T8958] loop2: detected capacity change from 0 to 32768
[  184.407704][ T5772] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.563314][ T8958] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  184.794691][ T5771] ocfs2: Unmounting device (7,2) on (node local)
[  184.850420][ T8964] loop3: detected capacity change from 0 to 32768
[  185.609571][ T9006] loop4: detected capacity change from 0 to 1024
[  185.669398][ T9006] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  185.677206][ T9006] hfsplus: xattr searching failed
[  185.685491][ T9006] syz.4.1181: attempt to access beyond end of device
[  185.685491][ T9006] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  185.701517][ T9006] Buffer I/O error on dev loop4, logical block 2889, async page read
[  185.714509][ T9006] syz.4.1181: attempt to access beyond end of device
[  185.714509][ T9006] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  185.732110][ T9006] Buffer I/O error on dev loop4, logical block 2889, async page read
[  185.744482][   T28] audit: type=1800 audit(1751065202.965:22): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1181" name="file1" dev="loop4" ino=20 res=0 errno=0
[  185.764792][ T9006] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  185.777466][ T9006] hfsplus: xattr searching failed
[  185.785209][ T9006] hfsplus: can't free extent
[  186.064018][ T9016] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.074949][ T9016] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.084044][ T9016] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.092856][ T9016] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.112402][ T9016] Zero length message leads to an empty skb
[  186.342625][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  186.348966][ T5783] Bluetooth: hci1: command 0x0406 tx timeout
[  186.355000][ T5779] Bluetooth: hci2: command 0x0406 tx timeout
[  186.850610][ T9049] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1201'.
[  186.859976][ T9049] netlink: 'syz.0.1201': attribute type 9 has an invalid length.
[  187.705788][ T9077] loop4: detected capacity change from 0 to 1024
[  187.724887][ T9055] loop2: detected capacity change from 0 to 32768
[  187.733834][ T9055] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1203 (9055)
[  187.769082][ T9055] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  187.788882][ T9055] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  187.829754][ T9077] hfsplus: bad catalog entry type
[  187.841493][ T9055] BTRFS info (device loop2): using free space tree
[  187.921981][ T4906] hfsplus: b-tree write err: -5, ino 4
[  188.056060][ T9055] BTRFS info (device loop2): enabling ssd optimizations
[  188.078752][ T9055] BTRFS info (device loop2): auto enabling async discard
[  188.199872][ T9070] loop0: detected capacity change from 0 to 32768
[  188.285646][ T9070] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.351702][ T5771] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  188.497918][ T5089] Bluetooth: hci0: command 0x0406 tx timeout
[  188.577934][ T9070] XFS (loop0): Ending clean mount
[  188.637508][ T5824] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  188.807359][ T5762] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  188.850836][ T5772] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.859579][ T5824] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  188.859608][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.868733][ T5824] usb 5-1: config 0 descriptor??
[  189.000774][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  189.018164][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.059054][ T5762] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  189.077334][ T5762] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0
[  189.096137][ T5762] usb 4-1: Manufacturer: syz
[  189.108604][ T5762] usb 4-1: config 0 descriptor??
[  189.128059][ T5762] hub 4-1:0.0: USB hub found
[  189.213480][ T9118] loop2: detected capacity change from 0 to 32768
[  189.291451][ T9118] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  189.368989][ T5762] hub 4-1:0.0: 1 port detected
[  189.410706][ T5771] ocfs2: Unmounting device (7,2) on (node local)
[  189.549596][ T5824] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  189.587533][ T5824] asix: probe of 5-1:0.0 failed with error -71
[  189.616197][ T5824] usb 5-1: USB disconnect, device number 10
[  189.767822][ T5861] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  189.790362][ T5762] usb 4-1: USB disconnect, device number 13
[  189.979566][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  189.995416][ T5861] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00
[  190.006090][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.025407][ T5861] usb 1-1: config 0 descriptor??
[  190.472219][ T5861] aquacomputer_d5next 0003:0C70:F0BD.0019: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.0-1/input0
[  190.529030][ T9151] loop4: detected capacity change from 0 to 1024
[  190.551350][ T9151] EXT4-fs: Ignoring removed orlov option
[  190.642140][ T9151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.705105][ T9151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.813789][ T5837] usb 1-1: USB disconnect, device number 13
[  191.026617][ T9168] loop4: detected capacity change from 0 to 512
[  191.048264][ T9168] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  191.093031][ T9168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.132190][ T9168] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  191.229769][ T9168] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 25 (only 1 groups)
[  191.280681][ T6364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.389701][ T9180] loop3: detected capacity change from 0 to 1024
[  191.531340][ T9185] loop0: detected capacity change from 0 to 1024
[  191.565251][ T9185] EXT4-fs: Ignoring removed orlov option
[  191.590051][   T75] hfsplus: b-tree write err: -5, ino 4
[  191.610850][ T9185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.742037][ T9194] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1257'.
[  191.854996][ T9197] loop4: detected capacity change from 0 to 256
[  191.876663][ T9185] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.902951][ T9197] FAT-fs (loop4): Directory bread(block 1285) failed
[  191.976130][ T9197] FAT-fs (loop4): FAT read failed (blocknr 1281)
[  192.666558][ T9229] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  193.107402][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  193.255922][ T9250] loop3: detected capacity change from 0 to 512
[  193.306073][ T9250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.309312][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.339974][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.360572][    T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  193.383805][ T9250] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  193.385081][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.401592][ T9224] loop0: detected capacity change from 0 to 32768
[  193.426963][    T9] usb 5-1: config 0 descriptor??
[  193.468665][ T9250] EXT4-fs (loop3): resizing filesystem from 128 to 1 blocks
[  193.511424][ T9250] EXT4-fs warning (device loop3): ext4_resize_fs:2048: can't shrink FS - resize aborted
[  193.621509][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.793824][ T9242] loop2: detected capacity change from 0 to 32768
[  193.855324][    T9] hid-steam 0003:28DE:1142.001A: unknown main item tag 0x0
[  193.902242][    T9] hid-steam 0003:28DE:1142.001A: unknown main item tag 0x0
[  193.928875][    T9] hid-steam 0003:28DE:1142.001A: unknown main item tag 0x0
[  193.944879][    T9] hid-steam 0003:28DE:1142.001A: unknown main item tag 0x0
[  193.952483][    T9] hid-steam 0003:28DE:1142.001A: unknown main item tag 0x0
[  193.970437][    T9] hid-steam 0003:28DE:1142.001A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  194.081206][ T5861] usb 5-1: USB disconnect, device number 11
[  194.140198][ T9265] fido_id[9265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  194.508173][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.514531][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.812399][ T9289] loop0: detected capacity change from 0 to 164
[  194.940202][ T9291] loop2: detected capacity change from 0 to 4096
[  195.011518][ T9293] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.337625][ T1188] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  195.539937][ T1188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.561695][ T1188] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  195.584339][ T1188] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  195.598217][ T1188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.633864][ T1188] usb 1-1: config 0 descriptor??
[  195.655606][ T1188] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  195.683311][ T1188] dvb-usb: bulk message failed: -22 (3/0)
[  195.702797][ T1188] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  195.726162][ T1188] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  195.730434][ T9312] loop3: detected capacity change from 0 to 4096
[  195.754173][ T1188] usb 1-1: media controller created
[  195.778597][ T9312] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  195.782324][ T1188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  195.858669][ T1188] dvb-usb: bulk message failed: -22 (6/0)
[  195.864544][ T1188] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  195.880673][ T9296] dvb-usb: bulk message failed: -22 (2/0)
[  195.888064][ T9312] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[  195.914681][ T1188] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22
[  195.964265][ T1188] dvb-usb: schedule remote query interval to 150 msecs.
[  195.988199][ T1188] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  196.037673][ T1188] usb 1-1: USB disconnect, device number 14
[  196.162054][ T1188] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  196.801291][ T9350] loop0: detected capacity change from 0 to 4096
[  196.873198][ T9355] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.017726][ T9357] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  197.047305][ T9357] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12)
[  197.067078][ T9362] loop3: detected capacity change from 0 to 1024
[  197.120800][ T9357] Remounting filesystem read-only
[  197.147564][ T9357] NILFS (loop0): error -5 truncating bmap (ino=12)
[  197.208588][ T9362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.259189][ T5772] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  197.276961][ T5772] NILFS (loop0): discard dirty page: offset=0, ino=18
[  197.284627][ T5772] NILFS (loop0): discard dirty block: blocknr=0, size=4096
[  197.290190][ T9362] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.292104][ T5772] NILFS (loop0): discard dirty page: offset=0, ino=2
[  197.310037][ T5772] NILFS (loop0): discard dirty block: blocknr=14, size=4096
[  197.317762][ T5772] NILFS (loop0): discard dirty page: offset=0, ino=6
[  197.324563][ T5772] NILFS (loop0): discard dirty block: blocknr=23, size=4096
[  197.332059][ T5772] NILFS (loop0): discard dirty page: offset=4096, ino=6
[  197.339972][ T5772] NILFS (loop0): discard dirty block: blocknr=24, size=4096
[  197.347516][ T5772] NILFS (loop0): discard dirty page: offset=8192, ino=6
[  197.354554][ T5772] NILFS (loop0): discard dirty block: blocknr=25, size=4096
[  197.363618][ T5772] NILFS (loop0): discard dirty page: offset=0, ino=3
[  197.375666][ T5772] NILFS (loop0): discard dirty block: blocknr=28, size=4096
[  197.392163][ T5772] NILFS (loop0): discard dirty page: offset=4096, ino=3
[  197.404799][ T5772] NILFS (loop0): discard dirty block: blocknr=29, size=4096
[  197.423752][ T9362] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 1: comm syz.3.1316: lblock 1 mapped to illegal pblock 1 (length 15)
[  197.447366][ T5772] NILFS (loop0): discard dirty page: offset=270336, ino=3
[  197.454537][ T5772] NILFS (loop0): discard dirty block: blocknr=0, size=4096
[  197.481976][ T9362] EXT4-fs (loop3): Remounting filesystem read-only
[  197.608685][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.756696][ T9379] loop2: detected capacity change from 0 to 1024
[  197.813720][ T9379] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  197.842467][ T9379] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  197.901825][ T9379] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  197.948404][ T9379] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.1325: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  197.980716][ T9379] EXT4-fs (loop2): no journal found
[  197.985976][ T9379] EXT4-fs (loop2): can't get journal size
[  198.009081][ T9379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  198.195168][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.511968][ T9402] loop4: detected capacity change from 0 to 1024
[  198.691422][   T42] hfsplus: b-tree write err: -5, ino 4
[  198.864197][ T9409] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1337'.
[  199.097853][ T9417] loop4: detected capacity change from 0 to 128
[  199.185337][ T9417] vxfs: WRONG superblock magic 7b3185b5 at 1
[  199.210833][ T9417] vxfs: WRONG superblock magic 7b318cb5 at 8
[  199.232331][ T9417] vxfs: can't find superblock.
[  199.356071][ T9423] pim6reg: entered allmulticast mode
[  199.412402][ T9423] pim6reg: left allmulticast mode
[  199.762442][ T9400] loop0: detected capacity change from 0 to 32768
[  199.852124][ T9400] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1333 (9400)
[  199.915497][ T9431] loop4: detected capacity change from 0 to 256
[  200.031230][ T9431] FAT-fs (loop4): Directory bread(block 64) failed
[  200.039244][ T9431] FAT-fs (loop4): Directory bread(block 65) failed
[  200.058691][ T9431] FAT-fs (loop4): Directory bread(block 66) failed
[  200.077304][ T9431] FAT-fs (loop4): Directory bread(block 67) failed
[  200.085966][ T9431] FAT-fs (loop4): Directory bread(block 68) failed
[  200.115521][ T9431] FAT-fs (loop4): Directory bread(block 69) failed
[  200.117393][ T9400] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  200.147586][ T9431] FAT-fs (loop4): Directory bread(block 70) failed
[  200.154183][ T9431] FAT-fs (loop4): Directory bread(block 71) failed
[  200.191710][ T9431] FAT-fs (loop4): Directory bread(block 72) failed
[  200.226213][ T9431] FAT-fs (loop4): Directory bread(block 73) failed
[  200.245904][ T9400] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  200.281028][ T9421] loop2: detected capacity change from 0 to 40427
[  200.287814][ T9400] BTRFS info (device loop0): using free space tree
[  200.324029][ T9421] F2FS-fs (loop2): build fault injection attr: rate: 691, type: 0x7ffff
[  200.349239][ T9421] F2FS-fs (loop2): Image doesn't support compression
[  200.369956][ T9421] F2FS-fs (loop2): invalid crc value
[  200.418847][ T9421] F2FS-fs (loop2): Found nat_bits in checkpoint
[  200.652921][ T9400] BTRFS info (device loop0): enabling ssd optimizations
[  200.702392][ T9421] F2FS-fs (loop2): Start checkpoint disabled!
[  200.714744][ T9400] BTRFS info (device loop0): auto enabling async discard
[  200.743902][ T9421] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  200.820762][   T28] audit: type=1800 audit(1751065218.045:23): pid=9421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1343" name="file2" dev="loop2" ino=10 res=0 errno=0
[  200.877634][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'.
[  200.886619][ T9456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1352'.
[  201.149990][   T48] kworker/u4:3: attempt to access beyond end of device
[  201.149990][   T48] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  201.209612][   T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  201.216552][   T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  201.244231][ T9462] loop4: detected capacity change from 0 to 128
[  201.563915][ T5772] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  202.397111][   T28] audit: type=1326 audit(1751065219.615:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9482 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f098e929 code=0x7ffc0000
[  202.467405][   T28] audit: type=1326 audit(1751065219.615:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9482 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f098e929 code=0x7ffc0000
[  202.537562][   T28] audit: type=1326 audit(1751065219.655:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9482 comm="syz.3.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f44f098e929 code=0x7ffc0000
[  202.601473][   T28] audit: type=1326 audit(1751065219.655:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9482 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f098e929 code=0x7ffc0000
[  202.686152][   T28] audit: type=1326 audit(1751065219.655:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9482 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f098e929 code=0x7ffc0000
[  202.737309][   T28] audit: type=1326 audit(1751065219.695:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9482 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f44f098e929 code=0x7ffc0000
[  202.795811][   T28] audit: type=1326 audit(1751065219.695:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9482 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f098e929 code=0x7ffc0000
[  202.878300][   T28] audit: type=1326 audit(1751065219.695:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9482 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f098e929 code=0x7ffc0000
[  202.937433][ T1188] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  203.114865][ T9487] loop2: detected capacity change from 0 to 32768
[  203.129115][ T9487] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1367 (9487)
[  203.130298][ T1188] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.177599][ T9498] loop4: detected capacity change from 0 to 16
[  203.184565][ T1188] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  203.200165][ T1188] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  203.203928][ T9498] erofs: (device loop4): mounted with root inode @ nid 36.
[  203.237465][ T9487] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  203.259206][ T1188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.270994][ T9487] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  203.304253][ T9487] BTRFS info (device loop2): using free space tree
[  203.305209][ T1188] usb 4-1: config 0 descriptor??
[  203.352183][ T1188] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  203.387545][ T1188] dvb-usb: bulk message failed: -22 (3/0)
[  203.444221][ T1188] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  203.477814][ T1188] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  203.482395][ T9487] BTRFS info (device loop2): enabling ssd optimizations
[  203.497348][ T1188] usb 4-1: media controller created
[  203.504134][ T1188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  203.523215][ T9487] BTRFS info (device loop2): auto enabling async discard
[  203.563239][ T1188] dvb-usb: bulk message failed: -22 (6/0)
[  203.592569][ T1188] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  203.627451][ T1188] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23
[  203.676879][ T1188] dvb-usb: schedule remote query interval to 150 msecs.
[  203.727344][ T1188] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  203.753867][ T1188] usb 4-1: USB disconnect, device number 14
[  203.865260][ T1188] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  203.994666][ T5771] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  204.015421][ T9494] loop0: detected capacity change from 0 to 32768
[  204.073943][ T9494] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  204.243325][ T9494] XFS (loop0): Ending clean mount
[  204.254241][ T9494] XFS (loop0): Quotacheck needed: Please wait.
[  204.352296][ T9494] XFS (loop0): Quotacheck: Done.
[  204.553455][ T5772] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  204.937618][ T5861] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  205.052234][ T9551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1385'.
[  205.107375][   T27] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  205.148117][ T5861] usb 4-1: Using ep0 maxpacket: 32
[  205.158077][ T5861] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  205.176398][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.194979][ T5861] usb 4-1: Product: syz
[  205.205117][ T5861] usb 4-1: Manufacturer: syz
[  205.213685][ T5861] usb 4-1: SerialNumber: syz
[  205.229864][ T5861] usb 4-1: config 0 descriptor??
[  205.248792][ T5861] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  205.301288][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  205.321501][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.337397][   T27] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  205.346761][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.360233][   T27] usb 5-1: config 0 descriptor??
[  205.482538][ T9549] loop0: detected capacity change from 0 to 32768
[  205.485183][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'.
[  205.783192][   T27] isku 0003:1E7D:319C.001B: item fetching failed at offset 5/7
[  205.798520][   T27] isku 0003:1E7D:319C.001B: parse failed
[  205.804567][   T27] isku: probe of 0003:1E7D:319C.001B failed with error -22
[  205.866183][ T5861] gspca_ov534_9: reg_w failed -71
[  206.015290][ T9573] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1395'.
[  206.019213][ T1188] usb 5-1: USB disconnect, device number 12
[  206.037568][ T5824] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  206.237820][ T5824] usb 3-1: Using ep0 maxpacket: 8
[  206.256137][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.268183][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.278435][ T5824] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  206.288396][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.300721][ T5824] usb 3-1: config 0 descriptor??
[  206.310722][ T5861] gspca_ov534_9: Unknown sensor 0000
[  206.310796][ T5861] ov534_9: probe of 4-1:0.0 failed with error -22
[  206.333266][ T5861] usb 4-1: USB disconnect, device number 15
[  206.682391][ T9594] program syz.4.1406 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  206.733866][ T5824] hid-multitouch 0003:0EEF:72C4.001C: unknown main item tag 0x0
[  206.749564][ T5824] hid-multitouch 0003:0EEF:72C4.001C: unknown main item tag 0x0
[  206.790753][ T5824] hid-multitouch 0003:0EEF:72C4.001C: unknown main item tag 0x0
[  206.800445][ T5824] hid-multitouch 0003:0EEF:72C4.001C: unknown main item tag 0x0
[  206.812027][ T5824] hid-multitouch 0003:0EEF:72C4.001C: unknown main item tag 0x0
[  206.826415][ T5824] hid-multitouch 0003:0EEF:72C4.001C: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0
[  207.019024][ T5824] usb 3-1: USB disconnect, device number 15
[  207.504669][ T1188] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  207.719763][ T1188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.741092][ T1188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.779855][ T9631] loop2: detected capacity change from 0 to 512
[  207.786731][ T1188] usb 5-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  207.807864][ T1188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.828267][ T1188] usb 5-1: config 0 descriptor??
[  207.881939][ T9631] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1423: dx entry: limit 1024 != root limit 124
[  207.935231][ T9631] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1423: Corrupt directory, running e2fsck is recommended
[  207.995491][ T9620] loop0: detected capacity change from 0 to 40427
[  208.021630][ T9620] F2FS-fs (loop0): invalid crc value
[  208.053913][ T9631] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  208.064168][ T9631] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.1423: corrupted in-inode xattr: invalid ea_ino
[  208.083638][ T9620] F2FS-fs (loop0): Found nat_bits in checkpoint
[  208.126814][ T9631] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1423: couldn't read orphan inode 15 (err -117)
[  208.170273][ T9631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.198269][ T9620] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  208.291300][ T1188] waltop 0003:172F:0038.001D: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.4-1/input0
[  208.324719][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.541811][   T27] usb 5-1: USB disconnect, device number 13
[  209.044097][ T9661] loop0: detected capacity change from 0 to 64
[  209.147392][ T1188] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  209.291129][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1439'.
[  209.314945][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1439'.
[  209.339527][ T1188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.357729][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1439'.
[  209.366735][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1439'.
[  209.372442][ T1188] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  209.413181][ T1188] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  209.437652][ T1188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.457689][ T5837] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  209.469548][ T1188] usb 3-1: config 0 descriptor??
[  209.503578][ T9675] loop3: detected capacity change from 0 to 8
[  209.545900][ T9675] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1441'.
[  209.671231][ T5837] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  209.683822][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.693176][ T5837] usb 5-1: Product: syz
[  209.700600][ T5837] usb 5-1: Manufacturer: syz
[  209.706121][ T5837] usb 5-1: SerialNumber: syz
[  209.720455][ T5837] usb 5-1: config 0 descriptor??
[  209.738366][ T5837] ch341 5-1:0.0: ch341-uart converter detected
[  209.907800][ T1188] lenovo 0003:17EF:6067.001E: unknown main item tag 0xd
[  209.920440][ T1188] lenovo 0003:17EF:6067.001E: hidraw0: USB HID v0.01 Device [HID 17ef:6067] on usb-dummy_hcd.2-1/input0
[  210.171496][ T1188] usb 3-1: USB disconnect, device number 16
[  210.371141][ T5837] usb 5-1: failed to send control message: -71
[  210.378980][ T9685] loop3: detected capacity change from 0 to 32768
[  210.387685][ T5837] ch341-uart: probe of ttyUSB0 failed with error -71
[  210.413604][ T9687] loop0: detected capacity change from 0 to 32768
[  210.432537][ T5837] usb 5-1: USB disconnect, device number 14
[  210.434160][ T9685] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  210.440696][ T5837] ch341 5-1:0.0: device disconnected
[  210.515397][ T9687] JBD2: Ignoring recovery information on journal
[  210.526341][ T9685] XFS (loop3): Ending clean mount
[  210.544813][ T9685] XFS (loop3): Quotacheck needed: Please wait.
[  210.605480][ T9687] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  210.653460][ T9685] XFS (loop3): Quotacheck: Done.
[  210.821503][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  210.837106][ T5772] ocfs2: Unmounting device (7,0) on (node local)
[  211.240735][ T9708] loop2: detected capacity change from 0 to 1024
[  211.349274][ T9708] hfsplus: invalid extended attribute record
[  211.654730][  T141] hfsplus: b-tree write err: -5, ino 4
[  212.016280][ T9732] loop0: detected capacity change from 0 to 512
[  212.041515][ T9732] EXT4-fs (loop0): Test dummy encryption mode enabled
[  212.053489][ T9732] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  212.081634][ T9732] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1463: bad orphan inode 131083
[  212.113828][ T9732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.215806][ T9737] loop2: detected capacity change from 0 to 4096
[  212.310123][ T9739] loop3: detected capacity change from 0 to 128
[  212.362164][ T9737] ntfs3: loop2: ino=1e, "file1" attr_set_size
[  212.374495][ T9739] FAT-fs (loop3): Directory bread(block 128) failed
[  212.384136][ T9737] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  212.390993][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.407563][ T9739] FAT-fs (loop3): Directory bread(block 129) failed
[  212.414231][ T9739] FAT-fs (loop3): Directory bread(block 130) failed
[  212.496604][ T9739] FAT-fs (loop3): Directory bread(block 131) failed
[  212.528929][ T9739] FAT-fs (loop3): Directory bread(block 132) failed
[  212.535598][ T9739] FAT-fs (loop3): Directory bread(block 133) failed
[  212.560992][ T9739] FAT-fs (loop3): Directory bread(block 134) failed
[  212.568849][ T9739] FAT-fs (loop3): Directory bread(block 135) failed
[  212.575812][ T9739] FAT-fs (loop3): Directory bread(block 136) failed
[  212.578275][ T9721] loop4: detected capacity change from 0 to 32768
[  212.590611][ T9739] FAT-fs (loop3): Directory bread(block 137) failed
[  212.664018][ T9721] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  212.828277][ T9721] XFS (loop4): Ending clean mount
[  212.860782][ T9721] XFS (loop4): Quotacheck needed: Please wait.
[  212.980076][ T9721] XFS (loop4): Quotacheck: Done.
[  213.179787][ T6364] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  213.207487][ T9765] loop3: detected capacity change from 0 to 16
[  213.229183][ T9765] erofs: (device loop3): mounted with root inode @ nid 36.
[  213.417749][ T1188] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  213.619735][ T1188] usb 3-1: Using ep0 maxpacket: 16
[  213.658910][ T1188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.683090][ T1188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.708244][ T1188] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  213.728380][ T1188] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  213.739005][ T1188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.757466][ T1188] usb 3-1: config 0 descriptor??
[  213.961628][ T9784] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  213.981224][ T9785] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  213.981224][ T9785] The task syz.4.1484 (9785) triggered the difference, watch for misbehavior.
[  214.118657][ T9789] loop0: detected capacity change from 0 to 512
[  214.146247][ T9789] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1487: dx entry: limit 1024 != root limit 124
[  214.157709][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  214.168600][ T9789] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1487: Corrupt directory, running e2fsck is recommended
[  214.193213][ T1188] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max
[  214.199529][ T9789] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  214.212980][ T1188] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001F/input/input24
[  214.229654][ T9789] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.1487: corrupted in-inode xattr: invalid ea_ino
[  214.248577][ T9789] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1487: couldn't read orphan inode 15 (err -117)
[  214.264970][ T9789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.354530][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.373785][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.399016][    T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  214.426214][    T9] usb 4-1: config 1 has no interface number 1
[  214.443581][ T1188] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  214.466258][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  214.499639][    T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  214.522096][ T1188] usb 3-1: USB disconnect, device number 17
[  214.559361][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  214.583008][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.604063][ T9793] fido_id[9793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  214.607388][    T9] usb 4-1: Product: syz
[  214.665880][    T9] usb 4-1: Manufacturer: syz
[  214.678067][    T9] usb 4-1: SerialNumber: syz
[  214.693027][ T9779] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  214.959698][    T9] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  214.978934][    T9] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  215.063569][ T9806] loop4: detected capacity change from 0 to 4096
[  215.096332][ T9806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.133635][    T9] usb 4-1: USB disconnect, device number 16
[  215.205669][ T9806] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.1492: corrupted inode contents
[  215.258895][ T9806] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #15: comm syz.4.1492: mark_inode_dirty error
[  215.296412][ T9806] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.1492: corrupted inode contents
[  215.343822][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  215.384346][ T9806] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1492: mark_inode_dirty error
[  215.418187][ T9806] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.1492: corrupted inode contents
[  215.458092][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'.
[  215.465288][ T9806] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1492: mark_inode_dirty error
[  215.479823][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'.
[  215.484533][ T9806] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.1492: corrupted inode contents
[  215.520448][ T9806] EXT4-fs error (device loop4): ext4_truncate:4288: inode #15: comm syz.4.1492: mark_inode_dirty error
[  215.523029][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'.
[  215.537121][ T9806] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem
[  215.557432][ T9811] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.1492: corrupted inode contents
[  215.564402][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'.
[  215.663383][ T6364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.114154][ T9831] loop3: detected capacity change from 0 to 1024
[  216.460379][ T9833] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1504'.
[  216.611765][ T9825] loop4: detected capacity change from 0 to 32768
[  216.620051][ T9821] loop2: detected capacity change from 0 to 32768
[  216.640349][ T9821] XFS: attr2 mount option is deprecated.
[  216.643860][ T9825] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  216.661124][ T9821] XFS: ikeep mount option is deprecated.
[  216.694464][ T9821] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  216.721736][ T9825] XFS (loop4): Ending clean mount
[  216.781877][ T9825] XFS (loop4): Quotacheck needed: Please wait.
[  216.788335][ T5824] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  216.817162][ T9855] loop3: detected capacity change from 0 to 256
[  216.828883][ T9855] exfat: Deprecated parameter 'utf8'
[  216.852219][ T9855] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  216.906544][ T9825] XFS (loop4): Quotacheck: Done.
[  216.943600][ T9821] XFS (loop2): Ending clean mount
[  216.958861][ T9821] XFS (loop2): Quotacheck needed: Please wait.
[  216.987424][ T5824] usb 1-1: Using ep0 maxpacket: 16
[  217.015062][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.051378][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.063109][ T6364] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.068664][ T9821] XFS (loop2): Quotacheck: Done.
[  217.079139][ T5824] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  217.094542][ T5824] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  217.123207][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.136079][ T5824] usb 1-1: config 0 descriptor??
[  217.229761][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  217.245881][ T9857] tipc: Started in network mode
[  217.251828][ T9857] tipc: Node identity 0500000000000000faffffffffffffff, cluster identity 3
[  217.562011][ T9862] loop3: detected capacity change from 0 to 1024
[  217.599776][ T9862] hfsplus: invalid extended attribute record
[  217.620121][ T5824] hid-generic 0003:0457:07DA.0020: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0
[  217.672090][ T4922] hfsplus: b-tree write err: -5, ino 4
[  217.827105][ T5824] usb 1-1: USB disconnect, device number 15
[  217.833264][ T5861] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  217.940095][ T9871] loop3: detected capacity change from 0 to 512
[  217.950735][ T9871] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  217.965906][ T9871] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  217.982295][ T9871] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.1515: corrupted in-inode xattr: e_value size too large
[  218.000509][ T9871] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1515: couldn't read orphan inode 15 (err -117)
[  218.016266][ T9871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.037641][ T5861] usb 3-1: Using ep0 maxpacket: 8
[  218.061869][ T5861] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  218.071491][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.079870][ T5861] usb 3-1: Product: syz
[  218.083659][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.084173][ T5861] usb 3-1: Manufacturer: syz
[  218.099737][ T5861] usb 3-1: SerialNumber: syz
[  218.110264][ T5861] usb 3-1: config 0 descriptor??
[  218.126748][ T5861] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  218.135331][ T5861] usb 3-1: setting power ON
[  218.154839][ T5861] dvb-usb: bulk message failed: -22 (2/0)
[  218.176447][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  218.214131][ T5861] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  218.224670][ T5861] usb 3-1: media controller created
[  218.260144][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  218.304617][ T5861] usb 3-1: selecting invalid altsetting 6
[  218.320748][ T5861] usb 3-1: digital interface selection failed (-22)
[  218.338054][ T9864] dvb-usb: bulk message failed: -22 (3/0)
[  218.343837][ T9864] dvb-usb: bulk message failed: -22 (3/0)
[  218.351336][ T5861] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  218.382815][ T5861] usb 3-1: setting power OFF
[  218.398909][ T5861] dvb-usb: bulk message failed: -22 (2/0)
[  218.412136][ T5861] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  218.422771][ T9876] loop3: detected capacity change from 0 to 512
[  218.429763][ T5861] (NULL device *): no alternate interface
[  218.452099][ T9876] EXT4-fs: Ignoring removed bh option
[  218.508331][ T9876] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  218.539046][ T9876] EXT4-fs (loop3): invalid journal inode
[  218.541928][ T9878] loop0: detected capacity change from 0 to 256
[  218.553589][ T5861] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  218.567988][ T9876] EXT4-fs (loop3): can't get journal size
[  218.596816][ T5861] usb 3-1: USB disconnect, device number 18
[  218.622584][ T9876] EXT4-fs (loop3): 1 truncate cleaned up
[  218.646459][ T9876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.714504][ T9878] FAT-fs (loop0): Directory bread(block 64) failed
[  218.747803][ T9878] FAT-fs (loop0): Directory bread(block 65) failed
[  218.766047][ T9876] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full
[  218.780884][ T9878] FAT-fs (loop0): Directory bread(block 66) failed
[  218.793183][ T9878] FAT-fs (loop0): Directory bread(block 67) failed
[  218.811881][ T9878] FAT-fs (loop0): Directory bread(block 68) failed
[  218.827531][ T9878] FAT-fs (loop0): Directory bread(block 69) failed
[  218.834219][ T9878] FAT-fs (loop0): Directory bread(block 70) failed
[  218.847204][ T9878] FAT-fs (loop0): Directory bread(block 71) failed
[  218.854496][ T9878] FAT-fs (loop0): Directory bread(block 72) failed
[  218.861232][ T9878] FAT-fs (loop0): Directory bread(block 73) failed
[  218.876890][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.200653][ T9888] loop2: detected capacity change from 0 to 8
[  219.268140][ T9888] SQUASHFS error: Unable to read inode 0xe3
[  219.384660][ T9894] loop0: detected capacity change from 0 to 8
[  219.455948][ T9894] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1523'.
[  220.117851][    T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  220.234168][ T9925] loop0: detected capacity change from 0 to 1024
[  220.309260][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.314290][ T9925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.331409][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.350860][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.364048][    T8] usb 4-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[  220.373607][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.390038][    T8] usb 4-1: config 0 descriptor??
[  220.413550][ T9925] CIFS: iocharset name too long
[  220.453677][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.485941][ T9934] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  220.656408][ T9938] loop0: detected capacity change from 0 to 256
[  220.703397][ T9938] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d)
[  220.906166][ T9948] loop0: detected capacity change from 0 to 256
[  220.910093][ T9949] (null): rxe_set_mtu: Set mtu to 256
[  220.935652][ T9949] vxcan1 speed is unknown, defaulting to 1000
[  220.961312][ T9949] vxcan1 speed is unknown, defaulting to 1000
[  220.982724][ T9949] vxcan1 speed is unknown, defaulting to 1000
[  221.002215][ T9948] FAT-fs (loop0): Directory bread(block 64) failed
[  221.021317][ T9948] FAT-fs (loop0): Directory bread(block 65) failed
[  221.032679][    T8] usb 4-1: string descriptor 0 read error: -71
[  221.040680][ T9948] FAT-fs (loop0): Directory bread(block 66) failed
[  221.055297][    T8] uclogic 0003:5543:0047.0021: failed retrieving string descriptor #200: -71
[  221.067999][ T9948] FAT-fs (loop0): Directory bread(block 67) failed
[  221.084968][ T9948] FAT-fs (loop0): Directory bread(block 68) failed
[  221.089948][    T8] uclogic 0003:5543:0047.0021: failed retrieving pen parameters: -71
[  221.104790][ T9948] FAT-fs (loop0): Directory bread(block 69) failed
[  221.108156][ T9952] loop2: detected capacity change from 0 to 512
[  221.112488][ T9948] FAT-fs (loop0): Directory bread(block 70) failed
[  221.129953][ T9948] FAT-fs (loop0): Directory bread(block 71) failed
[  221.136592][    T8] uclogic 0003:5543:0047.0021: failed probing pen v2 parameters: -71
[  221.136718][ T9948] FAT-fs (loop0): Directory bread(block 72) failed
[  221.155010][ T9948] FAT-fs (loop0): Directory bread(block 73) failed
[  221.155693][    T8] uclogic 0003:5543:0047.0021: failed probing parameters: -71
[  221.195156][    T8] uclogic: probe of 0003:5543:0047.0021 failed with error -71
[  221.217133][ T9952] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  221.237133][    T8] usb 4-1: USB disconnect, device number 17
[  221.261181][ T9952] EXT4-fs (loop2): mount failed
[  221.530032][   T27] vxcan1 speed is unknown, defaulting to 1000
[  221.538432][ T9949] infiniband syz2: set active
[  221.543546][ T9949] infiniband syz2: added vxcan1
[  221.713067][ T9949] RDS/IB: syz2: added
[  221.762580][ T9949] smc: adding ib device syz2 with port count 1
[  221.818431][ T9949] smc:    ib device syz2 port 1 has pnetid 
[  221.828406][    T9] vxcan1 speed is unknown, defaulting to 1000
[  221.865770][ T9949] vxcan1 speed is unknown, defaulting to 1000
[  222.156051][ T9949] vxcan1 speed is unknown, defaulting to 1000
[  222.167954][ T5824] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  222.226258][ T9979] loop0: detected capacity change from 0 to 512
[  222.235880][ T9979] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  222.249678][ T9979] EXT4-fs error (device loop0): ext4_get_journal_inode:5805: comm syz.0.1562: inode #1661: comm syz.0.1562: iget: illegal inode #
[  222.273853][ T9979] EXT4-fs (loop0): no journal found
[  222.282506][ T9979] EXT4-fs (loop0): can't get journal size
[  222.299202][ T9979] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  222.321789][ T9979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8016c118, mo2=0002]
[  222.332767][ T9979] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  222.342843][ T9979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.367329][ T5824] usb 3-1: Using ep0 maxpacket: 32
[  222.374539][ T5824] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  222.393184][ T5824] usb 3-1: config 0 has no interface number 0
[  222.409247][ T5824] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  222.427322][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.435398][ T5824] usb 3-1: Product: syz
[  222.440215][ T5824] usb 3-1: Manufacturer: syz
[  222.444898][ T5824] usb 3-1: SerialNumber: syz
[  222.452439][ T5824] usb 3-1: config 0 descriptor??
[  222.464137][ T5824] radio-si470x 3-1:0.35: could not find interrupt in endpoint
[  222.477484][ T5824] radio-si470x: probe of 3-1:0.35 failed with error -5
[  222.499312][ T9949] vxcan1 speed is unknown, defaulting to 1000
[  222.510349][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.670197][ T5824] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  222.883730][ T5824] radio-raremono 3-1:0.35: V4L2 device registered as radio48
[  222.913694][ T9949] vxcan1 speed is unknown, defaulting to 1000
[  223.045907][ T9995] loop0: detected capacity change from 0 to 1024
[  223.097840][ T5824] usb 3-1: USB disconnect, device number 19
[  223.112312][ T5824] radio-raremono 3-1:0.35: Thanko's Raremono disconnected
[  223.185156][   T48] hfsplus: b-tree write err: -5, ino 4
[  223.544383][T10007] loop4: detected capacity change from 0 to 128
[  223.753542][T10007] FAT-fs (loop4): Directory bread(block 128) failed
[  223.774671][T10007] FAT-fs (loop4): Directory bread(block 129) failed
[  223.786156][T10013] program syz.3.1577 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  223.800252][T10007] FAT-fs (loop4): Directory bread(block 130) failed
[  223.807210][T10007] FAT-fs (loop4): Directory bread(block 131) failed
[  223.830791][T10007] FAT-fs (loop4): Directory bread(block 132) failed
[  223.848630][T10007] FAT-fs (loop4): Directory bread(block 133) failed
[  223.865612][T10007] FAT-fs (loop4): Directory bread(block 134) failed
[  223.896150][T10007] FAT-fs (loop4): Directory bread(block 135) failed
[  223.925046][T10007] FAT-fs (loop4): Directory bread(block 136) failed
[  223.942283][T10007] FAT-fs (loop4): Directory bread(block 137) failed
[  224.079921][T10019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1581'.
[  224.308653][T10023] loop2: detected capacity change from 0 to 64
[  224.797598][   T27] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  224.997446][   T27] usb 5-1: Using ep0 maxpacket: 8
[  225.022496][   T27] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  225.031570][   T27] usb 5-1: config 2 has no interface number 0
[  225.038284][T10039] netlink: 'syz.2.1591': attribute type 6 has an invalid length.
[  225.048412][   T27] usb 5-1: config 2 interface 31 has no altsetting 0
[  225.059462][   T27] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  225.080105][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.098541][   T27] usb 5-1: Product: syz
[  225.102960][   T27] usb 5-1: Manufacturer: syz
[  225.131475][   T27] usb 5-1: SerialNumber: syz
[  225.168315][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  225.347587][    T9] usb 4-1: Using ep0 maxpacket: 8
[  225.355553][T10043] loop2: detected capacity change from 0 to 4096
[  225.375212][    T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  225.387338][    T9] usb 4-1: config 179 has no interface number 0
[  225.393725][    T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  225.405394][T10043] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  225.437166][    T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  225.452531][    T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  225.498493][T10043] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  225.514153][    T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  225.562007][    T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  225.612005][    T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  225.632742][T10043] ntfs3: loop2: ino=1e, "file1" failed to parse mft record
[  225.649036][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.652726][T10043] ntfs3: loop2: ino=1e, "file1" attr_set_size
[  225.683557][T10037] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  225.809457][   T27] ch9200: probe of 5-1:2.31 failed with error -22
[  225.846165][   T27] usb 5-1: USB disconnect, device number 15
[  226.042346][T10046] loop2: detected capacity change from 0 to 1764
[  226.087700][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.130502][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.343286][T10048] loop2: detected capacity change from 0 to 256
[  226.488173][T10048] FAT-fs (loop2): Directory bread(block 64) failed
[  226.494794][T10048] FAT-fs (loop2): Directory bread(block 65) failed
[  226.533525][   T27] usb 4-1: USB disconnect, device number 18
[  226.533635][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  226.547462][T10048] FAT-fs (loop2): Directory bread(block 66) failed
[  226.548099][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  226.554241][T10048] FAT-fs (loop2): Directory bread(block 67) failed
[  226.554355][T10048] FAT-fs (loop2): Directory bread(block 68) failed
[  226.573885][T10051] netlink: 'syz.4.1596': attribute type 1 has an invalid length.
[  226.581727][T10048] FAT-fs (loop2): Directory bread(block 69) failed
[  226.585410][T10051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1596'.
[  226.627617][T10048] FAT-fs (loop2): Directory bread(block 70) failed
[  226.634198][T10048] FAT-fs (loop2): Directory bread(block 71) failed
[  226.655408][T10048] FAT-fs (loop2): Directory bread(block 72) failed
[  226.672298][T10048] FAT-fs (loop2): Directory bread(block 73) failed
[  226.911587][T10059] netlink: 'syz.0.1601': attribute type 26 has an invalid length.
[  227.073342][T10064] loop0: detected capacity change from 0 to 2048
[  227.133672][T10064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  227.434707][T10076] loop0: detected capacity change from 0 to 1024
[  227.492263][T10076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.497613][    T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  227.504685][T10076] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.566468][T10076] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 1: comm syz.0.1609: lblock 1 mapped to illegal pblock 1 (length 1)
[  227.597721][T10076] EXT4-fs error (device loop0): ext4_ext_remove_space:2929: inode #15: comm syz.0.1609: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  227.675618][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.755166][    T8] usb 5-1: Using ep0 maxpacket: 8
[  227.807466][    T8] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  227.816643][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.843377][    T8] usb 5-1: Product: syz
[  227.848806][    T8] usb 5-1: Manufacturer: syz
[  227.854819][    T8] usb 5-1: SerialNumber: syz
[  227.879059][    T8] usb 5-1: config 0 descriptor??
[  227.899503][    T8] gspca_main: se401-2.14.0 probing 047d:5003
[  228.274272][T10107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1623'.
[  228.349304][    T8] gspca_se401: Wrong descriptor type
[  228.472389][T10113] loop0: detected capacity change from 0 to 4096
[  228.549065][T10113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.633556][ T1188] usb 5-1: USB disconnect, device number 16
[  228.675690][T10113] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.1626: corrupted inode contents
[  228.690865][T10113] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #15: comm syz.0.1626: mark_inode_dirty error
[  228.757558][T10113] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.1626: corrupted inode contents
[  228.800106][T10113] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.1626: mark_inode_dirty error
[  228.823302][T10127] syz.2.1632 uses obsolete (PF_INET,SOCK_PACKET)
[  228.831054][T10113] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.1626: corrupted inode contents
[  228.844899][T10113] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.1626: mark_inode_dirty error
[  228.859779][T10113] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.1626: corrupted inode contents
[  228.882314][T10113] EXT4-fs error (device loop0): ext4_truncate:4288: inode #15: comm syz.0.1626: mark_inode_dirty error
[  228.944280][T10113] EXT4-fs error (device loop0) in ext4_setattr:5645: Corrupt filesystem
[  228.965976][T10121] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #15: comm syz.0.1626: corrupted inode contents
[  229.078835][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.121629][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1636'.
[  229.226159][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'.
[  229.247585][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'.
[  229.618132][ T1188] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  229.687349][    T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  229.715690][    T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  229.798248][ T1188] usb 3-1: Using ep0 maxpacket: 8
[  229.810999][ T1188] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  229.820613][ T1188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.831395][ T1188] usb 3-1: Product: syz
[  229.835573][ T1188] usb 3-1: Manufacturer: syz
[  229.840251][ T1188] usb 3-1: SerialNumber: syz
[  229.846280][ T1188] usb 3-1: config 0 descriptor??
[  229.856165][ T1188] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  229.879059][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.889506][    T8] usb 4-1: config 0 has no interfaces?
[  229.895017][    T8] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  229.904499][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.916291][    T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  229.925993][    T8] usb 4-1: config 0 descriptor??
[  229.937605][    T9] usb 1-1: config 0 has no interface number 0
[  229.943802][    T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  229.977823][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.987969][    T9] usb 1-1: config 0 descriptor??
[  229.996992][    T9] usb 1-1: selecting invalid altsetting 1
[  230.005315][    T9] dvb_ttusb_budget: ttusb_init_controller: error
[  230.011990][    T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  230.075082][    T9] DVB: Unable to find symbol cx22700_attach()
[  230.114996][    T9] DVB: Unable to find symbol tda10046_attach()
[  230.122307][    T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  230.137579][ T5762] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  230.186925][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1640'.
[  230.198880][ T5824] usb 4-1: USB disconnect, device number 19
[  230.239746][   T27] usb 1-1: USB disconnect, device number 16
[  230.319961][ T5762] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.331134][ T5762] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.342722][ T5762] usb 5-1: config 0 interface 0 has no altsetting 0
[  230.349474][ T5762] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00
[  230.358825][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.371622][ T5762] usb 5-1: config 0 descriptor??
[  230.474460][ T1188] gspca_sonixj: reg_w1 err -71
[  230.482630][ T1188] sonixj: probe of 3-1:0.0 failed with error -71
[  230.491818][ T1188] usb 3-1: USB disconnect, device number 20
[  230.786840][ T5762] elecom 0003:056E:00FB.0022: unbalanced delimiter at end of report description
[  230.805553][ T5762] elecom: probe of 0003:056E:00FB.0022 failed with error -22
[  231.002886][ T5762] usb 5-1: USB disconnect, device number 17
[  231.116978][T10172] loop3: detected capacity change from 0 to 64
[  231.121202][T10171] loop2: detected capacity change from 0 to 1024
[  231.127369][ T1188] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  231.153695][   T28] audit: type=1800 audit(1751065248.375:32): pid=10172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1652" name="file1" dev="loop3" ino=18 res=0 errno=0
[  231.196100][T10171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.222468][T10171] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.322680][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.337870][ T1188] usb 1-1: Using ep0 maxpacket: 32
[  231.349578][ T1188] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  231.363855][ T1188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.382996][ T1188] usb 1-1: config 0 descriptor??
[  231.597827][  T786] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  231.728104][   T27] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  231.787380][  T786] usb 4-1: Using ep0 maxpacket: 32
[  231.795570][  T786] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  231.804281][  T786] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  231.818750][  T786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  231.828850][ T1188] input: HID 28bd:1903 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:1903.0023/input/input25
[  231.840724][  T786] usb 4-1: config 1 has no interface number 0
[  231.847059][  T786] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  231.861722][  T786] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  231.880681][  T786] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  231.891126][  T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.912998][  T786] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  231.938020][   T27] usb 3-1: Using ep0 maxpacket: 32
[  231.950204][   T27] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  231.959824][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.972360][ T1188] uclogic 0003:28BD:1903.0023: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.0-1/input0
[  232.021839][   T27] usb 3-1: config 0 descriptor??
[  232.058359][   T27] gspca_main: nw80x-2.14.0 probing 055f:d001
[  232.112027][ T5762] usb 1-1: USB disconnect, device number 17
[  232.248003][T10190] fido_id[10190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  232.499952][  T786] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  232.668130][   T27] gspca_nw80x: reg_w err -71
[  232.672850][   T27] nw80x: probe of 3-1:0.0 failed with error -71
[  232.687429][T10197] loop4: detected capacity change from 0 to 32768
[  232.697751][   T27] usb 3-1: USB disconnect, device number 21
[  232.729101][T10197] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  232.749532][T10205] loop0: detected capacity change from 0 to 256
[  232.752850][ T5762] usb 4-1: USB disconnect, device number 20
[  232.804078][ T5762] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  232.828672][T10197] XFS (loop4): Ending clean mount
[  232.858431][T10205] FAT-fs (loop0): Directory bread(block 64) failed
[  232.901949][T10205] FAT-fs (loop0): Directory bread(block 65) failed
[  232.916700][T10205] FAT-fs (loop0): Directory bread(block 66) failed
[  232.924605][T10205] FAT-fs (loop0): Directory bread(block 67) failed
[  232.931897][T10205] FAT-fs (loop0): Directory bread(block 68) failed
[  232.943240][T10205] FAT-fs (loop0): Directory bread(block 69) failed
[  232.952172][T10205] FAT-fs (loop0): Directory bread(block 70) failed
[  232.963529][T10205] FAT-fs (loop0): Directory bread(block 71) failed
[  232.974657][T10205] FAT-fs (loop0): Directory bread(block 72) failed
[  232.986456][T10205] FAT-fs (loop0): Directory bread(block 73) failed
[  233.032150][ T6364] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  234.033235][ T5762] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  234.217648][ T5762] usb 1-1: Using ep0 maxpacket: 16
[  234.231339][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.258296][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.278892][ T5762] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  234.326067][ T5762] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  234.345659][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.372261][ T5762] usb 1-1: config 0 descriptor??
[  234.723527][T10265] loop4: detected capacity change from 0 to 256
[  234.782068][T10265] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  234.861556][ T5762] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max
[  234.896277][ T5762] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0024/input/input26
[  235.015913][T10271] loop3: detected capacity change from 0 to 2048
[  235.072343][T10271]  loop3: p1 < > p4
[  235.106709][T10271] loop3: p4 size 8388608 extends beyond EOD, truncated
[  235.134354][ T5762] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  235.217562][ T5762] usb 1-1: USB disconnect, device number 18
[  235.398379][T10279] fido_id[10279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  235.601296][T10289] loop4: detected capacity change from 0 to 1024
[  235.630590][T10289] EXT4-fs: inline encryption not supported
[  235.637059][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  235.643249][ T9799] udevd[9799]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  235.665605][T10289] EXT4-fs: Ignoring removed i_version option
[  235.698807][T10289] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  235.738824][T10289] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 2: comm syz.4.1698: lblock 2 mapped to illegal pblock 2 (length 1)
[  235.757319][T10289] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  235.765510][T10289] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 48: comm syz.4.1698: lblock 0 mapped to illegal pblock 48 (length 1)
[  235.782515][T10289] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  235.787594][ T5837] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  235.792270][T10289] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1698: Failed to acquire dquot type 0
[  235.811718][T10289] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  235.849324][T10289] EXT4-fs error (device loop4): ext4_evict_inode:252: inode #11: comm syz.4.1698: mark_inode_dirty error
[  235.872837][T10289] EXT4-fs warning (device loop4): ext4_evict_inode:255: couldn't mark inode dirty (err -117)
[  235.907440][T10289] EXT4-fs (loop4): 1 orphan inode deleted
[  235.914409][T10289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.938321][   T48] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  235.970810][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'.
[  235.988973][   T48] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  236.000002][T10289] EXT4-fs: Ignoring removed orlov option
[  236.005772][T10289] EXT4-fs (loop4): stripe (16) is not aligned with cluster size (4096), stripe is disabled
[  236.012362][   T48] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 0
[  236.037753][T10289] EXT4-fs (loop4): can't enable nombcache during remount
[  236.056534][ T5837] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  236.073953][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.083957][ T5837] usb 3-1: Product: syz
[  236.092636][ T5837] usb 3-1: Manufacturer: syz
[  236.099138][ T5837] usb 3-1: SerialNumber: syz
[  236.111495][  T786] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  236.120204][ T5837] usb 3-1: config 0 descriptor??
[  236.140369][ T6364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.165404][ T6364] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0
[  236.197595][ T6364] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  236.237765][ T6364] EXT4-fs error (device loop4): ext4_quota_off:7222: inode #3: comm syz-executor: mark_inode_dirty error
[  236.307728][  T786] usb 4-1: Using ep0 maxpacket: 32
[  236.345438][  T786] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  236.368666][  T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.379992][  T786] usb 4-1: config 0 descriptor??
[  236.389200][ T1188] usb 3-1: USB disconnect, device number 22
[  236.821644][  T786] input: HID 28bd:1903 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:1903.0025/input/input27
[  236.862732][  T786] uclogic 0003:28BD:1903.0025: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.3-1/input0
[  237.007621][ T5838] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  237.112889][ T5762] usb 4-1: USB disconnect, device number 21
[  237.237443][ T5838] usb 1-1: Using ep0 maxpacket: 8
[  237.244737][ T5838] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  237.263612][ T5838] usb 1-1: config 179 has no interface number 0
[  237.282830][ T5838] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  237.295737][ T5838] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  237.314749][ T5838] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  237.329672][ T5838] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  237.341663][ T5838] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  237.373215][ T5838] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  237.378627][T10331] loop4: detected capacity change from 0 to 256
[  237.393180][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.414650][T10315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  237.445007][T10331] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d)
[  237.540786][T10333] loop2: detected capacity change from 0 to 2048
[  237.587603][T10334] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  237.969097][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.006955][T10339] loop3: detected capacity change from 0 to 4096
[  238.016654][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.095988][T10345] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.422071][ T5773] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  238.442108][ T5773] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12)
[  238.488883][ T5838] usb 1-1: USB disconnect, device number 19
[  238.488940][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  238.503220][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  238.511630][    C1] vkms_vblank_simulate: vblank timer overrun
[  238.522163][ T5773] Remounting filesystem read-only
[  238.527328][ T5773] NILFS (loop3): error -5 truncating bmap (ino=12)
[  238.542820][ T5773] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  238.554227][ T5773] NILFS (loop3): discard dirty page: offset=0, ino=2
[  238.562751][ T5773] NILFS (loop3): discard dirty block: blocknr=14, size=4096
[  238.570410][ T5773] NILFS (loop3): discard dirty page: offset=0, ino=6
[  238.577919][T10356] loop4: detected capacity change from 0 to 1024
[  238.600108][ T5773] NILFS (loop3): discard dirty block: blocknr=23, size=4096
[  238.613560][ T5773] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  238.625014][ T5773] NILFS (loop3): discard dirty block: blocknr=24, size=4096
[  238.635951][ T5773] NILFS (loop3): discard dirty page: offset=8192, ino=6
[  238.643544][ T5773] NILFS (loop3): discard dirty block: blocknr=25, size=4096
[  238.659159][T10356] hfsplus: bad catalog entry type
[  238.762175][   T42] hfsplus: b-tree write err: -5, ino 4
[  239.060119][T10372] loop2: detected capacity change from 0 to 512
[  239.083832][T10372] EXT4-fs: Ignoring removed oldalloc option
[  239.109826][T10372] EXT4-fs (loop2): 1 truncate cleaned up
[  239.123658][T10372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.396674][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.482725][T10388] loop0: detected capacity change from 0 to 4096
[  239.647921][   T28] audit: type=1800 audit(1751065256.875:33): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1741" name="file1" dev="loop0" ino=30 res=0 errno=0
[  240.259419][T10417] loop3: detected capacity change from 0 to 512
[  240.296429][T10417] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  240.387513][ T1188] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  240.462800][T10426] loop2: detected capacity change from 0 to 16
[  240.475556][T10426] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  240.496849][T10426] cramfs: empty filesystem
[  240.587416][ T1188] usb 5-1: Using ep0 maxpacket: 8
[  240.604055][ T1188] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  240.630996][ T1188] usb 5-1: config 179 has no interface number 0
[  240.647853][ T1188] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  240.684012][ T1188] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  240.714466][T10433] loop3: detected capacity change from 0 to 512
[  240.719439][ T1188] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  240.748095][T10433] EXT4-fs: Ignoring removed nobh option
[  240.768374][ T1188] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  240.782083][T10433] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  240.803093][ T1188] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  240.817111][ T1188] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  240.852309][T10433] EXT4-fs (loop3): 1 truncate cleaned up
[  240.882127][ T1188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.905235][T10433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.935770][T10409] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  241.046896][T10442] loop0: detected capacity change from 0 to 512
[  241.085597][T10442] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  241.108707][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.173886][T10442] EXT4-fs (loop0): 1 truncate cleaned up
[  241.212368][T10442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.392295][T10409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.393262][T10409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.709857][ T5838] usb 5-1: USB disconnect, device number 18
[  241.709865][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  241.710004][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  241.790025][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.936096][T10458] loop3: detected capacity change from 0 to 1764
[  242.013399][T10458] ISOFS: unable to read i-node block
[  242.058927][T10463] loop0: detected capacity change from 0 to 512
[  242.096690][T10463] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1773: bad orphan inode 11
[  242.202034][T10463] ext4_test_bit(bit=10, block=4) = 1
[  242.213599][T10463] is_bad_inode(inode)=0
[  242.243966][T10463] NEXT_ORPHAN(inode)=2080374784
[  242.271621][T10463] max_ino=32
[  242.292125][T10463] i_nlink=0
[  242.295472][T10463] EXT4-fs (loop0): 1 truncate cleaned up
[  242.309178][T10463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.466629][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.493100][T10477] loop2: detected capacity change from 0 to 1024
[  242.516865][T10477] EXT4-fs: Ignoring removed nomblk_io_submit option
[  242.575746][T10477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.854159][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.092169][T10501] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1790'.
[  243.101680][T10501] netlink: 'syz.0.1790': attribute type 9 has an invalid length.
[  243.112053][T10501] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1790'.
[  243.121508][T10501] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1790'.
[  243.150658][ T1188] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  243.355864][ T1188] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  243.377522][ T1188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.385575][ T1188] usb 5-1: Product: syz
[  243.402245][ T1188] usb 5-1: Manufacturer: syz
[  243.406898][ T1188] usb 5-1: SerialNumber: syz
[  243.450855][ T1188] usb 5-1: config 0 descriptor??
[  243.837596][T10508] loop0: detected capacity change from 0 to 32768
[  244.028720][T10514] loop3: detected capacity change from 0 to 32768
[  244.075274][ T1188] usb 5-1: f81604_read: reg: 105 failed: -EPROTO
[  244.092237][ T1188] f81604 5-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  244.113620][ T1188] f81604: probe of 5-1:0.0 failed with error -71
[  244.151175][ T1188] usb 5-1: USB disconnect, device number 19
[  244.273774][T10521] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  244.753534][T10535] tmpfs: Cannot enable swap on remount if it was disabled on first mount
[  245.158550][T10549] loop0: detected capacity change from 0 to 512
[  245.277589][T10549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.339760][T10549] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.398084][T10560] loop2: detected capacity change from 0 to 64
[  245.418595][T10560] hfs: unable to locate alternate MDB
[  245.429900][T10560] hfs: continuing without an alternate MDB
[  245.507722][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  245.536367][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.700952][ T5089] Bluetooth: hci0: command 0x0406 tx timeout
[  246.493495][T10567] loop0: detected capacity change from 0 to 40427
[  246.513951][T10567] F2FS-fs (loop0): invalid crc value
[  246.525909][T10567] F2FS-fs (loop0): Found nat_bits in checkpoint
[  246.594112][T10567] F2FS-fs (loop0): Start checkpoint disabled!
[  246.620844][T10567] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  246.704825][   T75] kworker/u4:4: attempt to access beyond end of device
[  246.704825][   T75] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  246.719150][   T75] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  246.726192][   T75] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  246.747742][ T1188] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  246.947338][ T1188] usb 5-1: Using ep0 maxpacket: 8
[  246.963172][ T1188] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  246.974138][T10600] loop3: detected capacity change from 0 to 256
[  246.989747][T10600] exfat: Deprecated parameter 'utf8'
[  247.000460][ T1188] usb 5-1: config 179 has no interface number 0
[  247.014164][T10600] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  247.029411][ T1188] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  247.050605][ T1188] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  247.067706][ T1188] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  247.080697][ T1188] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  247.093455][ T1188] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  247.133656][ T1188] usb 5-1: config 179 interface 65 has no altsetting 0
[  247.142745][ T1188] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  247.152829][ T1188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.191811][ T1188] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input28
[  247.290366][ T5128] input input28: unable to receive magic message: -110
[  247.314233][ T5128] input input28: unable to receive magic message: -32
[  247.330697][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  247.352171][ T5128] input input28: unable to receive magic message: -32
[  247.391253][ T7590] input input28: unable to receive magic message: -32
[  247.409489][ T1188] usb 5-1: USB disconnect, device number 20
[  247.415471][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  247.450064][ T1188] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  247.497557][   T27] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  247.549403][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.560404][    T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  247.569763][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.581136][    T9] usb 1-1: config 0 descriptor??
[  247.677337][   T27] usb 4-1: Using ep0 maxpacket: 16
[  247.684410][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.695474][   T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  247.708734][ T5762] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  247.716521][   T27] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  247.727399][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.739235][   T27] usb 4-1: config 0 descriptor??
[  247.907381][ T5762] usb 3-1: Using ep0 maxpacket: 16
[  247.917204][ T5762] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  247.927791][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.935829][ T5762] usb 3-1: Product: syz
[  247.940228][ T5762] usb 3-1: Manufacturer: syz
[  247.944871][ T5762] usb 3-1: SerialNumber: syz
[  247.958280][ T5762] usb 3-1: config 0 descriptor??
[  247.970361][ T5762] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  248.006206][    T9] koneplus 0003:1E7D:2E22.0026: unknown main item tag 0x0
[  248.018916][    T9] koneplus 0003:1E7D:2E22.0026: unknown global tag 0xd
[  248.026274][    T9] koneplus 0003:1E7D:2E22.0026: item 0 4 1 13 parsing failed
[  248.041113][    T9] koneplus 0003:1E7D:2E22.0026: parse failed
[  248.047202][    T9] koneplus: probe of 0003:1E7D:2E22.0026 failed with error -22
[  248.169153][   T27] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0027/input/input29
[  248.186005][ T5762] gspca_sn9c2028: read1 error -32
[  248.207991][    T9] usb 1-1: USB disconnect, device number 20
[  248.254842][   T27] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  248.364002][  T786] usb 4-1: USB disconnect, device number 22
[  248.393264][ T5762] gspca_sn9c2028: read1 error -71
[  248.399786][ T5762] sn9c2028: probe of 3-1:0.0 failed with error -71
[  248.416146][ T5762] usb 3-1: USB disconnect, device number 23
[  249.039624][T10623] loop4: detected capacity change from 0 to 64
[  249.103522][T10623] 
[  249.105884][T10623] ======================================================
[  249.107351][ T5762] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  249.112878][T10623] WARNING: possible circular locking dependency detected
[  249.112899][T10623] 6.6.95-syzkaller #0 Not tainted
[  249.112909][T10623] ------------------------------------------------------
[  249.112914][T10623] syz.4.1845/10623 is trying to acquire lock:
[  249.145605][T10623] ffff888077a800b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0
[  249.155124][T10623] 
[  249.155124][T10623] but task is already holding lock:
[  249.162494][T10623] ffff888058ec8778 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220
[  249.173308][T10623] 
[  249.173308][T10623] which lock already depends on the new lock.
[  249.173308][T10623] 
[  249.183722][T10623] 
[  249.183722][T10623] the existing dependency chain (in reverse order) is:
[  249.192916][T10623] 
[  249.192916][T10623] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[  249.202151][T10623]        __mutex_lock+0x129/0xcc0
[  249.207174][T10623]        hfs_extend_file+0xdb/0x1220
[  249.212450][T10623]        hfs_bmap_reserve+0x107/0x430
[  249.217820][T10623]        __hfs_ext_write_extent+0x1fa/0x470
[  249.223717][T10623]        __hfs_ext_cache_extent+0x6b/0x9b0
[  249.229545][T10623]        hfs_extend_file+0x317/0x1220
[  249.234901][T10623]        hfs_get_block+0x3d8/0xbd0
[  249.240083][T10623]        __blockdev_direct_IO+0x1679/0x3420
[  249.245964][T10623]        hfs_direct_IO+0x11b/0x220
[  249.251061][T10623]        generic_file_direct_write+0x1d4/0x3e0
[  249.257206][T10623]        __generic_file_write_iter+0x11b/0x230
[  249.263350][T10623]        generic_file_write_iter+0xaf/0x2e0
[  249.269283][T10623]        do_iter_write+0x79a/0xc70
[  249.274398][T10623]        do_writev+0x252/0x410
[  249.279158][T10623]        do_syscall_64+0x55/0xb0
[  249.284094][T10623]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  249.290523][T10623] 
[  249.290523][T10623] -> #0 (&tree->tree_lock#2/1){+.+.}-{3:3}:
[  249.298630][T10623]        __lock_acquire+0x2ddb/0x7c80
[  249.304002][T10623]        lock_acquire+0x197/0x410
[  249.309013][T10623]        __mutex_lock+0x129/0xcc0
[  249.314025][T10623]        hfs_find_init+0x15f/0x1d0
[  249.319121][T10623]        hfs_extend_file+0x2ef/0x1220
[  249.324480][T10623]        hfs_bmap_reserve+0x107/0x430
[  249.329837][T10623]        hfs_cat_create+0x1b4/0x620
[  249.335018][T10623]        hfs_create+0x66/0xd0
[  249.339689][T10623]        path_openat+0x1277/0x3190
[  249.344783][T10623]        do_filp_open+0x1c5/0x3d0
[  249.349795][T10623]        do_sys_openat2+0x12c/0x1c0
[  249.354981][T10623]        __x64_sys_openat+0x139/0x160
[  249.360345][T10623]        do_syscall_64+0x55/0xb0
[  249.365275][T10623]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  249.371680][T10623] 
[  249.371680][T10623] other info that might help us debug this:
[  249.371680][T10623] 
[  249.381889][T10623]  Possible unsafe locking scenario:
[  249.381889][T10623] 
[  249.389318][T10623]        CPU0                    CPU1
[  249.394679][T10623]        ----                    ----
[  249.400040][T10623]   lock(&HFS_I(tree->inode)->extents_lock);
[  249.406014][T10623]                                lock(&tree->tree_lock#2/1);
[  249.413390][T10623]                                lock(&HFS_I(tree->inode)->extents_lock);
[  249.421876][T10623]   lock(&tree->tree_lock#2/1);
[  249.426725][T10623] 
[  249.426725][T10623]  *** DEADLOCK ***
[  249.426725][T10623] 
[  249.434859][T10623] 4 locks held by syz.4.1845/10623:
[  249.440038][T10623]  #0: ffff888058c0e418 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  249.449254][T10623]  #1: ffff888058ec8fb8 (&type->i_mutex_dir_key#15){++++}-{3:3}, at: path_openat+0x7c6/0x3190
[  249.459535][T10623]  #2: ffff8880778d80b0 (&tree->tree_lock#2){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0
[  249.469284][T10623]  #3: ffff888058ec8778 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220
[  249.480501][T10623] 
[  249.480501][T10623] stack backtrace:
[  249.486385][T10623] CPU: 0 PID: 10623 Comm: syz.4.1845 Not tainted 6.6.95-syzkaller #0
[  249.494444][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  249.504497][T10623] Call Trace:
[  249.507768][T10623]  <TASK>
[  249.510708][T10623]  dump_stack_lvl+0x16c/0x230
[  249.515385][T10623]  ? load_image+0x3b0/0x3b0
[  249.519880][T10623]  ? show_regs_print_info+0x20/0x20
[  249.525075][T10623]  ? print_circular_bug+0x12b/0x1a0
[  249.530264][T10623]  check_noncircular+0x2bd/0x3c0
[  249.535190][T10623]  ? look_up_lock_class+0x75/0x140
[  249.540290][T10623]  ? print_deadlock_bug+0x5d0/0x5d0
[  249.545476][T10623]  ? lockdep_lock+0xe0/0x220
[  249.550068][T10623]  ? _find_first_zero_bit+0xd3/0x100
[  249.555340][T10623]  __lock_acquire+0x2ddb/0x7c80
[  249.560191][T10623]  ? lock_chain_count+0x20/0x20
[  249.565034][T10623]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  249.570926][T10623]  ? verify_lock_unused+0x140/0x140
[  249.576112][T10623]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  249.581996][T10623]  ? _raw_spin_unlock+0x40/0x40
[  249.586840][T10623]  ? stack_trace_save+0x9c/0xe0
[  249.591681][T10623]  ? stack_trace_snprint+0xf0/0xf0
[  249.596781][T10623]  lock_acquire+0x197/0x410
[  249.601270][T10623]  ? hfs_find_init+0x15f/0x1d0
[  249.606021][T10623]  ? hfs_extend_file+0x2ef/0x1220
[  249.611031][T10623]  ? hfs_bmap_reserve+0x107/0x430
[  249.616045][T10623]  ? __x64_sys_openat+0x139/0x160
[  249.621074][T10623]  ? __might_sleep+0xe0/0xe0
[  249.625653][T10623]  ? read_lock_is_recursive+0x20/0x20
[  249.631017][T10623]  __mutex_lock+0x129/0xcc0
[  249.635518][T10623]  ? hfs_find_init+0x15f/0x1d0
[  249.640272][T10623]  ? hfs_find_init+0x15f/0x1d0
[  249.645019][T10623]  ? mutex_lock_nested+0x20/0x20
[  249.649948][T10623]  ? __kmem_cache_alloc_node+0x13e/0x260
[  249.655565][T10623]  ? hfs_find_init+0x88/0x1d0
[  249.660232][T10623]  ? hfs_find_init+0x88/0x1d0
[  249.664898][T10623]  ? __kmalloc+0xe2/0x240
[  249.669217][T10623]  hfs_find_init+0x15f/0x1d0
[  249.673798][T10623]  hfs_extend_file+0x2ef/0x1220
[  249.678643][T10623]  ? hfs_get_block+0xbd0/0xbd0
[  249.683394][T10623]  ? rcu_is_watching+0x15/0xb0
[  249.688148][T10623]  ? trace_contention_end+0x39/0xe0
[  249.693335][T10623]  ? __mutex_lock+0x304/0xcc0
[  249.698005][T10623]  ? hfs_find_init+0x15f/0x1d0
[  249.702758][T10623]  ? mutex_lock_nested+0x20/0x20
[  249.707693][T10623]  hfs_bmap_reserve+0x107/0x430
[  249.712540][T10623]  hfs_cat_create+0x1b4/0x620
[  249.717206][T10623]  ? preempt_schedule+0xab/0xc0
[  249.722049][T10623]  ? preempt_schedule_common+0x82/0xc0
[  249.727497][T10623]  ? hfs_cat_build_key+0x170/0x170
[  249.732597][T10623]  ? preempt_schedule+0xab/0xc0
[  249.737447][T10623]  ? _raw_spin_unlock+0x3a/0x40
[  249.742302][T10623]  ? hfs_new_inode+0x92b/0xbf0
[  249.747058][T10623]  hfs_create+0x66/0xd0
[  249.751200][T10623]  ? hfs_lookup+0x2a0/0x2a0
[  249.755691][T10623]  path_openat+0x1277/0x3190
[  249.760283][T10623]  ? do_filp_open+0x3d0/0x3d0
[  249.764953][T10623]  do_filp_open+0x1c5/0x3d0
[  249.769448][T10623]  ? vfs_tmpfile+0x490/0x490
[  249.774042][T10623]  ? _raw_spin_unlock+0x28/0x40
[  249.778898][T10623]  ? alloc_fd+0x58f/0x630
[  249.783224][T10623]  do_sys_openat2+0x12c/0x1c0
[  249.787896][T10623]  ? do_sys_open+0xe0/0xe0
[  249.792303][T10623]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  249.798272][T10623]  ? lock_chain_count+0x20/0x20
[  249.803111][T10623]  __x64_sys_openat+0x139/0x160
[  249.807959][T10623]  do_syscall_64+0x55/0xb0
[  249.812370][T10623]  ? clear_bhb_loop+0x40/0x90
[  249.817041][T10623]  ? clear_bhb_loop+0x40/0x90
[  249.821703][T10623]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  249.827604][T10623] RIP: 0033:0x7fcd3bb8e929
[  249.832020][T10623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.851634][T10623] RSP: 002b:00007fcd3c97b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  249.860057][T10623] RAX: ffffffffffffffda RBX: 00007fcd3bdb5fa0 RCX: 00007fcd3bb8e929
[  249.868027][T10623] RDX: 0000000000105042 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  249.876019][T10623] RBP: 00007fcd3bc10b39 R08: 0000000000000000 R09: 0000000000000000
[  249.883988][T10623] R10: 0000000000000189 R11: 0000000000000246 R12: 0000000000000000
[  249.891949][T10623] R13: 0000000000000000 R14: 00007fcd3bdb5fa0 R15: 00007ffd617a7d88
[  249.899916][T10623]  </TASK>
[  250.027305][ T5762] usb 1-1: Using ep0 maxpacket: 8
[  250.033854][ T5762] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.045182][ T5762] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.055114][ T5762] usb 1-1: config 0 interface 0 has no altsetting 0
[  250.061939][ T5762] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  250.071179][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.082027][ T5762] usb 1-1: config 0 descriptor??
[  250.264671][T10627] loop3: detected capacity change from 0 to 65536
[  250.283547][T10627] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  250.306262][T10627] XFS (loop3): Ending clean mount
[  250.313124][T10627] XFS (loop3): Quotacheck needed: Please wait.
[  250.328658][T10627] XFS (loop3): Quotacheck: Done.
[  250.383236][ T5773] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  250.510643][ T5762] a4tech 0003:09DA:000A.0028: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.0-1/input0
[  250.745977][  T786] usb 1-1: USB disconnect, device number 21
[  255.939990][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.946322][ T1280] ieee802154 phy1 wpan1: encryption failed: -22