last executing test programs:

1m41.641053149s ago: executing program 0 (id=182):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x40, 0xed})

1m41.140001055s ago: executing program 0 (id=185):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003ff000/0x18000)=nil, 0x0, 0x0, 0xb5277a3f6f8019b9, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

1m40.244701563s ago: executing program 0 (id=193):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2b, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4004}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x80)

1m40.192964025s ago: executing program 0 (id=194):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000540)=""/222, 0xde)

1m39.978727782s ago: executing program 0 (id=197):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000002c0)=[{{0x2, 0x1, 0x1}, {0x0, 0x0, 0x1}}], 0x8)

1m39.162702928s ago: executing program 0 (id=204):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2)

1m38.947517485s ago: executing program 32 (id=204):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2)

3.46958364s ago: executing program 3 (id=1401):
unshare(0xc020680)
socket$caif_seqpacket(0x25, 0x5, 0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xd, 0x1, 0x8, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0x200000c1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x11c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x2, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xb, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x1, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x40, 0x808, 0x4, 0x4, 0x401, 0x66cd, 0xb, 0x8, 0x4, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

3.219145698s ago: executing program 3 (id=1407):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x540, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x414, 0x2, [@TCA_BPF_ACT={0x410, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x104, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xc9, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2578f669067fc7f4e7e11e7d6206ac703d98c3cd3b5372b60c63437ce"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xcc, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0xa1, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f745144019213"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x34, 0x9, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xf0, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xac, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x7d, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd03246558deb333c7f6fd9ca35aa7a9c4c25107289c2b66110cdb18b8dad6c876d5cfce012a45cfa35105745b2f785d52e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3.110674441s ago: executing program 3 (id=1411):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000000000fdff00073f7f88a745", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x2, 0x3, 0x0, 0x0, "61bcf34b016813cf"}}, 0x38}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0)

3.109993251s ago: executing program 1 (id=1412):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

3.040366264s ago: executing program 1 (id=1413):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4)
recvmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002002)

2.986816035s ago: executing program 3 (id=1415):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000140), 0x0, 0x97a1, &(0x7f0000009780)="$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")
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8080583a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x9})

2.728659393s ago: executing program 1 (id=1417):
r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0)
chown(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0)

2.636400926s ago: executing program 1 (id=1419):
r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x539, &(0x7f0000001440)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x1)

2.044030005s ago: executing program 1 (id=1421):
syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/3\x00')
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea443000905", @ANYRES32=r0], 0x0)

1.810581942s ago: executing program 3 (id=1424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, r1, 0x36, 0x4}, 0x20)

1.639037488s ago: executing program 5 (id=1426):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

1.478682323s ago: executing program 5 (id=1427):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001540)={0x28, r0, 0x801, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x80}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x0)

1.444730074s ago: executing program 5 (id=1428):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f4897b}, 0xc)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc)

1.302628519s ago: executing program 5 (id=1429):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="10000180040004"], 0x28}}, 0x0)

1.252470001s ago: executing program 5 (id=1430):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x6035, &(0x7f0000010140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

1.25232445s ago: executing program 3 (id=1431):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x80004, 0x6)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xc1, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0xc1, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x28, {0x28, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.165350603s ago: executing program 4 (id=1432):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x0, 0x7, 0x1, 0xfffffffc, 0x2d, 0x10000}, {0xa, 0x1ff, 0x4, 0x0, 0xa, 0xfffffffd, 0xfffffff9}]})

647.212959ms ago: executing program 4 (id=1434):
unshare(0x2a020400)
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='auxv\x00')
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20)

550.575952ms ago: executing program 4 (id=1435):
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=<r1=>0xffffffffffffffff)
io_setup(0x23, &(0x7f0000000280)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

534.356923ms ago: executing program 2 (id=1436):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000340)={0xb, 0x8, [{0x7f, 0x0, 0x4}, {0xc, 0x0, 0x1}, {0x1ff, 0x0, 0x5}, {0x0, 0x0, 0x7fff}, {0x22ba16d, 0x0, 0x5}, {0x9, 0x0, 0x4}, {0x3}, {0x4, 0x0, 0x30000}, {0x8, 0x0, 0x81}, {0x200, 0x0, 0x2}, {0x4, 0x0, 0x81}, {0x7, 0x0, 0x7}, {0x98, 0x0, 0x8}, {0x67, 0x0, 0x10}, {0x8, 0x0, 0x7}, {0x200, 0x0, 0xd60}]})

470.315065ms ago: executing program 4 (id=1437):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40)
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x44, 0xfffffffe}]}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}}}}}}, 0x0)

346.259819ms ago: executing program 2 (id=1438):
timer_create(0x7, &(0x7f0000003bc0)={0x0, 0x27, 0x1, @thr={0x0, 0x0}}, &(0x7f0000003c00)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000003c40)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f0000003c80)={{0x77359400}, {r1, r2+10000000}}, 0x0)
timer_gettime(r0, &(0x7f0000004080))

345.117119ms ago: executing program 4 (id=1439):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x7ff, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000200)={@random="a94fdfd02d25", @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x38, 0x67, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010102, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x5f, 0x1, 0x0, {0x5, 0x4, 0x0, 0x2a, 0x7, 0x66, 0x81, 0xfe, 0xff, 0xf818, @private=0xa010102, @broadcast}, "718781dfc8e58160"}}}}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000600)="bd8fd7846031c3aa0414c89a3cb4aa39ac6e42b7", 0x14}], 0x1}}], 0x1, 0x20000000)

322.05993ms ago: executing program 2 (id=1440):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38}])

269.049432ms ago: executing program 4 (id=1441):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000840)='./file0\x00', 0x1200000, &(0x7f0000000240)=ANY=[], 0xa1, 0x1fd, &(0x7f0000000340)="$eJzs281O1FAYxvGnHaYF/P7auDJxoRunOkyi7OQCvAFXGqiEWD8ibiAkDhvvwAtw7w14Na7cQSJXUNPTwliY9jDtdIrw/yXAO50+876TcMqZCSMAF9Z1892Ro66p4jj+ck/SyxeS5kqj3kwGBNCY2EkXfU53VHrH70vNj0kB+O90/ow/7hcu8J+HhWu/CvyuPhiAhu2vdI428r8Odlb3Dnac9NbwVPuH/RVX6mQ30rz58qT5U+V303Z3h/m8r/wDOAXjxN/T/ANJe//kF2yNL+f7Lx7LL9ryyUumxK5rfjy8n89fylpckXRV0rXstdYNSTfHPP810/+bpDR/x9YfmILkt6+XO1K6bE+8I2DyvZKEX94/WT1vNqLwsW3QAt0s/6Ri3svy/Zr5pYp5P8v3Vj9Ea4VnPS+6w63YFjDcE+t/Mtb1X2j09mGd9T83wfrvVuwBnFebW9tvX0dR+Gnywq2UshTJ9aTu4/xoYrBpFo7OxBgNF4cbyeRIcpm2p762PvP0Ckcalp2z0PqElqLlCxOAxgWf330MNre2H23o1Xq4Hr7vD5afDZb6g6fLgdmXB3V25wDOstEf/aNDcdn55f8SBAAAAAAAAAAAAAAA2nBL0u22hwAAAAAwE7P4OFHbzxEAAAAAAAAAAAAAAAAAAAA4L/4GAAD///eWMhs=")
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f0000000a40)=ANY=[@ANYBLOB="696f636861727365743d63703836302c756e686964652c616e63686f723d30303030303030303030303030303000803031302c766f6c756d653d30303030303030303030303030303030303030312c6e6f7374726963742c757466382c646d6f64653d30303030303030303030303030303030303030303030352c6e6f7672732c6c6f6e6761642c696f636861727365743d69736f383835392d31342c726f6f746469723d30303030303030303030303030303030303031332c6e6f7374726963742c6e6f7374726963742c00"], 0x5, 0xc6d, &(0x7f0000002600)="$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")
symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00')

199.138184ms ago: executing program 2 (id=1442):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x852dd6c070cd7e4d}, 0x14}, 0x4, 0x700000000000000}, 0x0)

85.874087ms ago: executing program 1 (id=1443):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r1}, &(0x7f00000001c0)=0x8)

30.564239ms ago: executing program 2 (id=1444):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000280)={{@local, 0x40000}, {@any, 0x6}, 0x400, "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"}, 0x418, 0x400})

19.0689ms ago: executing program 5 (id=1445):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x10001, 0x20000001000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x2, 0x0)

0s ago: executing program 2 (id=1446):
setresuid(0x0, 0xee00, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

kernel console output (not intermixed with test programs):

_printk_skb: 7 callbacks suppressed
[  101.750363][   T26] audit: type=1800 audit(2000000290.902:7): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.429" name="file1" dev="loop5" ino=15 res=0 errno=0
[  101.874827][ T5641] loop2: detected capacity change from 0 to 4096
[  101.946180][ T5614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.421 (5614)
[  102.025323][ T5614] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  102.072222][ T5614] BTRFS info (device loop4): using free space tree
[  102.134664][ T5614] BTRFS info (device loop4): has skinny extents
[  102.171661][ T4200] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  102.184475][ T4200] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  102.331352][ T5670] netlink: 276 bytes leftover after parsing attributes in process `syz.1.441'.
[  102.407530][ T5670] netlink: 276 bytes leftover after parsing attributes in process `syz.1.441'.
[  102.414986][ T4237] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  102.449154][ T5682] block nbd1: NBD_DISCONNECT
[  102.500107][ T5614] BTRFS info (device loop4): enabling ssd optimizations
[  102.574228][ T5688] set_capacity_and_notify: 1 callbacks suppressed
[  102.574242][ T5688] loop2: detected capacity change from 0 to 128
[  102.686714][ T5691] loop1: detected capacity change from 0 to 24
[  102.796796][ T5691] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  102.805279][ T4237] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  102.813555][ T4237] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  102.845225][ T4237] usb 6-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config
[  102.864408][ T5691] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  102.910653][ T4237] usb 6-1: config 220 has no interface number 2
[  102.937561][ T4237] usb 6-1: config 220 interface 1 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  102.968959][ T4237] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  103.000719][ T4237] usb 6-1: config 220 interface 0 has no altsetting 0
[  103.008315][ T4237] usb 6-1: config 220 interface 76 has no altsetting 0
[  103.024941][ T4237] usb 6-1: config 220 interface 1 has no altsetting 0
[  103.172272][ T5702] loop3: detected capacity change from 0 to 8192
[  103.195315][ T4237] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  103.214384][ T4237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.243383][ T4237] usb 6-1: Product: syz
[  103.276216][ T5702] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  103.304959][ T4660] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  103.315649][ T4237] usb 6-1: Manufacturer: syz
[  103.320298][ T4237] usb 6-1: SerialNumber: syz
[  103.340852][ T5702] REISERFS (device loop3): using ordered data mode
[  103.374441][ T5702] reiserfs: using flush barriers
[  103.391098][ T5702] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  103.412914][ T5702] REISERFS (device loop3): checking transaction log (loop3)
[  103.432573][ T5702] REISERFS (device loop3): Using r5 hash to sort names
[  103.445313][ T5702] REISERFS (device loop3): using 3.5.x disk format
[  103.456119][ T5702] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  103.665149][ T4660] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  103.699171][ T4660] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.720669][ T4660] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.758247][ T4660] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  103.779422][ T5704] loop1: detected capacity change from 0 to 32768
[  103.797881][ T4237] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  103.822601][ T4237] usb 6-1: No valid video chain found.
[  103.835708][ T4237] usb 6-1: selecting invalid altsetting 0
[  103.865151][ T4660] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  103.894639][ T4660] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  103.911920][ T5704] XFS (loop1): Mounting V5 Filesystem
[  103.936156][ T4660] usb 3-1: Manufacturer: syz
[  103.946258][ T4237] usb 6-1: selecting invalid altsetting 0
[  103.957338][ T4237] usbtest: probe of 6-1:220.1 failed with error -22
[  103.958227][ T5710] loop4: detected capacity change from 0 to 32768
[  103.971359][ T4660] usb 3-1: config 0 descriptor??
[  103.983882][ T4237] usb 6-1: USB disconnect, device number 3
[  104.042682][ T5704] XFS (loop1): Ending clean mount
[  104.049529][ T5704] XFS (loop1): Quotacheck needed: Please wait.
[  104.072357][ T5710] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.450 (5710)
[  104.110072][ T5704] XFS (loop1): Quotacheck: Done.
[  104.140016][ T5710] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  104.160232][ T5710] BTRFS info (device loop4): enabling auto defrag
[  104.174093][ T5710] BTRFS info (device loop4): use no compression
[  104.189375][ T5710] BTRFS info (device loop4): max_inline at 4096
[  104.204056][ T5710] BTRFS info (device loop4): using free space tree
[  104.235271][ T5710] BTRFS info (device loop4): has skinny extents
[  104.272591][ T4190] XFS (loop1): Unmounting Filesystem
[  104.443046][ T4660] appleir 0003:05AC:8243.0007: unknown main item tag 0x0
[  104.470630][ T4660] appleir 0003:05AC:8243.0007: No inputs registered, leaving
[  104.510266][ T4660] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  104.532793][ T5710] BTRFS info (device loop4): enabling ssd optimizations
[  104.809999][ T4482] usb 3-1: USB disconnect, device number 8
[  105.435047][ T4482] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  105.635168][ T4660] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  105.860797][ T4482] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.886045][ T4482] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.923113][ T5812] loop3: detected capacity change from 0 to 4096
[  105.999609][ T4660] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  106.015367][ T4660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.023516][ T5812] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  106.044297][ T4660] usb 5-1: config 0 descriptor??
[  106.086154][ T4237] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  106.116447][ T4482] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  106.135779][ T4482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.143815][ T4482] usb 6-1: Product: syz
[  106.175751][ T4482] usb 6-1: Manufacturer: syz
[  106.195260][ T4482] usb 6-1: SerialNumber: syz
[  106.448585][ T4237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.490239][ T4237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.509836][ T4482] usb 6-1: unit 255 not found!
[  106.520830][ T4237] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  106.553625][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.581208][ T4237] usb 3-1: config 0 descriptor??
[  106.598263][ T4482] usb 6-1: USB disconnect, device number 4
[  106.649702][ T5850] loop3: detected capacity change from 0 to 4096
[  106.792947][ T5855] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.896725][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  106.965072][ T4660] usb 5-1: Cannot set autoneg
[  106.970193][ T4660] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71
[  107.002541][ T4660] usb 5-1: USB disconnect, device number 7
[  107.277267][ T4237] hid-led 0003:1D34:000A.0008: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0
[  107.312507][ T4237] hid-led 0003:1D34:000A.0008: Dream Cheeky Webmail Notifier initialized
[  107.374765][ T5860] loop3: detected capacity change from 0 to 32768
[  107.427580][   T26] audit: type=1800 audit(2000000296.582:8): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.493" name="file1" dev="loop3" ino=4 res=0 errno=0
[  107.484988][ T4237] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  107.522375][ T4267] usb 3-1: USB disconnect, device number 9
[  107.545740][ T5877] fido_id[5877]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1D34:000A.0008/report_descriptor': No such device
[  107.745019][ T4237] usb 6-1: Using ep0 maxpacket: 32
[  107.783600][ T5889] loop1: detected capacity change from 0 to 2048
[  107.841037][ T5895] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  107.875131][ T4237] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  107.876790][ T5889] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.897536][ T4237] usb 6-1: config 0 has no interface number 0
[  108.027203][ T5901] loop4: detected capacity change from 0 to 1024
[  108.067617][ T4237] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  108.080315][ T4237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.163942][ T4237] usb 6-1: Product: syz
[  108.183364][ T5906] loop1: detected capacity change from 0 to 16
[  108.184216][ T4237] usb 6-1: Manufacturer: syz
[  108.224011][ T4237] usb 6-1: SerialNumber: syz
[  108.240582][ T4237] usb 6-1: config 0 descriptor??
[  108.253485][ T5908] loop2: detected capacity change from 0 to 2048
[  108.260181][ T5906] erofs: (device loop1): mounted with root inode @ nid 36.
[  108.316488][ T4237] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  108.386870][ T5908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.533606][ T4237] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  108.553579][ T4237] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  108.804947][ T5897] loop3: detected capacity change from 0 to 32768
[  108.982028][ T5897] XFS (loop3): Mounting V5 Filesystem
[  109.009998][ T4267] usb 6-1: USB disconnect, device number 5
[  109.024969][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  109.070785][ T4267] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  109.089700][ T4267] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  109.102255][ T4267] quatech2 6-1:0.51: device disconnected
[  109.153775][ T5897] XFS (loop3): Ending clean mount
[  109.161540][ T5955] loop2: detected capacity change from 0 to 128
[  109.225140][ T4265] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  109.377566][ T4201] XFS (loop3): Unmounting Filesystem
[  109.498835][ T5971] device veth0_vlan left promiscuous mode
[  109.566423][ T4265] usb 5-1: too many configurations: 25, using maximum allowed: 8
[  109.593451][ T5975] openvswitch: netlink: Actions may not be safe on all matching packets
[  109.976309][ T5990] loop1: detected capacity change from 0 to 4096
[  110.188439][ T4190] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  110.219440][ T4190] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  110.263045][ T6003] loop3: detected capacity change from 0 to 4096
[  110.283740][ T4265] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[  110.307482][ T4265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.350524][ T4265] usb 5-1: config 0 descriptor??
[  110.363716][ T6003] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  110.400881][ T4265] pwc: Creative Labs Webcam Pro Ex detected.
[  110.424704][ T4265] pwc: Warning: more than 1 configuration available.
[  110.459630][ T6017] loop5: detected capacity change from 0 to 256
[  110.545563][ T6017] exfat: Deprecated parameter 'utf8'
[  110.550967][ T6017] exfat: Deprecated parameter 'namecase'
[  110.569703][ T5985] loop2: detected capacity change from 0 to 40427
[  110.594084][ T6017] exfat: Deprecated parameter 'namecase'
[  110.631586][ T6017] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  110.710112][ T5985] F2FS-fs (loop2): invalid crc value
[  110.743476][ T5985] F2FS-fs (loop2): Found nat_bits in checkpoint
[  110.825261][ T4265] pwc: send_video_command error -71
[  110.832064][ T4265] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  110.859195][ T4265] Philips webcam: probe of 5-1:0.0 failed with error -71
[  110.889588][ T4265] usb 5-1: USB disconnect, device number 8
[  110.906575][ T5985] F2FS-fs (loop2): Start checkpoint disabled!
[  111.045228][ T5985] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  111.155962][ T6044] netlink: 'syz.5.548': attribute type 1 has an invalid length.
[  111.494412][ T6064] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on.
[  111.580241][ T6070] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  111.695288][ T6072] EXT4-fs (loop4): Ignoring removed nobh option
[  111.799024][ T6072] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.559: corrupted in-inode xattr
[  111.812156][ T6086] netlink: 'syz.2.564': attribute type 10 has an invalid length.
[  111.877541][ T6072] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.559: couldn't read orphan inode 15 (err -117)
[  111.893767][ T6086] team0: Port device dummy0 added
[  111.900951][ T6094] netlink: 'syz.2.564': attribute type 10 has an invalid length.
[  111.925067][ T4267] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  111.948053][ T6072] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,delalloc,debug_want_extra_isize=0x000000000000005a,usrjquota=,nouid32,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none.
[  112.018375][ T6094] team0: Port device dummy0 removed
[  112.099743][ T6094] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  112.204993][ T4267] usb 4-1: Using ep0 maxpacket: 32
[  112.327069][ T4267] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.505319][ T4267] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  112.549607][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.583947][ T4267] usb 4-1: Product: syz
[  112.609030][ T4267] usb 4-1: Manufacturer: syz
[  112.613683][ T4267] usb 4-1: SerialNumber: syz
[  112.637871][ T4267] usb 4-1: config 0 descriptor??
[  112.696208][ T4267] usb 4-1: bad CDC descriptors
[  112.701749][ T4267] usb 4-1: unsupported MDLM descriptors
[  112.914777][ T4666] usb 4-1: USB disconnect, device number 8
[  113.015240][ T4267] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  113.121874][ T6160] program syz.2.586 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  113.222775][ T6165] set_capacity_and_notify: 3 callbacks suppressed
[  113.222791][ T6165] loop4: detected capacity change from 0 to 1024
[  113.324320][ T6172] netlink: 'syz.1.592': attribute type 1 has an invalid length.
[  113.345190][ T5382] hfsplus: b-tree write err: -5, ino 25
[  113.352330][ T5382] hfsplus: b-tree write err: -5, ino 4
[  113.363639][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.592'.
[  113.374596][ T5382] hfsplus: b-tree write err: -5, ino 2
[  113.555380][ T4267] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[  113.577341][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.611193][ T4267] usb 6-1: Product: syz
[  113.616011][ T4267] usb 6-1: Manufacturer: syz
[  113.620619][ T4267] usb 6-1: SerialNumber: syz
[  113.657226][ T4267] usb 6-1: config 0 descriptor??
[  113.703886][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'.
[  113.714618][ T6193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.600'.
[  113.720853][ T4267] usb 6-1: Waiting for MOTU Microbook II to boot up...
[  113.751079][ T4267] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22
[  113.751137][ T4267] snd-usb-audio: probe of 6-1:0.0 failed with error -22
[  113.844038][ T6196] loop3: detected capacity change from 0 to 8192
[  113.882756][ T6196] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  113.894982][ T4265] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  113.895112][ T6196] REISERFS (device loop3): using ordered data mode
[  113.914927][ T4666] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  113.934701][ T6199] loop4: detected capacity change from 0 to 24
[  113.941364][ T4267] usb 6-1: USB disconnect, device number 6
[  113.955328][ T6196] reiserfs: using flush barriers
[  113.961699][ T6196] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  113.978964][ T6196] REISERFS (device loop3): checking transaction log (loop3)
[  113.990061][ T6196] REISERFS (device loop3): Using r5 hash to sort names
[  113.997227][ T6196] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  114.007290][ T6199] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  114.063361][ T6199] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  114.201928][ T6202] loop3: detected capacity change from 0 to 256
[  114.295122][ T4666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.307196][ T4666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.317699][ T4666] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  114.327111][ T4666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.337098][ T4666] usb 2-1: config 0 descriptor??
[  114.354008][ T4265] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  114.372458][ T4265] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  114.387404][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.437450][ T4265] gspca_main: stv0680-2.14.0 probing 041e:4007
[  114.763703][ T6213] netlink: 64 bytes leftover after parsing attributes in process `syz.5.611'.
[  114.819336][ T4666] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0
[  115.043750][ T6214] loop3: detected capacity change from 0 to 32768
[  115.157066][   T26] audit: type=1800 audit(2000000304.312:9): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.612" name="file2" dev="loop3" ino=5 res=0 errno=0
[  115.250664][ T4235] usb 2-1: USB disconnect, device number 5
[  115.290899][ T6225] loop4: detected capacity change from 0 to 256
[  115.335334][ T6223] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  115.335334][ T6223] 
[  115.369513][ T6225] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc3758327, utbl_chksum : 0xe619d30d)
[  115.390118][ T6218] loop5: detected capacity change from 0 to 32768
[  115.435039][ T6218] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.614 (6218)
[  115.482793][ T6223] ERROR: (device loop3): remounting filesystem as read-only
[  115.501343][ T6218] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  115.531273][ T6223] ialloc: diAlloc returned -5!
[  115.549520][ T6218] BTRFS info (device loop5): setting nodatasum
[  115.583782][ T6218] BTRFS info (device loop5): force zlib compression, level 3
[  115.593394][ T6218] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  115.619469][ T6218] BTRFS info (device loop5): use lzo compression, level 0
[  115.627325][ T6218] BTRFS info (device loop5): turning on flush-on-commit
[  115.635146][ T4265] stv0680 3-1:4.0: Could not get descriptor 0200
[  115.640265][ T6218] BTRFS info (device loop5): enabling auto defrag
[  115.648680][ T6218] BTRFS info (device loop5): max_inline at 4096
[  115.681178][ T6218] BTRFS info (device loop5): using free space tree
[  115.705462][ T6218] BTRFS info (device loop5): has skinny extents
[  115.855155][ T4265] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  115.873622][ T4265] stv0680 3-1:4.0: last error: 34,  command = 0xf
[  115.890228][ T4265] usb 3-1: USB disconnect, device number 10
[  115.911402][ T6249] team0: No ports can be present during mode change
[  115.993511][ T6218] BTRFS info (device loop5): enabling ssd optimizations
[  116.389644][ T6260] loop3: detected capacity change from 0 to 512
[  116.435173][ T4267] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  116.462267][ T6262] loop2: detected capacity change from 0 to 256
[  116.509341][ T6237] loop4: detected capacity change from 0 to 32768
[  116.557410][ T6260] EXT4-fs (loop3): 1 truncate cleaned up
[  116.565440][ T6260] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.636175][   T26] audit: type=1800 audit(2000000305.792:10): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.619" name="file0" dev="loop3" ino=13 res=0 errno=0
[  116.659003][ T6260] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.619: invalid indirect mapped block 234881024 (level 0)
[  116.765160][   T26] audit: type=1800 audit(2000000305.862:11): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.618" name="file1" dev="loop4" ino=4 res=0 errno=0
[  116.805476][ T4267] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  116.823086][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.878370][ T4267] usb 2-1: config 0 descriptor??
[  117.185503][ T6288] FAT-fs (loop5): Directory bread(block 64) failed
[  117.192822][ T6288] FAT-fs (loop5): Directory bread(block 65) failed
[  117.195155][ T4267] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00
[  117.208266][ T6288] FAT-fs (loop5): Directory bread(block 66) failed
[  117.214830][ T6288] FAT-fs (loop5): Directory bread(block 67) failed
[  117.217730][ T4537] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  117.232327][ T6288] FAT-fs (loop5): Directory bread(block 68) failed
[  117.237685][ T4267] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  117.252880][ T6287] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled
[  117.262709][ T6288] FAT-fs (loop5): Directory bread(block 69) failed
[  117.279566][ T6288] FAT-fs (loop5): Directory bread(block 70) failed
[  117.287873][ T6288] FAT-fs (loop5): Directory bread(block 71) failed
[  117.295563][ T6288] FAT-fs (loop5): Directory bread(block 72) failed
[  117.302363][ T6288] FAT-fs (loop5): Directory bread(block 73) failed
[  117.302943][ T6287] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=./file1,nolazytime,sb=0x0000000000000aab,discard,norecovery,usrjquota=,,errors=continue. Quota mode: writeback.
[  117.335742][ T6287] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.364973][ T4536] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  117.445170][ T4267] [drm:udl_init] *ERROR* Selecting channel failed
[  117.462425][ T4267] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  117.470087][ T4267] [drm] Initialized udl on minor 2
[  117.495425][ T4267] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  117.506434][ T4267] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  117.542598][ T4267] usb 2-1: USB disconnect, device number 6
[  117.565149][ T4537] usb 3-1: Using ep0 maxpacket: 8
[  117.573469][ T4237] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  117.591096][ T6292] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[  117.604789][ T4237] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  117.627251][ T4237] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  117.655338][ T4536] usb 4-1: Using ep0 maxpacket: 8
[  117.705311][ T4537] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  117.723699][ T4537] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  117.735598][ T4537] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 52064, setting to 1024
[  117.753263][ T4537] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  117.777035][ T4537] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  117.790654][ T4536] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  117.802342][ T4536] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  117.832180][ T4536] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  117.842590][ T4537] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  117.874994][ T4537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.884325][ T4536] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  117.905627][ T4536] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  117.921261][ T4536] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  117.930761][ T4536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.185241][ T4537] usb 3-1: GET_CAPABILITIES returned 0
[  118.190832][ T4537] usbtmc 3-1:16.0: can't read capabilities
[  118.206199][ T6296] hfsplus: bad catalog entry type
[  118.215244][ T4536] usb 4-1: GET_CAPABILITIES returned 0
[  118.220773][ T4536] usbtmc 4-1:16.0: can't read capabilities
[  118.268531][ T6298] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop5 scanned by syz.5.640 (6298)
[  118.341395][ T6298] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  118.374213][ T6298] BTRFS info (device loop5): using free space tree
[  118.413262][   T21] usb 3-1: USB disconnect, device number 11
[  118.436322][ T6298] BTRFS info (device loop5): has skinny extents
[  118.455667][    T9] hfsplus: b-tree write err: -5, ino 25
[  118.461437][    T9] hfsplus: b-tree write err: -5, ino 4
[  118.473781][    T9] hfsplus: b-tree write err: -5, ino 2
[  118.477613][ T4536] usb 4-1: USB disconnect, device number 9
[  118.710737][ T6316] set_capacity_and_notify: 4 callbacks suppressed
[  118.710753][ T6316] loop4: detected capacity change from 0 to 4096
[  118.745885][ T6316] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  118.805990][ T6298] BTRFS info (device loop5): enabling ssd optimizations
[  119.924727][ T6374] loop5: detected capacity change from 0 to 512
[  120.108809][ T6374] EXT4-fs (loop5): 1 truncate cleaned up
[  120.130956][ T6377] loop2: detected capacity change from 0 to 8192
[  120.133985][ T6374] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,acl,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  120.225409][ T6382] loop1: detected capacity change from 0 to 16
[  120.244411][ T6377] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  120.286309][ T6377] REISERFS (device loop2): using ordered data mode
[  120.289177][ T6382] erofs: (device loop1): mounted with root inode @ nid 36.
[  120.294051][ T6377] reiserfs: using flush barriers
[  120.306546][ T6377] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  120.323714][ T6377] REISERFS (device loop2): checking transaction log (loop2)
[  120.372852][ T4267] kernel write not supported for file /cpuinfo (pid: 4267 comm: kworker/1:7)
[  120.379770][ T6387] loop4: detected capacity change from 0 to 256
[  120.523952][   T26] audit: type=1804 audit(2000000309.672:12): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.667" name="/newroot/44/file0/file0" dev="loop4" ino=1048622 res=1 errno=0
[  120.643321][ T6393] loop1: detected capacity change from 0 to 512
[  120.721264][ T6377] REISERFS (device loop2): Using tea hash to sort names
[  120.746980][ T6377] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  121.064979][ T4267] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  121.413639][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'.
[  121.453896][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'.
[  121.475372][ T4267] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.501653][ T6406] loop5: detected capacity change from 0 to 32768
[  121.502292][ T4267] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  121.545108][ T4267] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  121.563355][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.574670][ T4267] usb 5-1: config 0 descriptor??
[  121.580041][ T6406] 
[  121.580041][ T6406]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  121.580041][ T6406] 
[  121.593929][ T6429] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  121.626979][ T4267] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  121.649871][ T4267] dvb-usb: bulk message failed: -22 (3/0)
[  121.665903][ T4267] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  121.695656][ T4267] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  121.702812][ T4267] usb 5-1: media controller created
[  121.715269][ T5382] ERROR: (device loop5): diWrite: ixpxd invalid
[  121.715269][ T5382] 
[  121.716293][ T4267] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  121.742887][ T4267] dvb-usb: bulk message failed: -22 (6/0)
[  121.752340][ T4267] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  121.762762][ T5382] ERROR: (device loop5): txCommit: 
[  121.762762][ T5382] 
[  121.779538][ T5382] jfs_write_inode: jfs_commit_inode failed!
[  121.791590][ T4881] 
[  121.791590][ T4881]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  121.791590][ T4881] 
[  121.806621][ T4267] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[  121.812594][ T4881] 
[  121.812594][ T4881]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  121.812594][ T4881] 
[  121.832803][ T4267] dvb-usb: schedule remote query interval to 150 msecs.
[  121.845770][ T6400] dvb-usb: bulk message failed: -22 (4/0)
[  121.866345][ T4267] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  121.915280][ T4267] usb 5-1: USB disconnect, device number 9
[  121.999049][ T4267] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  122.190193][ T6449] loop1: detected capacity change from 0 to 256
[  122.465032][ T4235] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  122.545175][ T4267] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  122.589251][ T6462] process 'syz.4.703' launched './file1' with NULL argv: empty string added
[  122.595150][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'.
[  122.685299][ T6468] pimreg: tun_chr_ioctl cmd 2147767507
[  122.705051][ T4237] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  122.748396][ T4235] usb 6-1: Using ep0 maxpacket: 8
[  122.756440][   T21] Bluetooth: hci0: command 0x0411 tx timeout
[  122.822635][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'.
[  122.836508][ T6475] trusted_key: encrypted_key: keyword 'upäate' not recognized
[  122.885177][ T4235] usb 6-1: config 0 has no interfaces?
[  122.895854][ T4235] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  122.905157][ T4267] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  122.905196][ T4267] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  122.943129][ T4235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.945645][ T4237] usb 3-1: Using ep0 maxpacket: 8
[  122.986379][ T4235] usb 6-1: config 0 descriptor??
[  123.063827][ T6483] loop4: detected capacity change from 0 to 4096
[  123.065474][ T4267] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  123.085100][ T4237] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.103722][ T4237] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  123.114092][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.132437][ T6483] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  123.138894][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.162760][ T6483] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  123.168665][ T4267] usb 4-1: Product: syz
[  123.180847][ T4267] usb 4-1: Manufacturer: syz
[  123.186542][ T4267] usb 4-1: SerialNumber: syz
[  123.191268][ T6487] loop1: detected capacity change from 0 to 1024
[  123.198046][ T4237] usb 3-1: config 0 descriptor??
[  123.219213][ T6483] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  123.235249][ T6483] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  123.251085][ T4237] gspca_main: vc032x-2.14.0 probing 046d:0892
[  123.257566][ T6483] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  123.293002][ T6483] ntfs: volume version 3.1.
[  123.310295][ T6483] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  123.315804][ T6487] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  123.333222][ T6487] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.362618][ T6487] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.715: bg 0: block 112: padding at end of block bitmap is not set
[  123.375437][ T6483] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  123.387682][ T6487] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  123.409622][ T6483] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  123.409649][ T6487] EXT4-fs (loop1): This should not happen!! Data will be lost
[  123.409649][ T6487] 
[  123.421665][ T6483] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  123.440603][ T6487] EXT4-fs (loop1): Total free blocks count 0
[  123.448550][ T6487] EXT4-fs (loop1): Free/Dirty block details
[  123.454556][ T6487] EXT4-fs (loop1): free_blocks=0
[  123.459695][ T6487] EXT4-fs (loop1): dirty_blocks=16
[  123.460736][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'.
[  123.465595][ T6487] EXT4-fs (loop1): Block reservation details
[  123.480237][ T6487] EXT4-fs (loop1): i_reserved_data_blocks=1
[  123.658940][ T4267] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  123.780627][ T4267] usb 4-1: USB disconnect, device number 10
[  123.843743][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  123.939493][ T4237] gspca_vc032x: reg_r err -71
[  123.945198][ T4237] vc032x: probe of 3-1:0.0 failed with error -71
[  123.956944][ T4237] usb 3-1: USB disconnect, device number 12
[  124.152749][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'.
[  124.231968][ T6519] loop3: detected capacity change from 0 to 128
[  124.273124][ T6519] FAT-fs (loop3): Directory bread(block 162) failed
[  124.283699][ T6519] FAT-fs (loop3): Directory bread(block 163) failed
[  124.291384][ T6519] FAT-fs (loop3): Directory bread(block 164) failed
[  124.313418][ T6519] FAT-fs (loop3): Directory bread(block 165) failed
[  124.320207][ T6519] FAT-fs (loop3): Directory bread(block 166) failed
[  124.327043][ T6519] FAT-fs (loop3): Directory bread(block 167) failed
[  124.352141][ T6519] FAT-fs (loop3): Directory bread(block 168) failed
[  124.361790][ T1107] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  124.370251][ T6519] FAT-fs (loop3): Directory bread(block 169) failed
[  124.385333][ T6519] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  124.423399][ T6519] FAT-fs (loop3): Directory bread(block 162) failed
[  124.431125][ T6519] FAT-fs (loop3): Directory bread(block 163) failed
[  124.442513][ T6519] attempt to access beyond end of device
[  124.442513][ T6519] loop3: rw=3, want=232, limit=128
[  124.454306][ T6519] attempt to access beyond end of device
[  124.454306][ T6519] loop3: rw=2051, want=234, limit=128
[  124.695049][ T4536] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  124.755292][ T1107] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  124.766856][ T1107] usb 2-1: config 0 interface 0 has no altsetting 0
[  124.773761][ T1107] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  124.782861][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.792292][ T1107] usb 2-1: config 0 descriptor??
[  124.825783][ T6511] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  124.845140][ T4491] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  124.865078][ T4235] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  124.965208][ T4536] usb 5-1: Using ep0 maxpacket: 16
[  125.105188][ T4536] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  125.113423][ T4536] usb 5-1: config 0 has no interface number 0
[  125.119578][ T4235] usb 4-1: Using ep0 maxpacket: 32
[  125.153828][ T4265] usb 6-1: USB disconnect, device number 7
[  125.216137][ T4491] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  125.225708][ T4491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.241573][ T4491] usb 3-1: config 0 descriptor??
[  125.275672][ T4235] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  125.286352][ T1107] prodikeys 0003:041E:2801.000A: unknown main item tag 0x2
[  125.293608][ T1107] prodikeys 0003:041E:2801.000A: unknown main item tag 0x6
[  125.319049][ T4536] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  125.328482][ T4235] usb 4-1: config 0 has no interface number 0
[  125.334587][ T4235] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  125.346082][ T4491] cp210x 3-1:0.0: cp210x converter detected
[  125.352149][ T4536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.360499][ T1107] prodikeys 0003:041E:2801.000A: ignoring exceeding usage max
[  125.368649][ T4536] usb 5-1: Product: syz
[  125.372821][ T4536] usb 5-1: Manufacturer: syz
[  125.378862][ T4235] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  125.389681][ T1107] prodikeys 0003:041E:2801.000A: hidraw0: USB HID v0.c1 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0
[  125.401535][ T4536] usb 5-1: SerialNumber: syz
[  125.408246][ T4536] usb 5-1: config 0 descriptor??
[  125.494096][ T4482] usb 2-1: USB disconnect, device number 7
[  125.585210][ T4235] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  125.594542][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.606294][ T4235] usb 4-1: Product: syz
[  125.610746][ T4235] usb 4-1: Manufacturer: syz
[  125.616080][ T4235] usb 4-1: SerialNumber: syz
[  125.622109][ T4235] usb 4-1: config 0 descriptor??
[  125.675828][ T4265] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  125.683963][ T4536] usb 5-1: selecting invalid altsetting 1
[  125.690104][ T4536] speedtch 5-1:0.1: speedtch_bind: setting interface to  1 failed (-22)!
[  125.700969][ T4536] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22!
[  125.708019][ T4536] speedtch: probe of 5-1:0.1 failed with error -22
[  125.725649][ T4536] usb 5-1: USB disconnect, device number 10
[  125.955148][ T4491] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  125.962909][ T4491] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  125.971406][ T4491] usb 3-1: cp210x converter now attached to ttyUSB0
[  125.979626][ T4491] usb 3-1: USB disconnect, device number 13
[  125.985674][ T4265] usb 6-1: Using ep0 maxpacket: 8
[  125.994808][ T4491] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  126.003743][ T4491] cp210x 3-1:0.0: device disconnected
[  126.081489][ T6540] loop1: detected capacity change from 0 to 512
[  126.088232][ T4235] radio-si470x 4-1:0.35: DeviceID=0xb980 ChipID=0x0000
[  126.100222][ T4235] radio-si470x 4-1:0.35: This driver is known to work with firmware version 12,
[  126.113409][ T4235] radio-si470x 4-1:0.35: but the device has firmware version 0.
[  126.140224][ T6540] EXT4-fs (loop1): 1 truncate cleaned up
[  126.146060][ T6540] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  126.285492][ T4265] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  126.294575][ T4265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.304690][ T4265] usb 6-1: Product: syz
[  126.309485][ T4235] radio-si470x 4-1:0.35: software version 185, hardware version 128
[  126.318537][ T4265] usb 6-1: Manufacturer: syz
[  126.323156][ T4265] usb 6-1: SerialNumber: syz
[  126.341023][ T4235] radio-si470x 4-1:0.35: If you have some trouble using this driver,
[  126.358436][ T4235] radio-si470x 4-1:0.35: please report to V4L ML at linux-media@vger.kernel.org
[  126.383472][ T4265] usb 6-1: config 0 descriptor??
[  126.428272][ T4265] gspca_main: se401-2.14.0 probing 047d:5003
[  126.525098][ T4235] radio-si470x 4-1:0.35: si470x_set_report: usb_control_msg returned -71
[  126.544748][ T4235] radio-si470x 4-1:0.35: submitting int urb failed (-90)
[  126.555506][ T6559] program syz.2.743 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  126.585287][ T4235] radio-si470x 4-1:0.35: si470x_set_report: usb_control_msg returned -71
[  126.593954][ T4235] radio-si470x: probe of 4-1:0.35 failed with error -22
[  126.639883][ T6535] udc-core: couldn't find an available UDC or it's busy
[  126.657212][ T6535] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  126.685209][ T4235] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  126.695899][ T6567] loop2: detected capacity change from 0 to 512
[  126.735210][ T4235] usb 4-1: USB disconnect, device number 11
[  126.807984][ T6567] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  126.831151][ T6567] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.918965][ T4265] gspca_se401: ExtraFeatures: 4
[  126.923875][ T4265] gspca_se401: Frame size: 64x0 bayer
[  126.940059][ T4265] gspca_se401: Frame size: 0x0 1/16th janggu
[  126.948149][ T4265] gspca_se401: Frame size: 0x0 1/16th janggu
[  126.958385][ T4265] gspca_se401: Frame size: 0x0 1/16th janggu
[  126.964629][ T4265] gspca_se401: Frame size: 0x0 1/16th janggu
[  127.141972][ T4265] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10
[  127.196057][ T4265] usb 6-1: USB disconnect, device number 8
[  127.269445][ T6585] loop2: detected capacity change from 0 to 64
[  128.165002][ T4267] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  128.247112][ T6606] loop3: detected capacity change from 0 to 32768
[  128.540597][ T4267] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  128.572669][ T4267] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  128.720713][ T6653] Failed to get privilege flags for destination (handle=0x2:0x400)
[  128.795139][ T4267] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  128.809471][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.849948][ T4267] usb 3-1: Product: syz
[  128.854163][ T4267] usb 3-1: Manufacturer: syz
[  128.870222][ T4267] usb 3-1: SerialNumber: syz
[  129.030862][ T6664] bond0: (slave bond_slave_0): Releasing backup interface
[  129.140002][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'.
[  129.193626][ T6646] loop1: detected capacity change from 0 to 32768
[  129.253198][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  129.253210][   T26] audit: type=1800 audit(2000000318.402:13): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.785" name="file2" dev="loop1" ino=5 res=0 errno=0
[  129.280250][ T4237] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  129.315180][ T4267] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  129.352100][ T4267] usb 3-1: USB disconnect, device number 14
[  129.519816][ T6666] loop3: detected capacity change from 0 to 32768
[  129.525001][ T4237] usb 6-1: Using ep0 maxpacket: 32
[  129.541804][ T6669] ERROR: (device loop1): dbAlloc: the hint is outside the map
[  129.541804][ T6669] 
[  129.562083][ T6669] ERROR: (device loop1): remounting filesystem as read-only
[  129.580022][ T6669] ialloc: diAlloc returned -5!
[  129.607338][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.655289][ T4237] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  129.672813][ T4237] usb 6-1: config 0 has no interface number 0
[  129.837925][ T4237] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  129.855089][ T4237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.863124][ T4237] usb 6-1: Product: syz
[  129.867343][ T4237] usb 6-1: Manufacturer: syz
[  129.871969][ T4237] usb 6-1: SerialNumber: syz
[  129.885687][ T4237] usb 6-1: config 0 descriptor??
[  129.927387][ T4237] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  129.976271][ T6676] program syz.2.799 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  130.137549][ T4237] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  130.172949][ T4237] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  130.288035][ T4267] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  130.398442][ T6662] udc-core: couldn't find an available UDC or it's busy
[  130.417509][ T6662] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  130.668987][ T4660] usb 6-1: USB disconnect, device number 9
[  130.674994][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  130.683023][ T4267] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  130.694304][ T4237] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  130.707874][ T4267] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  130.726836][ T4660] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  130.741873][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.756400][ T4660] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  130.770558][ T4660] quatech2 6-1:0.51: device disconnected
[  130.807389][ T4267] gspca_main: stv0680-2.14.0 probing 041e:4007
[  130.868104][ T6696] loop2: detected capacity change from 0 to 32768
[  130.955473][   T26] audit: type=1800 audit(2000000320.102:14): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.808" name="file2" dev="loop2" ino=5 res=0 errno=0
[  131.085085][ T4237] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  131.093389][ T4237] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  131.138631][ T4237] usb 2-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config
[  131.155838][ T4237] usb 2-1: config 220 has no interface number 2
[  131.162169][ T4237] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  131.173710][ T4237] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  131.187070][ T4237] usb 2-1: config 220 interface 0 has no altsetting 0
[  131.191471][ T6715] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  131.191471][ T6715] 
[  131.193877][ T4237] usb 2-1: config 220 interface 76 has no altsetting 0
[  131.211295][ T4237] usb 2-1: config 220 interface 1 has no altsetting 0
[  131.255351][ T6715] ERROR: (device loop2): remounting filesystem as read-only
[  131.292830][ T6715] ialloc: diAlloc returned -5!
[  131.405187][ T4237] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  131.419419][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.427851][ T4237] usb 2-1: Product: syz
[  131.432032][ T4237] usb 2-1: Manufacturer: syz
[  131.437478][ T4237] usb 2-1: SerialNumber: syz
[  131.615012][ T4666] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  131.652203][ T6737] kvm [6736]: vcpu3, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop
[  131.795311][ T4237] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  131.812097][ T4237] usb 2-1: No valid video chain found.
[  131.824582][ T4237] usb 2-1: selecting invalid altsetting 0
[  131.875179][ T4666] usb 4-1: Using ep0 maxpacket: 8
[  131.906169][ T4237] usb 2-1: selecting invalid altsetting 0
[  131.912545][ T4237] usbtest: probe of 2-1:220.1 failed with error -22
[  131.925341][ T4237] usb 2-1: USB disconnect, device number 8
[  131.995213][ T4267] stv0680 5-1:4.0: Could not get descriptor 0200
[  132.001748][ T4666] usb 4-1: config 2 has an invalid interface number: 176 but max is 0
[  132.024648][ T4666] usb 4-1: config 2 has no interface number 0
[  132.031269][   T21] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  132.039601][ T4666] usb 4-1: config 2 interface 176 has no altsetting 0
[  132.205096][ T4666] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=ef.38
[  132.214274][ T4666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.222391][ T4666] usb 4-1: Product: syz
[  132.226913][ T4666] usb 4-1: Manufacturer: syz
[  132.231539][ T4666] usb 4-1: SerialNumber: syz
[  132.236391][ T4267] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  132.247889][ T4267] stv0680 5-1:4.0: last error: 3,  command = 0x5
[  132.262548][ T4267] usb 5-1: USB disconnect, device number 11
[  132.275298][   T21] usb 6-1: Using ep0 maxpacket: 16
[  132.395049][   T21] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.408862][   T21] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.418762][   T21] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  132.432037][   T21] usb 6-1: config 0 interface 0 has no altsetting 0
[  132.438861][   T21] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  132.448092][   T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.458758][   T21] usb 6-1: config 0 descriptor??
[  132.527585][ T4666] usb 4-1: USB disconnect, device number 12
[  132.676433][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.682895][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  132.939693][   T21] hid (null): unknown global tag 0xd
[  133.150575][   T21] usb 6-1: USB disconnect, device number 10
[  134.418380][ T6761] loop5: detected capacity change from 0 to 32768
[  134.422862][ T6757] loop1: detected capacity change from 0 to 32768
[  134.470120][   T26] audit: type=1800 audit(2000000323.622:15): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.833" name="file2" dev="loop5" ino=5 res=0 errno=0
[  134.576735][ T6788] ERROR: (device loop5): dbAlloc: the hint is outside the map
[  134.576735][ T6788] 
[  134.627828][ T6778] loop4: detected capacity change from 0 to 32768
[  134.637922][ T6757] XFS (loop1): Mounting V5 Filesystem
[  134.692922][ T6788] ERROR: (device loop5): remounting filesystem as read-only
[  134.709342][ T6757] XFS (loop1): Ending clean mount
[  134.714600][ T6788] ialloc: diAlloc returned -5!
[  134.820755][ T4190] XFS (loop1): Unmounting Filesystem
[  135.271577][ T6798] loop3: detected capacity change from 0 to 32768
[  135.285433][ T6805] bond0: (slave bond_slave_0): Releasing backup interface
[  135.333913][ T6798] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.860 (6798)
[  135.394292][ T6798] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  135.467579][ T6798] BTRFS info (device loop3): force zlib compression, level 3
[  135.511727][ T6798] BTRFS info (device loop3): force clearing of disk cache
[  135.530976][ T6798] BTRFS info (device loop3): setting nodatasum
[  135.578638][ T6798] BTRFS info (device loop3): use zlib compression, level 3
[  135.619250][ T6798] BTRFS info (device loop3): allowing degraded mounts
[  135.649578][ T6798] BTRFS info (device loop3): enabling disk space caching
[  135.690701][ T6798] BTRFS info (device loop3): disk space caching is enabled
[  135.719788][ T6798] BTRFS info (device loop3): has skinny extents
[  135.898882][ T6798] BTRFS info (device loop3): enabling ssd optimizations
[  135.908173][ T6803] loop4: detected capacity change from 0 to 40427
[  135.919413][ T6798] BTRFS info (device loop3): clearing free space tree
[  135.935985][ T6798] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  135.947352][ T6798] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  135.993956][ T6803] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff
[  136.039512][ T6803] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4
[  136.096451][ T6803] F2FS-fs (loop4): invalid crc value
[  136.129450][ T6803] F2FS-fs (loop4): Found nat_bits in checkpoint
[  136.220557][ T6803] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0
[  136.287961][ T6803] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  136.537586][ T6803] F2FS-fs (loop4) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x185/0x8f0
[  136.592338][   T26] audit: type=1800 audit(2000000325.742:16): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.854" name="bus" dev="loop4" ino=13 res=0 errno=0
[  136.619158][ T6803] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x118/0x1130
[  136.661711][ T6863] loop2: detected capacity change from 0 to 512
[  136.737817][ T6863] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.863: inode has both inline data and extents flags
[  136.755657][ T6863] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.863: couldn't read orphan inode 15 (err -117)
[  136.822817][ T6863] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  136.860547][ T5188] attempt to access beyond end of device
[  136.860547][ T5188] loop4: rw=2049, want=45104, limit=40427
[  137.021341][ T6879] loop5: detected capacity change from 0 to 256
[  137.172846][ T6879] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[  137.179538][ T6883] loop2: detected capacity change from 0 to 4096
[  137.585001][ T4267] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  137.662836][ T6905] netem: change failed
[  137.955244][ T4267] usb 2-1: config 0 has no interfaces?
[  137.971463][ T4267] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  138.002393][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.019910][ T6921] loop2: detected capacity change from 0 to 512
[  138.035431][ T4267] usb 2-1: config 0 descriptor??
[  138.102970][ T6921] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  138.151130][ T6897] loop3: detected capacity change from 0 to 32768
[  138.184553][ T6921] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback.
[  138.250150][ T6932] loop5: detected capacity change from 0 to 128
[  138.284144][ T6897] JBD2: Ignoring recovery information on journal
[  138.295183][ T6921] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.324259][ T6932] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  138.411786][ T6897] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  138.441587][ T6932] hpfs: filesystem error: improperly stopped
[  138.482113][ T6932] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  138.527054][ T6932] hpfs: You really don't want any checks? You are crazy...
[  138.550744][ T6897] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74)
[  138.560655][ T6932] hpfs: hpfs_map_sector(): read error
[  138.615505][ T6932] hpfs: code page support is disabled
[  138.621990][ T6932] hpfs: hpfs_map_4sectors(): unaligned read
[  138.623119][ T6940] loop4: detected capacity change from 0 to 128
[  138.630645][ T6932] hpfs: hpfs_map_4sectors(): unaligned read
[  138.642208][ T6897] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  138.666874][ T6932] hpfs: filesystem error: unable to find root dir
[  138.735122][ T6897] OCFS2: File system is now read-only.
[  138.740635][ T6897] (syz.3.875,6897,0):_ocfs2_free_suballoc_bits:2489 ERROR: status = -30
[  138.825168][ T6897] (syz.3.875,6897,0):ocfs2_remove_inode:699 ERROR: status = -30
[  138.832978][ T6897] (syz.3.875,6897,0):ocfs2_wipe_inode:821 ERROR: status = -30
[  138.875199][ T6897] (syz.3.875,6897,0):ocfs2_delete_inode:1082 ERROR: status = -30
[  139.023766][ T4201] ocfs2: Unmounting device (7,3) on (node local)
[  139.132454][ T6946] ntfs3: loop2: MFT: r=1b, expect seq=1 instead of 0!
[  139.230868][ T6952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.643157][ T6964] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,quota,errors=remount-ro,dioread_lock,barrier,data_err=ignore,minixdf,min_batch_time=0x0000000000000009,nombcache,bsddf,. Quota mode: writeback.
[  139.830940][ T4237] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  139.965843][ T4491] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  139.977681][ T6990] program syz.5.911 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  140.085074][ T4237] usb 3-1: Using ep0 maxpacket: 16
[  140.205041][ T4237] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  140.243987][ T4237] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  140.266736][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.304664][ T4537] usb 2-1: USB disconnect, device number 9
[  140.323823][ T4237] usb 3-1: config 0 descriptor??
[  140.364408][ T4491] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  140.382425][ T4491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.421533][ T4491] usb 4-1: config 0 descriptor??
[  140.486245][ T4491] cp210x 4-1:0.0: cp210x converter detected
[  140.497451][ T7022] set_capacity_and_notify: 4 callbacks suppressed
[  140.497466][ T7022] loop4: detected capacity change from 0 to 256
[  140.569504][   T26] audit: type=1800 audit(2000000329.722:17): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.926" name="file1" dev="loop4" ino=1048625 res=0 errno=0
[  140.570544][ T7022] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  140.609563][ T7022] FAT-fs (loop4): Filesystem has been set read-only
[  140.633705][ T7025] loop1: detected capacity change from 0 to 512
[  140.711845][ T7025] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  140.735355][ T7025] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  140.750880][ T7025] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  140.770678][ T7025] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  140.779932][ T7025] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000]
[  140.794109][ T7025] EXT4-fs (loop1): orphan cleanup on readonly fs
[  140.800814][ T7025] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.928: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  140.822254][ T7025] EXT4-fs error (device loop1): ext4_quota_enable:6447: comm syz.1.928: Bad quota inode: 4, type: 1
[  140.828060][ T4237] hid-led 0003:0FC5:B080.000C: unknown main item tag 0xd
[  140.834256][ T7025] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  140.840525][ T4237] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0
[  140.862565][ T4237] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0
[  140.863240][ T7025] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  140.869693][ T4237] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0
[  140.869718][ T4237] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0
[  140.869739][ T4237] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0
[  140.869759][ T4237] hid-led 0003:0FC5:B080.000C: unknown main item tag 0x0
[  140.910886][ T4491] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  140.920434][ T7025] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,bsddf,nodioread_nolock,acl,debug,noblock_validity,usrjquota=,minixdf,min_batch_time=0x0000000000000008,resgid=0x0000000000000000,sysvgroups,,errors=continue. Quota mode: writeback.
[  140.958633][ T4491] usb 4-1: cp210x converter now attached to ttyUSB0
[  140.999559][ T7025] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.928: bg 0: block 34: padding at end of block bitmap is not set
[  141.103635][ T7031] loop1: detected capacity change from 0 to 64
[  141.165451][ T4536] usb 4-1: USB disconnect, device number 13
[  141.174487][ T4536] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  141.210015][ T4536] cp210x 4-1:0.0: device disconnected
[  141.275079][ T4237] hid-led: probe of 0003:0FC5:B080.000C failed with error -71
[  141.299305][ T4237] usb 3-1: USB disconnect, device number 15
[  141.318330][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.932'.
[  141.375636][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.932'.
[  141.558298][ T7043] loop5: detected capacity change from 0 to 256
[  141.615707][ T7043] exfat: Deprecated parameter 'utf8'
[  141.623915][ T7043] exfat: Deprecated parameter 'utf8'
[  141.639283][ T7043] exfat: Bad value for 'errors'
[  141.746145][ T7037] loop1: detected capacity change from 0 to 32768
[  141.840220][ T7054] loop3: detected capacity change from 0 to 512
[  141.871179][ T7037] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.933 (7037)
[  141.898965][   T26] audit: type=1326 audit(2000000331.052:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.2.943" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa642a5fe59 code=0x0
[  141.937174][ T7054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[  141.952196][ T7054] System zones: 1-12
[  141.967455][ T7054] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.941: missing EA_INODE flag
[  141.982507][ T7054] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.941: error while reading EA inode 12 err=-117
[  142.004303][ T7037] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  142.006278][ T7054] EXT4-fs (loop3): 1 orphan inode deleted
[  142.019682][ T7054] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback.
[  142.021626][ T7062] loop2: detected capacity change from 0 to 1024
[  142.079680][ T7037] BTRFS info (device loop1): force zlib compression, level 3
[  142.114031][ T7037] BTRFS info (device loop1): force clearing of disk cache
[  142.152766][ T7037] BTRFS info (device loop1): setting nodatasum
[  142.194655][ T7062] hfsplus: part requires an argument
[  142.195488][ T7037] BTRFS info (device loop1): use zlib compression, level 3
[  142.210111][ T7062] hfsplus: unable to parse mount options
[  142.342269][ T7037] BTRFS info (device loop1): allowing degraded mounts
[  142.383878][ T7037] BTRFS info (device loop1): enabling disk space caching
[  142.422917][ T7037] BTRFS info (device loop1): disk space caching is enabled
[  142.456779][ T7037] BTRFS info (device loop1): has skinny extents
[  142.611102][ T7052] loop4: detected capacity change from 0 to 32768
[  142.688806][   T26] audit: type=1800 audit(2000000331.842:19): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.940" name="file2" dev="loop4" ino=5 res=0 errno=0
[  142.796991][ T7037] BTRFS info (device loop1): enabling ssd optimizations
[  142.844341][ T7037] BTRFS info (device loop1): clearing free space tree
[  142.875048][ T7037] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  142.955693][ T7037] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  143.016374][ T7099] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  143.016374][ T7099] 
[  143.077794][ T7108] loop2: detected capacity change from 0 to 8
[  143.132364][ T7099] ERROR: (device loop4): remounting filesystem as read-only
[  143.160399][ T7099] ialloc: diAlloc returned -5!
[  143.881530][ T4267] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  143.917595][ T7133] program syz.1.966 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  143.991071][ T7137] netem: incorrect gi model size
[  143.997079][ T7137] netem: change failed
[  144.095146][   T21] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  144.125865][ T4267] usb 3-1: Using ep0 maxpacket: 16
[  144.210394][ T7152] netlink: 'syz.5.974': attribute type 1 has an invalid length.
[  144.248218][ T4267] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.273453][ T4267] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.300828][ T4267] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  144.323476][ T7156] loop5: detected capacity change from 0 to 2048
[  144.330148][ T4267] usb 3-1: config 0 interface 0 has no altsetting 0
[  144.340040][ T4267] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  144.349258][   T21] usb 5-1: Using ep0 maxpacket: 32
[  144.354794][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.367937][ T4267] usb 3-1: config 0 descriptor??
[  144.445308][ T7156] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  144.465154][   T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  144.518214][ T7156] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  144.542471][ T7156] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  144.559648][ T7156] EXT4-fs (loop5): This should not happen!! Data will be lost
[  144.559648][ T7156] 
[  144.569511][ T7156] EXT4-fs (loop5): Total free blocks count 0
[  144.575621][ T7156] EXT4-fs (loop5): Free/Dirty block details
[  144.581630][ T7156] EXT4-fs (loop5): free_blocks=2415919504
[  144.587567][ T7156] EXT4-fs (loop5): dirty_blocks=64
[  144.592713][ T7156] EXT4-fs (loop5): Block reservation details
[  144.599021][ T7156] EXT4-fs (loop5): i_reserved_data_blocks=4
[  144.605018][ T1107] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  144.613624][ T7156] EXT4-fs error (device loop5) in ext4_setattr:5645: error 28
[  144.635331][   T21] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  144.649580][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.658066][   T21] usb 5-1: Product: syz
[  144.662374][   T21] usb 5-1: Manufacturer: syz
[  144.670332][   T21] usb 5-1: SerialNumber: syz
[  144.676998][   T21] usb 5-1: config 0 descriptor??
[  144.683008][ T4256] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28
[  144.700689][ T4256] EXT4-fs (loop5): This should not happen!! Data will be lost
[  144.700689][ T4256] 
[  144.715868][   T21] hub 5-1:0.0: bad descriptor, ignoring hub
[  144.722575][   T21] hub: probe of 5-1:0.0 failed with error -5
[  144.840929][ T4267] hid (null): unknown global tag 0xd
[  144.859486][ T1107] usb 4-1: Using ep0 maxpacket: 16
[  144.983311][ T7169] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  145.019518][ T1107] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  145.034938][ T1107] usb 4-1: config 0 has no interface number 0
[  145.045746][ T1107] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  145.055321][ T4267] usb 5-1: USB disconnect, device number 12
[  145.064110][ T1107] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  145.120140][   T21] usb 3-1: USB disconnect, device number 16
[  145.263448][ T7167] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff
[  145.280224][ T7167] F2FS-fs (loop5): invalid crc value
[  145.286151][ T1107] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  145.298129][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.306959][ T1107] usb 4-1: Product: syz
[  145.311158][ T1107] usb 4-1: Manufacturer: syz
[  145.316385][ T1107] usb 4-1: SerialNumber: syz
[  145.322172][ T7167] F2FS-fs (loop5): Found nat_bits in checkpoint
[  145.343192][ T1107] usb 4-1: config 0 descriptor??
[  145.395304][ T7158] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  145.403151][ T7158] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  145.421268][ T7167] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  145.474204][ T7167] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=6e75742f, run fsck to fix.
[  145.528064][ T7182] netlink: 72 bytes leftover after parsing attributes in process `syz.1.985'.
[  145.651020][ T7158] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  145.712805][ T7158] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  145.905074][ T7203] set_capacity_and_notify: 2 callbacks suppressed
[  145.905090][ T7203] loop1: detected capacity change from 0 to 256
[  145.953391][ T7207] loop5: detected capacity change from 0 to 512
[  145.965337][ T1107] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  146.002952][ T7203] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  146.054676][ T7207] EXT4-fs (loop5): Test dummy encryption mode enabled
[  146.092482][ T7207] EXT4-fs (loop5): Ignoring removed oldalloc option
[  146.100305][ T7203] attempt to access beyond end of device
[  146.100305][ T7203] loop1: rw=524288, want=34359738496, limit=256
[  146.122029][ T7203] attempt to access beyond end of device
[  146.122029][ T7203] loop1: rw=0, want=34359738496, limit=256
[  146.134727][   T26] audit: type=1800 audit(2000000335.292:20): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.996" name="file1" dev="loop1" ino=1048626 res=0 errno=0
[  146.172051][ T7207] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue. Quota mode: none.
[  146.315566][ T7220] netlink: 'syz.1.1001': attribute type 6 has an invalid length.
[  146.408847][ T1107] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  146.455112][ T1107] asix: probe of 4-1:0.34 failed with error -71
[  146.465333][ T7226] loop2: detected capacity change from 0 to 512
[  146.477703][ T1107] usb 4-1: USB disconnect, device number 14
[  146.527692][ T7226] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.1005: inode has both inline data and extents flags
[  146.585645][ T7207] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  146.635157][ T7226] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1005: couldn't read orphan inode 15 (err -117)
[  146.654407][ T7226] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback.
[  146.900696][ T7252] device netdevsim0 entered promiscuous mode
[  146.922624][ T7252] device batadv0 entered promiscuous mode
[  146.981278][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  147.035038][ T7260] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1016'.
[  147.044049][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1016'.
[  147.180047][ T7271] loop4: detected capacity change from 0 to 256
[  147.291248][ T7277] kvm [7276]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000028
[  147.335971][ T7271] FAT-fs (loop4): Directory bread(block 64) failed
[  147.342553][ T7271] FAT-fs (loop4): Directory bread(block 65) failed
[  147.421939][ T7271] FAT-fs (loop4): Directory bread(block 66) failed
[  147.435016][ T7286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1027'.
[  147.445308][ T7271] FAT-fs (loop4): Directory bread(block 67) failed
[  147.451940][ T7271] FAT-fs (loop4): Directory bread(block 68) failed
[  147.488287][ T7271] FAT-fs (loop4): Directory bread(block 69) failed
[  147.524971][ T4666] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  147.524983][ T7271] FAT-fs (loop4): Directory bread(block 70) failed
[  147.525014][ T7271] FAT-fs (loop4): Directory bread(block 71) failed
[  147.654046][ T7271] FAT-fs (loop4): Directory bread(block 72) failed
[  147.688739][ T7271] FAT-fs (loop4): Directory bread(block 73) failed
[  147.870489][ T7288] loop2: detected capacity change from 0 to 32768
[  147.902788][ T4666] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  147.915099][ T4267] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  147.943658][ T4666] usb 6-1: config 0 interface 0 has no altsetting 0
[  147.951620][   T26] audit: type=1800 audit(2000000337.112:21): pid=7288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1029" name="file2" dev="loop2" ino=5 res=0 errno=0
[  147.960572][ T7300] loop4: detected capacity change from 0 to 1024
[  147.982171][ T4666] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  147.993154][ T4666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.010460][ T4666] usb 6-1: config 0 descriptor??
[  148.038622][ T7275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  148.250374][ T7301] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  148.250374][ T7301] 
[  148.270228][ T7301] ERROR: (device loop2): remounting filesystem as read-only
[  148.277955][ T7301] ialloc: diAlloc returned -5!
[  148.285148][ T7300] EXT4-fs (loop4): Test dummy encryption mode enabled
[  148.292506][ T4267] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  148.307399][ T7300] EXT4-fs (loop4): inline encryption not supported
[  148.314390][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.327139][ T4267] usb 4-1: config 0 descriptor??
[  148.347937][ T7298] loop1: detected capacity change from 0 to 32768
[  148.352066][ T7300] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback.
[  148.381099][    C1] vkms_vblank_simulate: vblank timer overrun
[  148.389230][ T4267] cp210x 4-1:0.0: cp210x converter detected
[  148.455229][ T7298] JBD2: Ignoring recovery information on journal
[  148.463546][ T7298] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[  148.472291][ T7298] JBD2: bad block at offset 32
[  148.480046][ T7298] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  148.504768][ T4666] prodikeys 0003:041E:2801.000E: unknown main item tag 0x2
[  148.515535][ T4666] prodikeys 0003:041E:2801.000E: unknown main item tag 0x6
[  148.522968][ T4666] prodikeys 0003:041E:2801.000E: ignoring exceeding usage max
[  148.534799][ T4666] prodikeys 0003:041E:2801.000E: hidraw0: USB HID v0.c1 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input0
[  148.575827][ T4190] ocfs2: Unmounting device (7,1) on (node local)
[  148.734195][ T4237] usb 6-1: USB disconnect, device number 11
[  148.799290][ T7312] fido_id[7312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  148.835162][ T4267] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  148.877597][ T4267] usb 4-1: cp210x converter now attached to ttyUSB0
[  149.044031][ T7322] loop2: detected capacity change from 0 to 256
[  149.143560][ T4237] usb 4-1: USB disconnect, device number 15
[  149.165466][ T4237] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  149.200435][ T4237] cp210x 4-1:0.0: device disconnected
[  149.233139][ T7322] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x246dc941, utbl_chksum : 0xe619d30d)
[  149.506737][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv1
[  149.529252][ T7325] team0: Port device batadv1 added
[  149.621642][ T7320] loop1: detected capacity change from 0 to 131072
[  149.700399][ T7320] F2FS-fs (loop1): invalid crc value
[  149.709974][ T7334] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1045'.
[  149.762562][ T7320] F2FS-fs (loop1): Found nat_bits in checkpoint
[  149.826423][ T7320] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  149.945168][ T4235] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  150.375105][ T4235] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  150.390122][ T4235] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  150.420935][ T4235] usb 6-1: config 220 has no interface number 2
[  150.451753][ T4235] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  150.492502][ T4235] usb 6-1: config 220 interface 0 has no altsetting 0
[  150.508701][ T4235] usb 6-1: config 220 interface 76 has no altsetting 0
[  150.536932][ T7347] loop3: detected capacity change from 0 to 32768
[  150.543537][ T4235] usb 6-1: config 220 interface 1 has no altsetting 0
[  150.624978][ T7339] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  150.640392][ T7347] JBD2: Ignoring recovery information on journal
[  150.656941][ T7339] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  150.711591][ T7339] F2FS-fs (loop4): invalid crc value
[  150.755328][ T4235] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  150.815044][ T4235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.833585][ T7339] F2FS-fs (loop4): Found nat_bits in checkpoint
[  150.869509][ T4235] usb 6-1: Product: syz
[  150.873753][ T4235] usb 6-1: Manufacturer: syz
[  150.888381][ T7347] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  150.939215][ T4235] usb 6-1: SerialNumber: syz
[  150.944009][ T7372] set_capacity_and_notify: 1 callbacks suppressed
[  150.944022][ T7372] loop2: detected capacity change from 0 to 2048
[  150.991333][ T7339] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  151.015243][ T7339] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  151.039991][ T7372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.144457][ T7366] loop1: detected capacity change from 0 to 32768
[  151.195167][ T4201] ocfs2: Unmounting device (7,3) on (node local)
[  151.332767][ T7366] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  151.347739][ T7366] JBD2: Ignoring recovery information on journal
[  151.415694][ T4235] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  151.422999][ T4235] usb 6-1: No valid video chain found.
[  151.433147][ T4235] usb 6-1: selecting invalid altsetting 0
[  151.459470][ T7366] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  151.516106][ T4235] usb 6-1: selecting invalid altsetting 0
[  151.522511][ T4235] usbtest: probe of 6-1:220.1 failed with error -22
[  151.548279][ T4235] usb 6-1: USB disconnect, device number 12
[  151.604099][ T7380] loop3: detected capacity change from 0 to 256
[  151.700652][ T7380] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.703995][ T4190] ocfs2: Unmounting device (7,1) on (node local)
[  151.755768][ T7380] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  151.804625][ T7380] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  151.898383][ T7380] exFAT-fs (loop3): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 260, unilen : 257 > 255
[  151.939981][ T7377] loop2: detected capacity change from 0 to 32768
[  152.042115][ T7388] loop5: detected capacity change from 0 to 1024
[  152.110536][ T7377] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  152.150561][ T7388] EXT4-fs (loop5): Ignoring removed orlov option
[  152.157457][ T7388] EXT4-fs (loop5): Ignoring removed oldalloc option
[  152.164084][ T7388] EXT4-fs (loop5): Ignoring removed orlov option
[  152.273645][ T7388] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  152.283565][ T7388] System zones: 0-1, 3-12
[  152.318329][ T7388] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,debug,max_dir_size_kb=0x0000000000000003,orlov,oldalloc,orlov,nogrpid,resuid=0x0000000000000000,grpjquota=,,errors=continue. Quota mode: none.
[  152.376396][ T7400] loop3: detected capacity change from 0 to 256
[  152.426707][ T4200] ocfs2: Unmounting device (7,2) on (node local)
[  152.465007][ T7400] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  152.555421][ T7400] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  152.625813][ T7400] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  152.830249][ T7411] Restarting kernel threads ... done.
[  152.861003][ T4237] kernel write not supported for file /sg0 (pid: 4237 comm: kworker/1:6)
[  152.960118][ T7415] loop2: detected capacity change from 0 to 512
[  153.046609][ T7415] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  153.100060][ T7415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6802e02c, mo2=0002]
[  153.154334][ T7415] System zones: 1-12
[  153.187315][ T7415] EXT4-fs (loop2): orphan cleanup on readonly fs
[  153.201369][ T7415] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1071: bg 0: block 361: padding at end of block bitmap is not set
[  153.243399][ T7415] EXT4-fs (loop2): Remounting filesystem read-only
[  153.263794][ T7415] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  153.290167][ T7415] EXT4-fs (loop2): Remounting filesystem read-only
[  153.311433][ T7415] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1071: attempt to clear invalid blocks 33619980 len 1
[  153.359745][ T7405] loop1: detected capacity change from 0 to 32768
[  153.367245][ T7415] EXT4-fs (loop2): Remounting filesystem read-only
[  153.424774][ T7415] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1071: invalid indirect mapped block 1811939328 (level 0)
[  153.451557][ T7415] EXT4-fs (loop2): Remounting filesystem read-only
[  153.459847][ T7442] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.1087'.
[  153.470568][ T7442] netlink: zone id is out of range
[  153.470588][ T7415] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1071: invalid indirect mapped block 2 (level 2)
[  153.490150][ T7442] netlink: zone id is out of range
[  153.498008][ T7442] netlink: zone id is out of range
[  153.503690][ T7442] netlink: zone id is out of range
[  153.505417][ T7415] EXT4-fs (loop2): Remounting filesystem read-only
[  153.512302][ T7442] netlink: zone id is out of range
[  153.522290][ T7442] netlink: zone id is out of range
[  153.527617][ T7442] netlink: zone id is out of range
[  153.532853][ T7442] netlink: zone id is out of range
[  153.533209][ T7405] XFS (loop1): Mounting V5 Filesystem
[  153.538011][ T7442] netlink: zone id is out of range
[  153.538022][ T7442] netlink: zone id is out of range
[  153.539308][ T7415] EXT4-fs (loop2): 1 truncate cleaned up
[  153.575017][ T7415] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,acl,discard,inode_readahead_blks=0x0000000004000000,noinit_itable. Quota mode: none.
[  153.668818][ T7405] XFS (loop1): Ending clean mount
[  153.790031][ T4190] XFS (loop1): Unmounting Filesystem
[  154.455430][ T7477] loop4: detected capacity change from 0 to 2048
[  154.504721][ T7477] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  154.510129][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1100'.
[  154.578668][ T7471] loop2: detected capacity change from 0 to 8192
[  154.587083][ T7477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.664342][ T7471] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  154.725031][ T7471] REISERFS (device loop2): using ordered data mode
[  154.731716][ T7471] reiserfs: using flush barriers
[  154.806261][ T7471] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  154.831991][ T7471] REISERFS (device loop2): checking transaction log (loop2)
[  155.232255][ T7471] REISERFS (device loop2): Using tea hash to sort names
[  155.247875][ T7513] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  155.285161][ T7471] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  155.389707][ T7508] ntfs: volume version 3.1.
[  155.460879][ T7508] ntfs: (device loop5): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk.
[  155.506144][ T7508] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  155.521588][ T7508] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x18 as bad.  Run chkdsk.
[  155.571959][ T7508] ntfs: (device loop5): load_and_init_quota(): Failed to load $Quota.
[  155.612937][ T4666] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[  155.651061][ T7508] ntfs: (device loop5): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  155.735607][ T7527] MPI: mpi too large (113216 bits)
[  155.995252][ T4666] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  156.033752][ T4666] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  156.056470][ T4666] usb 5-1: config 0 interface 0 has no altsetting 0
[  156.063292][ T4666] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  156.072737][ T4666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.095617][ T4666] usb 5-1: config 0 descriptor??
[  156.115296][ T7518] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  156.327642][ T7516] set_capacity_and_notify: 3 callbacks suppressed
[  156.327658][ T7516] loop3: detected capacity change from 0 to 32768
[  156.463867][ T7562] loop2: detected capacity change from 0 to 128
[  156.473099][   T26] audit: type=1800 audit(2000000345.632:22): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1110" name="file1" dev="loop3" ino=4 res=0 errno=0
[  156.566767][ T4666] logitech 0003:046D:C50C.000F: unknown main item tag 0x7
[  156.588855][ T7566] program syz.1.1129 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.603790][ T4666] logitech 0003:046D:C50C.000F: hidraw0: USB HID v0.0c Device [HID 046d:c50c] on usb-dummy_hcd.4-1/input0
[  156.815278][ T4666] usb 5-1: USB disconnect, device number 13
[  156.843981][ T7575] program syz.1.1133 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.878527][ T7571] fido_id[7571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  156.959838][ T7577] loop2: detected capacity change from 0 to 128
[  157.121199][ T7577] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x00000000000000da,,errors=continue. Quota mode: none.
[  157.143155][ T7577] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.413932][ T7591] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11
[  157.427081][ T7594] loop2: detected capacity change from 0 to 256
[  157.445479][ T7595] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1139'.
[  157.506770][ T7594] FAT-fs (loop2): Directory bread(block 64) failed
[  157.516829][ T7594] FAT-fs (loop2): Directory bread(block 65) failed
[  157.523463][ T7594] FAT-fs (loop2): Directory bread(block 66) failed
[  157.564159][ T7600] mkiss: ax0: crc mode is auto.
[  157.580327][ T7594] FAT-fs (loop2): Directory bread(block 67) failed
[  157.598490][ T7594] FAT-fs (loop2): Directory bread(block 68) failed
[  157.615650][ T7594] FAT-fs (loop2): Directory bread(block 69) failed
[  157.631397][ T7594] FAT-fs (loop2): Directory bread(block 70) failed
[  157.666510][ T7594] FAT-fs (loop2): Directory bread(block 71) failed
[  157.673538][ T7594] FAT-fs (loop2): Directory bread(block 72) failed
[  157.681176][ T7594] FAT-fs (loop2): Directory bread(block 73) failed
[  157.906332][ T7594] attempt to access beyond end of device
[  157.906332][ T7594] loop2: rw=2049, want=1344, limit=256
[  157.953781][ T7612] attempt to access beyond end of device
[  157.953781][ T7612] loop2: rw=2049, want=1232, limit=256
[  158.017598][ T7612] attempt to access beyond end of device
[  158.017598][ T7612] loop2: rw=2049, want=1236, limit=256
[  158.040570][ T7611] loop5: detected capacity change from 0 to 8192
[  158.076258][ T7612] Buffer I/O error on dev loop2, logical block 308, lost async page write
[  158.117587][ T7611] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  158.129028][ T7602] loop4: detected capacity change from 0 to 32768
[  158.135969][ T7611] REISERFS (device loop5): using ordered data mode
[  158.145278][ T7611] reiserfs: using flush barriers
[  158.161726][ T7611] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  158.236824][ T7606] loop1: detected capacity change from 0 to 32768
[  158.246967][ T7611] REISERFS (device loop5): checking transaction log (loop5)
[  158.266726][ T7611] REISERFS (device loop5): Using r5 hash to sort names
[  158.292335][ T7611] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  158.365715][ T7606] XFS (loop1): Mounting V5 Filesystem
[  158.581390][ T7606] XFS (loop1): Ending clean mount
[  158.591515][ T7629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1153'.
[  158.662800][ T4481] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x189/0x240, xfs_agfl block 0x3 
[  158.681645][ T7635] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[  158.728925][ T4481] XFS (loop1): Unmount and run xfs_repair
[  158.745835][ T4481] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  158.753256][ T4481] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00  XAFL......BN....
[  158.811049][ T4481] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00  .... ...........
[  158.831741][ T4481] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1  ................
[  158.853433][ T4481] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5  ................
[  158.883884][ T4481] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  158.905574][ T7644] loop2: detected capacity change from 0 to 128
[  158.926349][ T4481] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  158.937172][ T4481] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  158.947254][ T4481] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  158.976272][ T7606] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x1d3/0x360" at daddr 0x3 len 1 error 74
[  159.011955][ T7644] EXT4-fs (loop2): Test dummy encryption mode enabled
[  159.045954][ T7644] EXT4-fs (loop2): inline encryption not supported
[  159.085513][ T7606] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  159.131787][ T7644] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none.
[  159.155705][ T7606] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  159.191478][ T4190] XFS (loop1): Unmounting Filesystem
[  159.285128][ T7644] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  159.357507][ T7644] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none.
[  159.407857][ T7644] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option
[  159.420153][ T7644] EXT4-fs (loop2): re-mounted. Opts: noquota,noblock_validity,nogrpid,data=journal,. Quota mode: none.
[  159.909147][ T7687] loop1: detected capacity change from 0 to 4096
[  160.030928][ T7697] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.081483][ T7700] loop2: detected capacity change from 0 to 128
[  160.157443][ T7700] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  160.170515][ T7700] hpfs: filesystem error: improperly stopped
[  160.180836][ T7700] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  160.189919][ T7700] hpfs: You really don't want any checks? You are crazy...
[  160.244443][ T7700] hpfs: hpfs_map_sector(): read error
[  160.264699][ T7700] hpfs: code page support is disabled
[  160.308638][ T7700] hpfs: hpfs_map_4sectors(): unaligned read
[  160.309213][ T7700] hpfs: hpfs_map_4sectors(): unaligned read
[  160.309226][ T7700] hpfs: filesystem error: unable to find root dir
[  160.369197][ T7700] hpfs: hpfs_map_4sectors(): unaligned read
[  160.369897][ T7700] hpfs: hpfs_map_sector(): read error
[  160.375176][ T7700] hpfs: hpfs_map_4sectors(): unaligned read
[  160.525312][ T7716] sp0: Synchronizing with TNC
[  160.554753][ T7715] [U] è
[  160.685591][ T4666] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  160.886447][ T7737] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.946782][ T4666] usb 4-1: Using ep0 maxpacket: 32
[  161.145121][ T4666] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64
[  161.204950][ T4481] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  161.315194][ T4666] usb 4-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40
[  161.325366][ T4666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.345583][ T4666] usb 4-1: Product: syz
[  161.349824][ T4666] usb 4-1: Manufacturer: syz
[  161.354611][ T4666] usb 4-1: SerialNumber: syz
[  161.395438][ T7714] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  161.406549][ T7741] set_capacity_and_notify: 2 callbacks suppressed
[  161.406563][ T7741] loop4: detected capacity change from 0 to 32768
[  161.487775][ T7741] XFS (loop4): Mounting V5 Filesystem
[  161.602010][ T7741] XFS (loop4): Ending clean mount
[  161.676804][ T5188] XFS (loop4): Unmounting Filesystem
[  161.715273][ T4267] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  161.775365][ T4666] usb 4-1: MIDIStreaming interface descriptor not found
[  161.793392][ T4481] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  161.803344][ T4481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.812507][ T4481] usb 3-1: Product: syz
[  161.817444][ T4481] usb 3-1: Manufacturer: syz
[  161.822136][ T4481] usb 3-1: SerialNumber: syz
[  161.845169][ T4481] usb 3-1: config 0 descriptor??
[  161.881300][ T4666] usb 4-1: USB disconnect, device number 16
[  161.905125][ T4481] ch341 3-1:0.0: ch341-uart converter detected
[  162.042969][ T7771] program syz.1.1209 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  162.117485][ T4267] usb 6-1: unable to get BOS descriptor or descriptor too short
[  162.194308][ T7779] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1212'.
[  162.210695][ T4281] udevd[4281]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  162.215338][ T4267] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  162.419940][ T4237] kernel write not supported for file [eventfd] (pid: 4237 comm: kworker/1:6)
[  162.498161][ T7801] netlink: 6856 bytes leftover after parsing attributes in process `syz.4.1222'.
[  162.525350][ T4267] usb 6-1: string descriptor 0 read error: -22
[  162.531624][ T4267] usb 6-1: New USB device found, idVendor=245f, idProduct=931c, bcdDevice= 0.40
[  162.559458][ T7804] loop1: detected capacity change from 0 to 128
[  162.566758][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.688980][ T7804] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  162.720539][ T7804] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  162.756284][ T4481] usb 3-1: failed to send control message: -71
[  162.762580][ T4481] ch341-uart: probe of ttyUSB0 failed with error -71
[  162.790672][ T4481] usb 3-1: USB disconnect, device number 17
[  162.806063][ T4481] ch341 3-1:0.0: device disconnected
[  162.829295][ T4267] snd-usb-hiface: probe of 6-1:1.1 failed with error -22
[  163.050636][ T4267] snd-usb-hiface: probe of 6-1:1.2 failed with error -22
[  163.050730][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'.
[  163.085082][ T7827] loop1: detected capacity change from 0 to 2048
[  163.147395][ T7827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.337358][ T7833] loop4: detected capacity change from 0 to 4096
[  163.895443][ T7849] loop2: detected capacity change from 0 to 16
[  163.957597][ T7849] erofs: (device loop2): mounted with root inode @ nid 36.
[  164.287498][ T7841] loop1: detected capacity change from 0 to 131072
[  164.361076][ T7859] loop3: detected capacity change from 0 to 256
[  164.391371][ T7841] XFS (loop1): Mounting V5 Filesystem
[  164.462630][ T7859] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  164.500142][ T7871] loop4: detected capacity change from 0 to 512
[  164.513535][ T7841] XFS (loop1): Torn write (CRC failure) detected at log block 0x80. Truncating head block from 0xc0.
[  164.599689][ T7841] XFS (loop1): Corruption warning: Metadata has LSN (1:192) ahead of current LSN (1:128). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  164.605072][ T4537] usb 6-1: USB disconnect, device number 13
[  164.615420][ T7841] XFS (loop1): log mount/recovery failed: error -22
[  164.676584][ T7841] XFS (loop1): log mount failed
[  164.720668][ T7871] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  164.838830][ T7871] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback.
[  164.860995][ T7871] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.154570][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1260'.
[  165.259109][ T7894] loop2: detected capacity change from 0 to 128
[  165.371535][ T7894] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  165.434410][ T7894] hpfs: filesystem error: improperly stopped
[  165.450858][ T7894] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  165.485112][ T7894] hpfs: You really don't want any checks? You are crazy...
[  165.492594][ T7894] hpfs: hpfs_map_sector(): read error
[  165.546919][ T7894] hpfs: code page support is disabled
[  165.568972][ T7894] hpfs: hpfs_map_4sectors(): unaligned read
[  165.597510][ T7894] hpfs: hpfs_map_4sectors(): unaligned read
[  165.603448][ T7894] hpfs: filesystem error: unable to find root dir
[  165.704611][ T7912] loop4: detected capacity change from 0 to 24
[  165.775751][ T7912] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  165.812440][ T7912] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  166.244809][ T7933] erofs: (device loop1): mounted with root inode @ nid 36.
[  166.441904][ T4267] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  166.469299][ T4267] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  166.690483][ T7949] fido_id[7949]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  166.745249][ T7922] set_capacity_and_notify: 2 callbacks suppressed
[  166.745263][ T7922] loop5: detected capacity change from 0 to 32768
[  166.790129][ T7959] loop1: detected capacity change from 0 to 256
[  166.833068][ T7922] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1275 (7922)
[  166.860380][ T7959] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  166.909705][ T7922] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  166.931838][ T7922] BTRFS info (device loop5): enabling auto defrag
[  166.957190][ T7922] BTRFS info (device loop5): use no compression
[  166.963546][ T7922] BTRFS info (device loop5): max_inline at 4096
[  167.014083][ T7922] BTRFS info (device loop5): using free space tree
[  167.039168][ T7922] BTRFS info (device loop5): has skinny extents
[  167.175042][ T4666] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  167.206152][ T7985] loop1: detected capacity change from 0 to 512
[  167.294051][ T7985] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,usrquota,minixdf,nombcache,,errors=continue. Quota mode: writeback.
[  167.379620][ T7922] BTRFS info (device loop5): enabling ssd optimizations
[  167.387020][ T7985] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  167.535230][ T4666] usb 5-1: config 0 has an invalid interface number: 75 but max is 0
[  167.535391][ T7985] EXT4-fs (loop1): shut down requested (1)
[  167.543801][ T4666] usb 5-1: config 0 has no interface number 0
[  167.582131][ T4666] usb 5-1: too many endpoints for config 0 interface 75 altsetting 189: 159, using maximum allowed: 30
[  167.594303][ T4666] usb 5-1: config 0 interface 75 altsetting 189 has 0 endpoint descriptors, different from the interface descriptor's value: 159
[  167.615226][ T4666] usb 5-1: config 0 interface 75 has no altsetting 0
[  167.684790][ T7990] loop2: detected capacity change from 0 to 32768
[  167.776127][ T4666] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  167.806999][ T7990] JBD2: Ignoring recovery information on journal
[  167.827365][ T4666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.851695][ T4666] usb 5-1: Product: syz
[  167.856308][ T4666] usb 5-1: Manufacturer: syz
[  167.860949][ T4666] usb 5-1: SerialNumber: syz
[  167.883531][ T7990] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  167.903027][ T4666] usb 5-1: config 0 descriptor??
[  167.953687][ T4666] hub 5-1:0.75: bad descriptor, ignoring hub
[  167.964940][ T4666] hub: probe of 5-1:0.75 failed with error -5
[  167.971655][ T4666] f81232 5-1:0.75: f81534a converter detected
[  168.175076][ T4666] f81534a ttyUSB0: f81232_set_register failed status: -71
[  168.182448][ T4666] f81534a: probe of ttyUSB0 failed with error -5
[  168.273212][ T4200] ocfs2: Unmounting device (7,2) on (node local)
[  168.420531][ T8015] loop1: detected capacity change from 0 to 1024
[  168.427026][ T4666] usb 5-1: reset high-speed USB device number 14 using dummy_hcd
[  168.517894][ T8015] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  168.552150][ T8015] EXT4-fs (loop1): inline encryption not supported
[  168.577902][ T8015] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  168.657462][ T8028] loop5: detected capacity change from 0 to 1024
[  168.694950][    T7] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  168.736694][ T8015] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,nomblk_io_submit,inlinecrypt,nouid32,nomblk_io_submit,noinit_itable,init_itable=0x0000000000000005,,errors=continue. Quota mode: none.
[  168.760467][ T8028] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  168.761824][ T8015] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.999213][    T7] usb 4-1: Using ep0 maxpacket: 32
[  169.104024][ T8046] loop2: detected capacity change from 0 to 2048
[  169.164392][ T8046] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  169.188770][    T7] usb 4-1: unable to get BOS descriptor or descriptor too short
[  169.197256][ T8054] netlink: 642 bytes leftover after parsing attributes in process `syz.5.1318'.
[  169.200328][ T8046] EXT4-fs (loop2): shut down requested (2)
[  169.285209][    T7] usb 4-1: unable to read config index 0 descriptor/start: -71
[  169.292016][ T8056] loop5: detected capacity change from 0 to 8192
[  169.292839][    T7] usb 4-1: can't read configurations, error -71
[  169.365684][ T8056] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  169.381880][ T8056] REISERFS (device loop5): using ordered data mode
[  169.388795][ T8056] reiserfs: using flush barriers
[  169.397379][ T4666] usb 5-1: USB disconnect, device number 14
[  169.417315][ T8056] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  169.435165][ T4666] f81232 5-1:0.75: device disconnected
[  169.446326][ T8056] REISERFS (device loop5): checking transaction log (loop5)
[  169.474662][ T8056] REISERFS (device loop5): Using r5 hash to sort names
[  169.498139][ T8056] reiserfs: enabling write barrier flush mode
[  169.511939][ T8056] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  169.532566][ T8056] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  169.543943][ T8056] REISERFS (device loop5): Remounting filesystem read-only
[  169.551320][ T8056] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  169.564900][ T8056] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  169.581165][ T8056] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  169.591930][ T8056] REISERFS error (device loop5): zam-7001 reiserfs_find_entry: io error
[  169.600419][ T8056] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  169.624937][ T8056] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  169.650578][ T8056] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  169.695671][ T8056] REISERFS warning (device loop5): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  169.725050][ T8009] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  169.729493][ T8056] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  169.758011][ T8056] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  169.769191][ T8056] REISERFS (device loop5): Remounting filesystem read-only
[  169.776888][ T8056] REISERFS error (device loop5): zam-7001 reiserfs_find_entry: io error
[  169.832423][ T8068] loop4: detected capacity change from 0 to 1024
[  169.910925][ T8068] EXT4-fs (loop4): Ignoring removed bh option
[  169.988400][ T8009] usb 3-1: Using ep0 maxpacket: 16
[  169.995486][ T8068] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  170.018014][    C1] vkms_vblank_simulate: vblank timer overrun
[  170.049594][ T8068] EXT4-fs (loop4): shut down requested (2)
[  170.074020][ T8068] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none.
[  170.235056][    T7] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  170.238368][ T8009] usb 3-1: config 4 has an invalid interface number: 245 but max is 0
[  170.270645][ T8009] usb 3-1: config 4 has an invalid interface number: 135 but max is 0
[  170.299635][ T8009] usb 3-1: config 4 has 2 interfaces, different from the descriptor's value: 1
[  170.331051][ T8009] usb 3-1: config 4 has no interface number 0
[  170.343057][ T8009] usb 3-1: config 4 has no interface number 1
[  170.365268][ T8009] usb 3-1: config 4 interface 245 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  170.386132][ T8009] usb 3-1: too many endpoints for config 4 interface 135 altsetting 151: 194, using maximum allowed: 30
[  170.403724][ T8009] usb 3-1: config 4 interface 135 altsetting 151 has 1 endpoint descriptor, different from the interface descriptor's value: 194
[  170.424242][ T8009] usb 3-1: config 4 interface 245 has no altsetting 0
[  170.431397][ T8009] usb 3-1: config 4 interface 135 has no altsetting 0
[  170.439976][ T8095] loop4: detected capacity change from 0 to 2048
[  170.455011][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1334'.
[  170.535023][    T7] usb 4-1: Using ep0 maxpacket: 8
[  170.547461][ T8095] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  170.582136][ T8095] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  170.605187][ T8009] usb 3-1: New USB device found, idVendor=2e1a, idProduct=4c01, bcdDevice=3d.6a
[  170.622866][ T8009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.630971][ T8009] usb 3-1: Product: syz
[  170.635332][ T8009] usb 3-1: Manufacturer: syz
[  170.639930][ T8009] usb 3-1: SerialNumber: syz
[  170.689401][    T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  170.736689][ T8095] fs-verity: sha512 using implementation "sha512-avx2"
[  170.752960][ T8105] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.763899][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.837559][    T7] pvrusb2: Hardware description: Terratec Grabster AV400
[  170.850032][    T7] pvrusb2: **********
[  170.854044][    T7] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  170.867074][ T8108] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1340'.
[  170.897001][    T7] pvrusb2: Important functionality might not be entirely working.
[  170.925095][    T7] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  170.959473][    T7] pvrusb2: **********
[  171.005254][ T8009] uvcvideo 3-1:4.245: Found Unit with invalid ID 0
[  171.044998][ T8009] usb 3-1: Found UVC 0.00 device syz (2e1a:4c01)
[  171.051415][ T8009] usb 3-1: No valid video chain found.
[  171.057999][ T2425] pvrusb2: Invalid write control endpoint
[  171.187634][ T8114] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  171.201833][ T8009] usb 3-1: USB disconnect, device number 18
[  171.208961][ T2425] pvrusb2: Invalid write control endpoint
[  171.225175][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  171.264246][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  171.273144][ T8114] iso9660: Corrupted directory entry in block 2 of inode 1920
[  171.294644][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  171.331797][ T2425] pvrusb2: Device being rendered inoperable
[  171.358451][ T8066] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61)
[  171.400495][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  171.419085][ T4481] usb 4-1: USB disconnect, device number 18
[  171.425321][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  171.484061][ T2425] pvrusb2: Attached sub-driver cx25840
[  171.510252][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  171.549999][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  171.765134][ T8009] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  171.993181][ T8149] set_capacity_and_notify: 3 callbacks suppressed
[  171.993195][ T8149] loop3: detected capacity change from 0 to 8
[  172.016402][ T8009] usb 2-1: Using ep0 maxpacket: 32
[  172.092394][ T8151] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1360'.
[  172.135115][ T8009] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  172.143236][ T8009] usb 2-1: config 0 has no interface number 0
[  172.335127][ T8009] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  172.374712][ T8009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.404925][ T8009] usb 2-1: Product: syz
[  172.418887][ T8009] usb 2-1: Manufacturer: syz
[  172.443926][ T8009] usb 2-1: SerialNumber: syz
[  172.458221][ T8155] loop4: detected capacity change from 0 to 4096
[  172.460932][ T8009] usb 2-1: config 0 descriptor??
[  172.525989][ T8009] smsc95xx v2.0.0
[  172.539425][ T8155] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  172.665278][ T8138] loop2: detected capacity change from 0 to 32768
[  172.747383][ T8164] loop3: detected capacity change from 0 to 64
[  172.763947][ T8138] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  173.002661][ T8153] loop5: detected capacity change from 0 to 32768
[  173.026070][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'.
[  173.057307][ T4200] ocfs2: Unmounting device (7,2) on (node local)
[  173.185122][ T8009] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  173.201790][ T8176] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1371'.
[  173.227100][ T8009] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  173.292550][ T8153] XFS (loop5): Mounting V5 Filesystem
[  173.305368][ T8009] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  173.400994][ T8009] smsc95xx: probe of 2-1:0.67 failed with error -71
[  173.439066][ T8009] usb 2-1: USB disconnect, device number 10
[  173.474069][ T8153] XFS (loop5): Ending clean mount
[  173.499422][ T8153] XFS (loop5): Quotacheck needed: Please wait.
[  173.668577][ T8153] XFS (loop5): Quotacheck: Done.
[  173.846518][ T8208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1382'.
[  173.871239][ T4881] XFS (loop5): Unmounting Filesystem
[  173.954364][ T8212] loop4: detected capacity change from 0 to 512
[  174.044238][ T8212] EXT4-fs (loop4): invalid journal inode
[  174.085599][ T8212] EXT4-fs (loop4): can't get journal size
[  174.149034][ T8212] EXT4-fs (loop4): 1 truncate cleaned up
[  174.175662][ T8212] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  174.220637][ T8228] loop2: detected capacity change from 0 to 256
[  174.366239][ T8228] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  174.460331][ T8228] attempt to access beyond end of device
[  174.460331][ T8228] loop2: rw=524288, want=34359738496, limit=256
[  174.494557][ T8237] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1396'.
[  174.514091][ T8228] attempt to access beyond end of device
[  174.514091][ T8228] loop2: rw=0, want=34359738496, limit=256
[  174.606084][   T26] audit: type=1800 audit(2000000625.766:23): pid=8228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1392" name="file1" dev="loop2" ino=1048651 res=0 errno=0
[  174.721196][ T8246] device netdevsim0 entered promiscuous mode
[  174.754328][ T8246] device batadv0 entered promiscuous mode
[  174.814388][ T8246] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  174.840202][ T8246] Cannot create hsr debugfs directory
[  174.870587][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  175.360272][   T21] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  175.435515][ T8285] loop5: detected capacity change from 0 to 2048
[  175.469766][ T8285] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.604961][   T21] usb 3-1: Using ep0 maxpacket: 16
[  175.669666][ T8289] loop1: detected capacity change from 0 to 512
[  175.725200][   T21] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  175.733327][   T21] usb 3-1: config 0 has no interface number 0
[  175.774074][   T21] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  175.790301][   T21] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  175.795379][ T8289] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  175.882436][ T8289] EXT4-fs (loop1): orphan cleanup on readonly fs
[  175.890996][ T8283] loop3: detected capacity change from 0 to 32768
[  175.901135][ T8289] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  175.921222][ T8289] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  175.943639][ T8289] EXT4-fs (loop1): Cannot turn on quotas: error -5
[  175.956224][ T8289] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1419: bg 0: block 64: padding at end of block bitmap is not set
[  175.965166][   T21] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  175.980197][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.988302][ T8289] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  176.005079][   T21] usb 3-1: Product: syz
[  176.009376][   T21] usb 3-1: Manufacturer: syz
[  176.013986][   T21] usb 3-1: SerialNumber: syz
[  176.025859][   T21] usb 3-1: config 0 descriptor??
[  176.042883][ T8283] XFS (loop3): Mounting V5 Filesystem
[  176.048701][ T8268] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  176.056046][ T8289] EXT4-fs (loop1): 1 truncate cleaned up
[  176.061708][ T8289] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  176.078774][ T8268] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  176.106940][ T8295] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  176.228015][ T8283] XFS (loop3): Ending clean mount
[  176.340827][ T8268] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  176.386293][ T8268] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  176.405410][ T4201] XFS (loop3): Unmounting Filesystem
[  176.621641][   T21] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  176.654951][    T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  176.751242][ T8307] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff
[  176.777191][ T8307] F2FS-fs (loop4): invalid crc value
[  176.801153][ T8307] F2FS-fs (loop4): Found nat_bits in checkpoint
[  176.901575][ T8307] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  176.919260][    T7] usb 2-1: Using ep0 maxpacket: 32
[  177.018608][ T8307] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=6e75742f, run fsck to fix.
[  177.045134][   T21] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  177.065171][   T21] asix: probe of 3-1:0.34 failed with error -71
[  177.069774][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  177.090558][   T21] usb 3-1: USB disconnect, device number 19
[  177.257430][    T7] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  177.275103][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.293464][    T7] usb 2-1: Product: syz
[  177.297954][    T7] usb 2-1: Manufacturer: syz
[  177.313777][    T7] usb 2-1: SerialNumber: syz
[  177.318646][ T4481] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  177.329351][    T7] usb 2-1: config 0 descriptor??
[  177.373100][ T8331] set_capacity_and_notify: 2 callbacks suppressed
[  177.373115][ T8331] loop5: detected capacity change from 0 to 32768
[  177.375855][    T7] hub 2-1:0.0: bad descriptor, ignoring hub
[  177.394795][    T7] hub: probe of 2-1:0.0 failed with error -5
[  177.441606][   T26] audit: type=1800 audit(2000000628.596:24): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1430" name="file1" dev="loop5" ino=4 res=0 errno=0
[  177.731109][ T4237] usb 2-1: USB disconnect, device number 11
[  177.745617][ T4481] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  177.784180][ T4481] usb 4-1: config 0 interface 0 has no altsetting 0
[  177.813535][ T4481] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  177.835256][ T4481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.853463][ T4481] usb 4-1: config 0 descriptor??
[  177.865068][ T8331] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root
[  177.865068][ T8331] 
[  177.905408][ T8329] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  177.921678][ T8331] ERROR: (device loop5): remounting filesystem as read-only
[  178.032522][ T8353] loop4: detected capacity change from 0 to 64
[  178.232202][ T4881] ------------[ cut here ]------------
[  178.257435][ T4881] kernel BUG at fs/jfs/inode.c:175!
[  178.262723][ T4881] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  178.268802][ T4881] CPU: 1 PID: 4881 Comm: syz-executor Not tainted syzkaller #0
[  178.276347][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  178.286412][ T4881] RIP: 0010:jfs_evict_inode+0x42d/0x430
[  178.291963][ T4881] Code: f2 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 4d 9b f2 fe e9 16 fe ff ff e8 f3 81 ad fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff
[  178.311586][ T4881] RSP: 0018:ffffc900038ffb40 EFLAGS: 00010293
[  178.317656][ T4881] RAX: ffffffff82cbc6fd RBX: ffff8880711969f0 RCX: ffff88807dd99dc0
[  178.325632][ T4881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880711969f0
[  178.333599][ T4881] RBP: 0000000000000001 R08: ffffffff901d81ef R09: 1ffffffff203b03d
[  178.341566][ T4881] R10: dffffc0000000000 R11: fffffbfff203b03e R12: dffffc0000000000
[  178.349549][ T4881] R13: dffffc0000000000 R14: ffff888071196678 R15: ffff888071196a18
[  178.357524][ T4881] FS:  00005555819b7500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  178.366473][ T4881] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.373061][ T4881] CR2: 0000555560fdfa38 CR3: 00000000647fa000 CR4: 00000000003506e0
[  178.381038][ T4881] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  178.389011][ T4881] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  178.396987][ T4881] Call Trace:
[  178.400264][ T4881]  <TASK>
[  178.403192][ T4881]  ? evict+0x4c3/0x8d0
[  178.407269][ T4881]  ? jfs_write_inode+0x220/0x220
[  178.412209][ T4881]  evict+0x4c9/0x8d0
[  178.416109][ T4881]  ? proc_nr_inodes+0x320/0x320
[  178.416384][ T4481] prodikeys 0003:041E:2801.0011: unknown main item tag 0x2
[  178.420962][ T4881]  ? do_raw_spin_unlock+0x11d/0x230
[  178.420985][ T4881]  evict_inodes+0x60c/0x6a0
[  178.437822][ T4881]  ? __dentry_kill+0x530/0x650
[  178.442245][ T4481] prodikeys 0003:041E:2801.0011: unknown main item tag 0x6
[  178.442589][ T4881]  ? clear_inode+0x150/0x150
[  178.449908][ T4481] prodikeys 0003:041E:2801.0011: ignoring exceeding usage max
[  178.454330][ T4881]  generic_shutdown_super+0x93/0x300
[  178.454353][ T4881]  kill_block_super+0x7c/0xe0
[  178.454369][ T4881]  deactivate_locked_super+0x93/0xf0
[  178.454384][ T4881]  cleanup_mnt+0x42d/0x4e0
[  178.454401][ T4881]  ? lockdep_hardirqs_on+0x94/0x140
[  178.454420][ T4881]  task_work_run+0x125/0x1a0
[  178.454438][ T4881]  exit_to_user_mode_loop+0x10f/0x130
[  178.454454][ T4881]  exit_to_user_mode_prepare+0xee/0x180
[  178.454469][ T4881]  syscall_exit_to_user_mode+0x16/0x40
[  178.454494][ T4881]  do_syscall_64+0x58/0xa0
[  178.454509][ T4881]  ? clear_bhb_loop+0x30/0x80
[  178.454526][ T4881]  ? clear_bhb_loop+0x30/0x80
[  178.454542][ T4881]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  178.454560][ T4881] RIP: 0033:0x7fa541b5a097
[  178.454575][ T4881] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  178.454589][ T4881] RSP: 002b:00007ffd5aca9e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  178.454608][ T4881] RAX: 0000000000000000 RBX: 00007fa541bee1ca RCX: 00007fa541b5a097
[  178.454620][ T4881] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5aca9ef0
[  178.454630][ T4881] RBP: 00007ffd5aca9ef0 R08: 00007ffd5acaaef0 R09: 00000000ffffffff
[  178.454642][ T4881] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5acaaf80
[  178.454653][ T4881] R13: 00007fa541bee1ca R14: 000000000002b77e R15: 00007ffd5acaafc0
[  178.454671][ T4881]  </TASK>
[  178.454690][ T4881] Modules linked in:
[  178.479637][ T4881] ---[ end trace fbd9dbc43dabd4fd ]---
[  178.484218][ T4965] attempt to access beyond end of device
[  178.484218][ T4965] loop4: rw=1, want=16777218, limit=64
[  178.499240][ T4881] RIP: 0010:jfs_evict_inode+0x42d/0x430
[  178.506391][ T4965] Buffer I/O error on dev loop4, logical block 8388608, lost async page write
[  178.519901][ T4881] Code: f2 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 4d 9b f2 fe e9 16 fe ff ff e8 f3 81 ad fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff
[  178.531540][ T4481] prodikeys 0003:041E:2801.0011: hidraw0: USB HID v0.c1 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0
[  178.547308][ T4881] RSP: 0018:ffffc900038ffb40 EFLAGS: 00010293
[  178.676813][   T21] usb 4-1: USB disconnect, device number 19
[  178.724949][ T8373] kvm [8372]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000028
[  178.771649][ T4881] 
[  178.774018][ T4881] RAX: ffffffff82cbc6fd RBX: ffff8880711969f0 RCX: ffff88807dd99dc0
[  178.796060][ T4881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880711969f0
[  178.802277][ T8370] loop2: detected capacity change from 0 to 32768
[  178.804568][ T4881] RBP: 0000000000000001 R08: ffffffff901d81ef R09: 1ffffffff203b03d
[  178.822524][ T4881] R10: dffffc0000000000 R11: fffffbfff203b03e R12: dffffc0000000000
[  178.830876][ T4881] R13: dffffc0000000000 R14: ffff888071196678 R15: ffff888071196a18
[  178.840700][ T4881] FS:  00005555819b7500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  178.849827][ T4881] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.857593][ T4881] CR2: 00007f94af6b5158 CR3: 00000000647fa000 CR4: 00000000003506f0
[  178.869425][ T4881] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  178.870804][ T8370] JBD2: Ignoring recovery information on journal
[  178.878030][ T4881] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  178.893705][ T4881] Kernel panic - not syncing: Fatal exception
[  178.899988][ T4881] Kernel Offset: disabled
[  178.904311][ T4881] Rebooting in 86400 seconds..