last executing test programs:

2m37.517927792s ago: executing program 1 (id=608):
r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b00030100000009040000000101"], 0x0)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044050}, 0x48040)
syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)

2m35.332054717s ago: executing program 1 (id=628):
mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0)

2m34.679631s ago: executing program 1 (id=626):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440))
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="6c0900000600"})

2m34.386598923s ago: executing program 1 (id=631):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
lremovexattr(0x0, 0x0)

2m33.028982242s ago: executing program 1 (id=642):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000100000001}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x800)

2m32.743202375s ago: executing program 1 (id=643):
r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DISCONNECT(r0, 0xab08)

2m17.539159776s ago: executing program 32 (id=643):
r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DISCONNECT(r0, 0xab08)

4.745250049s ago: executing program 2 (id=2111):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r0, &(0x7f000000b680)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/233, 0xe9}], 0x1, &(0x7f0000000a40)=""/74, 0x4a}, 0x8}], 0x1, 0x40000020, 0x0)
sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4000)

4.416679375s ago: executing program 2 (id=2112):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x5599, &(0x7f0000005680)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
llistxattr(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

3.665270665s ago: executing program 2 (id=2116):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
pipe2$9p(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)

2.663180996s ago: executing program 2 (id=2124):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.591416232s ago: executing program 4 (id=2126):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x2204846, &(0x7f0000000040)=ANY=[], 0x1, 0x6bb, &(0x7f0000001f80)="$eJzs3c9v2+Ydx/EP5V+KWwTFNgRBkB9PkhVwsEyR5MaBkQENR1E2N0kUSHmIgQFF1thFEDndkg5YfOl8GTagA3berZcddts/MKDn3ncdsNsGFNttwHbQwF+yZIlS1Nhe0r5fRiuKz5d8viRlfUNLfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDLqZXLFUsNr7V13+RzaoHfnNCerG1BN5KJG1P7lazoPxWLOp/MOv+tw+Zz0f+u6WLy7KKK0UNR+2+ce+vuN+cL2fJGf00iJmQ2g5nX8+z5/uMH3e7O0xeInTu2NE+FCvltf1lI9/qG2/JC32vaG67xQt+sr62Vb23WQ1P3Gm64HXbcpnECt9DxA7Pi3DCV9fVV45a2/a3WRs1uuNnMO9+tlstr5gdLyYGWVAqdTa/R8FobcUzUHMXcMZ/8OAlw7aYxu4+6O6vTtiQKquQ1FgaCquNDzih7jVXL1WqlUq1W1m6v375TLs+PzChHrHKfRiKs1+lFgC9Nb+W2AK+KQlT//2ZJDRXV0pbuy4z9cVRTIF/NnPZUVv/fvuVO7Hew/mdV/rz0btp8QXH9v5w8u5xX/3NyMTLxAuNarJz5s/0sxBkZPdNz7euxHqirrnb09BjWbWSuJI/F41nbCf5syFVLnkL58tSUHc8x6Ryjda1pTWW9p03VFcqoLk8NuQq1rVAdufErylEgV7Y68hXIaEWObsioonWta1VGrkralq8ttbShmmz9u9fr7epRvN9XJ+SoLKiSE7A0GFSdsKa8+v+Tj5PXaVr/y9T/r6vkdbCUPHw+KQZ4BfTS8/8ZXTmZbAAAAAAAwEmw4r++W/Fn95ck9VT3Gm45f4HF08wOAAAAAAAcB0u9JV2UFZ3/S7oka8r5PwAAAAAAeO1Y8TV2lqTl+Ev91uGVUC/yR4C5U0gRAAAAAAC8pPjK/8uLUi8etOKKrJnO/wEAAAAAwGvg1wNj7M9nY+z2so/1C5LC9pL1538uKViwDtr3v23t2VGLvTdXiENGvgHQqV+wwt8lA/XG4/UuSoqfOe5FK+0tHQSzP+7gF7vTxvq3giMJLM4NruBIAmfTpa2o57X59Jk+0dV3h2If7hcUtyS9LNe9hlty/Mbdimz7bKHj3u/8/MmjX0hBfzt3H3V3Su9/2H0Y53IQzTrYi/L4OEvnT4vprhvOJX7o5/LfXkK6NHaLz6iedfmbVnPZivstZ9s/J3uvcHiMcrd/uE/9SteSY3ZtOYld3u+PuB9tfzHa/kopPmRDWx8sWIdZVI5u+bgDkZNFMc7iehJzfeV68pDlF62nYBW/MydVS6PHYCiL6mAW0/eF9a+RfTEpi3RfrEZZfBatKCeL1dmyGDkiAPD/shuP+hNf+RcPYj5Sd7PykL2pfam6k1vdJd2Lq/u94er+0e+jypj882I+/WxiYi9FRe/oK1ZchxYVv7HOXxh5R8+2xj5bVM47evklqlvU1x8P74GUpj2SxX96vd7dStzvb49U1U+jBT7N7TdsJLv91kd7P40HwI98sPPBzpNqdXWt/E65fLuqhXgz9Gb8MCdqDwBgxPR77EyNsN7R1STi6sN/vJ1MDVW8b/S/UlDS+/pQXT3UQnYLgSvj17o88DWEm8lZqwbOWs25t+7G92Ubjq3oZu5ZXVxLB2Kr/dj0bnYjZ4CHsatpBIMfAgC+Gq5NqcPj639xqP7f1EoSsXJh7Hn3cC1Pz477p/R5sZXpyd877r0BAMDXgxt8YWWfM79XWV+v2J1N1wS+80MTeLUN13itjhs4m3ZrwzXtwO/4jt8w7UBLXs0NTbjVbvtBx9T9wLT90Lsf3/ndpLd+D92m3ep4TthuuHboGsdvdWynY2pe6Jj21vcbXrjpBvHCYdt1vLrn2B3Pb5nQ3woct2RM6LoDgV7NbXW8uhdNtkw78Jp2sG1+5De2mq6puaETeO2On6ww68tr1f2gGa+2pN7MNzoEAOCr6Nnz/ccPut2dp0cnzkSn5smcA+XEjE4sjlkhYwQBAPCKOSzXMyxU7E991juRrAAAAAAAAAAAAAAAAAAAAAAAwKDpl/TNMJENKTvSJPXn/OxsOke/1OElhiMrtHScieVPLI9tKsy6nuySiP3Hn08IPtOfk+3+wZiDk93SgYm/vym9Ec9ReuDGBRfzFlfRmt7XmQkH9wUn5qId9KLB39tN9mhuTNQ4tmmpfyzmj/fXIZt48oecpl6v15u8+NLwPlyctIHDE9Hv4tPFlzgEp/s+BOD0/S8AAP//uII15w==")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

2.327691902s ago: executing program 4 (id=2129):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

2.298037155s ago: executing program 2 (id=2130):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000100)={[{@prjquota}]}, 0x1, 0x97a2, &(0x7f0000012f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000580)={{r1}, 0x4, 0xffffffffffffffff, 0x100000})

2.062223804s ago: executing program 3 (id=2133):
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f00000000c0)=ANY=[], 0x1, 0x6a1, &(0x7f0000000940)="$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")
truncate(&(0x7f0000000080)='./file2\x00', 0x809673)

2.048767695s ago: executing program 4 (id=2134):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x309, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.880419749s ago: executing program 0 (id=2136):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x40003, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x5, 0x3, 0x0, 0x5, 0x4, 0x0, 0x2, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x95b, 0x80000000, 0x242, 0x6, 0xe, 0x0, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x200008, 0x3ff, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x4008004, 0x5, 0xfffffff3, 0x129432e5, 0x40000c8, 0x80000f9, 0xe, 0x2c2, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0xe, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x2, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x40000, 0x1ef, 0x4, 0x8, 0x86, 0xfffff5b3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x8, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x43, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x937, 0x6, 0x6, 0x0, 0x3, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x3, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x6, 0x0, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68a75f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014000000008080002"], 0x1ec}}, 0x0)

1.864085519s ago: executing program 4 (id=2137):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
lseek(r0, 0x2000, 0x0)

1.708292582s ago: executing program 4 (id=2138):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0)
sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001880)=""/4093, 0xffd}], 0x1, 0x0, 0x0, 0x20000800}, 0x0)

1.668953475s ago: executing program 0 (id=2139):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x201, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4082}, 0x10)

1.539584526s ago: executing program 4 (id=2141):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

1.465507972s ago: executing program 0 (id=2142):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x11, 0xc, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r0}, 0x10)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)

1.321652553s ago: executing program 0 (id=2144):
syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$eJzs3U1sHGf9B/DvrDdrO/+/UrdN2oKQGjUigkYkdpaSIEAEhFAOFYrEpRcOVuI0VjZp5bjIrRB1eb1y7KGHIhQOPaEekIo4VJQzEhInLrlH4u4Ti2Z2dr3Oxo43b7uBz0eanWfmeZnf/PzM7JusDfA/6/xrObCZIudPvLpRbt+62e7cutm+1i8nmU3SSJq9VYrrSfFZci69JZ8rd9bDFbsd55Xbn3xw/P2P2r2tZr1U7Rt79Rtx15ab9ZKjSWbq9QPYMd7FBx6vGMRdJuxYP3Ewad0Rm+N03/91C0ytove8OWIhOZhkrn4dkPru0Hi80T18Y93lAAAA4An11Fa2spFDk44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAniT17/8X9dLol4+m6P/+f6va16qatyYd74P6dNIBAAAAAAAAAMBD8OJWtrKRQ/3tblF95/9StXG4evy/vJUbWclaTmYjy1nPetaylGShqn+vemxtLK+vry3t1rPb7b7bnal6nh70zFDP0yOhFXtH3p194JMHAAAAAAAAgCfMHl+W/yznt7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAaVAkM71VtRzulxfSaCaZS9Iq220mf+6Xn2SfTjoAAAAAeAye2spWNnKo+Hdvu1tU7/mfq973z+WtXM96VrOeTlZyqfosoPeuv/H3zXbn1s32tXIZHfc7/xorjGrE9D57uPuRF6sWR+r2m0m+nx/mRI7mQtaymh9nOetZydF8ryotp8hCNdY/v5XUcY7EO1s+nNsRyoV7xfpCFcl8Lme1iu1kLg4+Bmn02wwd7Y+tZEeGGnmvzE7x7do+c3SpXpd/g9/U6+mwUJ3UgUFGFuvcl9l4+tZuua/05sns+Edq1nsag8+gDu91pPvM+cF6Xeb6V8M5f3G/ET8qwzkvozqdxmD2Pbd3zpMv/+MvF650rl+9cvnGiemZRrvqdrvv7l575+xrDzIxl+f3n4nNXTLx8c7Nmbu1mRvzhB6RVp2NXozbd8vk/PDdsttNRu6WL1V9D2U1P8gbuZSVnMlilnI2i/l6Tqe9Y4Yd2Tuv1bXWGO9aO/alujCf5Nf1ejqUeX16KK/Dd7qFqm54z3aWntlHlsa8IzU/XxfKY/x86Bln8u7MxNJQJp7dOxO/LWdkbnSuX127svzmPo93vF6Xl+0vdz4f/u5hnM/9K+fLM+Ufq9raOTvKumfvWrdU1R0e1DVG6o4M6u51pbbq13CjI/Xqnr9rXbuqe2GobsernLyRzuBVCADToju66+DLB1vzt+f/Nv/h/C/mr8y/Ovfd2bOzX2jlwF+bf5r5Q+P3jW8WL+fD/DSHJhEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8t7nx9jtXlzudlbUpLKQxXq/yfCYd89QWZpOM26toPtwwPk5y3937vxXY3/PFzkr+f49ezaEZvt1rKv4WD174xo/qZNyjcXO8y3y+HnB6flwMeHROrV9789SNt9/5yuq15ddXXl+5fvrsmbNn2l9b+uqpy6udlcXe46SjBB6F7Wf/SUcCAAAAAAAAAAAA7Nfj+I+FSZ8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GQ7/1oObKbI0uLJxXL71s12p1z65e2WzSSNJMVPkuKz5Fx6SxaGhit2O84rtz/54Pj7H7W3x2r22zf26rc/m/WSo0lm6vWdDUbN7mu8i8PjNe4nvGJwhmXCjvUTB5P2nwAAAP//euIAEg==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)

1.055094145s ago: executing program 0 (id=2146):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000200)='?\bts', 0x4)
sendto$inet6(r0, &(0x7f0000000800)="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", 0x5a5, 0x0, &(0x7f00000004c0)={0xa, 0xde20, 0x0, @mcast2}, 0x1c)

971.434771ms ago: executing program 2 (id=2147):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x21, &(0x7f0000000640)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1ff, 0xf0f, 0x5f4, [0xffc0, 0xff3f, 0x3f30, 0xff003f]}]}})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

774.962157ms ago: executing program 0 (id=2149):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x4302)

759.878688ms ago: executing program 3 (id=2150):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x8, 0x4)

614.53682ms ago: executing program 5 (id=2151):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x61)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000)

510.670198ms ago: executing program 5 (id=2152):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x4004804)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1)

372.568789ms ago: executing program 3 (id=2153):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

328.910083ms ago: executing program 5 (id=2154):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x10, 0xff}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "000202822aa5494190"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x14800)

288.974686ms ago: executing program 3 (id=2155):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x9)
syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0067a2", 0x28, 0x6, 0x0, @local, @local, {[], {{0x4e22, 0x4e1f, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xffff, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42628eb7f620e2a748dda58bf8be0855"}]}}}}}}}}, 0x0)

218.096152ms ago: executing program 3 (id=2156):
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0)

189.187264ms ago: executing program 5 (id=2157):
socket$inet(0x2, 0x4000000000000001, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00')
getdents64(r0, &(0x7f0000001fc0)=""/4086, 0xff6)

110.615551ms ago: executing program 3 (id=2158):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
listen(r0, 0x0)
shutdown(r0, 0x1)

84.175043ms ago: executing program 5 (id=2159):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x3c0}]}, 0x34}}, 0x0)

0s ago: executing program 5 (id=2160):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)

kernel console output (not intermixed with test programs):

T52] block nbd0: Possible stuck request ffff888024f48000: control (read@0,4096B). Runtime 60 seconds
[  194.316768][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  194.336437][ T7588] loop2: detected capacity change from 0 to 32768
[  194.387039][ T7588] XFS: ikeep mount option is deprecated.
[  194.526803][ T7588] XFS (loop2): Mounting V5 Filesystem
[  194.637793][ T5652] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  194.709852][ T7588] XFS (loop2): Ending clean mount
[  194.746521][ T7588] XFS (loop2): Quotacheck needed: Please wait.
[  194.850191][ T7588] XFS (loop2): Quotacheck: Done.
[  194.877571][ T5652] usb 1-1: Using ep0 maxpacket: 16
[  194.889018][ T5652] usb 1-1: config index 0 descriptor too short (expected 65316, got 36)
[  194.913477][ T5652] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  194.937495][ T5652] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  194.970944][ T5652] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.994886][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1202'.
[  195.035115][ T5652] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.072467][ T5652] usb 1-1: config 0 interface 0 has no altsetting 0
[  195.091512][ T5652] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  195.130627][ T5652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.175373][ T4278] XFS (loop2): Unmounting Filesystem
[  195.189311][ T5652] usb 1-1: config 0 descriptor??
[  195.382011][ T7659] loop4: detected capacity change from 0 to 512
[  195.420875][ T7659] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  195.488433][ T7659] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  195.514790][ T7659] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1208: bg 0: block 248: padding at end of block bitmap is not set
[  195.557840][ T7659] Quota error (device loop4): write_blk: dquota write failed
[  195.575588][ T7659] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  195.616177][ T5652] hid (null): unknown global tag 0x12
[  195.635378][ T5652] hid (null): report_id 660415670 is invalid
[  195.647644][ T7659] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.1208: Failed to acquire dquot type 1
[  195.679594][ T5652] hid (null): unknown global tag 0xd
[  195.684957][ T5652] hid (null): report_id 3636381312 is invalid
[  195.708435][ T7659] EXT4-fs (loop4): 1 truncate cleaned up
[  195.714436][ T5652] hid (null): unknown global tag 0xe
[  195.721340][ T7659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  195.738901][ T5652] hid (null): global environment stack underflow
[  195.757562][ T5652] hid (null): invalid report_size 15733
[  195.774881][ T5652] hid (null): global environment stack underflow
[  195.787801][ T5652] hid (null): invalid report_size 59091
[  195.793527][ T5652] hid (null): unknown global tag 0xe
[  195.807598][ T5652] hid (null): invalid report_size 659322949
[  195.815859][ T5652] hid (null): invalid report_size 40509
[  195.853179][ T5652] hid (null): report_id 49840 is invalid
[  195.880056][ T7666] loop3: detected capacity change from 0 to 4096
[  195.887174][ T5652] usb 1-1: USB disconnect, device number 11
[  195.950001][ T4270] EXT4-fs (loop4): unmounting filesystem.
[  196.072481][ T7673] loop4: detected capacity change from 0 to 1024
[  196.102619][ T7673] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  196.152902][ T7673] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  196.172706][ T4272] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  196.195209][ T7673] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.213278][ T4272] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  196.290758][ T7673] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  196.354676][ T7673] EXT4-fs (loop4): Remounting filesystem read-only
[  196.516025][ T4270] EXT4-fs (loop4): unmounting filesystem.
[  196.570246][ T7670] loop5: detected capacity change from 0 to 32768
[  196.722663][ T7693] loop4: detected capacity change from 0 to 4096
[  196.730761][ T7670] XFS (loop5): Mounting V5 Filesystem
[  196.743441][ T7693] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  196.804303][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  196.817394][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  196.865402][ T7702] binder: 7699:7702 ioctl c0046209 0 returned -22
[  196.877322][ T7670] XFS (loop5): Ending clean mount
[  196.951883][ T7670] XFS (loop5): Quotacheck needed: Please wait.
[  196.988754][ T7704] loop0: detected capacity change from 0 to 512
[  197.050711][ T7704] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  197.142709][ T7670] XFS (loop5): Quotacheck: Done.
[  197.234310][ T7704] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  197.283388][ T7704] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.451872][ T6471] XFS (loop5): Unmounting Filesystem
[  197.488232][   T52] block nbd1: Possible stuck request ffff888024f78000: control (read@0,4096B). Runtime 60 seconds
[  197.500544][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  197.959546][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1235'.
[  198.155620][ T7741] sp0: Synchronizing with TNC
[  198.425511][ T7762] loop4: detected capacity change from 0 to 256
[  198.469986][ T7765] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1246'.
[  198.485073][ T7762] MINIX-fs: mounting file system with errors, running fsck is recommended
[  198.532288][ T7762] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  198.583731][ T7766] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  198.739796][ T7772] loop0: detected capacity change from 0 to 128
[  198.803355][ T7772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  198.833220][ T7772] ext4 filesystem being mounted at /256/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  198.964451][ T7777] loop4: detected capacity change from 0 to 1024
[  198.975937][ T7772] fscrypt (loop0, inode 12): Unsupported encryption flags (0x10)
[  198.978355][ T7755] loop5: detected capacity change from 0 to 32768
[  199.032111][ T7777] EXT4-fs: Ignoring removed orlov option
[  199.114488][ T7777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  199.184330][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  199.507137][ T4270] EXT4-fs (loop4): unmounting filesystem.
[  199.857141][ T7808] device erspan0 entered promiscuous mode
[  200.022657][ T4463] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  200.219170][ T4463] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.236231][ T7819] loop5: detected capacity change from 0 to 128
[  200.242936][ T4463] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  200.270322][ T4463] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  200.282325][ T7819] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  200.318987][ T7819] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  200.361865][ T4463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.402559][ T4463] usb 1-1: Product: syz
[  200.413357][ T4463] usb 1-1: Manufacturer: syz
[  200.451894][ T4463] usb 1-1: SerialNumber: syz
[  200.507876][ T6471] EXT4-fs (loop5): unmounting filesystem.
[  200.670841][ T7827] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1274'.
[  200.702414][ T4463] usb 1-1: 0:2 : does not exist
[  200.743093][ T4463] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  200.774829][ T7830] IPv6: NLM_F_REPLACE set, but no existing node found!
[  200.786526][ T4463] usb 1-1: USB disconnect, device number 12
[  201.058103][ T7513] udevd[7513]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.100467][ T7842] binder: 7841:7842 ioctl c018620b 200000000100 returned -14
[  201.385109][ T7851] device bridge0 entered promiscuous mode
[  201.403993][ T7851] device macvlan2 entered promiscuous mode
[  201.546660][ T7858] loop4: detected capacity change from 0 to 512
[  201.580790][ T7858] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  201.608668][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'.
[  201.624033][ T7858] EXT4-fs (loop4): orphan cleanup on readonly fs
[  201.663529][ T7858] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.1289: Block bitmap for bg 0 marked uninitialized
[  201.719316][ T7858] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  201.801958][ T7858] EXT4-fs (loop4): 1 orphan inode deleted
[  201.837801][ T4463] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  201.860336][ T7858] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  201.867191][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'.
[  201.904001][ T7872] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1295'.
[  201.950196][ T7858] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  202.015010][ T7858] EXT4-fs (loop4): re-mounted. Quota mode: none.
[  202.031374][   T26] audit: type=1326 audit(1755617596.729:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.2.1296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88af18ebe9 code=0x0
[  202.039155][ T4463] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  202.084420][ T4463] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.117161][ T4463] usb 6-1: config 0 descriptor??
[  202.137545][ T4463] gspca_main: spca508-2.14.0 probing 8086:0110
[  202.149954][ T4270] EXT4-fs (loop4): unmounting filesystem.
[  202.354080][ T4463] gspca_spca508: reg_read err -32
[  202.565325][ T4463] gspca_spca508: reg_read err -71
[  202.587604][ T4463] gspca_spca508: reg_read err -71
[  202.609349][ T4463] gspca_spca508: reg_read err -71
[  202.618426][ T4463] gspca_spca508: reg write: error -71
[  202.644289][ T4463] spca508: probe of 6-1:0.0 failed with error -71
[  202.674151][ T4463] usb 6-1: USB disconnect, device number 6
[  202.965701][ T4463] hid-generic 0005:16C0:05DF.000E: item fetching failed at offset 0/1
[  202.976253][ T4463] hid-generic: probe of 0005:16C0:05DF.000E failed with error -22
[  203.046209][ T7888] loop0: detected capacity change from 0 to 40427
[  203.064766][ T7888] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  203.095996][ T7888] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  203.134439][ T7888] F2FS-fs (loop0): invalid crc value
[  203.165215][ T7917] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1311'.
[  203.195312][ T7888] F2FS-fs (loop0): Found nat_bits in checkpoint
[  203.211439][ T7914] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1311'.
[  203.334780][ T7888] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  203.349943][ T7921] loop5: detected capacity change from 0 to 256
[  203.361500][ T7888] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  203.387835][ T7921] exfat: Deprecated parameter 'utf8'
[  203.408917][ T7921] exfat: Deprecated parameter 'utf8'
[  203.417895][ T7921] exfat: Deprecated parameter 'utf8'
[  203.507079][ T7921] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  203.997902][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'.
[  204.059645][ T7937] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1322'.
[  204.403156][ T7926] loop4: detected capacity change from 0 to 32768
[  204.465354][ T7943] input: syz1 as /devices/virtual/input/input15
[  204.485243][   T26] audit: type=1800 audit(1755617599.179:28): pid=7926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1315" name="file1" dev="loop4" ino=4 res=0 errno=0
[  204.557590][ T4383] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  204.630637][ T7935] loop3: detected capacity change from 0 to 32768
[  204.686777][ T7935] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[  204.686777][ T7935] 
[  204.754490][ T7935] ERROR: (device loop3): remounting filesystem as read-only
[  204.769129][ T4383] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.794357][ T4383] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.817217][ T7939] loop5: detected capacity change from 0 to 32768
[  204.835271][ T4383] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  204.863210][ T4383] usb 3-1: config 0 interface 0 has no altsetting 0
[  204.870833][ T4383] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  204.881528][ T4383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.902246][ T4383] usb 3-1: config 0 descriptor??
[  204.942462][ T7939] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  205.116151][ T6471] ocfs2: Unmounting device (7,5) on (node local)
[  205.346053][ T4383] uclogic 0003:28BD:0042.000F: interface is invalid, ignoring
[  205.452942][ T7961] program syz.5.1332 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  205.590973][ T4383] usb 3-1: USB disconnect, device number 12
[  205.595747][ T7967] loop4: detected capacity change from 0 to 8
[  205.643023][ T7967] SQUASHFS error: Failed to read block 0x636: -5
[  205.653157][ T7967] SQUASHFS error: Unable to read metadata cache entry [634]
[  206.197809][ T4335] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  206.404096][ T4335] usb 4-1: Using ep0 maxpacket: 8
[  206.427263][ T4335] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.473888][ T4335] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.494767][ T8002] input: syz1 as /devices/virtual/input/input16
[  206.502652][ T4335] usb 4-1: config 0 interface 0 has no altsetting 0
[  206.519706][ T4335] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  206.550448][ T4335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.569477][ T4335] usb 4-1: config 0 descriptor??
[  206.810507][ T8015] loop2: detected capacity change from 0 to 512
[  206.928187][ T8015] EXT4-fs (loop2): 1 truncate cleaned up
[  206.958453][ T8015] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  207.001603][ T4335] razer 0003:1532:010E.0010: unknown main item tag 0x0
[  207.027812][ T4335] razer 0003:1532:010E.0010: unknown main item tag 0x0
[  207.069044][ T8005] loop4: detected capacity change from 0 to 32768
[  207.076267][ T4335] razer 0003:1532:010E.0010: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0
[  207.104334][ T8015] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1354: invalid indirect mapped block 234881024 (level 0)
[  207.122392][ T8005] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum"
[  207.157580][ T8005] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)...
[  207.204914][ T8005] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms
[  207.236500][ T4335] usb 4-1: USB disconnect, device number 11
[  207.309919][ T4278] EXT4-fs (loop2): unmounting filesystem.
[  207.454672][ T8020] fido_id[8020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  207.506032][ T8005] gfs2: fsid=statfs_quantum.s: first mount done, others may mount
[  207.529436][ T8025] loop0: detected capacity change from 0 to 1024
[  207.957703][ T5652] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  208.157697][ T5652] usb 3-1: Using ep0 maxpacket: 8
[  208.165958][ T5652] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.181984][ T5652] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.227527][ T5652] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  208.241599][ T5652] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  208.267576][ T5652] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.284579][ T5652] usb 3-1: config 0 descriptor??
[  208.469566][ T8051] loop4: detected capacity change from 0 to 256
[  208.615728][ T8051] FAT-fs (loop4): Directory bread(block 64) failed
[  208.640741][ T8051] FAT-fs (loop4): Directory bread(block 65) failed
[  208.657074][ T8051] FAT-fs (loop4): Directory bread(block 66) failed
[  208.671541][ T8051] FAT-fs (loop4): Directory bread(block 67) failed
[  208.682854][ T8051] FAT-fs (loop4): Directory bread(block 68) failed
[  208.722152][ T8051] FAT-fs (loop4): Directory bread(block 69) failed
[  208.731248][ T5652] logitech 0003:046D:C293.0011: unknown main item tag 0x0
[  208.747630][ T5652] logitech 0003:046D:C293.0011: unknown main item tag 0x0
[  208.755389][ T8051] FAT-fs (loop4): Directory bread(block 70) failed
[  208.772753][ T5652] logitech 0003:046D:C293.0011: unknown main item tag 0x0
[  208.787690][ T8051] FAT-fs (loop4): Directory bread(block 71) failed
[  208.795412][ T5652] logitech 0003:046D:C293.0011: unknown main item tag 0x0
[  208.807424][ T8051] FAT-fs (loop4): Directory bread(block 72) failed
[  208.811071][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'.
[  208.814370][ T8051] FAT-fs (loop4): Directory bread(block 73) failed
[  208.834740][ T5652] logitech 0003:046D:C293.0011: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.2-1/input0
[  208.854466][ T8059] netlink: 'syz.3.1376': attribute type 6 has an invalid length.
[  208.857948][ T5652] logitech 0003:046D:C293.0011: no inputs found
[  208.896619][ T8043] loop0: detected capacity change from 0 to 32768
[  208.937299][ T4463] usb 3-1: USB disconnect, device number 13
[  209.043102][ T8043] XFS (loop0): Mounting V5 Filesystem
[  209.108205][ T8043] XFS (loop0): Ending clean mount
[  209.230358][ T8061] fido_id[8061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  209.272571][ T4265] XFS (loop0): Unmounting Filesystem
[  209.572784][ T8082] loop4: detected capacity change from 0 to 256
[  209.653043][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  210.136965][ T8100] loop4: detected capacity change from 0 to 128
[  210.214187][ T8100] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  210.253530][ T8100] ext4 filesystem being mounted at /272/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  210.483749][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'.
[  210.525667][ T8112] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1395'.
[  210.552825][ T8112] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1395'.
[  210.629077][ T8112] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1395'.
[  210.745744][ T4270] EXT4-fs (loop4): unmounting filesystem.
[  210.816571][ T8119] loop5: detected capacity change from 0 to 4096
[  210.852702][ T8122] tipc: Started in network mode
[  210.865377][ T8122] tipc: Node identity ac14140f, cluster identity 4711
[  210.873540][ T8122] tipc: New replicast peer: 255.255.255.255
[  210.895471][ T8122] tipc: Enabled bearer <udp:syz2>, priority 10
[  210.902454][ T8119] ntfs: volume version 3.1.
[  210.912640][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1399'.
[  211.310458][ T8134] sg_read: process 223 (syz.5.1403) changed security contexts after opening file descriptor, this is not allowed.
[  211.477721][ T5652] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  211.642722][ T8144] loop3: detected capacity change from 0 to 2048
[  211.665306][ T5652] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  211.681117][ T8144] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  211.691001][ T8146] loop2: detected capacity change from 0 to 1024
[  211.699705][ T5652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.751906][ T5652] usb 5-1: config 0 descriptor??
[  211.777637][ T8147] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  211.805843][ T5652] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  211.889181][    T9] hfsplus: b-tree write err: -5, ino 4
[  212.011476][ T4464] tipc: Node number set to 2886997007
[  212.081691][ T8149] loop2: detected capacity change from 0 to 1024
[  212.128596][ T8149] ext4: Unknown parameter 'nouser_xattr'
[  212.230876][ T5652] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  212.261707][ T5652] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  212.402296][ T8155] sctp: [Deprecated]: syz.2.1414 (pid 8155) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.402296][ T8155] Use struct sctp_sack_info instead
[  212.450227][ T4464] usb 5-1: USB disconnect, device number 10
[  212.523536][ T8140] loop5: detected capacity change from 0 to 40427
[  212.550287][ T8140] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7
[  212.578777][ T8140] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff
[  212.617012][ T8140] F2FS-fs (loop5): invalid crc value
[  212.645235][ T8140] F2FS-fs (loop5): Found nat_bits in checkpoint
[  212.817970][ T8140] F2FS-fs (loop5): Start checkpoint disabled!
[  212.857011][ T8140] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  213.093771][ T8140] F2FS-fs (loop5) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xf8c/0x1980
[  213.848874][ T8173] loop4: detected capacity change from 0 to 32768
[  213.885021][ T8173] XFS: noikeep mount option is deprecated.
[  213.975432][ T8173] XFS (loop4): Mounting V5 Filesystem
[  214.021683][ T8186] netlink: 'syz.5.1434': attribute type 11 has an invalid length.
[  214.148656][ T8173] XFS (loop4): Ending clean mount
[  214.168410][ T8173] XFS (loop4): Quotacheck needed: Please wait.
[  214.289175][ T8173] XFS (loop4): Quotacheck: Done.
[  214.454395][ T4270] XFS (loop4): Unmounting Filesystem
[  214.879846][   T26] audit: type=1326 audit(1755617609.579:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ced8ebe9 code=0x7ffc0000
[  214.925242][   T26] audit: type=1326 audit(1755617609.589:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ced8ebe9 code=0x7ffc0000
[  214.992090][   T26] audit: type=1326 audit(1755617609.619:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ced8ebe9 code=0x7ffc0000
[  215.078027][   T26] audit: type=1326 audit(1755617609.619:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ced8ebe9 code=0x7ffc0000
[  215.110187][ T8217] loop2: detected capacity change from 0 to 128
[  215.174208][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'.
[  215.204650][   T26] audit: type=1326 audit(1755617609.619:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ced8ebe9 code=0x7ffc0000
[  215.267539][   T26] audit: type=1326 audit(1755617609.619:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ced8ebe9 code=0x7ffc0000
[  215.296729][ T8217] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  215.319012][ T8217] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  215.354443][ T8223] loop4: detected capacity change from 0 to 512
[  215.429696][ T8217] EXT4-fs (loop2): shut down requested (2)
[  215.436729][   T26] audit: type=1326 audit(1755617609.679:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ced8ebe9 code=0x7ffc0000
[  215.487811][ T8223] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  215.491197][ T8230] loop3: detected capacity change from 0 to 256
[  215.496779][ T8223] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.514914][ T8230] exfat: Deprecated parameter 'namecase'
[  215.539913][   T26] audit: type=1326 audit(1755617609.689:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ced8ebe9 code=0x7ffc0000
[  215.612904][ T8230] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  215.672345][ T4278] EXT4-fs (loop2): unmounting filesystem.
[  215.685203][   T26] audit: type=1326 audit(1755617609.749:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f93ced8ebe9 code=0x7ffc0000
[  215.832582][   T26] audit: type=1326 audit(1755617609.749:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ced8ebe9 code=0x7ffc0000
[  215.871112][ T4270] EXT4-fs (loop4): unmounting filesystem.
[  215.904323][ T8230] autofs4:pid:8230:autofs_fill_super: could not open pipe file descriptor
[  215.933046][ T8232] loop5: detected capacity change from 0 to 32768
[  215.957933][ T8232] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1441 (8232)
[  216.009870][ T8232] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  216.020152][ T8232] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  216.029473][ T8232] BTRFS info (device loop5): using free space tree
[  216.425531][ T8232] BTRFS info (device loop5): enabling ssd optimizations
[  216.447054][ T8265] sctp: Trying to GSO but underlying device doesn't support it.
[  216.594496][ T6471] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  217.182347][ T8286] loop5: detected capacity change from 0 to 1024
[  217.264495][ T8288] loop3: detected capacity change from 0 to 1764
[  217.713842][ T8301] loop3: detected capacity change from 0 to 2048
[  217.844626][ T8301] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  217.874525][ T8301] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.937715][ T5652] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  218.087095][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  218.144858][ T5652] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  218.188620][ T5652] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.216767][ T5652] usb 3-1: config 0 descriptor??
[  218.229245][ T5652] cp210x 3-1:0.0: cp210x converter detected
[  218.393099][ T8331] loop0: detected capacity change from 0 to 1024
[  218.516463][ T8331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  218.545795][ T8331] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz.0.1480: directory missing '..'
[  218.553427][ T8338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1481'.
[  218.820431][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  218.834815][ T5652] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  218.857631][ T5652] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  218.869490][ T5652] usb 3-1: cp210x converter now attached to ttyUSB0
[  218.907899][ T5652] usb 3-1: USB disconnect, device number 14
[  218.948132][ T5652] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  218.980032][ T5652] cp210x 3-1:0.0: device disconnected
[  219.011435][ T8344] loop4: detected capacity change from 0 to 4096
[  219.061287][ T8344] NILFS (loop4): invalid segment: Checksum error in segment payload
[  219.067090][ T8340] loop5: detected capacity change from 0 to 32768
[  219.084371][ T8344] NILFS (loop4): trying rollback from an earlier position
[  219.182330][ T8340] XFS (loop5): Mounting V5 Filesystem
[  219.198604][ T8344] NILFS (loop4): recovery complete
[  219.217570][ T8357] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  219.394093][ T8340] XFS (loop5): Ending clean mount
[  219.429904][ T8340] XFS (loop5): Quotacheck needed: Please wait.
[  219.545467][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'.
[  219.546182][ T8340] XFS (loop5): Quotacheck: Done.
[  219.686762][ T6471] XFS (loop5): Unmounting Filesystem
[  219.775151][ T8363] loop4: detected capacity change from 0 to 4096
[  219.833733][ T8363] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  219.882692][ T8367] loop2: detected capacity change from 0 to 1024
[  219.914869][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'.
[  219.923721][ T8363] ntfs3: loop4: Failed to load $Extend.
[  219.948533][ T8367] EXT4-fs: Ignoring removed nobh option
[  219.954203][ T8367] EXT4-fs: Ignoring removed bh option
[  219.992782][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'.
[  220.037941][ T8367] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  220.088077][ T8367] EXT4-fs warning (device loop2): ext4_multi_mount_protect:338: MMP startup interrupted, failing mount
[  220.088077][ T8367] 
[  220.147551][ T4383] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  220.199487][ T8375] loop0: detected capacity change from 0 to 64
[  220.337642][ T4383] usb 4-1: Using ep0 maxpacket: 8
[  220.344784][ T4383] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  220.410548][ T4383] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  220.445359][ T4383] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  220.476789][ T4383] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  220.517626][ T4383] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  220.537038][ T4383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.651586][ T8385] netlink: 'syz.4.1503': attribute type 6 has an invalid length.
[  220.778155][ T4383] usb 4-1: GET_CAPABILITIES returned 0
[  220.783791][ T4383] usbtmc 4-1:16.0: can't read capabilities
[  220.943227][ T8399] loop2: detected capacity change from 0 to 512
[  220.967543][ T4455] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  221.031253][ T4464] usb 4-1: USB disconnect, device number 12
[  221.054806][ T8399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  221.088132][ T8404] loop5: detected capacity change from 0 to 1024
[  221.096696][ T8399] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.173566][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  221.173580][   T26] audit: type=1800 audit(1755617615.869:42): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1506" name="file1" dev="loop2" ino=15 res=0 errno=0
[  221.181181][ T4455] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  221.262211][   T26] audit: type=1800 audit(1755617615.929:43): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1506" name="file2" dev="loop2" ino=16 res=0 errno=0
[  221.333689][ T8414] netlink: 'syz.4.1512': attribute type 1 has an invalid length.
[  221.352449][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1512'.
[  221.367835][ T4455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.389407][ T4455] usb 1-1: Product: syz
[  221.398413][ T4455] usb 1-1: Manufacturer: syz
[  221.403047][ T4455] usb 1-1: SerialNumber: syz
[  221.426854][ T4455] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  221.482909][ T4278] EXT4-fs (loop2): unmounting filesystem.
[  221.598373][ T4455] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  221.707107][ T8424] loop3: detected capacity change from 0 to 512
[  221.739214][ T8424] EXT4-fs: Ignoring removed nomblk_io_submit option
[  221.776762][ T8424] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  221.822360][ T8424] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  221.843565][ T8424] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  221.853848][ T8424] EXT4-fs (loop3): 1 truncate cleaned up
[  221.859817][ T8424] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  221.880208][ T8424] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 4: comm syz.3.1518: lblock 0 mapped to illegal pblock 4 (length 1)
[  221.901504][ T8424] EXT4-fs (loop3): Remounting filesystem read-only
[  221.980088][ T8424] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 4: comm syz.3.1518: lblock 0 mapped to illegal pblock 4 (length 1)
[  222.052774][ T8424] EXT4-fs (loop3): Remounting filesystem read-only
[  222.166202][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  222.433764][ T8430] loop2: detected capacity change from 0 to 40427
[  222.469870][ T8430] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff
[  222.510790][ T4464] usb 1-1: USB disconnect, device number 13
[  222.548812][ T8430] F2FS-fs (loop2): invalid crc value
[  222.566001][ T8447] loop3: detected capacity change from 0 to 512
[  222.589295][ T8430] F2FS-fs (loop2): Found nat_bits in checkpoint
[  222.609812][ T8447] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  222.625973][ T8447] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.661145][   T26] audit: type=1800 audit(1755617617.359:44): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1524" name="file1" dev="loop3" ino=15 res=0 errno=0
[  222.682104][   T26] audit: type=1800 audit(1755617617.359:45): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1524" name="file2" dev="loop3" ino=16 res=0 errno=0
[  222.721278][ T8430] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  222.764771][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  222.846628][ T4278] syz-executor: attempt to access beyond end of device
[  222.846628][ T4278] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  223.088668][ T4455] usb 1-1: Service connection timeout for: 257
[  223.094979][ T4455] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  223.136226][ T4455] ath9k_htc: Failed to initialize the device
[  223.161489][ T4464] usb 1-1: ath9k_htc: USB layer deinitialized
[  223.399831][ T8463] loop3: detected capacity change from 0 to 8192
[  223.429126][ T8463] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  223.447632][ T8463] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  223.456862][ T8463] REISERFS (device loop3): using ordered data mode
[  223.538271][ T8463] reiserfs: using flush barriers
[  223.577571][ T4383] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  223.623106][ T8463] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  223.709890][ T8463] REISERFS (device loop3): checking transaction log (loop3)
[  223.767574][ T4383] usb 5-1: Using ep0 maxpacket: 8
[  223.776789][ T4383] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  223.796867][ T4383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.815515][ T4383] usb 5-1: Product: syz
[  223.820239][ T4383] usb 5-1: Manufacturer: syz
[  223.824959][ T4383] usb 5-1: SerialNumber: syz
[  223.868918][ T4383] usb 5-1: config 0 descriptor??
[  223.892335][ T4383] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  223.917585][ T4383] usb 5-1: setting power ON
[  223.922354][ T4383] dvb-usb: bulk message failed: -22 (2/0)
[  223.940489][ T8463] REISERFS (device loop3): Using tea hash to sort names
[  223.954225][ T8463] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  223.968321][ T4383] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  224.014623][ T4383] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  224.051725][ T4383] usb 5-1: media controller created
[  224.099778][ T8467] dvb-usb: bulk message failed: -22 (3/0)
[  224.114121][ T4383] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  224.153899][ T8467] dvb-usb: bulk message failed: -22 (4/0)
[  224.161328][ T8467] dvb-usb: bulk message failed: -22 (4/0)
[  224.191016][ T8467] cxusb: i2c read failed
[  224.221148][ T4383] usb 5-1: selecting invalid altsetting 6
[  224.247569][ T4383] usb 5-1: digital interface selection failed (-22)
[  224.266254][ T4383] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  224.291896][ T4383] usb 5-1: setting power OFF
[  224.305670][ T4383] dvb-usb: bulk message failed: -22 (2/0)
[  224.348141][ T4383] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  224.368445][ T4383] (NULL device *): no alternate interface
[  224.377180][   T52] block nbd0: Possible stuck request ffff888024f48000: control (read@0,4096B). Runtime 90 seconds
[  224.403482][ T8469] loop5: detected capacity change from 0 to 40427
[  224.422537][ T4383] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  224.432929][ T8469] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff
[  224.446288][ T8469] F2FS-fs (loop5): invalid crc value
[  224.452246][ T4383] usb 5-1: USB disconnect, device number 11
[  224.478747][ T8469] F2FS-fs (loop5): Found nat_bits in checkpoint
[  224.601365][ T8469] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  224.798628][ T6471] syz-executor: attempt to access beyond end of device
[  224.798628][ T6471] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  224.886428][ T8485] loop2: detected capacity change from 0 to 32768
[  224.991030][ T8502] loop0: detected capacity change from 0 to 256
[  225.031699][ T8485] XFS (loop2): Mounting V5 Filesystem
[  225.208875][ T8498] loop4: detected capacity change from 0 to 32768
[  225.261654][ T8485] XFS (loop2): Ending clean mount
[  225.328287][ T8485] XFS (loop2): Quotacheck needed: Please wait.
[  225.501264][ T8485] XFS (loop2): Quotacheck: Done.
[  225.525216][ T8513] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1548'.
[  225.668724][ T8485] XFS (loop2): User initiated shutdown received.
[  225.711875][ T8485] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489).  Shutting down filesystem.
[  225.761966][ T8485] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  225.923929][ T4278] XFS (loop2): Unmounting Filesystem
[  225.969074][ T8521] sp0: Synchronizing with TNC
[  226.167614][ T4383] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  226.264478][ T8510] loop3: detected capacity change from 0 to 32768
[  226.367787][ T4383] usb 5-1: Using ep0 maxpacket: 16
[  226.375294][ T4383] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.415062][ T4383] usb 5-1: config 0 interface 0 has no altsetting 0
[  226.447196][ T4383] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  226.459428][ T4383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.547305][ T4383] usb 5-1: config 0 descriptor??
[  226.621752][ T8533] loop0: detected capacity change from 0 to 64
[  226.817393][ T4265] hfs: node 4:3 still has 1 user(s)!
[  226.989782][ T8539] loop3: detected capacity change from 0 to 8192
[  227.016937][ T8539] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  227.031622][ T4383] cougar 0003:060B:500A.0012: unexpected long global item
[  227.037564][ T8539] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  227.059211][ T8539] REISERFS (device loop3): using ordered data mode
[  227.065760][ T8539] reiserfs: using flush barriers
[  227.087611][ T8539] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  227.089250][ T4383] cougar 0003:060B:500A.0012: parse failed
[  227.104529][ T8539] REISERFS (device loop3): checking transaction log (loop3)
[  227.138487][ T8539] REISERFS (device loop3): Using rupasov hash to sort names
[  227.173257][ T8539] REISERFS (device loop3): using 3.5.x disk format
[  227.192962][ T8539] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  227.200367][ T4383] cougar: probe of 0003:060B:500A.0012 failed with error -22
[  227.226560][ T8539] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  227.258162][ T4383] usb 5-1: USB disconnect, device number 12
[  227.265331][ T8539] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  227.295397][ T8539] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  227.569070][   T52] block nbd1: Possible stuck request ffff888024f78000: control (read@0,4096B). Runtime 90 seconds
[  227.950809][ T8562] overlayfs: upper fs does not support tmpfile.
[  228.137599][ T4459] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  228.327539][ T4459] usb 1-1: Using ep0 maxpacket: 32
[  228.336091][ T4459] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  228.415538][ T4459] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  228.448453][ T4459] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  228.458384][ T8554] loop5: detected capacity change from 0 to 32768
[  228.503792][ T8554] XFS: ikeep mount option is deprecated.
[  228.510118][ T4459] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  228.550608][ T4459] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  228.573909][ T4459] usb 1-1: Product: syz
[  228.598350][ T4459] usb 1-1: Manufacturer: syz
[  228.605858][ T8554] XFS (loop5): Mounting V5 Filesystem
[  228.617676][ T4459] usb 1-1: SerialNumber: syz
[  228.667007][ T4459] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input17
[  228.835375][ T8554] XFS (loop5): Ending clean mount
[  228.892017][ T8554] XFS (loop5): Quotacheck needed: Please wait.
[  228.894959][    C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  228.915683][ T4464] usb 1-1: USB disconnect, device number 14
[  228.957975][ T4464] appletouch 1-1:1.0: input: appletouch disconnected
[  229.045821][ T8554] XFS (loop5): Quotacheck: Done.
[  229.207214][ T6471] XFS (loop5): Unmounting Filesystem
[  229.233071][ T8596] loop2: detected capacity change from 0 to 1024
[  229.343540][ T8596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  229.429309][  T126] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  229.604182][ T4278] EXT4-fs (loop2): unmounting filesystem.
[  229.647782][  T126] usb 4-1: Using ep0 maxpacket: 16
[  229.654981][  T126] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  229.719481][  T126] usb 4-1: config 0 interface 0 has no altsetting 0
[  229.726237][  T126] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  229.787160][  T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.821361][  T126] usb 4-1: config 0 descriptor??
[  230.245350][  T126] gt683r_led 0003:1770:FF00.0013: unknown main item tag 0x0
[  230.264114][  T126] gt683r_led 0003:1770:FF00.0013: unknown main item tag 0x0
[  230.273500][  T126] gt683r_led 0003:1770:FF00.0013: unknown main item tag 0x0
[  230.289844][  T126] gt683r_led 0003:1770:FF00.0013: unknown main item tag 0x0
[  230.297341][  T126] gt683r_led 0003:1770:FF00.0013: unknown main item tag 0x0
[  230.323645][  T126] gt683r_led 0003:1770:FF00.0013: hidraw0: USB HID v0.08 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0
[  230.457819][  T126] usb 4-1: USB disconnect, device number 13
[  230.490599][ T5652] gt683r_led 0003:1770:FF00.0013: failed to send set report request: -19
[  230.630008][ T8610] loop2: detected capacity change from 0 to 32768
[  230.673348][ T8634] fido_id[8634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  230.769412][ T8610] XFS (loop2): Mounting V5 Filesystem
[  230.796896][ T8627] loop4: detected capacity change from 0 to 32768
[  230.820252][ T8627] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1590 (8627)
[  230.852558][ T8627] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  230.872819][ T8627] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  230.883674][ T8627] BTRFS info (device loop4): using free space tree
[  230.963427][ T8610] XFS (loop2): Ending clean mount
[  230.989023][ T8610] XFS (loop2): Quotacheck needed: Please wait.
[  231.157735][ T8610] XFS (loop2): Quotacheck: Done.
[  231.190743][ T8627] BTRFS info (device loop4): enabling ssd optimizations
[  231.300173][ T4278] XFS (loop2): Unmounting Filesystem
[  231.472707][ T4464] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  231.526340][ T4270] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  231.677642][ T4464] usb 4-1: Using ep0 maxpacket: 32
[  231.684531][ T4464] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  231.707595][ T4464] usb 4-1: config 0 has no interface number 0
[  231.749339][ T4464] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  231.803071][ T4464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.842589][ T4464] usb 4-1: Product: syz
[  231.846879][ T4464] usb 4-1: Manufacturer: syz
[  231.855581][ T8648] loop0: detected capacity change from 0 to 32768
[  231.867529][ T4464] usb 4-1: SerialNumber: syz
[  231.881020][ T4464] usb 4-1: config 0 descriptor??
[  231.888740][ T4464] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  231.910737][ T4464] usb 4-1: selecting invalid altsetting 1
[  231.916720][ T4464] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  231.964361][ T8648] XFS (loop0): Mounting V5 Filesystem
[  231.970793][ T4464] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  231.994437][ T8649] loop5: detected capacity change from 0 to 32768
[  232.024315][ T4464] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  232.038665][ T4464] usb 4-1: media controller created
[  232.056111][ T4464] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  232.203015][ T8648] XFS (loop0): Ending clean mount
[  232.351557][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1601'.
[  232.542865][ T4265] XFS (loop0): Unmounting Filesystem
[  233.255226][ T8668] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  233.287832][ T4464] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  233.305088][ T4464] zl10353_read_register: readreg error (reg=127, ret==-71)
[  233.335768][ T4464] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  233.408269][ T4464] usb 4-1: USB disconnect, device number 14
[  233.587726][ T4383] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  233.760953][ T8713] loop2: detected capacity change from 0 to 32768
[  233.776017][ T8713] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11
[  233.787575][ T4383] usb 1-1: Using ep0 maxpacket: 32
[  233.795005][ T4383] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  233.820844][ T4383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.854981][ T4383] usb 1-1: config 0 descriptor??
[  233.914125][ T5652] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  233.989635][ T8723] loop3: detected capacity change from 0 to 512
[  234.017825][ T8723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  234.060781][ T8719] loop4: detected capacity change from 0 to 32768
[  234.069857][ T7513] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11
[  234.083539][ T8723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  234.098382][ T8723] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.099555][ T4383] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  234.125749][ T3637] udevd[3637]: worker [5386] terminated by signal 33 (Unknown signal 33)
[  234.139904][ T5652] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  234.158499][ T5652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.170845][ T3637] udevd[3637]: worker [5386] failed while handling '/devices/virtual/block/loop3'
[  234.181850][ T5652] usb 6-1: config 0 descriptor??
[  234.189962][ T8733] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  234.190906][ T5652] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  234.203171][ T4383] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  234.232190][ T8719] XFS (loop4): Mounting V5 Filesystem
[  234.236351][ T4383] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  234.258593][ T4383] usb 1-1: media controller created
[  234.290954][ T4383] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  234.323380][ T8709] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  234.395283][ T5652] gp8psk: usb in 128 operation failed.
[  234.397609][ T4383] az6027: usb out operation failed. (-71)
[  234.402456][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  234.437773][ T4383] az6027: usb out operation failed. (-71)
[  234.443600][ T4383] stb0899_attach: Driver disabled by Kconfig
[  234.469841][ T4383] az6027: no front-end attached
[  234.469841][ T4383] 
[  234.491260][ T4383] az6027: usb out operation failed. (-71)
[  234.497119][ T4383] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  234.499380][ T8719] XFS (loop4): Ending clean mount
[  234.542531][ T4383] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18
[  234.554810][ T8719] XFS (loop4): Quotacheck needed: Please wait.
[  234.568644][ T4383] dvb-usb: schedule remote query interval to 400 msecs.
[  234.576441][ T4383] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  234.618022][ T5652] gp8psk: FW Version = 110.153.143 (0x6e998f)  Build 2139/36/74
[  234.620320][ T4383] usb 1-1: USB disconnect, device number 15
[  234.706546][ T8719] XFS (loop4): Quotacheck: Done.
[  234.727031][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'.
[  234.827369][ T5652] gp8psk: usb in 149 operation failed.
[  234.834152][ T5652] gp8psk: failed to get FPGA version
[  234.859289][ T4383] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  234.866306][ T5652] gp8psk: usb in 138 operation failed.
[  234.923320][ T5652] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  234.947694][ T5652] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  234.984403][ T4270] XFS (loop4): Unmounting Filesystem
[  234.995856][ T5652] usb 6-1: USB disconnect, device number 7
[  235.276866][ T8751] syzkaller0: tun_chr_ioctl cmd 1074025680
[  235.312265][ T8756] loop0: detected capacity change from 0 to 256
[  235.319682][ T8756] exfat: Deprecated parameter 'namecase'
[  235.352852][ T8756] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb2d6c, utbl_chksum : 0xe619d30d)
[  235.449203][ T8760] loop3: detected capacity change from 0 to 128
[  235.465193][ T8760] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  235.527152][ T8760] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  236.224805][ T8768] loop0: detected capacity change from 0 to 32768
[  236.396732][ T8768] XFS (loop0): Mounting V5 Filesystem
[  236.401296][ T8774] loop3: detected capacity change from 0 to 32768
[  236.494203][ T8774] XFS (loop3): Mounting V5 Filesystem
[  236.502236][ T8768] XFS (loop0): Ending clean mount
[  236.526368][ T8768] XFS (loop0): Quotacheck needed: Please wait.
[  236.607704][ T4464] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  236.668360][ T8768] XFS (loop0): Quotacheck: Done.
[  236.680392][ T8774] XFS (loop3): Ending clean mount
[  236.757891][ T8774] XFS (loop3): User initiated shutdown received.
[  236.772306][ T8774] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  236.796635][ T8774] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  236.797655][ T4464] usb 6-1: Using ep0 maxpacket: 32
[  236.832547][ T4265] XFS (loop0): Unmounting Filesystem
[  236.846203][ T4464] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  236.873855][ T4464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.903267][ T4464] usb 6-1: config 0 descriptor??
[  236.928137][ T4272] XFS (loop3): Unmounting Filesystem
[  237.146208][ T4464] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  237.163548][ T4464] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  237.199013][ T4464] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  237.243159][ T4464] usb 6-1: media controller created
[  237.274800][ T4464] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  237.767803][ T4464] az6027: usb out operation failed. (-71)
[  237.773767][ T4464] stb0899_attach: Driver disabled by Kconfig
[  237.797597][ T4464] az6027: no front-end attached
[  237.797597][ T4464] 
[  237.825688][ T4464] az6027: usb out operation failed. (-71)
[  237.837520][ T4464] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  237.879533][ T4464] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19
[  237.906268][ T4464] dvb-usb: schedule remote query interval to 400 msecs.
[  237.923841][ T4464] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  237.979190][ T4464] usb 6-1: USB disconnect, device number 8
[  238.034692][ T4464] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  238.074580][ T8810] loop2: detected capacity change from 0 to 40427
[  238.106623][ T8810] F2FS-fs (loop2): invalid crc value
[  238.134175][ T8810] F2FS-fs (loop2): Found nat_bits in checkpoint
[  238.231395][ T8810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  238.546404][ T8825] loop0: detected capacity change from 0 to 32768
[  238.604611][ T8825] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.1648 (8825)
[  238.651231][ T8825] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  238.707998][ T8825] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  238.766722][ T8825] BTRFS info (device loop0): enabling ssd optimizations
[  238.827589][ T8825] BTRFS info (device loop0): turning off barriers
[  238.834159][ T8825] BTRFS info (device loop0): use no compression
[  238.937898][ T8825] BTRFS info (device loop0): using free space tree
[  239.181178][ T8860] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1657'.
[  239.602492][ T4265] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  239.737724][ T7513] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by udevd (7513)
[  239.971848][ T8837] loop2: detected capacity change from 0 to 32768
[  240.252278][ T8837] XFS (loop2): Mounting V5 Filesystem
[  240.336971][ T8874] loop5: detected capacity change from 0 to 32768
[  240.469242][ T8837] XFS (loop2): Ending clean mount
[  240.486630][ T8837] XFS (loop2): Quotacheck needed: Please wait.
[  240.585888][ T8837] XFS (loop2): Quotacheck: Done.
[  240.617544][ T4727] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  240.839594][ T4278] XFS (loop2): Unmounting Filesystem
[  240.847604][ T4727] usb 1-1: Using ep0 maxpacket: 32
[  240.856700][ T4727] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  240.889983][ T4727] usb 1-1: config 0 has no interface number 0
[  240.951091][ T4727] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  240.998938][ T4727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.027381][ T4727] usb 1-1: Product: syz
[  241.037380][ T4727] usb 1-1: Manufacturer: syz
[  241.046181][ T4727] usb 1-1: SerialNumber: syz
[  241.069010][ T4727] usb 1-1: config 0 descriptor??
[  241.110598][ T4727] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  241.127529][ T4727] usb 1-1: selecting invalid altsetting 1
[  241.133305][ T4727] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  241.181603][ T4727] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  241.218022][ T4727] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  241.226435][ T4727] usb 1-1: media controller created
[  241.259402][ T4727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  241.344360][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1672'.
[  241.950412][ T8924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1678'.
[  242.453799][ T8888] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  242.517974][ T4727] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  242.528024][ T4727] zl10353_read_register: readreg error (reg=127, ret==-71)
[  242.546059][ T4727] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  242.635184][ T4727] usb 1-1: USB disconnect, device number 16
[  242.790885][ T8951] loop2: detected capacity change from 0 to 164
[  242.834297][ T8951] Unable to read rock-ridge attributes
[  242.893354][ T8929] loop3: detected capacity change from 0 to 32768
[  242.896845][ T8951] Unable to read rock-ridge attributes
[  242.952745][ T8929] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.969965][ T8929] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  242.993738][ T8929] BTRFS info (device loop3): enabling auto defrag
[  243.008039][ T8929] BTRFS info (device loop3): doing ref verification
[  243.015280][ T8929] BTRFS info (device loop3): use no compression
[  243.041572][ T8929] BTRFS info (device loop3): force clearing of disk cache
[  243.050547][ T8929] BTRFS info (device loop3): max_inline at 4096
[  243.058950][ T8929] BTRFS info (device loop3): disabling free space tree
[  243.291928][ T8929] BTRFS info (device loop3): enabling ssd optimizations
[  243.331375][ T8929] BTRFS info (device loop3): rebuilding free space tree
[  243.354687][ T8981] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.378899][ T8929] BTRFS info (device loop3): disabling free space tree
[  243.386082][ T8929] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  243.403102][ T8981] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.425194][ T8981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.437685][ T8929] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  243.463331][ T8981] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.763891][ T8984] loop0: detected capacity change from 0 to 512
[  243.791842][ T4272] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  243.923516][ T8984] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  243.958520][ T8984] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.000423][ T8996] loop2: detected capacity change from 0 to 128
[  244.238738][ T9000] loop5: detected capacity change from 0 to 24
[  244.279330][ T9000] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  244.368136][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  244.377517][ T9000] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  244.938794][ T4464] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  245.014054][ T9005] loop2: detected capacity change from 0 to 32768
[  245.030966][ T9005] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1705 (9005)
[  245.068502][ T9005] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  245.108621][ T9005] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  245.147563][ T9005] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  245.157690][ T4464] usb 6-1: Using ep0 maxpacket: 8
[  245.164521][ T4464] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11
[  245.185003][ T9005] BTRFS info (device loop2): use zstd compression, level 3
[  245.199134][ T4464] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  245.215607][ T9005] BTRFS info (device loop2): using free space tree
[  245.237418][ T4464] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40
[  245.263303][ T4464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.285932][ T4464] usb 6-1: Product: syz
[  245.296074][ T4464] usb 6-1: Manufacturer: syz
[  245.305842][ T4464] usb 6-1: SerialNumber: syz
[  245.444107][ T9005] BTRFS info (device loop2): enabling ssd optimizations
[  245.542692][ T4464] usbhid 6-1:1.0: can't add hid device: -71
[  245.551225][ T4464] usbhid: probe of 6-1:1.0 failed with error -71
[  245.572463][ T4464] usb 6-1: USB disconnect, device number 9
[  245.688981][ T4278] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  246.085084][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'.
[  246.139975][ T9057] loop4: detected capacity change from 0 to 1024
[  246.331105][ T5751] hfsplus: b-tree write err: -5, ino 4
[  246.441690][ T9067] overlayfs: workdir and upperdir must reside under the same mount
[  246.653685][ T9077] devtmpfs: Bad value for 'mode'
[  246.927766][ T4458] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  247.120329][ T4458] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.137593][ T4458] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  247.169361][ T4458] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  247.197521][ T4458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.216059][ T4458] usb 5-1: Product: syz
[  247.237574][ T4458] usb 5-1: Manufacturer: syz
[  247.242356][ T4458] usb 5-1: SerialNumber: syz
[  247.300259][ T9096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  247.307697][ T9096] IPv6: NLM_F_CREATE should be set when creating new route
[  247.341878][ T9088] loop2: detected capacity change from 0 to 32768
[  247.363580][ T9088] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  247.407826][ T9088] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  247.439204][ T9088] BTRFS info (device loop2): enabling ssd optimizations
[  247.455163][ T9088] BTRFS info (device loop2): turning off barriers
[  247.476964][ T9088] BTRFS info (device loop2): use no compression
[  247.496097][ T4458] usb 5-1: 0:2 : does not exist
[  247.497553][ T9088] BTRFS info (device loop2): using free space tree
[  247.519789][ T4458] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  247.587061][ T4458] usb 5-1: USB disconnect, device number 13
[  247.843431][ T4278] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  247.859606][ T7513] udevd[7513]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.582439][ T9140] loop5: detected capacity change from 0 to 4096
[  248.635902][ T9150] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  249.541278][ T9169] loop4: detected capacity change from 0 to 32768
[  249.550664][ T9178] loop0: detected capacity change from 0 to 128
[  249.652774][   T26] audit: type=1800 audit(1755617644.349:46): pid=9169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1762" name="file1" dev="loop4" ino=4 res=0 errno=0
[  249.708282][ T9178] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  249.720472][ T9178] ext4 filesystem being mounted at /342/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  249.986457][ T9186] loop2: detected capacity change from 0 to 2048
[  250.347835][ T9184] loop5: detected capacity change from 0 to 32768
[  250.361603][ T9173] syz.3.1764 (9173): drop_caches: 2
[  250.369646][ T9184] XFS: attr2 mount option is deprecated.
[  250.375351][ T9184] XFS: ikeep mount option is deprecated.
[  250.380788][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  250.388110][ T9186] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  250.464646][ T9189] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  250.553282][ T9184] XFS (loop5): Mounting V5 Filesystem
[  250.741845][ T9184] XFS (loop5): Ending clean mount
[  250.753317][ T9184] XFS (loop5): Quotacheck needed: Please wait.
[  250.805693][ T9194] loop0: detected capacity change from 0 to 32768
[  250.862747][ T9184] XFS (loop5): Quotacheck: Done.
[  250.929838][ T9194] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  250.960784][ T6471] XFS (loop5): Unmounting Filesystem
[  251.188650][ T4265] ocfs2: Unmounting device (7,0) on (node local)
[  251.254848][ T9205] loop3: detected capacity change from 0 to 16
[  251.307826][ T9205] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735)
[  251.423904][ T4439] blk_print_req_error: 104 callbacks suppressed
[  251.423923][ T4439] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  251.726974][ T9218] loop5: detected capacity change from 0 to 2048
[  251.783846][ T9218] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  252.130009][ T9201] loop2: detected capacity change from 0 to 32768
[  252.172984][ T9201] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1773 (9201)
[  252.234127][ T9201] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  252.278878][ T9201] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  252.309100][ T9201] BTRFS info (device loop2): metadata ratio 1025
[  252.337970][ T9201] BTRFS info (device loop2): enabling disk space caching
[  252.366820][ T9201] BTRFS info (device loop2): enabling ssd optimizations
[  252.390166][ T9201] BTRFS info (device loop2): force clearing of disk cache
[  252.412318][ T9201] BTRFS info (device loop2): turning off barriers
[  252.420254][ T9228] ipt_CLUSTERIP: Please specify destination IP
[  252.433458][ T9201] BTRFS info (device loop2): setting nodatacow, compression disabled
[  252.456747][ T9201] BTRFS info (device loop2): using spread ssd allocation scheme
[  252.480772][ T9201] BTRFS info (device loop2): disk space caching is enabled
[  252.767287][ T9201] BTRFS info (device loop2): rebuilding free space tree
[  252.823873][ T9201] BTRFS info (device loop2): disabling free space tree
[  252.837708][ T9201] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  252.866807][ T9201] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  253.142963][ T4278] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  253.157606][ T5651] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  253.357699][ T5651] usb 1-1: Using ep0 maxpacket: 32
[  253.377296][ T5651] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  253.392409][ T5651] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  253.410868][ T5651] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  253.439833][ T5651] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  253.484335][ T5651] usb 1-1: config 0 interface 0 has no altsetting 0
[  253.522007][ T5651] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  253.540601][ T5651] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  253.559347][ T5651] usb 1-1: Product: syz
[  253.563997][ T5651] usb 1-1: Manufacturer: syz
[  253.594700][ T5651] usb 1-1: SerialNumber: syz
[  253.622674][ T5651] usb 1-1: config 0 descriptor??
[  253.652838][ T5651] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  253.696100][ T5651] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  253.776043][ T9278] loop4: detected capacity change from 0 to 4096
[  253.812836][ T9278] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  253.877772][ T4452] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  253.972200][ T9280] loop2: detected capacity change from 0 to 1024
[  254.002849][ T9280] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  254.084528][ T4452] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.095886][ T9280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  254.124369][ T4452] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.144258][ T9280] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  254.148500][ T4452] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  254.186982][ T4452] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.195281][ T4452] usb 4-1: Product: syz
[  254.199597][ T4452] usb 4-1: Manufacturer: syz
[  254.204581][ T4452] usb 4-1: SerialNumber: syz
[  254.212816][ T4452] cdc_mbim 4-1:1.0: skipping garbage
[  254.229040][ T9280] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  254.252149][ T9280] EXT4-fs (loop2): This should not happen!! Data will be lost
[  254.252149][ T9280] 
[  254.263632][ T9280] EXT4-fs (loop2): Total free blocks count 0
[  254.274807][ T9280] EXT4-fs (loop2): Free/Dirty block details
[  254.282134][ T9280] EXT4-fs (loop2): free_blocks=20480
[  254.289956][ T9280] EXT4-fs (loop2): dirty_blocks=32
[  254.296548][ T9280] EXT4-fs (loop2): Block reservation details
[  254.304119][ T9280] EXT4-fs (loop2): i_reserved_data_blocks=2
[  254.376722][ T4358] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  254.423830][ T4452] cdc_mbim 4-1:1.0: bind() failure
[  254.439739][ T4452] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  254.450256][ T4452] cdc_ncm 4-1:1.1: bind() failure
[  254.485075][ T4452] usb 4-1: USB disconnect, device number 15
[  254.516629][   T52] block nbd0: Possible stuck request ffff888024f48000: control (read@0,4096B). Runtime 120 seconds
[  254.529959][ T4459] usb 1-1: USB disconnect, device number 17
[  254.564077][ T4459] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  254.786557][ T9282] loop4: detected capacity change from 0 to 32768
[  254.832612][ T9282] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.1800 (9282)
[  254.887611][ T9282] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  254.898145][ T9282] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  254.918040][ T9282] BTRFS info (device loop4): force zlib compression, level 3
[  254.925645][ T9282] BTRFS info (device loop4): force clearing of disk cache
[  254.947821][ T9282] BTRFS info (device loop4): turning off barriers
[  254.964697][ T9282] BTRFS info (device loop4): doing ref verification
[  254.974857][ T9282] BTRFS info (device loop4): enabling disk space caching
[  254.992726][ T9282] BTRFS info (device loop4): disk space caching is enabled
[  255.147553][ T4459] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  255.226620][ T9282] BTRFS info (device loop4): enabling ssd optimizations
[  255.267107][ T9282] BTRFS info (device loop4): rebuilding free space tree
[  255.339817][ T9282] BTRFS info (device loop4): disabling free space tree
[  255.377243][ T9282] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  255.388542][ T9282] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  255.399022][ T4459] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  255.428104][ T4459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.479075][ T4459] usb 3-1: config 0 descriptor??
[  255.524860][ T4270] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  255.688735][ T4459] ath6kl: Failed to submit usb control message: -71
[  255.700970][ T9327] netlink: 'syz.0.1811': attribute type 3 has an invalid length.
[  255.725490][ T4459] ath6kl: unable to send the bmi data to the device: -71
[  255.736737][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  255.743176][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  255.758433][ T4459] ath6kl: Unable to send get target info: -71
[  255.775723][ T4459] ath6kl: Failed to init ath6kl core: -71
[  255.822396][ T9330] loop5: detected capacity change from 0 to 256
[  255.866077][ T9330] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  256.089205][ T4459] ath6kl_usb: probe of 3-1:0.0 failed with error -71
[  256.135162][ T4459] usb 3-1: USB disconnect, device number 15
[  256.206519][ T9335] netlink: 'syz.4.1810': attribute type 1 has an invalid length.
[  256.462566][ T9343] vivid-004: disconnect
[  256.481280][ T9342] vivid-004: reconnect
[  256.676820][ T9354] loop0: detected capacity change from 0 to 512
[  256.737938][ T9354] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1823: bad orphan inode 11
[  256.753447][ T9354] ext4_test_bit(bit=10, block=4) = 1
[  256.763212][ T9354] is_bad_inode(inode)=0
[  256.767851][ T9354] NEXT_ORPHAN(inode)=2080374784
[  256.772907][ T9354] max_ino=32
[  256.776702][ T9354] i_nlink=0
[  256.780666][ T9354] EXT4-fs (loop0): 1 truncate cleaned up
[  256.786461][ T9354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  256.844232][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  256.870061][ T9364] loop3: detected capacity change from 0 to 64
[  257.096223][ T9364] Trying to free block not in datazone
[  257.136764][ T9372] loop2: detected capacity change from 0 to 1024
[  257.229852][   T26] audit: type=1800 audit(1755617651.929:47): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1831" name="file2" dev="loop2" ino=2 res=0 errno=0
[  257.657014][   T52] block nbd1: Possible stuck request ffff888024f78000: control (read@0,4096B). Runtime 120 seconds
[  257.829424][ T5373] kernel read not supported for file /dsp1 (pid: 5373 comm: kworker/1:18)
[  258.204611][ T9401] block device autoloading is deprecated and will be removed.
[  258.427561][ T4459] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  258.621558][ T4459] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  258.640985][ T4459] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  258.662906][ T4459] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  258.692728][ T4459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  258.727530][ T4459] usb 5-1: SerialNumber: syz
[  258.842242][ T9431] loop2: detected capacity change from 0 to 256
[  258.913055][ T9431] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  258.940715][ T4459] usb 5-1: 0:2 : does not exist
[  258.961884][ T4459] usb 5-1: USB disconnect, device number 14
[  258.963277][ T9433] loop3: detected capacity change from 0 to 512
[  258.977400][ T9431] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  259.015547][ T9431] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  259.086967][ T9433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  259.160352][   T26] audit: type=1800 audit(1755617653.859:48): pid=9431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1857" name="file1" dev="loop2" ino=1048626 res=0 errno=0
[  259.160528][ T9433] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.196042][ T7513] udevd[7513]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  259.280636][   T26] audit: type=1326 audit(1755617653.979:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742698ebe9 code=0x7ffc0000
[  259.303064][    C1] vkms_vblank_simulate: vblank timer overrun
[  259.379468][   T26] audit: type=1326 audit(1755617654.019:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742698ebe9 code=0x7ffc0000
[  259.402251][    C1] vkms_vblank_simulate: vblank timer overrun
[  259.488699][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  259.500594][   T26] audit: type=1326 audit(1755617654.019:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f742698ebe9 code=0x7ffc0000
[  259.562221][ T9425] loop5: detected capacity change from 0 to 32768
[  259.612911][   T26] audit: type=1326 audit(1755617654.019:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742698ebe9 code=0x7ffc0000
[  259.635257][    C1] vkms_vblank_simulate: vblank timer overrun
[  259.637002][ T9425] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1856 (9425)
[  259.722353][ T9425] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  259.745507][   T26] audit: type=1326 audit(1755617654.019:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742698ebe9 code=0x7ffc0000
[  259.768923][    C1] vkms_vblank_simulate: vblank timer overrun
[  259.776559][ T9425] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  259.838000][ T9425] BTRFS info (device loop5): using free space tree
[  259.857142][   T26] audit: type=1326 audit(1755617654.019:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f742698ebe9 code=0x7ffc0000
[  260.043746][   T26] audit: type=1326 audit(1755617654.059:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742698ebe9 code=0x7ffc0000
[  260.134686][ T9425] BTRFS info (device loop5): enabling ssd optimizations
[  260.198903][ T9482] loop2: detected capacity change from 0 to 128
[  260.327090][ T9482] binder: 9479:9482 ioctl c0306201 200000000380 returned -14
[  260.344893][ T6471] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  260.867142][ T9499] loop3: detected capacity change from 0 to 512
[  260.892496][ T9499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  261.054175][ T9499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  261.105349][ T9499] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.238709][ T9499] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  261.375001][ T9518] loop0: detected capacity change from 0 to 512
[  261.504892][ T9518] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  261.527324][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  261.639527][ T9518] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1887: couldn't read orphan inode 26 (err -116)
[  261.786764][ T9518] EXT4-fs (loop0): Remounting filesystem read-only
[  261.839876][ T9518] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  261.865845][ T9518] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.978626][ T9529] loop4: detected capacity change from 0 to 4096
[  261.998222][ T9529] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  262.085766][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  262.348445][ T9547] syz.2.1902 (9547) used greatest stack depth: 20064 bytes left
[  262.561171][ T9560] loop2: detected capacity change from 0 to 256
[  262.679853][ T9560] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  262.686951][ T9560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  262.762663][ T9560] vhci_hcd vhci_hcd.0: Device attached
[  262.813002][ T9570] xt_connbytes: Forcing CT accounting to be enabled
[  263.002990][ T9544] loop5: detected capacity change from 0 to 32768
[  263.017587][ T4383] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  263.038523][ T9544] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1900 (9544)
[  263.072722][ T9544] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  263.100095][ T9544] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  263.126043][ T9544] BTRFS info (device loop5): using free space tree
[  263.194333][ T9581] binder: 9579:9581 ioctl 4018620d 0 returned -22
[  263.203816][ T9581] binder: 9579:9581 ioctl c0306201 200000000700 returned -14
[  263.435248][ T9544] BTRFS info (device loop5): enabling ssd optimizations
[  263.734554][ T6471] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  263.956856][ T7513] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop5 scanned by udevd (7513)
[  264.006491][ T9598] loop3: detected capacity change from 0 to 32768
[  264.055278][ T9598] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.1916 (9598)
[  264.077584][ T4459] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  264.281373][ T9598] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  264.297532][ T4459] usb 5-1: Using ep0 maxpacket: 16
[  264.308020][ T9598] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  264.310823][ T4459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.357656][ T9598] BTRFS info (device loop3): using free space tree
[  264.359636][ T4459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.403027][ T9562] usb 37-1: recv xbuf, 0
[  264.420498][   T56] vhci_hcd: stop threads
[  264.426681][   T56] vhci_hcd: release socket
[  264.432242][ T4459] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  264.450266][   T56] vhci_hcd: disconnect device
[  264.465435][ T4459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.487590][ T4383] vhci_hcd: vhci_device speed not set
[  264.525645][ T9622] loop5: detected capacity change from 0 to 256
[  264.528540][ T4459] usb 5-1: config 0 descriptor??
[  264.573421][ T9622] FAT-fs (loop5): Directory bread(block 64) failed
[  264.613545][ T9622] FAT-fs (loop5): Directory bread(block 65) failed
[  264.629610][ T9622] FAT-fs (loop5): Directory bread(block 66) failed
[  264.663765][ T9622] FAT-fs (loop5): Directory bread(block 67) failed
[  264.686532][ T9598] BTRFS info (device loop3): enabling ssd optimizations
[  264.694872][ T9622] FAT-fs (loop5): Directory bread(block 68) failed
[  264.702592][ T9622] FAT-fs (loop5): Directory bread(block 69) failed
[  264.727636][ T9622] FAT-fs (loop5): Directory bread(block 70) failed
[  264.735132][ T9622] FAT-fs (loop5): Directory bread(block 71) failed
[  264.742392][ T9622] FAT-fs (loop5): Directory bread(block 72) failed
[  264.757599][ T9622] FAT-fs (loop5): Directory bread(block 73) failed
[  264.859993][ T9622] netlink: 'syz.5.1922': attribute type 11 has an invalid length.
[  264.883761][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1922'.
[  264.947406][ T4272] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  264.979924][ T4459] ntrig 0003:1B96:0008.0014: unknown main item tag 0x0
[  264.986935][ T4459] ntrig 0003:1B96:0008.0014: unknown main item tag 0x0
[  265.006471][ T4459] ntrig 0003:1B96:0008.0014: unknown main item tag 0x0
[  265.023491][ T4459] ntrig 0003:1B96:0008.0014: unknown main item tag 0x0
[  265.030883][ T4459] ntrig 0003:1B96:0008.0014: unknown main item tag 0x0
[  265.037862][ T4459] ntrig 0003:1B96:0008.0014: unknown main item tag 0x0
[  265.044872][ T4459] ntrig 0003:1B96:0008.0014: unknown main item tag 0x0
[  265.099311][ T4459] ntrig 0003:1B96:0008.0014: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0
[  265.197114][ T4459] ntrig 0003:1B96:0008.0014: Firmware version: 0.0.0.0.0 (0000 0000)
[  265.654350][   T22] usb 5-1: USB disconnect, device number 15
[  265.711699][ T9650] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1925'.
[  265.747783][ T9650] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1925'.
[  265.771683][ T9650] device gretap0 entered promiscuous mode
[  265.786513][ T9650] device batadv_slave_1 entered promiscuous mode
[  265.822330][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  266.847379][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1950'.
[  266.913162][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1950'.
[  267.052349][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1954'.
[  267.147508][    T7] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  267.226985][ T4335] kernel read not supported for file /dsp (pid: 4335 comm: kworker/0:4)
[  267.357579][    T7] usb 1-1: Using ep0 maxpacket: 32
[  267.365656][    T7] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  267.397500][    T7] usb 1-1: config 0 has no interface number 0
[  267.409472][    T7] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  267.437532][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.445749][    T7] usb 1-1: Product: syz
[  267.449699][   T22] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  267.477510][    T7] usb 1-1: Manufacturer: syz
[  267.483852][    T7] usb 1-1: SerialNumber: syz
[  267.502337][    T7] usb 1-1: config 0 descriptor??
[  267.531819][    T7] smsc95xx v2.0.0
[  267.658071][   T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  267.692766][   T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  267.712921][   T22] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  267.726501][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  267.762904][   T22] usb 3-1: SerialNumber: syz
[  267.986171][   T22] usb 3-1: 0:2 : does not exist
[  268.004005][   T22] usb 3-1: unit 252 not found!
[  268.042260][   T22] usb 3-1: USB disconnect, device number 16
[  268.155589][    T7] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  268.188235][    T7] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  268.218606][    T7] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  268.241197][    T7] smsc95xx: probe of 1-1:0.67 failed with error -71
[  268.262560][    T7] usb 1-1: USB disconnect, device number 18
[  268.272475][ T4439] udevd[4439]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  268.340911][ T9716] loop3: detected capacity change from 0 to 32768
[  268.417130][ T9716] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  268.452486][ T9716] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  268.505092][ T9716] (syz.3.1958,9716,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  268.706263][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  268.862773][ T9733] loop5: detected capacity change from 0 to 8192
[  269.031823][ T9743] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  269.288775][ T9751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1974'.
[  269.527533][ T5372] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  269.537550][ T9644] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  269.572201][ T9759] loop4: detected capacity change from 0 to 64
[  269.615665][ T9759] hfs: hfs: Invalid key length: 94
[  269.629138][ T9761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1979'.
[  269.678164][ T4270] hfs: node 4:3 still has 1 user(s)!
[  269.713551][ T9739] loop0: detected capacity change from 0 to 32768
[  269.725117][ T5372] usb 3-1: Using ep0 maxpacket: 32
[  269.731272][ T9644] usb 6-1: Using ep0 maxpacket: 32
[  269.741673][ T5372] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  269.755945][ T9644] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  269.779887][ T9644] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  269.796708][ T5372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.855561][ T9767] loop3: detected capacity change from 0 to 2048
[  269.879465][ T9770] loop4: detected capacity change from 0 to 2048
[  269.883171][ T9644] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  269.889419][ T9767] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  269.910307][ T9767] UDF-fs: Scanning with blocksize 512 failed
[  269.914222][ T5372] usb 3-1: config 0 descriptor??
[  269.943709][ T9767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.976564][ T9770] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  269.995960][ T9644] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  270.014323][ T9644] usb 6-1: config 0 interface 0 has no altsetting 0
[  270.026453][   T26] audit: type=1804 audit(1755617664.719:56): pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1982" name="/newroot/401/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  270.059584][ T9644] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  270.074551][ T9644] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  270.084103][ T9644] usb 6-1: Product: syz
[  270.088690][ T9644] usb 6-1: Manufacturer: syz
[  270.093349][ T9644] usb 6-1: SerialNumber: syz
[  270.109118][ T9644] usb 6-1: config 0 descriptor??
[  270.123674][ T9739] XFS (loop0): Mounting V5 Filesystem
[  270.132268][   T26] audit: type=1800 audit(1755617664.719:57): pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1982" name="bus" dev="loop4" ino=18 res=0 errno=0
[  270.133778][ T9644] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  270.184756][ T9644] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  270.200005][ T5372] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  270.222706][ T5372] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  270.285080][ T5372] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  270.300467][ T5372] usb 3-1: media controller created
[  270.314112][ T5372] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  270.362610][ T9739] XFS (loop0): Ending clean mount
[  270.398550][ T4270] EXT4-fs (loop4): unmounting filesystem.
[  270.464262][ T4265] XFS (loop0): Unmounting Filesystem
[  270.847961][ T5372] az6027: usb out operation failed. (-71)
[  270.853827][ T5372] stb0899_attach: Driver disabled by Kconfig
[  270.885299][ T5372] az6027: no front-end attached
[  270.885299][ T5372] 
[  270.905833][ T5372] az6027: usb out operation failed. (-71)
[  270.923169][ T5372] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  270.940261][    T7] usb 6-1: USB disconnect, device number 10
[  270.945184][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1989'.
[  270.957188][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1989'.
[  270.960464][    T7] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  270.966755][ T5372] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20
[  270.993653][ T5372] dvb-usb: schedule remote query interval to 400 msecs.
[  271.003535][ T5372] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  271.031435][ T9792] device gretap0 entered promiscuous mode
[  271.053727][ T5372] usb 3-1: USB disconnect, device number 17
[  271.071373][ T9792] device batadv_slave_1 entered promiscuous mode
[  271.125790][ T5372] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  271.136586][ T9792] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  271.148440][ T9792] Cannot create hsr debugfs directory
[  271.154898][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  271.546729][ T9811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1997'.
[  271.718824][ T9817] loop4: detected capacity change from 0 to 4096
[  271.756427][ T9817] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  272.108916][ T9825] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  272.516068][ T9813] loop0: detected capacity change from 0 to 40427
[  272.545104][ T9813] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  272.581040][ T9813] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  272.651445][    T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  272.664390][ T9813] F2FS-fs (loop0): Found nat_bits in checkpoint
[  272.753465][ T9813] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  272.760809][ T9813] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  272.857799][    T7] usb 4-1: Using ep0 maxpacket: 32
[  272.863289][ T5546] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  272.879445][    T7] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  272.895249][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.915843][    T7] usb 4-1: config 0 descriptor??
[  273.067637][ T5546] usb 5-1: Using ep0 maxpacket: 32
[  273.074608][ T5546] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  273.083660][ T5546] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  273.096314][ T5546] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  273.113617][ T5546] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  273.127308][    T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  273.141070][ T5546] usb 5-1: config 0 interface 0 has no altsetting 0
[  273.148583][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  273.184111][    T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  273.193905][    T7] usb 4-1: media controller created
[  273.206123][ T5546] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  273.217540][ T5372] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  273.225872][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  273.237939][ T5546] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  273.246584][ T5546] usb 5-1: Product: syz
[  273.253716][ T5546] usb 5-1: Manufacturer: syz
[  273.259691][ T5546] usb 5-1: SerialNumber: syz
[  273.272261][ T5546] usb 5-1: config 0 descriptor??
[  273.282262][ T5546] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  273.294441][ T5546] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  273.402598][ T5372] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.429019][ T5372] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  273.439171][ T5372] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  273.449113][ T5372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.458186][ T9644] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  273.475953][ T5372] usb 6-1: config 0 descriptor??
[  273.502635][ T5372] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  273.509988][ T5372] dvb-usb: bulk message failed: -22 (3/0)
[  273.527193][ T5372] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  273.537956][ T5372] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  273.543965][ T9864] IPv6: NLM_F_CREATE should be specified when creating new route
[  273.545122][ T5372] usb 6-1: media controller created
[  273.560502][ T5372] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  273.583327][ T5372] dvb-usb: bulk message failed: -22 (6/0)
[  273.606142][ T5372] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  273.622584][ T5372] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input21
[  273.636936][ T5372] dvb-usb: schedule remote query interval to 150 msecs.
[  273.644649][ T5372] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  273.667530][ T9644] usb 1-1: Using ep0 maxpacket: 8
[  273.674580][ T9644] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11
[  273.691870][ T9644] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  273.729381][ T9644] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40
[  273.744215][ T9644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.753469][ T9644] usb 1-1: Product: syz
[  273.758781][ T9644] usb 1-1: Manufacturer: syz
[  273.762968][    T7] az6027: usb out operation failed. (-71)
[  273.763749][ T9644] usb 1-1: SerialNumber: syz
[  273.774592][    T7] stb0899_attach: Driver disabled by Kconfig
[  273.796337][    T7] az6027: no front-end attached
[  273.796337][    T7] 
[  273.801511][ T5372] dvb-usb: bulk message failed: -22 (1/0)
[  273.817668][ T5372] dvb-usb: error while querying for an remote control event.
[  273.829780][    T7] az6027: usb out operation failed. (-71)
[  273.835536][    T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  273.860434][    T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22
[  273.919088][    T7] dvb-usb: schedule remote query interval to 400 msecs.
[  273.934361][    T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  273.966425][    T7] usb 4-1: USB disconnect, device number 16
[  274.009798][ T5372] dvb-usb: bulk message failed: -22 (1/0)
[  274.024053][ T5372] dvb-usb: error while querying for an remote control event.
[  274.028557][    T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  274.069269][ T9644] usbhid 1-1:1.0: can't add hid device: -71
[  274.075325][ T9644] usbhid: probe of 1-1:1.0 failed with error -71
[  274.086720][ T4382] usb 5-1: USB disconnect, device number 16
[  274.102528][ T4382] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  274.112744][ T9644] usb 1-1: USB disconnect, device number 19
[  274.138167][ T5372] usb 6-1: USB disconnect, device number 11
[  274.139373][ T9866] loop2: detected capacity change from 0 to 32768
[  274.159547][ T9866] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2020 (9866)
[  274.200592][ T9866] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  274.228117][ T5372] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  274.236696][ T9866] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  274.262114][ T9866] BTRFS info (device loop2): using free space tree
[  274.332946][ T9866] BTRFS info (device loop2): enabling ssd optimizations
[  274.516506][ T4278] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  274.847578][ T4336] wlan1: Trigger new scan to find an IBSS to join
[  275.402426][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'.
[  275.877326][ T9906] loop5: detected capacity change from 0 to 32768
[  275.887717][ T5373] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  275.894825][ T9932] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  275.894825][ T9932] The task syz.3.2039 (9932) triggered the difference, watch for misbehavior.
[  276.080504][ T5373] usb 1-1: Using ep0 maxpacket: 16
[  276.094400][ T5373] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.111842][ T5373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  276.124526][ T5373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  276.138555][ T5373] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  276.149127][ T5373] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  276.179269][ T5373] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  276.223132][ T5373] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  276.241993][ T5373] usb 1-1: Manufacturer: syz
[  276.270014][ T5373] usb 1-1: config 0 descriptor??
[  276.347578][ T4382] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  276.547637][  T128] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  276.556989][ T4382] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.567918][ T5373] rc_core: IR keymap rc-hauppauge not found
[  276.573589][ T4382] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  276.573910][ T5373] Registered IR keymap rc-empty
[  276.585340][ T4382] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  276.597623][ T5373] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  276.610562][ T4382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.619322][ T4382] usb 6-1: Product: syz
[  276.623696][ T4382] usb 6-1: Manufacturer: syz
[  276.627568][ T5373] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  276.628913][ T4382] usb 6-1: SerialNumber: syz
[  276.668165][ T5373] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  276.702760][ T9918] loop0: detected capacity change from 0 to 1764
[  276.705151][ T5373] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23
[  276.755525][ T5373] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  276.777512][  T128] usb 5-1: Using ep0 maxpacket: 32
[  276.785004][  T128] usb 5-1: config 0 has an invalid interface number: 150 but max is 0
[  276.793684][ T5373] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  276.807401][  T128] usb 5-1: config 0 has no interface number 0
[  276.829278][ T5373] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  276.840919][  T128] usb 5-1: config 0 interface 150 has no altsetting 0
[  276.857749][ T5373] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  276.867205][  T128] usb 5-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01
[  276.871313][ T4382] usb 6-1: 0:2 : does not exist
[  276.887591][ T5373] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  276.891980][ T4382] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  276.895410][  T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.916797][  T128] usb 5-1: Product: syz
[  276.922619][ T5373] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  276.953200][ T4382] usb 6-1: USB disconnect, device number 12
[  276.961067][  T128] usb 5-1: Manufacturer: syz
[  276.965956][  T128] usb 5-1: SerialNumber: syz
[  276.978547][ T5373] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  277.007902][ T5373] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  277.020404][  T128] usb 5-1: config 0 descriptor??
[  277.037695][ T5373] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  277.046841][  T128] gspca_main: pac7311-2.14.0 probing 093a:2603
[  277.067574][ T5373] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  277.098879][ T5373] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  277.111287][ T5373] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  277.123905][ T5373] usb 1-1: USB disconnect, device number 20
[  277.209393][ T7513] udevd[7513]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  277.235488][  T128] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71
[  277.253861][  T128] pac7311: probe of 5-1:0.150 failed with error -71
[  277.266430][  T128] usb 5-1: USB disconnect, device number 17
[  277.367745][    T7] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  277.559195][    T7] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  277.577499][    T7] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  277.586801][    T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  277.633918][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.773602][ T9959] loop2: detected capacity change from 0 to 32768
[  277.897615][ T4336] wlan1: Trigger new scan to find an IBSS to join
[  277.927703][    T7] usb 4-1: USB disconnect, device number 17
[  277.979189][ T9959] XFS (loop2): Mounting V5 Filesystem
[  277.995862][ T9975] __sock_release: fasync list not empty!
[  278.163859][ T9959] XFS (loop2): Ending clean mount
[  278.180845][ T9959] XFS (loop2): Quotacheck needed: Please wait.
[  278.260848][ T9959] XFS (loop2): Quotacheck: Done.
[  278.402015][ T4278] XFS (loop2): Unmounting Filesystem
[  278.624871][ T9963] loop5: detected capacity change from 0 to 40427
[  278.690253][ T9963] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff
[  278.716640][ T9963] F2FS-fs (loop5): invalid crc value
[  278.761160][ T9963] F2FS-fs (loop5): Found nat_bits in checkpoint
[  278.900691][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2064'.
[  278.919342][ T9963] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  279.118969][ T9998] loop3: detected capacity change from 0 to 256
[  279.139319][ T6471] syz-executor: attempt to access beyond end of device
[  279.139319][ T6471] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  279.177947][ T9998] exfat: Deprecated parameter 'utf8'
[  279.202289][ T9998] exfat: Deprecated parameter 'namecase'
[  279.223161][ T9998] exfat: Deprecated parameter 'namecase'
[  279.248626][ T9998] exfat: Deprecated parameter 'utf8'
[  279.292470][ T9998] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d)
[  279.504803][T10002] loop2: detected capacity change from 0 to 256
[  279.862876][T10010] loop4: detected capacity change from 0 to 512
[  279.917295][T10010] EXT4-fs (loop4): bad s_want_extra_isize: 192
[  279.996160][T10014] loop3: detected capacity change from 0 to 1024
[  280.173380][T10014] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  280.207712][  T128] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  280.329873][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  280.341544][T10021] loop5: detected capacity change from 0 to 4096
[  280.373453][T10021] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  280.387667][  T128] usb 5-1: Using ep0 maxpacket: 32
[  280.399528][  T128] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  280.427215][  T128] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  280.451712][  T128] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  280.492735][T10008] loop2: detected capacity change from 0 to 32768
[  280.499355][  T128] usb 5-1: config 1 has no interface number 0
[  280.505650][  T128] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  280.530542][T10008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2069 (10008)
[  280.543461][  T128] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  280.580495][  T128] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  280.605520][  T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.657732][  T128] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  280.684957][T10008] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  280.707191][T10008] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  280.730220][T10029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2078'.
[  280.749833][T10008] BTRFS info (device loop2): enabling auto defrag
[  280.787604][T10008] BTRFS info (device loop2): doing ref verification
[  280.794315][T10008] BTRFS info (device loop2): use no compression
[  280.809870][T10008] BTRFS info (device loop2): force clearing of disk cache
[  280.817230][T10008] BTRFS info (device loop2): max_inline at 4096
[  280.830487][T10008] BTRFS info (device loop2): disabling free space tree
[  280.854653][  T128] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  280.861878][   T34] wlan1: Creating new IBSS network, BSSID 7a:57:84:fb:e4:a1
[  281.233285][T10043] loop5: detected capacity change from 0 to 32768
[  281.314107][T10043] JBD2: Ignoring recovery information on journal
[  281.412804][T10043] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  281.473055][T10008] BTRFS info (device loop2): enabling ssd optimizations
[  281.485143][ T4335] usb 5-1: USB disconnect, device number 18
[  281.516887][ T4335] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  281.548805][T10043] OCFS2: ERROR (device loop5): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71
[  281.566437][T10043] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  281.577578][T10043] OCFS2: File system is now read-only.
[  281.583073][T10043] (syz.5.2080,10043,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30
[  281.583436][T10008] BTRFS info (device loop2): rebuilding free space tree
[  281.591776][T10043] (syz.5.2080,10043,1):ocfs2_reserve_cluster_bitmap_bits:1133 ERROR: status = -30
[  281.591851][T10043] (syz.5.2080,10043,1):ocfs2_local_alloc_reserve_for_window:1123 ERROR: status = -30
[  281.591966][T10043] (syz.5.2080,10043,1):ocfs2_local_alloc_reserve_for_window:1139 ERROR: status = -30
[  281.592090][T10043] (syz.5.2080,10043,1):ocfs2_local_alloc_slide_window:1254 ERROR: status = -30
[  281.592119][T10043] (syz.5.2080,10043,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  281.592138][T10043] (syz.5.2080,10043,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  281.592158][T10043] (syz.5.2080,10043,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  281.592244][T10043] (syz.5.2080,10043,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30
[  281.592306][T10043] (syz.5.2080,10043,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30
[  281.592325][T10043] (syz.5.2080,10043,1):ocfs2_symlink:1911 ERROR: status = -30
[  281.592434][T10043] (syz.5.2080,10043,1):ocfs2_symlink:2065 ERROR: status = -30
[  281.778253][T10008] BTRFS info (device loop2): disabling free space tree
[  281.804078][ T6471] ocfs2: Unmounting device (7,5) on (node local)
[  281.812693][T10008] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  281.857545][  T128] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  281.872564][T10008] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  282.047734][  T128] usb 4-1: Using ep0 maxpacket: 8
[  282.055066][  T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.112840][  T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.164082][  T128] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  282.210464][  T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.227689][ T4278] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  282.231553][  T128] usb 4-1: config 0 descriptor??
[  282.269508][T10079] loop0: detected capacity change from 0 to 2048
[  282.323818][T10081] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  282.413701][   T26] audit: type=1800 audit(1755617677.109:58): pid=10079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2090" name="file2" dev="loop0" ino=16 res=0 errno=0
[  282.470097][  T128] usbhid 4-1:0.0: can't add hid device: -71
[  282.489876][  T128] usbhid: probe of 4-1:0.0 failed with error -71
[  282.513544][  T128] usb 4-1: USB disconnect, device number 18
[  282.591257][T10079] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  282.645589][T10079] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16)
[  282.748317][T10079] Remounting filesystem read-only
[  282.845967][ T4265] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  283.007727][ T5373] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  283.202598][ T5373] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  283.202802][T10105] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2100'.
[  283.221183][ T5373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.234527][ T5373] usb 5-1: config 0 descriptor??
[  283.294788][T10108] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2101'.
[  283.389487][T10108] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2101'.
[  283.444694][T10108] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2101'.
[  283.458180][ T5373] ath6kl: Failed to submit usb control message: -71
[  283.476748][ T5373] ath6kl: unable to send the bmi data to the device: -71
[  283.484351][ T5373] ath6kl: Unable to send get target info: -71
[  283.500759][T10111] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2101'.
[  283.514054][ T5373] ath6kl: Failed to init ath6kl core: -71
[  283.530872][T10111] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2101'.
[  283.564381][T10111] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2101'.
[  283.564478][ T5373] ath6kl_usb: probe of 5-1:0.0 failed with error -71
[  283.590980][ T5373] usb 5-1: USB disconnect, device number 19
[  283.599251][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2103'.
[  283.752269][T10110] loop2: detected capacity change from 0 to 40427
[  283.765672][T10110] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  283.774405][T10110] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  283.849758][T10110] F2FS-fs (loop2): Found nat_bits in checkpoint
[  283.934531][T10124] loop0: detected capacity change from 0 to 512
[  283.948908][T10110] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  283.949581][T10124] EXT4-fs: Ignoring removed orlov option
[  283.956055][T10110] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  283.994629][T10124] EXT4-fs (loop0): orphan cleanup on readonly fs
[  284.001410][T10124] EXT4-fs error (device loop0): ext4_find_extent:900: inode #4: comm syz.0.2107: inode has invalid extent depth: 7
[  284.040295][T10124] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117
[  284.088247][T10124] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  284.104060][T10124] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  284.111304][T10124] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  284.121396][T10124] EXT4-fs (loop0): unmounting filesystem.
[  284.457538][ T4458] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  284.615213][T10132] loop0: detected capacity change from 0 to 32768
[  284.649154][ T4458] usb 4-1: Using ep0 maxpacket: 32
[  284.660883][ T4458] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.673050][ T4458] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.681390][T10132] XFS (loop0): Mounting V5 Filesystem
[  284.699193][ T4458] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  284.709038][ T9001] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  284.717724][ T4458] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  284.738600][ T4458] usb 4-1: Product: syz
[  284.742851][ T4458] usb 4-1: Manufacturer: syz
[  284.779801][ T4458] hub 4-1:4.0: USB hub found
[  284.795734][T10132] XFS (loop0): Ending clean mount
[  284.816368][T10132] XFS (loop0): Quotacheck needed: Please wait.
[  284.904544][T10132] XFS (loop0): Quotacheck: Done.
[  284.954883][ T9001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.975888][ T9001] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.984404][ T4458] hub 4-1:4.0: 2 ports detected
[  285.025832][ T9001] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  285.053062][ T4265] XFS (loop0): Unmounting Filesystem
[  285.062166][ T9001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.112778][ T9001] usb 5-1: Product: syz
[  285.116988][ T9001] usb 5-1: Manufacturer: syz
[  285.147078][ T9001] usb 5-1: SerialNumber: syz
[  285.192994][T10149] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2115'.
[  285.195978][ T9001] cdc_mbim 5-1:1.0: skipping garbage
[  285.226494][T10141] loop2: detected capacity change from 0 to 32768
[  285.241950][   T52] block nbd0: Possible stuck request ffff888024f48000: control (read@0,4096B). Runtime 150 seconds
[  285.274287][T10141] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  285.377702][ T9001] cdc_mbim 5-1:1.0: bind() failure
[  285.409659][ T9001] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  285.416505][ T9001] cdc_ncm 5-1:1.1: bind() failure
[  285.491927][ T9001] usb 5-1: USB disconnect, device number 20
[  285.611498][ T4458] usb 4-1: USB disconnect, device number 19
[  285.626740][ T7513] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  285.844185][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2120'.
[  286.042267][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2122'.
[  286.503608][T10173] loop4: detected capacity change from 0 to 164
[  286.560898][T10175] vivid-002: disconnect
[  286.583511][T10174] vivid-002: reconnect
[  287.256471][T10196] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2136'.
[  287.266632][T10197] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2135'.
[  287.551042][T10183] loop2: detected capacity change from 0 to 32768
[  287.569594][T10205] loop3: detected capacity change from 0 to 1024
[  287.698869][T10183] XFS (loop2): Mounting V5 Filesystem
[  287.728010][   T52] block nbd1: Possible stuck request ffff888024f78000: control (read@0,4096B). Runtime 150 seconds
[  287.744019][T10219] loop0: detected capacity change from 0 to 1024
[  287.785735][T10219] hfsplus: request for non-existent node 33423360 in B*Tree
[  287.797840][T10219] hfsplus: request for non-existent node 33423360 in B*Tree
[  287.815165][T10183] XFS (loop2): Ending clean mount
[  287.827684][ T4452] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  287.848776][T10183] XFS (loop2): Quotacheck needed: Please wait.
[  287.860330][T10189] hfsplus: request for non-existent node 16777216 in B*Tree
[  287.881138][T10189] hfsplus: request for non-existent node 16777216 in B*Tree
[  287.986701][T10183] XFS (loop2): Quotacheck: Done.
[  288.017632][ T4452] usb 5-1: Using ep0 maxpacket: 16
[  288.032168][ T4452] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  288.073509][ T4278] XFS (loop2): Unmounting Filesystem
[  288.087791][ T4452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.125335][ T4452] usb 5-1: Product: syz
[  288.137591][ T4452] usb 5-1: Manufacturer: syz
[  288.153089][ T4452] usb 5-1: SerialNumber: syz
[  288.181535][ T4452] usb 5-1: config 0 descriptor??
[  288.209029][ T4452] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  288.285194][ T4336] hfsplus: request for non-existent node 16777216 in B*Tree
[  288.317519][ T4336] hfsplus: request for non-existent node 16777216 in B*Tree
[  288.587685][ T5373] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  288.789281][ T5373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.810722][ T5373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.842067][ T5373] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  288.861989][ T5373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.871443][ T4732] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  288.888902][ T5373] usb 1-1: config 0 descriptor??
[  289.013374][   T27] INFO: task syz.1.643:6099 blocked for more than 143 seconds.
[  289.025674][   T27]       Not tainted 6.1.148-syzkaller #0
[  289.037998][ T4452] ssu100: probe of 5-1:0.0 failed with error -71
[  289.052630][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  289.062988][   T27] task:syz.1.643       state:D stack:27904 pid:6099  ppid:4266   flags:0x00004004
[  289.072713][ T4732] usb 3-1: Using ep0 maxpacket: 16
[  289.074837][ T4452] usb 5-1: USB disconnect, device number 21
[  289.084234][ T4732] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.105937][   T27] Call Trace:
[  289.112791][   T27]  <TASK>
[  289.115865][ T4732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  289.133309][   T27]  __schedule+0x10ec/0x40b0
[  289.138205][   T27]  ? release_firmware_map_entry+0x18a/0x18a
[  289.144238][ T4732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  289.157886][   T27]  ? __mutex_trylock_common+0x80/0x250
[  289.164221][   T27]  ? trace_raw_output_contention_end+0xd0/0xd0
[  289.170674][ T4732] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  289.180567][   T27]  schedule+0xb9/0x180
[  289.184688][   T27]  schedule_preempt_disabled+0xf/0x20
[  289.190380][ T4732] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  289.204319][   T27]  __mutex_lock+0x555/0xaf0
[  289.209279][   T27]  ? __mutex_lock+0x3a5/0xaf0
[  289.214259][   T27]  ? blkdev_get_by_dev+0x13d/0xa60
[  289.223759][   T27]  ? mutex_lock_nested+0x10/0x10
[  289.229014][   T27]  ? iput+0x3c0/0x980
[  289.233191][   T27]  ? ilookup+0x1c0/0x200
[  289.240031][ T4732] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  289.249510][   T27]  ? disk_block_events+0xa3/0x120
[  289.254570][   T27]  ? blkdev_get_by_dev+0xd6/0xa60
[  289.259756][ T4732] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  289.268758][   T27]  blkdev_get_by_dev+0x13d/0xa60
[  289.274062][   T27]  ? __rwlock_init+0x140/0x140
[  289.278918][ T4732] usb 3-1: Manufacturer: syz
[  289.284279][   T27]  blkdev_open+0x11e/0x2e0
[  289.289803][ T4732] usb 3-1: config 0 descriptor??
[  289.295028][   T27]  ? blkdev_mmap+0x1a0/0x1a0
[  289.299996][   T27]  do_dentry_open+0x7e9/0x10d0
[  289.306515][   T27]  path_openat+0x25c6/0x2e70
[  289.308202][ T5373] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  289.312209][   T27]  ? do_sys_openat2+0xcf/0x490
[  289.324512][   T27]  ? __x64_sys_openat+0x135/0x160
[  289.329590][ T5373] hid-thrustmaster 0003:044F:B65D.0015: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0
[  289.330120][   T27]  ? do_syscall_64+0x4c/0xa0
[  289.346774][   T27]  ? do_filp_open+0x3c0/0x3c0
[  289.352339][   T27]  do_filp_open+0x1c1/0x3c0
[  289.353055][ T5373] hid-thrustmaster 0003:044F:B65D.0015: Wrong number of endpoints?
[  289.357077][   T27]  ? vfs_tmpfile+0x480/0x480
[  289.371058][   T27]  ? _raw_spin_unlock+0x24/0x40
[  289.376054][   T27]  ? alloc_fd+0x58f/0x630
[  289.380750][   T27]  do_sys_openat2+0x142/0x490
[  289.393046][   T27]  ? up_read+0x20/0x20
[  289.397309][   T27]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  289.417506][   T27]  ? do_sys_open+0xe0/0xe0
[  289.423102][   T27]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  289.432267][   T27]  ? lock_chain_count+0x20/0x20
[  289.437394][   T27]  __x64_sys_openat+0x135/0x160
[  289.443074][   T27]  do_syscall_64+0x4c/0xa0
[  289.448704][   T27]  ? clear_bhb_loop+0x60/0xb0
[  289.453992][   T27]  ? clear_bhb_loop+0x60/0xb0
[  289.459453][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  289.465796][   T27] RIP: 0033:0x7f14c138d550
[  289.471785][   T27] RSP: 002b:00007f14c21b4b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  289.481323][   T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14c138d550
[  289.490217][   T27] RDX: 0000000000000000 RSI: 00007f14c21b4c10 RDI: 00000000ffffff9c
[  289.498895][   T27] RBP: 00007f14c21b4c10 R08: 0000000000000000 R09: 002364626e2f7665
[  289.507167][   T27] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  289.537611][   T27] R13: 00007f14c15b6038 R14: 00007f14c15b5fa0 R15: 00007ffe9431e3f8
[  289.560766][   T27]  </TASK>
[  289.566499][   T27] 
[  289.566499][   T27] Showing all locks held in the system:
[  289.580884][   T27] 2 locks held by kworker/u4:0/9:
[  289.610004][   T27]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  289.624058][   T27]  #1: ffff8880b8e27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0
[  289.631419][    C1] hid-thrustmaster 0003:044F:B65D.0015: URB to get model id failed with error -71
[  289.652048][  T128] usb 1-1: USB disconnect, device number 21
[  289.658266][   T27] 1 lock held by rcu_tasks_kthre/12:
[  289.665292][   T27]  #0: ffffffff8cb2b770 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  289.681373][ T4732] rc_core: IR keymap rc-hauppauge not found
[  289.687284][ T4732] Registered IR keymap rc-empty
[  289.692707][ T4732] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  289.701429][   T27] 1 lock held by rcu_tasks_trace/13:
[  289.706829][   T27]  #0: ffffffff8cb2bf90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  289.719555][   T27] 1 lock held by khungtaskd/27:
[  289.724523][   T27]  #0: ffffffff8cb2ade0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  289.742282][ T4732] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  289.752103][   T27] 3 locks held by kworker/1:2/128:
[  289.758943][   T27]  #0: ffff888142e82138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  289.772652][   T27]  #1: ffffc900025e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  289.785085][ T4732] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  289.787502][   T27]  #2: 
[  289.799038][ T4732] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25
[  289.803919][   T27] ffff888028081190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x54e0
[  289.825154][   T27] 2 locks held by getty/4027:
[  289.830398][ T4732] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  289.837686][   T27]  #0: ffff88814cf5a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  289.847692][   T27]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380
[  289.858080][   T27] 1 lock held by udevd/4389:
[  289.862741][   T27]  #0: ffff888024ed94c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60
[  289.873007][   T27] 4 locks held by udevd/4439:
[  289.878167][ T4732] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  289.886329][   T27]  #0: ffff88801e36f2f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50
[  289.896059][   T27]  #1: ffff888055914088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0
[  289.905653][   T27]  #2: ffff88801e3e21d8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3b0
[  289.915547][ T4732] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  289.922847][   T27]  #3: ffff88805477e190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320
[  289.932458][   T27] 5 locks held by kworker/0:11/4732:
[  289.937882][   T27]  #0: ffff888142e82138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  289.948903][   T27]  #1: ffffc900033f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  289.960643][ T4732] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  289.968050][   T27]  #2: ffff888144b0b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x54e0
[  289.977367][   T27]  #3: ffff88805477e190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  289.987552][   T27]  #4: ffff888072cd6118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  289.997036][   T27] 1 lock held by udevd/5384:
[  290.001741][   T27]  #0: ffff888024e3b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60
[  290.012018][ T4732] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  290.019466][   T27] 1 lock held by syz.1.643/6099:
[  290.024468][   T27]  #0: ffff888024ed94c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60
[  290.034671][   T27] 
[  290.037088][   T27] =============================================
[  290.037088][   T27] 
[  290.047490][   T27] NMI backtrace for cpu 0
[  290.052053][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.148-syzkaller #0
[  290.059956][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  290.070103][   T27] Call Trace:
[  290.073457][   T27]  <TASK>
[  290.076389][   T27]  dump_stack_lvl+0x168/0x22e
[  290.081071][   T27]  ? irq_work_queue+0xb8/0x140
[  290.085845][   T27]  ? show_regs_print_info+0x12/0x12
[  290.091161][   T27]  ? load_image+0x3b0/0x3b0
[  290.095670][   T27]  ? vprintk_emit+0x571/0x680
[  290.100518][   T27]  ? printk_sprint+0x460/0x460
[  290.105631][   T27]  nmi_cpu_backtrace+0x3f4/0x470
[  290.110651][   T27]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  290.116961][   T27]  ? _printk+0xcc/0x110
[  290.121105][   T27]  ? load_image+0x3b0/0x3b0
[  290.125608][   T27]  ? load_image+0x3b0/0x3b0
[  290.130102][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  290.136266][   T27]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  290.142337][   T27]  watchdog+0xeee/0xf30
[  290.146492][   T27]  ? watchdog+0x1ed/0xf30
[  290.150917][   T27]  kthread+0x29d/0x330
[  290.155179][   T27]  ? hungtask_pm_notify+0x40/0x40
[  290.160311][   T27]  ? kthread_blkcg+0xd0/0xd0
[  290.165172][   T27]  ret_from_fork+0x1f/0x30
[  290.169688][   T27]  </TASK>
[  290.173566][   T27] Sending NMI from CPU 0 to CPUs 1:
[  290.179167][    C1] NMI backtrace for cpu 1
[  290.179178][    C1] CPU: 1 PID: 5373 Comm: kworker/1:18 Not tainted 6.1.148-syzkaller #0
[  290.179193][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  290.179201][    C1] Workqueue: events kfree_rcu_work
[  290.179220][    C1] RIP: 0010:memset_erms+0xb/0x10
[  290.179237][    C1] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01
[  290.179249][    C1] RSP: 0018:ffffc9000cb3f628 EFLAGS: 00000202
[  290.179261][    C1] RAX: 0000000000000000 RBX: ffffc9000cb3f708 RCX: 0000000000000000
[  290.179270][    C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000cb3f768
[  290.179279][    C1] RBP: ffffffff8ea9704e R08: dffffc0000000000 R09: ffffc9000cb3f758
[  290.179289][    C1] R10: fffff52001967eed R11: 1ffff92001967eeb R12: 1ffff92001967ee2
[  290.179299][    C1] R13: dffffc0000000000 R14: ffffc9000cb3f758 R15: ffffc9000cb3f73d
[  290.179310][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  290.179322][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  290.179332][    C1] CR2: 0000001b2f60cff8 CR3: 000000005c370000 CR4: 00000000003506e0
[  290.179345][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  290.179353][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  290.179362][    C1] Call Trace:
[  290.179367][    C1]  <TASK>
[  290.179371][    C1]  unwind_next_frame+0xb8a/0x20b0
[  290.179393][    C1]  ? ____kasan_slab_free+0x126/0x1e0
[  290.179414][    C1]  ? stack_trace_save+0xe0/0xe0
[  290.179430][    C1]  arch_stack_walk+0x10c/0x140
[  290.179448][    C1]  ? slab_free_freelist_hook+0x131/0x1a0
[  290.179465][    C1]  stack_trace_save+0x98/0xe0
[  290.179480][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  290.179497][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[  290.179518][    C1]  kasan_set_track+0x4b/0x70
[  290.179533][    C1]  ? kasan_set_track+0x4b/0x70
[  290.179548][    C1]  ? kasan_save_free_info+0x2d/0x50
[  290.179565][    C1]  ? ____kasan_slab_free+0x126/0x1e0
[  290.179601][    C1]  ? kmem_cache_free_bulk+0x348/0x460
[  290.179615][    C1]  kasan_save_free_info+0x2d/0x50
[  290.179633][    C1]  ____kasan_slab_free+0x126/0x1e0
[  290.179650][    C1]  slab_free_freelist_hook+0x131/0x1a0
[  290.179668][    C1]  kmem_cache_free_bulk+0x348/0x460
[  290.179681][    C1]  ? kfree_rcu_work+0x33f/0x890
[  290.179698][    C1]  kfree_rcu_work+0x33f/0x890
[  290.179711][    C1]  ? kfree_rcu_work+0x25e/0x890
[  290.179728][    C1]  ? process_one_work+0x7a1/0x1160
[  290.179742][    C1]  process_one_work+0x898/0x1160
[  290.179762][    C1]  ? worker_detach_from_pool+0x240/0x240
[  290.179785][    C1]  ? _raw_spin_lock_irq+0xab/0xe0
[  290.179803][    C1]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  290.179820][    C1]  ? kthread_data+0x4b/0xc0
[  290.179840][    C1]  worker_thread+0xaa2/0x1250
[  290.179862][    C1]  ? __kthread_parkme+0x162/0x1c0
[  290.179881][    C1]  kthread+0x29d/0x330
[  290.179898][    C1]  ? worker_clr_flags+0x1a0/0x1a0
[  290.179911][    C1]  ? kthread_blkcg+0xd0/0xd0
[  290.179930][    C1]  ret_from_fork+0x1f/0x30
[  290.179953][    C1]  </TASK>
[  290.180335][ T4732] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  290.200749][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  290.200768][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.148-syzkaller #0
[  290.200785][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  290.200794][   T27] Call Trace:
[  290.200800][   T27]  <TASK>
[  290.200807][   T27]  dump_stack_lvl+0x168/0x22e
[  290.200831][   T27]  ? memcpy+0x3c/0x60
[  290.200851][   T27]  ? show_regs_print_info+0x12/0x12
[  290.200867][   T27]  ? load_image+0x3b0/0x3b0
[  290.200895][   T27]  panic+0x2c9/0x710
[  290.200911][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  290.200930][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  290.200951][   T27]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  290.200968][   T27]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  290.200986][   T27]  watchdog+0xf2d/0xf30
[  290.201006][   T27]  ? watchdog+0x1ed/0xf30
[  290.201026][   T27]  kthread+0x29d/0x330
[  290.201044][   T27]  ? hungtask_pm_notify+0x40/0x40
[  290.201059][   T27]  ? kthread_blkcg+0xd0/0xd0
[  290.201085][   T27]  ret_from_fork+0x1f/0x30
[  290.201114][   T27]  </TASK>
[  290.204049][   T27] Kernel Offset: disabled
[  290.611036][   T27] Rebooting in 86400 seconds..