last executing test programs:

6.190404096s ago: executing program 0 (id=914):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)={0x20, 0xd, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}})

3.458876472s ago: executing program 2 (id=949):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000002a40)=""/4098, 0x1002}], 0x3}}], 0x1, 0x0, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

3.285758154s ago: executing program 2 (id=952):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000412, &(0x7f0000000540)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESOCT=r0], 0x0, 0x9eb8, &(0x7f0000001600)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101005, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)

3.083223328s ago: executing program 1 (id=954):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}})

2.97990391s ago: executing program 1 (id=956):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x6}]}}]}]}, 0x34}}, 0x0)

2.856161942s ago: executing program 0 (id=959):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

2.831998563s ago: executing program 1 (id=960):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x40015b19, &(0x7f0000019080))

2.745836964s ago: executing program 0 (id=961):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1, &(0x7f0000002a00)=""/210, 0xd2}, 0x8c30}], 0x1, 0x10020, 0x0)

2.627184986s ago: executing program 2 (id=962):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000280)={[{@lazytime}, {@inode32}, {@swalloc}, {@nodiscard}, {@prjquota}, {@gquota}, {@noalign}, {@noikeep}, {@largeio}], [{@flag='nomand'}]}, 0x1, 0x9606, &(0x7f0000012cc0)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8)

2.353411591s ago: executing program 0 (id=963):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x1e, 0x1, 0x0)
listen(r0, 0x1)
pselect6(0x40, &(0x7f0000000200)={0x4, 0xfffffffffffffffd, 0x5, 0x4, 0x5, 0xb, 0x2, 0x2}, &(0x7f00000002c0)={0xf, 0x3, 0xdb53, 0x1, 0x8, 0x4, 0x434, 0x800}, 0x0, 0x0, 0x0)

2.353169131s ago: executing program 4 (id=964):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x0)

2.274739962s ago: executing program 4 (id=965):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
truncate(&(0x7f0000000080)='./file1\x00', 0xf62)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xbfd, 0x0, 0x0)

2.255503972s ago: executing program 0 (id=966):
r0 = syz_io_uring_setup(0x728a, &(0x7f0000000080), &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x3, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5})
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x1a37c1, 0x1e4)
io_uring_enter(r0, 0x7336, 0x0, 0x0, 0x0, 0x0)

1.979113567s ago: executing program 4 (id=967):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.978285397s ago: executing program 0 (id=968):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000280)={0x0, 0xe, 0x2, "d0ad"}, 0x0, 0x0, 0x0, 0x0, 0x0})

1.760908251s ago: executing program 4 (id=969):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x28, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_IE={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

1.694769112s ago: executing program 4 (id=970):
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="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", 0x119}], 0x1)
capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x338})
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=0x0])

1.535156485s ago: executing program 2 (id=971):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x24, 0x2c, 0x0, @remote, @local, {[@dstopts={0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}]}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

1.534543055s ago: executing program 4 (id=973):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006)
syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x8e, 0x80400)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000008c0)={{0x1, 0x4, 0x7, 0x400, '\x00', 0xfffffffe}, 0x0, [0x8, 0x6, 0x4, 0x7ff, 0x7fffffffffffffff, 0x9, 0x5, 0x1000, 0x5, 0x0, 0x8, 0x5, 0x2, 0x9, 0x8, 0x11ad79d4, 0x7, 0x2a9896c, 0xb, 0x4, 0x4, 0x8000000000000001, 0x100000000, 0x6, 0x2, 0x1, 0x780b, 0x3, 0x7, 0x1, 0x80000000, 0x7fffffff, 0x200, 0x1000, 0x9, 0x11c, 0x27, 0x40, 0x1, 0x9, 0x2, 0x3, 0xfffffffffffffff7, 0x8000000000000000, 0x0, 0xcb, 0x7fff, 0x591c, 0x5, 0x9, 0x7, 0x1ff, 0x70, 0x9, 0x6, 0x7f, 0x0, 0x2, 0x9, 0xa, 0x2, 0x8000000000000001, 0x9, 0x8, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x80000000, 0x9, 0x5, 0x3, 0x5, 0xa2a, 0x0, 0x10, 0x8, 0x6, 0x10001, 0xec1f, 0xf, 0x7, 0xfff, 0xb00, 0x10001, 0x0, 0x9, 0x2, 0x4, 0xd, 0x3, 0x6, 0x6, 0x5, 0x5, 0x3, 0x0, 0x80000000, 0x4, 0x3fffc0000000, 0x5, 0x6, 0x9, 0x1, 0x2, 0xffff, 0x0, 0x7, 0x3d, 0x8, 0x4, 0xa, 0x4, 0x4, 0x5, 0x41c, 0x81, 0x8, 0x8, 0x7, 0x4, 0x10, 0x0, 0x33d, 0x8, 0x4]})

1.138026911s ago: executing program 2 (id=974):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file1\x00', 0x2008054, &(0x7f0000000140)=ANY=[], 0x1, 0xf43, &(0x7f0000002d80)="$eJzs3U9sHNX9APA367+JTbwGfj8ClDiF0kDaOsHJgd6CFLUSQohL76CQQFRD04YeQEQJPQWpBypED1Q9UMGtUnqoVFClClWq1D8cem0PFWovrapUioRUNVXiyvZ76/WLJ7ser2fX3s9H+vrtmzc73+94HWffevZtAIZWY+Xr8eP7ixDe+ejtk1+/ePMXy9vmWnscXPlaxF4zhDDW1i+y430aN9y49vqp5fZm1oawsHyv0TQenr7auu9UCOFSOBg+Ds0wd7j52eWRp8588O4nhy6ce/LFbTl5AAAYMld+v/jnR//+uy/PXr9y4ESYaG1Pz8+bsT8Vn/cfLcL1pVUr2xtxvH0+UGwwLxjP9huJ0cj2G8n2G41tI+vn+cay44yV7DfeId9I27b27XmdAAAAsJOkeW0zFI35df1GY35+dd6/7NOZ8WL+5bOLZ873qVAAAACgss8urlx0K3ZETA5ADUIIIYQQQggxDDE30f8aehtLM/1+BQIAAAAYNmndgdb6YLlL+coCW9M6WrO7/FefaGx8f+iBTj9/2/3zVve/P/k3l//9N/zGAQCgut36bDKdV3oePfXmnpV+vo7gSHa/zT7/b2THGd1knWXrCu6U9QbL6sy/r4OqrP7NPo79UlZ/vh7moCqrP1+nc1CV1T9Rcx1VldU/uUN+B5XVuKfmOqoqq39vzXVUVVb/VM11VFVW/3TNdVRVVv8dNddRVVn9+2quo6qy+nfKZbVl9TdrrqOqsvpna66jqrL676y5jqrK6r+r5jqqKqv/7prr6JcHYpu+Dwey8db8eYM53U6Z4wEAAMCw+4/1/0QPY24AahBCbDlGBqAGIYQQQoi6ojEANdQSF/v9AgQAAADQd+l9Aeld70tRGh/pMD7aYXzstuMjrfcBl91/osP4rf7dcQ8AAADYbX55+cy9bxVr7/Pf6np4k7FN6y9tdh2jfD3Czebf6rpnW82/U9YtAwAAYLgUX/v45uGT770ye/3KgRNts9+bcb6b1gEdja8NfBj76bqA6axfpDn0ifV5GiX75a8P3FF2vGe2eKIAAAAwxNL8vRmKxnzbvLsZGo35+bX5+P4wVpw5u3j6aOynz2f57cxkCGHx9GM11w0AAAB0b22+X+wJG8z/0+f47g/jxfzLZxfPnF/tT7e2jzXaXxeYWdu+8nrBY63jrd++ULL9WOynz+98cWbPyvb5U99afL7H5w4AAADD4vyrr33zucXF099xw42SGxc3da+DIfw3LrE4CMW7UfFGv38zAQAAvfbB397+w3ePTf9q9f3/a+vfpff/H4z9Zlzb749xh3SdQHofwC3v1392fZ6Zsv3Ord+vme03EmMiq3uy7Tjti+6l+82W5WuuP854Sb6pLN90e74N1ikYzfZP+fZl2/P1CdN+M9n2fB3G0SxHkeV/MNv/hwEAAADWHHnlpXNHzr/62lfOvvTcC6dfOP3ysaMLX114fGHh+MKRlev6j7Rf3Q8AAADsRGsX/fa7EgAAAAAAAAAAAAAAAAAAABhedXycWL/PEQAAAIbdvy6GEC4JIYQQQggh6on4CdQ9PGbR93MSYhjiLz3/t1t3LC3lnzQPAAAAsL1uXHv9VHt7i0tFT/O1jtZcbW7GvKn9zcM/fng50m5Xn1j/esnenlbDsKv75//2+Uf7nH8DQ57//Td6m38y3ej6919j/QFOVMv7xR/845H2/PeNdpk/P/9nquU/lOU/FLrLv/Relv/ZavkfyfLv7TL/Led/rlr+R2P+/ameh7rNv/7xn4htOo89XeY/nJ3/86Hb/Nn5N7tMmPlSzA8Aw6jR7wK2SXqWkJ5HT8V+Ot80s8mvftjs8/9GdpwNZkyVpOOm50H3xH56vjSd5U02W/9Udrw7KtaZ2ylXlZTV36vHcbuV1T9Wcx1VldU/XnMdVZXVP1FzHVWV1T9Zcx1VldXf7Ty038rq3ymvK5fVP1VzHVWV1T9dcx1VldW/2f/H+6Ws/n0111FVWf0zt7nPIP3fVlZ/xZfValdW/2zNdVRVVv+dNddRVVn9d9VcR1Vl9d9dcx39cn9sy+bDaf45E8dSv5n1Jzb4Xrb1l6JtOw8AAACg3D+t/yfE4MTYANQgNh+NAahB7NrYMwA17IRYbvpdw7DGt//U/xpqjmL1Rt/rEGJ7Y2mp/zWInoc/yQ+37X03MwCDyu//4ebxH24e/+Hm8ed20jX8RdZPRjqMj3YYH+swPp6N5z+vEx3G78qOm78R4e4O4//XYXxfh/F7Oozv7zB+b4fx+zqM399hHAAAgOHw/7E1PwQAAIDd68JPP/z+zw89e232+pUDJ8L4LevOH439ifi39cuxn697n4zFv/l/L/Z/Ettfx/av2f6uPwEAAIDtlz4nxt//AQAAYPdKn1Nq/g8AAAC712xszf8BAABg97oztub/AAAAsIsVkxtvjm16XeDB2Ha7rh8AMPg+F9sHYnsgtnOx/Xxs0/OAh2L7hZrqAwB650ffePPxt4q19f6PZeM34vbU3uLS6isFRWP9Sv57Yrs3tg93WU/+eQDd5k/2dZlnu/LPbDE/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7NFa+Hj++vwjhnY/ePjlz4eQLy9vmWnscXPlaxF4zhDDWul8aXev/LO5449rrp5bbm7Fdim0RFkIRitZ4ePpqK9NUCOFSOBg+Ds0wd7j52eWRp8588O4nhy6ce/LFbfwWAAAAwK73vwAAAP//LTxGDA==")
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, 0x0)

866.538226ms ago: executing program 2 (id=986):
r0 = syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

807.224347ms ago: executing program 1 (id=977):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="9433ddb02192333d0ddf82345dd51f69e790c9aa6b7a2dd9f3d62389ae3f5de6958517ffa2604658020102be1ff80346a75e730a563a3c399a69", 0x3a}, {&(0x7f0000000500)="d528114f7555af2259f47741fa70efaf87cfeb690e915573a72085c22cc7f5d76d2a", 0x22}, {&(0x7f0000000300)="1e7dcf6c7d328f08118be502714b26ffb667cfaa99e9b1d73a76001675d56fd8840bf93f2f3594527b178b58efe0fb0bfb68e5068e93621ef8e156e9d122c9ee98f4da0ab16c3f2c0830f4cf87a1680d52bc622dbf2790a21e7815e3cb597a4d2172913802595930944b2427217369267d26a9804d2424981c5aa5c098412a748718d2d29e94685aed47c2dba1fe7a89ecfbd5c2328c21a7a2a311eb4f4bc3b75edb63851c9fd00f9b2068a8398624055bfe974cfbd259927d31f993fddcb96931", 0xc1}, {&(0x7f0000000480)="10985636bceee5224f55aeffb0c53cdb4fca9e163928a892c6c9c1ce2792d4b4f76f2c221cffb408b8a5244ec2837db00093cc369de72e96c9caf1760fc4b3a825b7ed61644c1eb5663b3947f9b7b78665535cca8b9b647dc4275c9d7fa30667625d00", 0x63}, {&(0x7f0000000580)='\\', 0x1}], 0x5}}], 0x1, 0x0)

708.927849ms ago: executing program 1 (id=979):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0)

633.95049ms ago: executing program 1 (id=980):
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000021c0)='clear_refs\x00')
exit(0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000040)='2\x00', 0x2)

633.77154ms ago: executing program 3 (id=981):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15)

576.423621ms ago: executing program 3 (id=982):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x1)
r2 = dup(r0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000440)={0xf010000, 0x0, 0x1, r2, 0x0, 0x0})

543.492611ms ago: executing program 3 (id=983):
r0 = fsopen(&(0x7f0000000380)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

479.587752ms ago: executing program 3 (id=984):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd2}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

431.166423ms ago: executing program 3 (id=985):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)

0s ago: executing program 3 (id=987):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
shutdown(r0, 0x1)
setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4)
recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/19, 0x13}}], 0x1, 0x2302, 0x0)

kernel console output (not intermixed with test programs):

man_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.815421][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.827151][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.840906][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.863716][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.908573][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.947081][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.982833][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.996581][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.001091][ T4270] hugetlbfs: syz.3.4 (4270): Using mlock ulimits for SHM_HUGETLB is deprecated
[   86.009062][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.030112][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.041266][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.054626][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.092486][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.153335][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.201780][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.216458][ T4276] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure
[   86.240426][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.277514][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.322113][ T4178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.344441][ T4178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.368133][ T4178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.404930][ T4178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.440183][  T517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.482396][  T517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.574636][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   86.605184][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.635212][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.647832][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.673400][ T4284] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   86.678524][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.741698][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.761939][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.788409][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.801633][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.829042][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.866154][ T1108] usb 4-1: Using ep0 maxpacket: 32
[   86.868262][ T1345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.999212][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[   87.047630][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[   87.110035][ T1108] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   87.114754][ T4272] loop0: detected capacity change from 0 to 32768
[   87.220515][ T4298] loop4: detected capacity change from 0 to 2048
[   87.256796][ T4272] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.11 (4272)
[   87.275571][ T4296] loop1: detected capacity change from 0 to 2048
[   87.289022][ T4298] =======================================================
[   87.289022][ T4298] WARNING: The mand mount option has been deprecated and
[   87.289022][ T4298]          and is ignored by this kernel. Remove the mand
[   87.289022][ T4298]          option from the mount to silence this warning.
[   87.289022][ T4298] =======================================================
[   87.379203][ T1108] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[   87.402122][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[   87.407835][ T4298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.415162][ T1108] usb 4-1: Product: syz
[   87.470499][ T4296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.481665][ T1108] usb 4-1: Manufacturer: syz
[   87.519976][ T1108] usb 4-1: SerialNumber: syz
[   87.539846][ T4272] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   87.579804][ T4272] BTRFS info (device loop0): allowing degraded mounts
[   87.616054][ T1108] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5
[   87.630182][ T4272] BTRFS info (device loop0): setting nodatasum
[   87.658319][ T4272] BTRFS info (device loop0): disabling tree log
[   87.673332][ T4272] BTRFS info (device loop0): using free space tree
[   87.719418][ T4272] BTRFS info (device loop0): has skinny extents
[   88.014696][ T4217] usb 4-1: USB disconnect, device number 2
[   88.100264][ T4217] appletouch 4-1:1.0: input: appletouch disconnected
[   88.178413][ T4334] device lo entered promiscuous mode
[   88.192730][ T4334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.292741][ T4335] loop1: detected capacity change from 0 to 1024
[   88.416227][ T4272] BTRFS error (device loop0): balance: invalid convert system profile single
[   88.495327][ T4346] loop4: detected capacity change from 0 to 256
[   88.651168][   T26] audit: type=1800 audit(1749055103.671:2): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.30" name="file1" dev="loop4" ino=1048590 res=0 errno=0
[   88.723729][ T4352] device team_slave_0 entered promiscuous mode
[   89.156171][ T4356] overlayfs: upper fs does not support tmpfile.
[   89.487763][ T4376] loop1: detected capacity change from 0 to 4096
[   89.618784][ T4376] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   89.643540][ T4217] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   89.667171][ T4390] program syz.0.44 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   89.698995][ T4376] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[   89.811564][ T4253] udevd[4253]: incorrect nilfs2 checksum on /dev/loop1
[   89.868776][ T4394] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.954584][ T4217] usb 3-1: Using ep0 maxpacket: 32
[   90.054731][ T4401] loop0: detected capacity change from 0 to 1024
[   90.097131][ T4217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 36975, setting to 1024
[   90.130159][ T4401] EXT4-fs (loop0): Ignoring removed nobh option
[   90.143633][ T4217] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   90.158935][ T4401] EXT4-fs (loop0): Ignoring removed bh option
[   90.198929][ T4401] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   90.228907][ T4365] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   90.325991][ T4217] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[   90.356145][ T4401] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[   90.388792][ T4217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.424130][ T4217] usb 3-1: Product: syz
[   90.436845][ T4217] usb 3-1: Manufacturer: syz
[   90.465687][ T4217] usb 3-1: SerialNumber: syz
[   90.468822][ T4365] usb 4-1: Using ep0 maxpacket: 16
[   90.536680][ T4217] usb 3-1: config 0 descriptor??
[   90.581151][ T4379] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   90.598762][ T4365] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[   90.769090][ T4365] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   90.827685][ T4365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.853554][ T4409] loop4: detected capacity change from 0 to 32768
[   90.858534][ T4365] usb 4-1: Product: syz
[   90.866824][ T4365] usb 4-1: Manufacturer: syz
[   90.872265][ T4365] usb 4-1: SerialNumber: syz
[   90.902175][ T4365] usb 4-1: config 0 descriptor??
[   90.912065][ T4217] usb 3-1: USB disconnect, device number 2
[   90.941696][ T4409] XFS: noikeep mount option is deprecated.
[   90.960854][ T4365] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[   91.011085][ T4365] usb 4-1: Detected FT232RL
[   91.059951][ T4409] XFS (loop4): Mounting V5 Filesystem
[   91.094321][ T4426] loop1: detected capacity change from 0 to 1024
[   91.178880][ T4365] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   91.283788][ T4409] XFS (loop4): Ending clean mount
[   91.308994][ T4373] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   91.350912][ T4409] XFS (loop4): Quotacheck needed: Please wait.
[   91.388198][  T154] hfsplus: b-tree write err: -5, ino 4
[   91.464443][ T4409] XFS (loop4): Quotacheck: Done.
[   91.473737][ T4365] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   91.538484][ T4435] netlink: 'syz.2.58': attribute type 2 has an invalid length.
[   91.578938][ T4373] usb 1-1: Using ep0 maxpacket: 8
[   91.719124][ T4373] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   91.732834][ T4217] usb 4-1: USB disconnect, device number 3
[   91.742032][ T4373] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   91.773359][ T4373] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   91.805631][ T4373] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   91.816421][ T4217] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   91.827231][ T4373] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   91.853696][ T4217] ftdi_sio 4-1:0.0: device disconnected
[   91.869599][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.922430][ T4178] XFS (loop4): Unmounting Filesystem
[   92.045603][ T4443] loop1: detected capacity change from 0 to 128
[   92.165185][ T4373] usb 1-1: GET_CAPABILITIES returned 0
[   92.182195][ T4373] usbtmc 1-1:16.0: can't read capabilities
[   92.197326][ T4443] VFS: Found a Xenix FS (block size = 512) on device loop1
[   92.236224][ T4443] attempt to access beyond end of device
[   92.236224][ T4443] loop1: rw=2049, want=2066843071, limit=128
[   92.342942][ T4443] Buffer I/O error on dev loop1, logical block 2066843070, lost async page write
[   92.390310][ T4443] attempt to access beyond end of device
[   92.390310][ T4443] loop1: rw=2049, want=8767745, limit=128
[   92.466009][ T4232] usb 1-1: USB disconnect, device number 2
[   92.476425][ T4443] Buffer I/O error on dev loop1, logical block 8767744, lost async page write
[   92.549015][ T4443] attempt to access beyond end of device
[   92.549015][ T4443] loop1: rw=2049, want=13269810, limit=128
[   92.638809][ T4443] Buffer I/O error on dev loop1, logical block 13269809, lost async page write
[   92.680402][ T4443] attempt to access beyond end of device
[   92.680402][ T4443] loop1: rw=2049, want=1158, limit=128
[   92.696897][ T4443] Buffer I/O error on dev loop1, logical block 1157, lost async page write
[   92.709928][ T4443] attempt to access beyond end of device
[   92.709928][ T4443] loop1: rw=2049, want=3211265, limit=128
[   92.770876][ T4443] Buffer I/O error on dev loop1, logical block 3211264, lost async page write
[   92.782708][ T4454] loop3: detected capacity change from 0 to 1024
[   92.785928][ T4443] attempt to access beyond end of device
[   92.785928][ T4443] loop1: rw=2049, want=8768636, limit=128
[   92.811907][ T4443] Buffer I/O error on dev loop1, logical block 8768635, lost async page write
[   92.826841][ T4443] attempt to access beyond end of device
[   92.826841][ T4443] loop1: rw=2049, want=13466418, limit=128
[   92.849185][ T4443] Buffer I/O error on dev loop1, logical block 13466417, lost async page write
[   92.880845][ T4454] EXT4-fs (loop3): Unrecognized mount option "fscontext=sysadm_u" or missing value
[   92.931272][ T4443] attempt to access beyond end of device
[   92.931272][ T4443] loop1: rw=2049, want=209286, limit=128
[   92.970116][   T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   92.989622][ T4443] Buffer I/O error on dev loop1, logical block 209285, lost async page write
[   93.062246][ T4454] netlink: 96 bytes leftover after parsing attributes in process `syz.3.68'.
[   93.126852][ T4454] netlink: 'syz.3.68': attribute type 5 has an invalid length.
[   93.148484][ T4172] sysv_free_block: trying to free block not in datazone
[   93.157205][ T4454] netlink: 44 bytes leftover after parsing attributes in process `syz.3.68'.
[   93.205732][ T4172] sysv_free_inode: inode 0,1,2 or nonexistent inode
[   93.268515][ T4465] loop0: detected capacity change from 0 to 1024
[   93.300592][ T4463] syz.4.71 (4463) used greatest stack depth: 21096 bytes left
[   93.365643][ T4467] process 'syz.3.74' launched '/dev/fd/3' with NULL argv: empty string added
[   93.421884][   T13] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   93.479041][   T13] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   93.600800][ T4474] loop3: detected capacity change from 0 to 1024
[   93.709042][   T13] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   93.719978][ T4474] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   93.767837][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.800873][   T13] usb 3-1: Product: syz
[   93.807770][   T13] usb 3-1: Manufacturer: syz
[   93.815957][ T4474] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none.
[   93.839528][   T13] usb 3-1: SerialNumber: syz
[   93.879804][   T13] usb 3-1: config 0 descriptor??
[   93.899828][ T4452] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   93.921023][ T4452] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   93.933554][ T4474] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   94.128257][ T4486] loop1: detected capacity change from 0 to 256
[   94.189024][ T4452] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   94.197733][ T4452] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   94.617239][ T4498] loop0: detected capacity change from 0 to 4096
[   94.685253][   T13] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[   94.727571][ T4498] NILFS (loop0): invalid segment: Checksum error in segment payload
[   94.755588][ T4498] NILFS (loop0): trying rollback from an earlier position
[   94.848218][ T4498] NILFS (loop0): recovery complete
[   94.876217][ T4508] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.906468][   T13] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[   94.980906][   T13] usb 3-1: USB disconnect, device number 3
[   95.149857][ T4478] loop4: detected capacity change from 0 to 40427
[   95.220270][ T4478] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff
[   95.304574][ T4478] F2FS-fs (loop4): invalid crc value
[   95.402248][ T4478] F2FS-fs (loop4): Found nat_bits in checkpoint
[   95.447226][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'.
[   95.625938][ T4478] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   95.669147][ T4373] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   95.702737][ T4538] loop3: detected capacity change from 0 to 512
[   95.845029][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   95.938924][ T4373] usb 2-1: Using ep0 maxpacket: 32
[   95.944219][ T4538] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   95.999551][ T4538] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.059007][ T4373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.096854][ T4373] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00
[   96.119049][ T4232] usb 3-1: Using ep0 maxpacket: 32
[   96.158405][ T4373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.211688][ T4373] usb 2-1: config 0 descriptor??
[   96.239086][ T4232] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   96.274173][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.300264][ T4232] usb 3-1: config 0 descriptor??
[   97.006702][ T4570] loop0: detected capacity change from 0 to 64
[   97.430754][ T4560] loop3: detected capacity change from 0 to 131072
[   97.441536][ T4232] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   97.460009][ T1111] cfg80211: failed to load regulatory.db
[   97.476002][ T4232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   97.494528][ T4373] usb 2-1: string descriptor 0 read error: -71
[   97.510185][ T4232] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   97.521582][ T4232] usb 3-1: media controller created
[   97.532200][ T4560] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0)
[   97.543447][ T4560] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   97.556388][ T4560] F2FS-fs (loop3): invalid crc value
[   97.563261][ T4373] uclogic 0003:5543:006E.0001: failed retrieving string descriptor #200: -71
[   97.598796][ T4373] uclogic 0003:5543:006E.0001: failed retrieving pen parameters: -71
[   97.611670][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   97.639234][ T4373] uclogic 0003:5543:006E.0001: failed probing pen v2 parameters: -71
[   97.649928][ T4560] F2FS-fs (loop3): Found nat_bits in checkpoint
[   97.712957][ T4560] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   97.721436][ T4560] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   97.738773][ T4373] uclogic 0003:5543:006E.0001: failed probing parameters: -71
[   97.747248][ T4373] uclogic: probe of 0003:5543:006E.0001 failed with error -71
[   97.795856][ T4373] usb 2-1: USB disconnect, device number 2
[   97.809042][ T4232] az6027: usb out operation failed. (-71)
[   97.812829][ T4584] loop4: detected capacity change from 0 to 512
[   97.829007][ T4232] az6027: usb out operation failed. (-71)
[   97.836841][ T4232] stb0899_attach: Driver disabled by Kconfig
[   97.857376][ T4560] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891
[   97.878888][ T4232] az6027: no front-end attached
[   97.878888][ T4232] 
[   97.899009][ T4232] az6027: usb out operation failed. (-71)
[   97.905653][ T4232] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   97.950219][ T4232] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[   97.967752][ T4232] dvb-usb: schedule remote query interval to 400 msecs.
[   97.975683][ T4584] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.121: bad orphan inode 11862016
[   97.977369][ T4584] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   98.014708][ T4232] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   98.037832][ T4232] usb 3-1: USB disconnect, device number 4
[   98.096511][ T4232] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   98.138889][ T4584] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.273839][ T4584] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[   98.829621][ T4601] Â: renamed from pim6reg1
[   98.982972][ T4578] loop1: detected capacity change from 0 to 32768
[   99.002301][ T4589] loop2: detected capacity change from 0 to 32768
[   99.021391][ T4603] syzkaller1: tun_chr_ioctl cmd 1074025681
[   99.242645][ T4578] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   99.274572][ T4576] loop0: detected capacity change from 0 to 40427
[   99.304436][ T4589] XFS (loop2): Mounting V5 Filesystem
[   99.488434][ T4589] XFS (loop2): Ending clean mount
[   99.569280][ T4576] F2FS-fs (loop0): invalid crc value
[   99.660826][ T4576] F2FS-fs (loop0): Found nat_bits in checkpoint
[   99.833826][ T4614] loop4: detected capacity change from 0 to 32768
[   99.882513][ T4576] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[   99.954251][ T4576] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  100.000781][ T4172] ocfs2: Unmounting device (7,1) on (node local)
[  100.044153][ T4614] XFS (loop4): Mounting V5 Filesystem
[  100.060380][ T4171] XFS (loop2): Unmounting Filesystem
[  100.421706][ T4614] XFS (loop4): Ending clean mount
[  100.457668][ T4173] attempt to access beyond end of device
[  100.457668][ T4173] loop0: rw=2049, want=45104, limit=40427
[  100.513406][ T4641] loop1: detected capacity change from 0 to 32768
[  100.694210][ T4641] XFS (loop1): Mounting V5 Filesystem
[  100.702697][ T4178] XFS (loop4): Unmounting Filesystem
[  100.861186][ T4641] XFS (loop1): Ending clean mount
[  100.888127][ T4641] XFS (loop1): Quotacheck needed: Please wait.
[  100.973411][ T4653] loop2: detected capacity change from 0 to 256
[  101.092920][ T4653] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  101.095161][ T4641] XFS (loop1): Quotacheck: Done.
[  101.268914][ T4232] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  101.312527][ T4172] XFS (loop1): Unmounting Filesystem
[  101.639250][ T4232] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  101.659380][ T4232] usb 4-1: config 0 has no interface number 0
[  101.705887][ T4232] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  101.737567][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.790962][ T4232] usb 4-1: config 0 descriptor??
[  101.843840][ T4232] usb 4-1: selecting invalid altsetting 1
[  101.862028][ T4232] dvb_ttusb_budget: ttusb_init_controller: error
[  101.880945][ T4232] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  102.024167][ T4232] DVB: Unable to find symbol cx22700_attach()
[  102.098962][ T1111] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  102.145561][ T4232] DVB: Unable to find symbol tda10046_attach()
[  102.153066][ T4232] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  102.164464][ T4682] netlink: 'syz.1.152': attribute type 1 has an invalid length.
[  102.179716][ T4232] usb 4-1: USB disconnect, device number 4
[  102.253342][ T4684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'.
[  102.372300][ T4218] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  102.378785][ T1111] usb 1-1: Using ep0 maxpacket: 32
[  102.457030][ T4691] serio: Serial port ptm0
[  102.485484][ T4694] netlink: 116 bytes leftover after parsing attributes in process `syz.1.158'.
[  102.528963][ T1111] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  102.540702][ T1111] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  102.556835][ T1111] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  102.579168][ T1111] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  102.597469][ T1111] usb 1-1: config 0 interface 0 has no altsetting 0
[  102.678825][ T4218] usb 3-1: Using ep0 maxpacket: 32
[  102.769079][ T1111] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  102.789286][ T1111] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  102.809795][ T1111] usb 1-1: Product: syz
[  102.827265][ T1111] usb 1-1: Manufacturer: syz
[  102.841717][ T4218] usb 3-1: config 0 has an invalid interface number: 138 but max is 0
[  102.850822][ T1111] usb 1-1: SerialNumber: syz
[  102.864034][ T4218] usb 3-1: config 0 has no interface number 0
[  102.873055][ T1111] usb 1-1: config 0 descriptor??
[  102.930559][ T1111] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  102.951884][ T1111] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  102.967952][ T4709] netlink: 'syz.1.165': attribute type 2 has an invalid length.
[  103.001599][ T4709] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.165'.
[  103.065310][ T4218] usb 3-1: New USB device found, idVendor=093a, idProduct=2624, bcdDevice=ca.fd
[  103.087281][ T4218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.111097][ T4218] usb 3-1: Product: syz
[  103.115585][ T4218] usb 3-1: Manufacturer: syz
[  103.144413][ T4218] usb 3-1: SerialNumber: syz
[  103.165913][ T4218] usb 3-1: config 0 descriptor??
[  103.192899][ T1111] usb 1-1: USB disconnect, device number 3
[  103.215497][ T1111] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  103.238196][ T4218] gspca_main: gspca_pac7302-2.14.0 probing 093a:2624
[  103.388534][ T4719] netlink: 'syz.4.170': attribute type 21 has an invalid length.
[  103.405158][ T4719] netlink: 'syz.4.170': attribute type 1 has an invalid length.
[  103.442170][ T4705] loop3: detected capacity change from 0 to 40427
[  103.449753][ T4218] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  103.457834][ T4218] gspca_pac7302: probe of 3-1:0.138 failed with error -71
[  103.475583][ T4218] usb 3-1: USB disconnect, device number 5
[  103.530822][ T4705] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff
[  103.565356][ T4705] F2FS-fs (loop3): invalid crc value
[  103.610489][ T4705] F2FS-fs (loop3): Found nat_bits in checkpoint
[  103.883588][ T4705] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  104.216827][ T3099] attempt to access beyond end of device
[  104.216827][ T3099] loop3: rw=2049, want=40984, limit=40427
[  104.313661][ T4756] loop2: detected capacity change from 0 to 256
[  104.377968][ T4757] loop0: detected capacity change from 0 to 2048
[  104.449999][ T4756] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d)
[  104.512501][ T4758] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  104.647687][ T4760] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '..'
[  104.744167][ T4760] Remounting filesystem read-only
[  105.125430][ T4217] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  105.248831][ T4218] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  105.270743][ T4753] loop1: detected capacity change from 0 to 32768
[  105.284307][ T4779] loop2: detected capacity change from 0 to 128
[  105.381007][ T4753] XFS (loop1): Mounting V5 Filesystem
[  105.519643][ T4218] usb 1-1: Using ep0 maxpacket: 16
[  105.548299][ T4753] XFS (loop1): Ending clean mount
[  105.579289][ T4217] usb 5-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a
[  105.600061][ T4217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.614760][ T4794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.196'.
[  105.632720][ T4753] XFS (loop1): Quotacheck needed: Please wait.
[  105.642845][ T4217] usb 5-1: config 0 descriptor??
[  105.649029][ T4218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.662796][ T4218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.674808][ T4218] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  105.698340][ T4218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.719917][ T4218] usb 1-1: config 0 descriptor??
[  105.792709][ T4753] XFS (loop1): Quotacheck: Done.
[  105.871370][ T4217] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  105.888991][ T4800] attempt to access beyond end of device
[  105.888991][ T4800] loop1: rw=4096, want=562949953454080, limit=32768
[  105.943736][ T4762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'.
[  105.964182][   T13] usb 5-1: USB disconnect, device number 2
[  106.044656][ T4172] XFS (loop1): Unmounting Filesystem
[  106.149130][ T4217] usb 4-1: Using ep0 maxpacket: 16
[  106.221833][ T4218] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0
[  106.235767][ T4218] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0
[  106.258793][ T4232] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  106.268982][ T4218] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0
[  106.289096][ T4218] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0
[  106.300529][ T4217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[  106.352129][ T4218] konepure 0003:1E7D:2DB4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0
[  106.454749][ T4769] udc-core: couldn't find an available UDC or it's busy
[  106.468518][ T4769] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  106.479234][ T4217] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  106.509330][ T4217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.519825][ T1111] usb 1-1: USB disconnect, device number 4
[  106.547948][ T4217] usb 4-1: Product: syz
[  106.556850][ T4217] usb 4-1: Manufacturer: syz
[  106.570317][ T4217] usb 4-1: SerialNumber: syz
[  106.617473][ T4805] fido_id[4805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  106.619667][ T4217] usb 4-1: config 0 descriptor??
[  106.638888][ T4232] usb 3-1: config index 0 descriptor too short (expected 4114, got 18)
[  106.736954][ T4217] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  106.774190][ T4217] usb 4-1: Detected FT232RL
[  106.839324][ T4232] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94
[  106.855238][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.868370][ T4232] usb 3-1: Product: syz
[  106.873501][ T4232] usb 3-1: Manufacturer: syz
[  106.879109][ T4232] usb 3-1: SerialNumber: syz
[  106.887086][ T4232] usb 3-1: config 0 descriptor??
[  106.915418][ T4819] loop1: detected capacity change from 0 to 4096
[  106.967170][ T4217] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  107.015302][ T4819] EXT4-fs (loop1): Test dummy encryption mode enabled
[  107.042521][ T4819] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,nolazytime,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,barrier=0x000000000000000c,nogrpid,,errors=continue. Quota mode: writeback.
[  107.122459][ T4819] fs-verity (loop1, inode 13): Unknown hash algorithm number: 0
[  107.246196][ T4217] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  107.494945][ T4217] usb 4-1: USB disconnect, device number 5
[  107.529243][ T4217] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  107.557199][ T4217] ftdi_sio 4-1:0.0: device disconnected
[  107.588972][ T4232] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  107.605084][ T4841] program syz.0.216 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  107.775263][ T4849] loop1: detected capacity change from 0 to 512
[  107.808887][ T4232] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  107.837459][ T4232] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  107.852771][ T4853] loop4: detected capacity change from 0 to 512
[  107.869845][ T4232] asix: probe of 3-1:0.0 failed with error -71
[  107.894337][ T4853] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  107.903271][ T4232] usb 3-1: USB disconnect, device number 6
[  107.916654][ T4849] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  107.959210][ T4849] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  107.986208][ T4849] EXT4-fs (loop1): orphan cleanup on readonly fs
[  107.992543][ T4853] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.222: bg 0: block 64: padding at end of block bitmap is not set
[  108.018118][ T4853] Quota error (device loop4): write_blk: dquota write failed
[  108.027766][ T4853] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  108.049911][ T4853] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.222: Failed to acquire dquot type 0
[  108.069045][ T4849] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5
[  108.086954][ T4853] EXT4-fs (loop4): 1 truncate cleaned up
[  108.138982][ T4849] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  108.160630][ T4853] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  108.205243][ T4849] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.219: Failed to acquire dquot type 1
[  108.285040][ T4849] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.219: bg 0: block 40: padding at end of block bitmap is not set
[  108.341805][ T4849] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  108.397083][ T4849] EXT4-fs (loop1): 1 truncate cleaned up
[  108.408731][ T4853] syz.4.222 (4853) used greatest stack depth: 21032 bytes left
[  108.429589][ T4849] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,,errors=continue. Quota mode: writeback.
[  108.758866][   T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  108.952355][ T4891] loop3: detected capacity change from 0 to 64
[  109.067215][ T4891] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  109.084940][ T4899] loop4: detected capacity change from 0 to 1024
[  109.106304][ T4891] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop3:00000002
[  109.149373][   T13] usb 1-1: config 0 has an invalid interface number: 239 but max is 0
[  109.179657][   T13] usb 1-1: config 0 has no interface number 0
[  109.223875][ T4899] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  109.310552][ T4899] EXT4-fs error (device loop4): ext4_get_inode_usage:834: inode #2: comm syz.4.243: corrupted in-inode xattr
[  109.399252][   T13] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9
[  109.423471][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.489317][   T13] usb 1-1: Product: syz
[  109.494386][   T13] usb 1-1: Manufacturer: syz
[  109.527559][   T13] usb 1-1: SerialNumber: syz
[  109.573232][   T13] usb 1-1: config 0 descriptor??
[  109.655081][ T4910] loop1: detected capacity change from 0 to 512
[  109.744372][ T4903] loop2: detected capacity change from 0 to 32768
[  109.762554][ T4910] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.249: inode #1: comm syz.1.249: iget: illegal inode #
[  109.798343][ T4910] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.249: error while reading EA inode 1 err=-117
[  109.883856][ T4910] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.249: inode #1: comm syz.1.249: iget: illegal inode #
[  109.903384][    C0] vkms_vblank_simulate: vblank timer overrun
[  109.947026][ T4910] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.249: error while reading EA inode 1 err=-117
[  110.008949][   T13] usb 1-1: probing VID:PID(2201:012C)   
[  110.022826][ T4910] EXT4-fs (loop1): 1 orphan inode deleted
[  110.036243][ T4910] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  110.068920][    C0] vkms_vblank_simulate: vblank timer overrun
[  110.083185][   T13] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs
[  110.117075][ T4929] loop4: detected capacity change from 0 to 512
[  110.140083][ T4910] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.249: invalid indirect mapped block 234881024 (level 0)
[  110.146249][ T4903] XFS (loop2): Mounting V5 Filesystem
[  110.172502][   T13] vub300: probe of 1-1:0.239 failed with error -22
[  110.277072][ T4929] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  110.305332][   T13] usb 1-1: USB disconnect, device number 5
[  110.312302][ T4929] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.631307][ T4944] loop1: detected capacity change from 0 to 1024
[  110.674348][ T4903] XFS (loop2): Ending clean mount
[  110.700322][ T4365] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  110.788459][ T4944] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.815804][ T4171] XFS (loop2): Unmounting Filesystem
[  110.828956][ T4944] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.932427][ T4953] loop0: detected capacity change from 0 to 1024
[  110.978883][ T4365] usb 4-1: Using ep0 maxpacket: 8
[  111.075347][ T4953] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,dax=inode,nolazytime,abort,dax=inode,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none.
[  111.120447][ T4365] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  111.139609][ T4365] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  111.259469][ T4365] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  111.324372][ T4365] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  111.362473][ T4365] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  111.388766][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.681315][ T4365] usb 4-1: GET_CAPABILITIES returned 0
[  111.697540][ T4365] usbtmc 4-1:16.0: can't read capabilities
[  111.895775][ T4365] usb 4-1: USB disconnect, device number 6
[  112.118796][   T13] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  112.246029][ T4990] loop4: detected capacity change from 0 to 512
[  112.311330][ T4990] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  112.335548][ T4990] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  112.365626][ T4978] loop1: detected capacity change from 0 to 32768
[  112.374193][ T4990] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  112.378539][ T4969] loop2: detected capacity change from 0 to 32768
[  112.423834][ T4990] EXT4-fs (loop4): 1 truncate cleaned up
[  112.438963][ T4990] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000002,noauto_da_alloc,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback.
[  112.456484][ T4978] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.272 (4978)
[  112.501789][ T4978] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  112.538970][   T13] usb 1-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  112.575872][ T4978] BTRFS info (device loop1): using free space tree
[  112.616255][ T4978] BTRFS info (device loop1): has skinny extents
[  112.730771][ T4969] XFS (loop2): Mounting V5 Filesystem
[  112.743232][   T13] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  112.799032][   T13] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  112.803711][ T5011] loop3: detected capacity change from 0 to 2048
[  112.814918][   T13] usb 1-1: Manufacturer: syz
[  112.820551][   T13] usb 1-1: SerialNumber: syz
[  112.887179][ T5011] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.945816][ T4969] XFS (loop2): Ending clean mount
[  113.010204][ T4969] XFS (loop2): Quotacheck needed: Please wait.
[  113.020052][ T4978] BTRFS info (device loop1): enabling ssd optimizations
[  113.102129][ T4980] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  113.172684][   T13] usbhid 1-1:36.0: couldn't find an input interrupt endpoint
[  113.178838][ T4373] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  113.199137][   T26] audit: type=1800 audit(1749055129.224:3): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.272" name="file1" dev="loop1" ino=260 res=0 errno=0
[  113.245700][   T13] usb 1-1: USB disconnect, device number 6
[  113.263104][ T5034] loop3: detected capacity change from 0 to 4096
[  113.355445][ T4969] XFS (loop2): Quotacheck: Done.
[  113.729608][ T4373] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  113.749378][ T4373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.781288][ T4373] usb 5-1: Product: syz
[  113.786121][ T4373] usb 5-1: Manufacturer: syz
[  113.812536][ T4373] usb 5-1: SerialNumber: syz
[  113.838362][ T4373] usb 5-1: config 0 descriptor??
[  114.076774][ T4171] XFS (loop2): Unmounting Filesystem
[  114.161213][   T13] usb 5-1: USB disconnect, device number 3
[  114.459105][ T5058] loop1: detected capacity change from 0 to 1024
[  114.507197][ T5058] EXT4-fs (loop1): Ignoring removed nobh option
[  114.557466][ T5058] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  114.600516][ T5058] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  114.647697][ T5058] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,barrier,sysvgroups,discard,dioread_nolock,stripe=0x0000000000000004,dioread_nolock,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  114.815823][ T5068] loop0: detected capacity change from 0 to 4096
[  114.979825][ T5046] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  115.075140][ T5068] ntfs3: loop0: MFT: r=1e, expect seq=1 instead of 0!
[  115.250088][ T5046] usb 3-1: Using ep0 maxpacket: 16
[  115.269336][ T5083] Failed to get privilege flags for destination (handle=0x2:0x2)
[  115.378998][ T5046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.406704][ T5046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.428847][   T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  115.458455][ T5046] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  115.476510][ T5046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.497240][ T5046] usb 3-1: config 0 descriptor??
[  115.674906][   T23] usb 4-1: Using ep0 maxpacket: 32
[  115.782156][ T5107] netlink: 288 bytes leftover after parsing attributes in process `syz.4.315'.
[  115.801962][   T23] usb 4-1: config 0 has an invalid interface number: 152 but max is 0
[  115.821444][   T23] usb 4-1: config 0 has no interface number 0
[  115.846948][   T23] usb 4-1: config 0 interface 152 has no altsetting 0
[  115.893668][ T5110] loop0: detected capacity change from 0 to 1024
[  116.005678][ T5046] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0003/input/input7
[  116.018123][   T23] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  116.039848][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.058333][ T5110] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.085689][   T23] usb 4-1: Product: syz
[  116.093093][   T23] usb 4-1: Manufacturer: syz
[  116.098364][   T23] usb 4-1: SerialNumber: syz
[  116.108889][   T23] usb 4-1: config 0 descriptor??
[  116.138243][ T5110] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.0.317: bad entry in directory: inode out of bounds - offset=24, inode=983051, rec_len=20, size=1024 fake=0
[  116.150062][   T23] smsc75xx v1.0.0
[  116.196237][ T5046] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0
[  116.231411][ T5046] usb 3-1: USB disconnect, device number 7
[  116.304216][ T5110] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem
[  116.385902][ T5110] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.317: Deleting old file: nlink 4, error=-117
[  116.405693][ T5119] fido_id[5119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  116.477496][ T5103] loop1: detected capacity change from 0 to 32768
[  116.660032][ T5103] ERROR: (device loop1): dbAllocNext: Corrupt dmap page
[  116.660032][ T5103] 
[  116.681793][ T5122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.319'.
[  116.767875][ T5115] loop4: detected capacity change from 0 to 32768
[  116.808975][   T23] smsc75xx 4-1:0.152 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  116.856899][   T23] smsc75xx 4-1:0.152 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  116.922684][   T23] smsc75xx 4-1:0.152 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  117.002217][   T23] smsc75xx: probe of 4-1:0.152 failed with error -71
[  117.034341][   T23] usb 4-1: USB disconnect, device number 7
[  117.063660][ T5115] XFS (loop4): Mounting V5 Filesystem
[  117.276572][ T5115] XFS (loop4): Ending clean mount
[  117.508580][ T4178] XFS (loop4): Unmounting Filesystem
[  117.717477][ T5126] loop2: detected capacity change from 0 to 32768
[  117.946879][ T5126] XFS (loop2): Mounting V5 Filesystem
[  118.020508][ T5126] XFS (loop2): Ending clean mount
[  118.073340][ T5126] XFS (loop2): Quotacheck needed: Please wait.
[  118.125321][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready
[  118.186367][ T5175] loop1: detected capacity change from 0 to 2048
[  118.237005][ T5126] XFS (loop2): Quotacheck: Done.
[  118.285575][ T4171] XFS (loop2): Unmounting Filesystem
[  118.324751][ T5175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.388251][ T5186] syz.0.340 uses obsolete (PF_INET,SOCK_PACKET)
[  118.558940][ T4365] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  118.929003][ T4365] usb 5-1: config 0 has an invalid interface number: 15 but max is 0
[  118.937986][ T4365] usb 5-1: config 0 has no interface number 0
[  118.965287][ T4365] usb 5-1: config 0 interface 15 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.008860][ T4365] usb 5-1: config 0 interface 15 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.037999][ T4365] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  119.088776][ T4365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.110092][ T5212] loop2: detected capacity change from 0 to 2048
[  119.131434][ T4365] usb 5-1: config 0 descriptor??
[  119.243590][ T5220] loop1: detected capacity change from 0 to 64
[  119.289234][ T5212] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.322004][ T5220] hfs: filesystem is marked locked, mounting read-only.
[  119.356997][ T5212] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh
[  119.421687][ T5222] syz.0.356 (5222) used greatest stack depth: 20800 bytes left
[  119.647012][ T5231] loop1: detected capacity change from 0 to 1024
[  119.776236][ T5231] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  119.796393][ T5241] loop3: detected capacity change from 0 to 64
[  119.822027][   T23] usb 5-1: USB disconnect, device number 4
[  119.833843][ T5231] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  119.863342][ T5243] mmap: syz.2.365 (5243) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  119.864589][ T5231] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  119.895288][ T5231] EXT4-fs (loop1): This should not happen!! Data will be lost
[  119.895288][ T5231] 
[  119.906575][ T5231] EXT4-fs (loop1): Total free blocks count 0
[  119.914073][ T5231] EXT4-fs (loop1): Free/Dirty block details
[  119.922366][ T5231] EXT4-fs (loop1): free_blocks=68451041280
[  119.929142][ T5231] EXT4-fs (loop1): dirty_blocks=64
[  119.944128][ T5231] EXT4-fs (loop1): Block reservation details
[  119.962148][ T5231] EXT4-fs (loop1): i_reserved_data_blocks=4
[  120.048761][    T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  120.084079][  T140] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 60 with error 28
[  120.179863][  T140] EXT4-fs (loop1): This should not happen!! Data will be lost
[  120.179863][  T140] 
[  120.483193][    T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  120.506969][    T7] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  120.547954][    T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  120.593317][    T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  120.642371][    T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  120.846554][    T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  120.863673][    T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  120.886961][    T7] usb 1-1: Product: syz
[  120.887890][ T5255] loop3: detected capacity change from 0 to 32768
[  120.896862][    T7] usb 1-1: Manufacturer: syz
[  120.964961][    T7] cdc_wdm 1-1:1.0: skipping garbage
[  120.973036][    T7] cdc_wdm 1-1:1.0: skipping garbage
[  121.023927][ T5255] XFS (loop3): Mounting V5 Filesystem
[  121.030911][    T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  121.037798][    T7] cdc_wdm 1-1:1.0: Unknown control protocol
[  121.070657][   T13] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  121.097305][ T5261] loop4: detected capacity change from 0 to 32768
[  121.201096][   T23] usb 1-1: USB disconnect, device number 7
[  121.260525][ T5261] XFS (loop4): Mounting V5 Filesystem
[  121.271600][ T5255] XFS (loop3): Ending clean mount
[  121.284881][ T5255] XFS (loop3): Quotacheck needed: Please wait.
[  121.398562][ T5288] netlink: 'syz.2.378': attribute type 1 has an invalid length.
[  121.411290][ T5255] XFS (loop3): Quotacheck: Done.
[  121.420122][ T5261] XFS (loop4): Ending clean mount
[  121.421839][ T5255] XFS (loop3): Unmounting Filesystem
[  121.435213][ T5261] XFS (loop4): Quotacheck needed: Please wait.
[  121.488546][   T13] usb 2-1: config 150 has an invalid interface number: 204 but max is 1
[  121.507486][   T13] usb 2-1: config 150 has no interface number 0
[  121.516036][   T13] usb 2-1: config 150 interface 204 has no altsetting 0
[  121.524089][   T13] usb 2-1: config 150 interface 1 has no altsetting 0
[  121.710480][ T5261] XFS (loop4): Quotacheck: Done.
[  121.734331][   T26] audit: type=1326 audit(1749055137.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5293 comm="syz.2.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f528c7d2929 code=0x0
[  121.737660][   T13] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  121.801599][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.811009][   T13] usb 2-1: Product: syz
[  121.815332][   T13] usb 2-1: Manufacturer: syz
[  121.820324][   T13] usb 2-1: SerialNumber: syz
[  121.952914][ T4178] XFS (loop4): Unmounting Filesystem
[  122.120379][   T13] xr_serial 2-1:150.204: xr_serial converter detected
[  122.317199][ T5305] loop3: detected capacity change from 0 to 2048
[  122.431824][ T5305] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.585070][ T5311] loop0: detected capacity change from 0 to 256
[  122.671887][ T5315] netlink: 'syz.4.382': attribute type 2 has an invalid length.
[  122.747508][ T5311] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  122.834967][   T13] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[  122.850775][   T13] xr_serial: probe of ttyUSB0 failed with error -71
[  122.913794][   T13] usb 2-1: USB disconnect, device number 3
[  122.974577][   T13] xr_serial 2-1:150.204: device disconnected
[  123.097465][ T5332] loop2: detected capacity change from 0 to 128
[  123.236692][ T5332] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  123.257563][ T5337] loop0: detected capacity change from 0 to 256
[  123.269774][ T5332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.374782][ T5337] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  123.761667][ T5350] loop0: detected capacity change from 0 to 256
[  123.906644][ T5356] loop2: detected capacity change from 0 to 4096
[  123.972567][ T5356] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  124.006228][ T5356] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  124.063846][ T5356] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount.
[  124.105221][ T5356] ntfs: (device loop2): read_ntfs_boot_sector(): Using backup boot sector.
[  124.215761][ T5356] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  124.224718][    T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  124.252401][ T5367] loop3: detected capacity change from 0 to 256
[  124.290634][ T4217] kernel write not supported for file /203/attr/exec (pid: 4217 comm: kworker/0:5)
[  124.308709][ T5356] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  124.365719][ T5370] device team0 entered promiscuous mode
[  124.374128][ T5370] device team_slave_0 entered promiscuous mode
[  124.382036][ T5370] device team_slave_1 entered promiscuous mode
[  124.396307][ T5369] device team0 left promiscuous mode
[  124.403841][ T5369] device team_slave_0 left promiscuous mode
[  124.413317][ T5356] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  124.429144][ T5356] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  124.464571][ T5367] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  124.471850][ T5369] device team_slave_1 left promiscuous mode
[  124.560221][ T5356] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  124.601286][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  124.638615][ T5356] ntfs: volume version 3.1.
[  124.684244][ T5367] FAT-fs (loop3): Filesystem has been set read-only
[  124.691519][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  124.737699][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  124.757276][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  124.811985][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  124.832557][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  124.854072][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  124.893958][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  124.904381][    T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  124.926068][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.951382][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  124.972651][    T7] usb 2-1: Product: syz
[  124.987835][    T7] usb 2-1: Manufacturer: syz
[  125.020856][    T7] usb 2-1: SerialNumber: syz
[  125.030812][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.078703][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.097466][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.124774][    T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  125.145795][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.196054][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.210571][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.230394][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.243634][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.256776][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.270539][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.272367][ T4365] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  125.285968][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.308415][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.323628][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.338366][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.354127][ T5367] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  125.416204][ T5364] loop4: detected capacity change from 0 to 40427
[  125.439239][ T5364] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  125.458082][ T5364] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  125.507540][ T5367] syz.3.415 (5367) used greatest stack depth: 20464 bytes left
[  125.520547][ T5364] F2FS-fs (loop4): Found nat_bits in checkpoint
[  125.538502][ T5377] loop0: detected capacity change from 0 to 32768
[  125.560889][ T4365] usb 3-1: Using ep0 maxpacket: 16
[  125.623645][ T5364] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  125.648070][ T5364] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  125.690251][ T5377] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  125.703607][ T4365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.762752][ T5391] loop3: detected capacity change from 0 to 1024
[  125.782330][ T4365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.832664][ T4365] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  125.856759][ T4365] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  125.899846][ T4365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.913935][    T7] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  125.922359][ T4365] usb 3-1: config 0 descriptor??
[  125.977239][ T4173] ocfs2: Unmounting device (7,0) on (node local)
[  126.374707][ T4217] usb 2-1: USB disconnect, device number 4
[  126.442498][ T4365] microsoft 0003:045E:07DA.0005: No inputs registered, leaving
[  126.467306][ T4365] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  126.487785][ T4365] microsoft 0003:045E:07DA.0005: no inputs found
[  126.497154][ T4365] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway
[  126.620555][ T5403] loop4: detected capacity change from 0 to 512
[  126.660499][ T4365] usb 3-1: USB disconnect, device number 8
[  126.833085][ T5403] EXT4-fs (loop4): 1 orphan inode deleted
[  126.856442][ T5403] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  126.866305][ T5400] loop3: detected capacity change from 0 to 32768
[  126.889854][ T5403] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.939269][ T5400] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  127.013138][ T5410] loop1: detected capacity change from 0 to 256
[  127.049160][ T5403] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[  127.091009][ T5410] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  127.095097][ T4170] ocfs2: Unmounting device (7,3) on (node local)
[  127.180014][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  127.180029][   T26] audit: type=1800 audit(1749055142.767:7): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.429" name="file1" dev="loop1" ino=1048605 res=0 errno=0
[  127.239936][    T7] usb 2-1: Service connection timeout for: 256
[  127.246612][    T7] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  127.275385][    T7] ath9k_htc: Failed to initialize the device
[  127.295684][ T4217] usb 2-1: ath9k_htc: USB layer deinitialized
[  127.759091][ T5438] sctp: [Deprecated]: syz.2.441 (pid 5438) Use of int in max_burst socket option deprecated.
[  127.759091][ T5438] Use struct sctp_assoc_value instead
[  127.815901][ T5440] netlink: 836 bytes leftover after parsing attributes in process `syz.4.442'.
[  128.089595][ T5457] loop1: detected capacity change from 0 to 256
[  128.203598][ T5464] capability: warning: `syz.4.453' uses 32-bit capabilities (legacy support in use)
[  128.326427][ T5467] loop0: detected capacity change from 0 to 1024
[  128.543195][ T1345] hfsplus: b-tree write err: -5, ino 4
[  128.569172][ T5476] loop3: detected capacity change from 0 to 128
[  128.701488][ T5476] VFS: Found a Xenix FS (block size = 512) on device loop3
[  128.770956][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'.
[  128.798689][ T4170] sysv_free_block: trying to free block not in datazone
[  128.854545][ T4170] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  129.288104][    T7] kernel write not supported for file [eventfd] (pid: 7 comm: kworker/0:0)
[  129.546245][ T5521] syzkaller1: tun_chr_ioctl cmd 1074025694
[  129.721826][ T5528] loop0: detected capacity change from 0 to 64
[  129.860391][ T5534] loop3: detected capacity change from 0 to 256
[  129.901106][   T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  129.962813][ T5534] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  130.015434][ T5534] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  130.168675][   T23] usb 3-1: Using ep0 maxpacket: 8
[  130.296870][   T23] usb 3-1: config 0 has no interfaces?
[  130.361062][   T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  130.478567][   T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  130.505893][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.525300][   T23] usb 3-1: Product: syz
[  130.536140][   T23] usb 3-1: Manufacturer: syz
[  130.541163][   T23] usb 3-1: SerialNumber: syz
[  130.560003][   T23] usb 3-1: config 0 descriptor??
[  130.660585][   T13] usb 2-1: Using ep0 maxpacket: 16
[  130.725210][ T5541] loop0: detected capacity change from 0 to 32768
[  130.763741][ T5541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.489 (5541)
[  130.776133][ T5542] loop4: detected capacity change from 0 to 32768
[  130.813535][ T5541] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  130.842375][ T4365] usb 3-1: USB disconnect, device number 9
[  130.852966][ T5541] BTRFS info (device loop0): using free space tree
[  130.871985][ T5541] BTRFS info (device loop0): has skinny extents
[  130.899343][ T5542] XFS (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  130.915788][ T5542] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  130.956458][ T5542] XFS (loop4): Mounting V5 Filesystem
[  131.008978][   T13] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  131.018948][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.037548][   T13] usb 2-1: Product: syz
[  131.042660][   T13] usb 2-1: Manufacturer: syz
[  131.051527][   T13] usb 2-1: SerialNumber: syz
[  131.066610][   T13] usb 2-1: config 0 descriptor??
[  131.106179][ T5541] BTRFS info (device loop0): enabling ssd optimizations
[  131.134861][   T13] hub 2-1:0.0: bad descriptor, ignoring hub
[  131.152539][   T13] hub: probe of 2-1:0.0 failed with error -5
[  131.184796][ T5542] XFS (loop4): Ending clean mount
[  131.198691][ T5550] loop3: detected capacity change from 0 to 32768
[  131.204629][ T5542] XFS (loop4): Quotacheck needed: Please wait.
[  131.282935][ T5550] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.494 (5550)
[  131.332882][ T5542] XFS (loop4): Quotacheck: Done.
[  131.613361][ T4431] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4431)
[  131.943561][ T5597] usb 2-1: USB disconnect, device number 5
[  131.982260][ T4178] XFS (loop4): Unmounting Filesystem
[  132.002555][ T5608] loop2: detected capacity change from 0 to 128
[  132.838471][ T5631] loop4: detected capacity change from 0 to 8
[  133.054500][ T5631] SQUASHFS error: zlib decompression failed, data probably corrupt
[  133.130091][ T5631] SQUASHFS error: Failed to read block 0x4de: -5
[  133.141839][ T5631] SQUASHFS error: Failed to read block 0x4e2: -5
[  133.190740][ T5631] SQUASHFS error: Failed to read block 0x9ca: -5
[  133.223224][ T5631] SQUASHFS error: Failed to read block 0x2cf2: -5
[  133.269106][ T5631] SQUASHFS error: Failed to read block 0x35f2: -5
[  133.307633][   T26] audit: type=1800 audit(1749055148.492:8): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.499" name="file1" dev="loop4" ino=5 res=0 errno=0
[  133.487340][ T5648] loop2: detected capacity change from 0 to 8192
[  133.553900][ T5648] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.568037][ T5617] loop3: detected capacity change from 0 to 32768
[  133.628495][ T5658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.523'.
[  133.676497][ T5648] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044)
[  133.707074][ T5648] FAT-fs (loop2): Filesystem has been set read-only
[  133.736459][ T5648] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1044)
[  133.748784][ T5648] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1044)
[  133.810291][ T5671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.526'.
[  133.821636][ T5617] XFS (loop3): Mounting V5 Filesystem
[  133.961565][ T5681] loop0: detected capacity change from 0 to 1024
[  133.972635][ T5617] XFS (loop3): Ending clean mount
[  134.064414][ T5617] XFS (loop3): Quotacheck needed: Please wait.
[  134.173472][ T5685] loop2: detected capacity change from 0 to 8
[  134.220664][ T5046] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  134.338397][ T5617] XFS (loop3): Quotacheck: Done.
[  134.353035][ T5687] Zero length message leads to an empty skb
[  134.547899][ T4170] XFS (loop3): Unmounting Filesystem
[  134.558490][ T5693] loop0: detected capacity change from 0 to 736
[  134.636198][ T5046] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  134.649825][ T5046] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  134.661980][ T5046] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  134.686413][ T5046] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  134.725958][ T5046] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  134.741096][ T5697] loop4: detected capacity change from 0 to 64
[  134.872517][ T5046] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  134.882184][ T5046] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  134.937291][ T5046] usb 2-1: Product: syz
[  134.942391][ T5046] usb 2-1: Manufacturer: syz
[  135.044641][ T5046] cdc_wdm 2-1:1.0: skipping garbage
[  135.076807][ T5046] cdc_wdm 2-1:1.0: skipping garbage
[  135.105380][ T5046] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  135.127108][ T5702] loop2: detected capacity change from 0 to 512
[  135.128881][ T5046] cdc_wdm 2-1:1.0: Unknown control protocol
[  135.145669][ T5704] tipc: Started in network mode
[  135.168542][ T5704] tipc: Node identity @, cluster identity 4711
[  135.190039][ T5704] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  135.257485][ T5702] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  135.381501][ T5707] loop0: detected capacity change from 0 to 4096
[  135.394245][ T5702] EXT4-fs (loop2): 1 truncate cleaned up
[  135.437596][ T5702] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[  135.439594][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'.
[  135.470862][ T5707] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  135.633198][ T5707] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  135.680831][ T5707] ntfs3: loop0: Failed to load $Extend.
[  135.810531][ T5046] usb 2-1: USB disconnect, device number 6
[  136.165484][ T5733] loop1: detected capacity change from 0 to 512
[  136.226571][ T5733] EXT4-fs (loop1): Test dummy encryption mode enabled
[  136.271738][ T5733] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  136.349448][ T5733] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.553: bad orphan inode 131083
[  136.421178][ T5733] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  136.538493][ T5721] loop3: detected capacity change from 0 to 32768
[  136.606659][ T5748] loop2: detected capacity change from 0 to 128
[  136.620467][ T5750] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  136.662923][ T5721] JBD2: Ignoring recovery information on journal
[  136.795276][ T5748] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nouid32,,errors=continue. Quota mode: writeback.
[  136.864816][ T5721] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  136.874578][ T5764] loop4: detected capacity change from 0 to 1024
[  136.909180][ T5766] loop1: detected capacity change from 0 to 512
[  136.918482][ T5748] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.942218][ T5764] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  136.952902][ T5766] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  136.969680][ T5764] EXT4-fs (loop4): Ignoring removed nobh option
[  136.977450][ T5764] EXT4-fs (loop4): Ignoring removed bh option
[  137.008948][ T5766] EXT4-fs (loop1): 1 truncate cleaned up
[  137.026643][ T5764] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,data_err=abort,barrier=0x0000000000000007,dioread_lock,data_err=ignore,mblk_io_submit,data_err=ignore,grpquota,nobh,user_xattr,bh,nojournal_checksum,. Quota mode: writeback.
[  137.045186][ T5766] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x000000000000ec7b,discard,lazytime,nouid32,noload,,errors=continue. Quota mode: none.
[  137.074344][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.097217][ T4170] ocfs2: Unmounting device (7,3) on (node local)
[  137.529926][ T5782] xt_CT: No such helper "snmp"
[  137.586409][ T5787] loop4: detected capacity change from 0 to 1024
[  137.897227][  T517] hfsplus: b-tree write err: -5, ino 4
[  138.735096][ T5826] loop2: detected capacity change from 0 to 164
[  138.870139][ T5826] iso9660: Corrupted directory entry in block 2 of inode 1920
[  138.991965][ T5805] loop1: detected capacity change from 0 to 32768
[  139.070118][ T5805] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.576 (5805)
[  139.083312][ T5795] loop3: detected capacity change from 0 to 32768
[  139.143532][ T5833] loop2: detected capacity change from 0 to 2048
[  139.218957][ T5805] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  139.244899][ T5805] BTRFS info (device loop1): setting nodatacow, compression disabled
[  139.271874][ T5795] XFS (loop3): Mounting V5 Filesystem
[  139.293939][ T5833] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.335712][ T5805] BTRFS info (device loop1): max_inline at 0
[  139.372950][ T5805] BTRFS info (device loop1): enabling disk space caching
[  139.380696][ T5805] BTRFS info (device loop1): turning off barriers
[  139.388611][ T5805] BTRFS info (device loop1): turning on flush-on-commit
[  139.398066][ T5805] BTRFS info (device loop1): doing ref verification
[  139.405913][ T5805] BTRFS info (device loop1): force clearing of disk cache
[  139.414387][ T5805] BTRFS info (device loop1): enabling ssd optimizations
[  139.421893][ T5805] BTRFS info (device loop1): max_inline at 4096
[  139.429548][ T5805] BTRFS info (device loop1): disk space caching is enabled
[  139.439141][ T5805] BTRFS info (device loop1): has skinny extents
[  139.479567][ T5809] loop0: detected capacity change from 0 to 32768
[  139.513792][ T5795] XFS (loop3): Ending clean mount
[  139.568947][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  139.575761][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  139.626878][ T5809] JBD2: Ignoring recovery information on journal
[  139.765555][ T5809] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  139.859734][ T4170] XFS (loop3): Unmounting Filesystem
[  139.868867][ T5805] BTRFS info (device loop1): clearing free space tree
[  139.902489][ T5809] (syz.0.577,5809,1):ocfs2_group_extend:306 ERROR: The disk is too old and small. Force to do offline resize.
[  139.941082][ T5805] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  139.954660][ T5837] loop4: detected capacity change from 0 to 32768
[  140.042486][ T5805] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  140.101989][ T4173] ocfs2: Unmounting device (7,0) on (node local)
[  140.391659][ T5837] XFS (loop4): Mounting V5 Filesystem
[  140.444259][   T26] audit: type=1800 audit(1749055155.171:9): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.576" name="file1" dev="loop1" ino=260 res=0 errno=0
[  140.714845][ T5837] XFS (loop4): Ending clean mount
[  140.774253][ T5837] XFS (loop4): Quotacheck needed: Please wait.
[  140.831289][ T5891] loop2: detected capacity change from 0 to 256
[  140.889070][ T5891] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  140.964756][ T5891] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  141.022491][ T5891] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  141.070853][   T26] audit: type=1800 audit(1749055155.751:10): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.598" name="file1" dev="loop2" ino=1048610 res=0 errno=0
[  141.103781][ T5891] exFAT-fs (loop2): hint_cluster is invalid (17)
[  141.235675][ T5891] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff)
[  141.308545][ T5891] exFAT-fs (loop2): Filesystem has been set read-only
[  141.466893][ T5837] XFS (loop4): Quotacheck: Done.
[  141.747466][ T5902] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  141.774122][ T5595] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  141.788266][ T4178] XFS (loop4): Unmounting Filesystem
[  141.886957][ T5896] loop3: detected capacity change from 0 to 32768
[  141.992900][ T5896] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  142.013921][ T5896] BTRFS info (device loop3): using free space tree
[  142.021314][ T5896] BTRFS info (device loop3): has skinny extents
[  142.038839][ T5894] loop0: detected capacity change from 0 to 40427
[  142.076446][ T5896] BTRFS info (device loop3): enabling ssd optimizations
[  142.088591][ T5595] usb 2-1: Using ep0 maxpacket: 16
[  142.129053][ T5894] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  142.187024][ T5894] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  142.247534][ T5894] F2FS-fs (loop0): Found nat_bits in checkpoint
[  142.253081][ T5595] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  142.276067][ T5595] usb 2-1: config 0 has no interface number 0
[  142.344500][ T5894] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  142.346894][ T5595] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  142.363814][ T5894] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  142.422027][ T5595] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  142.467100][ T5894] attempt to access beyond end of device
[  142.467100][ T5894] loop0: rw=2049, want=53256, limit=40427
[  142.478915][ T1231] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  142.561075][ T4173] attempt to access beyond end of device
[  142.561075][ T4173] loop0: rw=2049, want=45104, limit=40427
[  142.688496][ T5595] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  142.705102][ T5595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.713496][ T5595] usb 2-1: Product: syz
[  142.717866][ T5595] usb 2-1: Manufacturer: syz
[  142.723977][ T5595] usb 2-1: SerialNumber: syz
[  142.754528][ T5595] usb 2-1: config 0 descriptor??
[  142.773319][ T5899] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  142.775353][ T5933] loop2: detected capacity change from 0 to 2048
[  142.781006][ T5899] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  142.943615][ T5934] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.102800][ T5899] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  143.132997][ T5899] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  143.518139][ T5941] loop2: detected capacity change from 0 to 128
[  143.542728][   T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  143.927647][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.948794][ T5595] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  143.958972][ T5595] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  143.959247][   T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.039807][ T5595] asix: probe of 2-1:0.251 failed with error -71
[  144.081714][ T5595] usb 2-1: USB disconnect, device number 7
[  144.098777][   T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  144.141520][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  144.150268][   T23] usb 4-1: SerialNumber: syz
[  144.387950][ T5968] loop2: detected capacity change from 0 to 8192
[  144.442863][ T5968] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  144.465866][   T23] usb 4-1: 0:2 : does not exist
[  144.512777][ T5960] loop4: detected capacity change from 0 to 32768
[  144.542625][ T5960] XFS: ikeep mount option is deprecated.
[  144.572793][   T23] usb 4-1: USB disconnect, device number 8
[  144.579588][ T5960] XFS: noikeep mount option is deprecated.
[  144.725543][ T5960] XFS (loop4): Mounting V5 Filesystem
[  144.821660][ T5985] loop2: detected capacity change from 0 to 512
[  144.870132][ T4248] udevd[4248]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.871112][ T5989] loop1: detected capacity change from 0 to 64
[  144.905925][ T5985] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  144.915045][ T5988] loop0: detected capacity change from 0 to 1024
[  144.925117][ T5989] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  144.940028][ T5989] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1
[  144.949599][ T5960] XFS (loop4): Ending clean mount
[  144.973710][ T5960] XFS (loop4): Quotacheck needed: Please wait.
[  144.989287][ T5985] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.623: invalid block
[  145.102973][ T5960] XFS (loop4): Quotacheck: Done.
[  145.131929][ T5985] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.623: invalid indirect mapped block 10 (level 1)
[  145.296627][ T4178] XFS (loop4): Unmounting Filesystem
[  145.319270][ T1345] hfsplus: b-tree write err: -5, ino 4
[  145.336212][ T5985] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.623: invalid indirect mapped block 8 (level 1)
[  145.406525][ T5985] EXT4-fs (loop2): 1 truncate cleaned up
[  145.412428][ T5985] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none.
[  145.786962][ T6002] loop2: detected capacity change from 0 to 4096
[  145.889623][ T6010] loop0: detected capacity change from 0 to 256
[  145.897527][ T6006] loop3: detected capacity change from 0 to 1024
[  146.001713][ T6011] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.078641][ T6010] FAT-fs (loop0): Directory bread(block 64) failed
[  146.116015][ T1345] hfsplus: b-tree write err: -5, ino 4
[  146.136047][ T6010] FAT-fs (loop0): Directory bread(block 65) failed
[  146.168790][ T6010] FAT-fs (loop0): Directory bread(block 66) failed
[  146.204701][ T6010] FAT-fs (loop0): Directory bread(block 67) failed
[  146.224822][ T6010] FAT-fs (loop0): Directory bread(block 68) failed
[  146.272122][ T6010] FAT-fs (loop0): Directory bread(block 69) failed
[  146.278809][ T6010] FAT-fs (loop0): Directory bread(block 70) failed
[  146.400559][ T6010] FAT-fs (loop0): Directory bread(block 71) failed
[  146.450569][ T6010] FAT-fs (loop0): Directory bread(block 72) failed
[  146.459790][ T6010] FAT-fs (loop0): Directory bread(block 73) failed
[  146.543901][ T6022] loop3: detected capacity change from 0 to 256
[  146.628366][ T5989] loop1: detected capacity change from 0 to 32768
[  146.654789][ T6022] exfat: Deprecated parameter 'utf8'
[  146.661610][ T6022] exfat: Deprecated parameter 'utf8'
[  146.673600][ T6024] loop2: detected capacity change from 0 to 2048
[  146.682101][ T6022] exfat: Deprecated parameter 'utf8'
[  146.765198][ T6022] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  146.796041][ T6024] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  146.854205][ T6035] sp0: Synchronizing with TNC
[  146.864681][ T6035] sp0: Found TNC
[  146.942717][ T5989] XFS (loop1): Mounting V5 Filesystem
[  147.091079][ T6024] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,noauto_da_alloc,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,usrjquota=,. Quota mode: writeback.
[  147.341249][ T5989] XFS (loop1): Ending clean mount
[  147.389442][ T5989] XFS (loop1): Quotacheck needed: Please wait.
[  147.502110][ T5989] XFS (loop1): Quotacheck: Done.
[  147.519990][ T6056] loop2: detected capacity change from 0 to 2048
[  147.539963][   T26] audit: type=1800 audit(1749055161.803:11): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.624" name="file1" dev="loop1" ino=9286 res=0 errno=0
[  147.591628][ T6060] loop0: detected capacity change from 0 to 1024
[  147.616081][ T4172] XFS (loop1): Unmounting Filesystem
[  147.657896][ T6060] EXT4-fs (loop0): Ignoring removed orlov option
[  147.715968][ T6056] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  147.717856][ T6060] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  147.741376][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'.
[  147.769335][ T6056] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.874209][ T6060] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  147.898244][ T4365] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  147.908338][ T6056] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.648: path /129/file1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  148.321311][ T4365] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  148.329756][ T4365] usb 4-1: config 0 has no interface number 0
[  148.570818][ T4365] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  148.599308][ T4365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.612804][ T6073] loop4: detected capacity change from 0 to 32768
[  148.622356][ T4365] usb 4-1: Product: syz
[  148.627457][ T4365] usb 4-1: Manufacturer: syz
[  148.659122][ T4365] usb 4-1: SerialNumber: syz
[  148.670495][ T4365] usb 4-1: config 0 descriptor??
[  148.722994][ T6073] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.657 (6073)
[  148.784042][ T6073] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  148.815767][ T6073] BTRFS info (device loop4): setting nodatacow, compression disabled
[  148.859859][ T6073] BTRFS info (device loop4): allowing degraded mounts
[  148.878152][ T6073] BTRFS info (device loop4): metadata ratio 7
[  148.918215][ T6073] BTRFS info (device loop4): using free space tree
[  148.942969][ T6073] BTRFS info (device loop4): has skinny extents
[  149.208617][ T6073] BTRFS info (device loop4): enabling ssd optimizations
[  149.657746][ T4365] usb 4-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1c, error -71
[  149.680366][ T4365] usb 4-1: Firmware version (0.0) predates our first public release.
[  149.700411][ T4249] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  149.744090][ T4365] usb 4-1: Please update to version 0.2 or newer
[  149.775115][ T4365] usb 4-1: atusb_probe: initialization failed, error = -71
[  149.786551][ T4365] atusb: probe of 4-1:0.128 failed with error -71
[  149.840512][ T6092] loop0: detected capacity change from 0 to 40427
[  149.841669][ T4365] usb 4-1: USB disconnect, device number 9
[  149.903719][ T6092] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  149.911797][ T6092] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  149.967394][ T4249] usb 3-1: Using ep0 maxpacket: 8
[  149.982199][ T6092] F2FS-fs (loop0): invalid crc value
[  149.996648][ T6132] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.673'.
[  150.019849][ T6092] F2FS-fs (loop0): Found nat_bits in checkpoint
[  150.097515][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.124737][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.142449][ T4249] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  150.153498][ T4249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.233292][ T4249] usb 3-1: config 0 descriptor??
[  150.254874][ T6092] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  150.287433][ T6092] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  150.338304][ T6142] netlink: 'syz.3.676': attribute type 1 has an invalid length.
[  150.404682][ T6142] netlink: 'syz.3.676': attribute type 2 has an invalid length.
[  150.752813][ T4249] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  150.771157][ T4249] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  150.778190][ T4249] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  150.811236][ T4249] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  150.831366][ T4249] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  150.870307][ T4249] waltop 0003:172F:0038.0006: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.2-1/input0
[  150.972778][ T6150] usb 3-1: USB disconnect, device number 10
[  151.019113][ T6158] fido_id[6158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  151.197262][ T4249] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  151.304934][ T6169] program syz.1.686 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.327047][ T6171] tipc: Started in network mode
[  151.332066][ T6171] tipc: Node identity ac1414aa, cluster identity 4711
[  151.341485][ T6171] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  151.445194][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'.
[  151.464530][ T4249] usb 4-1: Using ep0 maxpacket: 8
[  151.769531][ T4249] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  151.779643][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.788981][ T4249] usb 4-1: Product: syz
[  151.793456][ T4249] usb 4-1: Manufacturer: syz
[  151.799069][ T4249] usb 4-1: SerialNumber: syz
[  151.820758][ T4249] usb 4-1: config 0 descriptor??
[  151.872988][ T4249] gspca_main: se401-2.14.0 probing 047d:5003
[  151.945352][ T5589] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  152.255244][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  152.341146][ T4249] gspca_se401: Too many frame sizes
[  152.383826][ T5589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.394736][ T5589] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.406453][ T5589] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.417126][ T5589] usb 2-1: config 0 interface 0 has no altsetting 0
[  152.423764][ T5589] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  152.433472][ T5589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.450626][ T5589] usb 2-1: config 0 descriptor??
[  152.560187][ T4249] usb 4-1: USB disconnect, device number 10
[  152.747702][ T1108] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  152.761866][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.772383][ T1108] usb 5-1: config 0 descriptor??
[  152.827640][ T1108] gspca_main: cpia1-2.14.0 probing 0813:0001
[  152.896843][ T5584] kernel read not supported for file /dsp1 (pid: 5584 comm: kworker/0:7)
[  152.973800][ T5589] kye 0003:0458:5015.0007: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0
[  152.987280][ T5589] kye 0003:0458:5015.0007: tablet-enabling feature report not found
[  153.003799][ T5589] kye 0003:0458:5015.0007: tablet enabling failed
[  153.184549][ T5589] usb 2-1: USB disconnect, device number 8
[  153.530584][ T6237] loop2: detected capacity change from 0 to 32768
[  153.571142][ T6237] XFS: ikeep mount option is deprecated.
[  153.596947][ T6237] XFS (loop2): Mounting V5 Filesystem
[  153.613308][ T5584] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  153.686321][ T6237] XFS (loop2): Ending clean mount
[  153.696178][ T6237] XFS (loop2): Quotacheck needed: Please wait.
[  153.738104][ T6237] XFS (loop2): Quotacheck: Done.
[  153.757722][ T1108] gspca_cpia1: usb_control_msg 02, error -71
[  153.784193][ T1108] gspca_cpia1: usb_control_msg 05, error -71
[  153.838273][ T1108] gspca_cpia1: usb_control_msg 04, error -71
[  153.844365][ T1108] cpia1: probe of 5-1:0.0 failed with error -71
[  153.868792][ T1108] usb 5-1: USB disconnect, device number 5
[  153.888975][ T4171] XFS (loop2): Unmounting Filesystem
[  153.912261][ T5584] usb 4-1: Using ep0 maxpacket: 16
[  154.067476][ T5584] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  154.080242][ T5584] usb 4-1: config 0 has no interface number 0
[  154.091882][ T5584] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  154.102190][ T5584] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  154.329313][ T5584] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  154.329347][ T5584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.329369][ T5584] usb 4-1: Product: syz
[  154.329385][ T5584] usb 4-1: Manufacturer: syz
[  154.329401][ T5584] usb 4-1: SerialNumber: syz
[  154.331461][ T5584] usb 4-1: config 0 descriptor??
[  154.354371][ T6235] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  154.354470][ T6235] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  154.412269][ T6263] loop2: detected capacity change from 0 to 736
[  154.600613][ T6235] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  154.629560][ T6263] loop2: detected capacity change from 0 to 4096
[  154.643451][ T6235] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  154.787719][ T6263] ntfs: volume version 3.1.
[  154.826246][ T6276] netlink: 165 bytes leftover after parsing attributes in process `syz.1.734'.
[  154.838104][ T6263] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1251.  You might want to try to use the mount option nls=utf8.
[  154.885934][ T6263] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x2000004.
[  155.222713][ T6295] loop4: detected capacity change from 0 to 1024
[  155.241316][ T6150] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  155.324439][ T6295] hfsplus: bad catalog entry type
[  155.361733][ T5852] hfsplus: b-tree write err: -5, ino 4
[  155.398460][ T5584] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  155.408607][ T5584] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  155.459405][ T5584] asix: probe of 4-1:0.251 failed with error -71
[  155.510440][ T5584] usb 4-1: USB disconnect, device number 11
[  155.649241][ T6150] usb 2-1: config index 0 descriptor too short (expected 126, got 72)
[  155.712229][ T6306] loop0: detected capacity change from 0 to 4096
[  155.836720][ T6150] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  155.861912][ T6150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.881384][ T6150] usb 2-1: Product: syz
[  155.885599][ T6150] usb 2-1: Manufacturer: syz
[  155.900968][ T6150] usb 2-1: SerialNumber: syz
[  155.944955][ T6150] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  155.992738][ T6313] loop0: detected capacity change from 0 to 1024
[  156.122774][ T6297] loop2: detected capacity change from 0 to 40427
[  156.123293][ T6313] hfsplus: xattr searching failed
[  156.208377][ T6297] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  156.217449][ T6313] hfsplus: b-tree write err: -5, ino 3
[  156.223944][ T6297] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  156.339460][ T5852] hfsplus: b-tree write err: -5, ino 3
[  156.430929][ T6297] F2FS-fs (loop2): Found nat_bits in checkpoint
[  156.509634][ T5595] kernel write not supported for file /sequencer (pid: 5595 comm: kworker/0:14)
[  156.586053][ T6297] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  156.598499][ T6297] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  156.606510][ T6150] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  157.265858][ T4373] usb 2-1: USB disconnect, device number 9
[  157.376094][ T6348] loop0: detected capacity change from 0 to 1024
[  157.581809][ T6339] loop4: detected capacity change from 0 to 32768
[  157.722406][  T140] hfsplus: b-tree write err: -5, ino 8
[  157.801020][ T6339] XFS (loop4): Mounting V5 Filesystem
[  157.869836][ T6371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.769'.
[  157.941594][ T6376] loop1: detected capacity change from 0 to 256
[  157.950271][ T6339] XFS (loop4): Ending clean mount
[  157.983147][ T6379] loop2: detected capacity change from 0 to 256
[  157.996742][ T6376] exfat: Deprecated parameter 'namecase'
[  158.002523][ T6339] XFS (loop4): Quotacheck needed: Please wait.
[  158.006093][ T6376] exfat: Deprecated parameter 'namecase'
[  158.064549][ T6376] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d)
[  158.195239][ T6385] netlink: 14 bytes leftover after parsing attributes in process `syz.2.774'.
[  158.204833][ T6150] usb 2-1: Service connection timeout for: 257
[  158.211270][ T6150] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  158.229620][ T6150] ath9k_htc: Failed to initialize the device
[  158.249728][ T4373] usb 2-1: ath9k_htc: USB layer deinitialized
[  158.270519][ T6339] XFS (loop4): Quotacheck: Done.
[  158.389896][ T4178] XFS (loop4): Unmounting Filesystem
[  158.442376][ T6396] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  158.832937][ T6414] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  158.833015][ T6414] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  158.833046][ T6414] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  158.833076][ T6414] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  158.833261][ T6414] device geneve2 entered promiscuous mode
[  158.877750][ T6414] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  158.877793][ T6414] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  158.877823][ T6414] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  158.877853][ T6414] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  159.088980][ T6419] kernel read not supported for file /net_prio.prioidx (pid: 6419 comm: syz.2.789)
[  159.100777][   T26] audit: type=1800 audit(1749055172.625:12): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.789" name="net_prio.prioidx" dev="mqueue" ino=39791 res=0 errno=0
[  159.281973][ T6402] loop1: detected capacity change from 0 to 40427
[  159.349573][ T6402] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff
[  159.371665][ T6402] F2FS-fs (loop1): invalid crc value
[  159.402586][ T6402] F2FS-fs (loop1): Found nat_bits in checkpoint
[  159.491446][ T6402] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  159.548094][ T4172] attempt to access beyond end of device
[  159.548094][ T4172] loop1: rw=2049, want=45104, limit=40427
[  160.313393][ T6461] loop4: detected capacity change from 0 to 256
[  160.442349][ T6461] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  160.467715][ T6461] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  160.527137][ T6461] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  160.586500][ T6461] exFAT-fs (loop4): hint_cluster is invalid (17)
[  160.595485][ T6443] loop3: detected capacity change from 0 to 40427
[  160.618271][ T6443] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  160.640874][ T6443] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  160.690426][ T6150] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  160.745375][ T6443] F2FS-fs (loop3): Found nat_bits in checkpoint
[  160.869022][ T6467] loop1: detected capacity change from 0 to 32768
[  160.878812][ T6443] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  160.891758][ T6443] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  160.999259][   T26] audit: type=1800 audit(1749055174.393:13): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.808" name="file1" dev="loop1" ino=4 res=0 errno=0
[  161.118222][ T6150] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[  161.132685][ T6150] usb 3-1: config 0 has no interface number 0
[  161.191272][ T6472] loop4: detected capacity change from 0 to 32768
[  161.274205][ T6472] XFS (loop4): Mounting V5 Filesystem
[  161.310689][ T6150] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9
[  161.319804][ T6150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.423690][ T6150] usb 3-1: Product: syz
[  161.444356][ T6150] usb 3-1: Manufacturer: syz
[  161.468857][ T6150] usb 3-1: SerialNumber: syz
[  161.520451][ T6150] usb 3-1: config 0 descriptor??
[  161.555684][ T6472] XFS (loop4): Ending clean mount
[  161.636040][ T4178] XFS (loop4): Unmounting Filesystem
[  161.844221][ T6486] loop1: detected capacity change from 0 to 1024
[  161.930619][ T6150] usb 3-1: probing VID:PID(2201:012C)   
[  161.937309][ T6150] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  161.937345][ T6490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.815'.
[  162.041211][ T6150] vub300: probe of 3-1:0.239 failed with error -22
[  162.085700][ T6150] usb 3-1: USB disconnect, device number 11
[  162.143209][ T6492] loop3: detected capacity change from 0 to 1024
[  162.319070][ T1231] hfsplus: b-tree write err: -5, ino 8
[  162.338428][ T6492] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  162.353442][ T6492] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.485681][ T6504] loop1: detected capacity change from 0 to 256
[  162.525928][ T6500] netlink: 14 bytes leftover after parsing attributes in process `syz.4.818'.
[  162.560038][ T6508] loop3: detected capacity change from 0 to 256
[  162.630773][ T6508] exfat: Deprecated parameter 'namecase'
[  162.640744][ T6508] exfat: Deprecated parameter 'namecase'
[  162.730740][ T6508] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d)
[  163.201362][ T6531] loop2: detected capacity change from 0 to 1024
[  163.271268][ T6531] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  163.335961][ T6531] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.511319][ T6512] loop4: detected capacity change from 0 to 40427
[  163.555249][ T5584] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  163.557131][ T6512] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  163.582764][ T6512] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  163.626238][ T6512] F2FS-fs (loop4): Found nat_bits in checkpoint
[  163.715710][ T6523] loop3: detected capacity change from 0 to 32768
[  163.759195][ T6512] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  163.767307][ T6544] loop0: detected capacity change from 0 to 1024
[  163.787536][ T6512] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  163.842580][ T6523] XFS (loop3): Mounting V5 Filesystem
[  163.921553][ T6544] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  163.940351][ T6544] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.972397][ T5584] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[  164.013431][ T5584] usb 2-1: config 0 has no interface number 0
[  164.065304][ T6523] XFS (loop3): Ending clean mount
[  164.105209][ T6544] syz.0.845 (6544) used greatest stack depth: 20360 bytes left
[  164.218739][ T4170] XFS (loop3): Unmounting Filesystem
[  164.234559][ T5584] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9
[  164.268636][ T5584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.288626][ T5584] usb 2-1: Product: syz
[  164.297765][ T5584] usb 2-1: Manufacturer: syz
[  164.306570][ T5584] usb 2-1: SerialNumber: syz
[  164.343810][ T5584] usb 2-1: config 0 descriptor??
[  164.738259][ T6576] loop0: detected capacity change from 0 to 512
[  164.763795][ T5584] usb 2-1: probing VID:PID(2201:012C)   
[  164.770431][ T5584] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[  164.801704][ T6576] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  164.816639][ T5584] vub300: probe of 2-1:0.239 failed with error -22
[  164.827605][ T6576] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  164.839971][ T5584] usb 2-1: USB disconnect, device number 10
[  164.902906][ T6576] EXT4-fs (loop0): 1 truncate cleaned up
[  164.919533][ T6576] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000002,noauto_da_alloc,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback.
[  165.075555][ T6594] loop4: detected capacity change from 0 to 1024
[  165.186834][ T6594] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  165.212413][ T6594] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.570271][ T6590] loop3: detected capacity change from 0 to 32768
[  165.745572][ T6590] XFS (loop3): Mounting V5 Filesystem
[  165.761344][ T6620] loop4: detected capacity change from 0 to 2048
[  165.786429][ T6623] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  165.847998][ T6620] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.885957][ T4373] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  165.947194][ T6590] XFS (loop3): Ending clean mount
[  165.963386][ T6590] XFS (loop3): Quotacheck needed: Please wait.
[  166.102281][ T6590] XFS (loop3): Quotacheck: Done.
[  166.153253][ T4373] usb 3-1: Using ep0 maxpacket: 8
[  166.188570][ T4170] XFS (loop3): Unmounting Filesystem
[  166.281811][ T4373] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  166.297373][ T4373] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  166.338914][ T4373] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  166.389468][ T4373] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.393990][ T6627] loop0: detected capacity change from 0 to 32768
[  166.430984][ T4373] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  166.453085][ T6627] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.858 (6627)
[  166.461972][ T4373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.500118][ T6636] loop1: detected capacity change from 0 to 512
[  166.547797][ T6636] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  166.605407][ T6636] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  166.625841][ T6627] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  166.643777][ T6636] EXT4-fs (loop1): 1 truncate cleaned up
[  166.661395][ T6636] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000002,noauto_da_alloc,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback.
[  166.669110][ T6627] BTRFS info (device loop0): using free space tree
[  166.762630][ T6627] BTRFS info (device loop0): has skinny extents
[  166.806028][ T4373] usb 3-1: GET_CAPABILITIES returned 0
[  166.811614][ T4373] usbtmc 3-1:16.0: can't read capabilities
[  167.057670][ T6150] usb 3-1: USB disconnect, device number 12
[  167.133601][ T6632] loop4: detected capacity change from 0 to 32768
[  167.135540][ T6627] BTRFS info (device loop0): enabling ssd optimizations
[  167.210470][   T26] audit: type=1800 audit(1749055180.202:14): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.858" name="file1" dev="loop0" ino=260 res=0 errno=0
[  167.335799][ T6632] XFS (loop4): Mounting V5 Filesystem
[  167.574866][ T6682] loop1: detected capacity change from 0 to 2048
[  167.576197][ T6632] XFS (loop4): Ending clean mount
[  167.699566][ T6682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.926225][ T6694] loop3: detected capacity change from 0 to 512
[  168.050892][ T6632] XFS (loop4): Quotacheck needed: Please wait.
[  168.074113][ T6694] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  168.107859][ T6632] XFS (loop4): Quotacheck: Done.
[  168.116619][ T6694] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  168.145578][ T6694] EXT4-fs (loop3): 1 truncate cleaned up
[  168.156576][ T6694] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000002,noauto_da_alloc,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback.
[  168.211515][ T4178] XFS (loop4): Unmounting Filesystem
[  171.558879][ T6718] loop0: detected capacity change from 0 to 1024
[  171.585991][ T6718] EXT4-fs (loop0): Ignoring removed nobh option
[  171.610885][ T6718] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  171.632743][ T6718] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  171.717437][ T6718] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,barrier,sysvgroups,discard,dioread_nolock,stripe=0x0000000000000004,dioread_nolock,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  171.808578][ T4365] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  171.830594][ T6704] loop4: detected capacity change from 0 to 32768
[  171.883989][ T6704] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.882 (6704)
[  171.926363][ T6704] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  171.982070][ T6704] BTRFS info (device loop4): using free space tree
[  172.010271][ T6704] BTRFS info (device loop4): has skinny extents
[  172.017909][ T6730] syzkaller1: tun_chr_ioctl cmd 1074025681
[  172.076641][ T4365] usb 2-1: Using ep0 maxpacket: 8
[  172.204350][ T4365] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  172.234328][ T4365] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  172.277122][ T6744] Â: renamed from pim6reg1
[  172.301241][ T4365] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  172.327543][ T6704] BTRFS info (device loop4): enabling ssd optimizations
[  172.344059][ T4365] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  172.349287][ T6728] loop3: detected capacity change from 0 to 32768
[  172.363880][ T4365] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  172.374657][ T4365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.408878][   T26] audit: type=1800 audit(1749055185.076:15): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.882" name="file1" dev="loop4" ino=260 res=0 errno=0
[  172.532264][ T6728] XFS (loop3): Mounting V5 Filesystem
[  172.685372][ T4365] usb 2-1: GET_CAPABILITIES returned 0
[  172.690967][ T4365] usbtmc 2-1:16.0: can't read capabilities
[  173.213245][ T4216] usb 2-1: USB disconnect, device number 11
[  173.213608][ T6728] XFS (loop3): Ending clean mount
[  173.440842][ T4170] XFS (loop3): Unmounting Filesystem
[  173.441054][ T6780] loop2: detected capacity change from 0 to 512
[  173.600610][ T6772] loop0: detected capacity change from 0 to 32768
[  173.613995][ T6780] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.901: bad orphan inode 11862016
[  173.720251][ T6780] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  173.782760][ T6780] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.854621][ T6795] loop1: detected capacity change from 0 to 64
[  173.867712][ T6780] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback.
[  173.879920][ T6772] XFS (loop0): Mounting V5 Filesystem
[  174.050673][ T6772] XFS (loop0): Ending clean mount
[  174.366270][ T4173] XFS (loop0): Unmounting Filesystem
[  174.558395][ T6788] loop4: detected capacity change from 0 to 40427
[  174.650934][ T6800] loop3: detected capacity change from 0 to 32768
[  174.688043][ T6788] F2FS-fs (loop4): invalid crc value
[  174.744994][ T6788] F2FS-fs (loop4): Found nat_bits in checkpoint
[  174.787514][ T6800] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  174.846924][ T6788] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  174.913755][ T6788] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  174.942966][ T4170] ocfs2: Unmounting device (7,3) on (node local)
[  175.125181][ T4178] attempt to access beyond end of device
[  175.125181][ T4178] loop4: rw=2049, want=45104, limit=40427
[  175.275193][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'.
[  175.464490][ T4367] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  175.721018][ T4367] usb 3-1: Using ep0 maxpacket: 32
[  175.855352][ T4367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.885852][ T4367] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00
[  175.906504][ T4367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.920299][ T4367] usb 3-1: config 0 descriptor??
[  175.929855][ T6853] loop3: detected capacity change from 0 to 4096
[  176.008071][ T6866] loop4: detected capacity change from 0 to 256
[  176.041578][ T6853] NILFS (loop3): invalid segment: Checksum error in segment payload
[  176.050206][ T6853] NILFS (loop3): trying rollback from an earlier position
[  176.099580][ T6853] NILFS (loop3): recovery complete
[  176.147193][ T6868] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.384300][ T6878] loop4: detected capacity change from 0 to 1024
[  176.498741][ T6878] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  176.564941][ T6878] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none.
[  176.704665][ T4367] usb 3-1: string descriptor 0 read error: -71
[  176.736954][ T4367] uclogic 0003:5543:006E.0008: failed retrieving string descriptor #200: -71
[  176.748423][ T4367] uclogic 0003:5543:006E.0008: failed retrieving pen parameters: -71
[  176.756563][ T4367] uclogic 0003:5543:006E.0008: failed probing pen v2 parameters: -71
[  176.766114][ T4367] uclogic 0003:5543:006E.0008: failed probing parameters: -71
[  176.777125][ T4367] uclogic: probe of 0003:5543:006E.0008 failed with error -71
[  176.813164][ T4367] usb 3-1: USB disconnect, device number 13
[  176.931217][ T6886] loop3: detected capacity change from 0 to 1024
[  177.029810][ T6874] loop1: detected capacity change from 0 to 40427
[  177.096465][ T6874] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff
[  177.135462][ T6874] F2FS-fs (loop1): invalid crc value
[  177.178631][ T6874] F2FS-fs (loop1): Found nat_bits in checkpoint
[  177.316263][ T6874] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  177.345497][ T6896] loop4: detected capacity change from 0 to 1024
[  177.430389][ T6902] loop2: detected capacity change from 0 to 1024
[  177.455788][ T6896] EXT4-fs (loop4): Unrecognized mount option "fscontext=sysadm_u" or missing value
[  177.504522][ T6896] netlink: 96 bytes leftover after parsing attributes in process `syz.4.946'.
[  177.535762][ T6896] netlink: 'syz.4.946': attribute type 5 has an invalid length.
[  177.579648][ T6896] netlink: 44 bytes leftover after parsing attributes in process `syz.4.946'.
[  177.623226][  T154] hfsplus: b-tree write err: -5, ino 4
[  177.709694][ T5606] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  177.824579][ T6911] loop2: detected capacity change from 0 to 128
[  177.892204][ T6911] VFS: Found a Xenix FS (block size = 512) on device loop2
[  177.932655][ T6911] attempt to access beyond end of device
[  177.932655][ T6911] loop2: rw=2049, want=2066843071, limit=128
[  177.976843][ T6911] Buffer I/O error on dev loop2, logical block 2066843070, lost async page write
[  178.024545][ T6911] attempt to access beyond end of device
[  178.024545][ T6911] loop2: rw=2049, want=8767745, limit=128
[  178.046963][ T6911] Buffer I/O error on dev loop2, logical block 8767744, lost async page write
[  178.059998][ T6911] attempt to access beyond end of device
[  178.059998][ T6911] loop2: rw=2049, want=13269810, limit=128
[  178.076900][ T6911] Buffer I/O error on dev loop2, logical block 13269809, lost async page write
[  178.116404][ T6911] attempt to access beyond end of device
[  178.116404][ T6911] loop2: rw=2049, want=1158, limit=128
[  178.138530][ T6911] Buffer I/O error on dev loop2, logical block 1157, lost async page write
[  178.148347][ T6920] netlink: 'syz.1.956': attribute type 2 has an invalid length.
[  178.156931][ T5606] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  178.174356][ T5606] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  178.184584][ T6911] attempt to access beyond end of device
[  178.184584][ T6911] loop2: rw=2049, want=3211265, limit=128
[  178.205515][ T6911] Buffer I/O error on dev loop2, logical block 3211264, lost async page write
[  178.237116][ T6911] attempt to access beyond end of device
[  178.237116][ T6911] loop2: rw=2049, want=8768636, limit=128
[  178.263035][ T6911] Buffer I/O error on dev loop2, logical block 8768635, lost async page write
[  178.294419][ T6911] attempt to access beyond end of device
[  178.294419][ T6911] loop2: rw=2049, want=13466418, limit=128
[  178.314569][ T6911] Buffer I/O error on dev loop2, logical block 13466417, lost async page write
[  178.335436][ T6911] attempt to access beyond end of device
[  178.335436][ T6911] loop2: rw=2049, want=209286, limit=128
[  178.356888][ T6911] Buffer I/O error on dev loop2, logical block 209285, lost async page write
[  178.408664][ T4171] sysv_free_block: trying to free block not in datazone
[  178.411528][ T5606] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  178.420058][ T4171] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  178.425622][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.444703][ T5606] usb 4-1: Product: syz
[  178.456936][ T5606] usb 4-1: Manufacturer: syz
[  178.462232][ T5606] usb 4-1: SerialNumber: syz
[  178.483677][ T5606] usb 4-1: config 0 descriptor??
[  178.501098][ T6904] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  178.511758][ T6904] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  178.543788][ T4232] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  178.745978][ T6904] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  178.769567][ T6904] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  178.831984][ T4232] usb 2-1: Using ep0 maxpacket: 8
[  178.858681][ T6941] loop4: detected capacity change from 0 to 1024
[  178.884027][ T6941] EXT4-fs (loop4): Ignoring removed nobh option
[  178.897461][ T6941] EXT4-fs (loop4): Ignoring removed bh option
[  178.904750][ T6941] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  178.956530][ T6941] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[  178.960496][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  179.031441][ T6934] loop2: detected capacity change from 0 to 32768
[  179.054173][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  179.064870][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  179.085671][ T4232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  179.089755][ T6934] XFS: noikeep mount option is deprecated.
[  179.102171][ T4232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  179.117633][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.158483][ T6934] XFS (loop2): Mounting V5 Filesystem
[  179.276427][ T5606] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  179.325422][ T6934] XFS (loop2): Ending clean mount
[  179.343949][ T6934] XFS (loop2): Quotacheck needed: Please wait.
[  179.379996][ T6961] program syz.4.970 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  179.399568][ T4232] usb 2-1: GET_CAPABILITIES returned 0
[  179.405609][ T4232] usbtmc 2-1:16.0: can't read capabilities
[  179.446554][ T6934] XFS (loop2): Quotacheck: Done.
[  179.526671][ T4171] XFS (loop2): Unmounting Filesystem
[  179.532567][ T5606] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  179.547064][ T5606] usb 4-1: USB disconnect, device number 12
[  179.658541][ T5593] usb 2-1: USB disconnect, device number 12
[  179.869269][ T5584] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  179.965766][ T6968] loop2: detected capacity change from 0 to 4096
[  180.037072][ T6968] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  180.049356][ T6968] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096)
[  180.104575][ T4248] udevd[4248]: incorrect nilfs2 checksum on /dev/loop2
[  180.119886][ T6969] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.136323][ T5584] usb 5-1: Using ep0 maxpacket: 32
[  180.208798][ T6975] device team_slave_0 entered promiscuous mode
[  180.286093][ T5584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 36975, setting to 1024
[  180.318248][ T5584] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  180.510799][ T5584] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  180.538597][ T5606] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  180.547193][ T5584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.556141][ T5584] usb 5-1: Product: syz
[  180.560575][ T5584] usb 5-1: Manufacturer: syz
[  180.566173][ T5584] usb 5-1: SerialNumber: syz
[  180.591462][ T5584] usb 5-1: config 0 descriptor??
[  180.621569][ T6963] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  180.898634][ T5584] usb 5-1: USB disconnect, device number 6
[  181.006611][ T5606] usb 3-1: config 150 has an invalid interface number: 204 but max is 1
[  181.022316][ T5606] usb 3-1: config 150 has no interface number 0
[  181.044683][ T5606] usb 3-1: config 150 interface 204 has no altsetting 0
[  181.052834][ T5606] usb 3-1: config 150 interface 1 has no altsetting 0
[  181.120088][ T1231] wlan0: Trigger new scan to find an IBSS to join
[  181.165298][ T1231] ------------[ cut here ]------------
[  181.171291][ T1231] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40
[  181.182202][ T1231] WARNING: CPU: 1 PID: 1231 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880
[  181.192370][ T1231] Modules linked in:
[  181.196454][ T1231] CPU: 1 PID: 1231 Comm: kworker/u4:4 Not tainted 5.15.185-syzkaller #0
[  181.204871][ T1231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  181.214983][ T1231] Workqueue: phy11 ieee80211_scan_work
[  181.220516][ T1231] RIP: 0010:__rate_control_send_low+0x630/0x880
[  181.226839][ T1231] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 20 27 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 60 27 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff
[  181.246554][ T1231] RSP: 0018:ffffc900056d7488 EFLAGS: 00010246
[  181.252739][ T1231] RAX: 860d67d94d451c00 RBX: 000000000000000c RCX: ffff888022de9dc0
[  181.259164][ T5606] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  181.260794][ T1231] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[  181.276857][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.278195][ T1231] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff52000adadf5
[  181.278219][ T1231] R10: fffff52000adadf5 R11: 1ffff92000adadf4 R12: ffff888029cf03e8
[  181.278236][ T1231] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040
[  181.278252][ T1231] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  181.287819][ T5606] usb 3-1: Product: syz
[  181.294740][ T1231] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  181.294772][ T1231] CR2: 00007fd40dae62d8 CR3: 0000000062e9d000 CR4: 00000000003506e0
[  181.294791][ T1231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  181.294804][ T1231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  181.294818][ T1231] Call Trace:
[  181.294826][ T1231]  <TASK>
[  181.294850][ T1231]  rate_control_send_low+0x194/0x790
[  181.294881][ T1231]  ? ieee80211_scan_work+0x4ea/0x1b40
[  181.294907][ T1231]  rate_control_get_rate+0x207/0x5c0
[  181.294940][ T1231]  ieee80211_tx_h_rate_ctrl+0xac5/0x1700
[  181.294985][ T1231]  ? ieee80211_tx_h_select_key+0x1680/0x1680
[  181.295018][ T1231]  ? sta_info_hash_lookup+0x53e/0x580
[  181.295047][ T1231]  ? ieee80211_queue_skb+0xd0/0x2120
[  181.295071][ T1231]  invoke_tx_handlers_late+0xaa/0x16a0
[  181.310365][ T5606] usb 3-1: Manufacturer: syz
[  181.311471][ T1231]  ? ieee80211_tx_h_select_key+0x1172/0x1680
[  181.311508][ T1231]  ? sta_info_get+0x220/0x230
[  181.321580][ T5606] usb 3-1: SerialNumber: syz
[  181.325112][ T1231]  ? invoke_tx_handlers_early+0xa11/0x1d10
[  181.325152][ T1231]  ieee80211_tx+0x2a9/0x410
[  181.325180][ T1231]  ? ieee80211_skb_resize+0x630/0x630
[  181.325233][ T1231]  __ieee80211_tx_skb_tid_band+0x165/0x200
[  181.325260][ T1231]  ieee80211_scan_state_send_probe+0x526/0x8a0
[  181.325308][ T1231]  ieee80211_scan_work+0x4ea/0x1b40
[  181.325359][ T1231]  process_one_work+0x863/0x1000
[  181.466073][ T1231]  ? worker_detach_from_pool+0x240/0x240
[  181.471936][ T1231]  ? lockdep_hardirqs_off+0x70/0x100
[  181.477386][ T1231]  ? _raw_spin_lock_irq+0xab/0xe0
[  181.482444][ T1231]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  181.487915][ T1231]  ? wq_worker_running+0x97/0x170
[  181.492980][ T1231]  worker_thread+0xaa8/0x12a0
[  181.497830][ T1231]  kthread+0x436/0x520
[  181.501925][ T1231]  ? rcu_lock_release+0x20/0x20
[  181.506949][ T1231]  ? kthread_blkcg+0xd0/0xd0
[  181.511571][ T1231]  ret_from_fork+0x1f/0x30
[  181.516096][ T1231]  </TASK>
[  181.519586][ T1231] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  181.526879][ T1231] CPU: 1 PID: 1231 Comm: kworker/u4:4 Not tainted 5.15.185-syzkaller #0
[  181.535233][ T1231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  181.545301][ T1231] Workqueue: phy11 ieee80211_scan_work
[  181.550771][ T1231] Call Trace:
[  181.554055][ T1231]  <TASK>
[  181.556983][ T1231]  dump_stack_lvl+0x168/0x230
[  181.561664][ T1231]  ? show_regs_print_info+0x20/0x20
[  181.566907][ T1231]  ? load_image+0x3b0/0x3b0
[  181.571451][ T1231]  panic+0x2c9/0x7f0
[  181.575348][ T1231]  ? bpf_jit_dump+0xd0/0xd0
[  181.579890][ T1231]  ? ret_from_fork+0x1f/0x30
[  181.584501][ T1231]  ? __rate_control_send_low+0x630/0x880
[  181.590156][ T1231]  __warn+0x248/0x2b0
[  181.594245][ T1231]  ? __rate_control_send_low+0x630/0x880
[  181.599882][ T1231]  report_bug+0x1b7/0x2e0
[  181.604227][ T1231]  handle_bug+0x3a/0x70
[  181.608405][ T1231]  exc_invalid_op+0x16/0x40
[  181.612951][ T1231]  asm_exc_invalid_op+0x16/0x20
[  181.617823][ T1231] RIP: 0010:__rate_control_send_low+0x630/0x880
[  181.624076][ T1231] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 20 27 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 60 27 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff
[  181.634853][ T5606] xr_serial 3-1:150.204: xr_serial converter detected
[  181.643828][ T1231] RSP: 0018:ffffc900056d7488 EFLAGS: 00010246
[  181.643858][ T1231] RAX: 860d67d94d451c00 RBX: 000000000000000c RCX: ffff888022de9dc0
[  181.643872][ T1231] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[  181.643885][ T1231] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff52000adadf5
[  181.643899][ T1231] R10: fffff52000adadf5 R11: 1ffff92000adadf4 R12: ffff888029cf03e8
[  181.643913][ T1231] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040
[  181.643946][ T1231]  ? __rate_control_send_low+0x630/0x880
[  181.702567][ T1231]  rate_control_send_low+0x194/0x790
[  181.707892][ T1231]  ? ieee80211_scan_work+0x4ea/0x1b40
[  181.713287][ T1231]  rate_control_get_rate+0x207/0x5c0
[  181.718587][ T1231]  ieee80211_tx_h_rate_ctrl+0xac5/0x1700
[  181.724237][ T1231]  ? ieee80211_tx_h_select_key+0x1680/0x1680
[  181.730238][ T1231]  ? sta_info_hash_lookup+0x53e/0x580
[  181.735627][ T1231]  ? ieee80211_queue_skb+0xd0/0x2120
[  181.740919][ T1231]  invoke_tx_handlers_late+0xaa/0x16a0
[  181.746416][ T1231]  ? ieee80211_tx_h_select_key+0x1172/0x1680
[  181.752425][ T1231]  ? sta_info_get+0x220/0x230
[  181.757124][ T1231]  ? invoke_tx_handlers_early+0xa11/0x1d10
[  181.762934][ T1231]  ieee80211_tx+0x2a9/0x410
[  181.767446][ T1231]  ? ieee80211_skb_resize+0x630/0x630
[  181.772865][ T1231]  __ieee80211_tx_skb_tid_band+0x165/0x200
[  181.778698][ T1231]  ieee80211_scan_state_send_probe+0x526/0x8a0
[  181.784876][ T1231]  ieee80211_scan_work+0x4ea/0x1b40
[  181.790118][ T1231]  process_one_work+0x863/0x1000
[  181.795184][ T1231]  ? worker_detach_from_pool+0x240/0x240
[  181.800850][ T1231]  ? lockdep_hardirqs_off+0x70/0x100
[  181.806153][ T1231]  ? _raw_spin_lock_irq+0xab/0xe0
[  181.811190][ T1231]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  181.816572][ T1231]  ? wq_worker_running+0x97/0x170
[  181.821610][ T1231]  worker_thread+0xaa8/0x12a0
[  181.826335][ T1231]  kthread+0x436/0x520
[  181.830405][ T1231]  ? rcu_lock_release+0x20/0x20
[  181.835253][ T1231]  ? kthread_blkcg+0xd0/0xd0
[  181.839847][ T1231]  ret_from_fork+0x1f/0x30
[  181.844282][ T1231]  </TASK>
[  181.847541][ T1231] Kernel Offset: disabled
[  181.852229][ T1231] Rebooting in 86400 seconds..