last executing test programs:

2m10.936712963s ago: executing program 3 (id=412):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r1=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x3}}], 0x1, 0x2040000, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001d00070f000000200300000007000000", @ANYRES32=r1, @ANYBLOB="5a006708060005"], 0x24}}, 0x0)

2m10.917016574s ago: executing program 3 (id=414):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2m10.795665601s ago: executing program 3 (id=415):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2m10.624658571s ago: executing program 3 (id=418):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x1000048, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m9.436503416s ago: executing program 3 (id=425):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xc})
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)

2m7.596741007s ago: executing program 3 (id=443):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0xc00d, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m7.306167023s ago: executing program 32 (id=443):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x2320, 0x0, 0x0, 0xc00d, 0x304c, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m51.048753231s ago: executing program 4 (id=581):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x9}, 0x8)
sendto$inet6(r0, &(0x7f0000000200)='\x00', 0x1, 0x20000001, &(0x7f0000000240)={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x9}, 0x1c)
setsockopt(r0, 0x84, 0x7, 0x0, 0x0)

1m50.102689893s ago: executing program 4 (id=585):
r0 = syz_io_uring_setup(0x6d5d, &(0x7f0000000080)={0x0, 0x5b2c, 0x0, 0x0, 0x2f1}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x4044, 0x1})
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

1m49.854169367s ago: executing program 4 (id=586):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setresuid(0x0, 0xee00, 0x0)
syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '/!&'}}]}, 0x0, 0x52a, &(0x7f00000001c0)="$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")

1m49.386122593s ago: executing program 4 (id=588):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000002c0)={[{@creator={'creator', 0x3d, "1c4cdc1a"}}, {@type={'type', 0x3d, "e833026f"}}, {@gid}, {@uid}, {}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "338be97f"}}, {}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0x20, 0x6fe, &(0x7f0000000480)="$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")
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

1m49.156566106s ago: executing program 4 (id=590):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0)

1m48.72437566s ago: executing program 4 (id=595):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000080)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffe, "1351bf86fbeac4bda3526263e9ab7f2efa3271beb2c25933c29f8c8042896630", "4c5fe5a8a31b7f7977754d2b5b532aad8f26748a424dac4d3a54c93ebe36b823b9095fe6997bab40317c5fb342065742", "0e1972456a0808b1e951a8ef00339521f9edf79017dfb7ca2383b495", {"484d0ec3fc64230969f8861b64aa8b7a", "0bf44f075c48d5f0fb81b3bd9c429b1f"}}}}}}}, 0x0)

1m48.403994467s ago: executing program 33 (id=595):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000080)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffe, "1351bf86fbeac4bda3526263e9ab7f2efa3271beb2c25933c29f8c8042896630", "4c5fe5a8a31b7f7977754d2b5b532aad8f26748a424dac4d3a54c93ebe36b823b9095fe6997bab40317c5fb342065742", "0e1972456a0808b1e951a8ef00339521f9edf79017dfb7ca2383b495", {"484d0ec3fc64230969f8861b64aa8b7a", "0bf44f075c48d5f0fb81b3bd9c429b1f"}}}}}}}, 0x0)

5.375095343s ago: executing program 2 (id=1579):
r0 = syz_io_uring_setup(0x67e8, &(0x7f0000000000), &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x14, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x5f9117fecd4dbe6c, 0x1})
io_uring_enter(r0, 0x5ae7, 0x0, 0x0, 0x0, 0x0)

5.196120343s ago: executing program 2 (id=1583):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

4.960726546s ago: executing program 2 (id=1585):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r0, 0x1, 0x9a, &(0x7f0000000140)=""/154)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)

3.021200153s ago: executing program 0 (id=1615):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x1, 0xff, 0x3, 0x8, 0xfffffff9}, 0x14)

2.821148274s ago: executing program 0 (id=1606):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000100000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0)

2.70983254s ago: executing program 0 (id=1607):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000001d00)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5e7, &(0x7f0000000680)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

2.599619457s ago: executing program 6 (id=1609):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="747970653d4fc1f9cb2c636f6465706167653d69736f383835392d362c696f636861727365743d63703835372c71756965742c706172743d3078303030303030303030303030303030352c00"], 0x11, 0x2b6, &(0x7f0000000200)="$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")
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x0, 0xec)
fchown(r0, 0x0, 0x0)

2.433246426s ago: executing program 1 (id=1610):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa84000001"], 0x0)

2.380994489s ago: executing program 0 (id=1611):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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")
r1 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x48, 0xffffffffffffffff)
unshare(0x60000600)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @desc3}, 0x0, r1})

2.374634739s ago: executing program 6 (id=1612):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc001001b}]})

2.066730416s ago: executing program 6 (id=1613):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010000003a080000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000003c0012800e0001006970366772657461700000002800028014001000fc02000000000000000000000000000106000f000000000006000e"], 0x5c}}, 0x0)

2.00470078s ago: executing program 2 (id=1614):
r0 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x140, 0x4)
recvmmsg(r0, &(0x7f0000001480), 0x5d, 0x40010142, 0x0)

1.948613153s ago: executing program 1 (id=1616):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000)

1.910389165s ago: executing program 1 (id=1617):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote})

1.782017351s ago: executing program 1 (id=1619):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94)
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000080)=[{{<r1=>0x80000000, <r2=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{0x80000000, r2, 0x2, [0x1, 0x8]}, {r1, 0x0, 0x0, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]})

1.778042792s ago: executing program 2 (id=1629):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@autodefrag}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2)

1.760361993s ago: executing program 6 (id=1620):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00')
writev(r0, &(0x7f0000000b80)=[{&(0x7f0000002b00)="f8", 0x1}], 0x1)

1.586517532s ago: executing program 6 (id=1621):
pipe2$watch_queue(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="010000"])
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1)
close_range(r0, r1, 0x0)

1.585407703s ago: executing program 1 (id=1632):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

942.929838ms ago: executing program 6 (id=1623):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000003c0)={0x0, 0x11, 0x1, "fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

939.187698ms ago: executing program 0 (id=1634):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff28282929882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xe0}], 0x1}, 0x0)

938.656858ms ago: executing program 1 (id=1624):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000001e00)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

714.364921ms ago: executing program 0 (id=1625):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f00000001c0)='\x00'}, {0x2, 0x4000, 0x0, 0x0}], 0x2})

712.142101ms ago: executing program 5 (id=1626):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x7f00, 0x100, 0x551}})
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}})

550.4818ms ago: executing program 5 (id=1627):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4)
sendto$inet6(r0, &(0x7f0000000340)="f4", 0x29fbc, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x72d, @loopback}, 0x1c)

549.73584ms ago: executing program 2 (id=1640):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, 0x0)

365.015ms ago: executing program 5 (id=1628):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f00000046c0)="1121198bcb721b3e638308b332bc70c71caae5e7708170e31af244104c5437f11f9b1a3e5b6cb08d82fc7b54576d46ba9f54bbc52cd2aff604aa3dda9c69a67145efed1cb05b8f342e771b39b88b621ed642359116c41e617b131b8761d7a117f97b", 0x62}, {&(0x7f0000004780)="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", 0x23f}], 0x2}}], 0x1, 0x0)

280.259965ms ago: executing program 5 (id=1630):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/194, 0xc2}], 0x1)

105.309314ms ago: executing program 5 (id=1631):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002a00)=0x1914, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x801)
recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/31, 0x1f}, 0x5}], 0x1, 0x12141, 0x0)

0s ago: executing program 5 (id=1633):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45ce, 0x4)
recvmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x120, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

1497][ T6449] Call Trace:
[  153.964850][ T6449]  <TASK>
[  153.967816][ T6449]  dump_stack_lvl+0x188/0x250
[  153.972594][ T6449]  ? show_regs_print_info+0x20/0x20
[  153.978002][ T6449]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  153.984196][ T6449]  f2fs_is_valid_blkaddr+0xc7e/0x1250
[  153.989726][ T6449]  f2fs_map_blocks+0xbcd/0x3300
[  153.994669][ T6449]  ? f2fs_force_buffered_io+0x680/0x680
[  154.000277][ T6449]  ? xa_load+0x276/0x2a0
[  154.004585][ T6449]  f2fs_mpage_readpages+0xc95/0x2260
[  154.009935][ T6449]  ? dquot_release_reservation_block+0xa0/0xa0
[  154.016160][ T6449]  ? f2fs_is_compress_backend_ready+0x99/0x120
[  154.022575][ T6449]  ? f2fs_readahead+0x163/0x2f0
[  154.027460][ T6449]  ? f2fs_set_data_page_dirty+0xad0/0xad0
[  154.033241][ T6449]  read_pages+0x175/0x930
[  154.037634][ T6449]  ? page_cache_ra_unbounded+0x940/0x940
[  154.043420][ T6449]  ? add_to_page_cache_lru+0x2a8/0x4a0
[  154.048957][ T6449]  page_cache_ra_unbounded+0x838/0x940
[  154.054482][ T6449]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  154.061036][ T6449]  f2fs_readdir+0x496/0xda0
[  154.065714][ T6449]  ? f2fs_fill_dentries+0xd10/0xd10
[  154.070957][ T6449]  ? end_current_label_crit_section+0x14b/0x170
[  154.077431][ T6449]  ? iterate_dir+0x10d/0x560
[  154.082078][ T6449]  ? down_read_killable+0x1ce/0x340
[  154.087313][ T6449]  ? fsnotify_perm+0x254/0x560
[  154.092121][ T6449]  iterate_dir+0x218/0x560
[  154.096582][ T6449]  ? f2fs_fill_dentries+0xd10/0xd10
[  154.101834][ T6449]  __se_sys_getdents+0xf2/0x260
[  154.106738][ T6449]  ? __x64_sys_getdents+0x80/0x80
[  154.111935][ T6449]  ? fillonedir+0x4e0/0x4e0
[  154.112853][   T26] audit: type=1800 audit(1768866491.654:33): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.717" name="file1" dev="loop6" ino=15 res=0 errno=0
[  154.116484][ T6449]  ? vtime_user_exit+0x2c8/0x3e0
[  154.141787][ T6449]  ? lockdep_hardirqs_on+0x94/0x140
[  154.147323][ T6449]  do_syscall_64+0x4c/0xa0
[  154.151874][ T6449]  ? clear_bhb_loop+0x30/0x80
[  154.156600][ T6449]  ? clear_bhb_loop+0x30/0x80
[  154.161329][ T6449]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  154.167295][ T6449] RIP: 0033:0x7f413cd25cb9
[  154.171754][ T6449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.191405][ T6449] RSP: 002b:00007f413af81028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  154.199870][ T6449] RAX: ffffffffffffffda RBX: 00007f413cfa0fa0 RCX: 00007f413cd25cb9
[  154.207879][ T6449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  154.215898][ T6449] RBP: 00007f413cd93bf7 R08: 0000000000000000 R09: 0000000000000000
[  154.223921][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.231940][ T6449] R13: 00007f413cfa1038 R14: 00007f413cfa0fa0 R15: 00007ffccf5d4228
[  154.240086][ T6449]  </TASK>
[  154.246065][ T5234] az6027: usb out operation failed. (-71)
[  154.257054][ T5234] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  154.282563][ T5234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13
[  154.415192][ T5234] dvb-usb: schedule remote query interval to 400 msecs.
[  154.429132][ T5234] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  154.437824][ T6491] program syz.0.719 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  154.470977][ T5234] usb 2-1: USB disconnect, device number 10
[  154.504285][ T6493] loop6: detected capacity change from 0 to 1024
[  154.593687][ T5234] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  154.682670][ T6449] attempt to access beyond end of device
[  154.682670][ T6449] loop5: rw=524288, want=45072, limit=40427
[  154.741021][ T6449] attempt to access beyond end of device
[  154.741021][ T6449] loop5: rw=0, want=45072, limit=40427
[  154.869011][ T6511] loop2: detected capacity change from 0 to 256
[  154.999916][ T6517] loop1: detected capacity change from 0 to 1024
[  155.047144][ T6511] FAT-fs (loop2): Directory bread(block 64) failed
[  155.072144][ T6511] FAT-fs (loop2): Directory bread(block 65) failed
[  155.079431][ T6511] FAT-fs (loop2): Directory bread(block 66) failed
[  155.165392][ T6511] FAT-fs (loop2): Directory bread(block 67) failed
[  155.170905][ T1269] attempt to access beyond end of device
[  155.170905][ T1269] loop5: rw=2049, want=40976, limit=40427
[  155.196721][ T6517] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,noblock_validity,usrjquota=,jqfmt=vfsv1,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  155.223629][ T6511] FAT-fs (loop2): Directory bread(block 68) failed
[  155.230231][ T6511] FAT-fs (loop2): Directory bread(block 69) failed
[  155.361275][ T6511] FAT-fs (loop2): Directory bread(block 70) failed
[  155.361402][ T6517] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.391329][ T6511] FAT-fs (loop2): Directory bread(block 71) failed
[  155.398003][ T6511] FAT-fs (loop2): Directory bread(block 72) failed
[  155.450206][   T26] audit: type=1800 audit(1768866492.984:34): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.730" name="file2" dev="loop1" ino=16 res=0 errno=0
[  155.507743][ T6511] FAT-fs (loop2): Directory bread(block 73) failed
[  155.980613][ T6519] loop6: detected capacity change from 0 to 40427
[  156.103589][ T6519] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff
[  156.159204][ T6519] F2FS-fs (loop6): invalid crc value
[  156.189445][ T6519] F2FS-fs (loop6): Found nat_bits in checkpoint
[  156.362072][ T6519] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  156.440133][   T26] audit: type=1800 audit(1768866493.974:35): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.731" name="file1" dev="loop6" ino=10 res=0 errno=0
[  156.513268][ T6519] F2FS-fs (loop6) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xcc9/0x1820
[  156.547260][ T6519] attempt to access beyond end of device
[  156.547260][ T6519] loop6: rw=2049, want=77904, limit=40427
[  156.953332][ T6592] netlink: 88 bytes leftover after parsing attributes in process `syz.1.750'.
[  157.046223][ T6595] loop0: detected capacity change from 0 to 2048
[  157.195007][ T6595] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  157.259139][ T6595] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.721294][ T6621] bridge0: port 3(syz_tun) entered blocking state
[  157.734976][ T6621] bridge0: port 3(syz_tun) entered disabled state
[  157.747342][ T6621] device syz_tun entered promiscuous mode
[  157.756937][ T6621] bridge0: port 3(syz_tun) entered blocking state
[  157.763920][ T6621] bridge0: port 3(syz_tun) entered forwarding state
[  158.195112][ T6636] set_capacity_and_notify: 1 callbacks suppressed
[  158.195131][ T6636] loop5: detected capacity change from 0 to 4096
[  158.478348][ T5519] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  158.502235][ T5519] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  158.664115][ T6660] netlink: 32 bytes leftover after parsing attributes in process `syz.5.772'.
[  158.674605][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.772'.
[  159.003969][ T6644] loop0: detected capacity change from 0 to 32768
[  159.073952][ T6675] loop5: detected capacity change from 0 to 256
[  159.300987][ T6655] loop6: detected capacity change from 0 to 40427
[  159.338544][ T6683] vcan0: tx address claim with dlc 0
[  159.388945][ T6655] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7
[  159.462714][ T6655] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x1ffff
[  159.492016][ T6655] F2FS-fs (loop6): invalid crc value
[  159.557923][ T6655] F2FS-fs (loop6): Found nat_bits in checkpoint
[  159.675033][ T6690] loop5: detected capacity change from 0 to 256
[  159.727028][ T6655] F2FS-fs (loop6): Start checkpoint disabled!
[  159.747373][ T6655] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  159.800657][ T6690] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  160.145698][ T6708] loop5: detected capacity change from 0 to 64
[  160.339258][ T6716] loop6: detected capacity change from 0 to 524287999
[  160.412387][ T6719] input: syz1 as /devices/virtual/input/input14
[  160.937684][ T6738] loop6: detected capacity change from 0 to 1024
[  161.105958][ T6696] loop1: detected capacity change from 0 to 32768
[  161.138098][ T6304] hfsplus: b-tree write err: -5, ino 3
[  161.280643][ T6696] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.790 (6696)
[  161.306097][ T6750] device team_slave_0 entered promiscuous mode
[  161.313030][ T6750] device team_slave_1 entered promiscuous mode
[  161.370105][ T6696] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  161.396975][ T6752] loop6: detected capacity change from 0 to 1024
[  161.412561][ T6696] BTRFS info (device loop1): enabling auto defrag
[  161.460689][ T6696] BTRFS info (device loop1): force clearing of disk cache
[  161.497809][ T6696] BTRFS info (device loop1): enabling disk space caching
[  161.543447][ T6696] BTRFS info (device loop1): max_inline at 0
[  161.549514][ T6696] BTRFS info (device loop1): disk space caching is enabled
[  161.666556][ T6696] BTRFS info (device loop1): has skinny extents
[  161.698927][ T6752] hfsplus: b-tree write err: -5, ino 3
[  161.738034][ T6760] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  161.814061][ T4212] hfsplus: bad catalog file entry
[  161.819376][ T4212] hfsplus: b-tree write err: -5, ino 3
[  162.099467][ T6742] F2FS-fs (loop2): Found nat_bits in checkpoint
[  162.241379][ T6696] BTRFS info (device loop1): enabling ssd optimizations
[  162.241374][ T4249] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  162.300519][ T6784] netlink: 277 bytes leftover after parsing attributes in process `syz.5.820'.
[  162.375343][ T6696] BTRFS info (device loop1): clearing free space tree
[  162.411318][ T6696] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  162.441052][ T6696] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  162.459614][ T6742] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  162.631414][ T4249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.671958][ T4249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.714744][ T4249] usb 7-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  162.734278][ T4249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.749053][ T4249] usb 7-1: config 0 descriptor??
[  162.772576][ T4189] attempt to access beyond end of device
[  162.772576][ T4189] loop2: rw=2049, want=45104, limit=40427
[  163.258329][ T4249] hid-led 0003:04D8:F372.0005: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.6-1/input0
[  163.347666][ T6756] set_capacity_and_notify: 1 callbacks suppressed
[  163.347682][ T6756] loop0: detected capacity change from 0 to 40427
[  163.440790][ T4249] hid-led 0003:04D8:F372.0005: Greynut Luxafor initialized
[  163.491286][ T4249] usb 7-1: USB disconnect, device number 2
[  163.518586][ T6756] F2FS-fs (loop0): invalid crc value
[  163.526049][ T1325] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[  163.566804][ T6756] F2FS-fs (loop0): Found nat_bits in checkpoint
[  163.583418][ T5234] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[  163.604586][ T5234] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[  163.635672][ T5235] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[  163.661992][ T5234] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[  163.701796][ T5235] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[  163.721064][ T5235] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[  163.757304][ T5235] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[  163.812286][ T5234] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[  163.830645][ T5235] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[  163.873627][ T5235] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[  163.912208][ T6756] F2FS-fs (loop0): Start checkpoint disabled!
[  163.932208][ T6756] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  163.950242][ T5235] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[  164.007756][ T5235] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[  164.024362][ T6801] fido_id[6801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  164.049979][ T5235] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[  164.061452][ T6808] device sit0 entered promiscuous mode
[  164.071098][ T6813] program syz.2.829 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  164.081699][ T5235] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[  164.139419][ T5235] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[  164.159905][ T5234] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[  164.179591][ T5234] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[  164.214074][ T6808] netlink: 'syz.5.827': attribute type 1 has an invalid length.
[  164.282386][ T6808] netlink: 1 bytes leftover after parsing attributes in process `syz.5.827'.
[  164.368074][ T6304] attempt to access beyond end of device
[  164.368074][ T6304] loop0: rw=2049, want=40976, limit=40427
[  164.488895][ T6826] loop2: detected capacity change from 0 to 164
[  164.508122][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.836'.
[  164.678377][ T6832] loop1: detected capacity change from 0 to 512
[  164.835743][ T6836] loop2: detected capacity change from 0 to 16
[  164.884090][ T6832] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,grpjquota=,,errors=continue. Quota mode: writeback.
[  164.911303][ T6832] ext4 filesystem being mounted at /168/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.951511][ T6836] erofs: (device loop2): mounted with root inode @ nid 36.
[  164.974111][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.842'.
[  165.029323][ T6836] attempt to access beyond end of device
[  165.029323][ T6836] loop2: rw=524288, want=32, limit=16
[  165.075705][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.842'.
[  165.131961][ T6836] erofs: (device loop2): z_erofs_readahead: readahead error at page 7 @ nid 89
[  165.141005][ T6836] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89
[  165.256552][ T6836] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89
[  165.256729][ T6836] attempt to access beyond end of device
[  165.256729][ T6836] loop2: rw=524288, want=56, limit=16
[  165.259582][ T6836] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  165.307869][   T26] audit: type=1800 audit(1768866502.844:36): pid=6836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.841" name="file3" dev="loop2" ino=89 res=0 errno=0
[  165.433716][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'.
[  165.551324][ T4406] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  165.911704][ T4406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  165.911739][ T4406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  165.911764][ T4406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  165.911791][ T4406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  165.933851][ T6866] loop1: detected capacity change from 0 to 2048
[  165.997631][ T6866] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  166.027148][ T6869] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.071763][ T4406] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  166.146764][ T4406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.201531][ T4406] usb 6-1: Product: syz
[  166.205770][ T4406] usb 6-1: Manufacturer: syz
[  166.210406][ T4406] usb 6-1: SerialNumber: syz
[  166.269019][ T4406] usb 6-1: config 0 descriptor??
[  166.584658][ T4406] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  166.620979][ T6881] loop1: detected capacity change from 0 to 4096
[  166.785119][ T6853] usb 6-1: Couldn't submit interrupt_out_urb -90
[  166.827446][ T6881] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  166.863616][ T5235] usb 6-1: USB disconnect, device number 2
[  167.080144][ T6889] loop2: detected capacity change from 0 to 1024
[  167.119047][ T6889] EXT4-fs (loop2): Ignoring removed orlov option
[  167.235963][ T6889] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  167.442448][ T6879] loop6: detected capacity change from 0 to 32768
[  167.472475][ T6873] loop0: detected capacity change from 0 to 40427
[  167.584720][ T6873] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  167.611268][ T6873] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  167.658083][ T6873] F2FS-fs (loop0): invalid crc value
[  167.743614][ T6879] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  167.854493][ T6873] F2FS-fs (loop0): Found nat_bits in checkpoint
[  168.068398][ T6873] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  168.081298][ T6873] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  168.259874][ T6891] loop1: detected capacity change from 0 to 32768
[  168.330887][ T6080] ocfs2: Unmounting device (7,6) on (node local)
[  168.494820][ T6896] loop5: detected capacity change from 0 to 32768
[  168.623601][ T6909] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  168.813509][ T6913] loop6: detected capacity change from 0 to 512
[  168.876292][ T6896] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 scanned by syz.5.862 (6896)
[  168.888698][ T6913] EXT4-fs (loop6): Ignoring removed oldalloc option
[  168.929994][ T6913] EXT4-fs (loop6): 1 truncate cleaned up
[  168.964714][ T6913] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: none.
[  169.013369][ T6896] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  169.043304][ T6918] loop0: detected capacity change from 0 to 512
[  169.090096][ T6918] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  169.095682][ T5235] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  169.117175][ T6896] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  169.171642][ T6896] BTRFS info (device loop5): use lzo compression, level 0
[  169.219513][ T6896] BTRFS info (device loop5): using free space tree
[  169.267178][ T6896] BTRFS info (device loop5): has skinny extents
[  169.530914][ T6928] loop6: detected capacity change from 0 to 4096
[  169.551651][ T5235] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.567760][ T5235] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  169.659395][ T6896] BTRFS info (device loop5): enabling ssd optimizations
[  169.667197][ T5235] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  169.677322][ T5235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  169.686377][ T5235] usb 3-1: SerialNumber: syz
[  169.987751][ T5235] usb 3-1: 0:2 : does not exist
[  170.021743][ T5235] usb 3-1: USB disconnect, device number 12
[  170.313362][ T6080] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22.
[  170.319903][ T6080] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  170.334688][ T6806] udevd[6806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.448729][ T6946] loop0: detected capacity change from 0 to 32768
[  170.656588][ T6946] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.874 (6946)
[  171.141581][ T5235] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  171.305734][ T6951] loop5: detected capacity change from 0 to 131072
[  171.341061][ T6946] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  171.375676][ T6946] BTRFS info (device loop0): enabling auto defrag
[  171.382348][ T6974] loop6: detected capacity change from 0 to 512
[  171.401269][ T6946] BTRFS info (device loop0): use no compression
[  171.412392][ T4249] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  171.417983][ T6946] BTRFS info (device loop0): force clearing of disk cache
[  171.431329][ T6951] F2FS-fs (loop5): invalid crc value
[  171.453064][ T6974] EXT4-fs (loop6): orphan cleanup on readonly fs
[  171.469451][ T6974] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.884: bg 0: block 248: padding at end of block bitmap is not set
[  171.480957][ T5235] usb 2-1: Using ep0 maxpacket: 8
[  171.488968][ T6946] BTRFS info (device loop0): max_inline at 4096
[  171.506212][ T6951] F2FS-fs (loop5): Found nat_bits in checkpoint
[  171.511227][ T6974] Quota error (device loop6): write_blk: dquota write failed
[  171.520202][ T6974] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  171.544750][ T6974] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.884: Failed to acquire dquot type 1
[  171.562517][ T6946] BTRFS info (device loop0): disabling free space tree
[  171.574773][ T6946] BTRFS info (device loop0): has skinny extents
[  171.592630][ T6951] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[  171.617129][ T6951] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  171.631563][ T5235] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  171.642654][ T5235] usb 2-1: config 179 has no interface number 0
[  171.657909][ T5235] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  171.670216][ T4249] usb 3-1: Using ep0 maxpacket: 32
[  171.675683][ T6974] EXT4-fs (loop6): 1 truncate cleaned up
[  171.691785][ T5235] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  171.717678][ T6974] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  171.728978][ T5235] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  171.776499][ T5235] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  171.811559][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.836456][ T4249] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.854042][ T5235] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  171.879682][ T6946] BTRFS info (device loop0): enabling ssd optimizations
[  171.888283][ T6946] BTRFS info (device loop0): clearing free space tree
[  171.902756][ T4249] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  171.912861][ T5235] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  171.927256][ T6946] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  171.939687][ T4249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.953003][ T5235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.966389][ T6946] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  171.985338][ T4249] usb 3-1: config 0 descriptor??
[  172.021861][ T6959] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  172.047771][ T4249] hub 3-1:0.0: USB hub found
[  172.231305][ T6806] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (6806)
[  172.261231][ T4249] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  172.476666][ T5235] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input15
[  172.653528][ T5235] usb 2-1: USB disconnect, device number 11
[  172.662007][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  172.670350][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  172.686598][ T5235] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  172.738313][ T4249] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0
[  172.788538][ T7010] netlink: 80 bytes leftover after parsing attributes in process `syz.0.889'.
[  173.031568][ T5243] usb 3-1: USB disconnect, device number 13
[  173.153818][ T7019] loop6: detected capacity change from 0 to 16
[  173.214941][ T7019] erofs: (device loop6): mounted with root inode @ nid 36.
[  173.247456][ T7013] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm
[  173.267341][ T7019] binder: 7017:7019 ioctl c0306201 200000000240 returned -14
[  173.285517][ T7013] netdevsim netdevsim0 netdevsim0: Failed to get key data for SA table
[  173.718422][ T7041] loop6: detected capacity change from 0 to 128
[  173.721620][   T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  173.779252][   T26] audit: type=1326 audit(1768866511.314:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.0.902" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf026cbcb9 code=0x0
[  173.779845][ T7041] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  173.979275][ T7048] loop5: detected capacity change from 0 to 8192
[  174.023051][   T21] usb 2-1: Using ep0 maxpacket: 8
[  174.048100][ T7048] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  174.065151][ T7051] loop6: detected capacity change from 0 to 128
[  174.076533][ T7048] REISERFS (device loop5): using ordered data mode
[  174.100966][ T7048] reiserfs: using flush barriers
[  174.110154][ T7048] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  174.128118][ T7048] REISERFS (device loop5): checking transaction log (loop5)
[  174.141751][   T21] usb 2-1: unable to get BOS descriptor or descriptor too short
[  174.149666][ T7048] REISERFS (device loop5): Using r5 hash to sort names
[  174.157233][ T7048] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  174.212629][   T21] usb 2-1: unable to read config index 0 descriptor/start: -71
[  174.220271][   T21] usb 2-1: can't read configurations, error -71
[  174.231604][ T7051] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  174.242862][ T7051] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  174.361325][ T4249] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  174.532564][ T7061] loop6: detected capacity change from 0 to 1024
[  174.556646][ T7063] loop5: detected capacity change from 0 to 256
[  174.569594][ T7063] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  174.649593][ T7063] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  174.651457][ T4249] usb 3-1: Using ep0 maxpacket: 32
[  174.721606][ T7063] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[  174.779168][ T4393] hfsplus: b-tree write err: -5, ino 4
[  174.841503][ T4249] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  174.861023][ T4249] usb 3-1: config 0 has no interface number 0
[  174.870143][ T4249] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  175.068882][ T7075] netlink: 'syz.6.914': attribute type 9 has an invalid length.
[  175.091537][ T4249] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  175.119217][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.150314][ T4249] usb 3-1: Product: syz
[  175.168177][ T4249] usb 3-1: Manufacturer: syz
[  175.174277][ T4249] usb 3-1: SerialNumber: syz
[  175.212634][ T4249] usb 3-1: config 0 descriptor??
[  175.255224][ T7053] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  175.490185][ T7053] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  175.545629][ T7065] loop1: detected capacity change from 0 to 40427
[  175.575617][ T7065] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  175.600584][ T7065] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  175.675280][ T7065] F2FS-fs (loop1): invalid crc value
[  175.708833][ T7065] F2FS-fs (loop1): Found nat_bits in checkpoint
[  175.810951][ T7100] loop5: detected capacity change from 0 to 16
[  175.875450][ T7100] erofs: (device loop5): mounted with root inode @ nid 36.
[  175.889513][ T7065] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  175.896183][ T7103] loop0: detected capacity change from 0 to 512
[  175.913409][ T7065] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  175.921051][   T26] audit: type=1800 audit(1768866513.454:38): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.922" name="file1" dev="loop5" ino=86 res=0 errno=0
[  175.977948][ T7103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  176.041290][ T7065] attempt to access beyond end of device
[  176.041290][ T7065] loop1: rw=2049, want=45104, limit=40427
[  176.053409][ T7103] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  176.106463][ T7103] EXT4-fs (loop0): shut down requested (1)
[  176.192047][ T4249] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  176.218654][ T4249] asix: probe of 3-1:0.188 failed with error -71
[  176.280640][ T4249] usb 3-1: USB disconnect, device number 14
[  176.478769][ T7115] netlink: 56 bytes leftover after parsing attributes in process `syz.0.928'.
[  176.561418][ T7115] netlink: 'syz.0.928': attribute type 2 has an invalid length.
[  176.742936][ T7125] loop6: detected capacity change from 0 to 16
[  176.831943][ T7125] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  177.136071][ T7132] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  177.313081][ T7141] loop6: detected capacity change from 0 to 256
[  177.420763][ T7141] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[  177.505614][ T7147] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  177.581973][ T7147] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  177.725027][ T7153] hfsplus: invalid file type 0113366 for inode 2
[  177.811735][ T7153] hfsplus: failed to load root directory
[  178.142720][ T5049] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  178.681508][ T5049] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  178.719230][ T5049] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.778180][ T5049] usb 7-1: Product: syz
[  178.783278][ T5049] usb 7-1: Manufacturer: syz
[  178.787929][ T5049] usb 7-1: SerialNumber: syz
[  179.129532][ T7198] netlink: 'syz.5.964': attribute type 16 has an invalid length.
[  179.200971][ T7168] set_capacity_and_notify: 3 callbacks suppressed
[  179.200988][ T7168] loop1: detected capacity change from 0 to 32768
[  179.301463][ T5049] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  179.406700][ T7168] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  179.438885][ T7168] (syz.1.951,7168,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  179.457045][ T7168] (syz.1.951,7168,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  179.465732][ T7168] (syz.1.951,7168,0):ocfs2_mknod:298 ERROR: status = -2
[  179.472922][ T7168] (syz.1.951,7168,0):ocfs2_mknod:502 ERROR: status = -2
[  179.480316][ T7168] (syz.1.951,7168,0):ocfs2_mkdir:659 ERROR: status = -2
[  179.498900][ T7168] (syz.1.951,7168,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  179.527665][ T7168] (syz.1.951,7168,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  179.537316][ T7168] (syz.1.951,7168,0):ocfs2_link:762 ERROR: status = -2
[  179.554630][ T7168] (syz.1.951,7168,0):ocfs2_link:839 ERROR: status = -2
[  179.641394][ T5049] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71
[  179.667948][ T4191] ocfs2: Unmounting device (7,1) on (node local)
[  179.674915][ T5049] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  179.738099][ T5049] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  179.792161][ T5049] lan78xx: probe of 7-1:1.0 failed with error -71
[  179.859849][ T5049] usb 7-1: USB disconnect, device number 3
[  179.955098][ T7214] loop5: detected capacity change from 0 to 4096
[  180.061173][ T7214] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  180.188963][ T7214] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  180.288745][ T7214] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  180.289256][ T7227] loop6: detected capacity change from 0 to 128
[  180.325345][ T7214] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  180.379296][ T7232] loop2: detected capacity change from 0 to 512
[  180.386910][ T7214] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  180.411585][ T7227] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  180.431715][ T7214] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  180.477450][ T7227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.488887][ T7232] EXT4-fs (loop2): Ignoring removed oldalloc option
[  180.525383][ T7232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  180.545292][ T7214] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  180.599752][ T7214] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  180.670898][ T7232] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.978: inode has both inline data and extents flags
[  180.690860][ T7214] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  180.701863][ T7214] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  180.722706][ T7227] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  180.751692][ T7232] EXT4-fs (loop2): Remounting filesystem read-only
[  180.764343][ T7232] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.978: couldn't read orphan inode 15 (err -117)
[  180.781667][ T7232] EXT4-fs (loop2): Remounting filesystem read-only
[  180.788327][ T7232] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,oldalloc,journal_ioprio=0x0000000000000003,errors=remount-ro,init_itable=0x00000000000001ff,minixdf,noquota,usrjquota=,. Quota mode: none.
[  180.809426][ T7214] ntfs: volume version 3.1.
[  181.381418][  T150] block nbd0: Possible stuck request ffff888020b48000: control (read@0,4096B). Runtime 90 seconds
[  181.450787][ T7266] loop2: detected capacity change from 0 to 128
[  181.544513][ T7266] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  181.611208][ T5235] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  181.632164][ T7266] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.649644][ T7266] fscrypt (loop2, inode 12): Unsupported encryption flags (0x23)
[  181.700366][ T7273] netlink: 'syz.6.992': attribute type 1 has an invalid length.
[  181.775369][ T7275] loop0: detected capacity change from 0 to 128
[  181.783483][ T7234] loop1: detected capacity change from 0 to 32768
[  181.825440][ T7278] loop2: detected capacity change from 0 to 512
[  181.834846][ T7279] netlink: 1 bytes leftover after parsing attributes in process `syz.6.994'.
[  181.856702][ T7278] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  181.869651][ T7234] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.979 (7234)
[  181.899233][ T5235] usb 6-1: Using ep0 maxpacket: 8
[  181.908577][ T7275] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  181.976602][ T7275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.003488][ T7234] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  182.041684][ T5235] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  182.060436][ T5235] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  182.061705][ T7234] BTRFS info (device loop1): turning on async discard
[  182.102248][ T7234] BTRFS info (device loop1): setting nodatacow, compression disabled
[  182.113028][ T5235] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  182.135841][ T7275] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  182.176386][ T7234] BTRFS info (device loop1): max_inline at 0
[  182.186761][ T5235] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  182.227435][ T7234] BTRFS info (device loop1): using free space tree
[  182.244546][ T7234] BTRFS info (device loop1): has skinny extents
[  182.254681][ T5235] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  182.297074][ T5235] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  182.306981][ T5235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.651310][ T5235] usb 6-1: GET_CAPABILITIES returned ffffffad
[  182.657486][ T5235] usbtmc 6-1:16.0: can't read capabilities
[  182.669748][ T7291] loop2: detected capacity change from 0 to 4096
[  182.925609][ T7281] loop6: detected capacity change from 0 to 32768
[  182.957565][ T4249] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  183.151991][ T5234] usb 6-1: USB disconnect, device number 3
[  183.164999][ T7291] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  183.180796][ T7281] XFS (loop6): Mounting V5 Filesystem
[  183.335898][ T7281] XFS (loop6): Ending clean mount
[  183.354181][ T7281] XFS (loop6): Quotacheck needed: Please wait.
[  183.421394][ T4249] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  183.451178][ T4249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.488443][ T4249] usb 1-1: config 0 descriptor??
[  183.560074][ T7281] XFS (loop6): Quotacheck: Done.
[  183.713759][ T6080] XFS (loop6): Unmounting Filesystem
[  183.804403][ T4249] kaweth 1-1:0.0: Firmware present in device.
[  183.849654][ T7324] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  183.861737][ T7324] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.956400][ T7324] fscrypt (loop5, inode 12): Unsupported encryption flags (0x23)
[  184.011375][ T4249] kaweth 1-1:0.0: Statistics collection: 0
[  184.017507][ T4249] kaweth 1-1:0.0: Multicast filter limit: 0
[  184.037875][ T4249] kaweth 1-1:0.0: MTU: 0
[  184.042266][ T4249] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00
[  184.380732][ T7338] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1007'.
[  184.441355][ T4249] kaweth 1-1:0.0: Error setting SOFS wait
[  184.447265][ T4249] kaweth: probe of 1-1:0.0 failed with error -5
[  184.469232][ T7340] netlink: 'syz.5.1006': attribute type 1 has an invalid length.
[  184.492027][ T4249] usb 1-1: USB disconnect, device number 12
[  184.615933][ T7344] set_capacity_and_notify: 2 callbacks suppressed
[  184.615950][ T7344] loop5: detected capacity change from 0 to 512
[  184.728668][ T7350] comedi comedi0: das16m1: I/O port conflict (0x501,8)
[  184.794175][ T7344] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  184.936490][ T7353] loop6: detected capacity change from 0 to 4096
[  184.961393][   T21] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  185.045406][ T7353] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  185.211226][   T21] usb 2-1: Using ep0 maxpacket: 8
[  185.331574][   T21] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  185.339921][   T21] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  185.392363][   T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  185.393331][ T7362] loop6: detected capacity change from 0 to 128
[  185.421215][   T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  185.455347][ T7362] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  185.459674][   T21] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  185.479513][ T7362] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.524112][ T7362] fscrypt (loop6, inode 12): Unsupported encryption flags (0x23)
[  185.554014][   T21] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  185.569494][ T7351] loop2: detected capacity change from 0 to 32768
[  185.597220][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.618541][ T7351] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1009 (7351)
[  185.715505][ T7351] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  185.754805][ T7351] BTRFS info (device loop2): turning on async discard
[  185.779897][ T7351] BTRFS info (device loop2): setting nodatacow, compression disabled
[  185.799491][ T7351] BTRFS info (device loop2): max_inline at 0
[  185.807290][ T7351] BTRFS info (device loop2): using free space tree
[  185.818653][ T7351] BTRFS info (device loop2): has skinny extents
[  185.904108][ T7357] loop5: detected capacity change from 0 to 32768
[  185.941503][   T21] usb 2-1: GET_CAPABILITIES returned ffffffad
[  185.951563][   T21] usbtmc 2-1:16.0: can't read capabilities
[  186.057070][ T7357] XFS (loop5): Mounting V5 Filesystem
[  186.126639][ T7357] XFS (loop5): Ending clean mount
[  186.445028][ T4325] usb 2-1: USB disconnect, device number 14
[  186.451955][ T7357] XFS (loop5): Quotacheck needed: Please wait.
[  186.556311][ T7357] XFS (loop5): Quotacheck: Done.
[  186.623218][ T5519] XFS (loop5): Unmounting Filesystem
[  186.797241][ T7395] netlink: 'syz.2.1020': attribute type 1 has an invalid length.
[  186.826376][ T7400] loop0: detected capacity change from 0 to 128
[  186.923333][ T7400] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  186.941357][ T7400] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.012209][ T7406] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1022'.
[  187.064024][ T7400] fscrypt (loop0, inode 12): Unsupported encryption flags (0x23)
[  187.081230][   T21] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  187.130719][ T7411] loop1: detected capacity change from 0 to 256
[  187.144491][ T7413] comedi comedi0: das16m1: I/O port conflict (0x501,8)
[  187.356290][ T7417] loop0: detected capacity change from 0 to 512
[  187.433322][ T7417] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  187.451626][   T21] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  187.459847][   T21] usb 7-1: config 0 has no interface number 0
[  187.664010][ T7428] netlink: 'syz.1.1034': attribute type 1 has an invalid length.
[  187.672197][   T21] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  187.691206][   T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.699300][   T21] usb 7-1: Product: syz
[  187.715761][   T21] usb 7-1: Manufacturer: syz
[  187.720420][   T21] usb 7-1: SerialNumber: syz
[  187.755599][   T21] usb 7-1: config 0 descriptor??
[  187.894194][ T7423] loop5: detected capacity change from 0 to 32768
[  187.920032][ T7423] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1032 (7423)
[  187.946128][ T7423] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  187.955704][ T7423] BTRFS info (device loop5): turning on async discard
[  187.963322][ T7423] BTRFS info (device loop5): setting nodatacow, compression disabled
[  187.972061][ T4325] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  187.979942][ T7423] BTRFS info (device loop5): max_inline at 0
[  187.988218][ T7423] BTRFS info (device loop5): using free space tree
[  187.995303][ T7423] BTRFS info (device loop5): has skinny extents
[  188.021549][   T21] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  188.043229][   T21] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  188.055470][   T21] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  188.068787][   T21] usb 7-1: media controller created
[  188.113395][   T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  188.261626][ T4325] usb 1-1: Using ep0 maxpacket: 8
[  188.401695][ T4325] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  188.419596][ T7454] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1036'.
[  188.428885][ T4325] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  188.463919][ T4325] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  188.478977][ T4325] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  188.494967][ T4325] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  188.512942][ T4325] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  188.526519][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.821465][ T4325] usb 1-1: GET_CAPABILITIES returned ffffffad
[  188.827654][ T4325] usbtmc 1-1:16.0: can't read capabilities
[  189.044652][ T5059] usb 1-1: USB disconnect, device number 13
[  189.241437][   T21] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  189.299173][   T21] usb 7-1: USB disconnect, device number 4
[  189.912804][ T7462] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1038'.
[  189.951661][ T7461] loop1: detected capacity change from 0 to 4096
[  190.033509][ T7460] loop0: detected capacity change from 0 to 4096
[  190.061647][ T7461] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  190.129860][ T7460] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  190.184485][ T7460] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  190.341882][ T5059] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  190.581503][ T5059] usb 6-1: Using ep0 maxpacket: 8
[  190.668976][ T7479] loop1: detected capacity change from 0 to 32768
[  190.691241][ T4249] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  190.733731][ T7479] XFS (loop1): Mounting V5 Filesystem
[  190.813643][ T7479] XFS (loop1): Ending clean mount
[  190.827202][ T7479] XFS (loop1): Quotacheck needed: Please wait.
[  190.861346][ T5059] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  190.870469][ T5059] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.911263][ T5059] usb 6-1: Product: syz
[  190.916680][ T5059] usb 6-1: Manufacturer: syz
[  190.921619][ T5059] usb 6-1: SerialNumber: syz
[  190.929769][ T7479] XFS (loop1): Quotacheck: Done.
[  190.938737][ T5059] usb 6-1: config 0 descriptor??
[  190.984420][ T5059] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  191.011915][ T4191] XFS (loop1): Unmounting Filesystem
[  191.028927][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1049'.
[  191.093545][ T4249] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  191.102818][ T4249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.126694][ T4249] usb 1-1: config 0 descriptor??
[  191.151437][ T5235] Bluetooth: hci1: command 0x0406 tx timeout
[  191.162555][ T5235] Bluetooth: hci3: command 0x0406 tx timeout
[  191.184403][ T4249] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  191.193015][ T5235] Bluetooth: hci0: command 0x0406 tx timeout
[  191.306420][ T7494] comedi comedi0: das16m1: I/O port conflict (0x501,8)
[  191.443347][ T7500] loop1: detected capacity change from 0 to 512
[  191.463003][ T7500] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  191.621588][ T4249] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  191.641222][ T5235] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  191.649064][ T4249] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  191.857065][ T5057] usb 1-1: USB disconnect, device number 14
[  191.881318][ T5059] gspca_sonixj: reg_r err -71
[  191.886109][ T5059] sonixj: probe of 6-1:0.0 failed with error -71
[  191.902837][ T5059] usb 6-1: USB disconnect, device number 4
[  192.061469][ T5235] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  192.069604][ T5235] usb 3-1: config 0 has no interface number 0
[  192.261999][ T5235] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  192.281308][ T5235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.289811][ T5235] usb 3-1: Product: syz
[  192.300263][ T5235] usb 3-1: Manufacturer: syz
[  192.306316][ T5235] usb 3-1: SerialNumber: syz
[  192.329137][ T5235] usb 3-1: config 0 descriptor??
[  192.355439][ T7502] loop6: detected capacity change from 0 to 32768
[  192.391305][ T7502] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1053 (7502)
[  192.461693][ T7504] comedi comedi0: das16m1: I/O port conflict (0x501,8)
[  192.506302][ T7502] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  192.541352][ T7502] BTRFS info (device loop6): turning on async discard
[  192.548297][ T7502] BTRFS info (device loop6): setting nodatacow, compression disabled
[  192.565908][ T7502] BTRFS info (device loop6): max_inline at 0
[  192.574813][ T7502] BTRFS info (device loop6): using free space tree
[  192.601458][ T5235] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  192.611812][ T7502] BTRFS info (device loop6): has skinny extents
[  192.630203][ T5235] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  192.646748][ T5235] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  192.657483][ T5235] usb 3-1: media controller created
[  192.675473][ T5235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  192.851544][ T7530] loop0: detected capacity change from 0 to 8
[  193.019319][ T7530] SQUASHFS error: zlib decompression failed, data probably corrupt
[  193.063137][ T7530] SQUASHFS error: Failed to read block 0x4de: -5
[  193.078630][ T7531] loop5: detected capacity change from 0 to 4096
[  193.161084][ T7530] SQUASHFS error: Failed to read block 0x4e2: -5
[  193.211102][ T7530] SQUASHFS error: Failed to read block 0x9ca: -5
[  193.258532][ T7530] SQUASHFS error: Failed to read block 0x2cf2: -5
[  193.285424][ T7530] SQUASHFS error: Failed to read block 0x52cf2: -5
[  193.318224][ T7530] SQUASHFS error: Failed to read block 0x535f2: -5
[  193.339473][ T7531] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  193.353133][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  193.353148][   T26] audit: type=1800 audit(1768866530.894:39): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1067" name="file1" dev="loop0" ino=5 res=0 errno=0
[  193.811421][ T5235] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  193.859690][ T7544] loop0: detected capacity change from 0 to 256
[  193.898062][ T5235] usb 3-1: USB disconnect, device number 15
[  193.994282][ T5059] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  194.034874][ T7537] loop1: detected capacity change from 0 to 32768
[  194.167662][ T7537] XFS (loop1): Mounting V5 Filesystem
[  194.187885][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.194264][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  194.251322][ T5059] usb 7-1: Using ep0 maxpacket: 8
[  194.279707][ T7537] XFS (loop1): Ending clean mount
[  194.290426][ T7537] XFS (loop1): Quotacheck needed: Please wait.
[  194.378149][ T7537] XFS (loop1): Quotacheck: Done.
[  194.384165][ T5059] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  194.421435][ T5059] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  194.447303][ T5059] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  194.475252][ T5059] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  194.508032][ T5059] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  194.522197][ T4191] XFS (loop1): Unmounting Filesystem
[  194.529583][ T5059] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  194.540210][ T5059] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.770792][ T7551] loop0: detected capacity change from 0 to 32768
[  194.811621][ T5059] usb 7-1: GET_CAPABILITIES returned ffffffad
[  194.817790][ T5059] usbtmc 7-1:16.0: can't read capabilities
[  194.922005][ T7551] XFS (loop0): Mounting V5 Filesystem
[  194.951279][ T5235] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  195.042614][ T5059] usb 7-1: USB disconnect, device number 5
[  195.074444][ T7551] XFS (loop0): Ending clean mount
[  195.094451][ T7551] XFS (loop0): Quotacheck needed: Please wait.
[  195.191240][ T7551] XFS (loop0): Quotacheck: Done.
[  195.245323][ T4185] XFS (loop0): Unmounting Filesystem
[  195.357028][ T7569] loop1: detected capacity change from 0 to 32768
[  195.391836][ T5235] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  195.402740][ T5235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.438491][ T5235] usb 6-1: config 0 descriptor??
[  195.650322][ T7574] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1069'.
[  195.713223][ T7577] loop6: detected capacity change from 0 to 512
[  195.721959][ T5235] kaweth 6-1:0.0: Firmware present in device.
[  195.753861][ T7577] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  195.846507][ T7581] loop2: detected capacity change from 0 to 256
[  195.921576][ T5235] kaweth 6-1:0.0: Statistics collection: 0
[  195.921613][ T5235] kaweth 6-1:0.0: Multicast filter limit: 0
[  195.921629][ T5235] kaweth 6-1:0.0: MTU: 0
[  195.921644][ T5235] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00
[  196.361412][ T5235] kaweth 6-1:0.0: Error setting SOFS wait
[  196.367307][ T5235] kaweth: probe of 6-1:0.0 failed with error -5
[  196.400246][ T5235] usb 6-1: USB disconnect, device number 5
[  198.053603][ T5057] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  198.301332][ T5057] usb 6-1: Using ep0 maxpacket: 16
[  198.428087][ T5057] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  198.466646][ T5057] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.507046][ T5057] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  198.603397][ T5057] usb 6-1: config 0 interface 0 has no altsetting 0
[  198.633854][ T5057] usb 6-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  198.683754][ T5057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.688885][ T7631] loop1: detected capacity change from 0 to 262144
[  198.722911][ T5057] usb 6-1: config 0 descriptor??
[  198.732070][ T7662] loop6: detected capacity change from 0 to 512
[  198.793374][ T7631] F2FS-fs (loop1): invalid crc value
[  198.803491][ T7662] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  198.833139][ T7631] F2FS-fs (loop1): Found nat_bits in checkpoint
[  198.875430][ T7631] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  199.017391][ T7631] F2FS-fs (loop1): inode (7) has corrupted xattr
[  199.230154][ T5057] playstation 0003:054C:0CE6.0007: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.5-1/input0
[  199.246303][ T7679] loop2: detected capacity change from 0 to 256
[  199.291268][ T5235] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  199.342241][ T7679] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  199.431366][ T5057] playstation 0003:054C:0CE6.0007: Invalid reportID received, expected 9 got 89
[  199.458798][ T5057] playstation 0003:054C:0CE6.0007: Failed to retrieve DualSense pairing info: -22
[  199.489240][ T5057] playstation 0003:054C:0CE6.0007: Failed to get MAC address from DualSense
[  199.503075][ T7683] program syz.1.1119 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  199.512540][ T5057] playstation 0003:054C:0CE6.0007: Failed to create dualsense.
[  199.542302][ T5057] playstation: probe of 0003:054C:0CE6.0007 failed with error -22
[  199.581555][ T5235] usb 7-1: Using ep0 maxpacket: 8
[  199.659993][ T5057] usb 6-1: USB disconnect, device number 6
[  199.767010][ T5235] usb 7-1: config index 0 descriptor too short (expected 30, got 18)
[  199.805832][ T7687] fido_id[7687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  199.836479][ T7693] loop2: detected capacity change from 0 to 1024
[  199.907630][ T7693] EXT4-fs (loop2): Ignoring removed orlov option
[  199.969787][ T7693] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,errors=continue,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[  199.992618][ T5235] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  200.031284][ T5235] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.039360][ T5235] usb 7-1: Product: syz
[  200.098613][ T5235] usb 7-1: Manufacturer: syz
[  200.115676][ T5235] usb 7-1: SerialNumber: syz
[  200.162017][ T5235] usb 7-1: config 0 descriptor??
[  200.218256][ T5235] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  200.245311][ T5235] usb 7-1: setting power ON
[  200.290265][ T5235] dvb-usb: bulk message failed: -22 (2/0)
[  200.300461][ T7700] loop1: detected capacity change from 0 to 256
[  200.330622][ T5235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  200.381714][ T5235] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  200.405343][ T7700] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  200.420176][ T5235] usb 7-1: media controller created
[  200.431632][ T7671] dvb-usb: bulk message failed: -22 (3/0)
[  200.478818][ T7671] dvb-usb: bulk message failed: -22 (3/0)
[  200.496304][ T7700] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  200.509576][ T7707] dvb-usb: bulk message failed: -22 (5/0)
[  200.521896][ T5235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  200.559929][ T7702] loop5: detected capacity change from 0 to 4096
[  200.601584][ T5235] usb 7-1: selecting invalid altsetting 6
[  200.622281][ T5235] usb 7-1: digital interface selection failed (-22)
[  200.670161][ T5235] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  200.702129][ T7702] ntfs: volume version 3.1.
[  200.742250][ T5235] usb 7-1: setting power OFF
[  200.746925][ T5235] dvb-usb: bulk message failed: -22 (2/0)
[  200.765623][ T5235] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  200.790902][ T7702] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  200.827247][ T5235] (NULL device *): no alternate interface
[  200.962043][ T5235] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  201.020835][ T5235] usb 7-1: USB disconnect, device number 6
[  201.274974][ T7717] loop5: detected capacity change from 0 to 4096
[  201.391800][ T7728] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.704682][ T7710] loop0: detected capacity change from 0 to 32768
[  201.739808][ T5235] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  202.158232][ T5235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  202.177700][ T5235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  202.210527][ T5235] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  202.245427][ T5235] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  202.265088][ T5235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.288520][ T5235] usb 3-1: config 0 descriptor??
[  202.304673][ T7734] loop6: detected capacity change from 0 to 32768
[  202.369536][ T7734] XFS (loop6): Mounting V5 Filesystem
[  202.410843][ T7734] XFS (loop6): Ending clean mount
[  202.420595][ T7734] XFS (loop6): Quotacheck needed: Please wait.
[  202.445954][ T7310] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  202.507358][ T7734] XFS (loop6): Quotacheck: Done.
[  202.532779][   T26] audit: type=1800 audit(1768866540.064:40): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1140" name="file1" dev="loop6" ino=4422 res=0 errno=0
[  202.561666][ T5235] ath6kl: Failed to submit usb control message: -71
[  202.568340][ T5235] ath6kl: unable to send the bmi data to the device: -71
[  202.581591][ T7734] XFS (loop6): Unmounting Filesystem
[  202.583812][ T5235] ath6kl: Unable to send get target info: -71
[  202.646408][ T5235] ath6kl: Failed to init ath6kl core: -71
[  202.676697][ T5235] ath6kl_usb: probe of 3-1:0.0 failed with error -71
[  202.696977][ T5235] usb 3-1: USB disconnect, device number 16
[  202.905082][ T7310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  202.920656][ T7310] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  202.933405][ T7310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  202.948888][ T7310] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  202.961412][ T7310] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  202.977936][ T7310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.026804][ T7310] usb 6-1: config 0 descriptor??
[  203.092992][ T7760] loop6: detected capacity change from 0 to 256
[  203.151270][ T5057] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  203.183352][ T7760] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d)
[  203.301642][ T7310] hdpvr 6-1:0.0: firmware version 0x88 dated _†=&ˆ}‰¡nDT,«²�öw#Ñð¸ÀÀúúÙOR»‚��îC‰”�f(
[  203.329245][ T7310] hdpvr 6-1:0.0: untested firmware, the driver might not work.
[  203.393269][ T5057] usb 2-1: Using ep0 maxpacket: 16
[  203.441329][ T5235] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  203.511460][ T5057] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  203.540024][ T5057] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  203.551350][ T7310] hdpvr 6-1:0.0: device init failed
[  203.556656][ T7310] hdpvr: probe of 6-1:0.0 failed with error -12
[  203.566476][ T5057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.577498][ T7310] usb 6-1: USB disconnect, device number 7
[  203.587112][ T7770] nbd1: detected capacity change from 0 to 549764202496
[  203.623452][ T4200] block nbd1: Receive control failed (result -104)
[  203.641691][ T5057] usb 2-1: config 0 descriptor??
[  203.694017][ T5057] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18
[  203.881545][ T5235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  203.895382][ T5235] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  203.912206][ T5235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  203.934029][ T5235] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  203.983728][ T5057] bcm5974 2-1:0.0: could not read from device
[  204.021414][ T3546] bcm5974 2-1:0.0: could not read from device
[  204.037614][ T5057] input: failed to attach handler mousedev to device input18, error: -5
[  204.061419][ T5057] usb 2-1: USB disconnect, device number 15
[  204.071257][ T3546] bcm5974 2-1:0.0: could not read from device
[  204.097414][ T3546] bcm5974 2-1:0.0: could not read from device
[  204.142300][ T5235] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  204.159493][ T5235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.200689][ T5235] usb 1-1: Product: syz
[  204.209252][ T5235] usb 1-1: Manufacturer: syz
[  204.217688][ T5235] usb 1-1: SerialNumber: syz
[  204.230243][ T5235] usb 1-1: config 0 descriptor??
[  204.280260][ T7788] loop5: detected capacity change from 0 to 256
[  204.294696][ T5235] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  204.335273][ T7788] exfat: Deprecated parameter 'utf8'
[  204.340660][ T7788] exfat: Deprecated parameter 'namecase'
[  204.357349][ T7788] exfat: Deprecated parameter 'namecase'
[  204.375030][ T7788] exfat: Deprecated parameter 'utf8'
[  204.472580][ T7788] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d)
[  204.561476][ T5235] scsi host1: usb-storage 1-1:0.0
[  204.821563][ T5235] usb 1-1: USB disconnect, device number 15
[  205.996720][ T5235] kernel write not supported for file /207/setgroups (pid: 5235 comm: kworker/0:8)
[  206.122500][ T7847] loop6: detected capacity change from 0 to 1024
[  206.198325][ T7848] overlayfs: statfs failed on './file0'
[  206.614485][ T7828] loop2: detected capacity change from 0 to 32768
[  206.733277][ T7828] XFS (loop2): Mounting V5 Filesystem
[  206.757472][ T7874] loop5: detected capacity change from 0 to 256
[  206.975024][ T7874] FAT-fs (loop5): Directory bread(block 64) failed
[  207.024915][ T7874] FAT-fs (loop5): Directory bread(block 65) failed
[  207.041305][ T7874] FAT-fs (loop5): Directory bread(block 66) failed
[  207.051721][ T7874] FAT-fs (loop5): Directory bread(block 67) failed
[  207.058690][ T7874] FAT-fs (loop5): Directory bread(block 68) failed
[  207.101569][ T7874] FAT-fs (loop5): Directory bread(block 69) failed
[  207.138301][ T7874] FAT-fs (loop5): Directory bread(block 70) failed
[  207.162824][ T7874] FAT-fs (loop5): Directory bread(block 71) failed
[  207.206180][ T7874] FAT-fs (loop5): Directory bread(block 72) failed
[  207.214896][ T7828] XFS (loop2): Ending clean mount
[  207.250169][ T7874] FAT-fs (loop5): Directory bread(block 73) failed
[  207.258902][ T7828] XFS (loop2): Quotacheck needed: Please wait.
[  207.441288][ T7828] XFS (loop2): Quotacheck: Done.
[  207.608209][ T4189] XFS (loop2): Unmounting Filesystem
[  207.741001][ T7904] loop6: detected capacity change from 0 to 65
[  207.843130][ T7902] loop0: detected capacity change from 0 to 8192
[  207.900671][ T7902]  loop0: p1 < > p2 p3 < p5 >
[  207.914828][ T7904] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway
[  207.925635][ T7902] loop0: partition table partially beyond EOD, truncated
[  208.037666][ T7902] loop0: p1 start 8388864 is beyond EOD, truncated
[  208.456301][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  208.472213][ T6806] udevd[6806]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  208.486142][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  208.526525][ T7929] loop0: detected capacity change from 0 to 1024
[  208.541004][ T7929] EXT4-fs (loop0): inline encryption not supported
[  208.548721][ T7929] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  208.658362][ T7929] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback.
[  208.724920][ T7938] loop1: detected capacity change from 0 to 1024
[  208.833487][ T7929] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.1218: Allocating blocks 497-513 which overlap fs metadata
[  208.903231][ T7929] EXT4-fs (loop0): pa ffff88806017fa80: logic 128, phys. 385, len 8
[  208.912070][ T7929] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1
[  209.051018][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  209.101003][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  209.126999][ T7953] loop5: detected capacity change from 0 to 8
[  209.169244][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  209.181027][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  209.190203][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  209.201962][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  209.211042][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  209.229090][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  209.258848][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  209.339061][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  209.739091][ T7978] mkiss: ax0: crc mode is auto.
[  210.227697][ T7989] loop1: detected capacity change from 0 to 32768
[  210.298279][ T7989] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  210.306767][ T7989] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  210.332588][ T7989] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  210.406342][ T7989] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  210.771003][ T8020] ALSA: mixer_oss: invalid OSS volume 'E'
[  210.811401][ T8020] ALSA: mixer_oss: invalid OSS volume 'Æ'
[  210.897136][ T8022] loop6: detected capacity change from 0 to 1024
[  211.019328][ T8022] EXT4-fs (loop6): Ignoring removed bh option
[  211.080444][ T8028] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  211.102717][ T8022] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  211.142725][ T8022] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz.6.1261: path /121/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  211.164624][    C0] vkms_vblank_simulate: vblank timer overrun
[  211.171587][ T8022] EXT4-fs (loop6): Remounting filesystem read-only
[  211.461621][  T150] block nbd0: Possible stuck request ffff888020b48000: control (read@0,4096B). Runtime 120 seconds
[  211.831286][ T4406] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  211.932988][ T8036] set_capacity_and_notify: 1 callbacks suppressed
[  211.933003][ T8036] loop1: detected capacity change from 0 to 32768
[  211.984162][ T8036] JBD2: Ignoring recovery information on journal
[  212.048983][ T8036] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  212.071243][ T4406] usb 1-1: Using ep0 maxpacket: 16
[  212.081252][ T5235] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  212.178530][ T4191] ocfs2: Unmounting device (7,1) on (node local)
[  212.193761][ T4406] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[  212.214987][ T4406] usb 1-1: config 0 has no interface number 0
[  212.235533][ T4406] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  212.272227][ T8049] loop5: detected capacity change from 0 to 32768
[  212.367795][ T5235] usb 7-1: Using ep0 maxpacket: 16
[  212.411318][ T4406] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  212.435344][ T4406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.459782][ T4406] usb 1-1: Product: syz
[  212.471231][ T4406] usb 1-1: Manufacturer: syz
[  212.476957][   T26] audit: type=1107 audit(1768866550.014:41): pid=8062 uid=0 auid=0 ses=2 subj=unconfined msg=''
[  212.501178][ T4406] usb 1-1: SerialNumber: syz
[  212.501898][ T5235] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  212.521983][ T4406] usb 1-1: config 0 descriptor??
[  212.548369][ T5235] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  212.598522][ T5235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.632159][ T5235] usb 7-1: config 0 descriptor??
[  212.683307][ T5235] pegasus_notetaker 7-1:0.0: packet size is too small (0)
[  212.721495][ T5235] pegasus_notetaker: probe of 7-1:0.0 failed with error -22
[  212.904613][ T5052] usb 7-1: USB disconnect, device number 7
[  213.222663][ T4406] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input19
[  213.262322][ T8098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  213.269654][ T8098] IPv6: NLM_F_CREATE should be set when creating new route
[  213.276965][ T8098] IPv6: NLM_F_CREATE should be set when creating new route
[  213.284313][ T8098] IPv6: NLM_F_CREATE should be set when creating new route
[  213.463807][ T5235] usb 1-1: USB disconnect, device number 16
[  213.911226][   T21] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  213.976439][ T8122] loop2: detected capacity change from 0 to 4096
[  214.070234][ T8122] ntfs: volume version 3.1.
[  214.161278][   T21] usb 7-1: Using ep0 maxpacket: 32
[  214.225656][ T8127] loop5: detected capacity change from 0 to 256
[  214.273647][ T8127] exfat: Deprecated parameter 'utf8'
[  214.290980][ T8127] exfat: Deprecated parameter 'utf8'
[  214.297316][   T21] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  214.314266][   T21] usb 7-1: config 0 has no interface number 0
[  214.329405][ T8127] exfat: Deprecated parameter 'utf8'
[  214.338447][ T8131] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  214.359223][ T8127] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  214.471672][   T21] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  214.501496][   T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.533796][   T21] usb 7-1: Product: syz
[  214.561325][   T21] usb 7-1: Manufacturer: syz
[  214.565987][   T21] usb 7-1: SerialNumber: syz
[  214.628556][   T21] usb 7-1: config 0 descriptor??
[  214.693584][   T21] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  214.707808][ T8143] netlink: 'syz.5.1315': attribute type 1 has an invalid length.
[  214.842794][ T8147] loop5: detected capacity change from 0 to 2048
[  214.903278][   T21] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  214.939813][   T21] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  214.990870][ T8151] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  215.019621][ T8152] loop1: detected capacity change from 0 to 8
[  215.031638][   T26] audit: type=1800 audit(1768866552.574:42): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1316" name="file1" dev="loop5" ino=15 res=0 errno=0
[  215.136646][ T8116] udc-core: couldn't find an available UDC or it's busy
[  215.170273][ T8116] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  215.211194][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short
[  215.407235][ T5052] usb 7-1: USB disconnect, device number 8
[  215.413258][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  215.447717][ T8141] loop0: detected capacity change from 0 to 32768
[  215.465093][ T5052] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  215.498719][ T5052] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  215.516511][ T5052] quatech2 7-1:0.51: device disconnected
[  215.552459][ T8141] XFS (loop0): Mounting V5 Filesystem
[  215.588322][ T8140] loop2: detected capacity change from 0 to 32768
[  215.680729][ T8140] XFS (loop2): Mounting V5 Filesystem
[  215.690070][ T8141] XFS (loop0): Ending clean mount
[  215.712546][ T8141] XFS (loop0): Quotacheck needed: Please wait.
[  215.901258][ T8141] XFS (loop0): Quotacheck: Done.
[  215.907387][ T8140] XFS (loop2): Ending clean mount
[  216.017160][ T8178] loop6: detected capacity change from 0 to 16
[  216.051391][ T8140] XFS (loop2): User initiated shutdown received.
[  216.069920][ T4185] XFS (loop0): Unmounting Filesystem
[  216.088678][ T8140] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  216.144715][ T8178] erofs: (device loop6): mounted with root inode @ nid 36.
[  216.203425][ T8140] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  216.281783][ T4189] XFS (loop2): Unmounting Filesystem
[  216.427322][ T8187] __nla_validate_parse: 52 callbacks suppressed
[  216.427340][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1330'.
[  216.911407][ T7310] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  217.141445][ T4406] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  217.511490][ T4406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.543510][ T4406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.594651][ T4406] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  217.636880][ T4406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.752465][ T4406] usb 6-1: config 0 descriptor??
[  217.807378][ T8205] loop0: detected capacity change from 0 to 131072
[  217.917183][ T8205] F2FS-fs (loop0): invalid crc value
[  217.966045][ T8205] F2FS-fs (loop0): Found nat_bits in checkpoint
[  217.990585][ T8211] loop1: detected capacity change from 0 to 32768
[  218.028084][ T8205] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  218.063937][ T8205] F2FS-fs (loop0): inode (7) has corrupted xattr
[  218.144508][ T8211] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  218.179880][ T8211] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = 
[  218.194776][ T7310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.221333][ T8211] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  218.238506][ T7310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.253250][ T4406] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0
[  218.264139][ T4406] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0
[  218.284628][ T8211] OCFS2: File system is now read-only.
[  218.298848][ T7310] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  218.311251][ T8211] (syz.1.1349,8211,1):ocfs2_find_entry_id:407 ERROR: status = -30
[  218.352515][ T7310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.396681][ T7310] usb 7-1: config 0 descriptor??
[  218.414892][ T4191] ocfs2: Unmounting device (7,1) on (node local)
[  218.683654][   T21] usb 6-1: USB disconnect, device number 8
[  218.781396][ T5052] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  218.871241][ T5244] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  218.923288][ T7310] cm6533_jd 0003:0D8C:0022.0009: unbalanced collection at end of report description
[  218.951593][ T7310] cm6533_jd 0003:0D8C:0022.0009: parse failed
[  218.957802][ T7310] cm6533_jd: probe of 0003:0D8C:0022.0009 failed with error -22
[  219.006965][ T8229] loop2: detected capacity change from 0 to 32768
[  219.140129][ T7310] usb 7-1: USB disconnect, device number 9
[  219.147510][ T5244] usb 1-1: Using ep0 maxpacket: 32
[  219.152212][ T5052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  219.181998][ T5052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  219.204139][ T5052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  219.231218][ T5052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  219.291339][ T5244] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.322304][ T5244] usb 1-1: config 0 interface 0 has no altsetting 0
[  219.329267][ T5244] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  219.355678][ T5244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.377500][ T5244] usb 1-1: config 0 descriptor??
[  219.391344][ T5052] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  219.400515][ T5052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.428308][ T5052] usb 2-1: Product: syz
[  219.434899][ T5052] usb 2-1: Manufacturer: syz
[  219.439587][ T5052] usb 2-1: SerialNumber: syz
[  219.456807][ T5052] usb 2-1: config 0 descriptor??
[  219.611268][   T21] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  219.724566][ T5052] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  219.884238][ T5244] lg-g15 0003:046D:C225.000A: unknown main item tag 0x0
[  219.902770][ T5244] lg-g15 0003:046D:C225.000A: unknown main item tag 0x0
[  219.909813][ T5244] lg-g15 0003:046D:C225.000A: unknown main item tag 0x0
[  219.920763][ T8246] program syz.6.1351 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  219.973606][ T7310] kernel read not supported for file /dsp (pid: 7310 comm: kworker/0:20)
[  219.982157][   T21] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  219.983114][ T5235] usb 2-1: USB disconnect, device number 16
[  219.999487][ T5244] lg-g15 0003:046D:C225.000A: hidraw0: USB HID vb.27 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0
[  220.002095][   T21] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  220.120778][   T21] usb 3-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  220.126144][ T5244] usb 1-1: USB disconnect, device number 17
[  220.171409][   T21] usb 3-1: config 220 has no interface number 2
[  220.198359][   T21] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  220.199226][ T8250] fido_id[8250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  220.222334][   T21] usb 3-1: config 220 interface 0 has no altsetting 0
[  220.234220][   T21] usb 3-1: config 220 interface 76 has no altsetting 0
[  220.241503][   T21] usb 3-1: config 220 interface 1 has no altsetting 0
[  220.401405][   T21] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  220.418443][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.429125][   T21] usb 3-1: Product: syz
[  220.433814][   T21] usb 3-1: Manufacturer: syz
[  220.438963][   T21] usb 3-1: SerialNumber: syz
[  220.446766][ T8255] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1355'.
[  220.456094][ T4249] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  220.791216][ T5244] kernel write not supported for file /sequencer (pid: 5244 comm: kworker/0:14)
[  220.822753][   T21] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  220.829163][   T21] usb 3-1: No valid video chain found.
[  220.841228][   T21] usb 3-1: selecting invalid altsetting 0
[  220.862088][ T4249] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  220.881183][ T4249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.919300][ T4249] usb 6-1: config 0 descriptor??
[  220.962862][   T21] usb 3-1: selecting invalid altsetting 0
[  220.968693][   T21] usbtest: probe of 3-1:220.1 failed with error -22
[  220.988163][ T4249] gspca_main: spca508-2.14.0 probing 8086:0110
[  221.002577][   T21] usb 3-1: USB disconnect, device number 17
[  221.211410][ T4249] gspca_spca508: reg_read err -32
[  221.251384][ T4249] gspca_spca508: reg_read err -32
[  221.478779][ T8268] loop0: detected capacity change from 0 to 32768
[  221.501434][ T4249] gspca_spca508: reg_read err -71
[  221.521375][ T4249] gspca_spca508: reg_read err -71
[  221.551311][ T4249] gspca_spca508: reg write: error -71
[  221.556928][ T4249] spca508: probe of 6-1:0.0 failed with error -71
[  221.575390][ T4249] usb 6-1: USB disconnect, device number 9
[  221.708857][ T8268] XFS (loop0): Mounting V5 Filesystem
[  221.861390][ T7310] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  222.000764][ T8268] XFS (loop0): Ending clean mount
[  222.020930][ T8268] XFS (loop0): Quotacheck needed: Please wait.
[  222.131066][ T8295] loop1: detected capacity change from 0 to 40427
[  222.157549][ T8268] XFS (loop0): Quotacheck: Done.
[  222.206513][ T8295] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff
[  222.221705][ T8295] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  222.236585][ T8317] vcan0: tx address claim with dlc 0
[  222.243826][ T8295] F2FS-fs (loop1): invalid crc value
[  222.251567][ T7310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  222.260940][ T8295] F2FS-fs (loop1): Found nat_bits in checkpoint
[  222.297005][ T7310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64
[  222.313979][ T4185] XFS (loop0): Unmounting Filesystem
[  222.335759][ T7310] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  222.407015][ T8321] loop5: detected capacity change from 0 to 512
[  222.480675][ T8295] F2FS-fs (loop1): Start checkpoint disabled!
[  222.496586][ T8321] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  222.561697][ T7310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  222.585766][ T7310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  222.594000][ T7310] usb 3-1: SerialNumber: syz
[  222.610766][ T8321] EXT4-fs (loop5): 1 truncate cleaned up
[  222.616784][ T8295] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  222.624505][ T8321] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  222.632986][ T8297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  222.651723][ T8297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  222.741977][ T4212] attempt to access beyond end of device
[  222.741977][ T4212] loop1: rw=2049, want=40976, limit=40427
[  222.754591][ T8321] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.5.1381: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  222.814646][ T8321] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem
[  222.894718][ T8297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  222.907212][ T8297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  223.136428][ T8333] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1380'.
[  223.161279][ T4249] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  223.249944][ T8337] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1388'.
[  223.341518][ T7310] cdc_ether: probe of 3-1:1.0 failed with error -22
[  223.441445][ T4249] usb 7-1: Using ep0 maxpacket: 32
[  223.550628][ T7310] usb 3-1: USB disconnect, device number 18
[  223.609411][ T4249] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  223.629366][ T4249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.661937][ T4249] usb 7-1: config 0 descriptor??
[  223.876748][ T8335] loop5: detected capacity change from 0 to 40427
[  223.897427][ T8335] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff
[  223.911400][ T4249] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  223.929138][ T4249] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  223.950943][ T8335] F2FS-fs (loop5): invalid crc value
[  223.971803][ T4249] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  223.979022][ T4249] usb 7-1: media controller created
[  223.999910][ T8335] F2FS-fs (loop5): Found nat_bits in checkpoint
[  224.020852][ T4249] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  224.073557][ T8354] loop1: detected capacity change from 0 to 32768
[  224.110940][ T8354] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.1395 (8354)
[  224.141277][ T4249] az6027: usb out operation failed. (-71)
[  224.158016][ T8335] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  224.167122][ T4249] az6027: usb out operation failed. (-71)
[  224.173004][ T4249] stb0899_attach: Driver disabled by Kconfig
[  224.179026][ T4249] az6027: no front-end attached
[  224.179026][ T4249] 
[  224.202806][ T8354] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  224.238231][ T8354] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  224.261721][ T4249] az6027: usb out operation failed. (-71)
[  224.267540][ T4249] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  224.282391][   T26] audit: type=1800 audit(1768866561.824:43): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1387" name="file1" dev="loop5" ino=10 res=0 errno=0
[  224.301435][ T8354] BTRFS info (device loop1): use lzo compression, level 0
[  224.309897][ T8354] BTRFS info (device loop1): using free space tree
[  224.339471][ T4249] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input21
[  224.351833][ T8335] F2FS-fs (loop5) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xcc9/0x1820
[  224.377908][ T8354] BTRFS info (device loop1): has skinny extents
[  224.396650][ T4249] dvb-usb: schedule remote query interval to 400 msecs.
[  224.415537][ T8335] attempt to access beyond end of device
[  224.415537][ T8335] loop5: rw=2049, want=77904, limit=40427
[  224.436058][ T4249] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  224.492034][ T4249] usb 7-1: USB disconnect, device number 10
[  224.649980][ T8354] BTRFS info (device loop1): enabling ssd optimizations
[  224.682114][ T4249] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  224.841866][ T8390] loop0: detected capacity change from 0 to 16
[  224.924863][ T8390] erofs: (device loop0): mounted with root inode @ nid 36.
[  224.931548][ T5052] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  224.972545][   T26] audit: type=1800 audit(1768866562.514:44): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1403" name="file1" dev="loop0" ino=86 res=0 errno=0
[  225.214740][ T5052] usb 3-1: Using ep0 maxpacket: 8
[  225.371284][ T5052] usb 3-1: unable to get BOS descriptor or descriptor too short
[  225.443325][ T5052] usb 3-1: unable to read config index 0 descriptor/start: -71
[  225.450975][ T5052] usb 3-1: can't read configurations, error -71
[  225.586826][ T8392] loop6: detected capacity change from 0 to 40427
[  225.620230][ T8392] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  225.650970][ T8392] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  225.698389][ T8392] F2FS-fs (loop6): invalid crc value
[  225.719437][ T8392] F2FS-fs (loop6): Found nat_bits in checkpoint
[  225.984803][ T8392] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  225.999436][ T8392] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  226.214939][ T8392] attempt to access beyond end of device
[  226.214939][ T8392] loop6: rw=2049, want=45104, limit=40427
[  226.478592][ T8434] loop1: detected capacity change from 0 to 512
[  226.527078][ T8432] loop2: detected capacity change from 0 to 4096
[  226.573313][ T8434] EXT4-fs (loop1): Ignoring removed oldalloc option
[  226.602800][ T8432] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  226.631462][ T8434] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  226.702856][ T8434] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1420: inode has both inline data and extents flags
[  226.724400][ T8434] EXT4-fs (loop1): Remounting filesystem read-only
[  226.748435][ T8434] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1420: couldn't read orphan inode 15 (err -117)
[  226.783344][ T8432] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  226.872998][ T8434] EXT4-fs (loop1): Remounting filesystem read-only
[  226.879596][ T8434] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,oldalloc,journal_ioprio=0x0000000000000003,errors=remount-ro,init_itable=0x00000000000001ff,minixdf,noquota,usrjquota=,. Quota mode: none.
[  226.915232][ T8432] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  226.924231][ T8432] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  226.981390][ T8432] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  227.000652][ T8432] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  227.079377][ T8432] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  227.111294][ T8432] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  227.229435][ T8432] ntfs: volume version 3.1.
[  227.327946][ T8449] loop0: detected capacity change from 0 to 16
[  227.411934][ T8449] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  227.838991][ T8469] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1431'.
[  227.871035][ T8468] loop6: detected capacity change from 0 to 512
[  227.884669][ T8469] netlink: 'syz.2.1431': attribute type 2 has an invalid length.
[  227.891479][ T4249] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  227.957420][ T8468] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  228.005728][ T8468] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  228.069951][ T8468] EXT4-fs (loop6): shut down requested (1)
[  228.171231][ T4249] usb 6-1: Using ep0 maxpacket: 32
[  228.308755][ T4249] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  228.337553][ T4249] usb 6-1: config 0 has no interface number 0
[  228.363895][ T4249] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  228.382984][ T8483] netlink: 'syz.2.1441': attribute type 9 has an invalid length.
[  228.482466][ T8485] loop0: detected capacity change from 0 to 256
[  228.508060][ T8485] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  228.551274][ T8485] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  228.581577][ T4249] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  228.606434][ T8485] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[  228.611423][ T4249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.708397][ T4249] usb 6-1: Product: syz
[  228.728567][ T4249] usb 6-1: Manufacturer: syz
[  228.746303][ T8495] loop1: detected capacity change from 0 to 1024
[  228.763235][ T4249] usb 6-1: SerialNumber: syz
[  228.773141][ T4249] usb 6-1: config 0 descriptor??
[  228.804735][ T8457] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  229.021783][ T6304] hfsplus: b-tree write err: -5, ino 4
[  229.059146][ T8505] loop2: detected capacity change from 0 to 512
[  229.086807][ T8457] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  229.200675][ T8505] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  229.273062][ T8505] EXT4-fs (loop2): 1 truncate cleaned up
[  229.278796][ T8505] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000012,inode_readahead_blks=0x0000000000000020,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none.
[  229.444698][ T8521] loop1: detected capacity change from 0 to 2048
[  229.575802][ T8521] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  229.647098][ T8522] loop0: detected capacity change from 0 to 4096
[  229.695916][ T8527] loop6: detected capacity change from 0 to 128
[  229.742299][ T8522] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  229.781424][ T4249] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  229.810213][ T4249] asix: probe of 6-1:0.188 failed with error -71
[  229.869112][ T4249] usb 6-1: USB disconnect, device number 10
[  230.377172][ T8542] loop1: detected capacity change from 0 to 128
[  230.898000][ T8554] loop1: detected capacity change from 0 to 2048
[  231.010820][ T8538] loop0: detected capacity change from 0 to 32768
[  231.071913][ T8538] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1464 (8538)
[  231.172107][ T8560] program syz.1.1473 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  231.182658][ T8538] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  231.202205][ T8538] BTRFS info (device loop0): using free space tree
[  231.209427][   T26] kauditd_printk_skb: 13 callbacks suppressed
[  231.209450][   T26] audit: type=1326 audit(1768866568.744:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413cd25cb9 code=0x7fc00000
[  231.251238][ T8538] BTRFS info (device loop0): has skinny extents
[  231.359471][   T26] audit: type=1326 audit(1768866568.744:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f413cd25cb9 code=0x7fc00000
[  231.421266][   T26] audit: type=1326 audit(1768866568.744:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413cd25cb9 code=0x7fc00000
[  231.460286][   T26] audit: type=1326 audit(1768866568.744:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413cd25cb9 code=0x7fc00000
[  231.484038][   T26] audit: type=1326 audit(1768866568.744:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413cd25cb9 code=0x7fc00000
[  231.508206][   T26] audit: type=1326 audit(1768866568.744:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413cd25cb9 code=0x7fc00000
[  231.531464][   T26] audit: type=1326 audit(1768866568.754:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413cd25cb9 code=0x7fc00000
[  231.545319][ T4193] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  231.554183][   T26] audit: type=1326 audit(1768866568.754:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413cd25cb9 code=0x7fc00000
[  231.585004][   T26] audit: type=1326 audit(1768866568.754:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413cd25cb9 code=0x7fc00000
[  231.612638][   T26] audit: type=1326 audit(1768866568.754:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8541 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413cd25cb9 code=0x7fc00000
[  231.633327][ T5055] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  231.643634][ T8549] loop2: detected capacity change from 0 to 32768
[  231.650361][ T8538] BTRFS info (device loop0): enabling ssd optimizations
[  231.997555][ T4193] usb 7-1: config 0 has no interfaces?
[  232.003686][ T4193] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  232.014300][ T5055] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  232.034925][ T5055] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.061414][ T4193] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.081558][ T5055] usb 6-1: config 0 descriptor??
[  232.094144][ T4193] usb 7-1: config 0 descriptor??
[  232.124258][ T5055] cp210x 6-1:0.0: cp210x converter detected
[  232.274712][ T8599] loop1: detected capacity change from 0 to 256
[  232.368490][ T4193] usb 7-1: USB disconnect, device number 11
[  232.421680][ T8599] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  232.561401][ T5055] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  232.568460][ T8599] exFAT-fs (loop1): hint_cluster is invalid (17)
[  232.592825][ T5055] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71
[  232.624827][ T5055] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  232.644007][ T5055] usb 6-1: cp210x converter now attached to ttyUSB0
[  232.670128][ T5055] usb 6-1: USB disconnect, device number 11
[  232.680561][ T5055] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  232.693090][ T8601] loop0: detected capacity change from 0 to 4096
[  232.723018][ T5055] cp210x 6-1:0.0: device disconnected
[  232.737474][ T8601] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  233.151231][ T4193] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  233.160907][ T5244] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  233.189275][ T8608] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  233.199562][ T8608] ntfs3: loop2: Failed to load $Extend.
[  233.394426][ T4193] usb 2-1: Using ep0 maxpacket: 32
[  233.471243][ T5244] usb 1-1: Using ep0 maxpacket: 32
[  233.520656][ T4193] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  233.550829][ T4193] usb 2-1: config 0 has no interface number 0
[  233.557813][ T4193] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.578276][ T4193] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.589461][ T4193] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  233.616462][ T8627] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  233.631829][ T4193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.632012][ T5244] usb 1-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config
[  233.697779][ T4193] usb 2-1: config 0 descriptor??
[  233.733897][ T8627] EXT4-fs (loop2): 1 truncate cleaned up
[  233.739608][ T8627] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  233.766567][ T8627] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.1496: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[  233.852875][ T5244] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  233.871175][  T150] block nbd1: Possible stuck request ffff888020b70000: control (read@0,4096B). Runtime 30 seconds
[  233.882981][ T5244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.891626][ T5244] usb 1-1: Product: syz
[  233.896235][ T5244] usb 1-1: Manufacturer: syz
[  233.900870][ T5244] usb 1-1: SerialNumber: syz
[  233.908086][ T5244] usb 1-1: config 0 descriptor??
[  233.962399][ T5244] usb 1-1: bad CDC descriptors
[  233.968251][ T5244] usb 1-1: unsupported MDLM descriptors
[  234.166668][ T4406] usb 1-1: USB disconnect, device number 18
[  234.390627][ T8651] set_capacity_and_notify: 3 callbacks suppressed
[  234.390644][ T8651] loop5: detected capacity change from 0 to 1024
[  234.415280][ T4193] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.000B/input/input23
[  234.561468][ T4193] uclogic 0003:28BD:0094.000B: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1
[  234.623570][ T8657] loop6: detected capacity change from 0 to 64
[  234.630155][ T4193] usb 2-1: USB disconnect, device number 17
[  234.642864][ T8651] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x000000000000007e,lazytime,errors=remount-ro,stripe=0x0000000000000010,discard,init_itable,. Quota mode: none.
[  234.978906][ T6080] hfs: node 4:3 still has 2 user(s)!
[  235.016373][ T8661] fido_id[8661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  235.402116][ T8669] loop1: detected capacity change from 0 to 4096
[  235.402933][ T8641] loop2: detected capacity change from 0 to 40427
[  235.420794][ T8669] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  235.469628][ T8641] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  235.469660][ T8641] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  235.520308][ T8675] dvmrp1: tun_chr_ioctl cmd 2147767519
[  235.533369][ T8641] F2FS-fs (loop2): Found nat_bits in checkpoint
[  235.557126][ T4249] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  235.719291][ T8641] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  235.719322][ T8641] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  235.961478][ T4249] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  235.961509][ T4249] usb 1-1: config 1 has no interface number 0
[  235.961551][ T4249] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  235.961574][ T4249] usb 1-1: config 1 interface 105 has no altsetting 0
[  236.591400][ T4193] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  236.643924][ T8700] loop1: detected capacity change from 0 to 128
[  236.747938][ T8700] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  236.831629][ T8700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  236.875603][ T8691] loop2: detected capacity change from 0 to 131072
[  236.977265][ T4193] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.018758][ T4193] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.021922][ T4249] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  237.042922][ T8691] F2FS-fs (loop2): Found nat_bits in checkpoint
[  237.050690][ T4193] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  237.092471][ T8691] F2FS-fs (loop2): recover fsync data on readonly fs
[  237.093843][ T4193] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  237.102791][ T8691] F2FS-fs (loop2): Mounted with checkpoint version = 1b41e955
[  237.131145][ T4249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.139277][ T4249] usb 1-1: Product: syz
[  237.176550][ T4249] usb 1-1: Manufacturer: syz
[  237.184670][ T4249] usb 1-1: SerialNumber: syz
[  237.190397][ T4193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.246710][ T4193] usb 6-1: config 0 descriptor??
[  237.305082][ T8709] tap0: tun_chr_ioctl cmd 1074025677
[  237.351520][ T8709] tap0: linktype set to 823
[  237.370792][ T8711] netlink: 'syz.1.1529': attribute type 10 has an invalid length.
[  237.391641][ T8711] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1529'.
[  237.512396][ T4249] aqc111: probe of 1-1:1.105 failed with error -22
[  237.719640][ T4249] usb 1-1: USB disconnect, device number 19
[  237.756690][ T4193] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.000C/input/input24
[  237.885271][ T4193] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.000C/input/input25
[  237.945521][ T4193] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.000C/input/input26
[  238.013278][ T4193] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.000C/input/input27
[  238.091630][ T4193] hid-udraw 0003:20D6:CB17.000C: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.5-1/input0
[  238.209607][ T4193] usb 6-1: USB disconnect, device number 12
[  238.532104][ T8723] loop6: detected capacity change from 0 to 32768
[  238.575602][ T8723] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.1534 (8723)
[  238.596272][ T8732] loop2: detected capacity change from 0 to 164
[  238.605922][ T5241] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  238.643447][ T8723] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  238.677792][ T8723] BTRFS info (device loop6): enabling auto defrag
[  238.693609][ T8723] BTRFS info (device loop6): force clearing of disk cache
[  238.731201][ T8723] BTRFS info (device loop6): enabling disk space caching
[  238.769549][ T8723] BTRFS info (device loop6): max_inline at 0
[  238.783033][ T8723] BTRFS info (device loop6): disk space caching is enabled
[  238.796535][ T8723] BTRFS info (device loop6): has skinny extents
[  238.950156][ T8755] loop0: detected capacity change from 0 to 2048
[  239.027354][ T8755] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  239.211471][ T5241] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  239.220624][ T5241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.230609][ T8723] BTRFS info (device loop6): enabling ssd optimizations
[  239.241447][ T8723] BTRFS info (device loop6): clearing free space tree
[  239.263677][ T8723] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  239.278287][ T5241] usb 2-1: Product: syz
[  239.284239][ T5241] usb 2-1: Manufacturer: syz
[  239.288887][ T5241] usb 2-1: SerialNumber: syz
[  239.301211][ T8723] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  239.378709][ T5241] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  240.251450][ T5241] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  240.479394][ T8787] loop0: detected capacity change from 0 to 131072
[  240.493606][ T6804] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop6 scanned by udevd (6804)
[  240.541493][ T8787] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  240.549756][ T8787] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  240.560219][ T8793] loop5: detected capacity change from 0 to 2048
[  240.574969][ T8787] F2FS-fs (loop0): invalid crc value
[  240.622973][ T8787] F2FS-fs (loop0): Found nat_bits in checkpoint
[  240.679679][ T8787] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  240.687911][ T8787] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  240.740073][ T8793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.861521][ T5247] usb 2-1: USB disconnect, device number 18
[  241.239673][ T8808] loop5: detected capacity change from 0 to 4096
[  241.324361][ T8808] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  241.480200][ T8818] netlink: 'syz.1.1567': attribute type 1 has an invalid length.
[  241.542530][  T150] block nbd0: Possible stuck request ffff888020b48000: control (read@0,4096B). Runtime 150 seconds
[  241.553416][ T5241] usb 2-1: Service connection timeout for: 256
[  241.559619][ T5241] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  241.596453][ T5241] ath9k_htc: Failed to initialize the device
[  241.605838][ T5247] usb 2-1: ath9k_htc: USB layer deinitialized
[  241.643074][ T8820] loop6: detected capacity change from 0 to 1024
[  241.854077][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  241.854093][   T26] audit: type=1800 audit(1768866579.394:70): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1566" name="bus" dev="loop6" ino=26 res=0 errno=0
[  242.040141][ T4393] hfsplus: b-tree write err: -5, ino 4
[  242.417140][ T8851] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1582'.
[  242.675366][ T8862] loop5: detected capacity change from 0 to 64
[  242.705322][ T8816] loop0: detected capacity change from 0 to 32768
[  242.815032][ T8862] hfs: dir_umask requires a value
[  242.829059][ T8862] hfs: unable to parse mount options
[  242.961270][ T5241] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  243.391410][ T5241] usb 3-1: config 7 has an invalid interface number: 101 but max is 0
[  243.415665][ T8882] loop5: detected capacity change from 0 to 512
[  243.422310][ T5241] usb 3-1: config 7 has no interface number 0
[  243.441486][ T5253] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  243.487483][ T8882] EXT4-fs (loop5): first meta block group too large: 16711680 (group descriptor block count 1)
[  243.611426][ T5241] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  243.634524][ T5241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.670252][ T5241] usb 3-1: Product: syz
[  243.691380][ T5241] usb 3-1: Manufacturer: syz
[  243.706396][ T5241] usb 3-1: SerialNumber: syz
[  243.757679][ T8887] loop6: detected capacity change from 0 to 8192
[  243.826849][ T5253] usb 2-1: config 0 has no interfaces?
[  243.843803][ T5253] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  243.887548][   T26] audit: type=1800 audit(1768866581.424:71): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1595" name="file2" dev="loop6" ino=1048706 res=0 errno=0
[  243.898835][ T5253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.942473][ T8887] attempt to access beyond end of device
[  243.942473][ T8887] loop6: rw=0, want=57848, limit=8192
[  243.966035][ T8899] loop0: detected capacity change from 0 to 512
[  244.007887][ T8887] Buffer I/O error on dev loop6, logical block 57847, async page read
[  244.017901][ T5253] usb 2-1: config 0 descriptor??
[  244.026726][ T8899] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  244.083677][ T8887] attempt to access beyond end of device
[  244.083677][ T8887] loop6: rw=0, want=57848, limit=8192
[  244.096556][ T8887] Buffer I/O error on dev loop6, logical block 57847, async page read
[  244.146848][ T8899] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1600: bad orphan inode 15
[  244.230911][ T8899] ext4_test_bit(bit=14, block=18) = 1
[  244.245247][ T8899] is_bad_inode(inode)=0
[  244.249465][ T8899] NEXT_ORPHAN(inode)=1023
[  244.276357][ T8899] max_ino=32
[  244.279619][ T8899] i_nlink=0
[  244.303395][ T8899] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2922: inode #15: comm syz.0.1600: corrupted xattr block 19
[  244.325787][ T5247] usb 2-1: USB disconnect, device number 19
[  244.361307][ T8899] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117)
[  244.383886][ T8899] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  244.406342][ T5253] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  244.437404][ T8908] loop6: detected capacity change from 0 to 128
[  244.467896][ T8899] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1600: path /354/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0
[  244.576869][ T5241] as10x_usb: device has been detected
[  244.591615][ T5241] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  244.657258][ T5241] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  244.691409][ T5253] usb 6-1: Using ep0 maxpacket: 32
[  244.851444][ T5253] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.869547][ T5253] usb 6-1: config 0 has no interfaces?
[  244.898800][ T5253] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  244.934762][ T5253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.965980][ T5253] usb 6-1: config 0 descriptor??
[  245.035770][ T5241] as10x_usb: error during firmware upload part1
[  245.048440][ T5241] Registered device Elgato EyeTV DTT Deluxe
[  245.050792][ T5241] usb 3-1: USB disconnect, device number 21
[  245.078484][ T5241] Unregistered device Elgato EyeTV DTT Deluxe
[  245.079867][ T5241] as10x_usb: device has been disconnected
[  245.259944][ T5247] usb 6-1: USB disconnect, device number 13
[  245.465791][ T8926] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  245.486770][ T8926] ext4 filesystem being mounted at /358/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  245.725636][ T8936] netlink: 'syz.6.1613': attribute type 16 has an invalid length.
[  246.379696][ T8942] set_capacity_and_notify: 3 callbacks suppressed
[  246.379707][ T8942] loop2: detected capacity change from 0 to 32768
[  246.409743][ T8942] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1629 (8942)
[  246.437215][ T8942] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  246.450836][ T8942] BTRFS info (device loop2): setting nodatacow, compression disabled
[  246.459826][ T8942] BTRFS info (device loop2): enabling auto defrag
[  246.467052][ T8942] BTRFS info (device loop2): enabling ssd optimizations
[  246.484852][ T8942] BTRFS info (device loop2): using spread ssd allocation scheme
[  246.493230][ T8942] BTRFS info (device loop2): force clearing of disk cache
[  246.500401][ T8942] BTRFS info (device loop2): turning off barriers
[  246.509108][ T8942] BTRFS info (device loop2): disabling free space tree
[  246.516854][ T8942] BTRFS info (device loop2): not using ssd optimizations
[  246.525404][ T8942] BTRFS info (device loop2): not using spread ssd allocation scheme
[  246.535343][ T8942] BTRFS info (device loop2): has skinny extents
[  246.588738][ T8942] BTRFS info (device loop2): clearing free space tree
[  246.601753][ T8942] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  246.617911][ T8942] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  246.951285][ T5247] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  246.991487][ T5059] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  247.201292][ T5052] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  247.251458][ T5247] usb 2-1: Using ep0 maxpacket: 8
[  247.371527][ T5059] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  247.390888][ T5059] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.426636][ T5059] usb 7-1: config 0 descriptor??
[  247.466427][ T5057] Bluetooth: hci4: command 0x0406 tx timeout
[  247.483427][ T5059] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  247.565547][ T5052] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  247.580017][ T5052] usb 1-1: config 0 has no interface number 0
[  247.621614][ T5247] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  247.652041][ T5247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.660108][ T5247] usb 2-1: Product: syz
[  247.670337][ T5247] usb 2-1: Manufacturer: syz
[  247.675437][ T5247] usb 2-1: SerialNumber: syz
[  247.683655][ T5247] usb 2-1: config 0 descriptor??
[  247.723769][ T5247] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  247.751457][ T5052] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  247.760648][ T5052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.791527][ T5052] usb 1-1: Product: syz
[  247.799145][ T5052] usb 1-1: Manufacturer: syz
[  247.822953][ T5052] usb 1-1: SerialNumber: syz
[  247.835405][ T5052] usb 1-1: config 0 descriptor??
[  247.921356][ T5059] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  247.943149][ T5059] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  248.081311][ T5052] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  248.103424][ T5052] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  248.131427][ T5052] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  248.132668][    T7] usb 7-1: USB disconnect, device number 12
[  248.139511][ T5052] usb 1-1: media controller created
[  248.182233][ T5052] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  248.581571][   T27] INFO: task udevd:4496 blocked for more than 143 seconds.
[  248.591214][   T27]       Not tainted syzkaller #0
[  248.601475][ T5247] gspca_sonixj: reg_r err -71
[  248.606438][ T5247] sonixj: probe of 2-1:0.0 failed with error -71
[  248.615309][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  248.628924][   T27] task:udevd           state:D stack:23792 pid: 4496 ppid:  3561 flags:0x00004002
[  248.636404][ T5247] usb 2-1: USB disconnect, device number 20
[  248.653063][   T27] Call Trace:
[  248.656413][   T27]  <TASK>
[  248.659380][   T27]  __schedule+0x11ef/0x43c0
[  248.670102][   T27]  ? release_firmware_map_entry+0x190/0x190
[  248.679398][   T27]  ? preempt_schedule+0xbc/0xd0
[  248.692370][   T27]  ? preempt_schedule_common+0xa5/0xd0
[  248.706848][   T27]  ? release_firmware_map_entry+0x190/0x190
[  248.713067][   T27]  ? preempt_schedule+0xbc/0xd0
[  248.717970][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  248.737351][   T27]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  248.744153][   T27]  ? lock_chain_count+0x20/0x20
[  248.749073][   T27]  schedule+0x11b/0x1e0
[  248.754868][   T27]  io_schedule+0x7c/0xd0
[  248.759170][   T27]  wait_on_page_bit_common+0x83b/0xe50
[  248.767002][   T27]  ? wait_on_page_bit+0x50/0x50
[  248.772797][   T27]  ? blkdev_fallocate+0x4d0/0x4d0
[  248.777888][   T27]  ? rcu_lock_release+0x20/0x20
[  248.783095][   T27]  ? add_to_page_cache_lru+0x2a8/0x4a0
[  248.788605][   T27]  do_read_cache_page+0xb05/0x1030
[  248.797515][   T27]  read_part_sector+0xd4/0x4f0
[  248.802428][   T27]  ? vsnprintf+0x14e/0x1c20
[  248.807007][   T27]  adfspart_check_ICS+0xc3/0xe40
[  248.812312][   T27]  ? vsnprintf+0x1b21/0x1c20
[  248.817040][   T27]  ? adfspart_check_ADFS+0x840/0x840
[  248.822645][   T27]  ? snprintf+0xe5/0x140
[  248.826933][   T27]  ? vscnprintf+0x80/0x80
[  248.831589][   T27]  bdev_disk_changed+0x933/0x16c0
[  248.836778][   T27]  ? blk_drop_partitions+0x1b0/0x1b0
[  248.842408][   T27]  ? _atomic_dec_and_lock+0x8f/0x110
[  248.847747][   T27]  blkdev_get_whole+0x2f9/0x390
[  248.852997][   T27]  blkdev_get_by_dev+0x2d0/0xa60
[  248.857990][   T27]  blkdev_open+0x12d/0x2c0
[  248.864028][   T27]  ? block_ioctl+0xf0/0xf0
[  248.868491][   T27]  do_dentry_open+0x7ff/0xf80
[  248.877189][   T27]  path_openat+0x26f5/0x2fa0
[  248.883647][   T27]  ? verify_lock_unused+0x140/0x140
[  248.888884][   T27]  ? slab_post_alloc_hook+0x4c/0x380
[  248.896920][   T27]  ? do_filp_open+0x410/0x410
[  248.910667][   T27]  do_filp_open+0x1e2/0x410
[  248.918639][   T27]  ? vfs_tmpfile+0x300/0x300
[  248.925804][   T27]  ? _raw_spin_unlock+0x24/0x40
[  248.930700][   T27]  ? alloc_fd+0x598/0x630
[  248.937702][   T27]  do_sys_openat2+0x150/0x4b0
[  248.945185][   T27]  ? __lock_acquire+0x7d10/0x7d10
[  248.950374][   T27]  ? do_sys_open+0xe0/0xe0
[  248.957479][   T27]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  248.966186][   T27]  ? lock_chain_count+0x20/0x20
[  248.974845][   T27]  ? vtime_user_exit+0x2c8/0x3e0
[  248.980478][   T27]  __x64_sys_openat+0x135/0x160
[  248.987714][   T27]  do_syscall_64+0x4c/0xa0
[  248.992376][   T27]  ? clear_bhb_loop+0x30/0x80
[  248.997095][   T27]  ? clear_bhb_loop+0x30/0x80
[  249.001944][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  249.007878][   T27] RIP: 0033:0x7f84973c9407
[  249.012554][   T27] RSP: 002b:00007ffef1a78360 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  249.021013][   T27] RAX: ffffffffffffffda RBX: 00007f84972db880 RCX: 00007f84973c9407
[  249.029409][   T27] RDX: 00000000000a0800 RSI: 0000563b19e327f0 RDI: ffffffffffffff9c
[  249.037674][   T27] RBP: 0000563b19e19910 R08: 0000000000000000 R09: 0000000000000000
[  249.046061][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563b19fb6c10
[  249.054361][   T27] R13: 0000563b19e31410 R14: 0000000000000000 R15: 0000563b19fb6c10
[  249.062645][   T27]  </TASK>
[  249.082454][   T27] 
[  249.082454][   T27] Showing all locks held in the system:
[  249.090394][   T27] 1 lock held by khungtaskd/27:
[  249.097845][   T27]  #0: ffffffff8c31c720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  249.107426][   T27] 3 locks held by kworker/u4:1/144:
[  249.112849][   T27] 2 locks held by getty/3947:
[  249.117556][   T27]  #0: ffff88814d100098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  249.127748][   T27]  #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70
[  249.138248][   T27] 4 locks held by udevd/4175:
[  249.151206][   T27]  #0: ffff888051eaf418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50
[  249.160096][   T27]  #1: ffff88805f00b088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0
[  249.170328][   T27]  #2: ffff88806348f918 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0
[  249.191170][   T27]  #3: ffff88801eb5c220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330
[  249.200510][   T27] 2 locks held by kworker/1:4/4193:
[  249.218288][   T27]  #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  249.229535][   T27]  #1: ffffc90002e0fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  249.241288][   T27] 1 lock held by udevd/4496:
[  249.245921][   T27]  #0: ffff88802099a118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60
[  249.256170][   T27] 7 locks held by kworker/1:14/5052:
[  249.261575][   T27]  #0: ffff888141594d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  249.272535][   T27]  #1: ffffc90002fafd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  249.284647][   T27]  #2: ffff88814860e220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0
[  249.293845][   T27]  #3: ffff88801eb5c220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480
[  249.305260][   T27]  #4: ffff88807c6901a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480
[  249.316582][   T27]  #5: ffff88805cc28208 (i2c_register_adapter){+.+.}-{3:3}, at: i2c_transfer+0x117/0x3a0
[  249.326763][ T5052] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  249.333043][   T27]  #6: ffffe8ffffd76a08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x136/0x7d0
[  249.348726][   T27] 3 locks held by kworker/1:20/5059:
[  249.365703][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  249.377356][   T27]  #1: ffffc900033ffd00 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  249.388433][   T27]  #2: ffffffff8c3210b0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4c0
[  249.408037][ T5052] usb 1-1: USB disconnect, device number 20
[  249.425420][   T27] 4 locks held by kworker/u4:9/6304:
[  249.431746][   T27]  #0: ffff888016dcd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  249.442523][   T27]  #1: ffffc90003b9fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  249.453091][   T27]  #2: ffffffff8d429850 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0
[  249.462882][   T27]  #3: ffffffff8c3211a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750
[  249.475865][   T27] 1 lock held by udevd/6485:
[  249.480510][   T27]  #0: ffff8880206a3918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60
[  249.494767][   T27] 
[  249.504018][   T27] =============================================
[  249.504018][   T27] 
[  249.540316][   T27] NMI backtrace for cpu 1
[  249.544716][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  249.551958][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  249.562047][   T27] Call Trace:
[  249.565336][   T27]  <TASK>
[  249.568299][   T27]  dump_stack_lvl+0x188/0x250
[  249.573000][   T27]  ? show_regs_print_info+0x20/0x20
[  249.578204][   T27]  ? load_image+0x400/0x400
[  249.582748][   T27]  ? tick_nohz_tick_stopped+0x7b/0xb0
[  249.588142][   T27]  ? nmi_cpu_backtrace+0x1b2/0x3d0
[  249.593286][   T27]  nmi_cpu_backtrace+0x3a2/0x3d0
[  249.598268][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  249.604459][   T27]  ? _printk+0xda/0x130
[  249.608645][   T27]  ? load_image+0x400/0x400
[  249.613182][   T27]  ? load_image+0x400/0x400
[  249.617723][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  249.623831][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  249.629841][   T27]  watchdog+0xe0f/0xe50
[  249.634017][   T27]  kthread+0x436/0x520
[  249.638103][   T27]  ? hungtask_pm_notify+0x40/0x40
[  249.643146][   T27]  ? kthread_blkcg+0xd0/0xd0
[  249.647770][   T27]  ret_from_fork+0x1f/0x30
[  249.652233][   T27]  </TASK>
[  249.656103][   T27] Sending NMI from CPU 1 to CPUs 0:
[  249.661570][    C0] NMI backtrace for cpu 0
[  249.661581][    C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  249.661597][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  249.661608][    C0] Workqueue: phy9 ieee80211_iface_work
[  249.661633][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60
[  249.661653][    C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 40 5a 10 0c 48 89 de 5b e9 77 3a 44 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d 14 60 89 7e 65 8b 15 15 60 89 7e 81 e2 00
[  249.661668][    C0] RSP: 0018:ffffc90000007e20 EFLAGS: 00000097
[  249.661681][    C0] RAX: ffffffff8168b81f RBX: 0000000000000000 RCX: ffff88813fe90000
[  249.661693][    C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000020
[  249.661703][    C0] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004
[  249.661713][    C0] R10: dffffc0000000000 R11: fffff52000000f84 R12: ffff8880b902a2a8
[  249.661736][    C0] R13: ffff8880b902a28c R14: 0000000000000000 R15: 7fffffffffffffff
[  249.661747][    C0] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  249.661761][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  249.661773][    C0] CR2: 0000001b32616ff8 CR3: 000000001f420000 CR4: 00000000003506f0
[  249.661788][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  249.661798][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  249.661808][    C0] Call Trace:
[  249.661813][    C0]  <IRQ>
[  249.661818][    C0]  __hrtimer_get_next_event+0x3ee/0x640
[  249.661845][    C0]  hrtimer_interrupt+0x420/0x8d0
[  249.661876][    C0]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  249.661894][    C0]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  249.661915][    C0]  </IRQ>
[  249.661919][    C0]  <TASK>
[  249.661924][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  249.661943][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[  249.661961][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> bf 6f 8e f7 65 8b 05 40 8c 3e 76 85 c0 74 3c 48 c7 04 24 0e 36
[  249.661975][    C0] RSP: 0018:ffffc90000ce7b00 EFLAGS: 00000206
[  249.661988][    C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 29ddcbfab9fcc300
[  249.662000][    C0] RDX: dffffc0000000000 RSI: ffffffff8a2b1c00 RDI: 0000000000000001
[  249.662011][    C0] RBP: ffffc90000ce7b80 R08: ffffffff901b91c7 R09: 1ffffffff2037238
[  249.662023][    C0] R10: dffffc0000000000 R11: fffffbfff2037239 R12: dffffc0000000000
[  249.662036][    C0] R13: ffff88805f395860 R14: ffff88805f395878 R15: 1ffff9200019cf60
[  249.662057][    C0]  ? _raw_spin_unlock+0x40/0x40
[  249.662074][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  249.662095][    C0]  skb_dequeue+0x120/0x150
[  249.662111][    C0]  ? ieee80211_iface_work+0x961/0xc60
[  249.662131][    C0]  ieee80211_iface_work+0x977/0xc60
[  249.662154][    C0]  process_one_work+0x85f/0x1010
[  249.662179][    C0]  ? worker_detach_from_pool+0x240/0x240
[  249.662195][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  249.662215][    C0]  ? _raw_spin_lock_irq+0xb7/0xf0
[  249.662231][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[  249.662249][    C0]  ? wq_worker_running+0x97/0x170
[  249.662265][    C0]  worker_thread+0xaa6/0x1290
[  249.662295][    C0]  kthread+0x436/0x520
[  249.662309][    C0]  ? rcu_lock_release+0x20/0x20
[  249.662325][    C0]  ? kthread_blkcg+0xd0/0xd0
[  249.662341][    C0]  ret_from_fork+0x1f/0x30
[  249.662365][    C0]  </TASK>
[  249.821439][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  250.011853][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  250.019073][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  250.029288][   T27] Call Trace:
[  250.032601][   T27]  <TASK>
[  250.035559][   T27]  dump_stack_lvl+0x188/0x250
[  250.040292][   T27]  ? show_regs_print_info+0x20/0x20
[  250.045517][   T27]  ? load_image+0x400/0x400
[  250.050051][   T27]  panic+0x2e5/0x810
[  250.053978][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  250.059927][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  250.064486][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  250.070058][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  250.076338][   T27]  watchdog+0xe4e/0xe50
[  250.080549][   T27]  kthread+0x436/0x520
[  250.084660][   T27]  ? hungtask_pm_notify+0x40/0x40
[  250.089874][   T27]  ? kthread_blkcg+0xd0/0xd0
[  250.094496][   T27]  ret_from_fork+0x1f/0x30
[  250.098934][   T27]  </TASK>
[  250.102308][   T27] Kernel Offset: disabled
[  250.106647][   T27] Rebooting in 86400 seconds..