last executing test programs:

4m20.791906331s ago: executing program 0 (id=487):
socket$alg(0x26, 0x5, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
close(0x3)

4m20.068433614s ago: executing program 0 (id=492):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x10, 0x803, 0x0)
fstatfs(r0, &(0x7f0000000280)=""/254)

4m19.863324081s ago: executing program 0 (id=493):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
setuid(0xee00)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1)

4m19.600856329s ago: executing program 0 (id=497):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000040)={0xa0202, 0x0, 0x11}, 0x18)

4m19.307796448s ago: executing program 0 (id=500):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xfffffff7}]}}]}, 0x38}}, 0x0)

4m18.710801958s ago: executing program 0 (id=506):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r1, @ANYBLOB="400096040a000200aa"], 0x30}}, 0x0)

4m18.214235294s ago: executing program 32 (id=506):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r1, @ANYBLOB="400096040a000200aa"], 0x30}}, 0x0)

3m35.364759201s ago: executing program 2 (id=909):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x58}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)

3m35.120069629s ago: executing program 2 (id=913):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)

3m34.77427872s ago: executing program 2 (id=914):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_usb_connect(0x4, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x21, 0x0, 0x10, 0x1}}]}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m33.83454092s ago: executing program 2 (id=919):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000001640)={[{@map_normal}, {@overriderock}, {@overriderock}, {@utf8}, {@block={'block', 0x3d, 0x800}}, {@check_strict}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@session={'session', 0x3d, 0x36}}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x5a}}, {@cruft}]}, 0x8, 0xa17, &(0x7f0000000400)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

3m33.396574264s ago: executing program 2 (id=923):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000400)={0x10, 0x0, 0x3}, 0x10)

3m32.649474148s ago: executing program 2 (id=930):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x34, r1, 0x501, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x8010)

3m32.132223315s ago: executing program 33 (id=930):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x34, r1, 0x501, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x8010)

5.012910309s ago: executing program 6 (id=2771):
unshare(0x2040400)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
close(r0)
process_madvise(r0, 0x0, 0x0, 0xc, 0x0)

4.874347104s ago: executing program 6 (id=2772):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000140), 0x5, 0x97a1, &(0x7f0000009780)="$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")
mknod(0x0, 0x100, 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x100)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f0000005b80)={0x2440, 0x300000000000000})

3.499986968s ago: executing program 6 (id=2784):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000017c0)="44504f81d37c35695248", 0xa}], 0x2}, 0x2404c0d0)

3.174509748s ago: executing program 1 (id=2787):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880)

2.952621365s ago: executing program 1 (id=2789):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000480)={0x8, 0x0, [{0xbf9, 0x0, 0xffffffffffffff9f}, {0x9bd, 0x0, 0xab40}, {0x9c8, 0x0, 0xfffffffffffffffa}, {0x581, 0x0, 0x81}, {0x636, 0x0, 0x9}, {0x40000003, 0x0, 0xa65}, {0x86f, 0x0, 0x83}, {0x0, 0x0, 0x3}]})

2.745748772s ago: executing program 6 (id=2792):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x50)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000380), &(0x7f0000000100)=@tcp6=r1, 0x1}, 0x20)

2.574317187s ago: executing program 6 (id=2794):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.574159337s ago: executing program 1 (id=2795):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000406d0404"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.536267089s ago: executing program 4 (id=2796):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x48, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x4, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0xc], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x7, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8002, 0x3, 0x2, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_MAX_RATE64={0x70}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x8000}]}, @TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{0x0, 0x3, 0x6}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x4160}, {0x0, 0x3, 0x8000000000000000}, {0x0, 0x3, 0x8}, {0x0, 0x3, 0x80000000}, {0x0, 0x3, 0x8}, {0x0, 0x3, 0xb7a}, {0x0, 0x3, 0x7}, {}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x3}]}]}}}]}, 0x11c}}, 0x0)

2.270272637s ago: executing program 4 (id=2798):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x3, 0x0, 0x8009}, 'syz0\x00', 0x1b})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7f)
ioctl$UI_DEV_CREATE(r0, 0x5501)

1.918558059s ago: executing program 4 (id=2801):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
write(r0, &(0x7f0000001540)="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", 0x2a1)

1.8713658s ago: executing program 3 (id=2802):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan0\x00'})

1.659736447s ago: executing program 3 (id=2805):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(r0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x101a41, 0x0)
writev(r0, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f00000002c0)="c1", 0x1}], 0x2)

1.442424454s ago: executing program 5 (id=2806):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000080)="93ea", 0x2, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000008400000002000000ecff40"], 0x20, 0x4048800}, 0x0)

1.442180924s ago: executing program 3 (id=2807):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10)
syz_emit_ethernet(0xf2, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0011ab"], 0x0)

1.363919687s ago: executing program 6 (id=2808):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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")
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x13}, 0x18)

1.2449961s ago: executing program 5 (id=2809):
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0)

1.2448825s ago: executing program 3 (id=2810):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'wlan0\x00', @broadcast})

1.071289136s ago: executing program 3 (id=2811):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0)
ppoll(&(0x7f0000000080)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0)

916.708761ms ago: executing program 5 (id=2812):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})

842.506133ms ago: executing program 4 (id=2813):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0)

771.164846ms ago: executing program 5 (id=2814):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xffffffffffffffc3, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)

649.604209ms ago: executing program 3 (id=2815):
syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f0000000400), 0xf8, 0x1119, &(0x7f0000003600)="$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")
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x40, 0x18c)

558.334852ms ago: executing program 5 (id=2816):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x78, r1, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_FRAME={0x42, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @broadcast, @initial, {0x1}, @value=@ver_80211n={0x0, 0x3bd, 0x3, 0x2, 0x0, 0x2, 0x1}}, 0x2684, 0x61, @random=0x6bd, @void, @val={0x2d, 0x1a, {0x40, 0x3, 0x5, 0x0, {0x2, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x10)

549.176133ms ago: executing program 4 (id=2817):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='bpf\x00', &(0x7f0000000180)='./file0\x00', r0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

515.071834ms ago: executing program 1 (id=2818):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1})

330.50944ms ago: executing program 5 (id=2819):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x129081, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="95028000000000000003"], 0x78)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000180)={0x8, 0x1})

308.376631ms ago: executing program 1 (id=2820):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x184, r1, 0xb97534d5fe9704cf, 0x70bd27, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "8919"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf7, 0xac, "4815373bc7d0240c2d5cc40ab680106e1a550cefffa7a24460e1227fcaba561b81b46c1b2de2d7ddabae934709086997dc15630702c08bd0ad0d617248a77f76570c2d5f4b0bf44a413d0806f00c757dc35e76988622b7d08d074407a7f9927315d40acd59fda2093644d4b5f280ea9cab6ea6c996585ba604959b485644581eb83c0ed3a63eee5623bdc61398a90f700ada0caabeb8ff3feec072b2ca1326c7f131587ff8a511913f097156ac43900f13158c0433b1dea1a1820d4369ec9f108204c9a22428dfdb971918883da49ecabb84d08e625d4aceaa584f3e173142c15fd5fd7ccd3b13bee8131119a6bd63dd2256c0"}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x32}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0xffffffffffffffa0, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44880}, 0x8008)

64.586438ms ago: executing program 4 (id=2821):
r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa)
close(r0)
r1 = timerfd_create(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

0s ago: executing program 1 (id=2822):
syz_mount_image$nilfs2(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x3214206, &(0x7f00000001c0)=ANY=[], 0x7, 0xf11, &(0x7f0000002040)="$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")
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

kernel console output (not intermixed with test programs):

5.094489][ T9602] FAT-fs (loop5): Directory bread(block 70) failed
[  285.111804][ T9602] FAT-fs (loop5): Directory bread(block 71) failed
[  285.118491][ T9602] FAT-fs (loop5): Directory bread(block 72) failed
[  285.132235][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  285.139130][ T9609] netem: incorrect ge model size
[  285.195523][ T9602] FAT-fs (loop5): Directory bread(block 73) failed
[  285.203183][ T4351] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  285.211713][ T9609] netem: change failed
[  285.419808][ T4351] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  285.439389][ T4351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  285.468596][ T4351] usb 5-1: Product: syz
[  285.483620][ T4351] usb 5-1: Manufacturer: syz
[  285.488321][ T4351] usb 5-1: SerialNumber: syz
[  285.518289][ T4351] usb 5-1: config 0 descriptor??
[  285.557107][ T4351] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  285.585540][ T4351] dvb-usb: bulk message failed: -22 (2/0)
[  285.606738][ T4351] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  285.652051][ T4351] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  285.661742][ T4351] usb 5-1: media controller created
[  285.721958][ T4351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  285.749607][ T9607] cxusb: i2c rd: len=1792 is too big!
[  285.749607][ T9607] 
[  285.790653][ T4351] cxusb: set interface failed
[  285.798252][ T4351] dvb-usb: bulk message failed: -22 (1/0)
[  286.067690][ T4351] DVB: Unable to find symbol mt352_attach()
[  286.082487][ T4351] dvb-usb: bulk message failed: -22 (5/0)
[  286.119467][ T4351] zl10353_read_register: readreg error (reg=127, ret==-121)
[  286.129399][ T4351] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  286.456854][ T4351] rc_core: IR keymap rc-dvico-mce not found
[  286.473468][ T4351] Registered IR keymap rc-empty
[  286.487572][ T4351] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  286.526921][ T4351] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input13
[  286.543739][ T4319] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  286.570056][ T4351] dvb-usb: schedule remote query interval to 100 msecs.
[  286.574196][ T9648] loop6: detected capacity change from 0 to 512
[  286.579134][ T4351] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  286.624441][ T4351] usb 5-1: USB disconnect, device number 11
[  286.647791][ T9648] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  286.718816][ T9650] netlink: 536 bytes leftover after parsing attributes in process `syz.3.1965'.
[  286.762534][ T4319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  286.784087][ T4351] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  286.800663][ T4319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.817628][ T9652] loop4: detected capacity change from 0 to 128
[  286.824610][ T4319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.860294][ T4319] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  286.869855][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.914049][ T9652] VFS: Found a Xenix FS (block size = 512) on device loop4
[  286.936787][ T9648] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  286.957709][ T4319] usb 6-1: config 0 descriptor??
[  287.000630][ T9648] FAT-fs (loop6): Filesystem has been set read-only
[  287.008511][ T9648] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  287.047537][ T9648] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  287.132441][ T4279] sysv_free_block: trying to free block not in datazone
[  287.169989][ T4279] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  287.364689][ T9656] loop3: detected capacity change from 0 to 4096
[  287.395478][ T4319] hid-rmi 0003:0461:4E72.000B: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.5-1/input0
[  287.463531][ T9661] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  287.629691][ T8277] usb 6-1: USB disconnect, device number 9
[  287.707077][ T9666] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  287.779844][ T9666] Remounting filesystem read-only
[  287.896356][ T9662] fido_id[9662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  288.024300][ T4272] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  288.160668][ T4504] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  288.370640][ T4504] usb 7-1: Using ep0 maxpacket: 32
[  288.384035][ T4504] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  288.412725][ T4504] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.430311][ T4504] usb 7-1: Product: syz
[  288.446522][ T4504] usb 7-1: Manufacturer: syz
[  288.452003][ T9680] loop3: detected capacity change from 0 to 1024
[  288.455370][ T4504] usb 7-1: SerialNumber: syz
[  288.487337][ T9658] loop4: detected capacity change from 0 to 40427
[  288.496012][ T4504] usb 7-1: config 0 descriptor??
[  288.518262][ T4504] dw2102: su3000_identify_state
[  288.539846][ T4504] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  288.548627][ T9680] hfsplus: bad catalog entry type
[  288.567838][ T4504] dw2102: su3000_power_ctrl: 1, initialized 0
[  288.601445][ T4504] dvb-usb: bulk message failed: -22 (2/0)
[  288.609286][ T9658] F2FS-fs (loop4): Found nat_bits in checkpoint
[  288.650058][ T4504] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  288.670073][ T5492] hfsplus: b-tree write err: -5, ino 25
[  288.696520][ T5492] hfsplus: b-tree write err: -5, ino 4
[  288.699387][ T4504] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  288.718452][ T5492] hfsplus: b-tree write err: -5, ino 2
[  288.720180][ T9672] dvb-usb: bulk message failed: -22 (4/0)
[  288.770207][ T9672] dw2102: i2c transfer failed.
[  288.770994][ T4504] usb 7-1: media controller created
[  288.811632][ T4504] dvb-usb: bulk message failed: -22 (6/0)
[  288.817447][ T4504] dw2102: i2c transfer failed.
[  288.825997][ T9658] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  288.863003][ T4504] dvb-usb: bulk message failed: -22 (6/0)
[  288.869176][ T4504] dw2102: i2c transfer failed.
[  288.919932][ T4504] dvb-usb: bulk message failed: -22 (6/0)
[  288.939030][ T4504] dw2102: i2c transfer failed.
[  288.959488][ T4504] dvb-usb: bulk message failed: -22 (6/0)
[  288.970043][ T4504] dw2102: i2c transfer failed.
[  288.985467][ T4504] dvb-usb: bulk message failed: -22 (6/0)
[  289.020895][ T4504] dw2102: i2c transfer failed.
[  289.026342][ T4504] dvb-usb: bulk message failed: -22 (6/0)
[  289.033938][   T26] audit: type=1800 audit(1774863121.394:135): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1969" name="file1" dev="loop4" ino=10 res=0 errno=0
[  289.049082][ T4504] dw2102: i2c transfer failed.
[  289.054412][    C1] vkms_vblank_simulate: vblank timer overrun
[  289.100891][ T4504] dvb-usb: MAC address: 02:02:02:02:02:02
[  289.155048][ T4504] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  289.167317][ T4279] syz-executor: attempt to access beyond end of device
[  289.167317][ T4279] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  289.199599][ T4504] dvb-usb: bulk message failed: -22 (3/0)
[  289.231259][ T4504] dw2102: command 0x0e transfer failed.
[  289.238672][ T9674] loop1: detected capacity change from 0 to 40427
[  289.260465][ T4504] dvb-usb: bulk message failed: -22 (3/0)
[  289.275799][ T4504] dw2102: command 0x0e transfer failed.
[  289.347984][ T9674] F2FS-fs (loop1): Found nat_bits in checkpoint
[  289.582945][ T9674] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  289.620563][ T9674] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  289.646648][ T4504] dvb-usb: bulk message failed: -22 (3/0)
[  289.653792][ T4504] dw2102: command 0x0e transfer failed.
[  289.735838][ T4504] dvb-usb: bulk message failed: -22 (3/0)
[  289.753369][ T4504] dw2102: command 0x0e transfer failed.
[  289.759161][ T4504] dvb-usb: bulk message failed: -22 (1/0)
[  289.800432][ T4504] dw2102: command 0x51 transfer failed.
[  290.020698][ T4351] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  290.056448][ T4504] DVB: Unable to find symbol ds3000_attach()
[  290.065695][ T4504] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  290.134963][ T9716] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  290.252602][ T4351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  290.274434][ T4351] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  290.310633][ T4351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  290.350427][ T4351] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  290.370903][ T4351] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  290.378792][ T4504] rc_core: IR keymap rc-su3000 not found
[  290.389324][ T4504] Registered IR keymap rc-empty
[  290.410015][ T4504] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  290.422756][ T4504] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input14
[  290.427220][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.484983][ T4351] usb 6-1: config 0 descriptor??
[  290.497224][ T4504] dvb-usb: schedule remote query interval to 150 msecs.
[  290.506063][ T4504] dw2102: su3000_power_ctrl: 0, initialized 1
[  290.518155][ T4504] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  290.585098][ T4504] usb 7-1: USB disconnect, device number 5
[  290.694290][ T4504] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  290.701852][ T4351] hdpvr 6-1:0.0: firmware version 0x3c dated íôH"Lëžlršߧ·•LɈPªÇmÏg"Á
ý̓‡_­-h÷•eÎ/}
[  290.733203][ T4351] hdpvr 6-1:0.0: untested firmware, the driver might not work.
[  290.890597][ T4325] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  290.901868][ T9725] loop1: detected capacity change from 0 to 32768
[  290.932303][ T9725] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1994 (9725)
[  290.997683][ T9725] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  291.009455][ T9725] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  291.025605][ T9725] BTRFS info (device loop1): setting nodatacow, compression disabled
[  291.036213][ T9725] BTRFS info (device loop1): force clearing of disk cache
[  291.054291][ T9725] BTRFS info (device loop1): enabling ssd optimizations
[  291.061817][ T9725] BTRFS info (device loop1): using spread ssd allocation scheme
[  291.069657][ T9725] BTRFS info (device loop1): turning off barriers
[  291.076370][ T9725] BTRFS info (device loop1): disabling free space tree
[  291.083359][ T9725] BTRFS info (device loop1): not using ssd optimizations
[  291.083541][ T4325] usb 5-1: Using ep0 maxpacket: 32
[  291.090591][ T9725] BTRFS info (device loop1): not using spread ssd allocation scheme
[  291.114038][ T4325] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  291.128209][ T4325] usb 5-1: config 0 has no interface number 0
[  291.136999][ T4325] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  291.155450][ T4325] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  291.174367][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.180725][ T4351] hdpvr 6-1:0.0: Could not setup controls
[  291.191943][ T4325] usb 5-1: Product: syz
[  291.197592][ T4325] usb 5-1: Manufacturer: syz
[  291.207293][ T4325] usb 5-1: SerialNumber: syz
[  291.216044][ T4325] usb 5-1: config 0 descriptor??
[  291.221905][ T4351] hdpvr 6-1:0.0: registering videodev failed
[  291.265124][ T4325] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  291.279998][ T4351] hdpvr: probe of 6-1:0.0 failed with error -71
[  291.300285][ T4351] usb 6-1: USB disconnect, device number 10
[  291.333939][ T4325] em28xx 5-1:0.132: Video interface 132 found:
[  291.342259][ T9725] BTRFS info (device loop1): rebuilding free space tree
[  291.453618][ T9725] BTRFS info (device loop1): disabling free space tree
[  291.469505][ T9725] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  291.484278][ T9725] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  291.635390][ T4325] em28xx 5-1:0.132: unknown em28xx chip ID (39)
[  291.821828][ T5492] BTRFS info (device loop1): cannot satisfy tickets, dumping space info
[  291.831233][ T5492] BTRFS info (device loop1): space_info DATA+METADATA (sub-group id 0) has 10502144 free, is full
[  291.842391][ T5492] BTRFS info (device loop1): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=983040, readonly=0 zone_unusable=0
[  291.856155][ T5492] BTRFS info (device loop1): failing ticket with 117436416 bytes
[  291.873977][ T9725] BTRFS info (device loop1): space_info DATA+METADATA (sub-group id 0) has 10502144 free, is full
[  291.885924][ T9725] BTRFS info (device loop1): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=983040, readonly=0 zone_unusable=0
[  291.899983][ T9725] BTRFS info (device loop1): global_block_rsv: size 983040 reserved 983040
[  291.905830][ T4325] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  291.909441][ T9725] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  291.927245][ T9725] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  291.935174][ T9725] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[  291.943090][ T9725] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0
[  291.988038][ T4325] em28xx 5-1:0.132: board has no eeprom
[  292.070444][ T4325] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  292.080747][ T4325] em28xx 5-1:0.132: analog set to bulk mode.
[  292.109797][ T4325] usb 5-1: USB disconnect, device number 12
[  292.129587][ T4504] em28xx 5-1:0.132: Registering V4L2 extension
[  292.163222][ T4325] em28xx 5-1:0.132: Disconnecting em28xx
[  292.211248][ T4269] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  292.222990][ T9770] loop6: detected capacity change from 0 to 256
[  292.271684][ T9770] exfat: Deprecated parameter 'namecase'
[  292.299340][ T9770] exfat: Deprecated parameter 'namecase'
[  292.368737][ T9770] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  292.442982][ T9774] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  292.575322][ T9770] syz.6.2005: attempt to access beyond end of device
[  292.575322][ T9770] loop6: rw=0, sector=34225520824, nr_sectors = 1 limit=256
[  293.039699][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'.
[  293.056467][ T4504] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  293.070537][ T4504] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  293.110569][ T4504] em28xx 5-1:0.132: No AC97 audio processor
[  293.138100][ T4504] usb 5-1: Decoder not found
[  293.158433][ T9789] loop1: detected capacity change from 0 to 2048
[  293.167576][ T4504] em28xx 5-1:0.132: failed to create media graph
[  293.187056][ T4504] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  293.200894][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2014'.
[  293.202540][ T4504] em28xx 5-1:0.132: Remote control support is not available for this card.
[  293.261047][ T4325] em28xx 5-1:0.132: Closing input extension
[  293.271085][ T9795] block nbd0: Unsupported socket: should be TCP or UNIX.
[  293.282193][ T9797] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  293.314200][ T4325] em28xx 5-1:0.132: Freeing device
[  293.833803][ T9813] loop1: detected capacity change from 0 to 2048
[  293.843311][ T9813] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  293.865137][ T9813] NILFS (loop1): mounting unchecked fs
[  293.905465][ T9813] NILFS (loop1): recovery complete
[  293.926062][ T9816] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  294.010469][ T4325] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  294.231769][ T4325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  294.254199][ T4325] usb 5-1: config 0 interface 0 has no altsetting 0
[  294.286179][ T4325] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  294.304528][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.325858][ T4325] usb 5-1: Product: syz
[  294.331158][ T4325] usb 5-1: Manufacturer: syz
[  294.336347][ T4325] usb 5-1: SerialNumber: syz
[  294.343606][ T4325] usb 5-1: config 0 descriptor??
[  294.353048][ T4325] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  294.373707][ T4325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  294.409881][ T4325] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  294.436620][ T4325] usb 5-1: media controller created
[  294.470098][ T9831] netlink: 'syz.6.2029': attribute type 39 has an invalid length.
[  294.483957][ T4325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  294.718233][ T4325] DVB: Unable to find symbol tda10046_attach()
[  294.735216][ T4325] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  294.755449][ T4325] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  295.115544][ T9846] loop3: detected capacity change from 0 to 1024
[  295.116688][ T4325] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71
[  295.132665][ T4325] usb 5-1: USB disconnect, device number 13
[  295.276477][   T26] audit: type=1800 audit(1774863127.634:136): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2036" name="file1" dev="loop3" ino=20 res=0 errno=0
[  295.453557][   T48] hfsplus: b-tree write err: -5, ino 25
[  295.459420][   T48] hfsplus: b-tree write err: -5, ino 4
[  295.484647][   T48] hfsplus: b-tree write err: -5, ino 2
[  295.498244][ T9855] loop5: detected capacity change from 0 to 512
[  295.546758][ T9855] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  295.681081][ T9855] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  295.710640][ T9855] FAT-fs (loop5): Filesystem has been set read-only
[  295.717719][ T9855] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  295.760908][ T9855] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  296.330040][ T9848] loop1: detected capacity change from 0 to 40427
[  296.386875][ T9848] F2FS-fs (loop1): invalid crc value
[  296.407691][ T9848] F2FS-fs (loop1): Found nat_bits in checkpoint
[  296.577358][ T9848] F2FS-fs (loop1): Start checkpoint disabled!
[  296.614620][ T9848] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  296.936596][ T9889] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«=
[  297.163625][ T9892] loop3: detected capacity change from 0 to 64
[  297.669853][ T9880] loop6: detected capacity change from 0 to 40427
[  297.704664][ T9880] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  297.726833][ T9880] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  297.797289][ T9880] F2FS-fs (loop6): Found nat_bits in checkpoint
[  297.885347][ T9910] loop4: detected capacity change from 0 to 128
[  297.907620][ T9910] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  297.921003][ T4319] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  297.955308][ T9910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  297.977709][ T9880] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  297.990818][ T9880] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  298.010588][ T4325] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  298.116949][ T4319] usb 4-1: Using ep0 maxpacket: 32
[  298.119470][   T26] audit: type=1400 audit(1774863130.474:137): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=262620616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 pid=9914 comm="syz.5.2066"
[  298.160921][ T4319] usb 4-1: config 0 has an invalid interface number: 71 but max is 0
[  298.232666][ T4325] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  298.254654][ T4325] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  298.279022][ T4319] usb 4-1: config 0 has no interface number 0
[  298.280230][ T4325] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  298.311895][ T4319] usb 4-1: config 0 interface 71 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.322509][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  298.356218][ T4325] usb 2-1: SerialNumber: syz
[  298.360384][ T4319] usb 4-1: config 0 interface 71 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.397544][ T4319] usb 4-1: config 0 interface 71 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  298.451265][ T4319] usb 4-1: config 0 interface 71 has no altsetting 0
[  298.458085][ T4319] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  298.490536][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.519219][ T4319] usb 4-1: config 0 descriptor??
[  298.576686][ T4325] usb 2-1: 0:2 : does not exist
[  298.644989][ T4325] usb 2-1: USB disconnect, device number 7
[  298.904786][ T8698] udevd[8698]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  298.941368][ T4319] uclogic 0003:28BD:0933.000C: interface is invalid, ignoring
[  299.126152][ T9931] loop4: detected capacity change from 0 to 2048
[  299.169987][ T9919] loop5: detected capacity change from 0 to 32768
[  299.174683][ T4350] usb 4-1: USB disconnect, device number 11
[  299.193672][ T9931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  299.217272][ T9933] loop6: detected capacity change from 0 to 1764
[  299.929256][ T9949] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  299.964015][ T9949] team0: Device ipvlan2 is already an upper device of the team interface
[  300.117400][ T9953] loop6: detected capacity change from 0 to 4096
[  300.174150][ T9953] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  300.206704][ T9953] NILFS (loop6): mounting unchecked fs
[  300.310308][ T9953] NILFS (loop6): recovery complete
[  300.351646][ T9964] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  300.544683][ T9966] loop5: detected capacity change from 0 to 1024
[  301.607068][ T9963] loop1: detected capacity change from 0 to 32768
[  301.695394][ T9963] XFS (loop1): Mounting V5 Filesystem
[  301.705777][ T9995] loop4: detected capacity change from 0 to 256
[  301.753689][ T9970] loop6: detected capacity change from 0 to 32768
[  301.871325][ T9970] JBD2: Ignoring recovery information on journal
[  301.929164][ T9963] XFS (loop1): Ending clean mount
[  301.970084][ T9963] XFS (loop1): Quotacheck needed: Please wait.
[  302.028145][ T9970] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  302.148477][ T9963] XFS (loop1): Quotacheck: Done.
[  302.340855][ T6802] ocfs2: Unmounting device (7,6) on (node local)
[  302.468969][T10015] loop3: detected capacity change from 0 to 256
[  302.479036][ T4269] XFS (loop1): Unmounting Filesystem
[  302.506742][T10019] loop4: detected capacity change from 0 to 1024
[  302.547722][T10015] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d)
[  302.552741][   T26] audit: type=1800 audit(1774863134.914:138): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2111" name="file1" dev="loop4" ino=20 res=0 errno=0
[  302.679817][T10017] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  302.727688][T10017] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  302.743038][   T11] hfsplus: b-tree write err: -5, ino 25
[  302.748911][   T11] hfsplus: b-tree write err: -5, ino 4
[  302.763609][   T11] hfsplus: b-tree write err: -5, ino 2
[  302.777722][T10017] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  302.858912][T10017] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  302.949165][T10017] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  303.000092][T10017] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  303.025381][T10017] ntfs: volume version 0.0.
[  303.043350][T10017] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  303.076307][T10017] ntfs: (device loop6): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  303.111148][T10017] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  303.190490][ T4504] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  303.310977][T10033] syz.3.2118 uses old SIOCAX25GETINFO
[  303.400568][ T4504] usb 6-1: Using ep0 maxpacket: 32
[  303.417304][ T4504] usb 6-1: config 0 has an invalid interface number: 167 but max is 0
[  303.441469][ T4504] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.488225][ T4504] usb 6-1: config 0 has no interface number 0
[  303.520582][ T4504] usb 6-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024
[  303.532229][ T4504] usb 6-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0
[  303.553223][ T4504] usb 6-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0
[  303.580443][ T4504] usb 6-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  303.604542][ T4504] usb 6-1: config 0 interface 167 has no altsetting 0
[  303.650216][ T4504] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63
[  303.670465][ T4504] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.678528][ T4504] usb 6-1: Product: syz
[  303.700448][ T4504] usb 6-1: Manufacturer: syz
[  303.716464][ T4504] usb 6-1: SerialNumber: syz
[  303.726919][ T4504] usb 6-1: config 0 descriptor??
[  303.757971][T10025] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  303.821005][T10027] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2114 (10027)
[  303.908129][T10027] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  303.956144][T10027] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  303.990567][ T4504] usbtest 6-1:0.167: couldn't get endpoints, -22
[  303.995002][T10047] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2125'.
[  303.997561][ T4504] usbtest: probe of 6-1:0.167 failed with error -22
[  304.022648][T10027] BTRFS info (device loop4): enabling auto defrag
[  304.029145][T10027] BTRFS info (device loop4): use no compression
[  304.048672][T10027] BTRFS info (device loop4): max_inline at 4096
[  304.063951][ T4504] usb 6-1: USB disconnect, device number 11
[  304.080831][T10027] BTRFS info (device loop4): using free space tree
[  304.430028][T10027] BTRFS info (device loop4): enabling ssd optimizations
[  304.657694][ T4279] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  304.756934][T10054] set_capacity_and_notify: 2 callbacks suppressed
[  304.756952][T10054] loop3: detected capacity change from 0 to 32768
[  304.882934][T10054] (syz.3.2126,10054,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  304.945544][T10054] (syz.3.2126,10054,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  305.039168][T10054] (syz.3.2126,10054,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  305.199523][T10054] (syz.3.2126,10054,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  305.251180][T10054] JBD2: Ignoring recovery information on journal
[  305.371380][T10054] (syz.3.2126,10054,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  305.420771][T10054] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  305.485245][T10054] (syz.3.2126,10054,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  305.612479][T10054] (syz.3.2126,10054,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  305.924577][T10075] loop1: detected capacity change from 0 to 40427
[  305.940640][T10054] (syz.3.2126,10054,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[  305.967866][T10075] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(918016)
[  305.989272][T10075] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  306.050949][T10075] F2FS-fs (loop1): invalid crc value
[  306.060299][T10054] (syz.3.2126,10054,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[  306.111790][T10075] F2FS-fs (loop1): Found nat_bits in checkpoint
[  306.160928][T10054] (syz.3.2126,10054,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  306.170228][T10054] (syz.3.2126,10054,0):ocfs2_quota_read:201 ERROR: status = -5
[  306.170536][T10095] loop5: detected capacity change from 0 to 128
[  306.200775][T10080] loop6: detected capacity change from 0 to 32768
[  306.229328][T10095] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  306.244836][T10080] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.2132 (10080)
[  306.260735][T10095] ext4 filesystem being mounted at /316/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  306.271101][T10054] (syz.3.2126,10054,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  306.351819][T10080] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  306.366568][T10080] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  306.378133][T10080] BTRFS info (device loop6): setting nodatacow, compression disabled
[  306.382064][ T5629] EXT4-fs (loop5): unmounting filesystem.
[  306.387860][T10080] BTRFS info (device loop6): force clearing of disk cache
[  306.399900][T10080] BTRFS info (device loop6): enabling ssd optimizations
[  306.400480][T10075] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  306.407583][T10080] BTRFS info (device loop6): using spread ssd allocation scheme
[  306.430448][T10080] BTRFS info (device loop6): turning off barriers
[  306.477429][T10075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  306.495476][T10086] loop4: detected capacity change from 0 to 32768
[  306.500125][T10080] BTRFS info (device loop6): disabling free space tree
[  306.529254][T10080] BTRFS info (device loop6): not using ssd optimizations
[  306.567158][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  306.584078][T10080] BTRFS info (device loop6): not using spread ssd allocation scheme
[  306.679442][T10086] XFS (loop4): Mounting V5 Filesystem
[  306.768564][ T4269] syz-executor: attempt to access beyond end of device
[  306.768564][ T4269] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  306.790457][T10086] XFS (loop4): Ending clean mount
[  306.828232][T10086] XFS (loop4): Quotacheck needed: Please wait.
[  306.881664][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2140'.
[  306.977464][T10086] XFS (loop4): Quotacheck: Done.
[  307.018778][T10080] BTRFS info (device loop6): rebuilding free space tree
[  307.043597][T10080] BTRFS info (device loop6): disabling free space tree
[  307.062647][T10080] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  307.103969][T10080] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  307.213150][ T4279] XFS (loop4): Unmounting Filesystem
[  307.458023][   T11] BTRFS info (device loop6): cannot satisfy tickets, dumping space info
[  307.466592][   T11] BTRFS info (device loop6): space_info DATA+METADATA (sub-group id 0) has 10502144 free, is full
[  307.478426][   T11] BTRFS info (device loop6): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=983040, readonly=0 zone_unusable=0
[  307.493382][   T11] BTRFS info (device loop6): failing ticket with 117436416 bytes
[  307.501246][T10080] BTRFS info (device loop6): space_info DATA+METADATA (sub-group id 0) has 10502144 free, is full
[  307.512032][T10080] BTRFS info (device loop6): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=983040, readonly=0 zone_unusable=0
[  307.526038][T10080] BTRFS info (device loop6): global_block_rsv: size 983040 reserved 983040
[  307.534760][T10080] BTRFS info (device loop6): trans_block_rsv: size 0 reserved 0
[  307.542624][T10080] BTRFS info (device loop6): chunk_block_rsv: size 0 reserved 0
[  307.550416][T10080] BTRFS info (device loop6): delayed_block_rsv: size 0 reserved 0
[  307.558381][T10080] BTRFS info (device loop6): delayed_refs_rsv: size 0 reserved 0
[  307.955044][ T6802] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  308.082592][T10150] loop5: detected capacity change from 0 to 2048
[  308.132113][T10150] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  308.228669][T10150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  308.824358][T10167] loop5: detected capacity change from 0 to 256
[  308.858197][T10167] exfat: Deprecated parameter 'utf8'
[  308.874325][T10167] exfat: Deprecated parameter 'utf8'
[  308.937497][T10167] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  309.010553][ T8277] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  309.090477][ T4287] Bluetooth: hci1: command 0x0406 tx timeout
[  309.212584][ T8277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  309.233812][ T8277] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  309.270078][T10161] loop1: detected capacity change from 0 to 32768
[  309.290472][ T8277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  309.323504][ T8277] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  309.357833][ T8277] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  309.368968][ T8277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.404531][ T8277] usb 5-1: config 0 descriptor??
[  309.479299][T10175] ALSA: mixer_oss: invalid index 100000
[  309.516927][T10161] UFO tlock:0xffffc900028da0d8
[  309.635995][ T8277] hdpvr 5-1:0.0: firmware version 0x3c dated íôH"Lëžlršߧ·•LɈPªÇmÏg"Á
ý̓‡_­-h÷•eÎ/}
[  309.656582][ T8277] hdpvr 5-1:0.0: untested firmware, the driver might not work.
[  309.692499][T10163] loop3: detected capacity change from 0 to 32768
[  309.764628][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2160'.
[  309.776927][T10163] (syz.3.2153,10163,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  309.791394][T10179] netlink: 'syz.6.2160': attribute type 30 has an invalid length.
[  309.799255][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2160'.
[  309.827790][T10163] (syz.3.2153,10163,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  309.929928][T10163] JBD2: Ignoring recovery information on journal
[  310.021380][T10163] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  310.072125][ T8277] hdpvr 5-1:0.0: Could not setup controls
[  310.080768][ T8277] hdpvr 5-1:0.0: registering videodev failed
[  310.103484][ T8277] hdpvr: probe of 5-1:0.0 failed with error -71
[  310.150528][ T8277] usb 5-1: USB disconnect, device number 14
[  310.424199][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  310.639633][T10187] syz.5.2163 (10187): drop_caches: 1
[  310.779549][T10197] loop1: detected capacity change from 0 to 8192
[  310.810765][ T4319] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  310.818540][T10197] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  310.860484][T10197] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  310.870012][T10197] REISERFS (device loop1): using ordered data mode
[  310.877475][T10197] reiserfs: using flush barriers
[  310.892223][T10202] lo speed is unknown, defaulting to 1000
[  310.895377][T10197] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  310.909112][T10202] lo speed is unknown, defaulting to 1000
[  310.925020][T10202] lo speed is unknown, defaulting to 1000
[  310.941471][T10197] REISERFS (device loop1): checking transaction log (loop1)
[  310.990826][T10202] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  311.003272][ T4319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.030715][ T4319] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  311.072173][ T4319] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  311.092276][T10202] lo speed is unknown, defaulting to 1000
[  311.110873][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.119491][T10202] lo speed is unknown, defaulting to 1000
[  311.140926][T10202] lo speed is unknown, defaulting to 1000
[  311.143638][ T4319] usb 4-1: config 0 descriptor??
[  311.166651][T10202] lo speed is unknown, defaulting to 1000
[  311.173016][ T4319] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  311.179956][T10197] REISERFS (device loop1): Using tea hash to sort names
[  311.191012][T10197] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  311.196539][T10202] lo speed is unknown, defaulting to 1000
[  311.204671][ T4319] dvb-usb: bulk message failed: -22 (3/0)
[  311.215055][T10187] syz.5.2163 (10187): drop_caches: 1
[  311.235065][ T4319] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  311.265437][ T4319] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  311.288557][ T4319] usb 4-1: media controller created
[  311.307153][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  311.346167][ T4319] dvb-usb: bulk message failed: -22 (6/0)
[  311.380758][ T4319] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  311.414925][ T4319] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15
[  311.457844][ T4319] dvb-usb: schedule remote query interval to 150 msecs.
[  311.476618][ T4319] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  311.513238][ T4319] usb 4-1: USB disconnect, device number 12
[  311.699275][ T4319] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  311.736974][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2174'.
[  311.872039][T10216] loop4: detected capacity change from 0 to 512
[  311.930946][T10216] EXT4-fs: Ignoring removed nobh option
[  311.978042][T10216] EXT4-fs (loop4): Test dummy encryption mode enabled
[  312.086705][T10216] EXT4-fs error (device loop4): __ext4_iget:5091: inode #11: block 1: comm syz.4.2176: invalid block
[  312.098574][T10222] netlink: 'syz.3.2179': attribute type 29 has an invalid length.
[  312.114002][T10222] netlink: 'syz.3.2179': attribute type 29 has an invalid length.
[  312.122795][T10216] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2176: couldn't read orphan inode 11 (err -117)
[  312.124082][T10222] netlink: 'syz.3.2179': attribute type 29 has an invalid length.
[  312.219390][T10216] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  312.439853][ T4279] EXT4-fs (loop4): unmounting filesystem.
[  312.489271][T10238] loop1: detected capacity change from 0 to 64
[  313.190830][T10236] could not allocate digest TFM handle sha3-224-ce
[  313.498123][T10241] loop4: detected capacity change from 0 to 32768
[  313.564261][T10241] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2184 (10241)
[  313.599111][T10241] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  313.674310][T10241] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  313.704457][T10241] BTRFS info (device loop4): setting nodatacow, compression disabled
[  313.719408][T10241] BTRFS info (device loop4): force clearing of disk cache
[  313.747900][T10241] BTRFS info (device loop4): enabling ssd optimizations
[  313.755089][T10241] BTRFS info (device loop4): using spread ssd allocation scheme
[  313.789112][T10241] BTRFS info (device loop4): turning off barriers
[  313.799276][T10241] BTRFS info (device loop4): disabling free space tree
[  313.819003][T10241] BTRFS info (device loop4): not using ssd optimizations
[  313.837123][T10241] BTRFS info (device loop4): not using spread ssd allocation scheme
[  314.269794][T10241] BTRFS info (device loop4): rebuilding free space tree
[  314.301526][T10241] BTRFS info (device loop4): disabling free space tree
[  314.308503][T10241] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  314.334320][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  314.334338][   T26] audit: type=1326 audit(1774863146.694:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb487d9c819 code=0x7ffc0000
[  314.370995][T10241] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  314.432311][   T26] audit: type=1326 audit(1774863146.694:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb487d9c819 code=0x7ffc0000
[  314.515044][   T26] audit: type=1326 audit(1774863146.694:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb487d9c819 code=0x7ffc0000
[  314.584170][   T26] audit: type=1326 audit(1774863146.694:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb487d9c819 code=0x7ffc0000
[  314.602166][T10303] loop6: detected capacity change from 0 to 512
[  314.638814][T10301] loop5: detected capacity change from 0 to 4096
[  314.689836][   T26] audit: type=1326 audit(1774863146.694:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.1.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb487d9c819 code=0x7ffc0000
[  314.738902][T10303] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  314.779809][T10301] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  314.809356][T10303] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002]
[  314.815413][T10301] ntfs3: loop5: Failed to load $Extend.
[  314.829017][T10303] EXT4-fs (loop6): orphan cleanup on readonly fs
[  314.859206][T10303] EXT4-fs warning (device loop6): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  314.906848][T10303] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  314.935785][T10303] EXT4-fs error (device loop6): ext4_ext_check_inode:530: inode #13: comm syz.6.2205: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  315.006800][T10303] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2205: couldn't read orphan inode 13 (err -117)
[  315.024582][T10303] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  315.199846][ T5492] BTRFS info (device loop4): cannot satisfy tickets, dumping space info
[  315.208383][ T5492] BTRFS info (device loop4): space_info DATA+METADATA (sub-group id 0) has 10502144 free, is full
[  315.219163][ T5492] BTRFS info (device loop4): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=983040, readonly=0 zone_unusable=0
[  315.232134][T10303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  315.233113][ T5492] BTRFS info (device loop4): failing ticket with 117436416 bytes
[  315.249412][T10241] BTRFS info (device loop4): space_info DATA+METADATA (sub-group id 0) has 10502144 free, is full
[  315.261226][T10241] BTRFS info (device loop4): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=983040, readonly=0 zone_unusable=0
[  315.275558][T10241] BTRFS info (device loop4): global_block_rsv: size 983040 reserved 983040
[  315.284307][T10241] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0
[  315.292140][T10241] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0
[  315.299824][T10241] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0
[  315.307855][T10241] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0
[  315.386209][T10303] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  315.411862][T10303] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2842c09c, mo2=0002]
[  315.453935][T10303] System zones: 0-2, 18-18, 34-34
[  315.468101][T10303] EXT4-fs warning (device loop6): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  315.697682][ T6802] EXT4-fs (loop6): unmounting filesystem.
[  315.715869][ T4279] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  316.089031][T10331] loop3: detected capacity change from 0 to 2048
[  316.164675][T10333] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2218'.
[  316.225676][T10333] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2218'.
[  316.228650][T10331] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  316.512353][T10339] loop5: detected capacity change from 0 to 512
[  316.560025][T10339] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.2219: ea_inode with extended attributes
[  316.597495][T10339] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2219: error while reading EA inode 11 err=-117
[  316.710554][T10339] EXT4-fs (loop5): 1 orphan inode deleted
[  316.716371][T10339] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  316.862528][T10349] loop3: detected capacity change from 0 to 512
[  316.893301][ T5629] EXT4-fs (loop5): unmounting filesystem.
[  316.906601][T10349] EXT4-fs: Ignoring removed orlov option
[  316.968220][T10349] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  317.085547][T10349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  317.126551][T10349] System zones: 1-12
[  317.199157][T10349] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.2222: corrupted in-inode xattr
[  317.254288][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  317.260811][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  317.277443][T10349] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2222: couldn't read orphan inode 15 (err -117)
[  317.309884][T10336] loop4: detected capacity change from 0 to 32768
[  317.367556][T10349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  317.412302][T10336] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  317.412302][T10336] 
[  317.874565][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  318.395227][T10377] loop6: detected capacity change from 0 to 4096
[  318.396886][T10356] loop5: detected capacity change from 0 to 32768
[  318.443660][T10356] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2224 (10356)
[  318.502816][T10377] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  318.526493][T10356] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  318.563781][T10356] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  318.574070][T10377] ntfs3: loop6: Failed to load $Extend.
[  318.620017][T10356] BTRFS info (device loop5): setting nodatacow, compression disabled
[  318.669552][T10356] BTRFS info (device loop5): force clearing of disk cache
[  318.689399][T10356] BTRFS info (device loop5): enabling ssd optimizations
[  318.707915][T10356] BTRFS info (device loop5): using spread ssd allocation scheme
[  318.762277][T10356] BTRFS info (device loop5): turning off barriers
[  318.790613][T10356] BTRFS info (device loop5): disabling free space tree
[  318.800542][T10356] BTRFS info (device loop5): not using ssd optimizations
[  318.826408][T10356] BTRFS info (device loop5): not using spread ssd allocation scheme
[  319.168656][T10381] loop3: detected capacity change from 0 to 32768
[  319.257653][T10356] BTRFS info (device loop5): rebuilding free space tree
[  319.306062][T10381] XFS (loop3): Mounting V5 Filesystem
[  319.318589][T10356] BTRFS info (device loop5): disabling free space tree
[  319.380910][T10356] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  319.390663][T10385] loop4: detected capacity change from 0 to 32768
[  319.410653][T10356] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  319.518441][T10381] XFS (loop3): Ending clean mount
[  319.556762][T10381] XFS (loop3): Quotacheck needed: Please wait.
[  319.688501][ T4327] BTRFS info (device loop5): cannot satisfy tickets, dumping space info
[  319.697258][ T4327] BTRFS info (device loop5): space_info DATA+METADATA (sub-group id 0) has 10502144 free, is full
[  319.708073][ T4327] BTRFS info (device loop5): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=983040, readonly=0 zone_unusable=0
[  319.722245][ T4327] BTRFS info (device loop5): failing ticket with 117436416 bytes
[  319.730059][T10356] BTRFS info (device loop5): space_info DATA+METADATA (sub-group id 0) has 10502144 free, is full
[  319.741340][T10356] BTRFS info (device loop5): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=983040, readonly=0 zone_unusable=0
[  319.755172][T10356] BTRFS info (device loop5): global_block_rsv: size 983040 reserved 983040
[  319.764471][T10356] BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0
[  319.773280][T10356] BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0
[  319.781134][T10356] BTRFS info (device loop5): delayed_block_rsv: size 0 reserved 0
[  319.789111][T10356] BTRFS info (device loop5): delayed_refs_rsv: size 0 reserved 0
[  319.797344][T10381] XFS (loop3): Quotacheck: Done.
[  320.030013][ T4272] XFS (loop3): Unmounting Filesystem
[  320.403636][ T5629] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  320.940187][T10446] loop6: detected capacity change from 0 to 128
[  321.020079][T10429] loop1: detected capacity change from 0 to 32768
[  321.131150][T10429] (syz.1.2247,10429,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  321.188386][T10429] (syz.1.2247,10429,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  321.210017][T10450] device bridge0 entered promiscuous mode
[  321.282675][T10450] device macsec1 entered promiscuous mode
[  321.328094][T10429] JBD2: Ignoring recovery information on journal
[  321.541746][T10429] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  321.872742][ T4269] ocfs2: Unmounting device (7,1) on (node local)
[  322.243063][T10469] loop4: detected capacity change from 0 to 16
[  322.267360][T10448] loop5: detected capacity change from 0 to 32768
[  322.268974][T10469] erofs: (device loop4): mounted with root inode @ nid 36.
[  322.343437][T10448] JBD2: Ignoring recovery information on journal
[  322.366548][T10455] loop3: detected capacity change from 0 to 32768
[  322.522066][T10448] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  322.913938][ T5629] ocfs2: Unmounting device (7,5) on (node local)
[  323.139301][T10489] loop6: detected capacity change from 0 to 512
[  323.267086][T10489] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.2274: invalid block
[  323.314937][T10489] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2274: invalid indirect mapped block 4294967295 (level 1)
[  323.421219][T10489] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2274: invalid indirect mapped block 4294967295 (level 1)
[  323.433231][T10494] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2276'.
[  323.487393][T10489] EXT4-fs (loop6): 2 truncates cleaned up
[  323.513437][T10489] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  323.690682][T10491] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  323.770091][ T4325] kernel write not supported for file /input/mouse0 (pid: 4325 comm: kworker/0:7)
[  323.770219][ T6802] EXT4-fs (loop6): unmounting filesystem.
[  323.962824][T10480] loop4: detected capacity change from 0 to 32768
[  324.081549][T10480] XFS (loop4): Mounting V5 Filesystem
[  324.162921][T10480] XFS (loop4): Ending clean mount
[  324.194506][T10508] loop3: detected capacity change from 0 to 4096
[  324.239944][T10480] XFS (loop4): Quotacheck needed: Please wait.
[  324.385747][T10480] XFS (loop4): Quotacheck: Done.
[  324.405987][T10502] loop5: detected capacity change from 0 to 32768
[  324.489335][T10502] ea_get: invalid extended attribute
[  324.523910][T10502] ffff888070137230: 04 00 00 00                                      ....
[  324.557726][T10480] xfs: Unexpected value for 'quota'
[  324.781682][ T4279] XFS (loop4): Unmounting Filesystem
[  324.941377][T10518] loop1: detected capacity change from 0 to 1024
[  325.113628][T10518] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.2283: lblock 2 mapped to illegal pblock 2 (length 1)
[  325.237347][T10518] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  325.259272][T10518] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.2283: lblock 0 mapped to illegal pblock 48 (length 1)
[  325.341526][T10518] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  325.378543][T10518] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2283: Failed to acquire dquot type 0
[  325.415594][T10506] loop6: detected capacity change from 0 to 32768
[  325.423846][T10518] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  325.539785][T10518] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.2283: mark_inode_dirty error
[  325.553127][T10518] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  325.565945][   T26] audit: type=1326 audit(1774863157.924:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.4.2286" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3b9d9c819 code=0x0
[  325.570607][T10518] EXT4-fs (loop1): 1 orphan inode deleted
[  325.587769][    C1] vkms_vblank_simulate: vblank timer overrun
[  325.618599][T10506] XFS (loop6): Mounting V5 Filesystem
[  325.631680][T10518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  325.632070][   T48] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  325.768229][T10506] XFS (loop6): Ending clean mount
[  325.791623][T10506] XFS (loop6): Quotacheck needed: Please wait.
[  325.804657][   T48] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  325.845883][   T48] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:3: Failed to release dquot type 0
[  325.945668][T10506] XFS (loop6): Quotacheck: Done.
[  326.003491][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  326.009619][ T5651] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  326.046927][ T5651] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  326.059622][T10545] program syz.5.2290 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  326.070953][ T5651] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 0
[  326.076550][ T6802] XFS (loop6): Unmounting Filesystem
[  326.123838][ T4269] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[  326.152486][ T4269] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  326.195779][ T4269] EXT4-fs error (device loop1): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error
[  326.233012][T10549] loop5: detected capacity change from 0 to 512
[  326.363471][T10549] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  326.385570][T10549] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  326.527877][T10557] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  326.586227][T10560] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  326.638924][ T5629] EXT4-fs (loop5): unmounting filesystem.
[  327.010909][ T4325] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  327.213222][ T4325] usb 2-1: Using ep0 maxpacket: 8
[  327.222505][ T4325] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  327.250416][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.270533][ T4325] usb 2-1: Product: syz
[  327.274766][ T4325] usb 2-1: Manufacturer: syz
[  327.279367][ T4325] usb 2-1: SerialNumber: syz
[  327.301420][ T4325] usb 2-1: config 0 descriptor??
[  327.363166][T10559] set_capacity_and_notify: 1 callbacks suppressed
[  327.363185][T10559] loop4: detected capacity change from 0 to 32768
[  327.450677][ T4603] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  327.530568][ T4325] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  327.640742][ T4603] usb 6-1: Using ep0 maxpacket: 16
[  327.648097][ T4603] usb 6-1: config 7 has an invalid interface number: 152 but max is 0
[  327.688713][ T4603] usb 6-1: config 7 descriptor has 1 excess byte, ignoring
[  327.719129][ T4603] usb 6-1: config 7 has no interface number 0
[  327.729285][ T4603] usb 6-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7
[  327.770640][ T4603] usb 6-1: config 7 interface 152 altsetting 190 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  327.804773][ T4603] usb 6-1: config 7 interface 152 has no altsetting 0
[  327.841388][ T4603] usb 6-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d
[  327.880477][ T4603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.926787][ T4603] usb 6-1: Product: syz
[  327.941487][ T4603] usb 6-1: Manufacturer: syz
[  327.946176][ T4603] usb 6-1: SerialNumber: syz
[  327.956861][ T4325] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  327.984682][ T4325] usb 2-1: USB disconnect, device number 8
[  328.239967][ T4603] usbtest 6-1:7.152: couldn't get endpoints, -71
[  328.267168][ T4603] usbtest: probe of 6-1:7.152 failed with error -71
[  328.318240][ T4603] usb 6-1: USB disconnect, device number 12
[  329.198979][T10582] loop6: detected capacity change from 0 to 40427
[  329.260516][T10582] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7
[  329.276352][T10582] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff
[  329.334473][T10582] F2FS-fs (loop6): invalid crc value
[  329.358321][T10582] F2FS-fs (loop6): Found nat_bits in checkpoint
[  329.474997][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2315'.
[  329.563489][T10582] F2FS-fs (loop6): Start checkpoint disabled!
[  329.593603][T10582] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  329.802011][T10608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2318'.
[  330.063546][   T40] kworker/u4:2: attempt to access beyond end of device
[  330.063546][   T40] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  330.445104][   T14] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  330.649208][   T14] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  330.668868][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.711804][   T14] usb 5-1: Product: syz
[  330.726065][   T14] usb 5-1: Manufacturer: syz
[  330.754972][   T14] usb 5-1: SerialNumber: syz
[  330.777382][   T14] usb 5-1: config 0 descriptor??
[  331.017745][   T14] usb 5-1: ignoring: probably an ADSL modem
[  331.129697][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2327'.
[  331.188129][T10612] loop1: detected capacity change from 0 to 32768
[  331.338861][T10612] XFS (loop1): Mounting V5 Filesystem
[  331.425910][   T14] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  331.482170][T10612] XFS (loop1): Ending clean mount
[  331.627027][ T4269] XFS (loop1): Unmounting Filesystem
[  331.664260][   T14] usb 5-1: USB disconnect, device number 15
[  331.951855][T10627] loop3: detected capacity change from 0 to 32768
[  332.619129][T10657] loop1: detected capacity change from 0 to 256
[  332.718379][T10645] loop6: detected capacity change from 0 to 32768
[  332.844586][T10643] loop5: detected capacity change from 0 to 40427
[  332.866592][T10645] XFS (loop6): Mounting V5 Filesystem
[  332.867865][T10643] F2FS-fs (loop5): invalid crc value
[  333.063029][T10643] F2FS-fs (loop5): Found nat_bits in checkpoint
[  333.128271][T10645] XFS (loop6): Ending clean mount
[  333.145878][T10645] XFS (loop6): Quotacheck needed: Please wait.
[  333.189605][T10643] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  333.299399][T10645] XFS (loop6): Quotacheck: Done.
[  333.504028][ T6802] XFS (loop6): Unmounting Filesystem
[  333.528071][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2343'.
[  334.414034][T10699] loop5: detected capacity change from 0 to 4096
[  334.722559][T10712] loop1: detected capacity change from 0 to 128
[  334.767447][T10712] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  334.866674][T10712] ext4 filesystem being mounted at /455/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  335.105905][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  335.182118][ T4604] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  335.317970][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2362'.
[  335.319902][T10726] loop1: detected capacity change from 0 to 256
[  335.370402][ T4604] usb 7-1: Using ep0 maxpacket: 32
[  335.378478][ T4604] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  335.378560][T10726] exfat: Deprecated parameter 'namecase'
[  335.416903][ T4604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.423948][T10726] exfat: Deprecated parameter 'namecase'
[  335.481736][ T4604] usb 7-1: config 0 descriptor??
[  335.518174][T10726] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  335.548723][ T4604] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  335.687022][   T26] audit: type=1800 audit(1774863168.044:145): pid=10726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2361" name="file1" dev="loop1" ino=1048707 res=0 errno=0
[  335.722735][T10726] exFAT-fs (loop1): hint_cluster is invalid (4278190089)
[  335.762367][T10726] exFAT-fs (loop1): error, failed to bmap (inode : ffff88807012b560 iblock : 8, err : -5)
[  335.838904][T10726] exFAT-fs (loop1): error, invalid access to FAT (entry 0xff000008)
[  335.875440][T10726] exFAT-fs (loop1): error, invalid access to FAT (entry 0xff000008)
[  336.100720][ T5492] kworker/u4:7: attempt to access beyond end of device
[  336.100720][ T5492] loop1: rw=1, sector=34225520825, nr_sectors = 1 limit=256
[  336.131078][ T5492] Buffer I/O error on dev loop1, logical block 34225520825, lost async page write
[  336.153756][ T5492] kworker/u4:7: attempt to access beyond end of device
[  336.153756][ T5492] loop1: rw=1, sector=34225520826, nr_sectors = 1 limit=256
[  336.196504][ T5492] Buffer I/O error on dev loop1, logical block 34225520826, lost async page write
[  336.216851][ T5492] kworker/u4:7: attempt to access beyond end of device
[  336.216851][ T5492] loop1: rw=1, sector=34225520827, nr_sectors = 1 limit=256
[  336.280062][ T5492] Buffer I/O error on dev loop1, logical block 34225520827, lost async page write
[  336.297385][ T5492] kworker/u4:7: attempt to access beyond end of device
[  336.297385][ T5492] loop1: rw=1, sector=34225520828, nr_sectors = 1 limit=256
[  336.340495][ T5492] Buffer I/O error on dev loop1, logical block 34225520828, lost async page write
[  336.351716][ T4604] gspca_vc032x: reg_w err -71
[  336.357519][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.370364][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.375929][ T5492] kworker/u4:7: attempt to access beyond end of device
[  336.375929][ T5492] loop1: rw=1, sector=34225520829, nr_sectors = 1 limit=256
[  336.411092][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.416548][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.426933][ T5492] Buffer I/O error on dev loop1, logical block 34225520829, lost async page write
[  336.440650][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.446015][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.461960][ T5492] kworker/u4:7: attempt to access beyond end of device
[  336.461960][ T5492] loop1: rw=1, sector=34225520830, nr_sectors = 1 limit=256
[  336.486643][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.500727][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.510780][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.512910][T10748] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2372'.
[  336.516191][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.516205][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.537084][ T5492] Buffer I/O error on dev loop1, logical block 34225520830, lost async page write
[  336.570795][ T5492] kworker/u4:7: attempt to access beyond end of device
[  336.570795][ T5492] loop1: rw=1, sector=34225520831, nr_sectors = 1 limit=256
[  336.590432][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.600704][ T5492] Buffer I/O error on dev loop1, logical block 34225520831, lost async page write
[  336.610176][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.625980][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.650384][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.656091][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.686424][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.702612][ T4604] gspca_vc032x: I2c Bus Busy Wait 00
[  336.710635][ T4604] gspca_vc032x: Unknown sensor...
[  336.736156][ T4604] vc032x: probe of 7-1:0.0 failed with error -22
[  336.773516][ T4604] usb 7-1: USB disconnect, device number 6
[  336.801496][T10754] loop1: detected capacity change from 0 to 2048
[  336.837959][T10754] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  336.870779][T10754] NILFS (loop1): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments)
[  337.344769][T10772] loop5: detected capacity change from 0 to 1024
[  337.710682][ T4603] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  337.920691][ T4603] usb 2-1: Using ep0 maxpacket: 16
[  337.927904][ T4603] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  337.980860][ T4603] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  338.000568][ T4603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.010762][ T4603] usb 2-1: Product: syz
[  338.020926][ T4603] usb 2-1: Manufacturer: syz
[  338.025580][ T4603] usb 2-1: SerialNumber: syz
[  338.071539][ T4603] usb 2-1: config 0 descriptor??
[  338.092094][ T4603] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  338.122682][ T4603] usb 2-1: Detected FT232R
[  338.162099][T10795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2402'.
[  338.286416][ T4603] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  338.396303][T10801] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2394'.
[  338.560515][ T4603] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  338.791361][ T4603] usb 2-1: USB disconnect, device number 9
[  338.803554][ T4603] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  338.852233][ T4603] ftdi_sio 2-1:0.0: device disconnected
[  338.905850][T10814] loop6: detected capacity change from 0 to 512
[  339.000785][T10814] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  339.010009][T10814] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  339.034622][T10814] EXT4-fs error (device loop6): ext4_lookup:1858: inode #12: comm syz.6.2400: iget: bad i_size value: 2533274857506816
[  339.302780][ T6802] EXT4-fs (loop6): unmounting filesystem.
[  339.955197][T10803] loop5: detected capacity change from 0 to 40427
[  340.016518][T10803] F2FS-fs (loop5): invalid crc value
[  340.036646][T10803] F2FS-fs (loop5): Found nat_bits in checkpoint
[  340.245439][T10837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2410'.
[  340.287634][T10803] F2FS-fs (loop5): Start checkpoint disabled!
[  340.331046][T10803] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  340.554299][T10803] syz.5.2395: attempt to access beyond end of device
[  340.554299][T10803] loop5: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  340.693460][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2415'.
[  340.887189][ T5651] kworker/u4:8: attempt to access beyond end of device
[  340.887189][ T5651] loop5: rw=1, sector=53256, nr_sectors = 8 limit=40427
[  340.966847][ T5651] kworker/u4:8: attempt to access beyond end of device
[  340.966847][ T5651] loop5: rw=1, sector=53248, nr_sectors = 8 limit=40427
[  341.688369][T10879] loop5: detected capacity change from 0 to 256
[  341.727750][T10882] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.730164][T10879] FAT-fs (loop5): Directory bread(block 64) failed
[  341.735229][T10882] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.747051][T10879] FAT-fs (loop5): Directory bread(block 65) failed
[  341.784995][T10884] loop3: detected capacity change from 0 to 512
[  341.813190][T10879] FAT-fs (loop5): Directory bread(block 66) failed
[  341.819917][T10879] FAT-fs (loop5): Directory bread(block 67) failed
[  341.836869][T10879] FAT-fs (loop5): Directory bread(block 68) failed
[  341.848489][T10879] FAT-fs (loop5): Directory bread(block 69) failed
[  341.856011][T10884] EXT4-fs (loop3): 1 truncate cleaned up
[  341.861975][T10884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  341.870772][T10879] FAT-fs (loop5): Directory bread(block 70) failed
[  341.878167][T10879] FAT-fs (loop5): Directory bread(block 71) failed
[  341.886460][T10879] FAT-fs (loop5): Directory bread(block 72) failed
[  341.893492][T10879] FAT-fs (loop5): Directory bread(block 73) failed
[  341.987625][   T26] audit: type=1800 audit(1774863175.344:146): pid=10884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2431" name="file1" dev="loop3" ino=13 res=0 errno=0
[  342.247125][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  342.309447][T10896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2436'.
[  342.339130][T10896] netlink: 'syz.4.2436': attribute type 3 has an invalid length.
[  342.375248][T10899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2436'.
[  342.415758][T10899] netlink: 'syz.4.2436': attribute type 3 has an invalid length.
[  342.500903][ T4603] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  342.578537][T10906] loop5: detected capacity change from 0 to 1024
[  342.700786][ T4603] usb 7-1: Using ep0 maxpacket: 16
[  342.708607][ T4603] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.744222][ T4603] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  342.774757][ T4603] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  342.807681][ T4603] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  342.812910][ T8277] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  342.840736][ T4603] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  342.859378][ T4603] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  342.876729][ T4603] usb 7-1: SerialNumber: syz
[  342.904635][T10892] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  342.916496][T10892] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  342.936422][ T4603] hub 7-1:1.0: bad descriptor, ignoring hub
[  342.945774][ T4603] hub: probe of 7-1:1.0 failed with error -5
[  343.025177][ T8277] usb 4-1: Using ep0 maxpacket: 8
[  343.036481][ T8277] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  343.068244][ T8277] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  343.096806][ T8277] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  343.127551][ T8277] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  343.132236][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2444'.
[  343.157365][T10892] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  343.175143][ T8277] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  343.180031][T10892] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  343.196543][ T8277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.403467][T10903] loop1: detected capacity change from 0 to 32768
[  343.446808][ T8277] usb 4-1: GET_CAPABILITIES returned 0
[  343.454558][ T8277] usbtmc 4-1:16.0: can't read capabilities
[  343.510919][T10903] XFS (loop1): Mounting V5 Filesystem
[  343.622206][T10903] XFS (loop1): Ending clean mount
[  343.647134][ T4603] cdc_ether: probe of 7-1:1.0 failed with error -22
[  343.706369][ T8277] usb 4-1: USB disconnect, device number 13
[  343.736873][T10903] XFS (loop1): Quotacheck needed: Please wait.
[  343.856330][T10903] XFS (loop1): Quotacheck: Done.
[  343.915994][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2448'.
[  343.986350][   T14] usb 7-1: USB disconnect, device number 7
[  344.034950][ T4269] XFS (loop1): Unmounting Filesystem
[  344.832762][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2457'.
[  344.865088][T10955] loop1: detected capacity change from 0 to 2048
[  344.912722][T10955] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  345.213049][T10966] loop1: detected capacity change from 0 to 128
[  345.241320][T10967] syz.6.2463 uses obsolete (PF_INET,SOCK_PACKET)
[  345.248531][T10966] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  345.316301][T10966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  345.429986][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2465'.
[  345.480489][T10971] block nbd0: Unsupported socket: should be TCP or UNIX.
[  345.741325][T10980] loop5: detected capacity change from 0 to 512
[  345.834175][T10986] tipc: Started in network mode
[  345.840939][T10980] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  345.880957][T10980] ext4 filesystem being mounted at /390/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.904277][T10986] tipc: Node identity ac14141b, cluster identity 4711
[  345.970931][T10986] tipc: New replicast peer: 255.255.255.255
[  345.990500][T10986] tipc: Enabled bearer <udp:syz2>, priority 9
[  345.997064][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2470'.
[  346.047218][ T5629] EXT4-fs (loop5): unmounting filesystem.
[  346.449815][T10996] loop6: detected capacity change from 0 to 4096
[  346.527379][T10996] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  346.543848][T10975] loop3: detected capacity change from 0 to 32768
[  346.588461][   T26] audit: type=1800 audit(1774863179.944:147): pid=10975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2466" name="file1" dev="loop3" ino=7 res=0 errno=0
[  346.656426][T11004] loop5: detected capacity change from 0 to 4096
[  346.755134][   T26] audit: type=1326 audit(1774863180.114:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b9d9c819 code=0x7ffc0000
[  346.808288][T11007] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  346.878408][   T26] audit: type=1326 audit(1774863180.144:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b9d9c819 code=0x7ffc0000
[  346.879748][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  346.900997][    C1] vkms_vblank_simulate: vblank timer overrun
[  346.942778][ T6802] EXT4-fs (loop6): unmounting filesystem.
[  347.046559][   T26] audit: type=1326 audit(1774863180.194:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fd3b9d9c819 code=0x7ffc0000
[  347.100945][ T4351] tipc: Node number set to 2886997019
[  347.165272][T11016] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  347.172830][   T26] audit: type=1326 audit(1774863180.194:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b9d9c819 code=0x7ffc0000
[  347.327799][   T26] audit: type=1326 audit(1774863180.194:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b9d9c819 code=0x7ffc0000
[  347.420777][T11022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2485'.
[  347.500702][   T26] audit: type=1326 audit(1774863180.194:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fd3b9d9c819 code=0x7ffc0000
[  347.597338][   T26] audit: type=1326 audit(1774863180.194:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b9d9c819 code=0x7ffc0000
[  347.619740][    C1] vkms_vblank_simulate: vblank timer overrun
[  347.678889][T11026] loop5: detected capacity change from 0 to 2048
[  347.703732][   T26] audit: type=1326 audit(1774863180.194:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11005 comm="syz.4.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b9d9c819 code=0x7ffc0000
[  347.765063][T11026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  347.919701][   T26] audit: type=1800 audit(1774863181.274:156): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2487" name="file1" dev="loop5" ino=1415 res=0 errno=0
[  348.157868][T11039] loop1: detected capacity change from 0 to 2048
[  348.171078][ T4351] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  348.200239][T11039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  348.366815][ T4351] usb 4-1: Using ep0 maxpacket: 32
[  348.375028][ T4351] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  348.399591][ T4351] usb 4-1: config 0 has no interface number 0
[  348.426750][ T4351] usb 4-1: config 0 interface 184 has no altsetting 0
[  348.488363][ T4351] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  348.509773][ T4351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.537007][ T4351] usb 4-1: Product: syz
[  348.560983][ T4351] usb 4-1: Manufacturer: syz
[  348.565650][ T4351] usb 4-1: SerialNumber: syz
[  348.594449][T11051] loop6: detected capacity change from 0 to 256
[  348.617539][ T4351] usb 4-1: config 0 descriptor??
[  348.633381][ T4351] smsc75xx v1.0.0
[  348.778261][T11051] FAT-fs (loop6): Directory bread(block 64) failed
[  348.789078][T11051] FAT-fs (loop6): Directory bread(block 65) failed
[  348.822174][T11051] FAT-fs (loop6): Directory bread(block 66) failed
[  348.828857][T11051] FAT-fs (loop6): Directory bread(block 67) failed
[  348.920838][T11051] FAT-fs (loop6): Directory bread(block 68) failed
[  348.927493][T11051] FAT-fs (loop6): Directory bread(block 69) failed
[  348.950813][T11051] FAT-fs (loop6): Directory bread(block 70) failed
[  348.957501][T11051] FAT-fs (loop6): Directory bread(block 71) failed
[  348.990905][T11051] FAT-fs (loop6): Directory bread(block 72) failed
[  348.997548][T11051] FAT-fs (loop6): Directory bread(block 73) failed
[  349.469436][ T4351] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  349.510923][ T4351] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  349.550273][ T4351] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  349.589749][ T4351] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  349.611472][ T4351] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  349.641282][ T4351] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  349.661297][ T4351] smsc75xx: probe of 4-1:0.184 failed with error -71
[  349.727512][ T4351] usb 4-1: USB disconnect, device number 14
[  350.019252][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2511'.
[  350.526492][T11102] loop3: detected capacity change from 0 to 2048
[  350.609069][T11102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  350.726215][   T26] audit: type=1800 audit(1774863184.084:157): pid=11102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2522" name="file1" dev="loop3" ino=1415 res=0 errno=0
[  351.462541][T11112] loop5: detected capacity change from 0 to 256
[  351.501945][T11112] FAT-fs (loop5): Unrecognized mount option "" or missing value
[  352.115612][ T4603] kernel write not supported for file /1054/attr/fscreate (pid: 4603 comm: kworker/1:15)
[  352.366686][T11110] loop3: detected capacity change from 0 to 32768
[  352.388631][T11110] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2524 (11110)
[  352.448258][ T8277] kernel write not supported for file /input/event2 (pid: 8277 comm: kworker/0:18)
[  352.487519][T11110] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  352.528529][T11110] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  352.569292][T11110] BTRFS info (device loop3): using free space tree
[  352.784453][T11110] BTRFS info (device loop3): enabling ssd optimizations
[  353.517211][ T4272] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  353.525585][T11166] loop5: detected capacity change from 0 to 2048
[  353.618338][T11166] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  353.726875][T11166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  353.798765][ T8698] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop3 scanned by udevd (8698)
[  354.930600][ T4603] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  355.150454][ T4603] usb 6-1: Using ep0 maxpacket: 32
[  355.160044][ T4603] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  355.195217][ T4603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.228995][ T4603] usb 6-1: config 0 descriptor??
[  355.357103][T11207] loop4: detected capacity change from 0 to 64
[  355.447691][ T4603] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  355.471774][ T4603] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  355.502062][ T4603] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  355.509467][ T4603] usb 6-1: media controller created
[  355.550694][ T4325] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  355.563403][ T4603] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  355.649369][ T4603] az6027: usb out operation failed. (-71)
[  355.670842][ T4603] az6027: usb out operation failed. (-71)
[  355.676829][ T4603] stb0899_attach: Driver disabled by Kconfig
[  355.693029][ T4603] az6027: no front-end attached
[  355.693029][ T4603] 
[  355.704526][ T4603] az6027: usb out operation failed. (-71)
[  355.711917][ T4603] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  355.727549][ T4603] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16
[  355.750557][ T4325] usb 2-1: Using ep0 maxpacket: 8
[  355.757882][ T4325] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.773699][ T4603] dvb-usb: schedule remote query interval to 400 msecs.
[  355.782491][ T4603] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  355.803629][ T4325] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  355.804812][ T4603] usb 6-1: USB disconnect, device number 13
[  355.838762][ T4325] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  355.871074][ T4603] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  355.910047][ T4325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  355.927026][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.935620][ T4325] usb 2-1: Product: syz
[  355.940640][ T4325] usb 2-1: Manufacturer: syz
[  355.945282][ T4325] usb 2-1: SerialNumber: syz
[  356.168351][ T4325] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  356.184782][ T4325] cdc_ncm 2-1:1.0: bind() failure
[  356.210019][ T4325] usb 2-1: USB disconnect, device number 10
[  356.356613][T11221] loop6: detected capacity change from 0 to 256
[  356.391280][T11221] exfat: Deprecated parameter 'utf8'
[  356.406935][T11221] exfat: Deprecated parameter 'utf8'
[  356.425933][T11221] exfat: Deprecated parameter 'utf8'
[  356.484546][T11221] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  356.594080][T11225] loop4: detected capacity change from 0 to 4096
[  356.661509][T11229] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  357.123678][T11242] syzkaller1: tun_chr_ioctl cmd 1074025676
[  357.145925][T11242] syzkaller1: owner set to 0
[  357.174664][T11244] program syz.1.2573 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  357.381301][T11250] loop3: detected capacity change from 0 to 64
[  357.458212][   T26] audit: type=1800 audit(1774863190.814:158): pid=11250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2576" name="file1" dev="loop3" ino=5 res=0 errno=0
[  357.678694][T11261] program syz.3.2580 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  357.890713][ T4325] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  358.102306][ T4325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.134631][ T4325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  358.170774][ T4325] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  358.179890][ T4325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.227683][ T4325] usb 7-1: config 0 descriptor??
[  358.669126][ T4325] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  358.707902][ T4325] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  358.726261][ T4325] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  358.746024][ T4325] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  358.775630][ T4325] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  358.805401][ T4325] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0
[  358.887475][T11293] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2596'.
[  358.902242][ T4325] playstation 0003:054C:0DF2.000D: Invalid reportID received, expected 9 got 0
[  358.921969][ T4325] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense pairing info: -22
[  358.947190][ T4325] playstation 0003:054C:0DF2.000D: Failed to get MAC address from DualSense
[  358.973499][ T4325] playstation 0003:054C:0DF2.000D: Failed to create dualsense.
[  358.992077][ T4325] playstation: probe of 0003:054C:0DF2.000D failed with error -22
[  359.169194][ T4325] usb 7-1: USB disconnect, device number 8
[  359.406143][T11300] fido_id[11300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  359.424841][T11302] loop3: detected capacity change from 0 to 4096
[  359.451716][T11302] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  359.507520][T11286] loop5: detected capacity change from 0 to 40427
[  359.548147][T11286] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  359.586774][T11286] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  359.623619][T11286] F2FS-fs (loop5): invalid crc_offset: 33558524
[  359.663087][T11286] F2FS-fs (loop5): Found nat_bits in checkpoint
[  359.803722][T11286] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  359.850670][T11286] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  360.025720][T11286] F2FS-fs (loop5): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix.
[  360.124044][T11286] F2FS-fs (loop5): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix.
[  360.459985][T11318] loop3: detected capacity change from 0 to 1024
[  360.498004][T11318] EXT4-fs: Ignoring removed mblk_io_submit option
[  360.612633][T11318] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  360.667457][T11304] loop1: detected capacity change from 0 to 32768
[  360.793003][T11318] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.2606: inode #926365495: comm syz.3.2606: iget: illegal inode #
[  360.877278][T11318] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.2606: error while reading EA inode 926365495 err=-117
[  360.885303][T11304] XFS (loop1): Mounting V5 Filesystem
[  361.020748][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  361.103633][T11304] XFS (loop1): Ending clean mount
[  361.111833][T11304] XFS (loop1): Quotacheck needed: Please wait.
[  361.223162][T11335] loop3: detected capacity change from 0 to 256
[  361.255763][T11304] XFS (loop1): Quotacheck: Done.
[  361.339269][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.378637][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.410843][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.418402][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.444076][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.455797][ T4269] XFS (loop1): Unmounting Filesystem
[  361.460466][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.468793][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.493808][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.515011][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.540810][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.555195][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.567567][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.577106][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.589537][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.598417][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.612220][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.619690][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.635587][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.646886][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.662832][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.674231][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.684327][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.695513][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.705468][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.716769][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.726915][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.751284][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.758751][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.775138][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.784053][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.796584][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.805949][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.820523][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.828003][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.867292][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.890130][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.910777][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.918248][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.932202][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.939808][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.954713][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.978795][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  361.987686][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.000397][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.007918][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.022222][T11351] loop6: detected capacity change from 0 to 2048
[  362.029905][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.031904][T11349] loop3: detected capacity change from 0 to 8192
[  362.037447][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.052886][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.053346][T11351] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  362.060966][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.060995][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061017][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061038][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061060][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061081][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061104][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061125][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061146][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061167][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061188][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061210][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061232][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061254][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061284][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061307][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061329][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.061350][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.078477][T11351] NILFS (loop6): mounting unchecked fs
[  362.096501][T11351] NILFS (loop6): recovery complete
[  362.101531][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.115986][T11349] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  362.117061][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.146602][T11349] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  362.154437][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.185872][T11349] REISERFS (device loop3): using ordered data mode
[  362.198953][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.203536][T11353] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  362.207974][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.214570][T11349] reiserfs: using flush barriers
[  362.223757][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.253471][T11349] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  362.256350][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.280847][T11349] REISERFS (device loop3): checking transaction log (loop3)
[  362.289224][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.342347][T11349] REISERFS (device loop3): Using r5 hash to sort names
[  362.352466][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.361638][T11349] REISERFS (device loop3): using 3.5.x disk format
[  362.362759][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.371002][T11349] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  362.376853][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.393715][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.401453][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.409067][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.416719][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.424661][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.432352][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.440161][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.448052][   T26] audit: type=1800 audit(1774863195.794:159): pid=11349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2616" name="file1" dev="loop3" ino=2 res=0 errno=0
[  362.469306][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.476834][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.484620][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.492151][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.499891][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.507581][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.515114][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.522722][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.530128][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.537894][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.545476][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.552977][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.580466][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.587943][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.596243][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.604032][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.611579][ T8277] hid-generic 0000:0000:0004.000E: unknown main item tag 0x0
[  362.628359][ T8277] hid-generic 0000:0000:0004.000E: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[  363.234851][   T26] audit: type=1326 audit(1774863196.594:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.5.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d19b9c819 code=0x7ffc0000
[  363.325889][   T26] audit: type=1326 audit(1774863196.624:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.5.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d19b9c819 code=0x7ffc0000
[  363.402612][T11362] fido_id[11362]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  363.496718][   T26] audit: type=1326 audit(1774863196.624:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.5.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d19b9c819 code=0x7ffc0000
[  363.519098][    C1] vkms_vblank_simulate: vblank timer overrun
[  363.620701][   T26] audit: type=1326 audit(1774863196.634:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.5.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3d19b9c819 code=0x7ffc0000
[  363.714671][   T26] audit: type=1326 audit(1774863196.634:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.5.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d19b9c819 code=0x7ffc0000
[  363.737058][    C1] vkms_vblank_simulate: vblank timer overrun
[  363.752782][T11374] loop5: detected capacity change from 0 to 2048
[  363.778506][T11374] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  363.821396][   T26] audit: type=1326 audit(1774863196.634:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.5.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d19b9c819 code=0x7ffc0000
[  363.863766][T11381] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  363.910421][   T26] audit: type=1326 audit(1774863196.634:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.5.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d19b9c819 code=0x7ffc0000
[  363.932974][    C1] vkms_vblank_simulate: vblank timer overrun
[  364.028870][   T26] audit: type=1326 audit(1774863196.634:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.5.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d19b9c819 code=0x7ffc0000
[  364.051450][    C1] vkms_vblank_simulate: vblank timer overrun
[  364.100616][   T26] audit: type=1326 audit(1774863196.654:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.5.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3d19b9c819 code=0x7ffc0000
[  364.107180][T11382] loop4: detected capacity change from 0 to 512
[  364.148514][T11380] lo speed is unknown, defaulting to 1000
[  364.260462][   T26] audit: type=1326 audit(1774863196.654:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.5.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d19b9c819 code=0x7ffc0000
[  364.282951][    C1] vkms_vblank_simulate: vblank timer overrun
[  364.453711][T11382] EXT4-fs (loop4): 1 truncate cleaned up
[  364.459442][T11382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  364.486058][   T48] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:3: Failed to release dquot type 1
[  364.572961][T11382] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.138311][ T4279] EXT4-fs (loop4): unmounting filesystem.
[  365.537872][T11414] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2641'.
[  365.579475][T11417] loop5: detected capacity change from 0 to 256
[  365.601422][T11417] exfat: Deprecated parameter 'utf8'
[  365.606791][T11417] exfat: Deprecated parameter 'utf8'
[  365.624465][T11417] exfat: Deprecated parameter 'utf8'
[  365.674290][T11417] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d)
[  365.716724][  T953] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  365.924870][  T953] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  365.940453][  T953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.959443][  T953] usb 7-1: Product: syz
[  365.969648][  T953] usb 7-1: Manufacturer: syz
[  365.989799][  T953] usb 7-1: SerialNumber: syz
[  366.216244][T11428] loop5: detected capacity change from 0 to 512
[  366.234075][  T953] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  366.270728][  T953] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  366.287773][T11427] lo speed is unknown, defaulting to 1000
[  366.487378][T11428] EXT4-fs (loop5): 1 truncate cleaned up
[  366.503086][T11428] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  366.521005][ T5492] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:7: Failed to release dquot type 1
[  366.531698][T11428] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.534089][  T953] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71
[  366.555197][  T953] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  366.566892][  T953] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  366.588465][  T953] lan78xx: probe of 7-1:1.0 failed with error -71
[  366.611451][  T953] usb 7-1: USB disconnect, device number 9
[  366.844708][T11418] loop1: detected capacity change from 0 to 40427
[  366.918264][T11418] F2FS-fs (loop1): Found nat_bits in checkpoint
[  367.060343][T11418] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  367.067457][T11418] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  367.119163][ T5629] EXT4-fs (loop5): unmounting filesystem.
[  367.295698][T11449] vxcan1: tx address claim with dest, not broadcast
[  367.812266][T11459] 9p: Unknown Cache mode readahead
[  367.944664][T11462] program syz.1.2655 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  368.409312][T11472] netlink: 'syz.1.2664': attribute type 8 has an invalid length.
[  368.434177][T11472] sch_fq: defrate 0 ignored.
[  368.469324][T11451] loop6: detected capacity change from 0 to 32768
[  368.507667][T11451] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 11
[  368.528336][  T953] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  368.734880][T11460] loop5: detected capacity change from 0 to 32768
[  368.743566][  T953] usb 4-1: config 0 has no interfaces?
[  368.752564][  T953] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  368.784709][  T953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.812127][T11460] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2659 (11460)
[  368.829745][  T953] usb 4-1: Product: syz
[  368.840661][  T953] usb 4-1: Manufacturer: syz
[  368.845509][  T953] usb 4-1: SerialNumber: syz
[  368.887973][  T953] usb 4-1: config 0 descriptor??
[  368.898784][T11460] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  368.948138][ T8698] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 11
[  368.949139][T11460] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  369.009084][T11460] BTRFS info (device loop5): using free space tree
[  369.173238][  T953] usb 4-1: USB disconnect, device number 15
[  369.245676][T11460] BTRFS info (device loop5): enabling ssd optimizations
[  369.410124][T11460] fs-verity: sha512 using implementation "sha512-avx2"
[  369.469712][T11460] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4)
[  369.771498][ T5629] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  370.151272][T11492] loop6: detected capacity change from 0 to 40427
[  370.192410][T11492] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x3ffff
[  370.210724][T11492] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4
[  370.275638][T11492] F2FS-fs (loop6): invalid crc value
[  370.332594][T11492] F2FS-fs (loop6): Found nat_bits in checkpoint
[  370.468505][   T22] kernel read not supported for file /video7 (pid: 22 comm: kworker/1:0)
[  370.509684][T11492] F2FS-fs (loop6) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20
[  370.632431][T11492] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  370.916654][T11492] F2FS-fs (loop6) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10
[  370.970075][T11532] loop1: detected capacity change from 0 to 4096
[  371.043835][T11532] NILFS (loop1): invalid segment: Checksum error in segment payload
[  371.045968][T11541] F2FS-fs (loop6) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x111/0xfe0
[  371.084017][T11532] NILFS (loop1): trying rollback from an earlier position
[  371.154676][T11532] NILFS (loop1): recovery complete
[  371.198082][T11545] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  371.444772][ T6802] bio_check_eod: 1 callbacks suppressed
[  371.444790][ T6802] syz-executor: attempt to access beyond end of device
[  371.444790][ T6802] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  371.458236][T11554] loop5: detected capacity change from 0 to 128
[  371.587422][T11554] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  371.626871][T11554] ext4 filesystem being mounted at /431/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  371.659133][    C1] vkms_vblank_simulate: vblank timer overrun
[  371.758287][T11560] netlink: 'syz.3.2692': attribute type 2 has an invalid length.
[  371.848923][T11554] fscrypt (loop5, inode 12): Mutually exclusive encryption flags (0x18)
[  372.032258][ T5629] EXT4-fs (loop5): unmounting filesystem.
[  372.415497][T11575] loop5: detected capacity change from 0 to 256
[  372.468817][T11575] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  372.587273][T11575] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008)
[  372.795566][T11583] loop6: detected capacity change from 0 to 2048
[  372.894836][T11583] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  373.520471][ T4603] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  373.566302][   T11] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  373.611882][   T11] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  373.650712][   T11] EXT4-fs (loop6): This should not happen!! Data will be lost
[  373.650712][   T11] 
[  373.665252][   T11] EXT4-fs (loop6): Total free blocks count 0
[  373.685398][   T11] EXT4-fs (loop6): Free/Dirty block details
[  373.699684][   T11] EXT4-fs (loop6): free_blocks=4096
[  373.724475][   T11] EXT4-fs (loop6): dirty_blocks=944
[  373.734434][ T4603] usb 6-1: Using ep0 maxpacket: 16
[  373.744835][ T4603] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  373.780669][   T11] EXT4-fs (loop6): Block reservation details
[  373.786767][   T11] EXT4-fs (loop6): i_reserved_data_blocks=59
[  373.799853][ T4603] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  373.815979][   T11] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 912 with error 28
[  373.828719][ T4603] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  373.857952][ T4603] usb 6-1: config 0 interface 0 has no altsetting 0
[  373.888358][ T4603] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  373.898701][ T4603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.947017][ T4603] usb 6-1: config 0 descriptor??
[  374.573073][ T4603] usb 6-1: USB disconnect, device number 14
[  374.724866][T11642] loop6: detected capacity change from 0 to 4096
[  375.466603][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2736'.
[  375.480586][ T4504] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  375.690490][ T4504] usb 7-1: Using ep0 maxpacket: 16
[  375.697837][ T4504] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.739879][ T4504] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.771901][ T4504] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  375.805574][ T4504] usb 7-1: config 0 interface 0 has no altsetting 0
[  375.825356][ T4504] usb 7-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  375.837793][ T4504] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.854641][ T4504] usb 7-1: config 0 descriptor??
[  376.143688][T11685] loop3: detected capacity change from 0 to 512
[  376.205364][T11685] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  376.252965][T11685] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  376.261981][T11685] System zones: 0-1, 15-15, 18-18, 34-34
[  376.269770][T11685] EXT4-fs (loop3): orphan cleanup on readonly fs
[  376.276607][T11685] __quota_error: 10 callbacks suppressed
[  376.276623][T11685] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  376.280726][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  376.282712][T11685] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  376.315006][T11685] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  376.323747][T11685] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2745: bg 0: block 40: padding at end of block bitmap is not set
[  376.351566][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  376.356840][T11685] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  376.358660][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  376.400668][T11685] EXT4-fs (loop3): 1 truncate cleaned up
[  376.406386][T11685] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  376.418082][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  376.440799][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  376.447924][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  376.500590][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0xe
[  376.510707][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  376.517804][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  376.566727][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  376.573706][T11685] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.2745: bad symlink.
[  376.587292][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  376.611532][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  376.618659][ T4504] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  376.643774][ T4504] uclogic 0003:5543:0003.0010: unbalanced collection at end of report description
[  376.658857][ T4504] uclogic 0003:5543:0003.0010: parse failed
[  376.669596][ T4504] uclogic: probe of 0003:5543:0003.0010 failed with error -22
[  376.687291][ T4504] usb 7-1: USB disconnect, device number 10
[  376.727897][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  376.987775][T11707] loop5: detected capacity change from 0 to 256
[  377.087854][T11707] FAT-fs (loop5): Directory bread(block 64) failed
[  377.110557][T11707] FAT-fs (loop5): Directory bread(block 65) failed
[  377.117275][T11707] FAT-fs (loop5): Directory bread(block 66) failed
[  377.145075][T11707] FAT-fs (loop5): Directory bread(block 67) failed
[  377.169020][T11707] FAT-fs (loop5): Directory bread(block 68) failed
[  377.183100][T11707] FAT-fs (loop5): Directory bread(block 69) failed
[  377.200106][T11707] FAT-fs (loop5): Directory bread(block 70) failed
[  377.223092][T11707] FAT-fs (loop5): Directory bread(block 71) failed
[  377.230156][T11707] FAT-fs (loop5): Directory bread(block 72) failed
[  377.265893][T11707] FAT-fs (loop5): Directory bread(block 73) failed
[  377.698740][T11728] 9p: Unknown Cache mode readahead
[  377.918596][T11731] loop1: detected capacity change from 0 to 4096
[  377.935833][T11739] loop5: detected capacity change from 0 to 1024
[  378.008099][T11739] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  378.620575][ T4603] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  378.693057][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  378.699506][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  378.751581][   T26] audit: type=1800 audit(1774863212.114:178): pid=11739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2769" name="file1" dev="loop5" ino=15 res=0 errno=0
[  378.836880][ T4603] usb 5-1: Using ep0 maxpacket: 8
[  378.852550][ T4603] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  378.880386][ T4603] usb 5-1: config 0 has no interface number 0
[  378.906327][ T4603] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  378.949357][ T4603] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  378.955801][ T5629] EXT4-fs (loop5): unmounting filesystem.
[  378.990421][ T4603] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[  379.019115][ T4603] usb 5-1: Product: syz
[  379.032003][ T4603] usb 5-1: config 0 descriptor??
[  379.070091][ T4603] iowarrior 5-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[  379.145236][T11747] loop6: detected capacity change from 0 to 32768
[  379.206673][T11747] XFS (loop6): Mounting V5 Filesystem
[  379.300624][   T22] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  379.329381][ T4603] usb 5-1: USB disconnect, device number 16
[  379.336027][    C1] iowarrior 5-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19
[  379.372711][T11747] XFS (loop6): Ending clean mount
[  379.503132][   T22] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  379.518707][ T6802] XFS (loop6): Unmounting Filesystem
[  379.522848][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.603719][   T22] usb 4-1: config 0 descriptor??
[  379.636272][   T22] cp210x 4-1:0.0: cp210x converter detected
[  380.018771][   T22] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  380.049304][   T22] usb 4-1: cp210x converter now attached to ttyUSB0
[  380.241547][   T22] usb 4-1: USB disconnect, device number 16
[  380.268462][   T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  380.310014][   T22] cp210x 4-1:0.0: device disconnected
[  380.575485][T11809] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2796'.
[  380.790478][ T4504] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  380.816975][T11816] input: syz0 as /devices/virtual/input/input17
[  380.980541][ T4504] usb 2-1: Using ep0 maxpacket: 16
[  380.991813][ T4504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.025233][ T4504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.047603][ T4504] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  381.070441][ T4504] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  381.090033][ T4504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.118714][ T4504] usb 2-1: config 0 descriptor??
[  381.353198][T11804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.397601][T11804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.639952][ T4504] hid-generic 0003:0955:7214.0011: unknown main item tag 0x0
[  381.668905][ T4504] hid-generic 0003:0955:7214.0011: unknown main item tag 0x4
[  381.703238][ T4504] hid-generic 0003:0955:7214.0011: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[  381.876062][ T4504] usb 2-1: USB disconnect, device number 11
[  382.000180][T11843] fido_id[11843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  382.802133][T11858] loop3: detected capacity change from 0 to 8192
[  382.812763][T11869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2820'.
[  382.825451][T11840] loop6: detected capacity change from 0 to 40427
[  382.835657][T11840] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  382.852722][T11858] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  382.870555][T11840] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  382.878999][T11858] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  382.883079][T11869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2820'.
[  382.890990][T11858] REISERFS (device loop3): using ordered data mode
[  382.906286][T11858] reiserfs: using flush barriers
[  382.913320][T11858] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  382.938202][ T4327] wlan1: Trigger new scan to find an IBSS to join
[  382.950830][T11858] REISERFS (device loop3): checking transaction log (loop3)
[  382.959472][T11858] REISERFS (device loop3): Using r5 hash to sort names
[  382.992096][    T9] ------------[ cut here ]------------
[  382.998367][    T9] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40
[  383.009800][    T9] WARNING: CPU: 0 PID: 9 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880
[  383.019642][    T9] Modules linked in:
[  383.023653][    T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  383.031049][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  383.041212][    T9] Workqueue: events_unbound cfg80211_wiphy_work
[  383.047527][    T9] RIP: 0010:__rate_control_send_low+0x635/0x880
[  383.053966][    T9] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 20 a9 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 fb ef a4 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  383.073668][    T9] RSP: 0018:ffffc900000e7400 EFLAGS: 00010246
[  383.079961][    T9] RAX: d644037505ed5c00 RBX: 000000000000000c RCX: ffff88813fe70000
[  383.081323][T11840] F2FS-fs (loop6): Found nat_bits in checkpoint
[  383.088113][    T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  383.102506][    T9] RBP: 0000000000000084 R08: ffffc900000e7087 R09: 1ffff9200001ce10
[  383.110570][    T9] R10: dffffc0000000000 R11: fffff5200001ce11 R12: 0000000000000040
[  383.118679][    T9] R13: dffffc0000000000 R14: ffff88807a133358 R15: ffff8880265e4a28
[  383.126856][    T9] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  383.130568][T11858] REISERFS (device loop3): using 3.5.x disk format
[  383.135853][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  383.135914][    T9] CR2: 00007ff199fec000 CR3: 000000005a844000 CR4: 00000000003506f0
[  383.157411][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  383.162668][T11858] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  383.165475][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  383.181928][T11877] loop1: detected capacity change from 0 to 4096
[  383.182736][    T9] Call Trace:
[  383.192463][    T9]  <TASK>
[  383.195456][    T9]  rate_control_send_low+0x194/0x790
[  383.200947][    T9]  rate_control_get_rate+0x207/0x5c0
[  383.206289][    T9]  ieee80211_tx_h_rate_ctrl+0xb1a/0x1750
[  383.212067][    T9]  ? ieee80211_tx_h_select_key+0x17b0/0x17b0
[  383.218122][    T9]  ? ieee80211_queue_skb+0xc2/0x21c0
[  383.223546][    T9]  invoke_tx_handlers_late+0xb6/0x1810
[  383.229141][    T9]  ? ieee80211_tx_h_select_key+0x126d/0x17b0
[  383.235508][    T9]  ? sta_info_get+0x289/0x2a0
[  383.240244][    T9]  ? invoke_tx_handlers_early+0xa11/0x1d40
[  383.246177][    T9]  ieee80211_tx+0x2d4/0x460
[  383.250781][    T9]  ? ieee80211_skb_resize+0x630/0x630
[  383.256311][    T9]  ? ieee80211_set_qos_hdr+0x1c6/0x510
[  383.261984][    T9]  ? __bpf_trace_tasklet+0x10/0x10
[  383.267149][    T9]  ? ieee80211_xmit+0x30c/0x3f0
[  383.272204][    T9]  ? __ieee80211_tx_skb_tid_band+0x48c/0x610
[  383.278678][    T9]  __ieee80211_tx_skb_tid_band+0x4d1/0x610
[  383.284617][    T9]  ? ieee80211_scan_state_send_probe+0x4b4/0x930
[  383.291088][    T9]  ieee80211_scan_state_send_probe+0x560/0x930
[  383.297328][    T9]  ieee80211_scan_work+0x4d3/0x1bc0
[  383.302666][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  383.307745][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  383.313421][    T9]  cfg80211_wiphy_work+0x221/0x260
[  383.318601][    T9]  ? process_one_work+0x7b0/0x1160
[  383.323843][    T9]  process_one_work+0x8a2/0x1160
[  383.328846][    T9]  ? worker_detach_from_pool+0x240/0x240
[  383.334608][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  383.339827][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  383.345679][    T9]  ? kthread_data+0x4b/0xc0
[  383.350251][    T9]  worker_thread+0xaa2/0x1270
[  383.355077][    T9]  kthread+0x29d/0x330
[  383.357848][T11840] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  383.359166][    T9]  ? worker_clr_flags+0x1a0/0x1a0
[  383.359200][    T9]  ? kthread_blkcg+0xd0/0xd0
[  383.376153][    T9]  ret_from_fork+0x1f/0x30
[  383.377288][T11840] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  383.380773][    T9]  </TASK>
[  383.380788][    T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  383.380800][    T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  383.380819][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  383.380830][    T9] Workqueue: events_unbound cfg80211_wiphy_work
[  383.380862][    T9] Call Trace:
[  383.380869][    T9]  <TASK>
[  383.380878][    T9]  dump_stack_lvl+0x188/0x24e
[  383.380909][    T9]  ? memcpy+0x3c/0x60
[  383.380930][    T9]  ? show_regs_print_info+0x12/0x12
[  383.380957][    T9]  ? load_image+0x400/0x400
[  383.380991][    T9]  panic+0x2e5/0x730
[  383.381015][    T9]  ? bpf_jit_dump+0xd0/0xd0
[  383.381044][    T9]  ? ret_from_fork+0x1f/0x30
[  383.381073][    T9]  __warn+0x2f8/0x4f0
[  383.381091][    T9]  ? __rate_control_send_low+0x635/0x880
[  383.381113][    T9]  ? __rate_control_send_low+0x635/0x880
[  383.381132][    T9]  report_bug+0x2ba/0x4f0
[  383.381156][    T9]  ? __rate_control_send_low+0x635/0x880
[  383.381180][    T9]  handle_bug+0x3a/0x70
[  383.381204][    T9]  exc_invalid_op+0x16/0x40
[  383.381230][    T9]  asm_exc_invalid_op+0x16/0x20
[  383.381250][    T9] RIP: 0010:__rate_control_send_low+0x635/0x880
[  383.381271][    T9] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 20 a9 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 fb ef a4 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  383.381287][    T9] RSP: 0018:ffffc900000e7400 EFLAGS: 00010246
[  383.381304][    T9] RAX: d644037505ed5c00 RBX: 000000000000000c RCX: ffff88813fe70000
[  383.381318][    T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  383.381329][    T9] RBP: 0000000000000084 R08: ffffc900000e7087 R09: 1ffff9200001ce10
[  383.381342][    T9] R10: dffffc0000000000 R11: fffff5200001ce11 R12: 0000000000000040
[  383.381354][    T9] R13: dffffc0000000000 R14: ffff88807a133358 R15: ffff8880265e4a28
[  383.381398][    T9]  rate_control_send_low+0x194/0x790
[  383.381432][    T9]  rate_control_get_rate+0x207/0x5c0
[  383.381459][    T9]  ieee80211_tx_h_rate_ctrl+0xb1a/0x1750
[  383.381494][    T9]  ? ieee80211_tx_h_select_key+0x17b0/0x17b0
[  383.381524][    T9]  ? ieee80211_queue_skb+0xc2/0x21c0
[  383.381548][    T9]  invoke_tx_handlers_late+0xb6/0x1810
[  383.381566][    T9]  ? ieee80211_tx_h_select_key+0x126d/0x17b0
[  383.381584][    T9]  ? sta_info_get+0x289/0x2a0
[  383.381609][    T9]  ? invoke_tx_handlers_early+0xa11/0x1d40
[  383.381648][    T9]  ieee80211_tx+0x2d4/0x460
[  383.381668][    T9]  ? ieee80211_skb_resize+0x630/0x630
[  383.381699][    T9]  ? ieee80211_set_qos_hdr+0x1c6/0x510
[  383.381726][    T9]  ? __bpf_trace_tasklet+0x10/0x10
[  383.381755][    T9]  ? ieee80211_xmit+0x30c/0x3f0
[  383.381777][    T9]  ? __ieee80211_tx_skb_tid_band+0x48c/0x610
[  383.381797][    T9]  __ieee80211_tx_skb_tid_band+0x4d1/0x610
[  383.381823][    T9]  ? ieee80211_scan_state_send_probe+0x4b4/0x930
[  383.381845][    T9]  ieee80211_scan_state_send_probe+0x560/0x930
[  383.381888][    T9]  ieee80211_scan_work+0x4d3/0x1bc0
[  383.381923][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  383.381942][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  383.381971][    T9]  cfg80211_wiphy_work+0x221/0x260
[  383.382001][    T9]  ? process_one_work+0x7b0/0x1160
[  383.382021][    T9]  process_one_work+0x8a2/0x1160
[  383.382057][    T9]  ? worker_detach_from_pool+0x240/0x240
[  383.382083][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  383.382103][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  383.382122][    T9]  ? kthread_data+0x4b/0xc0
[  383.382153][    T9]  worker_thread+0xaa2/0x1270
[  383.382202][    T9]  kthread+0x29d/0x330
[  383.382217][    T9]  ? worker_clr_flags+0x1a0/0x1a0
[  383.382237][    T9]  ? kthread_blkcg+0xd0/0xd0
[  383.382256][    T9]  ret_from_fork+0x1f/0x30
[  383.382294][    T9]  </TASK>
[  383.388739][    T9] Kernel Offset: disabled
[  383.753463][    T9] Rebooting in 86400 seconds..