last executing test programs:

9.562987718s ago: executing program 3 (id=3552):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0)

9.215619699s ago: executing program 2 (id=3556):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000010fc0)=[0x0], 0x0, 0x0, 0x0, 0x1})

9.129627768s ago: executing program 0 (id=3557):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6c6f63616c616c6c6f633d31383434363734343037333730393535313631302c6e6f61636c2c0034ca94b3"], 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x7, 0x7, 0x4008, 0x280000, 0x3, 0x3ff, 0x3, 0x3, 0xffffffff})

8.786680635s ago: executing program 3 (id=3558):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x1401, 0x1, 0x1fffffff}, 0x10}}, 0x0)

8.703457825s ago: executing program 4 (id=3559):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00008d1000/0x2000)=nil, 0x2000, 0x0, 0x80000000000000, 0x4000)

8.624312297s ago: executing program 2 (id=3561):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,background_gc=sync,acl,fsync_mode=strict,inline_xattr,disable_roll_forward,checkpoint=disable,background_gc=on,noinline_xattr,discard_unit=block,fsync_mode=strict,age_extent_cache,extent_cache,fault_injection=4073709551615,subj_type=disable_roll_forward,dirsync,\x00'], 0x1, 0x551c, &(0x7f00000079c0)="$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")
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='.\x00', 0x108020, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0)

8.088425885s ago: executing program 3 (id=3563):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0)

7.445037236s ago: executing program 3 (id=3565):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x105, 0x97e)

6.9001536s ago: executing program 3 (id=3567):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2, 0xa, 0x80, 0x9, 0x2, 0x0, 0x70bd2d, 0x25dfdbfb}, 0x10}}, 0x4004000)

6.282433529s ago: executing program 3 (id=3569):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0xff, 0x59f2, &(0x7f00000061c0)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

6.087976046s ago: executing program 5 (id=3570):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x2, 0xa, 0x1}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x8c}}, 0x0)

5.551529268s ago: executing program 5 (id=3572):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, 0x0, 0x0)

4.967417692s ago: executing program 5 (id=3574):
r0 = socket$inet(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

4.883585119s ago: executing program 0 (id=3575):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x82000)

4.667036903s ago: executing program 2 (id=3576):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbcc, &(0x7f0000002380)="$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")
creat(&(0x7f0000000440)='./file1\x00', 0x0)

4.106660557s ago: executing program 5 (id=3578):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x20, 0x9c6acae24e52c82f, 0x70bd2b, 0x4000000, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x920b7da3991bca94}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x38}}, 0x8000)

4.065973798s ago: executing program 1 (id=3579):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x4000000f, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

4.057184329s ago: executing program 4 (id=3580):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x2, {0x0, 0x1, 0x4}}, 0x18)

3.461061572s ago: executing program 1 (id=3581):
r0 = syz_open_dev$mouse(&(0x7f0000000280), 0x1, 0x2842)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1)

3.420057731s ago: executing program 5 (id=3582):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x300}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

3.395640433s ago: executing program 0 (id=3583):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x7, 0x384, &(0x7f0000000b40)="$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")
mknod$loop(&(0x7f0000000200)='./file1\x00', 0x800, 0x1)

3.394455239s ago: executing program 4 (id=3584):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4c5, &(0x7f0000000f00)="$eJzs3d1rW+cZAPBHUuzYjrd8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxbcVPLlrHkNDa5cNq7XPSitLRQetH7/gW9aa4aCqXXLb0tvSgpbepCWyio6Ehy/CE5aupIjc/vByd6z3sUPe8r8bw+es85OgGk1tnaP5mI4Yh4LyKO1le3P+Fs/WHj/s2Z2pKJavXyZ5nkebX15lOb/+9IRKxHxEBE/OtvEf/P7I5bXl2bny4WC8uN9XxlYSlfXl27cG1heq4wV1gcm7w4NTU5OjE+tW99vf3807cvvfmP/je+eu7e3RfefqvWrOHGtq392E/1rvfF8S11hyLiz48jWA/kGv0Z7HVDeCS1z+9nEXEuyf+jkUs+TSANqtVq9dvq4Xab16vAgZVN9oEz2ZGIqJez2ZGR+j78z2MoWyyVK7+/WlpZnK3vKx+LvuzVa8XCaOO7wrHoy9TWx5Lyg/XxHesTEck+8Iu5wWR9ZKZUnO3uUAfscGRH/n+Zq+c/kBK+8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0ivvfK/v4vtALrqn5cu1ZZq8/r32eurK/Ol6xdmC+X5kYWVmZGZ0vLSyFypNJdcs7PwsNcrlkpLY3+IlRv5SqFcyZdX164slFYWK1eS6/qvFPq60iugE8fP3PkgExHrfxxMltjyJ1+uwsFWrWai19cgA72R6/UABPSMqX9Ir+/xHb/tj4QBT7YWP9G7zUDr6r/E0uNoDdAN2V43AOiZ86cc/4O0Mv8P6WX+H9LLPj7wiPP/Yf4fnlzm/yG9htvc/+snW+7dNRoRP42I93N9h5v3+gIOguwnmcb+//mjvx7eubU/83VyiKA/Ip559fLLN6YrleWxWv3nm/WVVxr1471oP9CpZp428xgASK+N+zdnmks343761/pJCLvjH2rMTQ4kxyiHNjLbzlXI7NO5C+u3IuJkq/iZxv3O60c+hjZyu+KfaDxm6i+RtPdQct/07sQ/tSX+r7bEP/2D3xVIhzu18We0Vf5lk5yOzfzbPv4M79O5E+3Hv+zm+JdrM/6d6TDGU689+3Hb+LciTreM34w3kMTaGb/WtvMdxr/333//ot226uv112kVv6lWylcWlvLl1bULye/IzRUWxyYvTk1Njk6MT+WTOep8c6Z6tz+dfPfuXv0fahO/3t8PW/a/VvfbDvv/zS/f+c/ZPeL/5lzrz/9E8tj6/R+MiN91GP+L8Y/+125bLf5sm/5n94hfq5voMH75pb+7dhgAfkTKq2vz08ViYVlBQUFhs/CwkWO9OwMU8Ng8SPpetwQAAAAAAAAAAADoVDdOJ+51HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoLvAgAA//+tldf6")
chmod(&(0x7f0000000080)='./file1\x00', 0x1d7)

2.901745941s ago: executing program 5 (id=3585):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00})

2.892310571s ago: executing program 1 (id=3586):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0x1, 0x22f, &(0x7f0000001380)="$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")
listxattr(&(0x7f0000000180)='./file2\x00', 0x0, 0x0)

2.030668617s ago: executing program 1 (id=3587):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000680)={[{@abort}, {@debug}]}, 0x1, 0x774, &(0x7f00000007c0)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

1.923251196s ago: executing program 2 (id=3588):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETSHIFTSTATE(r0, 0x4b2f, 0x0)

1.776878451s ago: executing program 4 (id=3589):
r0 = socket(0x2, 0x3, 0x9)
sendmmsg$inet(r0, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0x6, [{@loopback, 0x3899}, {@broadcast, 0x98}]}]}}}], 0x28}}], 0x2, 0x0)

1.690350255s ago: executing program 0 (id=3590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414800c"], 0x528}}, 0xc000)

984.863312ms ago: executing program 2 (id=3591):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYBLOB="001000008000000008000f0020"], 0xe8}}, 0x0)

941.136136ms ago: executing program 1 (id=3592):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x5020, 0x4)

833.173198ms ago: executing program 0 (id=3593):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)

807.085439ms ago: executing program 4 (id=3594):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000640)=0x3, 0x4)

303.388133ms ago: executing program 2 (id=3595):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xffffffffffffff4b, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

289.870896ms ago: executing program 0 (id=3596):
set_mempolicy(0x8005, &(0x7f00000003c0)=0x8000000000000001, 0xe0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})

163.85221ms ago: executing program 1 (id=3597):
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040845}, 0x4000000)

0s ago: executing program 4 (id=3598):
r0 = socket$inet6(0xa, 0x3, 0x7)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0x7, 0x4}})

kernel console output (not intermixed with test programs):

[ T6113] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  388.837748][    T9] powermate: unknown product id 0240
[  388.844173][ T6113] usb 2-1: Detected SIO
[  388.870210][    T9] powermate: Expected payload of 3--6 bytes, found 0 bytes!
[  388.877730][    T9] powermate 5-1:0.0: probe with driver powermate failed with error -5
[  388.888321][ T6113] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  388.933048][    T9] usb 5-1: USB disconnect, device number 74
[  388.958286][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  388.965021][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  388.998590][ T5834] usb 2-1: USB disconnect, device number 75
[  389.012866][ T5834] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  389.033129][T12155] loop2: detected capacity change from 0 to 512
[  389.051609][ T5834] ftdi_sio 2-1:0.0: device disconnected
[  389.065727][T12155] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  389.084352][   T25] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  389.109574][T12155] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  389.131859][T12155] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2755: Failed to acquire dquot type 0
[  389.149588][T12160] loop0: detected capacity change from 0 to 2048
[  389.162082][T12155] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  389.180841][T12155] EXT4-fs (loop2): 1 truncate cleaned up
[  389.187812][T12155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.202743][T12160] Alternate GPT is invalid, using primary GPT.
[  389.209118][T12160]  loop0: p1 p2 p3
[  389.257191][   T25] usb 6-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[  389.276699][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.302254][   T25] usb 6-1: config 0 descriptor??
[  389.342783][   T25] usb-storage 6-1:0.0: USB Mass Storage device detected
[  389.386245][ T5949] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.416738][   T25] usb-storage 6-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc7-syzkaller-00191-gfda5e3f28400)
[  389.416738][   T25]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  389.469500][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  389.473098][ T7800] udevd[7800]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  389.488883][ T6224] udevd[6224]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  389.496635][T12164] loop0: detected capacity change from 0 to 2048
[  389.639564][T12168] capability: warning: `syz.3.2759' uses 32-bit capabilities (legacy support in use)
[  389.667588][   T25] usb 6-1: USB disconnect, device number 75
[  390.014223][ T5834] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  390.216963][T12184] loop1: detected capacity change from 0 to 4096
[  390.257383][T12184] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  390.345626][ T5834] usb 3-1: Using ep0 maxpacket: 32
[  390.352492][ T5834] usb 3-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config
[  390.377682][ T5834] usb 3-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d
[  390.417423][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.428174][T12184] ntfs3(loop1): Failed to initialize MFT zone (-22).
[  390.474144][   T25] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  390.504258][ T5834] quatech2 3-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected
[  390.687711][   T25] usb 4-1: Using ep0 maxpacket: 16
[  390.694967][   T25] usb 4-1: config 9 has an invalid interface number: 53 but max is 0
[  390.708675][   T25] usb 4-1: config 9 has no interface number 0
[  390.717276][ T5834] usb 3-1: qt2_attach - failed to power on unit: -71
[  390.723703][T12204] loop1: detected capacity change from 0 to 512
[  390.733063][   T25] usb 4-1: config 9 interface 53 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  390.737339][ T5834] quatech2 3-1:24.0: probe with driver quatech2 failed with error -71
[  390.762118][   T25] usb 4-1: config 9 interface 53 has no altsetting 0
[  390.823526][ T5834] usb 3-1: USB disconnect, device number 73
[  390.832105][   T25] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice=34.d5
[  390.848230][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.902692][   T25] usb 4-1: Product: syz
[  390.917336][   T25] usb 4-1: Manufacturer: syz
[  390.932905][   T25] usb 4-1: SerialNumber: syz
[  391.018349][T12206] loop4: detected capacity change from 0 to 4096
[  391.071595][T12206] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  391.175503][   T25] kvaser_usb 4-1:9.53: error -ENODEV: Cannot get usb endpoint(s)
[  391.194666][   T25] usb 4-1: USB disconnect, device number 63
[  391.245145][T12212] loop5: detected capacity change from 0 to 4096
[  391.261806][T12212] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  391.335994][T12212] ntfs3(loop5): Failed to load $Extend (-22).
[  391.346220][T12212] ntfs3(loop5): Failed to initialize $Extend.
[  391.383436][ T5989] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  391.414647][ T5988] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[  391.559856][ T5989] usb 2-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e
[  391.572094][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.583221][ T5989] usb 2-1: Product: syz
[  391.587986][ T5988] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.598768][ T5988] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  391.609715][ T5989] usb 2-1: Manufacturer: syz
[  391.614356][ T5989] usb 2-1: SerialNumber: syz
[  391.619314][ T5988] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  391.629739][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.638769][ T5989] usb 2-1: config 0 descriptor??
[  391.657614][ T5989] f81232 2-1:0.0: f81232 converter detected
[  391.668935][ T5988] usb 1-1: config 0 descriptor??
[  391.674951][ T5989] usb 2-1: f81232 converter now attached to ttyUSB0
[  391.685505][ T5988] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  391.692221][ T5988] dvb-usb: bulk message failed: -22 (3/0)
[  391.729272][ T5988] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  391.771719][ T5988] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  391.793191][ T5988] usb 1-1: media controller created
[  391.800815][   T25] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  391.827129][ T5988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  391.828946][ T5834] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  391.852919][ T5988] dvb-usb: bulk message failed: -22 (6/0)
[  391.859003][ T5988] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  391.885376][ T5988] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38
[  391.906103][   T46] usb 2-1: USB disconnect, device number 76
[  391.924968][   T46] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0
[  391.943246][ T5988] dvb-usb: schedule remote query interval to 150 msecs.
[  391.959999][ T5988] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  391.969841][   T46] f81232 2-1:0.0: device disconnected
[  391.985448][   T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  392.002915][ T5988] usb 1-1: USB disconnect, device number 68
[  392.019581][   T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  392.039903][ T5834] usb 5-1: Using ep0 maxpacket: 32
[  392.072487][ T5834] usb 5-1: config 0 has an invalid interface number: 64 but max is 1
[  392.075078][   T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  392.099497][ T5834] usb 5-1: config 0 has no interface number 1
[  392.106155][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  392.122939][ T5988] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  392.133107][ T5834] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=1c.a5
[  392.141594][   T25] usb 3-1: SerialNumber: syz
[  392.146916][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.168834][   T25] usb 3-1: bad CDC descriptors
[  392.184818][ T5834] usb 5-1: Product: syz
[  392.191510][ T5834] usb 5-1: Manufacturer: syz
[  392.205908][ T5834] usb 5-1: SerialNumber: syz
[  392.321883][T12228] loop5: detected capacity change from 0 to 32768
[  392.329412][ T5834] usb 5-1: config 0 descriptor??
[  392.336046][T12228] XFS (loop5): sunit and swidth options incompatible with the noalign option
[  392.372342][ T5834] usb 5-1: bad CDC descriptors
[  392.412511][ T5988] usb 3-1: USB disconnect, device number 74
[  392.580147][   T25] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  392.620377][ T5989] usb 5-1: USB disconnect, device number 75
[  392.747932][T12240] loop5: detected capacity change from 0 to 64
[  392.767400][T12240] BFS-fs: bfs_fill_super(): Impossible last inode number 1013 > 513 on loop5
[  392.783079][   T25] usb 4-1: Using ep0 maxpacket: 16
[  392.795204][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  392.826157][   T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  392.845090][   T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  392.879296][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.887391][   T25] usb 4-1: Product: syz
[  392.901331][   T25] usb 4-1: Manufacturer: syz
[  392.905979][   T25] usb 4-1: SerialNumber: syz
[  392.922040][ T5988] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  393.115031][ T5988] usb 2-1: Using ep0 maxpacket: 16
[  393.134225][ T5988] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.146672][ T5988] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  393.170680][   T25] usb 4-1: skipping empty audio interface (v1)
[  393.179405][ T5988] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  393.188465][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.232145][ T5988] usb 2-1: Product: syz
[  393.236362][ T5988] usb 2-1: Manufacturer: syz
[  393.240984][ T5988] usb 2-1: SerialNumber: syz
[  393.371399][T12238] loop0: detected capacity change from 0 to 32768
[  393.380257][T12238] jfs_mount: dbMount failed w/rc = -5
[  393.385956][T12238] Mount JFS Failure: -5
[  393.390126][T12238] jfs_mount failed w/return code = -5
[  393.447358][   T25] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  393.643240][ T5988] usb 2-1: invalid UAC_HEADER (v1)
[  393.731582][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  393.761634][   T25] usb 4-1: USB disconnect, device number 64
[  393.853619][ T5988] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  393.896493][ T5988] usb 2-1: USB disconnect, device number 77
[  393.915147][T12263] loop4: detected capacity change from 0 to 64
[  393.971506][T12263] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop4
[  394.347161][T12256] loop5: detected capacity change from 0 to 32768
[  394.363139][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  394.803696][ T5834] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[  394.846427][    T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  394.868256][T12299] loop3: detected capacity change from 0 to 8
[  394.961155][T12299] SQUASHFS error: lzo decompression failed, data probably corrupt
[  394.969383][T12299] SQUASHFS error: Failed to read block 0x91: -5
[  394.979592][ T5834] usb 5-1: unable to get BOS descriptor or descriptor too short
[  394.990639][T12256] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  395.025433][ T5834] usb 5-1: not running at top speed; connect to a high speed hub
[  395.040416][    T9] usb 1-1: config 0 has an invalid interface number: 136 but max is 0
[  395.057866][    T9] usb 1-1: config 0 has no interface number 0
[  395.064552][    T9] usb 1-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  395.081481][ T5834] usb 5-1: config 17 has an invalid interface number: 8 but max is 1
[  395.090039][T12256] bcachefs (loop5): initializing new filesystem
[  395.100559][ T5834] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2
[  395.134926][    T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4
[  395.144231][ T5834] usb 5-1: config 17 has no interface number 0
[  395.160440][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.172540][ T5834] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4
[  395.194081][    T9] usb 1-1: config 0 descriptor??
[  395.219476][ T5834] usb 5-1: config 17 interface 8 has no altsetting 0
[  395.235902][    T9] keyspan 1-1:0.136: Keyspan 2 port adapter converter detected
[  395.250438][    T9] keyspan 1-1:0.136: found no endpoint descriptor for endpoint 1
[  395.263799][ T5834] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  395.278815][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.291073][    T9] keyspan 1-1:0.136: found no endpoint descriptor for endpoint 84
[  395.305479][ T5834] usb 5-1: Product: syz
[  395.310106][T12299] SQUASHFS error: Unable to read metadata cache entry [8f]
[  395.321511][ T5834] usb 5-1: Manufacturer: syz
[  395.326187][ T5834] usb 5-1: SerialNumber: syz
[  395.331077][    T9] keyspan 1-1:0.136: found no endpoint descriptor for endpoint 2
[  395.348775][T12299] SQUASHFS error: Unable to read inode 0x11f
[  395.370734][    T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  395.436843][    T9] keyspan 1-1:0.136: found no endpoint descriptor for endpoint 88
[  395.562882][T12256] bcachefs (loop5): going read-write
[  395.575940][    T9] keyspan 1-1:0.136: found no endpoint descriptor for endpoint 6
[  395.642663][ T5834] usb 5-1: selecting invalid altsetting 0
[  395.669347][T12256] bcachefs (loop5): marking superblocks
[  395.686602][ T5834] usb 5-1: 8:6 : no UAC_FORMAT_TYPE desc
[  395.704062][ T5834] usb 5-1: selecting invalid altsetting 0
[  395.716029][T12256] bcachefs (loop5): initializing freespace
[  395.745991][    T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  395.810775][    T9] usb 1-1: USB disconnect, device number 69
[  395.819935][ T5988] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  395.821124][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  395.855154][ T5834] usb 5-1: USB disconnect, device number 76
[  395.861514][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  395.873169][    T9] keyspan 1-1:0.136: device disconnected
[  395.875783][T12256] bcachefs (loop5): done initializing freespace
[  396.014976][T12256] bcachefs (loop5): reading snapshots table
[  396.028147][T12256] bcachefs (loop5): reading snapshots done
[  396.030675][ T5988] usb 2-1: Using ep0 maxpacket: 32
[  396.072363][ T5988] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[  396.085727][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.094989][ T5988] usb 2-1: Product: syz
[  396.100224][ T5988] usb 2-1: Manufacturer: syz
[  396.105173][ T5988] usb 2-1: SerialNumber: syz
[  396.112761][ T5988] usb 2-1: config 0 descriptor??
[  396.117670][ T6224] udevd[6224]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  396.124156][ T5988] hdpvr 2-1:0.0: Could not find bulk-in endpoint
[  396.159936][ T5988] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  396.225927][T12256] bcachefs (loop5): done starting filesystem
[  396.456422][ T5989] usb 2-1: USB disconnect, device number 78
[  396.576972][ T5937] bcachefs (loop5): shutting down
[  396.586547][ T5937] bcachefs (loop5): going read-only
[  396.631679][ T5937] bcachefs (loop5): finished waiting for writes to stop
[  396.728851][ T5937] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  396.853574][T12331] loop3: detected capacity change from 0 to 65
[  396.862243][ T5937] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 6
[  396.904040][T12331] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3
[  396.905198][ T5937] bcachefs (loop5): shutdown complete, journal seq 7
[  396.928635][ T5937] bcachefs (loop5): marking filesystem clean
[  397.034178][ T5937] bcachefs (loop5): shutdown complete
[  397.037768][T12328] loop2: detected capacity change from 0 to 4096
[  397.091641][T12328] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  397.112791][ T5989] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  397.178132][T12337] loop3: detected capacity change from 0 to 1024
[  397.201429][T12328] ntfs3(loop2): $Secure::$SDH is corrupted.
[  397.207457][T12328] ntfs3(loop2): Failed to initialize $Secure (-22).
[  397.234725][T12337] hfsplus: failed to load root directory
[  397.305014][ T5989] usb 5-1: config index 0 descriptor too short (expected 64987, got 72)
[  397.333140][ T5989] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  397.362832][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.395989][ T5989] usb 5-1: Product: syz
[  397.406787][ T5989] usb 5-1: Manufacturer: syz
[  397.411431][ T5989] usb 5-1: SerialNumber: syz
[  397.483255][ T5989] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  397.587984][T12346] loop2: detected capacity change from 0 to 160
[  397.608344][   T25] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  397.690960][T12349] loop3: detected capacity change from 0 to 512
[  397.750333][T12349] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  397.805097][T12349] EXT4-fs (loop3): group descriptors corrupted!
[  397.819494][T12353] loop1: detected capacity change from 0 to 1024
[  398.181953][    T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  398.637154][T12357] loop2: detected capacity change from 0 to 32768
[  398.644620][T12357] gfs2: quota_quantum mount option requires a positive numeric argument
[  398.855618][    T9] usb 1-1: Using ep0 maxpacket: 32
[  398.892633][    T9] usb 1-1: config 0 has an invalid interface number: 159 but max is 0
[  398.904578][    T9] usb 1-1: config 0 has no interface number 0
[  398.924244][    T9] usb 1-1: config 0 interface 159 has no altsetting 0
[  399.003546][    T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=f0.de
[  399.077804][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.122527][    T9] usb 1-1: Product: syz
[  399.143360][    T9] usb 1-1: Manufacturer: syz
[  399.193617][    T9] usb 1-1: SerialNumber: syz
[  399.341014][    T9] usb 1-1: config 0 descriptor??
[  399.520360][T12367] loop2: detected capacity change from 0 to 21
[  399.638961][ T5834] usb 1-1: USB disconnect, device number 70
[  399.797072][    T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  399.846927][T12369] loop2: detected capacity change from 0 to 512
[  400.009968][    T9] usb 4-1: Using ep0 maxpacket: 8
[  400.020938][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  400.036012][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  400.048541][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  400.063720][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  400.096586][    T9] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f
[  400.105933][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.114059][    T9] usb 4-1: Product: syz
[  400.128037][    T9] usb 4-1: Manufacturer: syz
[  400.132812][    T9] usb 4-1: SerialNumber: syz
[  400.140146][    T9] usb 4-1: config 0 descriptor??
[  400.147017][    T9] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  400.698160][ T5834] usb 4-1: USB disconnect, device number 65
[  401.017893][T12383] loop0: detected capacity change from 0 to 16
[  401.140414][T12383] erofs (device loop0): rootino(nid 36) is not a directory(i_mode 142735)
[  402.787864][T12373] loop4: detected capacity change from 0 to 32768
[  402.862471][T12379] loop1: detected capacity change from 0 to 32768
[  402.892841][T12397] loop3: detected capacity change from 0 to 256
[  402.902476][T12373] bcachefs: bch2_parse_one_mount_opt() Invalid mount option move_bytes_in_flight: must be a number
[  402.963461][T12397] exfat: Deprecated parameter 'utf8'
[  402.968852][T12397] exfat: Deprecated parameter 'namecase'
[  402.997256][T12379] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section replicas_v0: invalid device 108 in entry user: 1/9 [0 0 0 0 0 0 0 0 108]
[  402.997256][T12379] replicas_v0 (size 24):
[  402.997256][T12379] btree: 1 [0] journal: 1 [0] user: 9 [0 0 0 0 0 0 0 0 108]
[  402.997256][T12379] 
[  403.099633][T12397] exfat: Deprecated parameter 'utf8'
[  403.152936][T12397] exFAT-fs (loop3): bogus fat length
[  403.212385][T12397] exFAT-fs (loop3): failed to read boot sector
[  403.253926][T12397] exFAT-fs (loop3): failed to recognize exfat type
[  403.273788][T12379] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  404.411357][T12389] loop0: detected capacity change from 0 to 32768
[  404.559642][T12389] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  404.559642][T12389] clean (size 2912):
[  404.559642][T12389] flags:          0
[  404.559642][T12389] journal_seq:    8
[  404.559642][T12389] usage: type=inodes v=8
[  404.559642][T12389] usage: type=key_version v=0
[  404.559642][T12389] usage: type=reserved v=0
[  404.559642][T12389] usage: type=reserved v=0
[  404.559642][T12389] usage: type=reserved v=0
[  404.559642][T12389] usage: type=reserved v=0
[  404.559642][T12389] data_usage: btree: 1/1 [0]=2816
[  404.559642][T12389] data_usage: journal: 1/1 [0]=0
[  404.559642][T12389] btree_keys: btree=extents l=0 u64s 8 type deleted 0:2048:0 len 8 ver 1065151889408: 
[  404.559642][T12389] btree_keys: btree=extents l=0 u64s 1 type deleted POS_MIN len 224 ver 137438953472: 
[  404.559642][T12389] btree_keys: btree=extents l=0 u64s 32 type deleted POS_MIN len 0 ver 962072674304: 
[  404.559642][T12389] clock: read=0
[  404.559642][T12389] clock: write=1288
[  404.559642][T12389] btree_root: btree=extents l=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee356 written 16 min_key POS_MIN ptr: 0:6912 gen 0
[  404.559642][T12389] btree_root: btree=inodes l=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq efdd7a26d7396dd5 written 24 min_key POS_MIN ptr: 0:9728 gen 0
[  404.559642][T12389] btree_root: btree=dirents l=0 u64s 11 type btre
[  404.559885][T12389] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  405.139719][ T5834] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  405.229522][   T24] sched: DL replenish lagged too much
[  405.376619][ T5834] usb 4-1: Using ep0 maxpacket: 32
[  405.403533][ T5834] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01
[  405.429765][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.515763][ T5834] usb 4-1: Product: syz
[  405.576018][ T5834] usb 4-1: Manufacturer: syz
[  405.611805][ T5834] usb 4-1: SerialNumber: syz
[  405.679965][ T5834] usb 4-1: config 0 descriptor??
[  405.719633][ T6113] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  405.964636][ T6113] usb 2-1: Using ep0 maxpacket: 8
[  405.999449][ T6113] usb 2-1: config 0 has an invalid interface number: 236 but max is 0
[  406.074807][ T6113] usb 2-1: config 0 has no interface number 0
[  406.132861][ T6113] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice= 5.d6
[  406.160239][ T5834] usb 4-1: USB disconnect, device number 66
[  406.213275][ T6113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.275273][ T6113] usb 2-1: config 0 descriptor??
[  406.317815][ T6113] usb-storage 2-1:0.236: USB Mass Storage device detected
[  406.377848][ T6113] usb-storage 2-1:0.236: device ignored
[  406.702379][ T6113] usb 2-1: USB disconnect, device number 79
[  406.950080][T12437] loop0: detected capacity change from 0 to 2364
[  407.247510][ T5834] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  407.507334][ T5834] usb 6-1: Using ep0 maxpacket: 32
[  407.563624][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  407.621609][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  407.708431][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  407.793653][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  407.880580][ T6113] usb 2-1: new full-speed USB device number 80 using dummy_hcd
[  407.899193][ T5834] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  407.949454][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.009085][ T5834] usb 6-1: Product: syz
[  408.038705][ T5834] usb 6-1: Manufacturer: syz
[  408.081269][ T5834] usb 6-1: SerialNumber: syz
[  408.098776][ T5834] usb 6-1: config 0 descriptor??
[  408.135285][ T6113] usb 2-1: not running at top speed; connect to a high speed hub
[  408.178755][ T5834] usb 6-1: no audio or video endpoints found
[  408.197993][ T6113] usb 2-1: config 5 has an invalid interface number: 148 but max is 0
[  408.253021][ T6113] usb 2-1: config 5 has no interface number 0
[  408.259193][ T6113] usb 2-1: config 5 interface 148 altsetting 1 endpoint 0xC has an invalid bInterval 250, changing to 4
[  408.397176][ T5834] usb 6-1: USB disconnect, device number 76
[  408.436744][ T6113] usb 2-1: config 5 interface 148 altsetting 1 endpoint 0xD has invalid maxpacket 155, setting to 64
[  408.533155][ T6113] usb 2-1: config 5 interface 148 has no altsetting 0
[  408.592634][ T6113] usb 2-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2
[  408.644584][ T6113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.694972][ T6113] usb 2-1: Product: syz
[  408.754648][ T6113] usb 2-1: Manufacturer: syz
[  408.773605][ T6113] usb 2-1: SerialNumber: syz
[  408.808461][T12448] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  408.851097][    T8] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  409.003334][T12461] loop4: detected capacity change from 0 to 512
[  409.077478][ T6113] ipheth 2-1:5.148: Unable to find endpoints
[  409.123766][T12461] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 7
[  409.188186][T12463] loop2: detected capacity change from 0 to 1024
[  409.201657][ T6113] usb 2-1: USB disconnect, device number 80
[  409.230548][    T8] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  409.338439][T12463] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  409.353622][    T8] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  409.431988][T12463] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  409.456100][    T8] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  409.552200][T12463] JBD2: no valid journal superblock found
[  409.564896][    T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  409.604784][T12463] EXT4-fs (loop2): Could not load journal inode
[  409.638281][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.749367][T12457] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  410.093914][    T8] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  410.166536][    T8] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input39
[  410.203701][T12447] loop3: detected capacity change from 0 to 32768
[  410.275987][T12447] (syz.3.2891,12447,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0x155c9c45. Applying ECC.
[  410.347979][    T8] usb 1-1: USB disconnect, device number 71
[  410.353950][    C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  410.570235][T12447] (syz.3.2891,12447,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  410.684280][T12447] (syz.3.2891,12447,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  410.905453][T12447] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  410.905616][T12447] (syz.3.2891,12447,0):ocfs2_initialize_super:2281 ERROR: status = -12
[  410.990227][T12447] (syz.3.2891,12447,0):ocfs2_fill_super:1178 ERROR: status = -12
[  411.894141][T12486] loop2: detected capacity change from 0 to 512
[  412.079666][T12486] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  412.282879][T12486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002]
[  412.379681][T12486] EXT4-fs (loop2): orphan cleanup on readonly fs
[  412.444040][T12486] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2912: bg 0: block 361: padding at end of block bitmap is not set
[  412.508940][T12465] loop5: detected capacity change from 0 to 32768
[  412.562618][T12465] (syz.5.2901,12465,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  412.602735][T12486] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  412.699784][T12465] (syz.5.2901,12465,0):ocfs2_fill_super:1178 ERROR: status = -22
[  412.762132][T12486] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2912: attempt to clear invalid blocks 33619980 len 1
[  412.868041][T12486] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2912: invalid indirect mapped block 1811939328 (level 0)
[  413.023158][T12486] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2912: invalid indirect mapped block 2185560079 (level 1)
[  413.158284][T12486] EXT4-fs (loop2): 1 truncate cleaned up
[  413.219311][T12486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  413.378502][T12504] loop3: detected capacity change from 0 to 512
[  413.433638][T12506] dccp_invalid_packet: P.Data Offset(0) too small
[  413.498435][T12504] EXT4-fs (loop3): Invalid log cluster size: 2682881
[  413.702464][T12508] loop0: detected capacity change from 0 to 2048
[  413.805192][ T5949] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  413.957054][T12508] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  415.436533][ T6016] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  415.444730][    T8] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[  415.475190][T12524] loop4: detected capacity change from 0 to 4096
[  415.572218][T12524] NILFS (loop4): invalid segment: Checksum error in segment payload
[  415.646810][T12524] NILFS (loop4): trying rollback from an earlier position
[  415.692265][    T8] usb 2-1: unable to get BOS descriptor or descriptor too short
[  415.700373][ T6016] usb 3-1: Using ep0 maxpacket: 32
[  415.712271][T12524] NILFS (loop4): invalid segment: Inconsistency found
[  415.731368][    T8] usb 2-1: not running at top speed; connect to a high speed hub
[  415.757628][ T6016] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  415.793957][T12524] NILFS (loop4): error -22 while searching super root
[  415.807342][    T8] usb 2-1: config 1 has an invalid interface descriptor of length 5, skipping
[  415.843794][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  415.843950][ T6016] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8
[  415.864456][    T8] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 19
[  415.874051][    T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4
[  415.946412][T12534] loop3: detected capacity change from 0 to 512
[  415.980405][ T6016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.988797][ T6113] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  415.996535][ T5834] usb 6-1: new low-speed USB device number 77 using dummy_hcd
[  416.033605][    T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  416.062977][ T6016] usb 3-1: Product: syz
[  416.082608][T12534] EXT4-fs (loop3): orphan cleanup on readonly fs
[  416.113879][ T6016] usb 3-1: Manufacturer: syz
[  416.118535][ T6016] usb 3-1: SerialNumber: syz
[  416.136456][T12534] __quota_error: 2 callbacks suppressed
[  416.136478][T12534] Quota error (device loop3): v2_read_file_info: Block with free entry 2 out of range (1, 0).
[  416.163872][    T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  416.196624][ T6016] usb 3-1: config 0 descriptor??
[  416.202877][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.212333][ T6113] usb 1-1: Using ep0 maxpacket: 32
[  416.219976][ T5834] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  416.251936][ T6016] empeg 3-1:0.0: empeg converter detected
[  416.263700][ T6113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9
[  416.275150][ T5834] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  416.284859][    T8] usb 2-1: Product: syz
[  416.298780][T12534] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  416.344724][    T8] usb 2-1: Manufacturer: syz
[  416.353340][ T6016] usb 3-1: active config #0 != 1 ??
[  416.358828][ T6113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024
[  416.370132][ T5834] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  416.388709][    T8] usb 2-1: SerialNumber: syz
[  416.419967][ T5834] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  416.443967][T12534] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  416.488132][ T6113] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  416.512082][    T9] usb 3-1: USB disconnect, device number 75
[  416.559337][T12534] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.2934: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  416.584861][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  416.612458][ T6113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.661801][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  416.680022][ T6113] usb 1-1: Product: syz
[  416.686154][    T8] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  416.710691][ T6113] usb 1-1: Manufacturer: syz
[  416.718625][T12534] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2934: couldn't read orphan inode 13 (err -117)
[  416.749705][ T6113] usb 1-1: SerialNumber: syz
[  416.757255][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  416.805055][ T6113] usb 1-1: config 0 descriptor??
[  416.848085][T12534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0b00-0000-000000000000 ro without journal. Quota mode: writeback.
[  416.861904][    T8] usb 2-1: USB disconnect, device number 81
[  416.883226][ T5834] usb 6-1: language id specifier not provided by device, defaulting to English
[  416.926897][ T6113] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  417.044737][ T4846] usb 1-1: Failed to submit usb control message: -71
[  417.068549][ T5834] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  417.122523][ T6113] usb 1-1: USB disconnect, device number 72
[  417.131609][ T4846] usb 1-1: unable to send the bmi data to the device: -71
[  417.160192][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.220965][ T4846] usb 1-1: unable to get target info from device
[  417.234660][ T5834] usb 6-1: Manufacturer: 뤖
[  417.273910][ T4846] usb 1-1: could not get target info (-71)
[  417.300381][ T5834] usb 6-1: config 0 descriptor??
[  417.311041][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  417.369747][ T4846] usb 1-1: could not probe fw (-71)
[  417.400010][ T5834] hub 6-1:0.0: bad descriptor, ignoring hub
[  417.429390][ T5936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0b00-0000-000000000000.
[  417.446755][ T5834] hub 6-1:0.0: probe with driver hub failed with error -5
[  417.557801][ T5834] input: 뤖 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input40
[  417.881953][ T5834] usb 6-1: USB disconnect, device number 77
[  418.611625][    T8] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  418.870278][ T5834] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  418.917643][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  419.007391][    T8] usb 1-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19
[  419.065038][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.141795][    T8] usb 1-1: Product: syz
[  419.178400][ T5834] usb 4-1: Using ep0 maxpacket: 16
[  419.198911][    T8] usb 1-1: Manufacturer: syz
[  419.220771][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short
[  419.230120][    T8] usb 1-1: SerialNumber: syz
[  419.264956][ T5834] usb 4-1: config 156 has an invalid interface number: 243 but max is 0
[  419.285678][    T8] usb 1-1: config 0 descriptor??
[  419.353418][ T5834] usb 4-1: config 156 has no interface number 0
[  419.364408][    T8] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -32
[  419.400780][ T5834] usb 4-1: config 156 interface 243 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  419.494162][ T5834] usb 4-1: config 156 interface 243 has no altsetting 0
[  419.592210][ T5834] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=80.a7
[  419.620276][    T8] usb 1-1: USB disconnect, device number 73
[  419.645324][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.710230][ T5834] usb 4-1: Product: syz
[  419.731878][ T5834] usb 4-1: Manufacturer: syz
[  419.758107][ T5834] usb 4-1: SerialNumber: syz
[  420.030576][ T5834] usb 4-1: selecting invalid altsetting 0
[  420.169752][ T5834] usb 4-1: USB disconnect, device number 67
[  420.549734][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:156.243/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  421.087462][T12583] loop5: detected capacity change from 0 to 2048
[  421.251198][T12591] loop3: detected capacity change from 0 to 512
[  421.300888][T12591] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  421.476687][T12591] EXT4-fs (loop3): invalid journal inode
[  421.530391][T12591] EXT4-fs (loop3): can't get journal size
[  421.606344][T12591] EXT4-fs (loop3): orphan cleanup on readonly fs
[  421.722888][T12591] EXT4-fs (loop3): 1 truncate cleaned up
[  421.769034][T12591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  421.997005][T12600] loop5: detected capacity change from 0 to 512
[  422.171676][T12600] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.2964: iget: bad extended attribute block 1
[  422.240951][T12605] dccp_invalid_packet: P.Data Offset(172) too large
[  422.288197][ T5936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.333277][T12600] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2964: couldn't read orphan inode 15 (err -117)
[  422.485840][T12600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.953251][ T5937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.722353][ T5834] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  423.743126][    T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  423.869924][ T6113] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  423.971236][ T5834] usb 2-1: Using ep0 maxpacket: 32
[  424.000385][    T9] usb 4-1: Using ep0 maxpacket: 16
[  424.006408][ T5834] usb 2-1: config 1 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  424.063176][    T9] usb 4-1: config 3 has an invalid interface number: 182 but max is 1
[  424.082102][ T5834] usb 2-1: config 1 interface 0 has no altsetting 0
[  424.091550][    T9] usb 4-1: config 3 has an invalid interface number: 191 but max is 1
[  424.117394][ T6113] usb 3-1: Using ep0 maxpacket: 8
[  424.135342][ T5834] usb 2-1: language id specifier not provided by device, defaulting to English
[  424.166810][ T6113] usb 3-1: New USB device found, idVendor=c583, idProduct=a95c, bcdDevice=55.2f
[  424.176250][    T9] usb 4-1: config 3 has no interface number 0
[  424.211908][    T9] usb 4-1: config 3 has no interface number 1
[  424.221644][ T6113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.234958][ T5834] usb 2-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.40
[  424.277745][    T9] usb 4-1: config 3 interface 182 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  424.302608][ T6113] usb 3-1: Product: syz
[  424.306859][ T6113] usb 3-1: Manufacturer: syz
[  424.314226][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.342002][    T9] usb 4-1: config 3 interface 182 altsetting 7 endpoint 0xF has invalid maxpacket 104, setting to 64
[  424.361370][ T5834] usb 2-1: Product: syz
[  424.365820][ T6113] usb 3-1: SerialNumber: syz
[  424.393930][ T5834] usb 2-1: Manufacturer: 䤷ⓖ밀뿑囮닟Ḻₙᗧ阙䙿邫늖첼ꀀ맂剖嶌퉕᧽嚂金묨긮윓୷⥜ᡧꇺギ稨㤟켠ᅻ䬎莠Ϊ쇿佁㑻黹嵛⭷宪驲삹乴펒戤塕ꆓ鏐兩㈰姇璿鏢ᄝ亞㵬侬弟鲗潜廥粽흧ⳤ﹛尾㕝
[  424.440241][ T6113] usb 3-1: config 0 descriptor??
[  424.456299][    T9] usb 4-1: config 3 interface 191 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  424.491031][ T6113] cdc_eem 3-1:0.0: probe with driver cdc_eem failed with error -22
[  424.523612][    T9] usb 4-1: config 3 interface 182 has no altsetting 0
[  424.577886][    T9] usb 4-1: config 3 interface 191 has no altsetting 0
[  424.584834][ T5834] usb 2-1: SerialNumber: syz
[  424.636736][    T9] usb 4-1: string descriptor 0 read error: -22
[  424.672996][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0417, bcdDevice=a0.43
[  424.777365][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.795733][ T6113] usb 3-1: USB disconnect, device number 76
[  424.871912][    T9] hub 4-1:3.182: bad descriptor, ignoring hub
[  424.906667][ T5834] usbhid 2-1:1.0: can't add hid device: -71
[  424.941569][    T9] hub 4-1:3.182: probe with driver hub failed with error -5
[  424.952725][ T5834] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  425.009986][    T9] hub 4-1:3.191: bad descriptor, ignoring hub
[  425.016485][ T5834] usb 2-1: USB disconnect, device number 82
[  425.083867][    T9] hub 4-1:3.191: probe with driver hub failed with error -5
[  425.211456][    T9] usb 4-1: USB disconnect, device number 68
[  426.012280][    T9] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  426.287429][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  426.373394][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  426.383135][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  426.550480][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  426.693788][    T9] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  426.758695][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.766765][    T9] usb 6-1: Product: syz
[  426.868070][    T9] usb 6-1: Manufacturer: syz
[  426.918607][    T9] usb 6-1: SerialNumber: syz
[  426.963920][    T9] usb 6-1: config 0 descriptor??
[  427.059381][    T9] redrat3 6-1:0.0: Couldn't find all endpoints
[  427.194348][    T9] usb 6-1: USB disconnect, device number 78
[  428.378078][T12648] loop1: detected capacity change from 0 to 32768
[  428.441503][T12648] bcachefs: bch2_parse_one_mount_opt() Invalid mount option invalid compression typecompression: parse error
[  428.489668][    T9] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  428.605886][T12650] loop3: detected capacity change from 0 to 32768
[  428.612816][ T5834] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  428.736259][T12650] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2987 (12650)
[  428.797690][    T9] usb 6-1: New USB device found, idVendor=0870, idProduct=0001, bcdDevice=28.a9
[  428.842262][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.888255][T12650] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  428.917309][ T5834] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=cb.23
[  428.945953][    T9] usb 6-1: config 0 descriptor??
[  428.976890][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.992151][T12650] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  429.056301][T12650] BTRFS info (device loop3): using free-space-tree
[  429.064060][ T5834] usb 3-1: config 0 descriptor??
[  429.120106][ T5834] mdc800 3-1:0.0: probe fails -> wrong Interface
[  429.286626][ T5834] usb 6-1: USB disconnect, device number 79
[  429.392897][    T9] usb 3-1: USB disconnect, device number 77
[  429.674693][ T5936] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  430.614059][T12694] loop3: detected capacity change from 0 to 4096
[  430.767269][T12694] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  430.908138][ T5834] usb 3-1: new low-speed USB device number 78 using dummy_hcd
[  430.953198][T12694] ntfs3(loop3): Failed to load $LogFile (-2).
[  431.046275][T12674] loop0: detected capacity change from 0 to 32768
[  431.208096][ T5834] usb 3-1: string descriptor 0 read error: -22
[  431.219777][T12674] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section
[  431.219777][T12674] clean (size 2912):
[  431.219777][T12674] flags:          0
[  431.219777][T12674] journal_seq:    10
[  431.219777][T12674] usage: type=inodes v=8
[  431.219777][T12674] usage: type=key_version v=0
[  431.219777][T12674] usage: type=reserved v=0
[  431.219777][T12674] usage: type=reserved v=0
[  431.219777][T12674] usage: type=reserved v=0
[  431.219777][T12674] usage: type=reserved v=0
[  431.219777][T12674] data_usage: btree: 1/1 [0]=2816
[  431.219777][T12674] data_usage: journal: 1/1 [0]=0
[  431.219777][T12674] data_usage: user: 1/1 [0]=16
[  431.219777][T12674] dev_usage: dev=0  
[  431.219777][T12674]   free: buckets=83 sectors=0 fragmented=0
[  431.219777][T12674]   sb: buckets=25 sectors=6152 fragmented=248
[  431.219777][T12674]   journal: buckets=8 sectors=2048 fragmented=0
[  431.219777][T12674]   btree: buckets=11 sectors=2816 fragmented=0
[  431.219777][T12674]   user: buckets=1 sectors=16 fragmented=240
[  431.219777][T12674]   cached: buckets=0 sectors=0 fragmented=0
[  431.219777][T12674]   parity: buckets=0 sectors=0 fragmented=0
[  431.219777][T12674]   stripe: buckets=0 sectors=0 fragmented=0
[  431.219777][T12674]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  431.219777][T12674]   need_discard: buckets=0 sectors=0 fragmented=0
[  431.219777][T12674] clock: read=0
[  431.219777][T12674] clock: write=1280
[  431.219777][T12674] btree_root: btree=extents l=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 
[  431.220079][T12674] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  431.468529][ T5834] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  431.527108][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.650266][ T5834] usb 3-1: config 0 descriptor??
[  431.761147][ T5834] usbtest 3-1:0.0: FX2 device
[  431.765899][ T5834] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt)
[  432.184548][    T9] usb 3-1: USB disconnect, device number 78
[  432.607921][ T5834] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  432.808980][ T5834] usb 2-1: Using ep0 maxpacket: 32
[  432.857094][ T5834] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  432.893667][ T5834] usb 2-1: config 0 has no interface number 0
[  433.013555][ T5834] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  433.078257][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.161177][ T5834] usb 2-1: Product: syz
[  433.217766][ T5834] usb 2-1: Manufacturer: syz
[  433.222440][ T5834] usb 2-1: SerialNumber: syz
[  433.386859][ T5834] usb 2-1: config 0 descriptor??
[  433.452059][ T5834] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  433.534928][ T5834] usb 2-1: selecting invalid altsetting 1
[  433.601101][ T5834] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  433.771042][ T5834] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  433.847304][ T5834] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  433.917766][ T5834] usb 2-1: media controller created
[  434.077484][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  434.186346][T12734] loop5: detected capacity change from 0 to 8
[  434.318058][ T5834] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  434.325112][ T5834] zl10353_read_register: readreg error (reg=127, ret==-71)
[  434.492437][ T5834] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  434.507891][T12734] SQUASHFS error: xz decompression failed, data probably corrupt
[  434.579644][T12714] loop3: detected capacity change from 0 to 32768
[  434.587801][T12734] SQUASHFS error: Failed to read block 0x108: -5
[  434.646292][T12734] SQUASHFS error: Unable to read metadata cache entry [106]
[  434.711376][T12734] SQUASHFS error: Unable to read inode 0x11f
[  434.779304][T12714] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry btree: 1/73 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 2 4 5 5 6 8 10 11 108]
[  434.779304][T12714] replicas_v0 (size 24):
[  434.779304][T12714] btree: 73 [11 0 0 0 4 1 0 0 0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0]
[  434.779304][T12714] 
[  435.007729][ T5834] usb 2-1: USB disconnect, device number 83
[  435.342970][T12714] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  436.233462][T12757] loop1: detected capacity change from 0 to 8
[  436.355513][T12757] SQUASHFS error: zlib decompression failed, data probably corrupt
[  436.411499][T12757] SQUASHFS error: Failed to read block 0x9b: -5
[  436.418047][T12757] SQUASHFS error: Unable to read metadata cache entry [99]
[  436.565458][T12757] SQUASHFS error: Unable to read inode 0x127
[  437.380105][T12768] loop3: detected capacity change from 0 to 512
[  437.509224][T12768] EXT4-fs (loop3): orphan cleanup on readonly fs
[  437.581538][T12768] Quota error (device loop3): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  437.667282][T12768] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  437.709199][T12745] loop0: detected capacity change from 0 to 32768
[  437.800374][T12745] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #71: OCFS2_VALID_FL not set
[  437.827198][T12768] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  437.903974][T12768] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3038: bg 0: block 248: padding at end of block bitmap is not set
[  437.950938][T12745] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  438.027954][T12768] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  438.049377][T12745] OCFS2: File system is now read-only.
[  438.087476][T12745] (syz.0.3026,12745,0):ocfs2_read_locked_inode:521 ERROR: status = -30
[  438.115191][T12768] EXT4-fs (loop3): 1 orphan inode deleted
[  438.177660][T12768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  438.192213][T12745] (syz.0.3026,12745,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  438.257866][T12745] (syz.0.3026,12745,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 69
[  438.310736][T12752] loop2: detected capacity change from 0 to 32768
[  438.342408][T12745] (syz.0.3026,12745,0):ocfs2_init_global_system_inodes:461 ERROR: status = -30
[  438.416434][T12745] (syz.0.3026,12745,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 4, possibly corrupt fs?
[  438.416489][T12745] (syz.0.3026,12745,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30
[  438.453377][T12752] bcachefs (/dev/loop2): error validating superblock: Bad number of member devices 0 (max 64)
[  438.521727][T12752] bcachefs: bch2_fs_get_tree() error: invalid_sb_too_many_members
[  438.563144][T12745] (syz.0.3026,12745,0):ocfs2_initialize_super:2250 ERROR: status = -30
[  438.583393][ T5936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.645891][ T6113] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  438.667381][T12745] (syz.0.3026,12745,0):ocfs2_fill_super:1178 ERROR: status = -30
[  438.913241][ T6113] usb 6-1: Using ep0 maxpacket: 16
[  438.952709][ T6113] usb 6-1: unable to get BOS descriptor or descriptor too short
[  439.011182][ T6113] usb 6-1: config 28 has an invalid interface number: 61 but max is 0
[  439.085674][ T6113] usb 6-1: config 28 has no interface number 0
[  439.127002][ T6113] usb 6-1: config 28 interface 61 has no altsetting 0
[  439.252932][ T6113] usb 6-1: New USB device found, idVendor=03f0, idProduct=a31d, bcdDevice= d.3f
[  439.303402][ T6113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.402884][ T6113] usb 6-1: Product: syz
[  439.442247][ T6113] usb 6-1: Manufacturer: syz
[  439.446903][ T6113] usb 6-1: SerialNumber: syz
[  439.821868][ T6113] hub 6-1:28.61: bad descriptor, ignoring hub
[  439.828052][ T6113] hub 6-1:28.61: probe with driver hub failed with error -5
[  439.972945][ T6113] option 6-1:28.61: GSM modem (1-port) converter detected
[  440.117761][ T6113] usb 6-1: USB disconnect, device number 80
[  440.173956][ T6113] option 6-1:28.61: device disconnected
[  440.623793][    T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  440.703555][T12792] loop3: detected capacity change from 0 to 4096
[  440.854453][T12792] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  440.938571][    T9] usb 1-1: Using ep0 maxpacket: 32
[  441.004870][    T9] usb 1-1: config 1 has an invalid interface number: 236 but max is 0
[  441.053383][    T9] usb 1-1: config 1 has no interface number 0
[  441.119939][    T9] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024
[  441.214605][T12792] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  441.232474][    T9] usb 1-1: config 1 interface 236 has no altsetting 0
[  441.370517][    T9] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[  441.391505][T12802] loop5: detected capacity change from 0 to 4096
[  441.457353][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.503169][T12802] ntfs3(loop5): Primary boot: invalid index size -57.
[  441.538270][    T9] usb 1-1: Product: syz
[  441.542518][    T9] usb 1-1: Manufacturer: syz
[  441.579493][T12802] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[  441.600984][    T9] usb 1-1: SerialNumber: syz
[  441.661006][T12796] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  441.741489][    T9] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected
[  442.158577][    T9] usb 1-1: USB disconnect, device number 74
[  442.972948][T12827] loop4: detected capacity change from 0 to 512
[  443.089417][T12827] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  443.210419][T12827] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  443.317830][T12827] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3067: Corrupt directory, running e2fsck is recommended
[  443.331175][    T9] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  443.417494][T12827] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  443.493989][T12827] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3067: corrupted in-inode xattr: invalid ea_ino
[  443.584936][    T9] usb 6-1: Using ep0 maxpacket: 32
[  443.648219][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  443.671234][T12827] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.3067: couldn't read orphan inode 15 (err -117)
[  443.728893][    T9] usb 6-1: config 9 has an invalid interface number: 102 but max is 0
[  443.796608][    T9] usb 6-1: config 9 has no interface number 0
[  443.819155][T12827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.854835][    T9] usb 6-1: config 9 interface 102 has no altsetting 0
[  443.948385][    T9] usb 6-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=ce.38
[  444.010693][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.106152][    T9] usb 6-1: Product: syz
[  444.165502][    T9] usb 6-1: Manufacturer: syz
[  444.170176][    T9] usb 6-1: SerialNumber: syz
[  444.395687][ T5943] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.532299][    T9] usb 6-1: USB disconnect, device number 81
[  444.976420][T12851] loop4: detected capacity change from 0 to 8
[  445.253280][T12851] SQUASHFS error: Failed to read block 0x2fc: -5
[  445.327749][T12851] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  445.413017][T12851] SQUASHFS error: Unable to read inode 0x11f
[  445.979558][ T5834] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  446.239187][ T5834] usb 1-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  446.302705][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.388095][ T5834] usb 1-1: config 0 descriptor??
[  446.462373][ T5834] usb-storage 1-1:0.0: USB Mass Storage device detected
[  446.791423][ T5834] usb 1-1: USB disconnect, device number 75
[  446.982837][T12845] loop1: detected capacity change from 0 to 32768
[  447.140036][T12845] (syz.1.3075,12845,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0xa608aebb. Applying ECC.
[  447.251211][T12845] (syz.1.3075,12845,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb3775c19, computed 0xa608aebb
[  447.322151][T12849] loop3: detected capacity change from 0 to 32768
[  447.396565][T12845] (syz.1.3075,12845,0):ocfs2_validate_inode_block:1379 ERROR: Checksum failed for dinode 18
[  447.483404][T12845] (syz.1.3075,12845,0):ocfs2_read_locked_inode:521 ERROR: status = -5
[  447.498600][T12849] jfs_mount: diMount failed w/rc = -5
[  447.542072][T12849] Mount JFS Failure: -5
[  447.570123][T12845] (syz.1.3075,12845,0):ocfs2_init_global_system_inodes:448 ERROR: status = -5
[  447.647308][ T5834] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  447.676871][T12845] (syz.1.3075,12845,0):ocfs2_init_global_system_inodes:472 ERROR: status = -5
[  447.751481][T12845] (syz.1.3075,12845,0):ocfs2_initialize_super:2250 ERROR: status = -5
[  447.853025][T12845] (syz.1.3075,12845,0):ocfs2_fill_super:1178 ERROR: status = -5
[  447.937228][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short
[  447.991728][ T5834] usb 3-1: config 129 has an invalid interface number: 135 but max is 0
[  448.014794][   T25] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  448.024251][   T25] ath9k_htc: Failed to initialize the device
[  448.054819][ T5834] usb 3-1: config 129 has an invalid interface number: 5 but max is 0
[  448.157469][ T5834] usb 3-1: config 129 descriptor has 1 excess byte, ignoring
[  448.217097][ T5834] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  448.320737][ T5834] usb 3-1: config 129 has no interface number 0
[  448.382185][ T5834] usb 3-1: config 129 has no interface number 1
[  448.452725][ T5834] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  448.569673][ T5834] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  448.729425][ T5834] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  448.865963][ T5834] usb 3-1: config 129 interface 135 has no altsetting 0
[  448.948856][ T5834] usb 3-1: config 129 interface 5 has no altsetting 0
[  448.993240][T12859] loop5: detected capacity change from 0 to 32768
[  449.054456][ T5834] usb 3-1: string descriptor 0 read error: -22
[  449.065762][ T5834] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  449.153595][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.208146][T12859] jfs_mount: Mount Failure: File System Dirty.
[  449.240455][T12859] Mount JFS Failure: -22
[  449.288665][ T5834] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  449.400827][ T5834] usb 3-1: MIDIStreaming interface descriptor not found
[  449.700119][ T5834] usb 3-1: USB disconnect, device number 79
[  449.795477][T12888] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  450.220687][ T7800] udevd[7800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  450.719931][T12899] loop3: detected capacity change from 0 to 1024
[  450.806687][T12899] hfsplus: wrong filesystem version
[  450.918633][ T5834] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  451.007794][ T6113] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[  451.175981][ T5834] usb 2-1: Using ep0 maxpacket: 16
[  451.213161][ T5834] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10
[  451.264536][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.275104][ T6113] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  451.311529][ T6113] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.363780][ T5834] usb 2-1: Product: syz
[  451.400761][ T5834] usb 2-1: Manufacturer: syz
[  451.405435][ T5834] usb 2-1: SerialNumber: syz
[  451.419330][ T6113] usb 6-1: config 0 has no interface number 0
[  451.450662][ T6113] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  451.501669][ T5834] usb 2-1: config 0 descriptor??
[  451.507583][ T6113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.581419][ T6113] usb 6-1: Product: syz
[  451.599437][ T5834] go7007 2-1:0.0: probe with driver go7007 failed with error -12
[  451.608187][ T6113] usb 6-1: Manufacturer: syz
[  451.612841][ T6113] usb 6-1: SerialNumber: syz
[  451.705582][ T6113] usb 6-1: config 0 descriptor??
[  451.746638][ T6113] ims_pcu 6-1:0.41: Missing CDC union descriptor
[  451.814589][ T6113] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22
[  451.881135][ T5834] usb 2-1: USB disconnect, device number 84
[  452.029034][ T6113] usb 6-1: USB disconnect, device number 82
[  452.803443][T12903] loop2: detected capacity change from 0 to 32768
[  452.947513][T12903] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3102 (12903)
[  453.091002][T12903] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  453.140078][T12905] loop0: detected capacity change from 0 to 32768
[  453.206962][T12903] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  453.251752][T12905] XFS (loop0): Invalid device [./file0/file0], error=-2
[  453.313432][T12903] BTRFS info (device loop2): disk space caching is enabled
[  453.320709][T12903] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  453.559838][T12917] loop4: detected capacity change from 0 to 512
[  453.608314][T12917] EXT4-fs: Ignoring removed nobh option
[  453.815781][T12917] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  453.976452][T12917] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3108: attempt to clear invalid blocks 2 len 1
[  454.147491][T12917] EXT4-fs (loop4): Remounting filesystem read-only
[  454.203127][T12903] BTRFS error (device loop2): open_ctree failed
[  454.239153][T12909] loop3: detected capacity change from 0 to 32768
[  454.248440][T12917] EXT4-fs (loop4): 1 truncate cleaned up
[  454.322174][T12917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.431220][T12909] JBD2: Ignoring recovery information on journal
[  454.656724][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  454.676144][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  454.795083][T12909] (syz.3.3105,12909,0):ocfs2_clear_journal_error:1125 ERROR: File system error -33024 recorded in journal 0.
[  454.944779][T12909] (syz.3.3105,12909,0):ocfs2_clear_journal_error:1127 ERROR: File system on device loop3 needs checking.
[  455.050804][T12945] loop1: detected capacity change from 0 to 128
[  455.102722][T12909] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  455.147626][T12945] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  455.302067][T12949] 9pnet_fd: p9_fd_create_tcp (12949): problem connecting socket to 127.0.0.1
[  455.516667][ T5943] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.693018][ T5936] ocfs2: Unmounting device (7,3) on (node local)
[  456.214323][T12957] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  456.338546][T12957] cramfs: wrong magic
[  457.114509][T12959] loop2: detected capacity change from 0 to 4096
[  457.196274][T12959] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  457.331366][T12959] ntfs3(loop2): Failed to load $MFT (-2).
[  457.666655][T12941] loop5: detected capacity change from 0 to 32768
[  458.405581][    T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  458.618074][T12973] loop0: detected capacity change from 0 to 4096
[  458.694067][T12973] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  458.765535][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  458.806133][T12954] loop1: detected capacity change from 0 to 32768
[  458.832029][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  458.877992][T12973] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  458.936299][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  458.969078][T12973] ntfs3(loop0): Failed to load $UpCase (-22).
[  459.029010][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  459.191502][    T9] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  459.287141][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.352290][    T9] usb 3-1: Product: syz
[  459.409313][    T9] usb 3-1: Manufacturer: syz
[  459.414079][    T9] usb 3-1: SerialNumber: syz
[  459.443792][T12954] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  459.506008][    T9] usb 3-1: config 0 descriptor??
[  459.596658][    T9] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  459.611579][T12954] bcachefs (loop1): initializing new filesystem
[  459.662311][T12954] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  459.710814][    T9] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card
[  459.770054][T12954] bcachefs (loop1): going read-write
[  459.782172][    T9] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90
[  459.822365][T12954] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  459.895427][    T9] usb 3-1: USB disconnect, device number 80
[  459.909385][T12954] bcachefs (loop1): going read-only
[  459.965697][T12954] bcachefs (loop1): finished waiting for writes to stop
[  460.027085][ T5834] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  460.035083][T12954] bcachefs (loop1): flushing journal and stopping allocators, journal seq 0
[  460.113817][T12954] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 0
[  460.258020][T12954] bcachefs (loop1): shutdown complete, journal seq 1
[  460.275173][ T5834] usb 6-1: Using ep0 maxpacket: 32
[  460.303192][T12954] bcachefs (loop1): done going read-only, filesystem not clean
[  460.347884][ T5834] usb 6-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[  460.370175][T12954] bcachefs (loop1): bch2_fs_initialize(): error EINTR
[  460.388647][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.419127][T12954] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR
[  460.478791][ T5834] usb 6-1: config 0 descriptor??
[  460.499817][T12954] bcachefs (loop1): shutting down
[  460.535547][ T5834] usb 6-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[  460.611263][ T5834] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  460.669531][T12954] bcachefs (loop1): shutdown complete
[  460.707649][ T5834] dvbdev: DVB: registering new adapter (HCW 126xxx)
[  460.768012][ T5834] usb 6-1: media controller created
[  460.813482][    T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  460.920448][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  460.976647][T12969] loop3: detected capacity change from 0 to 40427
[  461.039792][T12969] F2FS-fs (loop3): Unable to read 2th superblock
[  461.046803][ T5834] usb 6-1: selecting invalid altsetting 1
[  461.069051][    T9] usb 1-1: Using ep0 maxpacket: 16
[  461.088345][ T5834] set interface failed
[  461.090448][ T5834] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  461.138916][T12969] F2FS-fs (loop3): invalid crc value
[  461.153818][    T9] usb 1-1: config 0 has an invalid interface number: 61 but max is 0
[  461.181869][T12969] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4)
[  461.208780][ T5834] error writing reg: 0xff, val: 0x00
[  461.223117][    T9] usb 1-1: config 0 has no interface number 0
[  461.253703][T12992] loop2: detected capacity change from 0 to 4096
[  461.305593][    T9] usb 1-1: config 0 interface 61 has no altsetting 0
[  461.349173][    T9] usb 1-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=d6.11
[  461.399248][T12992] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  461.412463][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.432745][ T5834] dvb_usb_mxl111sf 6-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  461.486497][    T9] usb 1-1: Product: syz
[  461.500161][T12992] ntfs3(loop2): Failed to load $MFT.
[  461.550505][    T9] usb 1-1: Manufacturer: syz
[  461.566468][ T5834] usb 6-1: USB disconnect, device number 83
[  461.616922][    T9] usb 1-1: SerialNumber: syz
[  461.674264][    T9] usb 1-1: config 0 descriptor??
[  461.922450][    T9] usb 1-1: USB disconnect, device number 76
[  462.245731][T12997] loop4: detected capacity change from 0 to 2048
[  462.410829][T12997] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  463.465271][T13012] loop3: detected capacity change from 0 to 512
[  463.740832][T13012] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3136: attempt to clear invalid blocks 1 len 1
[  463.934463][T13012] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3136: bg 0: block 343: padding at end of block bitmap is not set
[  464.028478][T13012] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  464.103459][T13012] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3136: invalid indirect mapped block 1819239214 (level 0)
[  464.256587][T13012] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3136: invalid indirect mapped block 1819239214 (level 1)
[  464.389858][T13012] EXT4-fs (loop3): 1 truncate cleaned up
[  464.396514][T13012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.508941][T13027] loop2: detected capacity change from 0 to 64
[  464.641164][T13027] hfs: request for non-existent node 293 in B*Tree
[  464.720861][T13027] hfs: request for non-existent node 293 in B*Tree
[  464.741674][T13027] hfs: get root inode failed
[  464.929282][ T5936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.351161][    T9] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[  465.598300][    T9] usb 6-1: Using ep0 maxpacket: 16
[  465.676125][    T9] usb 6-1: config 222 has an invalid interface number: 31 but max is 0
[  465.749321][    T9] usb 6-1: config 222 has no interface number 0
[  465.810347][    T9] usb 6-1: config 222 interface 31 altsetting 11 bulk endpoint 0xE has invalid maxpacket 16
[  465.894708][    T9] usb 6-1: config 222 interface 31 has no altsetting 0
[  465.945210][    T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd
[  465.993828][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.048863][T13045] loop2: detected capacity change from 0 to 1024
[  466.056007][    T9] usb 6-1: Product: syz
[  466.076526][    T9] usb 6-1: Manufacturer: syz
[  466.126903][    T9] usb 6-1: SerialNumber: syz
[  466.134696][T13016] loop0: detected capacity change from 0 to 32768
[  466.152245][T13045] hfsplus: failed to load extents file
[  466.170792][T13033] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  466.274897][T13016] syz.0.3143: attempt to access beyond end of device
[  466.274897][T13016] loop5: rw=0, sector=8, nr_sectors = 8 limit=0
[  466.367068][T13016] lbmIODone: I/O error in JFS log
[  466.372848][T13016] *** Log Format Error ! ***
[  466.456756][T13016] lmLogInit: exit(-22)
[  466.501848][    T9] ldusb 6-1:222.31: Interrupt out endpoint not found (using control endpoint instead)
[  466.536954][T13016] lmLogOpen: exit(-22)
[  466.620432][    T9] ldusb 6-1:222.31: LD USB Device #0 now attached to major 180 minor 0
[  466.730157][    T9] usb 6-1: USB disconnect, device number 84
[  466.792304][    T9] ldusb 6-1:222.31: LD USB Device #0 now disconnected
[  467.444635][T13049] loop2: detected capacity change from 0 to 8192
[  467.577663][T13058] loop5: detected capacity change from 0 to 64
[  468.280162][    T8] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  468.572665][    T8] usb 4-1: Using ep0 maxpacket: 8
[  468.642252][    T8] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17
[  468.689763][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.752373][    T8] usb 4-1: Product: syz
[  468.772007][    T8] usb 4-1: Manufacturer: syz
[  468.794178][    T8] usb 4-1: SerialNumber: syz
[  468.816885][    T8] usb 4-1: config 0 descriptor??
[  468.877134][    T8] hub 4-1:0.0: bad descriptor, ignoring hub
[  468.909627][    T8] hub 4-1:0.0: probe with driver hub failed with error -5
[  468.972091][    T8] gspca_main: jeilinj-2.14.0 probing 0979:0270
[  468.978863][ T5834] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  469.132470][T13077] tmpfs: Bad value for 'huge'
[  469.174502][    T8] usb 4-1: USB disconnect, device number 69
[  469.228963][ T5834] usb 3-1: Using ep0 maxpacket: 8
[  469.296722][ T5834] usb 3-1: config 2 has an invalid interface number: 169 but max is 0
[  469.393123][ T5834] usb 3-1: config 2 has no interface number 0
[  469.427753][ T5834] usb 3-1: config 2 interface 169 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  469.515857][ T5834] usb 3-1: config 2 interface 169 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  469.597702][ T6113] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  469.605624][ T5834] usb 3-1: config 2 interface 169 altsetting 0 endpoint 0x8B has an invalid bInterval 129, changing to 11
[  469.665126][ T5834] usb 3-1: config 2 interface 169 altsetting 0 endpoint 0x8B has invalid maxpacket 58232, setting to 1024
[  469.731618][ T5834] usb 3-1: config 2 interface 169 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  469.798196][ T5834] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92
[  469.844045][ T6113] usb 1-1: Using ep0 maxpacket: 32
[  469.869066][ T6113] usb 1-1: unable to get BOS descriptor or descriptor too short
[  469.895323][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.946219][ T6113] usb 1-1: config 7 has an invalid interface number: 187 but max is 0
[  469.976205][ T5834] cypress_m8 3-1:2.169: DeLorme Earthmate USB converter detected
[  470.016972][ T6113] usb 1-1: config 7 has no interface number 0
[  470.063268][ T6113] usb 1-1: config 7 interface 187 has no altsetting 0
[  470.149649][ T6113] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  470.204746][ T6113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.218193][ T5834] usb 3-1: DeLorme Earthmate USB converter now attached to ttyUSB0
[  470.273270][ T6113] usb 1-1: Product: syz
[  470.307378][ T5834] usb 3-1: USB disconnect, device number 81
[  470.332784][ T6113] usb 1-1: Manufacturer: syz
[  470.381172][ T6113] usb 1-1: SerialNumber: syz
[  470.405365][ T5834] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0
[  470.472267][ T5834] cypress_m8 3-1:2.169: device disconnected
[  470.643985][T12954] bcachefs: bch2_fs_get_tree() error: EINTR
[  470.693521][ T6113] usb 1-1: Cannot retrieve CPort count: -71
[  470.752227][ T6113] usb 1-1: Cannot retrieve CPort count: -71
[  470.796501][ T6113] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -71
[  470.905622][ T6113] usb 1-1: USB disconnect, device number 77
[  472.152306][ T6113] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[  472.250294][T13100] loop2: detected capacity change from 0 to 4096
[  472.322594][T13100] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  472.394160][T13100] ntfs3(loop2): Failed to load $MFTMirr (-22).
[  472.411882][ T6113] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  472.461379][ T6113] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  472.546761][ T6113] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.633404][ T6113] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  472.716136][ T6113] usb 1-1: config 0 has no interface number 0
[  472.809827][ T6113] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  472.876614][ T6113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.926801][ T6113] usb 1-1: Product: syz
[  472.970991][ T6113] usb 1-1: Manufacturer: syz
[  473.020479][ T6113] usb 1-1: SerialNumber: syz
[  473.101943][ T6113] usb 1-1: config 0 descriptor??
[  473.431772][ T6113] usb 1-1: USB disconnect, device number 78
[  473.494472][T13088] loop5: detected capacity change from 0 to 40427
[  473.562641][T13088] F2FS-fs (loop5): build fault injection attr: rate: 6, type: 0x1fffff
[  473.653678][T13088] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x5
[  473.710370][T13088] F2FS-fs (loop5): Image doesn't support compression
[  473.772674][T13088] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x286/0xba0
[  473.840032][T13088] F2FS-fs (loop5): invalid crc value
[  473.860434][T13088] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4)
[  474.224364][T13102] loop1: detected capacity change from 0 to 32768
[  474.399724][T13102] JBD2: Invalid start block of journal: 0
[  474.449444][T13102] (syz.1.3180,13102,0):ocfs2_journal_init:951 ERROR: Linux journal layer error
[  474.499056][T13115] loop0: detected capacity change from 0 to 64
[  474.505770][T13104] loop3: detected capacity change from 0 to 32768
[  474.532051][T13102] (syz.1.3180,13102,0):ocfs2_check_volume:2399 ERROR: Could not initialize journal!
[  474.598938][T13104] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3186 (13104)
[  474.635322][T13115] MINIX-fs: bad superblock
[  474.642117][T13102] (syz.1.3180,13102,0):ocfs2_check_volume:2484 ERROR: status = -22
[  474.711643][T13102] (syz.1.3180,13102,0):ocfs2_mount_volume:1819 ERROR: status = -22
[  474.760645][T13104] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  474.818741][T13102] (syz.1.3180,13102,0):ocfs2_fill_super:1178 ERROR: status = -22
[  474.876730][T13104] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  474.885584][T13104] BTRFS info (device loop3): using free-space-tree
[  475.518245][ T6113] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  475.801330][ T6113] usb 1-1: Using ep0 maxpacket: 32
[  475.858961][ T6113] usb 1-1: unable to get BOS descriptor or descriptor too short
[  475.896209][ T5936] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  475.942850][ T6113] usb 1-1: config 6 has an invalid interface number: 196 but max is 0
[  475.993829][ T6113] usb 1-1: config 6 has no interface number 0
[  476.059929][ T6113] usb 1-1: config 6 interface 196 has no altsetting 0
[  476.189132][ T6113] usb 1-1: Dual-Role OTG device on HNP port
[  476.234345][ T6113] usb 1-1: New USB device found, idVendor=19d2, idProduct=1255, bcdDevice= c.4d
[  476.330229][ T6113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.426421][ T6113] usb 1-1: Product: syz
[  476.446370][ T6113] usb 1-1: Manufacturer: syz
[  476.481741][ T6113] usb 1-1: SerialNumber: syz
[  476.612921][T13146] loop5: detected capacity change from 0 to 512
[  476.830411][T13146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  476.869667][ T6113] option 1-1:6.196: GSM modem (1-port) converter detected
[  477.015884][ T6113] usb 1-1: USB disconnect, device number 79
[  477.135659][ T6113] option 1-1:6.196: device disconnected
[  477.481812][ T5937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.188586][T13156] loop5: detected capacity change from 0 to 2048
[  478.500995][T13156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.626663][T13137] loop2: detected capacity change from 0 to 32768
[  478.724968][T13137] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3194 (13137)
[  478.804915][ T5937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.300273][T13144] loop1: detected capacity change from 0 to 32768
[  479.465137][T13144] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3196 (13144)
[  479.654959][T13144] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  479.794578][T13144] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  479.856367][T13152] loop3: detected capacity change from 0 to 32768
[  479.880017][T13144] BTRFS info (device loop1): using free-space-tree
[  479.943410][T13144] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  479.954112][T13144] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  479.998105][T13152] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3199 (13152)
[  480.082947][T13144] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  480.083235][T13144] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  480.190920][T13144] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  480.276973][T13144] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  480.321394][T13152] BTRFS info (device loop3): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc
[  480.403798][T13144] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  480.404070][T13144] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  480.483190][T13144] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  480.493900][T13152] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  480.596087][T13144] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  480.596437][T13144] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  480.701933][T13144] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  480.712480][T13152] BTRFS info (device loop3): using free-space-tree
[  480.856290][T13144] BTRFS error (device loop1): open_ctree failed
[  480.892005][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  480.892312][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  481.002488][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  481.130614][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  481.155997][T13158] loop0: detected capacity change from 0 to 32768
[  481.324082][T13158] XFS (loop0): sunit and swidth options incompatible with the noalign option
[  481.355381][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  481.355705][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  481.483578][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  481.579652][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  481.697289][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  481.826473][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  481.944926][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  482.152707][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  482.349867][T13152] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  482.475873][T13152] BTRFS error (device loop3): open_ctree failed
[  482.590459][T13165] loop2: detected capacity change from 0 to 32768
[  484.380493][ T6113] usb 6-1: new full-speed USB device number 85 using dummy_hcd
[  484.719370][ T6113] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  484.750086][ T6113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.807477][ T6113] usb 6-1: Product: syz
[  484.845827][ T6113] usb 6-1: Manufacturer: syz
[  484.878500][ T6113] usb 6-1: SerialNumber: syz
[  484.932179][ T6113] usb 6-1: config 0 descriptor??
[  485.027973][ T6113] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  485.139685][ T6113] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  485.290087][ T6113] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  485.425306][ T6113] usb 6-1: USB disconnect, device number 85
[  485.963460][T13211] loop4: detected capacity change from 0 to 1764
[  486.037399][ T6113] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  486.318380][ T6113] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  486.399114][ T6113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  486.493249][ T6113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  486.568477][ T6113] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  486.604292][ T5834] usb 6-1: new low-speed USB device number 86 using dummy_hcd
[  486.685618][T13215] loop0: detected capacity change from 0 to 2048
[  486.746993][ T6113] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  486.796748][ T6113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.869480][ T5834] usb 6-1: config 7 has an invalid interface number: 252 but max is 0
[  486.879212][T13215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  486.924619][ T6113] usb 2-1: Product: syz
[  486.939991][ T5834] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  486.950436][ T6113] usb 2-1: Manufacturer: syz
[  486.987873][ T6113] usb 2-1: SerialNumber: syz
[  487.014853][ T5834] usb 6-1: config 7 has no interface number 0
[  487.044151][ T6113] usb 2-1: config 0 descriptor??
[  487.082871][ T5834] usb 6-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  487.130622][ T6113] adutux 2-1:0.0: interrupt endpoints not found
[  487.200579][ T5834] usb 6-1: config 7 interface 252 has no altsetting 0
[  487.255183][ T5932] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.288169][ T5834] usb 6-1: string descriptor 0 read error: -22
[  487.323086][ T5834] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  487.396978][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.415439][ T6113] usb 2-1: USB disconnect, device number 85
[  487.772491][ T6113] usb 6-1: USB disconnect, device number 86
[  488.204348][T13225] loop3: detected capacity change from 0 to 256
[  488.231919][T13226] loop2: detected capacity change from 0 to 128
[  488.643918][T13228] loop1: detected capacity change from 0 to 2048
[  489.040256][T13235] loop2: detected capacity change from 0 to 128
[  489.510846][T13220] loop4: detected capacity change from 0 to 32768
[  489.615342][T13220] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v1: too many devices for section size
[  489.615342][T13220] members_v1 (size 40):
[  489.615342][T13220] Device:                        0
[  489.615342][T13220]   Label:                       (none)
[  489.615342][T13220]   UUID:                        09000000-0000-0000-0700-000900000000
[  489.615342][T13220]   Size:                        0
[  489.615342][T13220]   read errors:                 0
[  489.615342][T13220]   write errors:                0
[  489.615342][T13220]   checksum errors:             0
[  489.615342][T13220]   seqread iops:                56
[  489.615342][T13220]   seqwrite iops:               0
[  489.615342][T13220]   randread iops:               0
[  489.615342][T13220]   randwrite iops:              0
[  489.615342][T13220]   Bucket size:                 0
[  489.615342][T13220]   First bucket:                1
[  489.615342][T13220]   Buckets:                     24
[  489.615342][T13220]   Last mount:                  42949673040
[  489.615342][T13220]   Last superblock write:       0
[  489.615342][T13220]   State:                       rw
[  489.615342][T13220]   Data allowed:                (none)
[  489.615342][T13220]   Has data:                    (none)
[  489.615342][T13220]   Btree allocated bitmap blocksize:1
[  489.615342][T13220]   Btree allocated bitmap:      0000000000000000000000000000000000000000000000000000000000000000
[  489.615342][T13220]   Durability:                  1
[  489.615342][T13220]   Discard:        
[  489.615535][T13220] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  490.067129][T13238] loop1: detected capacity change from 0 to 2048
[  490.346394][T13241] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  491.510134][T13236] loop3: detected capacity change from 0 to 32768
[  491.566583][T13233] loop5: detected capacity change from 0 to 32768
[  491.639202][T13236] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3222 (13236)
[  491.727060][T13243] loop1: detected capacity change from 0 to 4096
[  491.779408][T13236] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  491.841884][T13243] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  491.896461][T13236] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  492.005278][T13236] BTRFS info (device loop3): using free-space-tree
[  492.184964][T13236] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  492.185282][T13236] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  492.306100][T13236] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  492.534673][T13236] BTRFS error (device loop3): open_ctree failed
[  493.973920][T13267] loop0: detected capacity change from 0 to 8
[  494.832656][T13271] loop0: detected capacity change from 0 to 512
[  495.219210][T13273] loop2: detected capacity change from 0 to 1024
[  495.477218][T13273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  495.709057][T13275] loop0: detected capacity change from 0 to 128
[  495.759928][T13261] loop1: detected capacity change from 0 to 32768
[  495.824631][T13275] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  495.967439][T13275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  496.385505][T13277] loop2: detected capacity change from 0 to 2048
[  496.677943][T13278] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  497.793063][T13285] loop1: detected capacity change from 0 to 4096
[  497.974406][T13285] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  498.021227][T13288] loop5: detected capacity change from 0 to 256
[  498.039775][T13285] UDF-fs: Scanning with blocksize 512 failed
[  498.131878][T13285] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  499.344463][T13280] loop0: detected capacity change from 0 to 32768
[  499.533257][T13292] loop5: detected capacity change from 0 to 8192
[  499.971471][T13280] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  500.127959][T13280] bcachefs (loop0): recovering from clean shutdown, journal seq 15
[  500.213288][T13280] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.13: inode_has_child_snapshots
[  500.213288][T13280]   running recovery passes: check_allocations,check_inodes
[  500.424480][T13280] bcachefs (loop0): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  500.501728][T13280] bcachefs (loop0): bch2_fs_recovery(): error EINTR
[  500.545488][T13280] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR
[  500.629973][T13280] bcachefs (loop0): shutting down
[  500.752003][T13280] bcachefs (loop0): shutdown complete
[  503.715178][T13308] loop2: detected capacity change from 0 to 32768
[  503.904301][T13308] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  504.222629][T13308] XFS (loop2): Ending clean mount
[  504.590827][ T5949] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  504.632036][T13322] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3251'.
[  505.995182][T13331] loop2: detected capacity change from 0 to 128
[  506.805573][T13335] loop2: detected capacity change from 0 to 64
[  507.650587][T13343] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  508.168635][T13326] loop4: detected capacity change from 0 to 32768
[  508.291564][T13345] loop5: detected capacity change from 0 to 4096
[  508.644213][T13357] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  508.981451][   T29] audit: type=1326 audit(7637089.979:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3785d29 code=0x7ffc0000
[  509.213379][   T29] audit: type=1326 audit(7637090.016:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f88d3785d29 code=0x7ffc0000
[  509.417715][   T29] audit: type=1326 audit(7637090.016:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3785d29 code=0x7ffc0000
[  509.478139][T13364] overlayfs: conflicting options: userxattr,metacopy=on
[  509.571110][T13326] workqueue: Failed to create a rescuer kthread for wq "bcachefs_journal": -EINTR
[  509.571286][T13326] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete
[  509.641974][   T29] audit: type=1326 audit(7637090.016:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.2.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3785d29 code=0x7ffc0000
[  509.696061][T13280] bcachefs: bch2_fs_get_tree() error: EINTR
[  510.888423][T13349] loop1: detected capacity change from 0 to 32768
[  510.968891][T13326] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc
[  510.995701][T13349] (syz.1.3262,13349,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  511.111537][T13349] (syz.1.3262,13349,0):ocfs2_fill_super:1178 ERROR: status = -22
[  511.362717][T13386] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0
[  512.000910][T13393] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  512.091001][T13396] netlink: 'syz.5.3283': attribute type 1 has an invalid length.
[  513.572511][T13420] loop5: detected capacity change from 0 to 1764
[  514.076037][T13430] loop0: detected capacity change from 0 to 1024
[  514.399842][T13435] xt_hashlimit: max too large, truncated to 1048576
[  514.562501][T13435] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  515.716007][    T8] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  515.979257][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  516.056586][    T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  516.066463][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  516.306292][    T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  516.425650][    T8] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  516.473456][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.541129][    T8] usb 1-1: Product: syz
[  516.571358][    T8] usb 1-1: Manufacturer: syz
[  516.576019][    T8] usb 1-1: SerialNumber: syz
[  516.648664][    T8] usb 1-1: config 0 descriptor??
[  516.724682][    T8] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  517.126305][    T8] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22
[  517.238775][    T8] usb 1-1: USB disconnect, device number 80
[  517.421291][T13481] loop3: detected capacity change from 0 to 256
[  518.235213][T13487] loop2: detected capacity change from 0 to 4096
[  518.327204][T13495] loop1: detected capacity change from 0 to 256
[  518.395299][T13487] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  518.429122][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3325'.
[  518.588252][T13495] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  518.988833][T13503] loop5: detected capacity change from 0 to 64
[  519.379439][   T29] audit: type=1800 audit(7637099.698:23): pid=13503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3330" name="memory.events" dev="loop5" ino=21 res=0 errno=0
[  520.335680][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  520.342066][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  521.012492][T13531] loop3: detected capacity change from 0 to 1024
[  521.313096][T13533] loop1: detected capacity change from 0 to 2048
[  521.397739][T13533] EXT4-fs: Ignoring removed mblk_io_submit option
[  521.570081][T13533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  521.594546][   T33] hfsplus: b-tree write err: -5, ino 4
[  521.732338][T13533] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3346: bg 0: block 234: padding at end of block bitmap is not set
[  521.997140][T13533] EXT4-fs (loop1): Remounting filesystem read-only
[  522.090131][T13533] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1605: inode #18: comm syz.1.3346: cleanup dec ref error -28
[  522.200748][T13544] loop3: detected capacity change from 0 to 2048
[  522.426701][T13548] loop0: detected capacity change from 0 to 1764
[  522.502620][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.506270][T13529] loop2: detected capacity change from 0 to 32768
[  523.646670][T13560] loop0: detected capacity change from 0 to 512
[  523.724635][T13529] read_mapping_page failed!
[  523.798190][T13560] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3358: invalid indirect mapped block 256 (level 2)
[  523.983916][T13560] EXT4-fs (loop0): 2 truncates cleaned up
[  524.045838][T13560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  524.361314][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3362'.
[  524.427466][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3362'.
[  524.485424][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3364'.
[  524.515310][ T5932] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.890477][T13573] loop3: detected capacity change from 0 to 2048
[  525.009209][T13573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  525.058131][T13578] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  525.080259][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3366'.
[  525.823840][T13584] loop0: detected capacity change from 0 to 512
[  525.876150][T13585] xt_TCPMSS: Only works on TCP SYN packets
[  526.016155][T13552] loop4: detected capacity change from 0 to 32768
[  526.056157][T13584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.160103][T13552] (syz.4.3356,13552,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  526.320177][T13552] (syz.4.3356,13552,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  526.353531][T13584] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.3370: corrupted xattr block 33: bad e_name length
[  526.502385][T13552] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  526.502469][T13552] (syz.4.3356,13552,0):ocfs2_initialize_super:2281 ERROR: status = -12
[  526.691478][T13552] (syz.4.3356,13552,0):ocfs2_fill_super:1178 ERROR: status = -12
[  526.991138][ T5932] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.347759][T13606] xt_time: invalid argument - start or stop time greater than 23:59:59
[  527.573113][T13609] netlink: 'syz.2.3382': attribute type 8 has an invalid length.
[  528.800700][T13629] xt_bpf: check failed: parse error
[  529.514272][T13645] loop5: detected capacity change from 0 to 128
[  529.639574][T13643] loop2: detected capacity change from 0 to 2048
[  529.763278][T13643] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  529.913699][T13648] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  530.206952][T13655] warning: `syz.1.3402' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  530.690172][T13659] Non-string source
[  530.991663][T13666] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3407'.
[  532.178534][   T29] audit: type=1800 audit(7637111.652:24): pid=13670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.3409" name="/" dev="sockfs" ino=32790 res=0 errno=0
[  532.413743][T13688] loop4: detected capacity change from 0 to 2048
[  532.498302][T13688] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  532.604981][T13693] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3419'.
[  532.698304][T13695] capability: warning: `syz.0.3420' uses deprecated v2 capabilities in a way that may be insecure
[  532.992165][T13699] tc_dump_action: action bad kind
[  533.408399][T13703] netlink: 'syz.3.3424': attribute type 3 has an invalid length.
[  533.525607][T13703] netlink: 'syz.3.3424': attribute type 1 has an invalid length.
[  533.552655][T13709] loop4: detected capacity change from 0 to 512
[  533.606604][T13703] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3424'.
[  533.691642][T13711] loop2: detected capacity change from 0 to 128
[  533.727306][T13703] nbd: couldn't find device at index 63
[  533.752920][T13709] EXT4-fs (loop4): orphan cleanup on readonly fs
[  533.759327][T13709] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  533.805423][T13711] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  533.926081][T13709] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  533.964207][T13711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  534.092320][T13709] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3425: attempt to clear invalid blocks 2 len 1
[  534.261994][T13709] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3425: invalid indirect mapped block 1819239214 (level 0)
[  534.380687][T13709] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3425: invalid indirect mapped block 1819239214 (level 1)
[  534.489384][T13709] EXT4-fs (loop4): 1 truncate cleaned up
[  534.496608][T13709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  534.561337][T13716] loop5: detected capacity change from 0 to 4096
[  534.668875][T13716] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  534.867499][T13716] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  535.315302][T13709] EXT4-fs error (device loop4): ext4_lookup:1810: inode #2: comm syz.4.3425: 'file1' linked to parent dir
[  535.861767][ T5943] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.397896][T13740] loop4: detected capacity change from 0 to 512
[  536.528189][T13740] EXT4-fs: Ignoring removed orlov option
[  536.605200][T13740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  536.719059][T13740] EXT4-fs (loop4): orphan cleanup on readonly fs
[  536.806693][T13740] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3440: bg 0: block 248: padding at end of block bitmap is not set
[  536.947444][T13740] Quota error (device loop4): write_blk: dquota write failed
[  537.010553][T13740] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  537.107843][T13740] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3440: Failed to acquire dquot type 1
[  537.230947][T13740] EXT4-fs (loop4): 1 truncate cleaned up
[  537.285894][T13740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  537.309433][    T8] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  537.541927][    T8] usb 2-1: Using ep0 maxpacket: 16
[  537.622396][    T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9
[  537.704970][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  537.801317][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  537.912211][T13740] EXT4-fs: Ignoring removed orlov option
[  537.918077][T13740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  537.985906][    T8] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  538.034883][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.121670][T13740] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  538.135480][    T8] usb 2-1: Product: syz
[  538.139704][    T8] usb 2-1: Manufacturer: syz
[  538.184088][    T8] usb 2-1: SerialNumber: syz
[  538.218182][T13740] EXT4-fs error (device loop4): __ext4_remount:6749: comm syz.4.3440: Abort forced by user
[  538.247558][    T8] usb 2-1: config 0 descriptor??
[  538.272868][T13728] loop2: detected capacity change from 0 to 32768
[  538.285019][    T8] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  538.309006][T13740] EXT4-fs (loop4): Remounting filesystem read-only
[  538.325875][T13728] XFS: attr2 mount option is deprecated.
[  538.364434][T13740] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  538.422045][ T6113] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  538.529244][T13728] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  538.547102][    T8] usb 2-1: USB disconnect, device number 86
[  538.615238][T13728] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  538.708986][T13728] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR
[  538.709463][T13728] XFS (loop2): log mount failed
[  538.763824][ T6113] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  538.836389][ T6113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.896943][ T6113] usb 4-1: Product: syz
[  538.929317][ T6113] usb 4-1: Manufacturer: syz
[  538.933998][ T6113] usb 4-1: SerialNumber: syz
[  539.036617][ T6113] usb 4-1: config 0 descriptor??
[  539.079856][ T6113] gspca_main: sq905c-2.14.0 probing 2770:9052
[  539.258020][ T5943] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.535934][ T6113] gspca_sq905c: sq905c_read: usb_control_msg failed (-71)
[  539.599161][ T6113] sq905c 4-1:0.0: Reading version command failed
[  539.605650][ T6113] sq905c 4-1:0.0: probe with driver sq905c failed with error -71
[  539.790635][ T6113] usb 4-1: USB disconnect, device number 70
[  541.095578][T13796] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3465'.
[  541.210893][T13796] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3465'.
[  541.290060][T13796] netlink: 'syz.1.3465': attribute type 5 has an invalid length.
[  541.365979][T13802] loop4: detected capacity change from 0 to 256
[  541.434980][T13796] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3465'.
[  541.778681][T13804] netlink: 1275 bytes leftover after parsing attributes in process `syz.5.3469'.
[  541.823529][T13802] FAT-fs (loop4): Directory bread(block 64) failed
[  541.830179][T13802] FAT-fs (loop4): Directory bread(block 65) failed
[  541.875727][T13804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.949518][T13802] FAT-fs (loop4): Directory bread(block 66) failed
[  541.957641][T13802] FAT-fs (loop4): Directory bread(block 67) failed
[  542.079764][T13802] FAT-fs (loop4): Directory bread(block 68) failed
[  542.086372][T13802] FAT-fs (loop4): Directory bread(block 69) failed
[  542.170987][T13802] FAT-fs (loop4): Directory bread(block 70) failed
[  542.291319][T13802] FAT-fs (loop4): Directory bread(block 71) failed
[  542.387532][T13802] FAT-fs (loop4): Directory bread(block 72) failed
[  542.395569][T13802] FAT-fs (loop4): Directory bread(block 73) failed
[  543.627798][T13822] netlink: 'syz.2.3478': attribute type 3 has an invalid length.
[  543.700317][T13792] loop0: detected capacity change from 0 to 32768
[  544.278224][T13828] loop5: detected capacity change from 0 to 512
[  544.515929][T13828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  544.992218][T13808] loop1: detected capacity change from 0 to 32768
[  545.067223][ T5937] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.094319][T13841] netlink: 'syz.2.3486': attribute type 10 has an invalid length.
[  545.338810][T13808] workqueue: Failed to create a rescuer kthread for wq "bcachefs_journal": -EINTR
[  545.338907][T13808] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  545.770773][T13853] xt_ecn: cannot match TCP bits for non-tcp packets
[  545.938724][T13859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3492'.
[  547.027980][T13808] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc
[  547.712485][   T29] audit: type=1326 audit(7637126.188:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3785d29 code=0x7ffc0000
[  548.001599][   T29] audit: type=1326 audit(7637126.188:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3785d29 code=0x7ffc0000
[  548.256640][   T29] audit: type=1326 audit(7637126.235:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f88d3785d29 code=0x7ffc0000
[  548.353012][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3507'.
[  548.361946][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3507'.
[  548.468219][   T29] audit: type=1326 audit(7637126.235:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3785d29 code=0x7ffc0000
[  548.564124][T13888] batadv1: entered promiscuous mode
[  548.658756][T13888] 8021q: adding VLAN 0 to HW filter on device batadv1
[  548.690505][   T29] audit: type=1326 audit(7637126.235:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3785d29 code=0x7ffc0000
[  549.628426][T13904] loop4: detected capacity change from 0 to 512
[  549.786601][T13906] Driver unsupported XDP return value 0 on prog  (id 228) dev N/A, expect packet loss!
[  549.893978][T13904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.876517][T13923] loop1: detected capacity change from 0 to 2048
[  550.938746][T13923] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  551.065481][ T5943] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.611042][T13896] loop5: detected capacity change from 0 to 32768
[  551.763113][T13896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3510 (13896)
[  551.790277][T13931] loop4: detected capacity change from 0 to 2048
[  551.926452][T13896] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  551.963537][T13931] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  552.057389][T13896] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  552.166641][T13896] BTRFS info (device loop5): using free-space-tree
[  552.254652][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  552.255115][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  552.372897][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  552.469088][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  552.479581][T13946] loop0: detected capacity change from 0 to 256
[  552.576226][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  552.576500][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  552.609447][T13931] UDF-fs: incorrect filename length (10)
[  552.683045][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  552.683361][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  552.715826][T13946] MINIX-fs: mounting file system with errors, running fsck is recommended
[  552.800589][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  552.800860][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  552.918307][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  553.017740][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  553.118908][T13896] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  553.264189][T13896] BTRFS error (device loop5): open_ctree failed
[  554.918856][T13992] loop0: detected capacity change from 0 to 64
[  555.052170][T13990] loop1: detected capacity change from 0 to 2048
[  555.231286][T13995] loop3: detected capacity change from 0 to 1764
[  555.261145][T13990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  555.491283][T13990] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh
[  556.452354][T14011] loop1: detected capacity change from 0 to 1024
[  557.134803][ T3500] hfsplus: b-tree write err: -5, ino 4
[  557.617273][   T54] Bluetooth: Unknown LE signaling command 0xb6
[  557.624039][   T54] Bluetooth: Wrong link type (-22)
[  558.250674][T14033] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3566'.
[  559.122451][T14015] loop0: detected capacity change from 0 to 32768
[  559.290645][T14015] (syz.0.3557,14015,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  559.414899][T14015] (syz.0.3557,14015,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  559.635145][T14015] JBD2: Ignoring recovery information on journal
[  559.906780][T14015] JBD2: journal reset failed
[  559.971923][T14015] (syz.0.3557,14015,0):ocfs2_journal_load:1145 ERROR: Failed to load journal!
[  560.016976][T14015] (syz.0.3557,14015,0):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4
[  560.267080][T14021] loop2: detected capacity change from 0 to 40427
[  562.160431][T14040] loop3: detected capacity change from 0 to 32768
[  562.267893][T14071] loop0: detected capacity change from 0 to 256
[  562.393857][T14072] loop4: detected capacity change from 0 to 512
[  562.491227][T14069] loop2: detected capacity change from 0 to 4096
[  562.542036][T14071] FAT-fs (loop0): Directory bread(block 64) failed
[  562.548680][T14071] FAT-fs (loop0): Directory bread(block 65) failed
[  562.581300][T14069] EXT4-fs (loop2): Test dummy encryption mode enabled
[  562.660778][T14071] FAT-fs (loop0): Directory bread(block 66) failed
[  562.669105][T14072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  562.714446][T14040] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  562.731512][T14071] FAT-fs (loop0): Directory bread(block 67) failed
[  562.751922][T14069] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003]
[  562.767054][T14087] loop1: detected capacity change from 0 to 16
[  562.807022][T14071] FAT-fs (loop0): Directory bread(block 68) failed
[  562.813635][T14071] FAT-fs (loop0): Directory bread(block 69) failed
[  562.835322][T14069] System zones: 0-5
[  562.850396][T14069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  562.863805][T14087] erofs (device loop1): mounted with root inode @ nid 36.
[  562.892498][T14040] bcachefs (loop3): initializing new filesystem
[  562.893644][T14040] bcachefs (loop3): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  562.893671][T14040] bcachefs (loop3): going read-write
[  562.893952][T14040] bcachefs (loop3): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  562.893974][T14040] bcachefs (loop3): going read-only
[  562.893997][T14040] bcachefs (loop3): finished waiting for writes to stop
[  562.894079][T14040] bcachefs (loop3): flushing journal and stopping allocators, journal seq 0
[  562.894198][T14040] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 0
[  562.904520][T14071] FAT-fs (loop0): Directory bread(block 70) failed
[  562.904570][T14071] FAT-fs (loop0): Directory bread(block 71) failed
[  562.904651][T14071] FAT-fs (loop0): Directory bread(block 72) failed
[  562.904690][T14071] FAT-fs (loop0): Directory bread(block 73) failed
[  562.927562][T14040] bcachefs (loop3): shutdown complete, journal seq 1
[  562.928482][T14040] bcachefs (loop3): done going read-only, filesystem not clean
[  562.928502][T14040] bcachefs (loop3): bch2_fs_initialize(): error EINTR
[  562.928522][T14040] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR
[  562.928542][T14040] bcachefs (loop3): shutting down
[  563.085903][T14040] bcachefs (loop3): shutdown complete
[  563.503864][ T5949] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.611129][ T5943] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.768240][T14092] loop1: detected capacity change from 0 to 2048
[  564.061802][T14092] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102]
[  564.061909][T14092] System zones: 0-7
[  564.064698][T14092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.182225][T14092] EXT4-fs error (device loop1): __ext4_remount:6749: comm syz.1.3587: Abort forced by user
[  564.206398][T14092] EXT4-fs (loop1): Remounting filesystem read-only
[  564.206431][T14092] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[  564.279997][T14100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  564.434422][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.383145][T14112] netlink: 'syz.2.3595': attribute type 10 has an invalid length.
[  565.397163][   T29] audit: type=1326 audit(7637142.735:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.0.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b2b85d29 code=0x7ffc0000
[  565.397223][   T29] audit: type=1326 audit(7637142.735:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14109 comm="syz.0.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b2b85d29 code=0x7ffc0000
[  565.461061][T14112] macvlan0: entered promiscuous mode
[  565.461100][T14112] macvlan0: entered allmulticast mode
[  565.498533][   T30] INFO: task jbd2/sda1-8:5161 blocked for more than 143 seconds.
[  565.498575][   T30]       Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[  565.498595][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  565.498610][   T30] task:jbd2/sda1-8     state:D stack:24176 pid:5161  tgid:5161  ppid:2      flags:0x00004000
[  565.498693][   T30] Call Trace:
[  565.498706][   T30]  <TASK>
[  565.498725][   T30]  __schedule+0x1850/0x4c30
[  565.498798][   T30]  ? __pfx___schedule+0x10/0x10
[  565.498841][   T30]  ? __pfx_lock_release+0x10/0x10
[  565.498877][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  565.498935][   T30]  ? schedule+0x90/0x320
[  565.498974][   T30]  schedule+0x14b/0x320
[  565.499015][   T30]  io_schedule+0x8d/0x110
[  565.499058][   T30]  bit_wait_io+0x12/0xd0
[  565.499102][   T30]  __wait_on_bit+0xb2/0x2f0
[  565.499147][   T30]  ? __pfx_bit_wait_io+0x10/0x10
[  565.499193][   T30]  out_of_line_wait_on_bit+0x1d5/0x260
[  565.499239][   T30]  ? __pfx_bit_wait_io+0x10/0x10
[  565.499282][   T30]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  565.499330][   T30]  ? __pfx_wake_bit_function+0x10/0x10
[  565.499376][   T30]  jbd2_journal_commit_transaction+0x3d09/0x6560
[  565.499481][   T30]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[  565.499523][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  565.499566][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.499600][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  565.499653][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.499706][   T30]  ? __try_to_del_timer_sync+0x2ad/0x340
[  565.499759][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.499794][   T30]  ? __pfx___timer_delete_sync+0x10/0x10
[  565.499829][   T30]  ? __pfx_do_raw_write_lock+0x10/0x10
[  565.499859][   T30]  ? prepare_to_wait+0x186/0x210
[  565.499916][   T30]  ? schedule+0x90/0x320
[  565.499960][   T30]  kjournald2+0x41c/0x7b0
[  565.499991][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  565.500044][   T30]  ? __pfx_kjournald2+0x10/0x10
[  565.500074][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  565.500113][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.500145][   T30]  ? __kthread_parkme+0x169/0x1d0
[  565.500183][   T30]  ? __pfx_kjournald2+0x10/0x10
[  565.500213][   T30]  kthread+0x2f2/0x390
[  565.500249][   T30]  ? __pfx_kjournald2+0x10/0x10
[  565.500277][   T30]  ? __pfx_kthread+0x10/0x10
[  565.500315][   T30]  ret_from_fork+0x4d/0x80
[  565.500346][   T30]  ? __pfx_kthread+0x10/0x10
[  565.500383][   T30]  ret_from_fork_asm+0x1a/0x30
[  565.500443][   T30]  </TASK>
[  565.500646][   T30] 
[  565.500646][   T30] Showing all locks held in the system:
[  565.500665][   T30] 2 locks held by kworker/1:0/25:
[  565.500686][   T30] 1 lock held by khungtaskd/30:
[  565.500704][   T30]  #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  565.500797][   T30] 3 locks held by kworker/1:1/46:
[  565.500848][   T30] 2 locks held by getty/5587:
[  565.500867][   T30]  #0: ffff8880353120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  565.500979][   T30]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00
[  565.501066][   T30] 3 locks held by syz-executor/5943:
[  565.501090][   T30] 3 locks held by kworker/1:4/5988:
[  565.501110][   T30] 4 locks held by kworker/1:5/5989:
[  565.501130][   T30] 2 locks held by syz.3.3569/14040:
[  565.501148][   T30]  #0: ffffffff8f056628 (bio_slab_lock){+.+.}-{4:4}, at: bioset_exit+0x42f/0x650
[  565.501226][   T30]  #1: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  565.501306][   T30] 2 locks held by syz.5.3585/14086:
[  565.501325][   T30] 2 locks held by syz.0.3596/14109:
[  565.501344][   T30] 2 locks held by syz.2.3595/14112:
[  565.501363][   T30] 2 locks held by syz.1.3597/14114:
[  565.501381][   T30] 
[  565.501391][   T30] =============================================
[  565.501391][   T30] 
[  565.501404][   T30] NMI backtrace for cpu 0
[  565.501418][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[  565.501449][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  565.501466][   T30] Call Trace:
[  565.501477][   T30]  <TASK>
[  565.501489][   T30]  dump_stack_lvl+0x241/0x360
[  565.501533][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  565.501573][   T30]  ? __pfx__printk+0x10/0x10
[  565.501623][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  565.501665][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  565.501699][   T30]  ? _printk+0xd5/0x120
[  565.501733][   T30]  ? __pfx__printk+0x10/0x10
[  565.501769][   T30]  ? __wake_up_klogd+0xcc/0x110
[  565.501799][   T30]  ? __pfx__printk+0x10/0x10
[  565.501840][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  565.501870][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  565.501916][   T30]  watchdog+0xff6/0x1040
[  565.501952][   T30]  ? watchdog+0x1ea/0x1040
[  565.501990][   T30]  ? __pfx_watchdog+0x10/0x10
[  565.502023][   T30]  kthread+0x2f2/0x390
[  565.502058][   T30]  ? __pfx_watchdog+0x10/0x10
[  565.502089][   T30]  ? __pfx_kthread+0x10/0x10
[  565.502125][   T30]  ret_from_fork+0x4d/0x80
[  565.502154][   T30]  ? __pfx_kthread+0x10/0x10
[  565.502189][   T30]  ret_from_fork_asm+0x1a/0x30
[  565.502230][   T30]  </TASK>
[  565.502243][   T30] Sending NMI from CPU 0 to CPUs 1:
[  565.502273][    C1] NMI backtrace for cpu 1
[  565.502286][    C1] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[  565.502312][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  565.502328][    C1] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker
[  565.502367][    C1] RIP: 0010:__lock_acquire+0xd57/0x2100
[  565.502397][    C1] Code: 8b 00 48 bf 00 00 00 00 00 fc ff df 4c 89 75 00 48 8b 44 24 30 0f b6 04 38 84 c0 0f 85 70 0c 00 00 48 8b 04 24 8b 18 48 85 db <74> 59 83 fb 31 0f 83 9c 11 00 00 48 8d 04 9b 48 8b 4c 24 08 48 8d
[  565.502418][    C1] RSP: 0018:ffffc90000a18670 EFLAGS: 00000002
[  565.502437][    C1] RAX: ffff8880202ac6d8 RBX: 0000000000000002 RCX: ffffffff817ad2a4
[  565.502455][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000
[  565.502472][    C1] RBP: ffff8880202ac730 R08: ffffffff942ab8f7 R09: 1ffffffff285571e
[  565.502491][    C1] R10: dffffc0000000000 R11: fffffbfff285571f R12: ffff8880202ac6c4
[  565.502509][    C1] R13: ffff8880202abc00 R14: f0cac75d07f12253 R15: 0000000000000000
[  565.502530][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  565.502551][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  565.502568][    C1] CR2: 0000001b2eb15ff8 CR3: 000000007ce1a000 CR4: 0000000000350ef0
[  565.502587][    C1] Call Trace:
[  565.502596][    C1]  <NMI>
[  565.502605][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  565.502634][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  565.502663][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  565.502701][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  565.502724][    C1]  ? nmi_handle+0x151/0x5a0
[  565.502753][    C1]  ? nmi_handle+0x2a/0x5a0
[  565.502783][    C1]  ? __lock_acquire+0xd57/0x2100
[  565.502809][    C1]  ? default_do_nmi+0x63/0x160
[  565.502837][    C1]  ? exc_nmi+0x123/0x1f0
[  565.502864][    C1]  ? end_repeat_nmi+0xf/0x53
[  565.502892][    C1]  ? __lock_acquire+0xc94/0x2100
[  565.502919][    C1]  ? __lock_acquire+0xd57/0x2100
[  565.502947][    C1]  ? __lock_acquire+0xd57/0x2100
[  565.502976][    C1]  ? __lock_acquire+0xd57/0x2100
[  565.503003][    C1]  </NMI>
[  565.503012][    C1]  <IRQ>
[  565.503029][    C1]  lock_acquire+0x1ed/0x550
[  565.503055][    C1]  ? dummy_timer+0x15d/0x4620
[  565.503080][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.503108][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  565.503136][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.503166][    C1]  ? validate_chain+0x11e/0x5920
[  565.503200][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.503225][    C1]  ? mark_lock+0x9a/0x360
[  565.503254][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.503282][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.503310][    C1]  _raw_spin_lock_irqsave+0xd5/0x120
[  565.503340][    C1]  ? dummy_timer+0x15d/0x4620
[  565.503363][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  565.503400][    C1]  dummy_timer+0x15d/0x4620
[  565.503423][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.503452][    C1]  ? debug_object_deactivate+0x2d5/0x390
[  565.503489][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  565.503512][    C1]  ? __pfx_lock_release+0x10/0x10
[  565.503545][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.503573][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.503598][    C1]  ? mark_lock+0x9a/0x360
[  565.503629][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  565.503658][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  565.503688][    C1]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  565.503720][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.503745][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  565.503779][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.503804][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  565.503836][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  565.503863][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  565.503886][    C1]  __hrtimer_run_queues+0x59d/0xd30
[  565.503921][    C1]  ? ktime_get_update_offsets_now+0x2d/0x3b0
[  565.503957][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  565.503991][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.504016][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.504042][    C1]  ? ktime_get_update_offsets_now+0x393/0x3b0
[  565.504073][    C1]  hrtimer_run_softirq+0x19a/0x2c0
[  565.504110][    C1]  handle_softirqs+0x2d6/0x9b0
[  565.504150][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.504180][    C1]  ? __irq_exit_rcu+0xf7/0x220
[  565.504218][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  565.504255][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.504280][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[  565.504311][    C1]  __irq_exit_rcu+0xf7/0x220
[  565.504346][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  565.504384][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.504411][    C1]  irq_exit_rcu+0x9/0x30
[  565.504445][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  565.504478][    C1]  </IRQ>
[  565.504486][    C1]  <TASK>
[  565.504495][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  565.504519][    C1] RIP: 0010:__local_bh_enable_ip+0x170/0x200
[  565.504555][    C1] Code: 8c e8 d4 63 67 0a 65 66 8b 05 b4 00 a2 7e 66 85 c0 75 5d bf 01 00 00 00 e8 0d be 0b 00 e8 68 67 45 00 fb 65 8b 05 78 00 a2 7e <85> c0 75 05 e8 f7 81 a8 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c
[  565.504574][    C1] RSP: 0018:ffffc90000b675a0 EFLAGS: 00000286
[  565.504594][    C1] RAX: 0000000080000000 RBX: 1ffff9200016ceb8 RCX: ffffffff817b387a
[  565.504611][    C1] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5fd5e0
[  565.504630][    C1] RBP: ffffc90000b67650 R08: ffffffff942ab99f R09: 1ffffffff2855733
[  565.504648][    C1] R10: dffffc0000000000 R11: fffffbfff2855734 R12: dffffc0000000000
[  565.504667][    C1] R13: 1ffff9200016cebc R14: ffffc90000b675e0 R15: 0000000000000201
[  565.504689][    C1]  ? mark_lock+0x9a/0x360
[  565.504721][    C1]  ? wg_packet_encrypt_worker+0x1619/0x16b0
[  565.504759][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  565.504794][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.504822][    C1]  ? wg_packet_encrypt_worker+0x137c/0x16b0
[  565.504861][    C1]  wg_packet_encrypt_worker+0x1619/0x16b0
[  565.504909][    C1]  ? __pfx_wg_packet_encrypt_worker+0x10/0x10
[  565.504984][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.505010][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  565.505039][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  565.505072][    C1]  ? process_scheduled_works+0x976/0x1840
[  565.505097][    C1]  process_scheduled_works+0xa68/0x1840
[  565.505134][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  565.505167][    C1]  ? assign_work+0x364/0x3d0
[  565.505192][    C1]  worker_thread+0x870/0xd30
[  565.505223][    C1]  ? __kthread_parkme+0x169/0x1d0
[  565.505251][    C1]  ? __pfx_worker_thread+0x10/0x10
[  565.505276][    C1]  kthread+0x2f2/0x390
[  565.505304][    C1]  ? __pfx_worker_thread+0x10/0x10
[  565.505328][    C1]  ? __pfx_kthread+0x10/0x10
[  565.505357][    C1]  ret_from_fork+0x4d/0x80
[  565.505381][    C1]  ? __pfx_kthread+0x10/0x10
[  565.505409][    C1]  ret_from_fork_asm+0x1a/0x30
[  565.505439][    C1]  </TASK>
[  565.506274][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  565.506291][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0
[  565.506321][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  565.506339][   T30] Call Trace:
[  565.506350][   T30]  <TASK>
[  565.506362][   T30]  dump_stack_lvl+0x241/0x360
[  565.506405][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  565.506445][   T30]  ? __pfx__printk+0x10/0x10
[  565.506479][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  565.506519][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.506551][   T30]  ? vscnprintf+0x5d/0x90
[  565.506588][   T30]  panic+0x349/0x880
[  565.506622][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.506654][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  565.506692][   T30]  ? __pfx_panic+0x10/0x10
[  565.506725][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  565.506768][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.506799][   T30]  ? __irq_work_queue_local+0x137/0x410
[  565.506834][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.506863][   T30]  ? irq_work_queue+0xca/0x150
[  565.506894][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  565.506929][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  565.506956][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.506987][   T30]  ? nmi_trigger_cpumask_backtrace+0x251/0x320
[  565.507026][   T30]  watchdog+0x1035/0x1040
[  565.507061][   T30]  ? watchdog+0x1ea/0x1040
[  565.507099][   T30]  ? __pfx_watchdog+0x10/0x10
[  565.507132][   T30]  kthread+0x2f2/0x390
[  565.507166][   T30]  ? __pfx_watchdog+0x10/0x10
[  565.507197][   T30]  ? __pfx_kthread+0x10/0x10
[  565.507232][   T30]  ret_from_fork+0x4d/0x80
[  565.507261][   T30]  ? __pfx_kthread+0x10/0x10
[  565.507296][   T30]  ret_from_fork_asm+0x1a/0x30
[  565.507336][   T30]  </TASK>
[  565.507623][   T30] Kernel Offset: disabled