last executing test programs:

2m8.871083721s ago: executing program 1 (id=696):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c757466383d302c756e695f786c6174653d312c696f636861727365743d69736f383835392d31342c636f6465706167653d3935302c696f636861727365743d6d616363656e746575726f2c757466383d302c73686f72746e616d653d6c6f7765722c00eb35cd69a309a1cd59f889d47f6ece19f2f93c7c42fee6d42a74a07aedee8d38362cec0a8a369a2bd5754fa3f8c0626979e68e9ae4cf36"], 0x1, 0x367, &(0x7f0000000840)="$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")
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bcc9942, 0x0, 0x0, 0x0, 0x0, 0x78, 0x8, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3be5, 0x0, 0x0, 0x0, 0x0, 0x751, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0xf, 0x8de5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe]})
r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2m8.031878497s ago: executing program 1 (id=705):
r0 = fanotify_init(0x1, 0x2)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x455, 0x40000008, r1, 0x0)
fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0)
fanotify_mark(r0, 0x80, 0x20, r1, 0x0)

2m7.707067838s ago: executing program 1 (id=709):
syz_mount_image$xfs(&(0x7f0000000480), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000440)={[{@nodiscard}, {@nolargeio}, {@gquota}]}, 0x1, 0x988a, &(0x7f00000185c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080))
chdir(&(0x7f0000000140)='./bus\x00')
lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))

2m6.403493238s ago: executing program 1 (id=714):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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")
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./file0\x00')
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))

2m5.250830855s ago: executing program 1 (id=723):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1e2, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
ftruncate(r0, 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)

2m4.384438942s ago: executing program 1 (id=725):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680))
socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)

2m3.892278058s ago: executing program 32 (id=725):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680))
socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)

6.116103848s ago: executing program 2 (id=1641):
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
read$eventfd(r1, &(0x7f0000000000), 0x8)
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x3, 0x0, 0x0)

5.893185645s ago: executing program 3 (id=1643):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/4078, 0xfee}], 0x1)

5.858841366s ago: executing program 2 (id=1644):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040)
ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0x200, 0xfffffffb, 0xfffff800})

5.718831011s ago: executing program 3 (id=1647):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x5, @loopback, 0xfffffffd}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015)

5.609776404s ago: executing program 4 (id=1648):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve1\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

5.559404246s ago: executing program 4 (id=1649):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x1, [<r2=>0x0]}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x7}, 0x8)

5.438845469s ago: executing program 3 (id=1651):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc880)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

4.659778584s ago: executing program 4 (id=1653):
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0xa, 0x2, 0x7, 0x2, 0x2, 0xf3b})
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x1fb)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

3.981608695s ago: executing program 2 (id=1655):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

3.980840705s ago: executing program 4 (id=1663):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000000300)={0x14, &(0x7f00000000c0)={0x0, 0x23, 0x9, {0x9, 0xe, "8424d961449fd8"}}, 0x0}, 0x0)

3.905703918s ago: executing program 3 (id=1656):
syz_mount_image$jfs(&(0x7f0000007ec0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3800400, &(0x7f0000007f40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="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"], 0xfe, 0x6245, &(0x7f0000025840)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9)
getdents(r0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
fdatasync(r1)

3.771041462s ago: executing program 2 (id=1657):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000000f40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFSlUqBfXQRkpc2X5vvX72sOuxPbv2/n7St2/fvNn5vslazsx49m0AhlZj5fHkydkihHc/fefRl58qfru87K72GkdWHovYa4UQmh39Itve53HBtSsvndmsLcLxlcfUD49dbr92MoSwGI6Ez0IrfDS/8OWH7z1y9OPXJ2556+Izr+zS7rfl+wEAAPvRpT8v/P2+f/7pgZmrlw6fDuPt5en4vBX7k/G4/1g8UE7Hy42wvl90RKexbL2RGI1svZFsvdEsz2hJvma2nWbJemNd8o10LNtsPwEAAGAvSue1rVA05tb1G425udXz/mWfT48Vc8+dXzh3oU+FAgAAAJX959WVm26FEEIIIUSt0RyAGoQQQgxTLE33+woEAAAAMGzy+cI2WNzZmbraW2v1lv/yw43NXw87oO6ff/n3Vv4PXvMbBwCA6vbr0WTar3QcneYxyOcRHMlet9Xj/0a2ndEt1lk2r+C65cXgvk1l9ef/roOqrP6tvo/9UlZ/Ph/moCqrP5+nc1CV1T9ecx1VldU/UXMdVZXVf6DmOqoqq/9gzXVUVVb/ZM11VFVW/1TNdVRVVv8NNddRVVn9h2quo6qy+vfKbbVl9bdqrqOqsvpnaq6jqrL6b6y5jqrK6r+p5jqqKqv/5prr6Jc7Y5v+HQ5n453nz/k53V45xwMAAIBh9z/z/wkhhBAbYuU+iAGoQ4j9HcUA1CC+Ktp/7xuAWoQQ249X+3r1AQAAABgE6XMB6QPoS1EaH+kyPho/S7QyPrG2Qhpvdnn9WJfx8S7jAAAAQAi/e+PcbW8Xa5/z3+58eB3zRl0PFeYxyie622r+7c57tt38e2XeMgAAAIZL8b3Prt//6PsvzFy9dPh0x9nv9Xi+m+YBHY3XBj6J/XRfwFTWL9I59On1eRol6+XXB24o297j29xRAAAAGGLp/L0VisZcx3l3KzQac3Nr5+OzoVmcO79w9ljsp+9n+eN0c3x5+UM11w0AAAD0bu18f/Pz//Q9vrNhrJh77vzCuQur/an28maj87rA9NryovO6QCtbfrxk+YnYT9/f+YPpAyvL5878cOGpnd55AAAAGBIXXrz4zJMLC2d/5IknnnjSftLv30wAAMBO++KLd5o/PjH1+9XP/6/Nf5c+/38k9ltxbr+/xBXSfQLpcwAbPq//xPo802XrPb9+vVa23kiM8azuiY7tLDuQvW6mLF9r/XbGSvJNZvmmsnz5PAWj2fop36FseT4/YVpvOluez8M4muUosvx3BwAAACg3/8Kzz89fePHig+efffLps0+ffe7E8VPfPXXq2EPfeWh+5b7++c67+wEAAIC9aO2m335XAgAAAAAAAAAAAAAAAAAAAMOrjq8T6/c+AgAAwLD796shhEUhhKgcS+P9r0EIIYQQQog9Eyvf7V5/3ka/rz8AAAAAw+falZfOhDARQlhuN7FY7Gi+9tZaq831K6t5Uzv14N9mliOtdvnhkXWvP7ij1TDsrsWfu9RusMM///LvrfwfvLaz+SfSk55//2WXjE9Xy3vv/C9nO/PfPtpj/nz/H6+W/2iW/97QW/6l97P8T1TLf1+W/2CP+Tfs//PV8t8f88/G/tF7es2//v0fj23ajwM95v92tv9PhV7zZ/vf6jFh5oGYHwCG0X69ASAdJaTj6MnYT/sbDzfDSPa6rR7/N7LtjG678vXbTcdBt8Z+Ol6ayvImW61/MtveDRXrzOV1Daqy+nfqfdxtZfU3a66jqrL6x2quo6qy+sdrrqOqsvonaq6jqrL6ez0P7bey+vfKdeWy+idrrqOqsvqnaq6jqrL6t/r/eL+U1X+o5jqqKqt/uuY6qiqrv+JltdqV1T9Tcx1VldV/Y811VFVW/00111FVWf0311xHv9wR27Lz4XT+OR3HUr+V9cc3+bfcr9cWAAAAYK/519DO/xevdPS9DiGEEELs1ZgY9GOJZFe2P7rL2xd1x3+XVvW7DiHE7sXSUt1XHBgku/tpZgAGld//w837P9y8/8PN+89XSffwF1k/GekyPtplvNllfCwbz39ex7uM35Rtdyld14xu7jL+tS7jh7qM39plfLbL+G1dxm/vMn5Hl3EAAACGwy2xdX4IAAAA+9fLv/rkzd/c+8SVmauXDp8OYxvmnT8W++Pxb+tvxH4+733SjH/z/0ns/yK2f4jtP7L13X8CAAAAuy99T4y//wMAAMD+lb6n1Pk/AAAA7F8zsXX+DwAAAPvXjbF1/g8AAAD7WDGx+eLYpusCd8e213n9AIDB9/XY3hnbw7G9K7bfiG06Drgntt+sqT4AYOf8/Ps/PfV2sTbf/4ls/FpcntoNFlevFBSN9TP5H4jtwdh+q8d68u8D6DV/cqjHPLuVf3qb+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/aOx8njy5GwRwrufvvPoz8be/OvysrvaaxxZeSxirxVCaLZfl0bX+r+OK1678tKZzvZ6bItwPBShaC8Pj11uZ5oMISyGI+Gz0AofzS98+eF7jxz9+PWJW966+Mwru/hPsG7/AAAAYD/6fwAAAP//ScMebw==")
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0)
read(r0, &(0x7f0000001400)=""/4096, 0x1000)

2.773329733s ago: executing program 2 (id=1660):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x100000000000004)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
syz_usb_connect(0x4, 0xffffffffffffffb2, 0x0, 0x0)

2.771907013s ago: executing program 3 (id=1669):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0xfffff000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
sendto$inet6(r0, &(0x7f0000000080)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

1.049616797s ago: executing program 4 (id=1661):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)

1.049478307s ago: executing program 3 (id=1662):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYBLOB="b0790a07e1e471aed209036fa5f5ca6bc1ad170371c5e2bd52cf99296e6cdd0882cc4c075a7c4b8ca0d78022160660db09219ebb75dc37499a8272c148662b3afc124ff55a705238d347a5a54bc22fc6e8539f02d1a14d4df87689f2e34e7449a843df2a4e9fbe059f2102bb7efa83db5ef26895be033858456061b9ac965c95f1928de05eb811731601", @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))

907.405522ms ago: executing program 4 (id=1664):
r0 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000004c0)={0x0, 0x15, 0x1, "d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000540)={0x20, 0x13, 0x3, "30d87b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

906.287392ms ago: executing program 0 (id=1665):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)={@fallback=r2, r1, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r0, r1, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20)

801.337115ms ago: executing program 0 (id=1666):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a200004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

685.839639ms ago: executing program 0 (id=1667):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb", 0x22}, {&(0x7f0000000400)="17a8a6c41e58e8b6cdb8040db329c064116e4c4cbb04627d", 0x18}], 0x2)

526.982704ms ago: executing program 0 (id=1668):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x1000000, 0x0})

115.439607ms ago: executing program 2 (id=1670):
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

114.737376ms ago: executing program 0 (id=1679):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010002000000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff000006001a010200000005007400040000000600ed005600000005001900"], 0x50}}, 0x24000040)

0s ago: executing program 0 (id=1672):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

kernel console output (not intermixed with test programs):

23525][ T1195] em28xx 4-1:0.132: Video interface 132 found:
[  218.984652][ T8861] sctp: [Deprecated]: syz.2.962 (pid 8861) Use of int in max_burst socket option deprecated.
[  218.984652][ T8861] Use struct sctp_assoc_value instead
[  219.313809][ T5760] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  219.421848][ T5760] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  219.906224][ T1195] em28xx 4-1:0.132: unknown em28xx chip ID (0)
[  220.562207][ T8892] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  220.687461][ T1195] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  220.719065][ T8896] Bluetooth: MGMT ver 1.22
[  220.726763][ T1195] em28xx 4-1:0.132: board has no eeprom
[  220.780433][ T8899] loop2: detected capacity change from 0 to 512
[  220.806244][ T1195] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  220.836246][ T1195] em28xx 4-1:0.132: analog set to bulk mode.
[  220.850498][ T7856] em28xx 4-1:0.132: Registering V4L2 extension
[  220.853299][ T8899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.878444][ T1195] usb 4-1: USB disconnect, device number 11
[  220.885552][ T1195] em28xx 4-1:0.132: Disconnecting em28xx
[  220.928618][ T8899] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.045171][ T8899] EXT4-fs error (device loop2): ext4_get_first_dir_block:3595: inode #12: comm syz.2.969: directory missing '.'
[  221.077783][ T8899] EXT4-fs (loop2): Remounting filesystem read-only
[  221.155806][ T7856] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  221.168011][ T7856] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  221.175183][ T7856] em28xx 4-1:0.132: No AC97 audio processor
[  221.179969][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.195732][ T7856] usb 4-1: Decoder not found
[  221.217386][ T7856] em28xx 4-1:0.132: failed to create media graph
[  221.246726][ T7856] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  221.313056][ T7856] em28xx 4-1:0.132: Remote control support is not available for this card.
[  221.330113][ T1195] em28xx 4-1:0.132: Closing input extension
[  221.409810][ T1195] em28xx 4-1:0.132: Freeing device
[  221.542415][ T8927] loop4: detected capacity change from 0 to 256
[  221.575572][ T8927] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  221.637328][ T8927] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  221.687901][ T8927] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  222.215797][ T8945] loop4: detected capacity change from 0 to 2048
[  222.264419][ T8945] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  222.556362][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'.
[  222.565451][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'.
[  222.573219][ T8935] loop3: detected capacity change from 0 to 32768
[  222.581132][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'.
[  222.596306][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'.
[  222.596395][ T8935] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.979 (8935)
[  222.687756][ T8935] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  222.756265][ T8935] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  222.756548][ T8937] loop2: detected capacity change from 0 to 40427
[  222.786054][ T8935] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  222.818515][ T8937] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  222.826194][ T8935] BTRFS info (device loop3): use zstd compression, level 3
[  222.826896][ T8937] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  222.851790][ T8937] F2FS-fs (loop2): invalid crc value
[  222.852763][ T8935] BTRFS info (device loop3): using free space tree
[  222.871184][ T8937] F2FS-fs (loop2): Found nat_bits in checkpoint
[  223.010995][ T8935] BTRFS info (device loop3): enabling ssd optimizations
[  223.036298][ T8935] BTRFS info (device loop3): auto enabling async discard
[  223.121239][ T8937] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  223.152813][ T8937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  223.162640][ T8978] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  223.337066][ T5771] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  223.349363][ T8937] syz.2.980: attempt to access beyond end of device
[  223.349363][ T8937] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  223.537408][ T5773] syz-executor: attempt to access beyond end of device
[  223.537408][ T5773] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  223.586999][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  223.597212][   T11] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  223.625038][   T11] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  224.318782][ T9003] Invalid argument reading file caps for ./file0
[  224.556460][ T5810] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  224.738388][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short
[  224.747540][ T5810] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  224.768025][ T5810] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  224.777427][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.785431][ T5810] usb 4-1: Product: syz
[  224.789708][ T5810] usb 4-1: Manufacturer: syz
[  224.794310][ T5810] usb 4-1: SerialNumber: syz
[  225.014982][ T5810] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  225.076359][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  225.077914][ T5784] Bluetooth: hci4: command 0x1003 tx timeout
[  225.216654][ T5810] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  225.227400][ T5810] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  225.573476][ T9014] loop2: detected capacity change from 0 to 32768
[  225.608737][ T9014] JBD2: Ignoring recovery information on journal
[  225.617247][ T9014] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75
[  225.626974][ T9014] JBD2: bad block at offset 32
[  225.627038][ T5810] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  225.658451][ T9014] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  225.669716][ T5810] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  225.828710][ T5810] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  225.887504][ T5810] usb 4-1: USB disconnect, device number 12
[  225.994773][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.024953][ T5773] ocfs2: Unmounting device (7,2) on (node local)
[  226.205250][ T9027] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  226.214959][ T9027] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received
[  226.312097][ T9029] loop4: detected capacity change from 0 to 64
[  226.556102][ T9037] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  226.565182][ T9035] loop4: detected capacity change from 0 to 1024
[  226.770192][ T1134] hfsplus: b-tree write err: -5, ino 25
[  226.775977][ T1134] hfsplus: b-tree write err: -5, ino 4
[  226.779181][ T7856] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  226.806679][ T1134] hfsplus: b-tree write err: -5, ino 2
[  226.812373][ T7856] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  226.844132][ T1134] hfsplus: b-tree write err: -5, ino 26
[  227.308662][ T9055] netlink: 'syz.0.1023': attribute type 2 has an invalid length.
[  227.432374][ T9039] loop2: detected capacity change from 0 to 32768
[  227.461617][ T9039] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  227.524640][ T9039] XFS (loop2): Ending clean mount
[  227.648153][ T5773] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  228.203379][ T9083] loop3: detected capacity change from 0 to 8192
[  228.241054][ T9083] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  228.305231][ T9083] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  228.376346][ T9083] REISERFS (device loop3): using ordered data mode
[  228.383027][ T9083] reiserfs: using flush barriers
[  228.390697][ T9075] loop2: detected capacity change from 0 to 32768
[  228.410822][ T9083] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  228.446073][ T9075] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1027 (9075)
[  228.477628][ T9083] REISERFS (device loop3): checking transaction log (loop3)
[  228.495928][ T9075] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  228.521243][ T9075] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  228.548170][ T9075] BTRFS info (device loop2): using free space tree
[  228.738344][ T9075] BTRFS info (device loop2): enabling ssd optimizations
[  228.759252][ T9083] REISERFS (device loop3): Using tea hash to sort names
[  228.769968][ T9075] BTRFS info (device loop2): auto enabling async discard
[  228.784159][ T9083] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  228.934550][   T28] audit: type=1800 audit(2000000088.590:58): pid=9075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1027" name="bus" dev="loop2" ino=263 res=0 errno=0
[  229.131286][ T5773] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  229.746298][ T1195] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  229.945068][ T1195] usb 4-1: Using ep0 maxpacket: 16
[  229.959814][ T1195] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  229.978274][ T1195] usb 4-1: config 0 has no interface number 0
[  229.984437][ T1195] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  230.016219][ T1195] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  230.058498][ T1195] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  230.076912][ T1195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.084966][ T1195] usb 4-1: Product: syz
[  230.108336][ T1195] usb 4-1: Manufacturer: syz
[  230.119081][ T1195] usb 4-1: SerialNumber: syz
[  230.136561][ T1195] usb 4-1: config 0 descriptor??
[  230.142348][ T9114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  230.157537][ T9114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  230.269564][ T9134] loop2: detected capacity change from 0 to 1024
[  230.283895][ T9134] EXT4-fs: Ignoring removed bh option
[  230.311144][ T9134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.399595][ T9114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  230.407102][ T9114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  230.469169][ T9122] loop4: detected capacity change from 0 to 32768
[  230.494540][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.557089][ T9122] find_entry called with index = 0
[  230.585942][ T9122] read_mapping_page failed!
[  230.610149][ T9122] ERROR: (device loop4): txCommit: 
[  230.610149][ T9122] 
[  230.626784][ T1195] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  230.666343][ T9122] read_mapping_page failed!
[  230.689981][ T9122] ERROR: (device loop4): txCommit: 
[  230.689981][ T9122] 
[  230.769398][   T11] read_mapping_page failed!
[  230.774054][   T11] ERROR: (device loop4): txCommit: 
[  230.774054][   T11] 
[  230.786607][   T11] jfs_write_inode: jfs_commit_inode failed!
[  230.962482][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'.
[  230.986427][ T5810] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  231.052827][ T9150] loop4: detected capacity change from 0 to 512
[  231.085416][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.100492][ T9150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.186222][ T5810] usb 1-1: Using ep0 maxpacket: 8
[  231.201854][ T5810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.203544][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.212300][ T5810] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  231.230294][ T5810] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  231.232157][ T1195] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  231.245716][ T5810] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  231.252954][ T1195] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  231.278922][ T5810] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  231.300088][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.306772][ T1195] asix: probe of 4-1:0.34 failed with error -71
[  231.319543][ T1195] usb 4-1: USB disconnect, device number 13
[  231.370695][ T5810] hub 1-1:1.0: bad descriptor, ignoring hub
[  231.388918][ T5810] hub: probe of 1-1:1.0 failed with error -5
[  231.406889][ T5810] cdc_wdm 1-1:1.0: skipping garbage
[  231.406948][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.412281][ T5810] cdc_wdm 1-1:1.0: skipping garbage
[  231.430931][ T5810] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  231.444708][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'.
[  231.453986][ T5810] cdc_wdm 1-1:1.0: Unknown control protocol
[  231.522995][ T9156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.532940][ T9156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.541833][ T9156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.550643][ T9156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.560210][ T9156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.578891][ T9155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.026661][ T5760] usb 1-1: USB disconnect, device number 17
[  232.116700][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.165917][ T9174] loop2: detected capacity change from 0 to 128
[  232.213339][   T28] audit: type=1800 audit(2000000091.870:59): pid=9174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1064" name="file1" dev="loop2" ino=1048670 res=0 errno=0
[  232.239922][ T9174] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8)
[  232.266295][ T9174] FAT-fs (loop2): Filesystem has been set read-only
[  232.273149][ T9174] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522)
[  232.281088][   T28] audit: type=1800 audit(2000000091.900:60): pid=9174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1064" name="file1" dev="loop2" ino=1048670 res=0 errno=0
[  232.510686][ T9169] loop3: detected capacity change from 0 to 32768
[  232.526431][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.581714][ T9169] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.633395][ T9191] loop2: detected capacity change from 0 to 64
[  232.647999][ T9169] XFS (loop3): Ending clean mount
[  232.667609][ T9169] XFS (loop3): Quotacheck needed: Please wait.
[  232.738577][ T9169] XFS (loop3): Quotacheck: Done.
[  232.841700][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  233.153879][ T9203] loop2: detected capacity change from 0 to 128
[  233.169833][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.270330][ T9205] loop2: detected capacity change from 0 to 512
[  233.288455][ T9205] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  233.328301][ T9205] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  233.343945][ T9205] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1076: bg 0: block 248: padding at end of block bitmap is not set
[  233.361279][ T9205] Quota error (device loop2): write_blk: dquota write failed
[  233.370082][ T9205] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  233.380429][ T9205] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1076: Failed to acquire dquot type 1
[  233.399851][ T9205] EXT4-fs (loop2): 1 truncate cleaned up
[  233.407186][ T9205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  233.442365][ T9205] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  233.452710][ T9205] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  233.462865][ T9205] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1076: Failed to acquire dquot type 1
[  233.533578][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  233.547548][   T48] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[  233.580488][   T48] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 1
[  233.831660][ T9213] loop2: detected capacity change from 0 to 8192
[  233.867120][ T9213] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  233.884056][ T9213] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  233.894848][ T9213] REISERFS (device loop2): using ordered data mode
[  233.912162][ T9213] reiserfs: using flush barriers
[  233.923541][ T9213] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  233.992477][ T9213] REISERFS (device loop2): checking transaction log (loop2)
[  234.059223][ T9213] REISERFS (device loop2): Using rupasov hash to sort names
[  234.088679][ T9213] REISERFS (device loop2): using 3.5.x disk format
[  234.095465][ T9213] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  234.135457][ T9227] loop4: detected capacity change from 0 to 1024
[  234.142251][ T9213] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  234.153949][ T9213] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  234.193748][ T9213] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  234.231281][ T9213] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  234.267220][ T9227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  234.307395][ T9227] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.353833][ T9233] loop3: detected capacity change from 0 to 128
[  234.372234][ T9213] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  234.388826][ T9213] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  234.403408][ T9213] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  234.424121][ T9233] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  234.442569][ T9233] ext4 filesystem being mounted at /263/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  234.535401][ T9227] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 3: comm syz.4.1084: lblock 3 mapped to illegal pblock 3 (length 3)
[  234.543194][ T9233] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 18: comm syz.3.1072: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  234.581160][ T9233] EXT4-fs (loop3): Remounting filesystem read-only
[  234.597541][ T9227] EXT4-fs (loop4): Remounting filesystem read-only
[  234.729909][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  234.751060][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  235.174181][ T9251] loop3: detected capacity change from 0 to 1024
[  235.202127][ T9251] EXT4-fs: Ignoring removed nomblk_io_submit option
[  235.290465][ T9251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  235.305424][ T9251] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.414983][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  235.474537][ T9243] loop4: detected capacity change from 0 to 32768
[  235.540384][ T9243] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  235.600410][ T9243] XFS (loop4): Ending clean mount
[  235.620599][ T9243] XFS (loop4): Quotacheck needed: Please wait.
[  235.759090][ T9243] XFS (loop4): Quotacheck: Done.
[  235.803888][ T9239] F2FS-fs (loop2): invalid crc value
[  235.850764][   T28] audit: type=1804 audit(2000000095.510:61): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1087" name="/newroot/76/file1/file1" dev="loop4" ino=6150 res=1 errno=0
[  235.852015][ T9239] F2FS-fs (loop2): Found nat_bits in checkpoint
[  235.872959][    C1] vkms_vblank_simulate: vblank timer overrun
[  235.943686][ T8043] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  235.987462][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  236.002357][ T9239] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  236.210330][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.226263][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.253767][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  236.268979][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  236.306302][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.327636][    T9] usb 4-1: config 0 descriptor??
[  236.389796][ T5773] syz-executor: attempt to access beyond end of device
[  236.389796][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  236.411642][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  236.752216][    T9] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  236.787169][    T9] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  237.024943][ T9280] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1099 (9280)
[  237.048570][ T9280] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.068725][ T9280] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  237.077844][ T9280] BTRFS info (device loop4): setting nodatacow, compression disabled
[  237.090103][ T9280] BTRFS info (device loop4): trying to use backup root at mount time
[  237.099623][ T9280] BTRFS info (device loop4): enabling auto defrag
[  237.106465][ T9280] BTRFS info (device loop4): max_inline at 0
[  237.112530][ T9280] BTRFS info (device loop4): using free space tree
[  237.221393][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'.
[  237.226257][ T9280] BTRFS info (device loop4): auto enabling async discard
[  237.230605][ T9308] netlink: 'syz.0.1106': attribute type 9 has an invalid length.
[  237.246002][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'.
[  237.272607][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'.
[  237.282131][ T9308] netlink: 'syz.0.1106': attribute type 9 has an invalid length.
[  237.290295][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'.
[  237.325601][   T23] net_ratelimit: 5 callbacks suppressed
[  237.325616][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.467131][ T1195] kernel read not supported for file /sequencer (pid: 1195 comm: kworker/0:3)
[  237.592872][ T8043] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.761965][ T5761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (5761)
[  237.976013][   T28] audit: type=1400 audit(2000000001.000:62): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9328 comm="syz.2.1114"
[  238.376555][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.514723][ T9341] pim6reg: entered allmulticast mode
[  238.561000][ T9341] team0: entered allmulticast mode
[  238.576360][ T9341] team_slave_0: entered allmulticast mode
[  238.592713][ T9341] team_slave_1: entered allmulticast mode
[  238.607007][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.626354][ T9341] team0: left allmulticast mode
[  238.631298][ T9341] team_slave_0: left allmulticast mode
[  238.642205][ T9329] set_capacity_and_notify: 2 callbacks suppressed
[  238.642220][ T9329] loop2: detected capacity change from 0 to 40427
[  238.655760][ T9341] team_slave_1: left allmulticast mode
[  238.661810][ T9341] pim6reg: left allmulticast mode
[  238.673867][ T9329] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  238.697176][ T9329] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  238.713201][ T9343] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  238.737526][ T9329] F2FS-fs (loop2): invalid crc value
[  238.909365][   T23] usb 4-1: USB disconnect, device number 14
[  238.959913][ T9329] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  238.975586][ T9329] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  239.156829][ T5773] syz-executor: attempt to access beyond end of device
[  239.156829][ T5773] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  239.185051][ T9361] batadv_slave_0: entered promiscuous mode
[  239.195417][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  239.214858][ T9359] batadv_slave_0: left promiscuous mode
[  239.221134][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  239.325817][ T9363] loop3: detected capacity change from 0 to 8192
[  240.141026][ T9384] loop2: detected capacity change from 0 to 512
[  240.177619][ T9384] EXT4-fs: Ignoring removed i_version option
[  240.199468][ T9384] EXT4-fs: Ignoring removed oldalloc option
[  240.247275][ T9384] ext4: Unknown parameter 'dont_measure'
[  240.591823][ T9395] loop4: detected capacity change from 0 to 4096
[  240.618192][ T9395] EXT4-fs: Ignoring removed mblk_io_submit option
[  240.630503][ T9397] loop2: detected capacity change from 0 to 2048
[  240.656382][ T9395] EXT4-fs (loop4): Test dummy encryption mode enabled
[  240.682444][ T9395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.746473][ T9397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  240.902466][ T9395] overlayfs: upper fs does not support file handles, falling back to index=off.
[  240.937087][ T9397] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  240.996473][ T9397] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 512 with error 28
[  241.024981][ T9397] EXT4-fs (loop2): This should not happen!! Data will be lost
[  241.024981][ T9397] 
[  241.034965][ T9397] EXT4-fs (loop2): Total free blocks count 0
[  241.041370][ T9397] EXT4-fs (loop2): Free/Dirty block details
[  241.047587][ T9397] EXT4-fs (loop2): free_blocks=2415919104
[  241.053415][ T9397] EXT4-fs (loop2): dirty_blocks=512
[  241.059685][ T9397] EXT4-fs (loop2): Block reservation details
[  241.065869][ T9397] EXT4-fs (loop2): i_reserved_data_blocks=32
[  241.122848][ T9406] Invalid ELF header magic: != ELF
[  241.133041][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.307907][ T9410] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1143'.
[  241.404408][   T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  241.485028][ T9399] tipc: Started in network mode
[  241.490365][ T9399] tipc: Node identity 0101010101010101, cluster identity 4711
[  241.500126][ T9399] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  241.763867][ T9423] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1150'.
[  241.946582][ T7856] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  242.076257][   T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  242.146409][ T7856] usb 1-1: Using ep0 maxpacket: 32
[  242.157533][ T7856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.168790][ T7856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.178672][ T7856] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  242.187780][ T7856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.197967][ T7856] usb 1-1: config 0 descriptor??
[  242.205773][ T7856] hub 1-1:0.0: USB hub found
[  242.259160][   T27] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  242.269385][   T27] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  242.279850][   T27] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  242.299616][   T27] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  242.309044][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.317213][   T27] usb 3-1: Product: syz
[  242.321651][   T27] usb 3-1: Manufacturer: syz
[  242.326395][   T27] usb 3-1: SerialNumber: syz
[  242.337677][   T27] usblp0: Disabling reads from problematic bidirectional printer
[  242.414326][ T7856] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  242.547698][   T27] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004
[  242.693842][ T9433] loop4: detected capacity change from 0 to 512
[  242.707477][ T9433] EXT4-fs: Ignoring removed nobh option
[  242.728839][ T9433] EXT4-fs (loop4): Test dummy encryption mode enabled
[  242.743265][ T9433] EXT4-fs error (device loop4): __ext4_iget:5078: inode #11: block 1: comm syz.4.1154: invalid block
[  242.767279][ T9433] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1154: couldn't read orphan inode 11 (err -117)
[  242.793982][ T9433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.830387][ T1195] usb 3-1: USB disconnect, device number 12
[  242.870710][ T7856] hid-generic 0003:046D:C31C.0010: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0
[  242.962266][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.036661][ T9424] usblp0: removed
[  243.185494][   T27] IPVS: starting estimator thread 0...
[  243.294574][ T9451] loop4: detected capacity change from 0 to 2048
[  243.307594][ T9447] IPVS: using max 20 ests per chain, 48000 per kthread
[  243.326773][ T1195] usb 1-1: USB disconnect, device number 18
[  243.360957][ T9451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.382415][ T9451] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.440963][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.553121][ T9457] netlink: 'syz.4.1163': attribute type 3 has an invalid length.
[  243.749452][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'.
[  243.773300][ T9463] netlink: 4676 bytes leftover after parsing attributes in process `syz.2.1166'.
[  243.917113][ T9469] loop3: detected capacity change from 0 to 4096
[  243.978167][ T9469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.026497][ T1195] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  244.085092][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.248938][ T1195] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  244.266461][ T1195] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  244.285172][ T1195] usb 5-1: config 0 interface 0 has no altsetting 0
[  244.331453][ T1195] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  244.346230][ T1195] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  244.354434][ T1195] usb 5-1: Product: syz
[  244.379313][ T1195] usb 5-1: Manufacturer: syz
[  244.383957][ T1195] usb 5-1: SerialNumber: syz
[  244.392402][ T1195] usb 5-1: config 0 descriptor??
[  244.408562][ T1195] hub 5-1:0.0: bad descriptor, ignoring hub
[  244.415201][ T1195] hub: probe of 5-1:0.0 failed with error -5
[  244.428384][ T1195] usb 5-1: selecting invalid altsetting 0
[  244.739996][ T9495] loop3: detected capacity change from 0 to 128
[  244.769139][ T9495] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  244.812688][ T9495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.136286][ T9466] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[  245.545887][ T9466] usb 5-1: failed to restore interface 0 altsetting 251 (error=-71)
[  245.563977][    T9] usb 5-1: USB disconnect, device number 3
[  245.698328][   T28] audit: type=1326 audit(2000000008.730:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.3.1192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9445b9ce59 code=0x7ffc0000
[  245.722237][    C0] vkms_vblank_simulate: vblank timer overrun
[  245.766268][   T28] audit: type=1326 audit(2000000008.760:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.3.1192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9445b9ce59 code=0x7ffc0000
[  245.790212][    C0] vkms_vblank_simulate: vblank timer overrun
[  245.843900][   T28] audit: type=1326 audit(2000000008.770:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.3.1192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9445b9ce59 code=0x7ffc0000
[  245.867937][    C0] vkms_vblank_simulate: vblank timer overrun
[  245.914337][   T28] audit: type=1326 audit(2000000008.770:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.3.1192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9445b9ce59 code=0x7ffc0000
[  245.938304][    C0] vkms_vblank_simulate: vblank timer overrun
[  245.945836][   T28] audit: type=1326 audit(2000000008.770:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.3.1192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9445b9ce59 code=0x7ffc0000
[  245.969789][    C0] vkms_vblank_simulate: vblank timer overrun
[  245.986461][   T28] audit: type=1326 audit(2000000008.770:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.3.1192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9445b9ce59 code=0x7ffc0000
[  246.016379][   T28] audit: type=1326 audit(2000000008.770:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.3.1192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9445b9ce59 code=0x7ffc0000
[  246.040272][    C0] vkms_vblank_simulate: vblank timer overrun
[  246.046901][   T28] audit: type=1326 audit(2000000008.770:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.3.1192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9445b9ce59 code=0x7ffc0000
[  246.070788][    C0] vkms_vblank_simulate: vblank timer overrun
[  246.097642][   T28] audit: type=1326 audit(2000000008.770:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.3.1192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f9445b9ce59 code=0x7ffc0000
[  246.121555][    C0] vkms_vblank_simulate: vblank timer overrun
[  246.153202][   T28] audit: type=1326 audit(2000000008.770:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9521 comm="syz.3.1192" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9445b9ce59 code=0x7ffc0000
[  246.840250][ T9556] netlink: 'syz.3.1205': attribute type 2 has an invalid length.
[  246.983115][ T9562] netlink: 'syz.3.1208': attribute type 10 has an invalid length.
[  247.011185][ T9562] syz_tun: entered promiscuous mode
[  247.050159][ T9562] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  247.319927][ T9570] loop4: detected capacity change from 0 to 512
[  247.326586][ T9548] loop2: detected capacity change from 0 to 32768
[  247.385135][ T9570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.444837][ T9570] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.658057][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.678424][ T9568] loop3: detected capacity change from 0 to 32768
[  247.741180][ T9568] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  247.823328][ T9568] XFS (loop3): Ending clean mount
[  247.877674][ T9568] XFS (loop3): User initiated shutdown received.
[  247.884104][ T9568] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  247.930797][ T9568] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  248.039239][ T5771] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  248.134421][ T9592] overlayfs: failed to decode file handle (len=0, type=0, flags=0, err=-22)
[  248.398944][ T9598] loop2: detected capacity change from 0 to 256
[  249.268861][ T9622] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  249.381250][ T9606] loop3: detected capacity change from 0 to 32768
[  249.410345][ T9606] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  249.449022][ T9606] JBD2: Ignoring recovery information on journal
[  249.627657][ T9606] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  250.042289][ T5771] ocfs2: Unmounting device (7,3) on (node local)
[  250.239819][ T9633] Bluetooth: MGMT ver 1.22
[  250.306229][ T7856] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  250.433865][ T9637] loop2: detected capacity change from 0 to 4096
[  250.509328][ T7856] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  250.535609][ T7856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.578084][ T7856] usb 5-1: config 0 descriptor??
[  250.591796][ T7856] cp210x 5-1:0.0: cp210x converter detected
[  250.637207][   T27] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  250.847485][   T27] usb 4-1: Using ep0 maxpacket: 16
[  250.853624][   T27] usb 4-1: too many configurations: 123, using maximum allowed: 8
[  250.878098][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.894176][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.918532][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.931723][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.943750][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.957085][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.977557][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.996703][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.998154][ T7856] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  251.008167][   T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  251.024154][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  251.033492][   T27] usb 4-1: SerialNumber: syz
[  251.044296][   T27] usb 4-1: config 0 descriptor??
[  251.062279][   T27] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17
[  251.272173][ T5126] bcm5974 4-1:0.0: could not read from device
[  251.284683][ T7856] usb 5-1: cp210x converter now attached to ttyUSB0
[  251.292335][ T5126] bcm5974 4-1:0.0: could not read from device
[  251.326916][   T27] usb 4-1: USB disconnect, device number 15
[  251.342257][ T5126] bcm5974 4-1:0.0: could not read from device
[  251.483715][ T7856] usb 5-1: USB disconnect, device number 4
[  251.504591][ T7856] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  251.542804][ T7856] cp210x 5-1:0.0: device disconnected
[  251.639793][ T9654] loop2: detected capacity change from 0 to 40427
[  251.652340][ T9654] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  251.660910][ T9654] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  251.683603][ T9654] F2FS-fs (loop2): invalid crc value
[  251.695740][ T9654] F2FS-fs (loop2): Found nat_bits in checkpoint
[  251.788408][ T9654] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  251.795494][ T9654] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  252.111695][ T3563] kworker/u4:13: attempt to access beyond end of device
[  252.111695][ T3563] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  252.134655][ T3563] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  252.254300][ T9672] loop4: detected capacity change from 0 to 512
[  252.325892][ T9672] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #2: block 3: comm syz.4.1259: lblock 0 mapped to illegal pblock 3 (length 1)
[  252.366395][ T9672] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.1259: error -117 reading directory block
[  252.380393][ T9672] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  252.391734][ T9672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.480514][ T9672] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #2: block 3: comm syz.4.1259: lblock 0 mapped to illegal pblock 3 (length 1)
[  252.550212][ T9672] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.1259: error -117 reading directory block
[  252.603055][ T9675] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #2: block 3: comm syz.4.1259: lblock 0 mapped to illegal pblock 3 (length 1)
[  252.667316][ T9675] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.1259: error -117 reading directory block
[  252.734110][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.943749][ T9688] loop4: detected capacity change from 0 to 1024
[  252.967341][ T9688] EXT4-fs: Ignoring removed orlov option
[  252.989422][ T9688] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  253.056111][ T9688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.239532][ T9696] syzkaller1: entered promiscuous mode
[  253.245173][ T9696] syzkaller1: entered allmulticast mode
[  253.315107][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.644142][ T9712] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  253.690249][ T9712] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  253.727233][ T9712] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[  253.907776][ T9719] loop2: detected capacity change from 0 to 64
[  255.296435][ T5810] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  255.344741][ T9751] loop4: detected capacity change from 0 to 32768
[  255.444518][ T9773] loop6: detected capacity change from 0 to 7
[  255.466896][    C0] blk_print_req_error: 31 callbacks suppressed
[  255.466917][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.482334][    C0] buffer_io_error: 30 callbacks suppressed
[  255.482348][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  255.488409][ T5810] usb 4-1: config 0 interface 0 altsetting 149 endpoint 0x81 has an invalid bInterval 24, changing to 8
[  255.519169][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.528396][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  255.531037][ T5810] usb 4-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  255.549940][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.561633][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.570946][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  255.579950][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.589200][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  255.597858][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.607064][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  255.616610][ T5810] usb 4-1: config 0 interface 0 has no altsetting 0
[  255.623265][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.623299][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  255.641581][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.645240][ T5810] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  255.650823][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  255.650911][ T9773] ldm_validate_partition_table(): Disk read failed.
[  255.660096][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.683336][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.692569][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  255.700667][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.709917][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  255.719211][ T5810] usb 4-1: config 0 descriptor??
[  255.730080][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  255.741083][ T9773] Dev loop6: unable to read RDB block 0
[  255.754925][ T9773]  loop6: unable to read partition table
[  255.761169][ T9773] loop6: partition table beyond EOD, truncated
[  255.784002][ T9773] loop_reread_partitions: partition scan of loop6 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  256.166332][ T5810] lenovo 0003:17EF:6067.0011: unknown global tag 0xd
[  256.173098][ T5810] lenovo 0003:17EF:6067.0011: item 0 4 1 13 parsing failed
[  256.181054][ T5810] lenovo 0003:17EF:6067.0011: hid_parse failed
[  256.188633][ T5810] lenovo: probe of 0003:17EF:6067.0011 failed with error -22
[  256.394716][ T7856] usb 4-1: USB disconnect, device number 16
[  257.061421][ T9794] loop4: detected capacity change from 0 to 512
[  257.108467][ T9794] EXT4-fs (loop4): 1 orphan inode deleted
[  257.116036][ T9794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.137173][ T9794] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.146087][ T1134] __quota_error: 4 callbacks suppressed
[  257.146101][ T1134] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  257.181526][   T28] audit: type=1800 audit(2000000020.210:77): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1297" name="bus" dev="loop4" ino=16 res=0 errno=0
[  257.182903][ T1134] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1
[  257.291148][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.307022][ T1134] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  257.327364][ T1134] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1
[  257.510872][ T9806] loop3: detected capacity change from 0 to 4096
[  257.529660][ T9806] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  257.683620][   T28] audit: type=1800 audit(2000000020.710:78): pid=9806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1302" name="file1" dev="loop3" ino=30 res=0 errno=0
[  257.752997][ T3563] ntfs3: loop3: ino=1e, ntfs3_write_inode failed, -22.
[  258.263516][ T9810] loop4: detected capacity change from 0 to 32768
[  258.295069][ T9810] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  258.359625][ T9810] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  258.413353][ T9810] BTRFS info (device loop4): setting nodatasum
[  258.442974][ T9810] BTRFS info (device loop4): max_inline at 0
[  258.458387][ T9810] BTRFS info (device loop4): using free space tree
[  258.585302][ T9810] BTRFS info (device loop4): enabling ssd optimizations
[  258.619938][ T9810] BTRFS info (device loop4): auto enabling async discard
[  258.647015][ T7856] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  258.857557][ T7856] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  258.870560][ T8043] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  258.896307][ T7856] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  258.937128][ T7856] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  258.981185][ T7856] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  259.011121][ T7856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.026358][ T7856] usb 3-1: Product: syz
[  259.049327][ T7856] usb 3-1: Manufacturer: syz
[  259.054387][ T7856] usb 3-1: SerialNumber: syz
[  259.282243][ T5761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (5761)
[  259.315723][ T9817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  259.346695][ T9817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  259.406836][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  259.413195][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  259.693507][   T28] audit: type=1326 audit(2000000022.720:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a07f9ce59 code=0x7ffc0000
[  259.727437][   T28] audit: type=1326 audit(2000000022.720:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a07f9ce59 code=0x7ffc0000
[  259.776485][   T28] audit: type=1326 audit(2000000022.750:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2a07f9ce59 code=0x7ffc0000
[  259.805579][   T28] audit: type=1326 audit(2000000022.750:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a07f9cbc2 code=0x7ffc0000
[  259.844140][   T28] audit: type=1326 audit(2000000022.750:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a07f5d68e code=0x7ffc0000
[  259.868608][   T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  259.879645][   T28] audit: type=1326 audit(2000000022.750:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.0.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2a07f9cc87 code=0x7ffc0000
[  259.906430][ T5810] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  259.917179][ T9866] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  260.006671][ T9817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  260.014112][ T9817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  260.100490][   T27] usb 5-1: Using ep0 maxpacket: 16
[  260.107817][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short
[  260.115770][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.126927][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.137174][   T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  260.150559][ T5810] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  260.162556][   T27] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  260.172013][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.183653][   T27] usb 5-1: config 0 descriptor??
[  260.189273][ T5810] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  260.199615][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.207791][ T5810] usb 4-1: Product: syz
[  260.213817][ T5810] usb 4-1: Manufacturer: syz
[  260.219721][ T5810] usb 4-1: SerialNumber: syz
[  260.233065][ T7856] cdc_ncm 3-1:1.0: failed to get mac address
[  260.247725][ T7856] cdc_ncm 3-1:1.0: bind() failure
[  260.262244][ T7856] cdc_ncm: probe of 3-1:1.1 failed with error -71
[  260.269802][ T7856] cdc_mbim: probe of 3-1:1.1 failed with error -71
[  260.280015][ T7856] usbtest: probe of 3-1:1.1 failed with error -71
[  260.291783][ T7856] usb 3-1: USB disconnect, device number 13
[  260.444559][ T5810] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  260.625666][   T27] microsoft 0003:045E:07DA.0012: No inputs registered, leaving
[  260.635600][   T27] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  260.656376][ T5810] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  260.664946][   T27] microsoft 0003:045E:07DA.0012: no inputs found
[  260.673001][ T5810] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  260.681794][   T27] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway
[  260.874555][ T7856] usb 5-1: USB disconnect, device number 5
[  261.063626][ T5810] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  261.082366][ T5810] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  261.135341][ T9884] netlink: 'syz.2.1327': attribute type 4 has an invalid length.
[  261.144152][ T9884] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1327'.
[  261.264195][ T5810] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  261.311797][ T5810] usb 4-1: USB disconnect, device number 17
[  261.361589][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  261.756406][ T7856] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  261.942845][ T7856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  261.954741][ T7856] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  261.965236][ T7856] usb 5-1: config 1 has no interface number 0
[  261.973359][ T7856] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  261.995869][ T7856] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  262.023867][ T7856] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  262.040896][ T7856] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  262.052808][ T7856] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  262.072032][ T7856] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  262.081877][ T7856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.090065][ T7856] usb 5-1: Product: syz
[  262.094570][ T7856] usb 5-1: Manufacturer: syz
[  262.099258][ T7856] usb 5-1: SerialNumber: syz
[  262.117194][ T9894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  262.245605][ T9904] loop2: detected capacity change from 0 to 4096
[  262.285195][ T9904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.286462][    T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  262.321377][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  262.321393][   T28] audit: type=1800 audit(2000000025.350:95): pid=9904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1337" name="file1" dev="loop2" ino=15 res=0 errno=0
[  262.360255][ T9904] EXT4-fs (loop2): shut down requested (1)
[  262.365414][ T9894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  262.436069][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.574230][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.595865][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.616127][    T8] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  262.621100][ T9894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  262.625558][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.647579][    T8] usb 4-1: config 0 descriptor??
[  262.865475][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  262.871867][    T8] usbhid: probe of 4-1:0.0 failed with error -71
[  262.886325][    T8] usb 4-1: USB disconnect, device number 18
[  263.053989][ T9894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  263.062927][ T7856] cdc_ncm 5-1:1.1: bind() failure
[  263.291504][ T5810] usb 5-1: USB disconnect, device number 6
[  263.386325][ T5760] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  263.589167][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.601365][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.611303][ T5760] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  263.620483][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.631181][ T5760] usb 4-1: config 0 descriptor??
[  263.916359][ T9920] loop6: detected capacity change from 0 to 7
[  263.957096][    C0] blk_print_req_error: 11 callbacks suppressed
[  263.957117][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  263.972711][    C0] buffer_io_error: 10 callbacks suppressed
[  263.972725][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  263.990249][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.003452][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.012703][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  264.020954][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.030185][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  264.045231][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.054486][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  264.064645][ T5760] hid (null): report_id 0 is invalid
[  264.072052][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.081319][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  264.085311][ T5760] steelseries 0003:1038:12B6.0013: report_id 0 is invalid
[  264.100750][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.110010][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  264.118150][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.125128][ T5760] steelseries 0003:1038:12B6.0013: item 0 0 1 8 parsing failed
[  264.127396][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  264.135960][ T5760] steelseries: probe of 0003:1038:12B6.0013 failed with error -22
[  264.150956][ T9920] ldm_validate_partition_table(): Disk read failed.
[  264.162428][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.171664][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  264.180120][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.189382][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  264.199430][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  264.208411][ T9920] Dev loop6: unable to read RDB block 0
[  264.219933][ T9920]  loop6: unable to read partition table
[  264.225996][ T9920] loop6: partition table beyond EOD, truncated
[  264.250574][ T9920] loop_reread_partitions: partition scan of loop6 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  264.317514][ T5141] ldm_validate_partition_table(): Disk read failed.
[  264.325399][ T5760] usb 4-1: USB disconnect, device number 19
[  264.339499][ T9918] loop2: detected capacity change from 0 to 32768
[  264.347545][ T5141] Dev loop6: unable to read RDB block 0
[  264.355509][ T5141]  loop6: unable to read partition table
[  264.361877][ T5141] loop6: partition table beyond EOD, truncated
[  264.363034][ T9918] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  264.412900][ T9918] XFS (loop2): Ending clean mount
[  264.421484][ T9918] XFS (loop2): Quotacheck needed: Please wait.
[  264.493217][ T9918] XFS (loop2): Quotacheck: Done.
[  264.655585][ T9933] loop4: detected capacity change from 0 to 4096
[  264.663309][ T9933] EXT4-fs: Ignoring removed mblk_io_submit option
[  264.712935][ T9933] EXT4-fs (loop4): Test dummy encryption mode enabled
[  264.749014][ T9933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.888531][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.945914][ T5773] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  265.650473][ T9947] netlink: 'syz.4.1349': attribute type 21 has an invalid length.
[  265.666389][ T9947] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1349'.
[  265.675561][ T9947] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1349'.
[  265.816750][ T9953] netlink: 'syz.4.1353': attribute type 10 has an invalid length.
[  265.825737][ T9953] syz_tun: entered promiscuous mode
[  265.859483][ T9953] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  266.047671][ T9957] loop6: detected capacity change from 0 to 7
[  266.059456][ T5761] ldm_validate_partition_table(): Disk read failed.
[  266.083921][ T5761] Dev loop6: unable to read RDB block 0
[  266.108731][ T5761]  loop6: unable to read partition table
[  266.135104][ T9959] netlink: 'syz.0.1365': attribute type 10 has an invalid length.
[  266.138000][ T5761] loop6: partition table beyond EOD, truncated
[  266.167199][ T9957] ldm_validate_partition_table(): Disk read failed.
[  266.177285][ T9959] syz_tun: entered promiscuous mode
[  266.190798][ T9959] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  266.193059][ T9957] Dev loop6: unable to read RDB block 0
[  266.239727][ T9957]  loop6: unable to read partition table
[  266.258945][ T9957] loop6: partition table beyond EOD, truncated
[  266.282511][ T9957] loop_reread_partitions: partition scan of loop6 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  266.495876][ T9964] loop2: detected capacity change from 0 to 2048
[  266.584147][ T9964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.729507][ T9964] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  266.795769][ T9964] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  266.846712][ T9964] EXT4-fs (loop2): This should not happen!! Data will be lost
[  266.846712][ T9964] 
[  266.860965][ T9964] EXT4-fs (loop2): Total free blocks count 0
[  266.872569][ T9964] EXT4-fs (loop2): Free/Dirty block details
[  266.879043][ T9964] EXT4-fs (loop2): free_blocks=2415919504
[  266.885047][ T9964] EXT4-fs (loop2): dirty_blocks=48
[  266.894924][ T9964] EXT4-fs (loop2): Block reservation details
[  266.902823][ T9964] EXT4-fs (loop2): i_reserved_data_blocks=3
[  267.022006][ T3548] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[  267.462704][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'.
[  267.492183][ T9986] loop3: detected capacity change from 0 to 16
[  267.540834][ T9986] erofs: (device loop3): mounted with root inode @ nid 36.
[  267.579723][ T9986] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 72 of nid 36
[  267.664230][ T9993] loop2: detected capacity change from 0 to 1024
[  267.700040][ T9993] EXT4-fs: Ignoring removed nomblk_io_submit option
[  267.724989][ T9993] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  267.767866][ T9993] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  267.791186][ T9993] System zones: 0-1, 3-36
[  267.815285][ T9993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.969212][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.226727][ T7856] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  268.276298][    T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  268.442881][ T7856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  268.463414][    T8] usb 4-1: Using ep0 maxpacket: 32
[  268.468724][ T7856] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  268.488330][    T8] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  268.496680][    T8] usb 4-1: config 0 has no interface number 0
[  268.505981][ T7856] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  268.515963][ T7856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.524658][    T8] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  268.534031][ T7856] usb 5-1: Product: syz
[  268.540228][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.548631][ T7856] usb 5-1: Manufacturer: syz
[  268.553263][ T7856] usb 5-1: SerialNumber: syz
[  268.558002][    T8] usb 4-1: Product: syz
[  268.563617][    T8] usb 4-1: Manufacturer: syz
[  268.568541][    T8] usb 4-1: SerialNumber: syz
[  268.595063][    T8] usb 4-1: config 0 descriptor??
[  268.610117][    T8] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  268.821159][    T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  268.851058][    T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  268.997936][ T7856] usb 5-1: cannot find UAC_HEADER
[  269.030373][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.041561][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.044442][ T7856] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  269.083361][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  269.207847][ T5760] usb 5-1: USB disconnect, device number 7
[  269.246325][   T27] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  269.260481][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  269.260818][ T5810] usb 4-1: USB disconnect, device number 20
[  269.285537][ T5810] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  269.301541][ T5810] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  269.316813][ T5810] quatech2 4-1:0.51: device disconnected
[  269.429232][   T27] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  269.438434][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.451057][   T27] usb 1-1: config 0 descriptor??
[  269.461156][   T27] gspca_main: sunplus-2.14.0 probing 055f:c420
[  270.270318][   T27] gspca_sunplus: reg_w_riv err -71
[  270.275584][   T27] sunplus: probe of 1-1:0.0 failed with error -71
[  270.308776][   T27] usb 1-1: USB disconnect, device number 19
[  270.505647][T10051] loop3: detected capacity change from 0 to 4096
[  271.357911][T10064] loop3: detected capacity change from 0 to 32768
[  271.380932][T10064] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  271.389344][T10064] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  271.500300][T10064] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  271.510203][    T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  271.517395][    T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  271.588752][    T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 71ms
[  271.604944][    T8] gfs2: fsid=syz:syz.0: jid=0: Done
[  271.621003][T10064] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  271.846521][ T7856] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  272.026567][ T7856] usb 5-1: Using ep0 maxpacket: 16
[  272.041680][ T7856] usb 5-1: too many configurations: 123, using maximum allowed: 8
[  272.064709][ T7856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.082380][ T7856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.094764][ T7856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.125004][ T7856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.161868][ T7856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.184225][ T7856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.196100][ T7856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.217341][ T7856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.243349][ T7856] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  272.269633][T10081] trusted_key: syz.0.1405 sent an empty control message without MSG_MORE.
[  272.286076][T10069] loop2: detected capacity change from 0 to 40427
[  272.292782][ T7856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  272.302153][ T7856] usb 5-1: SerialNumber: syz
[  272.309192][ T7856] usb 5-1: config 0 descriptor??
[  272.317138][T10069] F2FS-fs (loop2): invalid crc value
[  272.322514][ T7856] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22
[  272.444059][T10069] F2FS-fs (loop2): Found nat_bits in checkpoint
[  272.596640][T10069] F2FS-fs (loop2): Start checkpoint disabled!
[  272.638938][T10069] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  272.712789][ T5126] bcm5974 5-1:0.0: could not read from device
[  272.713010][    T8] usb 5-1: USB disconnect, device number 8
[  272.726937][ T5126] bcm5974 5-1:0.0: could not read from device
[  272.767760][ T6006] bcm5974 5-1:0.0: could not read from device
[  272.784551][ T5126] bcm5974 5-1:0.0: could not read from device
[  273.075410][ T3469] kworker/u4:10: attempt to access beyond end of device
[  273.075410][ T3469] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  273.100228][ T3469] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  273.111615][ T3469] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  273.121983][ T3469] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  273.356383][   T27] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  273.562535][   T27] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  273.574043][T10102] pim6reg1: entered promiscuous mode
[  273.582983][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.592038][T10102] pim6reg1: entered allmulticast mode
[  273.613332][   T27] usb 4-1: config 0 descriptor??
[  273.628783][   T27] cp210x 4-1:0.0: cp210x converter detected
[  273.883816][T10106] loop2: detected capacity change from 0 to 1024
[  273.956267][T10106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  273.987098][T10106] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.021931][T10098] loop4: detected capacity change from 0 to 40427
[  274.043447][   T27] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  274.053227][   T28] audit: type=1800 audit(2000000037.070:96): pid=10106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1416" name="file1" dev="loop2" ino=15 res=0 errno=0
[  274.062550][T10106] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.1416: lblock 0 mapped to illegal pblock 0 (length 1)
[  274.074555][T10098] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(263168)
[  274.100633][T10106] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  274.113546][T10106] EXT4-fs (loop2): This should not happen!! Data will be lost
[  274.113546][T10106] 
[  274.144578][T10098] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  274.165499][T10098] F2FS-fs (loop4): invalid crc value
[  274.208208][T10098] F2FS-fs (loop4): Found nat_bits in checkpoint
[  274.319566][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  274.336870][   T27] usb 4-1: cp210x converter now attached to ttyUSB0
[  274.400566][T10098] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  274.408615][T10098] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  274.460129][T10098] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SIT and SSA
[  274.486304][T10098] F2FS-fs (loop4): Stopped filesystem due to reason: 4
[  274.592660][    T8] usb 4-1: USB disconnect, device number 21
[  274.637637][    T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  274.711159][    T8] cp210x 4-1:0.0: device disconnected
[  275.026410][ T1195] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  275.185683][T10120] loop4: detected capacity change from 0 to 1024
[  275.244812][ T1195] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  275.285964][ T1195] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  275.300077][ T1195] usb 1-1: config 1 has no interface number 0
[  275.309233][ T1195] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  275.339969][ T1195] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  275.347979][T10120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  275.352385][ T1195] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  275.382599][ T1195] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  275.396773][ T1195] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  275.410984][T10120] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.423878][ T1195] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  275.436242][ T1195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.444357][ T1195] usb 1-1: Product: syz
[  275.448749][ T1195] usb 1-1: Manufacturer: syz
[  275.453389][ T1195] usb 1-1: SerialNumber: syz
[  275.462011][T10118] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  275.483098][   T28] audit: type=1800 audit(2000000038.510:97): pid=10120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1426" name="file1" dev="loop4" ino=15 res=0 errno=0
[  275.489885][T10120] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.1426: lblock 0 mapped to illegal pblock 0 (length 1)
[  275.526755][T10120] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  275.545371][T10120] EXT4-fs (loop4): This should not happen!! Data will be lost
[  275.545371][T10120] 
[  275.683866][T10118] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  275.700702][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  275.919530][T10118] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  276.336312][ T5760] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  276.345078][T10118] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  276.353641][ T1195] cdc_ncm 1-1:1.1: bind() failure
[  276.546256][ T5760] usb 3-1: Using ep0 maxpacket: 16
[  276.552111][ T5760] usb 3-1: too many configurations: 123, using maximum allowed: 8
[  276.565493][ T5760] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.577565][ T5760] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.592979][ T5760] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.600916][ T1195] usb 1-1: USB disconnect, device number 20
[  276.606321][ T5760] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.626810][ T5760] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.639776][ T5760] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.651113][ T5760] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.662534][ T5760] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.673956][ T5760] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  276.683395][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  276.691599][ T5760] usb 3-1: SerialNumber: syz
[  276.699527][ T5760] usb 3-1: config 0 descriptor??
[  276.708900][ T5760] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23
[  276.927667][ T5126] bcm5974 3-1:0.0: could not read from device
[  276.934983][ T5126] bcm5974 3-1:0.0: could not read from device
[  276.946269][ T5760] usb 3-1: USB disconnect, device number 14
[  276.946815][ T5126] bcm5974 3-1:0.0: could not read from device
[  277.856345][ T5760] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  278.067793][ T5760] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  278.086995][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.133083][ T5760] usb 3-1: config 0 descriptor??
[  278.148137][ T5760] cp210x 3-1:0.0: cp210x converter detected
[  278.192250][T10154] loop3: detected capacity change from 0 to 1024
[  278.223631][T10156] loop4: detected capacity change from 0 to 512
[  278.242914][T10154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  278.303164][T10156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.318451][T10154] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  278.348422][T10159] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  278.382286][T10156] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  278.458115][   T28] audit: type=1800 audit(2000000041.490:98): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1431" name="file1" dev="loop3" ino=15 res=0 errno=0
[  278.466788][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.488804][T10153] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.1431: lblock 0 mapped to illegal pblock 0 (length 1)
[  278.546612][T10154] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.1431: lblock 0 mapped to illegal pblock 0 (length 1)
[  278.605302][ T5760] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  278.627170][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  278.825223][ T5760] usb 3-1: cp210x converter now attached to ttyUSB0
[  279.071400][ T5760] usb 3-1: USB disconnect, device number 15
[  279.092772][ T5760] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  279.119286][ T5760] cp210x 3-1:0.0: device disconnected
[  279.683462][T10187] loop4: detected capacity change from 0 to 1024
[  279.791609][T10187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  279.805118][T10187] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.840913][   T28] audit: type=1800 audit(2000000042.860:99): pid=10187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1446" name="file1" dev="loop4" ino=15 res=0 errno=0
[  279.841678][T10187] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.1446: lblock 0 mapped to illegal pblock 0 (length 1)
[  279.882494][T10187] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  279.921271][T10187] EXT4-fs (loop4): This should not happen!! Data will be lost
[  279.921271][T10187] 
[  280.112959][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  280.337904][T10197] loop4: detected capacity change from 0 to 512
[  280.380947][T10197] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  280.409198][T10197] EXT4-fs (loop4): 1 truncate cleaned up
[  280.426790][T10197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.474795][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.707386][T10195] loop3: detected capacity change from 0 to 32768
[  280.796923][T10195] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  280.892030][T10195] XFS (loop3): Ending clean mount
[  280.904686][T10195] XFS (loop3): Quotacheck needed: Please wait.
[  280.946364][ T5810] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  281.051646][T10195] XFS (loop3): Quotacheck: Done.
[  281.147570][ T5810] usb 5-1: Using ep0 maxpacket: 32
[  281.186329][ T5810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  281.232145][ T5810] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  281.274402][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  281.308812][ T5810] usb 5-1: Product: syz
[  281.319865][ T5810] usb 5-1: Manufacturer: syz
[  281.340500][ T5810] usb 5-1: SerialNumber: syz
[  281.351153][ T5810] usb 5-1: config 0 descriptor??
[  281.366612][T10203] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  281.375161][ T5810] hub 5-1:0.0: bad descriptor, ignoring hub
[  281.384682][ T5810] hub: probe of 5-1:0.0 failed with error -5
[  281.387561][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  281.837587][T10230] loop2: detected capacity change from 0 to 16
[  282.066664][ T1195] usb 5-1: USB disconnect, device number 9
[  282.256339][ T1195] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  282.472230][ T1195] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  282.498682][ T1195] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  282.517281][ T1195] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  282.532241][ T1195] usb 5-1: Product: syz
[  282.542968][ T1195] usb 5-1: Manufacturer: syz
[  282.548730][ T1195] usb 5-1: SerialNumber: syz
[  282.565356][ T1195] usb 5-1: config 0 descriptor??
[  282.571582][T10223] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  282.593205][ T1195] hub 5-1:0.0: bad descriptor, ignoring hub
[  282.600682][ T1195] hub: probe of 5-1:0.0 failed with error -5
[  282.926253][T10240] loop3: detected capacity change from 0 to 40427
[  282.942973][T10240] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  282.961987][T10240] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  282.973554][ T7856] usb 5-1: USB disconnect, device number 10
[  282.980794][T10240] F2FS-fs (loop3): invalid crc value
[  283.005975][T10240] F2FS-fs (loop3): Found nat_bits in checkpoint
[  283.084405][T10240] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  283.092348][T10240] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  283.211822][ T1134] kworker/u4:7: attempt to access beyond end of device
[  283.211822][ T1134] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  283.226106][ T1134] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  283.630463][T10254] loop3: detected capacity change from 0 to 1024
[  283.739273][T10254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  283.836478][T10254] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.932098][T10254] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm syz.3.1466: lblock 8 mapped to illegal pblock 8 (length 8)
[  283.996645][T10254] EXT4-fs error (device loop3): ext4_ext_remove_space:2940: inode #15: comm syz.3.1466: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  284.039825][T10254] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.1466: lblock 0 mapped to illegal pblock 0 (length 1)
[  284.093393][T10254] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  284.126415][T10254] EXT4-fs (loop3): This should not happen!! Data will be lost
[  284.126415][T10254] 
[  284.193490][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  284.391167][T10251] loop4: detected capacity change from 0 to 32768
[  284.435836][T10251] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  284.490409][T10251] XFS (loop4): Ending clean mount
[  284.516950][T10251] XFS (loop4): Quotacheck needed: Please wait.
[  284.619854][T10251] XFS (loop4): Quotacheck: Done.
[  284.800023][ T8043] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  285.141053][T10286] loop3: detected capacity change from 0 to 512
[  285.205179][T10286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.220010][T10286] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.325048][T10286] EXT4-fs error (device loop3): ext4_get_first_dir_block:3595: inode #12: comm syz.3.1474: directory missing '.'
[  285.344965][T10286] EXT4-fs (loop3): Remounting filesystem read-only
[  285.406248][    T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  285.406862][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.594844][T10298] loop3: detected capacity change from 0 to 1024
[  285.616609][    T8] usb 1-1: Using ep0 maxpacket: 32
[  285.634247][    T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  285.657429][    T8] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  285.686318][    T8] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  285.694589][    T8] usb 1-1: Product: syz
[  285.709033][    T8] usb 1-1: Manufacturer: syz
[  285.713679][    T8] usb 1-1: SerialNumber: syz
[  285.745150][    T8] usb 1-1: config 0 descriptor??
[  285.759331][T10298] hfsplus: request for non-existent node 33554434 in B*Tree
[  285.767078][T10282] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  285.788284][    T8] hub 1-1:0.0: bad descriptor, ignoring hub
[  285.794337][T10298] hfsplus: request for non-existent node 33554434 in B*Tree
[  285.807694][T10287] loop4: detected capacity change from 0 to 40427
[  285.817992][    T8] hub: probe of 1-1:0.0 failed with error -5
[  285.833955][T10298] hfsplus: request for non-existent node 33554434 in B*Tree
[  285.847825][T10287] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  285.857150][T10287] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  285.866033][T10298] hfsplus: request for non-existent node 33554434 in B*Tree
[  285.888942][T10287] F2FS-fs (loop4): invalid crc value
[  285.916501][T10287] F2FS-fs (loop4): Found nat_bits in checkpoint
[  285.972955][T10287] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  285.980520][T10287] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  286.016931][T10297] hfsplus: request for non-existent node 33554434 in B*Tree
[  286.036662][T10297] hfsplus: request for non-existent node 33554434 in B*Tree
[  286.088929][   T12] hfsplus: request for non-existent node 33554434 in B*Tree
[  286.117286][   T12] hfsplus: request for non-existent node 33554434 in B*Tree
[  286.297865][T10310] loop3: detected capacity change from 0 to 4096
[  286.311478][T10310] EXT4-fs (loop3): Test dummy encryption mode enabled
[  286.321734][T10310] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  286.330550][ T1134] kworker/u4:7: attempt to access beyond end of device
[  286.330550][ T1134] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  286.347531][T10310] System zones: 0-5
[  286.353967][T10310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.377872][ T1134] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  286.454394][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.530925][    T8] usb 1-1: USB disconnect, device number 21
[  286.736292][    T8] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  287.058384][T10321] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1493'.
[  287.092819][T10321] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1493'.
[  287.192648][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  287.235901][    T8] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  287.266371][    T8] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  287.274648][    T8] usb 1-1: Product: syz
[  287.283389][    T8] usb 1-1: Manufacturer: syz
[  287.298330][    T8] usb 1-1: SerialNumber: syz
[  287.311680][    T8] usb 1-1: config 0 descriptor??
[  287.340617][T10305] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  287.349911][    T8] hub 1-1:0.0: bad descriptor, ignoring hub
[  287.359837][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.370689][    T8] hub: probe of 1-1:0.0 failed with error -5
[  287.386544][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.434672][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.457849][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.468114][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.478976][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.488967][T10329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.499623][T10329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.510760][T10329] batman_adv: batadv0: Adding interface: ipvlan2
[  287.519842][T10329] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.546293][T10329] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  287.674144][T10334] Invalid ELF header magic: != ELF
[  287.707104][ T5760] usb 1-1: USB disconnect, device number 22
[  287.825044][T10336] loop4: detected capacity change from 0 to 8192
[  288.186237][ T5760] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  288.221016][T10351] loop2: detected capacity change from 0 to 4096
[  288.228712][T10351] EXT4-fs: Ignoring removed mblk_io_submit option
[  288.248636][T10349] loop4: detected capacity change from 0 to 8192
[  288.270876][T10351] EXT4-fs (loop2): Test dummy encryption mode enabled
[  288.305870][T10351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.386455][ T5760] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  288.424112][ T5760] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  288.469803][ T5760] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  288.497414][T10357] loop7: detected capacity change from 0 to 7
[  288.510718][ T5763]  loop7: [POWERTEC]
[  288.524141][ T5760] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  288.544783][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.553187][T10357]  loop7: [POWERTEC]
[  288.601820][ T5760] usb 4-1: Product: syz
[  288.606037][ T5760] usb 4-1: Manufacturer: syz
[  288.626488][ T5760] usb 4-1: SerialNumber: syz
[  288.639768][ T5760] usblp0: Disabling reads from problematic bidirectional printer
[  288.759734][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.883310][ T5760] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004
[  289.007062][T10370] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1505'.
[  289.141255][ T5760] usb 4-1: USB disconnect, device number 22
[  289.321780][T10378] loop4: detected capacity change from 0 to 8192
[  289.355102][T10338] usblp0: removed
[  289.715905][T10384] loop4: detected capacity change from 0 to 32768
[  289.740180][T10384] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  289.746435][ T5760] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  289.751324][T10384] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  289.767351][T10384] BTRFS info (device loop4): setting nodatasum
[  289.775575][T10384] BTRFS info (device loop4): force zlib compression, level 3
[  289.784552][T10384] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  289.794428][T10384] BTRFS info (device loop4): use lzo compression, level 0
[  289.802365][T10384] BTRFS info (device loop4): turning on flush-on-commit
[  289.810921][T10384] BTRFS info (device loop4): enabling auto defrag
[  289.818083][T10384] BTRFS info (device loop4): max_inline at 4096
[  289.825312][T10384] BTRFS info (device loop4): using free space tree
[  289.892093][T10384] BTRFS info (device loop4): enabling ssd optimizations
[  289.946652][ T5760] usb 3-1: Using ep0 maxpacket: 8
[  290.063932][ T5760] usb 3-1: unable to get BOS descriptor or descriptor too short
[  290.082612][ T5760] usb 3-1: unable to read config index 0 descriptor/start: -71
[  290.101538][ T5760] usb 3-1: can't read configurations, error -71
[  290.127874][ T8043] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  290.263846][T10406] loop3: detected capacity change from 0 to 2048
[  290.338878][ T5761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (5761)
[  290.375668][T10406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.398052][T10406] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.686003][T10415] loop4: detected capacity change from 0 to 256
[  290.689000][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.886119][T10415] FAT-fs (loop4): Directory bread(block 64) failed
[  290.896339][T10415] FAT-fs (loop4): Directory bread(block 65) failed
[  290.915192][T10415] FAT-fs (loop4): Directory bread(block 66) failed
[  290.956242][T10415] FAT-fs (loop4): Directory bread(block 67) failed
[  290.973235][T10415] FAT-fs (loop4): Directory bread(block 68) failed
[  291.016446][T10415] FAT-fs (loop4): Directory bread(block 69) failed
[  291.023148][T10415] FAT-fs (loop4): Directory bread(block 70) failed
[  291.052246][T10415] FAT-fs (loop4): Directory bread(block 71) failed
[  291.072603][T10415] FAT-fs (loop4): Directory bread(block 72) failed
[  291.088897][T10415] FAT-fs (loop4): Directory bread(block 73) failed
[  291.675632][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'.
[  291.691781][T10439] netlink: 'syz.4.1529': attribute type 9 has an invalid length.
[  291.701950][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'.
[  291.728905][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'.
[  291.738217][T10439] netlink: 'syz.4.1529': attribute type 9 has an invalid length.
[  291.745967][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'.
[  292.309101][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'.
[  292.384255][T10469] loop3: detected capacity change from 0 to 512
[  292.470856][T10469] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1543: couldn't read orphan inode 26 (err -116)
[  292.485316][T10469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.499984][T10469] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.528421][T10469] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #3: comm syz.3.1543: corrupted inode contents
[  292.543953][T10469] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #3: comm syz.3.1543: mark_inode_dirty error
[  292.557709][T10469] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1543: bg 0: block 64: padding at end of block bitmap is not set
[  292.573113][T10469] Quota error (device loop3): write_blk: dquota write failed
[  292.582269][T10469] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  292.592750][T10469] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1543: Failed to acquire dquot type 0
[  292.617172][T10477] Quota error (device loop3): write_blk: dquota write failed
[  292.624798][T10477] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  292.645856][T10477] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1543: Failed to acquire dquot type 0
[  292.712464][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.713561][T10481] loop4: detected capacity change from 0 to 1024
[  292.737110][T10481] EXT4-fs: Ignoring removed bh option
[  292.785077][T10481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.012346][ T8043] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.266402][T10505] syz.3.1555[10505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  293.266714][T10505] syz.3.1555[10505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  293.270329][T10503] macvlan1: entered promiscuous mode
[  293.301235][T10503] ipvlan0: entered promiscuous mode
[  293.318633][T10503] ipvlan0: left promiscuous mode
[  293.327941][T10503] macvlan1: left promiscuous mode
[  293.723088][T10522] loop5: detected capacity change from 0 to 7
[  293.749573][T10522] Dev loop5: unable to read RDB block 7
[  293.756363][T10524] 9pnet: p9_errstr2errno: server reported unknown error 0177777777777777777777700000000000000000004�
[  293.762647][T10522]  loop5: unable to read partition table
[  293.792460][T10522] loop5: partition table beyond EOD, truncated
[  293.812972][T10522] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  293.865483][ T5810] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  293.904370][ T5810] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  293.967043][T10532] loop3: detected capacity change from 0 to 16
[  294.004260][T10532] erofs: (device loop3): mounted with root inode @ nid 36.
[  294.179884][T10536] input: syz0 as /devices/virtual/input/input25
[  294.624914][T10552] loop4: detected capacity change from 0 to 128
[  294.635068][T10552] FAT-fs (loop4): Directory bread(block 414) failed
[  294.642027][T10552] FAT-fs (loop4): Directory bread(block 415) failed
[  294.649426][T10552] FAT-fs (loop4): Directory bread(block 416) failed
[  294.656063][T10552] FAT-fs (loop4): Directory bread(block 417) failed
[  294.662816][T10552] FAT-fs (loop4): Directory bread(block 418) failed
[  294.669590][T10552] FAT-fs (loop4): Directory bread(block 419) failed
[  294.676989][T10552] FAT-fs (loop4): Directory bread(block 420) failed
[  294.683677][T10552] FAT-fs (loop4): Directory bread(block 421) failed
[  294.713816][T10552] FAT-fs (loop4): Directory bread(block 414) failed
[  294.720637][T10552] FAT-fs (loop4): Directory bread(block 415) failed
[  294.838817][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'.
[  295.134386][T10556] loop2: detected capacity change from 0 to 40427
[  295.148388][T10556] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  295.155391][T10556] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  295.171401][T10556] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff
[  295.183577][T10556] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8
[  295.194039][T10556] F2FS-fs (loop2): invalid crc value
[  295.199632][    T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  295.213104][T10556] F2FS-fs (loop2): Found nat_bits in checkpoint
[  295.310494][T10556] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  295.328878][T10556] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  295.398515][    T8] usb 5-1: Using ep0 maxpacket: 32
[  295.410648][   T28] audit: type=1800 audit(2000000058.440:100): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1578" name="file1" dev="loop2" ino=10 res=0 errno=0
[  295.439544][    T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  295.449030][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.457563][T10556] F2FS-fs (loop2): Stopped filesystem due to reason: 0
[  295.467252][    T8] usb 5-1: Product: syz
[  295.471459][    T8] usb 5-1: Manufacturer: syz
[  295.476071][    T8] usb 5-1: SerialNumber: syz
[  296.108700][    T8] usb 5-1: 1:1: cannot get freq (v2/v3): err -32
[  296.317702][    T8] usb 5-1: 1:1: cannot get freq (v2/v3): err -71
[  296.326902][    T8] usb 5-1: 2:1: cannot get freq (v2/v3): err -71
[  296.333578][    T8] usb 5-1: 2:1: cannot set freq 44100 (v2/v3): err -71
[  296.359461][    T8] usb 5-1: USB disconnect, device number 11
[  296.398853][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  296.555601][T10567] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  297.244001][T10585] loop4: detected capacity change from 0 to 4096
[  297.294334][T10588] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  297.352151][   T28] audit: type=1800 audit(2000000060.380:101): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1588" name="file1" dev="loop4" ino=15 res=0 errno=0
[  297.371370][T10580] loop2: detected capacity change from 0 to 32768
[  297.392448][T10580] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1587 (10580)
[  297.443209][T10580] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  297.477273][T10580] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  297.511037][T10580] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  297.549940][T10580] BTRFS info (device loop2): use zstd compression, level 3
[  297.586594][T10580] BTRFS info (device loop2): using free space tree
[  297.728451][T10580] BTRFS info (device loop2): enabling ssd optimizations
[  297.735645][T10580] BTRFS info (device loop2): auto enabling async discard
[  297.893026][ T5773] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  298.076793][ T5761] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (5761)
[  298.126320][    T8] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  298.146490][ T3064] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  298.328044][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.339090][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  298.350230][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.356244][ T3064] usb 5-1: Using ep0 maxpacket: 32
[  298.360055][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  298.372467][ T3064] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  298.378321][    T8] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  298.393983][ T3064] usb 5-1: config 0 interface 0 has no altsetting 0
[  298.398717][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.407767][ T3064] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  298.424735][ T3064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.425887][    T8] usb 1-1: config 0 descriptor??
[  298.441667][ T3064] usb 5-1: config 0 descriptor??
[  298.660171][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  298.674112][    T8] usbhid: probe of 1-1:0.0 failed with error -71
[  298.687156][    T8] usb 1-1: USB disconnect, device number 23
[  298.767640][ T5784] Bluetooth: hci4: command 0x1003 tx timeout
[  298.768008][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  298.883967][ T3064] corsair-psu 0003:1B1C:1C09.0015: unknown main item tag 0x0
[  298.891865][ T3064] corsair-psu 0003:1B1C:1C09.0015: unknown main item tag 0x0
[  298.899522][ T3064] corsair-psu 0003:1B1C:1C09.0015: unknown main item tag 0x0
[  298.907128][ T3064] corsair-psu 0003:1B1C:1C09.0015: unknown main item tag 0x0
[  298.914710][ T3064] corsair-psu 0003:1B1C:1C09.0015: unknown main item tag 0x0
[  298.931475][ T3064] corsair-psu 0003:1B1C:1C09.0015: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0
[  299.080252][T10613] corsair-psu 0003:1B1C:1C09.0015: pid 10613 passed too short report
[  299.091199][ T3064] corsair-psu 0003:1B1C:1C09.0015: unable to initialize device (-71)
[  299.100851][ T3064] corsair-psu: probe of 0003:1B1C:1C09.0015 failed with error -71
[  299.114585][ T3064] usb 5-1: USB disconnect, device number 12
[  299.186357][    T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  299.376355][    T8] usb 1-1: Using ep0 maxpacket: 32
[  299.389450][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  299.400412][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.412047][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.422240][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  299.435587][    T8] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  299.445009][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.461620][    T8] usb 1-1: config 0 descriptor??
[  299.627073][ T7856] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  299.758022][T10629] input: syz1 as /devices/virtual/input/input26
[  299.820707][ T7856] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  299.836711][ T7856] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  299.849190][T10631] loop3: detected capacity change from 0 to 512
[  299.875545][ T7856] usb 3-1: config 0 interface 0 has no altsetting 0
[  299.898156][ T7856] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  299.901265][T10631] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 3: comm syz.3.1602: lblock 0 mapped to illegal pblock 3 (length 1)
[  299.912982][ T7856] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  299.930871][    T8] betop 0003:20BC:5500.0016: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.0-1/input0
[  299.942025][ T7856] usb 3-1: Product: syz
[  299.946652][    T8] betop 0003:20BC:5500.0016: no inputs found
[  299.955747][ T7856] usb 3-1: Manufacturer: syz
[  299.960504][ T7856] usb 3-1: SerialNumber: syz
[  299.974531][ T7856] usb 3-1: config 0 descriptor??
[  299.986724][ T7856] hub 3-1:0.0: bad descriptor, ignoring hub
[  299.994340][ T7856] hub: probe of 3-1:0.0 failed with error -5
[  300.002686][T10631] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1602: error -117 reading directory block
[  300.014137][ T7856] usb 3-1: selecting invalid altsetting 0
[  300.045785][T10631] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  300.123143][T10631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.145187][ T7856] usb 1-1: USB disconnect, device number 24
[  300.247044][T10631] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 3: comm syz.3.1602: lblock 0 mapped to illegal pblock 3 (length 1)
[  300.286618][T10631] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1602: error -117 reading directory block
[  300.323155][T10631] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 3: comm syz.3.1602: lblock 0 mapped to illegal pblock 3 (length 1)
[  300.346235][T10631] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1602: error -117 reading directory block
[  300.389532][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.513768][T10635] loop4: detected capacity change from 0 to 40427
[  300.536917][T10635] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  300.544795][T10635] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  300.557334][T10635] F2FS-fs (loop4): invalid crc value
[  300.571138][T10635] F2FS-fs (loop4): Found nat_bits in checkpoint
[  300.647884][T10635] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  300.655101][T10635] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  300.712856][T10635] syz.4.1603: attempt to access beyond end of device
[  300.712856][T10635] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  300.752522][ T8043] syz-executor: attempt to access beyond end of device
[  300.752522][ T8043] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  300.776677][T10618] usb 3-1: reset high-speed USB device number 18 using dummy_hcd
[  300.791481][ T8043] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  300.801204][ T3548] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  300.811643][ T3548] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  301.187043][T10618] usb 3-1: failed to restore interface 0 altsetting 251 (error=-71)
[  301.227317][ T3064] usb 3-1: USB disconnect, device number 18
[  301.390377][T10643] loop3: detected capacity change from 0 to 32768
[  301.454176][T10643] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  301.504046][T10643] XFS (loop3): Ending clean mount
[  301.513873][T10643] XFS (loop3): Quotacheck needed: Please wait.
[  301.594813][T10643] XFS (loop3): Quotacheck: Done.
[  301.708320][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  302.424530][T10687] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  302.747462][T10697] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid'
[  302.747462][T10697] 
[  303.086297][ T7856] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  303.268503][ T7856] usb 4-1: unable to get BOS descriptor or descriptor too short
[  303.277331][ T7856] usb 4-1: config 16 has an invalid interface number: 102 but max is 0
[  303.285588][ T7856] usb 4-1: config 16 has no interface number 0
[  303.292135][ T7856] usb 4-1: config 16 interface 102 altsetting 7 endpoint 0xD has an invalid bInterval 127, changing to 10
[  303.303579][ T7856] usb 4-1: config 16 interface 102 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 8
[  303.313705][ T7856] usb 4-1: config 16 interface 102 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  303.328657][ T7856] usb 4-1: config 16 interface 102 has no altsetting 0
[  303.337598][ T7856] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice=dc.62
[  303.346810][ T7856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.354815][ T7856] usb 4-1: Product: syz
[  303.359076][ T7856] usb 4-1: Manufacturer: syz
[  303.363814][ T7856] usb 4-1: SerialNumber: syz
[  303.371041][T10700] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  303.623940][ T7856] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.102/input/input27
[  303.651665][ T5126] bcm5974 4-1:16.102: could not read from device
[  303.696432][ T5126] bcm5974 4-1:16.102: could not read from device
[  303.712204][ T7856] usb 4-1: USB disconnect, device number 23
[  304.035771][T10726] loop4: detected capacity change from 0 to 128
[  304.058293][T10726] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  304.091125][T10726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  304.101629][T10729] overlayfs: workdir and upperdir must reside under the same mount
[  304.533833][T10749] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  304.696248][ T7856] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  304.877680][ T7856] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  304.885884][ T7856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.896881][ T7856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.910192][ T7856] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  304.923163][ T7856] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  304.932423][ T7856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.942502][ T7856] usb 3-1: config 0 descriptor??
[  305.056493][    T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  305.246267][    T8] usb 4-1: Using ep0 maxpacket: 32
[  305.253471][    T8] usb 4-1: config 4 has an invalid interface number: 128 but max is 0
[  305.261869][    T8] usb 4-1: config 4 has no interface number 0
[  305.268133][    T8] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.279430][    T8] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.289579][    T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  305.298772][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.313701][    T8] hub 4-1:4.128: USB hub found
[  305.360951][ T7856] plantronics 0003:047F:FFFF.0017: unknown main item tag 0xd
[  305.372701][ T7856] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[  305.381146][ T1195] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  305.397092][ T7856] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  305.520851][    T8] hub 4-1:4.128: 2 ports detected
[  305.525980][    T8] hub 4-1:4.128: Using single TT (err -22)
[  305.567133][ T1195] usb 1-1: Using ep0 maxpacket: 16
[  305.583649][ T1195] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  305.613366][ T1195] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  305.623833][ T1195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.641151][ T1195] usb 1-1: config 0 descriptor??
[  305.680572][ T3064] usb 3-1: USB disconnect, device number 19
[  305.721829][    T8] hub 4-1:4.128: hub_hub_status failed (err = -71)
[  305.730867][    T8] hub 4-1:4.128: config failed, can't get hub status (err -71)
[  305.768494][    T8] usb 4-1: USB disconnect, device number 24
[  306.058623][ T1195] playstation 0003:054C:0BA0.0018: unknown global tag 0xe
[  306.066042][ T1195] playstation 0003:054C:0BA0.0018: item 0 4 1 14 parsing failed
[  306.074501][ T1195] playstation 0003:054C:0BA0.0018: Parse failed
[  306.080903][ T1195] playstation: probe of 0003:054C:0BA0.0018 failed with error -22
[  306.311622][T10765] loop2: detected capacity change from 0 to 1024
[  306.321076][ T1195] usb 1-1: USB disconnect, device number 25
[  306.380569][   T28] audit: type=1804 audit(2000000069.410:102): pid=10765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1655" name="/newroot/417/file1/file1" dev="loop2" ino=2 res=1 errno=0
[  306.536387][ T5810] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  306.542654][T10769] loop2: detected capacity change from 0 to 4096
[  306.588365][T10770] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  306.613520][ T5780] Bluetooth: hci0: command tx timeout
[  306.698150][   T28] audit: type=1800 audit(2000000069.730:103): pid=10769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1657" name="file1" dev="loop2" ino=15 res=0 errno=0
[  306.738145][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.757869][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.786262][ T5810] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  306.805610][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.831335][ T5810] usb 5-1: config 0 descriptor??
[  306.872231][T10767] loop3: detected capacity change from 0 to 32768
[  307.094400][ T5810] usbhid 5-1:0.0: can't add hid device: -71
[  307.106941][ T5810] usbhid: probe of 5-1:0.0 failed with error -71
[  307.130865][ T5810] usb 5-1: USB disconnect, device number 13
[  307.696256][ T5810] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  307.932931][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.943939][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.953820][ T5810] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  307.962887][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.972734][ T5810] usb 5-1: config 0 descriptor??
[  308.386532][ T5810] hid (null): report_id 0 is invalid
[  308.394114][ T5810] steelseries 0003:1038:12B6.0019: report_id 0 is invalid
[  308.401717][ T5810] steelseries 0003:1038:12B6.0019: item 0 0 1 8 parsing failed
[  308.410227][ T5810] steelseries: probe of 0003:1038:12B6.0019 failed with error -22
[  308.611579][ T1195] usb 5-1: USB disconnect, device number 14
[  309.189301][T10783] loop3: detected capacity change from 0 to 64
[  309.437597][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'.
[  309.476353][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  309.616243][ T7856] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  309.819669][ T7856] usb 5-1: unable to get BOS descriptor or descriptor too short
[  309.842325][ T7856] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  309.868499][ T7856] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  309.877733][ T7856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.885744][ T7856] usb 5-1: Product: syz
[  309.906219][ T7856] usb 5-1: Manufacturer: syz
[  309.910881][ T7856] usb 5-1: SerialNumber: syz
[  310.128712][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'.
[  310.184000][ T7856] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  310.384403][ T7856] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  310.398196][ T7856] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[  310.456395][    T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  310.652668][    T8] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  310.667308][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.675492][    T8] usb 3-1: Product: syz
[  310.694828][    T8] usb 3-1: Manufacturer: syz
[  310.704840][    T8] usb 3-1: SerialNumber: syz
[  310.797113][T10783] 
[  310.799493][T10783] ============================================
[  310.800179][ T7856] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  310.805723][T10783] WARNING: possible recursive locking detected
[  310.805741][T10783] syzkaller #0 Not tainted
[  310.805750][T10783] --------------------------------------------
[  310.830998][T10783] syz.3.1662/10783 is trying to acquire lock:
[  310.837055][T10783] ffff88805e3b80b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0
[  310.846395][T10783] 
[  310.846395][T10783] but task is already holding lock:
[  310.853745][T10783] ffff88805e3b80b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0
[  310.863233][T10783] 
[  310.863233][T10783] other info that might help us debug this:
[  310.871273][T10783]  Possible unsafe locking scenario:
[  310.871273][T10783] 
[  310.878710][T10783]        CPU0
[  310.881982][T10783]        ----
[  310.885244][T10783]   lock(&tree->tree_lock/1);
[  310.889922][T10783]   lock(&tree->tree_lock/1);
[  310.894597][T10783] 
[  310.894597][T10783]  *** DEADLOCK ***
[  310.894597][T10783] 
[  310.902775][T10783]  May be due to missing lock nesting notation
[  310.902775][T10783] 
[  310.911080][T10783] 5 locks held by syz.3.1662/10783:
[  310.916261][T10783]  #0: ffff88807d082418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  310.925496][T10783]  #1: ffff88805d054a38 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: do_truncate+0x19c/0x240
[  310.935843][T10783]  #2: ffff88805d054878 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380
[  310.946630][T10783]  #3: ffff88805e3b80b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0
[  310.956381][T10783]  #4: ffff88805d0534f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380
[  310.967588][T10783] 
[  310.967588][T10783] stack backtrace:
[  310.973524][T10783] CPU: 1 PID: 10783 Comm: syz.3.1662 Not tainted syzkaller #0
[  310.980976][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  310.991038][T10783] Call Trace:
[  310.994320][T10783]  <TASK>
[  310.997252][T10783]  dump_stack_lvl+0x18c/0x250
[  311.001950][T10783]  ? show_regs_print_info+0x20/0x20
[  311.007150][T10783]  ? print_deadlock_bug+0x435/0x5d0
[  311.012346][T10783]  __lock_acquire+0x5dbc/0x7d40
[  311.017195][T10783]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  311.023082][T10783]  ? verify_lock_unused+0x140/0x140
[  311.028270][T10783]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  311.034152][T10783]  ? _raw_spin_unlock+0x40/0x40
[  311.038997][T10783]  ? stack_trace_save+0xaa/0x100
[  311.043931][T10783]  ? stack_trace_snprint+0xf0/0xf0
[  311.049041][T10783]  lock_acquire+0x19e/0x420
[  311.053536][T10783]  ? hfs_find_init+0x17e/0x1f0
[  311.058307][T10783]  ? hfs_extend_file+0x361/0x1380
[  311.063332][T10783]  ? hfs_bmap_reserve+0x107/0x430
[  311.068347][T10783]  ? block_write_begin+0x9a/0x1e0
[  311.073367][T10783]  ? __might_sleep+0xe0/0xe0
[  311.077952][T10783]  ? hfs_write_begin+0x8b/0xd0
[  311.082719][T10783]  ? read_lock_is_recursive+0x20/0x20
[  311.088086][T10783]  ? do_truncate+0x1b0/0x240
[  311.092672][T10783]  ? vfs_truncate+0x266/0x300
[  311.097346][T10783]  ? do_sys_truncate+0xf6/0x1c0
[  311.102187][T10783]  ? do_syscall_64+0x55/0xa0
[  311.106775][T10783]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  311.112901][T10783]  __mutex_lock+0x136/0xcc0
[  311.117402][T10783]  ? hfs_find_init+0x17e/0x1f0
[  311.122165][T10783]  ? hfs_find_init+0x17e/0x1f0
[  311.126938][T10783]  ? mutex_lock_nested+0x20/0x20
[  311.131979][T10783]  ? __kmem_cache_alloc_node+0x13a/0x250
[  311.137634][T10783]  ? hfs_find_init+0xa7/0x1f0
[  311.142316][T10783]  ? hfs_find_init+0xa7/0x1f0
[  311.146998][T10783]  ? __kmalloc+0xe2/0x230
[  311.151331][T10783]  hfs_find_init+0x17e/0x1f0
[  311.155919][T10783]  hfs_extend_file+0x361/0x1380
[  311.160766][T10783]  ? hfs_bnode_read+0x358/0x7a0
[  311.165616][T10783]  ? hfs_ext_keycmp+0x1c7/0x320
[  311.170469][T10783]  ? hfs_get_block+0xc50/0xc50
[  311.175222][T10783]  ? hfs_rename+0x2c0/0x2c0
[  311.179816][T10783]  ? hfs_find_exit+0xa0/0xa0
[  311.184405][T10783]  ? hfs_brec_find+0x3cd/0x500
[  311.189171][T10783]  hfs_bmap_reserve+0x107/0x430
[  311.194018][T10783]  __hfs_ext_write_extent+0x1fa/0x470
[  311.199384][T10783]  __hfs_ext_cache_extent+0x6b/0x9b0
[  311.204666][T10783]  ? hfs_find_init+0x17e/0x1f0
[  311.209433][T10783]  hfs_extend_file+0x3a0/0x1380
[  311.214277][T10783]  ? filemap_get_folios+0x102/0x7e0
[  311.219468][T10783]  ? hfs_get_block+0xc50/0xc50
[  311.224223][T10783]  ? find_lock_entries+0xfe0/0xfe0
[  311.229333][T10783]  ? clean_bdev_aliases+0x587/0x680
[  311.234527][T10783]  hfs_get_block+0x413/0xc50
[  311.239117][T10783]  ? hfs_free_extents+0x430/0x430
[  311.244136][T10783]  ? _raw_spin_unlock+0x28/0x40
[  311.248986][T10783]  ? folio_add_lru+0x320/0xd30
[  311.253747][T10783]  __block_write_begin_int+0x57f/0x1af0
[  311.259293][T10783]  ? folio_add_lru+0xd30/0xd30
[  311.264052][T10783]  ? hfs_free_extents+0x430/0x430
[  311.269065][T10783]  ? folio_zero_new_buffers+0x550/0x550
[  311.274609][T10783]  ? hfs_free_extents+0x430/0x430
[  311.279624][T10783]  block_write_begin+0x9a/0x1e0
[  311.284477][T10783]  cont_write_begin+0x5ee/0x810
[  311.289321][T10783]  ? generic_cont_expand_simple+0x200/0x200
[  311.295201][T10783]  ? __block_commit_write+0x23f/0x350
[  311.300573][T10783]  ? put_page+0xea/0x260
[  311.304812][T10783]  hfs_write_begin+0x8b/0xd0
[  311.309396][T10783]  ? hfs_free_extents+0x430/0x430
[  311.314408][T10783]  cont_write_begin+0x2b1/0x810
[  311.319249][T10783]  ? do_sys_truncate+0xf6/0x1c0
[  311.324096][T10783]  ? generic_cont_expand_simple+0x200/0x200
[  311.329990][T10783]  hfs_write_begin+0x8b/0xd0
[  311.334573][T10783]  ? hfs_free_extents+0x430/0x430
[  311.339599][T10783]  hfs_file_truncate+0x1c4/0xa10
[  311.344591][T10783]  ? __up_read+0x2b6/0x6b0
[  311.349003][T10783]  ? up_read+0x20/0x20
[  311.353063][T10783]  ? up_read+0x20/0x20
[  311.357122][T10783]  ? hfs_extend_file+0x1380/0x1380
[  311.362223][T10783]  ? unmap_mapping_range+0xe7/0x180
[  311.367454][T10783]  ? unmap_mapping_pages+0x160/0x160
[  311.372746][T10783]  ? pagecache_isize_extended+0x116/0x570
[  311.378462][T10783]  hfs_inode_setattr+0x4af/0x6e0
[  311.383395][T10783]  ? bpf_lsm_inode_setattr+0x9/0x10
[  311.388587][T10783]  ? try_break_deleg+0x79/0x120
[  311.393433][T10783]  ? hfs_evict_inode+0x110/0x110
[  311.398363][T10783]  notify_change+0xb0d/0xe10
[  311.402949][T10783]  do_truncate+0x1b0/0x240
[  311.407357][T10783]  ? put_page_bootmem+0x2c0/0x2c0
[  311.412379][T10783]  ? bpf_lsm_path_truncate+0x9/0x10
[  311.417568][T10783]  vfs_truncate+0x266/0x300
[  311.422064][T10783]  do_sys_truncate+0xf6/0x1c0
[  311.426730][T10783]  ? lock_chain_count+0x20/0x20
[  311.431572][T10783]  ? break_lease+0xd0/0xd0
[  311.435981][T10783]  ? lockdep_hardirqs_on+0x98/0x150
[  311.441176][T10783]  do_syscall_64+0x55/0xa0
[  311.445592][T10783]  ? clear_bhb_loop+0x40/0x90
[  311.450264][T10783]  ? clear_bhb_loop+0x40/0x90
[  311.454933][T10783]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  311.460818][T10783] RIP: 0033:0x7f9445b9ce59
[  311.465222][T10783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.484819][T10783] RSP: 002b:00007f9446a97028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  311.493489][T10783] RAX: ffffffffffffffda RBX: 00007f9445e15fa0 RCX: 00007f9445b9ce59
[  311.501451][T10783] RDX: 0000000000000000 RSI: 0000000002fffffd RDI: 0000200000000940
[  311.509417][T10783] RBP: 00007f9445c32d6f R08: 0000000000000000 R09: 0000000000000000
[  311.517381][T10783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.525350][T10783] R13: 00007f9445e16038 R14: 00007f9445e15fa0 R15: 00007ffc4e3d3d08
[  311.533320][T10783]  </TASK>
[  311.544637][ T7856] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[  311.558736][ T7856] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  311.573204][    T8] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  311.602064][    T8] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  311.622026][ T7856] usb 5-1: USB disconnect, device number 15
[  311.628770][    T8] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  311.642333][    T8] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  311.665908][    T8] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  311.682680][    T8] lan78xx: probe of 3-1:1.0 failed with error -71
[  311.694114][    T8] usb 3-1: USB disconnect, device number 20
[  312.037262][ T1134] kworker/u4:7: attempt to access beyond end of device
[  312.037262][ T1134] loop3: rw=1048577, sector=161, nr_sectors = 1 limit=64
[  312.051068][ T1134] buffer_io_error: 60 callbacks suppressed
[  312.051076][ T1134] Buffer I/O error on dev loop3, logical block 161, lost async page write
[  312.065689][ T1134] kworker/u4:7: attempt to access beyond end of device
[  312.065689][ T1134] loop3: rw=1048577, sector=162, nr_sectors = 1 limit=64
[  312.079508][ T1134] Buffer I/O error on dev loop3, logical block 162, lost async page write
[  312.088305][ T1134] kworker/u4:7: attempt to access beyond end of device
[  312.088305][ T1134] loop3: rw=1048577, sector=163, nr_sectors = 1 limit=64
[  312.102426][ T1134] Buffer I/O error on dev loop3, logical block 163, lost async page write
[  312.111057][ T1134] kworker/u4:7: attempt to access beyond end of device
[  312.111057][ T1134] loop3: rw=1048577, sector=167, nr_sectors = 1 limit=64
[  312.124833][ T1134] Buffer I/O error on dev loop3, logical block 167, lost async page write
[  312.133412][ T1134] kworker/u4:7: attempt to access beyond end of device
[  312.133412][ T1134] loop3: rw=1048577, sector=169, nr_sectors = 1 limit=64
[  312.165816][ T1134] Buffer I/O error on dev loop3, logical block 169, lost async page write
[  312.174827][ T1134] kworker/u4:7: attempt to access beyond end of device
[  312.174827][ T1134] loop3: rw=1048577, sector=171, nr_sectors = 1 limit=64
[  312.188858][ T1134] Buffer I/O error on dev loop3, logical block 171, lost async page write
[  312.198312][ T1134] kworker/u4:7: attempt to access beyond end of device
[  312.198312][ T1134] loop3: rw=1048577, sector=172, nr_sectors = 1 limit=64
[  312.212258][ T1134] Buffer I/O error on dev loop3, logical block 172, lost async page write
[  312.220969][ T1134] kworker/u4:7: attempt to access beyond end of device
[  312.220969][ T1134] loop3: rw=1048577, sector=173, nr_sectors = 1 limit=64
[  312.234778][ T1134] Buffer I/O error on dev loop3, logical block 173, lost async page write
[  312.243370][ T1134] kworker/u4:7: attempt to access beyond end of device
[  312.243370][ T1134] loop3: rw=1048577, sector=174, nr_sectors = 1 limit=64
[  312.257182][ T1134] Buffer I/O error on dev loop3, logical block 174, lost async page write
[  312.265714][ T1134] kworker/u4:7: attempt to access beyond end of device
[  312.265714][ T1134] loop3: rw=1048577, sector=175, nr_sectors = 1 limit=64
[  312.279646][ T1134] Buffer I/O error on dev loop3, logical block 175, lost async page write