last executing test programs:

39.530340459s ago: executing program 0 (id=63):
io_setup(0x66, &(0x7f0000000400)=<r0=>0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
setresuid(0xee01, 0xee01, 0x0)
io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x4}])

39.343176784s ago: executing program 0 (id=64):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000002c0001800b0001007470726f787900001c00028008000240000000110800034000fdff1008000140000000020900010073797a30"], 0x100}}, 0x0)

39.254113272s ago: executing program 0 (id=65):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16})
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000480)=[{0x9, 0xa200, 0x0, 0x0}], 0x1})

38.012877437s ago: executing program 0 (id=72):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)

37.991204056s ago: executing program 0 (id=73):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@gquota}, {@nolargeio}, {@prjquota}]}, 0x1, 0x9839, &(0x7f0000025e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}})

37.704520409s ago: executing program 0 (id=79):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000a81000000ff"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="400821000000c468545f4745a0a639235d52eab5"], 0x0, 0x0})

37.054762446s ago: executing program 32 (id=79):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000a81000000ff"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="400821000000c468545f4745a0a639235d52eab5"], 0x0, 0x0})

4.781123998s ago: executing program 3 (id=329):
sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}})

3.90978626s ago: executing program 3 (id=338):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000034700)=""/102400, 0x19000)
socket$inet6(0xa, 0x3, 0xff)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000"], 0x1, 0x19b, &(0x7f0000002980)="$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")

3.611406109s ago: executing program 3 (id=342):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)

3.529285373s ago: executing program 3 (id=343):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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")
inotify_init1(0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
read$FUSE(r5, &(0x7f0000002880)={0x2020}, 0x2020)

3.529018155s ago: executing program 2 (id=344):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c0050890e1d2cc1bbbdf08d08fe06ff2766758d8955927fab01a7ccdecfc59b2041a9461723f1db971e775e0e358c03b00c510998283ed6f1dba0502d352e58b65a28492b0a7053e14eccd84ac5b3452602d77c0ca0"], 0x1, 0x442d, &(0x7f0000004480)="$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")
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2000)

2.775044211s ago: executing program 2 (id=349):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18)
iopl(0x3)

2.698236506s ago: executing program 3 (id=351):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)

2.521285834s ago: executing program 3 (id=353):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x40015b13, 0x0)

2.520980666s ago: executing program 2 (id=354):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x39, 0xb7, 0xad, 0x40, 0xb57, 0x2c68, 0x6e32, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x3, 0x1, 0x2}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})

1.242200413s ago: executing program 2 (id=370):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0)

1.13149467s ago: executing program 2 (id=373):
socket$inet6(0xa, 0x1, 0x10001)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x60, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4}]}, @nested={0x4, 0x2}, @nested={0x33, 0x20, 0x0, 0x1, [@generic="1112918cae199026", @generic="3fe3eef70f8cdcb05392f04d2e8c713dc0f0a11eb349807645d2eb2d45cd35c14648836f01b4e0"]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

1.001984142s ago: executing program 1 (id=374):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x80, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x62, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @void, @val={0x1, 0x2, [{0xc, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0x2}}, @val={0x6, 0x2, 0x5}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0xf34, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x5, 0x4}}, @val={0x72, 0x6}, @void, @void}}]}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x0)

791.823117ms ago: executing program 1 (id=375):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2279, 0x0)

731.091318ms ago: executing program 1 (id=376):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x771, &(0x7f0000001280)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

599.169068ms ago: executing program 1 (id=377):
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

471.269239ms ago: executing program 1 (id=378):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2025)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0)
read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020)

359.490635ms ago: executing program 1 (id=379):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=380):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl(r0, 0xffffffff, 0x0)

kernel console output (not intermixed with test programs):

: no params data found
[   64.729351][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.735613][ T5844] team0: Port device team_slave_0 added
[   64.749699][ T5844] team0: Port device team_slave_1 added
[   64.813719][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.816898][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.827469][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.859510][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.862121][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.872179][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.931761][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.934710][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.938420][ T5850] bridge_slave_0: entered allmulticast mode
[   64.942327][ T5850] bridge_slave_0: entered promiscuous mode
[   64.948562][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.951256][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.954075][ T5850] bridge_slave_1: entered allmulticast mode
[   64.958610][ T5850] bridge_slave_1: entered promiscuous mode
[   64.962338][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.965342][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.968852][ T5851] bridge_slave_0: entered allmulticast mode
[   64.972604][ T5851] bridge_slave_0: entered promiscuous mode
[   65.016759][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.019654][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.022426][ T5851] bridge_slave_1: entered allmulticast mode
[   65.026229][ T5851] bridge_slave_1: entered promiscuous mode
[   65.061865][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.072169][ T5844] hsr_slave_0: entered promiscuous mode
[   65.076016][ T5844] hsr_slave_1: entered promiscuous mode
[   65.097454][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.103465][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.136227][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.157256][ T5850] team0: Port device team_slave_0 added
[   65.187505][ T5850] team0: Port device team_slave_1 added
[   65.199073][ T5851] team0: Port device team_slave_0 added
[   65.226618][ T5851] team0: Port device team_slave_1 added
[   65.272825][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.275566][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.285657][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.292231][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.294863][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.304702][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.317526][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.320290][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.330711][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.365725][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.368709][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.378673][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.401914][ T5850] hsr_slave_0: entered promiscuous mode
[   65.404779][ T5850] hsr_slave_1: entered promiscuous mode
[   65.407392][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   65.409230][ T5850] Cannot create hsr debugfs directory
[   65.527271][ T5851] hsr_slave_0: entered promiscuous mode
[   65.529685][ T5851] hsr_slave_1: entered promiscuous mode
[   65.532284][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   65.534470][ T5851] Cannot create hsr debugfs directory
[   65.708924][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.715726][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.724339][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.740180][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.783993][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.795119][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.807101][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.812297][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.885094][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.892313][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.898831][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.903977][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.004030][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.033693][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.041038][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   66.055779][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.058412][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.074220][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.076575][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.092641][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.103813][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   66.121458][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.124221][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.141162][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.143417][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.149607][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   66.175727][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.178194][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.194224][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.196923][ T1204] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.197800][ T5848] Bluetooth: hci0: command tx timeout
[   66.244116][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.356716][ T5848] Bluetooth: hci1: command tx timeout
[   66.359248][ T5857] Bluetooth: hci2: command tx timeout
[   66.435393][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.484645][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.520320][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.526305][ T5844] veth0_vlan: entered promiscuous mode
[   66.542747][ T5844] veth1_vlan: entered promiscuous mode
[   66.578958][ T5851] veth0_vlan: entered promiscuous mode
[   66.592370][ T5851] veth1_vlan: entered promiscuous mode
[   66.609326][ T5850] veth0_vlan: entered promiscuous mode
[   66.622108][ T5844] veth0_macvtap: entered promiscuous mode
[   66.628589][ T5850] veth1_vlan: entered promiscuous mode
[   66.635017][ T5844] veth1_macvtap: entered promiscuous mode
[   66.665422][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.685773][ T5851] veth0_macvtap: entered promiscuous mode
[   66.691755][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.703838][ T5850] veth0_macvtap: entered promiscuous mode
[   66.716220][ T5851] veth1_macvtap: entered promiscuous mode
[   66.728320][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.732385][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.735856][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.745357][ T5850] veth1_macvtap: entered promiscuous mode
[   66.749531][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.779802][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.790607][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.799256][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.805659][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.825643][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.842625][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.847640][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.871510][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.888175][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.901435][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.904904][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.919181][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.922568][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.927249][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.982746][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.985821][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.006711][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.014004][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.065923][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.071152][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.072601][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.073681][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.082002][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.175014][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.183406][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.568373][ T5936] loop0: detected capacity change from 0 to 128
[   67.580857][ T5934] syzkaller1: entered promiscuous mode
[   67.583247][ T5934] syzkaller1: entered allmulticast mode
[   67.588708][ T5936] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   67.605967][ T5936] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   67.683963][ T5844] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   67.785657][ T5932] loop2: detected capacity change from 0 to 32768
[   67.841121][ T5932] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[   67.841121][ T5932] 
[   67.845574][ T5940] loop0: detected capacity change from 0 to 164
[   67.847819][ T5932] ERROR: (device loop2): remounting filesystem as read-only
[   67.850421][ T5932] xtLookup: xtSearch returned -5
[   67.851889][ T5932] free_index: error reading directory table
[   67.858628][ T5940] rock: directory entry would overflow storage
[   67.861771][ T5940] rock: sig=0x66, size=4, remaining=3
[   67.932758][ T5941] rock: directory entry would overflow storage
[   67.934830][ T5941] rock: sig=0x66, size=4, remaining=3
[   68.276996][ T5848] Bluetooth: hci0: command tx timeout
[   68.437573][ T5848] Bluetooth: hci1: command tx timeout
[   68.439421][ T5857] Bluetooth: hci2: command tx timeout
[   68.583261][ T5949] loop2: detected capacity change from 0 to 16
[   68.625578][ T5949] erofs (device loop2): mounted with root inode @ nid 36.
[   68.810444][ T5951] loop1: detected capacity change from 0 to 1024
[   68.848076][ T5951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.908167][ T5951] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   68.949272][ T5951] EXT4-fs (loop1): Remounting filesystem read-only
[   68.993520][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.144894][ T5960] capability: warning: `syz.0.22' uses deprecated v2 capabilities in a way that may be insecure
[   69.617034][ T5910] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   69.780950][ T5910] usb 1-1: Using ep0 maxpacket: 16
[   69.788612][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   69.792379][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   69.795953][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   69.800644][ T5910] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   69.803958][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   69.810839][ T5910] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   69.813956][ T5910] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   69.817295][ T5910] usb 1-1: Manufacturer: syz
[   69.822933][ T5910] usb 1-1: config 0 descriptor??
[   70.019107][ T5845] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   70.044880][ T5973] loop1: detected capacity change from 0 to 256
[   70.048272][ T5973] =======================================================
[   70.048272][ T5973] WARNING: The mand mount option has been deprecated and
[   70.048272][ T5973]          and is ignored by this kernel. Remove the mand
[   70.048272][ T5973]          option from the mount to silence this warning.
[   70.048272][ T5973] =======================================================
[   70.069785][ T5910] rc_core: IR keymap rc-hauppauge not found
[   70.070978][ T5973] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   70.072090][ T5910] Registered IR keymap rc-empty
[   70.077160][ T5973] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   70.078596][ T5910] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   70.086302][ T5973] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62dd34a, utbl_chksum : 0xe619d30d)
[   70.090814][ T5973] exFAT-fs (loop1): failed to load alloc-bitmap
[   70.092764][ T5973] exFAT-fs (loop1): failed to recognize exfat type
[   70.097491][ T5910] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   70.119422][ T5910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   70.128701][ T5910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input4
[   70.138508][ T5910] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   70.168358][ T5910] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   70.186649][ T5910] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   70.190379][ T5845] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[   70.193713][ T5845] usb 3-1: config 0 has no interface number 0
[   70.196582][ T5845] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[   70.201234][ T5845] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   70.206725][ T5910] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   70.211256][ T5845] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[   70.215207][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.218768][ T5845] usb 3-1: Product: syz
[   70.220495][ T5845] usb 3-1: Manufacturer: syz
[   70.222572][ T5845] usb 3-1: SerialNumber: syz
[   70.226588][ T5910] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   70.228140][ T5845] usb 3-1: config 0 descriptor??
[   70.233922][ T5967] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   70.239819][ T5845] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[   70.246498][ T5910] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   70.265167][ T5845] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[   70.266478][ T5910] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   70.286689][ T5910] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   70.306957][ T5910] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   70.327879][ T5910] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   70.350287][ T5910] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   70.353827][ T5910] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   70.367086][ T5857] Bluetooth: hci0: command tx timeout
[   70.467487][ T5897] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   70.516621][ T5857] Bluetooth: hci2: command tx timeout
[   70.518948][ T5848] Bluetooth: hci1: command tx timeout
[   70.526696][ T5910] usb 1-1: USB disconnect, device number 2
[   70.629761][ T5897] usb 2-1: config 0 has an invalid interface number: 95 but max is 0
[   70.633212][ T5897] usb 2-1: config 0 has no interface number 0
[   70.635775][ T5897] usb 2-1: config 0 interface 95 altsetting 0 endpoint 0x1 has invalid maxpacket 58888, setting to 1024
[   70.641889][ T5897] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[   70.650916][ T5897] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[   70.658897][ T5845] usb 3-1: USB disconnect, device number 2
[   70.661319][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.664533][ T5897] usb 2-1: Product: syz
[   70.666238][ T5897] usb 2-1: Manufacturer: syz
[   70.675293][ T5845] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[   70.679703][ T5897] usb 2-1: SerialNumber: syz
[   70.683789][ T5897] usb 2-1: config 0 descriptor??
[   70.688039][ T5845] cyberjack 3-1:0.69: device disconnected
[   70.692278][ T5976] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   70.907610][ T5897] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   70.910427][ T5897] usb 2-1: MIDIStreaming interface descriptor not found
[   70.934267][ T5897] usb 2-1: USB disconnect, device number 2
[   70.990704][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   71.202627][ T5988] loop2: detected capacity change from 0 to 128
[   71.219212][ T5988] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[   71.224823][ T5988] hpfs: filesystem error: improperly stopped
[   71.227851][ T5988] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   71.231082][ T5988] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[   71.234815][ T5988] hpfs: You really don't want any checks? You are crazy...
[   71.239087][ T5988] hpfs: hpfs_map_sector(): read error
[   71.241227][ T5988] hpfs: code page support is disabled
[   71.244673][ T5988] hpfs: hpfs_map_4sectors(): unaligned read
[   71.247314][ T5988] hpfs: hpfs_map_4sectors(): unaligned read
[   71.249649][ T5988] hpfs: filesystem error: unable to find root dir
[   71.253158][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.255800][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.304527][ T5990] netlink: 168 bytes leftover after parsing attributes in process `syz.2.32'.
[   71.347526][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   71.519832][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.524614][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.530936][   T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   71.534832][   T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   71.539142][   T10] usb 1-1: Manufacturer: syz
[   71.544751][   T10] usb 1-1: config 0 descriptor??
[   71.643951][ T6001] loop2: detected capacity change from 0 to 32768
[   71.654268][ T6001] ea_get: invalid extended attribute
[   71.756612][ T5845] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   71.936632][ T5910] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   71.936868][ T5845] usb 2-1: Using ep0 maxpacket: 32
[   71.946186][ T5845] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[   71.950693][ T5845] usb 2-1: config 0 has no interface number 0
[   71.953599][ T5845] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 123, changing to 10
[   71.961022][ T5845] usb 2-1: config 0 interface 85 has no altsetting 0
[   71.968786][ T5845] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   71.977448][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.980972][ T5845] usb 2-1: Product: syz
[   71.982820][ T5845] usb 2-1: Manufacturer: syz
[   71.989248][ T5845] usb 2-1: SerialNumber: syz
[   71.995269][ T5845] usb 2-1: config 0 descriptor??
[   72.088730][ T5910] usb 3-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   72.092812][ T5910] usb 3-1: config 0 interface 0 has no altsetting 0
[   72.095403][ T5910] usb 3-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00
[   72.099422][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.107336][ T5910] usb 3-1: config 0 descriptor??
[   72.110195][ T6005] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   72.437775][ T5857] Bluetooth: hci0: command tx timeout
[   72.530538][ T5910] wacom 0003:056A:00DA.0002: unbalanced delimiter at end of report description
[   72.534769][ T5910] wacom 0003:056A:00DA.0002: parse failed
[   72.537804][ T5910] wacom 0003:056A:00DA.0002: probe with driver wacom failed with error -22
[   72.579694][   T10] uclogic 0003:256C:006D.0001: v1 frame probing failed: -71
[   72.584494][   T10] uclogic 0003:256C:006D.0001: failed probing parameters: -71
[   72.588393][   T10] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71
[   72.597832][   T10] usb 1-1: USB disconnect, device number 3
[   72.606786][ T5857] Bluetooth: hci2: command tx timeout
[   72.608685][ T5848] Bluetooth: hci1: command tx timeout
[   72.610735][ T5845] appletouch 2-1:0.85: Geyser mode initialized.
[   72.622251][ T5845] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5
[   72.726205][ T5910] usb 3-1: USB disconnect, device number 3
[   72.817430][ T5896] usb 2-1: USB disconnect, device number 3
[   72.831802][ T5896] appletouch 2-1:0.85: input: appletouch disconnected
[   73.379485][ T6013] loop1: detected capacity change from 0 to 128
[   73.386723][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   73.390406][ T6013] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[   73.397648][ T6013] System zones: 1-3, 19-19, 35-36
[   73.408328][ T6013] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   73.414022][ T6013] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   73.418770][ T6011] loop2: detected capacity change from 0 to 32768
[   73.455477][ T5851] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   73.462491][ T6011] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   73.500142][ T6011] XFS (loop2): Ending clean mount
[   73.537551][ T5850] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   73.546455][   T10] usb 1-1: Using ep0 maxpacket: 8
[   73.550599][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   73.555888][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[   73.562072][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[   73.572241][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   73.576132][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[   73.586470][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   73.597131][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   73.607831][   T10] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[   73.611170][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.614174][   T10] usb 1-1: Product: syz
[   73.615528][   T10] usb 1-1: Manufacturer: syz
[   73.626425][   T10] usb 1-1: SerialNumber: syz
[   73.630515][   T10] usb 1-1: config 0 descriptor??
[   73.632786][ T6009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   73.643129][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   73.761727][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   73.856112][ T6025] loop1: detected capacity change from 0 to 32768
[   73.868102][ T5896] usb 1-1: USB disconnect, device number 4
[   73.996542][ T5854] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   74.146502][ T5854] usb 3-1: Using ep0 maxpacket: 8
[   74.151862][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.156209][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.160217][ T5854] usb 3-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00
[   74.163629][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.169620][ T5854] usb 3-1: config 0 descriptor??
[   74.387280][ T5854] usbhid 3-1:0.0: can't add hid device: -71
[   74.390988][ T5854] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   74.417963][ T5854] usb 3-1: USB disconnect, device number 4
[   74.536712][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   74.686465][   T10] usb 2-1: Using ep0 maxpacket: 8
[   74.690769][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   74.694865][   T10] usb 2-1: config 11 has an invalid interface number: 244 but max is 0
[   74.698114][   T10] usb 2-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[   74.702106][   T10] usb 2-1: config 11 has no interface number 0
[   74.704672][   T10] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0
[   74.708546][   T10] usb 2-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   74.713795][   T10] usb 2-1: config 11 interface 244 has no altsetting 0
[   74.718930][   T10] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a
[   74.722393][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.725620][   T10] usb 2-1: Product: syz
[   74.728799][   T10] usb 2-1: Manufacturer: syz
[   74.730601][   T10] usb 2-1: SerialNumber: syz
[   74.746615][ T5896] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   74.896496][ T5896] usb 1-1: Using ep0 maxpacket: 8
[   74.903030][ T5896] usb 1-1: config 0 has no interfaces?
[   74.912789][ T5896] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad
[   74.923738][ T5896] usb 1-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3
[   74.928308][ T5896] usb 1-1: Product: syz
[   74.929991][ T5896] usb 1-1: Manufacturer: syz
[   74.931814][ T5896] usb 1-1: SerialNumber: syz
[   74.941875][ T5896] usb 1-1: config 0 descriptor??
[   74.989339][   T10] peak_usb 2-1:11.244 can0: unable to request usb[type=0 value=1] err=-71
[   74.992570][   T10] peak_usb 2-1:11.244: unable to read PCAN-USB X6 firmware info (err -71)
[   75.047264][   T10] peak_usb 2-1:11.244: probe with driver peak_usb failed with error -71
[   75.055511][   T10] usb 2-1: USB disconnect, device number 4
[   75.148123][ T5845] usb 1-1: USB disconnect, device number 5
[   75.243084][ T6045] loop2: detected capacity change from 0 to 4096
[   75.253793][ T6045] NILFS (loop2): invalid segment: Inconsistency found
[   75.256918][ T6045] NILFS (loop2): trying rollback from an earlier position
[   75.269778][ T6045] NILFS (loop2): recovery complete
[   75.274125][ T6046] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   75.561993][ T6054] loop1: detected capacity change from 0 to 128
[   75.626598][ T5845] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   75.676881][ T6058] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[   75.780687][ T5845] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   75.784273][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.796492][ T5845] usb 3-1: Product: syz
[   75.798257][ T5845] usb 3-1: Manufacturer: syz
[   75.800036][ T5845] usb 3-1: SerialNumber: syz
[   75.900968][ T6061] loop0: detected capacity change from 0 to 32768
[   75.913364][ T6061] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.57 (6061)
[   75.953235][ T6061] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   75.967698][ T6061] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   75.981595][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'.
[   76.046278][ T6061] BTRFS info (device loop0): enabling ssd optimizations
[   76.054666][ T6061] BTRFS info (device loop0): turning on sync discard
[   76.061660][ T6061] BTRFS info (device loop0): enabling free space tree
[   76.066627][ T6061] BTRFS info (device loop0): force clearing of disk cache
[   76.070684][ T6061] BTRFS info (device loop0): enabling auto defrag
[   76.073619][ T6061] BTRFS info (device loop0): max_inline set to 1
[   76.163872][ T5844] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   76.301505][ T6085] loop0: detected capacity change from 0 to 256
[   76.323635][ T6085] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5658fca8, utbl_chksum : 0xe619d30d)
[   76.386618][ T5978] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   76.556413][ T5978] usb 2-1: Using ep0 maxpacket: 16
[   76.562487][ T5978] usb 2-1: config 0 has an invalid interface number: 131 but max is 0
[   76.565920][ T5978] usb 2-1: config 0 has no interface number 0
[   76.568411][ T5978] usb 2-1: config 0 interface 131 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[   76.572409][ T5978] usb 2-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=b6.9e
[   76.575873][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.581953][ T6087] loop0: detected capacity change from 0 to 32768
[   76.583898][ T5978] usb 2-1: config 0 descriptor??
[   76.630983][ T5979]  loop0: p1 p2 p3 < p5 p6 >
[   76.633075][ T5979] loop0: p1 size 242222080 extends beyond EOD, truncated
[   76.639112][ T5979] loop0: p2 start 4294967295 is beyond EOD, truncated
[   76.658637][ T6087]  loop0: p1 p2 p3 < p5 p6 >
[   76.660938][ T6087] loop0: p1 size 242222080 extends beyond EOD, truncated
[   76.665500][ T6087] loop0: p2 start 4294967295 is beyond EOD, truncated
[   76.801240][ T5978] mos7840 2-1:0.131: missing endpoints
[   76.813042][ T5978] usb 2-1: USB disconnect, device number 5
[   76.913634][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   76.914190][ T5982] udevd[5982]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory
[   76.923710][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   76.933925][ T5981] udevd[5981]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[   76.973230][ T5981] udevd[5981]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory
[   77.236829][ T5897] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   77.241300][ T5845] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[   77.385123][ T6096] netlink: 188 bytes leftover after parsing attributes in process `syz.1.66'.
[   77.386498][ T5897] usb 1-1: Using ep0 maxpacket: 8
[   77.388886][ T6096] NCSI netlink: No device for ifindex 0
[   77.392785][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short
[   77.402055][ T5897] usb 1-1: config 4 has an invalid interface number: 30 but max is 0
[   77.411616][ T5897] usb 1-1: config 4 has no interface number 0
[   77.413968][ T5897] usb 1-1: config 4 interface 30 has no altsetting 0
[   77.430332][ T5897] usb 1-1: string descriptor 0 read error: -22
[   77.432365][ T5897] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[   77.435080][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.449469][ T5845] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[   77.455682][ T5845] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[   77.462816][ T5897] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[   77.465510][ T5897] dw2102: su3000_power_ctrl: 1, initialized 0
[   77.469659][ T5845] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[   77.473908][ T5845] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   77.478037][ T5897] dvb-usb: bulk message failed: -22 (2/0)
[   77.486737][ T5845] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[   77.492921][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   77.499576][ T5897] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[   77.502241][ T5897] usb 1-1: media controller created
[   77.505370][ T5897] dvb-usb: bulk message failed: -22 (6/0)
[   77.508266][ T5845] usb 3-1: USB disconnect, device number 5
[   77.513454][ T5897] dw2102: i2c transfer failed.
[   77.515073][ T5897] dvb-usb: bulk message failed: -22 (6/0)
[   77.518780][ T5897] dw2102: i2c transfer failed.
[   77.520567][ T5897] dvb-usb: bulk message failed: -22 (6/0)
[   77.522727][ T5897] dw2102: i2c transfer failed.
[   77.524536][ T5897] dvb-usb: bulk message failed: -22 (6/0)
[   77.528024][ T5897] dw2102: i2c transfer failed.
[   77.531367][ T5897] dvb-usb: bulk message failed: -22 (6/0)
[   77.533428][ T5897] dw2102: i2c transfer failed.
[   77.535266][ T5897] dvb-usb: bulk message failed: -22 (6/0)
[   77.538724][ T5897] dw2102: i2c transfer failed.
[   77.540808][ T5897] dvb-usb: MAC address: 02:02:02:02:02:02
[   77.558166][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   77.575416][ T5897] dvb-usb: bulk message failed: -22 (3/0)
[   77.577730][ T5897] dw2102: command 0x0e transfer failed.
[   77.580171][ T5897] dvb-usb: bulk message failed: -22 (3/0)
[   77.582236][ T5897] dw2102: command 0x0e transfer failed.
[   77.730235][ T6098] loop1: detected capacity change from 0 to 40427
[   77.804519][ T6098] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   77.811338][ T6098] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   77.869619][ T5851] syz-executor: attempt to access beyond end of device
[   77.869619][ T5851] loop1: rw=2051, sector=77824, nr_sectors = 8 limit=40427
[   77.874271][ T5851] F2FS-fs (loop1): Issue discard(9728, 9728, 1) failed, ret: -5
[   77.886475][ T5897] dvb-usb: bulk message failed: -22 (3/0)
[   77.889058][ T5897] dw2102: command 0x0e transfer failed.
[   77.890785][ T5897] dvb-usb: bulk message failed: -22 (3/0)
[   77.892695][ T5897] dw2102: command 0x0e transfer failed.
[   77.894737][ T5897] dvb-usb: bulk message failed: -22 (1/0)
[   77.898124][ T5897] dw2102: command 0x51 transfer failed.
[   77.900063][ T5897] dvb-usb: bulk message failed: -22 (5/0)
[   77.901756][ T5897] dw2102: i2c probe for address 0x68 failed.
[   77.903743][ T5897] dvb-usb: bulk message failed: -22 (5/0)
[   77.906022][ T5897] dw2102: i2c probe for address 0x69 failed.
[   77.908803][ T5897] dvb-usb: bulk message failed: -22 (5/0)
[   77.911103][ T5897] dw2102: i2c probe for address 0x6a failed.
[   77.912986][ T5897] dw2102: probing for demodulator failed. Is the external power switched on?
[   77.915704][ T5897] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[   77.956446][ T5897] rc_core: IR keymap rc-tt-1500 not found
[   77.958308][ T5897] Registered IR keymap rc-empty
[   77.961480][ T5897] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[   77.968362][ T5897] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6
[   77.992658][ T5897] dvb-usb: schedule remote query interval to 250 msecs.
[   77.995288][ T5897] dw2102: su3000_power_ctrl: 0, initialized 1
[   78.011715][ T5897] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[   78.017334][ T5897] usb 1-1: USB disconnect, device number 6
[   78.101067][ T5897] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[   78.126108][ T6107] Bluetooth: MGMT ver 1.23
[   78.207261][ T6109] evm: overlay not supported
[   78.247969][ T6111] overlayfs: failed to verify upper root origin
[   78.311795][ T6115] loop1: detected capacity change from 0 to 512
[   78.320381][ T6115] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   78.345735][ T6115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.361530][ T6115] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.425553][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.610070][ T5877] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.949441][ T5877] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.238356][ T5877] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.314025][ T5877] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.346532][ T5897] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   79.380216][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.387252][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.393444][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.402333][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.405815][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.498868][ T5897] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[   79.502187][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.511082][ T5897] usb 2-1: config 0 descriptor??
[   79.523346][ T5897] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[   79.528922][ T5877] bridge_slave_1: left allmulticast mode
[   79.532958][ T5877] bridge_slave_1: left promiscuous mode
[   79.535993][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.548735][ T5877] bridge_slave_0: left allmulticast mode
[   79.551623][ T5877] bridge_slave_0: left promiscuous mode
[   79.554190][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.714260][ T5845] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   79.743465][ T5897] gp8psk: usb in 128 operation failed.
[   79.869668][ T5845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.889163][ T5845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   79.892172][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.894574][ T5845] usb 3-1: Product: syz
[   79.895974][ T5845] usb 3-1: Manufacturer: syz
[   79.897906][ T5845] usb 3-1: SerialNumber: syz
[   79.913062][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.919203][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.922856][ T5877] bond0 (unregistering): Released all slaves
[   79.947591][ T5897] gp8psk: FW Version = 0.00.0 (0x0)  Build 2000/00/00
[   80.100297][ T6133] chnl_net:caif_netlink_parms(): no params data found
[   80.152519][ T5897] gp8psk: usb in 149 operation failed.
[   80.154982][ T5897] gp8psk: failed to get FPGA version
[   80.167030][ T5897] gp8psk: usb in 138 operation failed.
[   80.169316][ T5897] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   80.184427][ T5897] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[   80.206707][ T5897] usb 2-1: USB disconnect, device number 6
[   80.318120][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.321069][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.324386][ T6133] bridge_slave_0: entered allmulticast mode
[   80.333563][ T6133] bridge_slave_0: entered promiscuous mode
[   80.347842][ T5877] hsr_slave_0: left promiscuous mode
[   80.350960][ T5877] hsr_slave_1: left promiscuous mode
[   80.353888][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.357487][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.362185][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.365100][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.385227][ T5877] veth1_macvtap: left promiscuous mode
[   80.389920][ T5877] veth0_macvtap: left promiscuous mode
[   80.392322][ T5877] veth1_vlan: left promiscuous mode
[   80.394650][ T5877] veth0_vlan: left promiscuous mode
[   80.832183][ T5877] team0 (unregistering): Port device team_slave_1 removed
[   80.860531][ T5877] team0 (unregistering): Port device team_slave_0 removed
[   80.932818][ T5845] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[   80.934916][ T5845] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[   80.947478][ T5845] cdc_ncm 3-1:1.0: setting rx_max = 2048
[   81.134452][ T5845] cdc_ncm 3-1:1.0: setting tx_max = 184
[   81.185244][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.188471][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.190884][ T6133] bridge_slave_1: entered allmulticast mode
[   81.194352][ T6133] bridge_slave_1: entered promiscuous mode
[   81.221929][ T5845] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   81.234359][ T5845] usb 3-1: USB disconnect, device number 6
[   81.248267][ T5845] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[   81.286964][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.301673][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.362099][ T6170] loop1: detected capacity change from 0 to 4096
[   81.385558][ T6133] team0: Port device team_slave_0 added
[   81.408571][ T6171] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.408891][ T6133] team0: Port device team_slave_1 added
[   81.463618][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.466823][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.479587][ T5857] Bluetooth: hci0: command tx timeout
[   81.487424][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.504225][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.509282][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.556443][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.701873][ T6133] hsr_slave_0: entered promiscuous mode
[   81.712042][ T6133] hsr_slave_1: entered promiscuous mode
[   81.805767][ T6184] loop2: detected capacity change from 0 to 1024
[   81.825374][ T6184] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   81.852195][ T6184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.894214][ T6184] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.91: missing EA_INODE flag
[   81.911704][ T6184] EXT4-fs (loop2): Remounting filesystem read-only
[   81.914446][ T6184] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   81.946156][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.134647][ T6196] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[   82.174903][ T6133] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.218648][ T6133] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.226020][ T6198] loop2: detected capacity change from 0 to 4096
[   82.237342][ T6133] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.253372][ T6133] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.258205][ T6198] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   82.324270][ T6198] ntfs3(loop2): failed to convert "c46c" to cp866
[   82.471706][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.512577][ T6133] 8021q: adding VLAN 0 to HW filter on device team0
[   82.532920][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.535472][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.554854][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.557501][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.719163][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.746948][ T5910] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   82.761817][ T6133] veth0_vlan: entered promiscuous mode
[   82.771494][ T6133] veth1_vlan: entered promiscuous mode
[   82.800917][ T6133] veth0_macvtap: entered promiscuous mode
[   82.809964][ T6133] veth1_macvtap: entered promiscuous mode
[   82.831952][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.868116][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.878518][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.881499][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.886979][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.890061][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.908038][ T5910] usb 3-1: Using ep0 maxpacket: 32
[   82.919197][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   82.924416][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   82.949292][ T5910] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[   82.952974][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.955623][ T5910] usb 3-1: Product: syz
[   82.963737][ T5910] usb 3-1: Manufacturer: syz
[   82.966687][ T5910] usb 3-1: SerialNumber: syz
[   82.969604][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.975928][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.977434][ T5910] usb 3-1: config 0 descriptor??
[   82.989468][ T5910] usb 3-1: no audio or video endpoints found
[   83.014871][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.018127][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.513724][ T5910] usb 3-1: USB disconnect, device number 7
[   83.557885][ T5857] Bluetooth: hci0: command tx timeout
[   83.776734][ T5896] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   83.910043][ T6249] loop1: detected capacity change from 0 to 2048
[   83.945961][ T6249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.950927][ T6249] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.969328][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[   83.972990][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[   83.986443][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   84.000103][ T5896] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[   84.011973][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.015290][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.032400][ T5896] usb 4-1: Product: syz
[   84.034050][ T5896] usb 4-1: Manufacturer: syz
[   84.035997][ T5896] usb 4-1: SerialNumber: syz
[   84.054618][ T5896] usb 4-1: config 0 descriptor??
[   84.061790][ T5896] radioshark2 4-1:0.0: Invalid radioSHARK2 device
[   84.064349][ T5896] radioshark2 4-1:0.0: probe with driver radioshark2 failed with error -22
[   84.068249][ T5896] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[   84.133766][ T6254] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   84.139616][ T6256] loop2: detected capacity change from 0 to 128
[   84.261083][ T6264] loop1: detected capacity change from 0 to 1024
[   84.275131][ T6264] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   84.289836][ T5896] usb 4-1: USB disconnect, device number 2
[   84.415663][ T6271] loop2: detected capacity change from 0 to 2048
[   84.431564][ T6271] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.716703][ T5910] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   84.869153][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.873759][ T5910] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[   84.878369][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.879721][ T6280] loop3: detected capacity change from 0 to 8
[   84.887338][ T5910] usb 3-1: config 0 descriptor??
[   84.907517][ T6280] SQUASHFS error: xz decompression failed, data probably corrupt
[   84.919539][ T6280] SQUASHFS error: Failed to read block 0x108: -5
[   84.922069][ T6280] SQUASHFS error: Unable to read metadata cache entry [106]
[   84.924890][ T6280] SQUASHFS error: Unable to read inode 0x11f
[   85.302536][ T5910] cypress 0003:04B4:BCA1.0003: item fetching failed at offset 0/3
[   85.311303][ T5910] cypress 0003:04B4:BCA1.0003: parse failed
[   85.317705][ T5910] cypress 0003:04B4:BCA1.0003: probe with driver cypress failed with error -22
[   85.506922][   T10] usb 3-1: USB disconnect, device number 8
[   85.613888][ T6299] loop3: detected capacity change from 0 to 128
[   85.617470][ T6299] vfat: Bad value for 'shortname'
[   85.649682][ T5857] Bluetooth: hci0: command tx timeout
[   85.666960][ T6295] loop1: detected capacity change from 0 to 32768
[   85.678916][ T6295] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.128 (6295)
[   85.720231][ T6295] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   85.736889][ T6295] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   85.739632][ T6295] BTRFS error (device loop1): ignoresuperflags must be used with ro mount option
[   85.742344][ T6295] BTRFS error (device loop1): cannot disable free-space-tree
[   85.744698][ T6295] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   85.765074][ T6295] BTRFS error (device loop1): open_ctree failed: -22
[   85.861936][ T6308] loop1: detected capacity change from 0 to 64
[   85.882295][ T6308] Bad inode number on dev loop1: 6 is out of range
[   85.997076][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   86.064209][ T6312] loop2: detected capacity change from 0 to 1024
[   86.068574][ T6312] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   86.072519][ T6312] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   86.085823][ T6312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   86.120529][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.150676][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.154480][   T10] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[   86.165164][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.168873][ T6315] loop2: detected capacity change from 0 to 512
[   86.179586][   T10] usb 4-1: config 0 descriptor??
[   86.179847][ T6315] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   86.196056][ T6315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0102]
[   86.202875][ T6315] System zones: 1-12
[   86.206225][ T6315] EXT4-fs (loop2): orphan cleanup on readonly fs
[   86.211198][ T6315] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.136: invalid indirect mapped block 12 (level 1)
[   86.220385][ T6315] EXT4-fs (loop2): Remounting filesystem read-only
[   86.223680][ T6315] EXT4-fs (loop2): 1 truncate cleaned up
[   86.232372][ T6315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   86.270372][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   86.497873][ T6318] loop2: detected capacity change from 0 to 32768
[   86.502494][ T6318] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.137 (6318)
[   86.519192][ T6318] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[   86.523010][ T6318] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   86.565275][ T6318] BTRFS info (device loop2): enabling ssd optimizations
[   86.568551][ T6318] BTRFS info (device loop2): enabling free space tree
[   86.607586][ T1272] cfg80211: failed to load regulatory.db
[   86.616857][   T10] hkems 0003:2006:0118.0004: unknown main item tag 0x0
[   86.621852][   T10] hkems 0003:2006:0118.0004: unknown main item tag 0x0
[   86.624812][   T10] hkems 0003:2006:0118.0004: unknown main item tag 0x0
[   86.634257][   T10] hkems 0003:2006:0118.0004: unknown main item tag 0x0
[   86.641739][   T10] hkems 0003:2006:0118.0004: unknown main item tag 0x0
[   86.659431][   T10] hkems 0003:2006:0118.0004: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0
[   86.669571][   T10] hkems 0003:2006:0118.0004: no inputs found
[   86.673775][   T10] hkems 0003:2006:0118.0004: force feedback init failed
[   86.722584][ T5850] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[   86.813103][   T10] usb 4-1: USB disconnect, device number 3
[   87.116534][ T5854] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   87.278498][ T5854] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   87.282192][ T5854] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   87.285877][ T5854] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   87.294033][ T5854] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   87.297775][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.300963][ T5854] usb 2-1: Product: syz
[   87.302739][ T5854] usb 2-1: Manufacturer: syz
[   87.304522][ T5854] usb 2-1: SerialNumber: syz
[   87.524045][ T5854] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   87.662151][ T6345] loop3: detected capacity change from 0 to 32768
[   87.679867][ T6345] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   87.706961][ T6345] XFS (loop3): Ending clean mount
[   87.715003][ T6345] XFS (loop3): Quotacheck needed: Please wait.
[   87.727798][ T5857] Bluetooth: hci0: command tx timeout
[   87.737457][ T5854] usb 2-1: USB disconnect, device number 7
[   87.737481][ T6345] XFS (loop3): Quotacheck: Done.
[   87.754327][ T5854] usblp0: removed
[   87.823029][ T6133] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   88.091302][ T6365] loop3: detected capacity change from 0 to 256
[   88.110911][ T6365] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   88.115072][ T6365] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   88.139598][ T6365] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   88.144850][ T6365] exFAT-fs (loop3): failed to load alloc-bitmap
[   88.149159][ T6365] exFAT-fs (loop3): failed to recognize exfat type
[   88.176825][ T5896] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   88.352570][ T5896] usb 3-1: Using ep0 maxpacket: 8
[   88.364503][ T5896] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[   88.370824][ T5896] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   88.374566][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.386678][ T5896] usb 3-1: Product: syz
[   88.388367][ T5896] usb 3-1: Manufacturer: syz
[   88.390190][ T5896] usb 3-1: SerialNumber: syz
[   88.395286][ T5896] usb 3-1: config 0 descriptor??
[   88.411763][ T5896] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   88.414970][ T5896] usb 3-1: setting power ON
[   88.426767][ T5896] dvb-usb: bulk message failed: -22 (2/0)
[   88.435070][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   88.447489][ T5896] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   88.450919][ T5896] usb 3-1: media controller created
[   88.472618][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   88.503662][ T5896] usb 3-1: selecting invalid altsetting 6
[   88.505523][ T5896] usb 3-1: digital interface selection failed (-22)
[   88.508885][ T5896] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   88.513320][ T5896] usb 3-1: setting power OFF
[   88.515321][ T5896] dvb-usb: bulk message failed: -22 (2/0)
[   88.520304][ T5896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   88.524954][ T5896] (NULL device *): no alternate interface
[   88.568198][ T5896] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   88.596046][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'.
[   88.607842][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'.
[   88.613106][ T5896] usb 3-1: USB disconnect, device number 9
[   88.652444][ T6371] loop1: detected capacity change from 0 to 32768
[   88.721818][ T6371] JBD2: Ignoring recovery information on journal
[   88.779579][ T6371] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   88.877388][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[   89.712917][ T6401] loop1: detected capacity change from 0 to 512
[   89.759844][ T6401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.765259][ T6401] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   89.790403][ T1272] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   89.869366][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.957266][ T1272] usb 3-1: Using ep0 maxpacket: 32
[   89.964261][ T1272] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[   89.970550][ T1272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.976210][ T1272] usb 3-1: config 0 descriptor??
[   90.096166][ T6416] loop3: detected capacity change from 0 to 4096
[   90.176723][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   90.191307][ T1272] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[   90.203506][ T1272] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   90.212501][ T1272] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[   90.215045][ T1272] usb 3-1: media controller created
[   90.219472][ T6418] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   90.230924][ T1272] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   90.261689][ T1272] DVB: Unable to find symbol dib7000p_attach()
[   90.263670][ T1272] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[   90.306520][ T1272] rc_core: IR keymap rc-dib0700-rc5 not found
[   90.308547][ T1272] Registered IR keymap rc-empty
[   90.310178][ T1272] dvb-usb: could not initialize remote control.
[   90.312066][ T1272] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[   90.336559][   T10] usb 2-1: Using ep0 maxpacket: 32
[   90.343049][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.347376][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.350344][   T10] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   90.353215][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.360813][   T10] usb 2-1: config 0 descriptor??
[   90.438582][ T1272] usb 3-1: USB disconnect, device number 10
[   90.462649][ T1272] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[   91.075338][   T10] hid-led 0003:27B8:01ED.0005: probe with driver hid-led failed with error -71
[   91.084081][   T10] usb 2-1: USB disconnect, device number 8
[   91.357447][ T6438] loop3: detected capacity change from 0 to 128
[   91.365259][ T6438] EXT4-fs (loop3): Test dummy encryption mode enabled
[   91.373556][ T6438] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   91.378213][ T6438] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   91.439556][ T6438] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   91.627943][ T6438] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   91.629514][ T6454] loop2: detected capacity change from 0 to 1024
[   91.663980][ T6454] EXT4-fs: Ignoring removed nobh option
[   91.665831][ T6454] EXT4-fs: Ignoring removed bh option
[   91.687602][ T6454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.709648][ T6456] loop1: detected capacity change from 0 to 4096
[   91.718530][ T6456] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   91.752803][ T6133] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.815015][ T6456] ntfs3(loop1): ino=19, mi_enum_attr
[   91.826035][ T6456] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   91.833718][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.853923][ T6456] ntfs3(loop1): failed to convert "c46c" to iso8859-2
[   91.872055][ T6456] ntfs3(loop1): ino=20, mi_enum_attr
[   91.884163][ T6460] loop3: detected capacity change from 0 to 4096
[   91.924375][ T6460] ntfs3(loop3): ino=5, "/" indx_read
[   91.928505][ T6460] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   92.336456][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   92.486524][   T10] usb 2-1: Using ep0 maxpacket: 32
[   92.491340][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   92.503891][   T10] usb 2-1: config 125 has an invalid interface number: 27 but max is 0
[   92.507362][   T10] usb 2-1: config 125 has no interface number 0
[   92.509955][   T10] usb 2-1: config 125 interface 27 altsetting 24 has an invalid endpoint descriptor of length 2, skipping
[   92.514452][   T10] usb 2-1: config 125 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping
[   92.519079][   T10] usb 2-1: config 125 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   92.524616][   T10] usb 2-1: config 125 interface 27 has no altsetting 0
[   92.531004][   T10] usb 2-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70
[   92.534596][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.537678][   T10] usb 2-1: Product: syz
[   92.539458][   T10] usb 2-1: Manufacturer: syz
[   92.541386][   T10] usb 2-1: SerialNumber: syz
[   92.607274][ T5896] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[   92.758460][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.763457][   T10] hub 2-1:125.27: bad descriptor, ignoring hub
[   92.765739][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[   92.765951][   T10] hub 2-1:125.27: probe with driver hub failed with error -5
[   92.770590][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[   92.777388][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 255, setting to 64
[   92.778690][   T10] sierra 2-1:125.27: Sierra USB modem converter detected
[   92.781561][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   92.783942][ T5896] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[   92.794142][   T10] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[   92.794884][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.800138][ T5896] usb 3-1: Product: syz
[   92.801716][ T5896] usb 3-1: Manufacturer: syz
[   92.803629][ T5896] usb 3-1: SerialNumber: syz
[   92.813710][ T5896] usb 3-1: config 0 descriptor??
[   92.817688][ T6479] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   92.824923][   T10] usb 2-1: USB disconnect, device number 9
[   92.834639][   T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[   92.840118][   T10] sierra 2-1:125.27: device disconnected
[   92.878124][ T5896] rc_core: IR keymap rc-xbox-dvd not found
[   92.880531][ T5896] Registered IR keymap rc-empty
[   92.883976][ T5896] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   92.900783][ T5896] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9
[   92.919893][ T6488] Zero length message leads to an empty skb
[   93.054971][   T10] usb 3-1: USB disconnect, device number 11
[   93.055025][    C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[   93.237585][ T5845] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   93.336084][ T6492] program syz.1.190 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.391700][ T5845] usb 4-1: Using ep0 maxpacket: 16
[   93.399894][ T5845] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   93.404223][ T5845] usb 4-1: config 0 has no interface number 0
[   93.416395][ T5845] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[   93.419481][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.422888][ T5845] usb 4-1: Product: syz
[   93.424627][ T5845] usb 4-1: Manufacturer: syz
[   93.426813][ T5845] usb 4-1: SerialNumber: syz
[   93.430874][ T5845] usb 4-1: config 0 descriptor??
[   93.440270][ T5845] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[   93.458856][ T5845] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -2
[   93.484511][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   93.641860][ T5845] usb 4-1: USB disconnect, device number 4
[   94.436423][ T5896] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   94.538366][ T5845] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   94.587149][ T5896] usb 4-1: Using ep0 maxpacket: 32
[   94.599257][ T5896] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   94.602520][ T5896] usb 4-1: config 0 has no interface number 0
[   94.615157][ T5896] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   94.621894][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.624847][ T5896] usb 4-1: Product: syz
[   94.626874][ T5896] usb 4-1: Manufacturer: syz
[   94.628526][ T5896] usb 4-1: SerialNumber: syz
[   94.635245][ T5896] usb 4-1: config 0 descriptor??
[   94.644073][ T5896] smsc95xx v2.0.0
[   94.708168][ T5845] usb 2-1: Using ep0 maxpacket: 32
[   94.712672][ T5845] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.717233][ T5845] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.723467][ T5845] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   94.727184][ T5845] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   94.730466][ T5845] usb 2-1: Product: syz
[   94.732804][ T5845] usb 2-1: Manufacturer: syz
[   94.741702][ T5845] hub 2-1:4.0: USB hub found
[   94.924171][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   94.947780][ T5845] hub 2-1:4.0: config failed, hub has too many ports! (err -19)
[   95.050931][ T5896] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   95.054249][ T5896] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   95.077310][   T10] usb 3-1: Using ep0 maxpacket: 32
[   95.081322][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[   95.087153][   T10] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[   95.090534][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.093211][   T10] usb 3-1: Product: syz
[   95.094599][   T10] usb 3-1: Manufacturer: syz
[   95.096198][   T10] usb 3-1: SerialNumber: syz
[   95.100204][   T10] usb 3-1: config 0 descriptor??
[   95.102843][ T6629] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   95.108258][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   95.257603][   T10] usb 2-1: USB disconnect, device number 10
[   95.319031][   T10] usb 3-1: USB disconnect, device number 12
[   95.462730][ T5896] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[   95.468480][ T5896] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[   95.475221][ T5896] usb 4-1: USB disconnect, device number 5
[   95.848581][ T6632] loop1: detected capacity change from 0 to 32768
[   95.880382][ T6632] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   95.908818][ T6632] XFS (loop1): Ending clean mount
[   95.914158][ T6632] XFS (loop1): Quotacheck needed: Please wait.
[   95.943730][ T6632] XFS (loop1): Quotacheck: Done.
[   96.077417][ T5851] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   96.118519][ T5896] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[   96.282024][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   96.286735][ T5896] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[   96.289652][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.298968][ T5896] usb 3-1: config 0 descriptor??
[   96.301589][ T6639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   96.362816][ T6654] loop1: detected capacity change from 0 to 4096
[   96.367578][ T6654] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   96.389153][ T6654] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   96.401907][ T6654] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[   96.427482][ T6654] ntfs3: Volume is dirty and "force" flag is not set!
[   96.466573][   T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   96.547309][ T6658] loop1: detected capacity change from 0 to 128
[   96.552357][ T6658] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   96.559458][ T6658] hpfs: filesystem error: improperly stopped
[   96.561916][ T6658] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   96.565014][ T6658] hpfs: You really don't want any checks? You are crazy...
[   96.569312][ T6658] hpfs: hpfs_map_sector(): read error
[   96.572745][ T6658] hpfs: code page support is disabled
[   96.575040][ T6658] hpfs: hpfs_map_4sectors(): unaligned read
[   96.578865][ T6658] hpfs: hpfs_map_4sectors(): unaligned read
[   96.581219][ T6658] hpfs: filesystem error: unable to find root dir
[   96.618202][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   96.622391][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[   96.627619][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[   96.631834][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   96.635441][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   96.647840][   T10] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[   96.651392][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.657635][   T10] usb 4-1: Product: syz
[   96.665213][   T10] usb 4-1: Manufacturer: syz
[   96.669860][   T10] usb 4-1: SerialNumber: syz
[   96.678196][   T10] usb 4-1: config 0 descriptor??
[   96.693582][   T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[   96.718960][ T5896] microsoft 0003:045E:009D.0006: unknown main item tag 0x0
[   96.725560][ T5896] microsoft 0003:045E:009D.0006: unknown main item tag 0x0
[   96.732875][ T5896] microsoft 0003:045E:009D.0006: unknown main item tag 0x0
[   96.735239][ T5896] microsoft 0003:045E:009D.0006: unknown main item tag 0x0
[   96.749486][ T5896] microsoft 0003:045E:009D.0006: unknown main item tag 0x0
[   96.759508][ T5896] microsoft 0003:045E:009D.0006: hidraw0: USB HID v1.01 Device [HID 045e:009d] on usb-dummy_hcd.2-1/input0
[   96.763950][ T5896] microsoft 0003:045E:009D.0006: no inputs found
[   96.776646][ T5896] microsoft 0003:045E:009D.0006: could not initialize ff, continuing anyway
[   96.893639][ T5896] usb 4-1: USB disconnect, device number 6
[   96.917792][   T10] usb 3-1: USB disconnect, device number 13
[   97.081358][ T6664] loop1: detected capacity change from 0 to 32768
[   97.105004][ T6664] (syz.1.210,6664,0):ocfs2_load_local_alloc:320 ERROR: Local alloc size is invalid (la_size = 33328)
[   97.117307][ T6664] (syz.1.210,6664,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[   97.126034][ T6664] (syz.1.210,6664,0):ocfs2_check_volume:2404 ERROR: status = -22
[   97.129754][ T6664] (syz.1.210,6664,0):ocfs2_check_volume:2432 ERROR: status = -22
[   97.132735][ T6664] (syz.1.210,6664,0):ocfs2_mount_volume:1764 ERROR: status = -22
[   97.143398][ T6664] (syz.1.210,6664,0):ocfs2_fill_super:1177 ERROR: status = -22
[   97.509751][ T6676] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   97.512284][ T6676] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   97.528004][ T6676] vhci_hcd vhci_hcd.0: Device attached
[   97.588221][ T6672] loop1: detected capacity change from 0 to 32768
[   97.615715][ T6672] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   97.714471][ T6672] syz.1.213 (6672) used greatest stack depth: 17928 bytes left
[   97.743595][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[   97.776728][ T5910] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[   97.780963][ T5896] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   97.957862][ T5896] usb 3-1: Using ep0 maxpacket: 16
[   97.962250][ T5896] usb 3-1: config 0 has no interfaces?
[   97.964185][ T5896] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   97.968949][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.985026][ T5896] usb 3-1: config 0 descriptor??
[   98.115141][ T6689] loop1: detected capacity change from 0 to 2048
[   98.137727][ T6689] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.220583][ T5896] usb 3-1: USB disconnect, device number 14
[   98.238914][ T6677] vhci_hcd: connection closed
[   98.242438][   T13] vhci_hcd: stop threads
[   98.289324][   T13] vhci_hcd: release socket
[   98.309868][   T13] vhci_hcd: disconnect device
[   98.454164][ T6696] loop1: detected capacity change from 0 to 512
[   98.478387][ T6696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.483601][ T6696] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.500508][ T6696] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   98.507212][ T6696] EXT4-fs (loop1): Remounting filesystem read-only
[   98.538872][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.547026][ T6539] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   98.552116][ T6539] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   98.626768][ T5896] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[   98.653653][ T6703] loop1: detected capacity change from 0 to 1024
[   98.809268][ T5896] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[   98.812476][ T5896] usb 4-1: config 0 has no interface number 0
[   98.814834][ T5896] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   98.821577][ T5896] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   98.825032][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.830266][ T5896] usb 4-1: Product: syz
[   98.832302][ T5896] usb 4-1: Manufacturer: syz
[   98.835433][ T5896] usb 4-1: SerialNumber: syz
[   98.842206][ T5896] usb 4-1: config 0 descriptor??
[   98.846188][ T5896] yurex 4-1:0.50: Could not find endpoints
[   99.054497][ T5896] usb 4-1: USB disconnect, device number 7
[   99.166562][ T5897] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   99.316568][ T5897] usb 2-1: Using ep0 maxpacket: 32
[   99.320618][ T5897] usb 2-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config
[   99.327121][ T5897] usb 2-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5
[   99.330682][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.333856][ T5897] usb 2-1: Product: syz
[   99.335540][ T5897] usb 2-1: Manufacturer: syz
[   99.337544][ T5897] usb 2-1: SerialNumber: syz
[   99.348857][ T5897] pwc: Askey VC010 type 1 USB webcam detected.
[   99.554969][ T5897] pwc: send_video_command error -71
[   99.557428][ T5897] pwc: Failed to set video mode CIF@30 fps; return code = -71
[   99.566566][ T5897] Philips webcam 2-1:76.0: probe with driver Philips webcam failed with error -71
[   99.578144][ T5897] usb 2-1: USB disconnect, device number 11
[   99.986316][ T6722] loop3: detected capacity change from 0 to 32768
[  100.012737][ T6734] loop2: detected capacity change from 0 to 128
[  100.019746][ T6734] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  100.024350][ T6734] hpfs: filesystem error: improperly stopped
[  100.026315][ T6722] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  100.035887][ T6734] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  100.040034][ T6734] hpfs: You really don't want any checks? You are crazy...
[  100.046267][ T6734] hpfs: hpfs_map_sector(): read error
[  100.051899][ T6734] hpfs: code page support is disabled
[  100.059075][ T6734] hpfs: hpfs_map_4sectors(): unaligned read
[  100.061524][ T6734] hpfs: hpfs_map_4sectors(): unaligned read
[  100.071064][ T6722] XFS (loop3): Ending clean mount
[  100.075723][ T6734] hpfs: filesystem error: unable to find root dir
[  100.104337][ T6133] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  100.348970][ T6748] loop3: detected capacity change from 0 to 256
[  100.412799][ T6748] FAT-fs (loop3): Directory bread(block 64) failed
[  100.415602][ T6748] FAT-fs (loop3): Directory bread(block 65) failed
[  100.421597][ T6748] FAT-fs (loop3): Directory bread(block 66) failed
[  100.424085][ T6748] FAT-fs (loop3): Directory bread(block 67) failed
[  100.436095][ T6748] FAT-fs (loop3): Directory bread(block 68) failed
[  100.440833][ T6748] FAT-fs (loop3): Directory bread(block 69) failed
[  100.443593][ T6748] FAT-fs (loop3): Directory bread(block 70) failed
[  100.446232][ T6748] FAT-fs (loop3): Directory bread(block 71) failed
[  100.449063][ T6748] FAT-fs (loop3): Directory bread(block 72) failed
[  100.451641][ T6748] FAT-fs (loop3): Directory bread(block 73) failed
[  100.545986][ T6744] loop2: detected capacity change from 0 to 32768
[  100.600446][ T6744] read_mapping_page failed!
[  100.602374][ T1272] kernel read not supported for file /sg0 (pid: 1272 comm: kworker/0:2)
[  100.602509][ T6744] ERROR: (device loop2): txCommit: 
[  100.602509][ T6744] 
[  100.611129][ T6744] ERROR: (device loop2): remounting filesystem as read-only
[  100.614151][ T6744] ERROR: (device loop2): diFree: numfree > numinos
[  100.614151][ T6744] 
[  100.703508][ T6767] loop1: detected capacity change from 0 to 256
[  100.707350][ T6766] syz.3.244 uses obsolete (PF_INET,SOCK_PACKET)
[  100.720950][ T6767] exfat: Deprecated parameter 'utf8'
[  100.722818][ T6767] exfat: Deprecated parameter 'utf8'
[  100.724814][ T6767] exfat: Deprecated parameter 'utf8'
[  100.733666][ T6767] exfat: Deprecated parameter 'utf8'
[  100.750692][ T6767] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d)
[  100.807010][ T6769] process 'syz.2.246' launched '/dev/fd/3' with NULL argv: empty string added
[  101.086594][ T5896] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  101.094491][ T6785] netlink: 'syz.2.253': attribute type 1 has an invalid length.
[  101.196522][ T1272] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  101.260912][ T5896] usb 2-1: Using ep0 maxpacket: 16
[  101.265808][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.274333][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  101.280525][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  101.284324][ T5896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  101.300824][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.310259][ T5896] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  101.313747][ T5896] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  101.324127][ T5896] usb 2-1: Manufacturer: syz
[  101.331696][ T6796] loop2: detected capacity change from 0 to 128
[  101.332150][ T5896] usb 2-1: config 0 descriptor??
[  101.334488][ T6796] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  101.345407][ T6796] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  101.351957][ T1272] usb 4-1: config 0 has an invalid interface number: 93 but max is 0
[  101.355150][ T1272] usb 4-1: config 0 has no interface number 0
[  101.369287][ T1272] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  101.376113][ T1272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.383311][ T1272] usb 4-1: Product: syz
[  101.384907][ T1272] usb 4-1: Manufacturer: syz
[  101.387090][ T1272] usb 4-1: SerialNumber: syz
[  101.391988][ T1272] usb 4-1: config 0 descriptor??
[  101.421904][ T6616] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  101.452473][   T33] audit: type=1326 audit(1759294070.016:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.2.259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5db78ec29 code=0x7ffc0000
[  101.467484][   T33] audit: type=1326 audit(1759294070.016:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.2.259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5db78ec29 code=0x7ffc0000
[  101.477991][   T33] audit: type=1326 audit(1759294070.016:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.2.259" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5db78d590 code=0x7ffc0000
[  101.485374][   T33] audit: type=1326 audit(1759294070.016:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.2.259" exe="/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff5db790457 code=0x7ffc0000
[  101.496515][   T33] audit: type=1326 audit(1759294070.016:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.2.259" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5db78ec29 code=0x7ffc0000
[  101.503913][   T33] audit: type=1326 audit(1759294070.016:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.2.259" exe="/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff5db790457 code=0x7ffc0000
[  101.513726][   T33] audit: type=1326 audit(1759294070.016:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.2.259" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff5db78d88a code=0x7ffc0000
[  101.515139][ T6800] vxcan1: tx address claim with dlc 0
[  101.520641][   T33] audit: type=1326 audit(1759294070.016:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.2.259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5db78ec29 code=0x7ffc0000
[  101.604200][ T1272] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware
[  101.608314][ T5896] rc_core: IR keymap rc-hauppauge not found
[  101.610697][ T5896] Registered IR keymap rc-empty
[  101.619724][ T5896] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  101.626245][ T1272] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  101.631814][ T1272] dib0700: firmware download failed at 7 with -22
[  101.638266][ T1272] usb 4-1: USB disconnect, device number 8
[  101.656592][ T5896] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  101.680690][ T5896] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  101.688301][ T5896] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11
[  101.698408][ T5896] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  101.729416][ T5896] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  101.756446][ T5896] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  101.776636][ T5896] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  101.808289][ T5896] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  101.826489][ T5896] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  101.846438][ T5896] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  101.866537][ T5854] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  101.869458][ T5896] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  101.886512][ T5896] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  101.906427][ T5896] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  101.928114][ T5896] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  101.931092][ T5896] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  101.993425][ T5897] usb 2-1: USB disconnect, device number 12
[  102.023056][ T5854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.028361][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  102.033167][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  102.041429][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  102.045162][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  102.052750][ T5854] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  102.056295][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  102.059716][ T5854] usb 3-1: Product: syz
[  102.061409][ T5854] usb 3-1: Manufacturer: syz
[  102.064348][ T5854] usb 3-1: SerialNumber: syz
[  102.069716][ T5854] usb 3-1: config 0 descriptor??
[  102.281225][ T5854] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  102.283729][ T5854] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  102.406502][ T5896] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  102.482025][ T5854] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71
[  102.486805][ T5854] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  102.490350][ T5854] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[  102.496067][ T5854] usb 3-1: USB disconnect, device number 15
[  102.560451][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.564435][ T5896] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  102.568235][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.574845][ T5896] usb 4-1: config 0 descriptor??
[  102.581155][ T5896] pwc: Askey VC010 type 2 USB webcam detected.
[  102.766459][ T5910] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  102.926861][ T5910] usb 2-1: Using ep0 maxpacket: 16
[  102.931032][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  102.936740][ T5910] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  102.939747][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.942377][ T5910] usb 2-1: Product: syz
[  102.943733][ T5910] usb 2-1: Manufacturer: syz
[  102.945556][ T5910] usb 2-1: SerialNumber: syz
[  102.949749][ T5910] usb 2-1: config 0 descriptor??
[  102.960666][ T5910] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  102.983240][ T5896] pwc: recv_control_msg error -32 req 02 val 2b00
[  102.986820][ T5896] pwc: recv_control_msg error -32 req 02 val 2700
[  102.989876][ T5896] pwc: recv_control_msg error -32 req 02 val 2c00
[  103.159653][   T13] usb 2-1: Failed to submit usb control message: -71
[  103.160165][ T5854] usb 2-1: USB disconnect, device number 13
[  103.162207][   T13] usb 2-1: unable to send the bmi data to the device: -71
[  103.167233][   T13] usb 2-1: unable to get target info from device
[  103.170636][   T13] usb 2-1: could not get target info (-71)
[  103.173575][   T13] usb 2-1: could not probe fw (-71)
[  103.199790][ T5896] pwc: recv_control_msg error -32 req 04 val 1300
[  103.206870][ T5896] pwc: recv_control_msg error -32 req 04 val 1400
[  103.214368][ T5896] pwc: recv_control_msg error -32 req 02 val 2000
[  103.219506][ T5896] pwc: recv_control_msg error -32 req 02 val 2100
[  103.223992][ T5896] pwc: recv_control_msg error -71 req 04 val 1500
[  103.229014][ T5896] pwc: recv_control_msg error -71 req 02 val 2500
[  103.234198][ T5896] pwc: recv_control_msg error -71 req 02 val 2400
[  103.238328][ T5896] pwc: recv_control_msg error -71 req 02 val 2600
[  103.241237][ T5896] pwc: recv_control_msg error -71 req 02 val 2900
[  103.244139][ T5896] pwc: recv_control_msg error -71 req 02 val 2800
[  103.247983][ T5896] pwc: recv_control_msg error -71 req 04 val 1100
[  103.250891][ T5896] pwc: recv_control_msg error -71 req 04 val 1200
[  103.257258][ T5896] pwc: Registered as video103.
[  103.261646][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12
[  103.266900][ T5910] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  103.284214][ T5896] usb 4-1: USB disconnect, device number 9
[  103.439352][ T5910] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  103.443585][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.447212][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  103.451509][ T5910] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  103.454781][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.459872][ T5910] usb 3-1: config 0 descriptor??
[  103.712159][ T6819] loop1: detected capacity change from 0 to 128
[  103.729357][ T6819] syz.1.266: attempt to access beyond end of device
[  103.729357][ T6819] loop1: rw=2051, sector=128, nr_sectors = 913 limit=128
[  103.812439][ T6823] loop1: detected capacity change from 0 to 2048
[  103.848941][ T6823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  103.866720][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  103.866733][   T33] audit: type=1800 audit(1759294072.426:11): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.268" name="file1" dev="loop1" ino=15 res=0 errno=0
[  103.885245][ T5910] holtek_kbd 0003:04D9:A055.0007: unbalanced delimiter at end of report description
[  103.885880][ T6823] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  103.890166][ T5910] holtek_kbd 0003:04D9:A055.0007: probe with driver holtek_kbd failed with error -22
[  103.904153][ T6823] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28
[  103.914810][ T6823] EXT4-fs (loop1): This should not happen!! Data will be lost
[  103.914810][ T6823] 
[  103.926403][ T6823] EXT4-fs (loop1): Total free blocks count 0
[  103.930016][ T6823] EXT4-fs (loop1): Free/Dirty block details
[  103.931949][ T6823] EXT4-fs (loop1): free_blocks=2415919104
[  103.933787][ T6823] EXT4-fs (loop1): dirty_blocks=208
[  103.935552][ T6823] EXT4-fs (loop1): Block reservation details
[  103.946781][ T6823] EXT4-fs (loop1): i_reserved_data_blocks=13
[  103.950171][ T6828] loop3: detected capacity change from 0 to 4096
[  104.003974][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  104.061948][ T6832] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  104.109240][ T5897] usb 3-1: USB disconnect, device number 16
[  104.396483][ T1272] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  104.446500][ T5910] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  104.546471][ T1272] usb 2-1: Using ep0 maxpacket: 32
[  104.550567][ T1272] usb 2-1: config 4 has an invalid interface number: 128 but max is 0
[  104.553762][ T1272] usb 2-1: config 4 has no interface number 0
[  104.556304][ T1272] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.560900][ T1272] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.565157][ T1272] usb 2-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00
[  104.568875][ T1272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.581994][ T1272] hub 2-1:4.128: USB hub found
[  104.596477][ T5910] usb 4-1: Using ep0 maxpacket: 16
[  104.601102][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short
[  104.605383][ T5910] usb 4-1: config 248 has an invalid interface number: 74 but max is 0
[  104.608995][ T5910] usb 4-1: config 248 has no interface number 0
[  104.611480][ T5910] usb 4-1: config 248 interface 74 has no altsetting 0
[  104.616787][ T5910] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  104.626778][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.630111][ T5910] usb 4-1: Product: syz
[  104.631749][ T5910] usb 4-1: Manufacturer: syz
[  104.633583][ T5910] usb 4-1: SerialNumber: syz
[  104.791825][ T1272] hub 2-1:4.128: config failed, can't read hub descriptor (err -90)
[  104.865488][ T5910] go7007 4-1:248.74: Sensoray 2250 found
[  104.872748][ T5910] go7007 4-1:248.74: probe with driver go7007 failed with error -12
[  104.888632][ T5910] usb 4-1: USB disconnect, device number 10
[  105.106698][   T10] usb 2-1: USB disconnect, device number 14
[  105.226594][ T1272] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  105.385855][ T1272] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  105.390032][ T1272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.395115][ T1272] usb 3-1: Product: syz
[  105.397263][ T1272] usb 3-1: Manufacturer: syz
[  105.399166][ T1272] usb 3-1: SerialNumber: syz
[  105.412844][ T1272] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  105.454571][ T1272] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  105.572795][ T6857] loop1: detected capacity change from 0 to 22
[  105.580155][ T6857] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  105.589356][ T6857] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  106.021858][ T6862] loop1: detected capacity change from 0 to 1024
[  106.052241][ T5854] usb 3-1: USB disconnect, device number 17
[  106.067733][   T33] audit: type=1800 audit(1759294074.626:12): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.285" name="file1" dev="loop1" ino=2 res=0 errno=0
[  106.077992][ T6862] hfsplus: invalid catalog entry type
[  106.101697][ T6582] hfsplus: bad catalog folder entry
[  106.104309][ T6582] hfsplus: bad catalog file entry
[  106.516984][ T1272] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  106.520001][ T1272] ath9k_htc: Failed to initialize the device
[  106.523644][ T5854] usb 3-1: ath9k_htc: USB layer deinitialized
[  106.557645][ T6867] loop3: detected capacity change from 0 to 32768
[  106.583021][ T6867] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  106.605836][ T6867] (syz.3.287,6867,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  106.614907][ T6867] (syz.3.287,6867,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  106.620005][ T6867] (syz.3.287,6867,1):ocfs2_rename:1486 ERROR: status = -2
[  106.621489][ T6871] loop2: detected capacity change from 0 to 256
[  106.622272][ T6867] (syz.3.287,6867,1):ocfs2_rename:1702 ERROR: status = -2
[  106.643270][ T6871] FAT-fs (loop2): Directory bread(block 64) failed
[  106.649520][ T6871] FAT-fs (loop2): Directory bread(block 65) failed
[  106.652412][ T6871] FAT-fs (loop2): Directory bread(block 66) failed
[  106.655272][ T6871] FAT-fs (loop2): Directory bread(block 67) failed
[  106.658643][ T6871] FAT-fs (loop2): Directory bread(block 68) failed
[  106.661218][ T6871] FAT-fs (loop2): Directory bread(block 69) failed
[  106.662095][ T6133] ocfs2: Unmounting device (7,3) on (node local)
[  106.663552][ T6871] FAT-fs (loop2): Directory bread(block 70) failed
[  106.687759][ T6871] FAT-fs (loop2): Directory bread(block 71) failed
[  106.692180][ T6871] FAT-fs (loop2): Directory bread(block 72) failed
[  106.696088][ T6871] FAT-fs (loop2): Directory bread(block 73) failed
[  106.806970][ T6871] syz.2.288: attempt to access beyond end of device
[  106.806970][ T6871] loop2: rw=524288, sector=1256, nr_sectors = 4 limit=256
[  106.813737][ T6871] syz.2.288: attempt to access beyond end of device
[  106.813737][ T6871] loop2: rw=0, sector=1256, nr_sectors = 4 limit=256
[  106.821638][ T6871] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  106.827831][   T33] audit: type=1800 audit(1759294075.386:13): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.288" name="cpu.stat" dev="loop2" ino=1048614 res=0 errno=0
[  106.916502][ T6879] loop2: detected capacity change from 0 to 512
[  106.922314][ T6879] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  106.961636][ T6879] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0002]
[  106.964891][ T6879] System zones: 0-2, 18-18, 34-35
[  106.972448][ T6879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.977305][ T6879] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.019011][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.094101][ T6890] loop2: detected capacity change from 0 to 512
[  107.097123][ T5854] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  107.114998][ T6890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.146438][   T33] audit: type=1800 audit(1759294075.706:14): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.295" name="bus" dev="loop2" ino=18 res=0 errno=0
[  107.185890][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.269156][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.272608][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.277000][ T5854] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  107.280250][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.298398][ T5854] usb 4-1: config 0 descriptor??
[  107.362170][ T6901] loop1: detected capacity change from 0 to 24
[  107.516739][ T1272] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  107.669977][ T1272] usb 3-1: config 0 has an invalid interface number: 207 but max is 0
[  107.673407][ T1272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.677448][ T1272] usb 3-1: config 0 has no interface number 0
[  107.685059][ T1272] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  107.688541][ T1272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.691144][ T1272] usb 3-1: Product: syz
[  107.692684][ T1272] usb 3-1: Manufacturer: syz
[  107.694431][ T1272] usb 3-1: SerialNumber: syz
[  107.700577][ T1272] usb 3-1: config 0 descriptor??
[  107.715403][ T1272] qmi_wwan 3-1:0.207: probe with driver qmi_wwan failed with error -22
[  107.763257][ T5854] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  107.797243][ T5854] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0008/input/input14
[  107.954201][ T5897] usb 3-1: USB disconnect, device number 18
[  107.978964][ T5854] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  108.029816][ T5854] usb 4-1: USB disconnect, device number 11
[  108.566016][ T6903] loop2: detected capacity change from 0 to 8
[  108.808547][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'.
[  108.878290][ T5897] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  108.899080][ T6910] loop1: detected capacity change from 0 to 40427
[  108.902967][ T6910] F2FS-fs (loop1): Image doesn't support compression
[  108.905638][ T6910] F2FS-fs (loop1): build fault injection rate: 690
[  108.909238][ T6910] F2FS-fs (loop1): invalid crc value
[  108.955577][ T6910] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  108.960632][ T6910] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  108.981060][ T6910] syz.1.305: attempt to access beyond end of device
[  108.981060][ T6910] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  109.000339][ T5851] syz-executor: attempt to access beyond end of device
[  109.000339][ T5851] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  109.008529][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  109.008547][ T5851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.008557][ T5851] Call Trace:
[  109.008574][ T5851]  <TASK>
[  109.008590][ T5851]  dump_stack_lvl+0x189/0x250
[  109.008644][ T5851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.008660][ T5851]  ? __pfx_queue_work_on+0x10/0x10
[  109.008672][ T5851]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.008689][ T5851]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.008712][ T5851]  f2fs_handle_critical_error+0x37c/0x540
[  109.008733][ T5851]  f2fs_write_end_io+0x886/0xb60
[  109.008767][ T5851]  __submit_merged_bio+0x27a/0x6a0
[  109.008788][ T5851]  __submit_merged_write_cond+0x255/0x530
[  109.008815][ T5851]  f2fs_write_data_pages+0x261d/0x3000
[  109.008861][ T5851]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.008926][ T5851]  ? check_path+0x21/0x40
[  109.008939][ T5851]  ? check_noncircular+0xe0/0x160
[  109.008997][ T5851]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.009014][ T5851]  do_writepages+0x32e/0x550
[  109.009039][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  109.009059][ T5851]  filemap_fdatawrite+0x199/0x240
[  109.009074][ T5851]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  109.009128][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  109.009147][ T5851]  f2fs_sync_dirty_inodes+0x31f/0x830
[  109.009177][ T5851]  f2fs_write_checkpoint+0x93e/0x2440
[  109.009193][ T5851]  ? __lock_acquire+0xab9/0xd20
[  109.009237][ T5851]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  109.009304][ T5851]  kill_f2fs_super+0x2cc/0x6d0
[  109.009329][ T5851]  ? __pfx_kill_f2fs_super+0x10/0x10
[  109.009361][ T5851]  ? shrinker_free+0x2ce/0x3e0
[  109.009383][ T5851]  deactivate_locked_super+0xbc/0x130
[  109.009406][ T5851]  cleanup_mnt+0x425/0x4c0
[  109.009424][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.009442][ T5851]  task_work_run+0x1d4/0x260
[  109.009462][ T5851]  ? __pfx_task_work_run+0x10/0x10
[  109.009475][ T5851]  ? __x64_sys_umount+0x122/0x160
[  109.009494][ T5851]  ? exit_to_user_mode_loop+0x40/0x130
[  109.009516][ T5851]  exit_to_user_mode_loop+0xe9/0x130
[  109.009533][ T5851]  do_syscall_64+0x2bd/0xfa0
[  109.009549][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.009563][ T5851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.009577][ T5851]  ? exc_page_fault+0xab/0x100
[  109.009594][ T5851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.009633][ T5851] RIP: 0033:0x7f9e3a78ff57
[  109.009647][ T5851] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  109.009658][ T5851] RSP: 002b:00007ffcc24af368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  109.009673][ T5851] RAX: 0000000000000000 RBX: 00007f9e3a811c2d RCX: 00007f9e3a78ff57
[  109.009681][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc24af420
[  109.009688][ T5851] RBP: 00007ffcc24af420 R08: 0000000000000000 R09: 0000000000000000
[  109.009695][ T5851] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc24b04b0
[  109.009703][ T5851] R13: 00007f9e3a811c2d R14: 000000000001a93b R15: 00007ffcc24b04f0
[  109.009730][ T5851]  </TASK>
[  109.009736][ T5851] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  109.059274][ T6917] loop2: detected capacity change from 0 to 32768
[  109.068125][ T5897] usb 4-1: config 9 has an invalid interface number: 252 but max is 0
[  109.079881][ T6917] btrfs: Deprecated parameter 'usebackuproot'
[  109.092665][ T5897] usb 4-1: config 9 has no interface number 0
[  109.132073][ T6917] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  109.132288][ T5897] usb 4-1: config 9 interface 252 has no altsetting 0
[  109.135532][ T6917] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.308 (6917)
[  109.139657][ T5897] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice=dd.7c
[  109.144818][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.147314][ T5897] usb 4-1: Product: syz
[  109.148623][ T5897] usb 4-1: Manufacturer: syz
[  109.150035][ T5897] usb 4-1: SerialNumber: syz
[  109.172579][ T6917] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.186552][ T6917] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  109.189627][ T6917] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  109.221082][ T6539] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  109.226310][ T6917] BTRFS error (device loop2): failed to load root extent
[  109.229762][ T6917] BTRFS warning (device loop2): try to load backup roots slot 1
[  109.232976][ T6539] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  109.239986][ T6917] BTRFS warning (device loop2): couldn't read tree root
[  109.242799][ T6917] BTRFS warning (device loop2): try to load backup roots slot 2
[  109.245978][ T6572] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  109.250680][ T6917] BTRFS warning (device loop2): couldn't read tree root
[  109.253398][ T6917] BTRFS warning (device loop2): try to load backup roots slot 3
[  109.264423][ T6917] BTRFS info (device loop2): rebuilding free space tree
[  109.286035][ T6917] BTRFS info (device loop2): disabling free space tree
[  109.289774][ T6917] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  109.293702][ T6917] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  109.304390][ T6917] BTRFS info (device loop2): setting nodatasum
[  109.308624][ T6917] BTRFS info (device loop2): setting nodatacow
[  109.310552][ T6917] BTRFS info (device loop2): enabling ssd optimizations
[  109.313226][ T6917] BTRFS info (device loop2): turning off barriers
[  109.315862][ T6917] BTRFS info (device loop2): turning on sync discard
[  109.321800][ T6917] BTRFS info (device loop2): enabling disk space caching
[  109.326237][ T6917] BTRFS info (device loop2): force clearing of disk cache
[  109.346305][ T6917] BTRFS info (device loop2): enabling auto defrag
[  109.348805][ T6917] BTRFS info (device loop2): trying to use backup root at mount time
[  109.351657][ T6917] BTRFS info (device loop2): max_inline set to 0
[  109.366832][ T5897] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.252/input/input15
[  109.377689][ T5280] bcm5974 4-1:9.252: could not read from device
[  109.395879][ T5897] usb 4-1: USB disconnect, device number 12
[  109.400372][ T5280] bcm5974 4-1:9.252: could not read from device
[  109.796866][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  109.814142][ T5850] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.950586][   T10] usb 2-1: config index 0 descriptor too short (expected 797, got 739)
[  109.953800][   T10] usb 2-1: config 0 has an invalid interface number: 16 but max is 0
[  109.976733][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.985004][   T10] usb 2-1: config 0 has no interface number 0
[  109.996523][   T10] usb 2-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  110.000755][   T10] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  110.014798][   T10] usb 2-1: config 0 interface 16 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[  110.024985][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10
[  110.035129][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.040687][ T6946] loop3: detected capacity change from 0 to 2048
[  110.059477][   T10] usb 2-1: config 0 descriptor??
[  110.062908][ T6947] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.108566][ T6946] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  110.116697][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'.
[  110.125052][ T6946] Remounting filesystem read-only
[  110.270984][   T10]  (null): keene_cmd_main failed (-71)
[  110.286618][   T10] video4linux radio48: keene_cmd_main failed (-71)
[  110.289601][   T10] radio-keene 2-1:0.16: V4L2 device registered as radio48
[  110.308219][   T10] usb 2-1: USB disconnect, device number 15
[  110.375199][ T6958] loop3: detected capacity change from 0 to 2048
[  110.440558][ T6958]  loop3: p1 < > p4 < >
[  110.674295][ T6966] loop3: detected capacity change from 0 to 32768
[  110.677713][ T6966] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.321 (6966)
[  110.694383][ T6966] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  110.702997][ T6966] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  110.748203][ T6966] BTRFS info (device loop3): enabling ssd optimizations
[  110.753659][ T6966] BTRFS info (device loop3): enabling free space tree
[  110.942032][ T6992] loop1: detected capacity change from 0 to 256
[  110.997698][ T6992] exfat: Deprecated parameter 'utf8'
[  111.006025][ T6133] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.019632][ T6992] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  111.327074][ T6995] loop1: detected capacity change from 0 to 32768
[  111.358672][   T33] audit: type=1800 audit(1759294079.926:15): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.327" name="file1" dev="loop1" ino=4 res=0 errno=0
[  111.361563][ T6995] read_mapping_page failed!
[  111.368274][ T6995] ERROR: (device loop1): txCommit: 
[  111.368274][ T6995] 
[  111.383271][   T33] audit: type=1800 audit(1759294079.936:16): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.327" name="file1" dev="loop1" ino=4 res=0 errno=0
[  111.401350][ T6999] netlink: 'syz.3.328': attribute type 1 has an invalid length.
[  111.414159][ T6999] netlink: 172 bytes leftover after parsing attributes in process `syz.3.328'.
[  111.425036][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'.
[  111.504191][ T7003] loop2: detected capacity change from 0 to 128
[  111.517338][ T7003] vfat: Unknown parameter ''
[  111.880720][ T6566] read_mapping_page failed!
[  111.883543][ T6566] ERROR: (device loop1): txCommit: 
[  111.883543][ T6566] 
[  111.886188][ T6566] jfs_write_inode: jfs_commit_inode failed!
[  112.028026][ T7008] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  112.031117][ T7008] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  112.189173][ T7016] loop1: detected capacity change from 0 to 8
[  112.194459][ T7016] SQUASHFS error: Unable to read inode 0x127
[  112.390077][ T7024] loop2: detected capacity change from 0 to 512
[  112.395384][ T7024] EXT4-fs: Ignoring removed oldalloc option
[  112.505211][ T7022] loop3: detected capacity change from 0 to 8
[  112.519377][ T7024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.536938][ T7022] SQUASHFS error: lzo decompression failed, data probably corrupt
[  112.540026][ T7022] SQUASHFS error: Failed to read block 0x91: -5
[  112.542424][ T7022] SQUASHFS error: Unable to read metadata cache entry [8f]
[  112.559934][ T7024] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  112.570127][ T7022] SQUASHFS error: Unable to read inode 0x11f
[  112.636249][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.696629][ T7034] binder: 7033:7034 ioctl c0306201 200000000480 returned -14
[  112.704818][ T7030] loop1: detected capacity change from 0 to 4096
[  112.735467][ T7037] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.779094][ T7036] loop3: detected capacity change from 0 to 8192
[  113.306502][ T7046] loop1: detected capacity change from 0 to 4096
[  113.329830][ T7047] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.340932][ T7046] NILFS (loop1): unable to set label with more than 80 bytes
[  113.377255][ T7039] loop2: detected capacity change from 0 to 32768
[  113.393848][ T7039] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  113.481109][ T5850] ocfs2: Unmounting device (7,2) on (node local)
[  113.761856][ T7069] loop1: detected capacity change from 0 to 512
[  113.769287][ T7069] EXT4-fs: Ignoring removed mblk_io_submit option
[  113.774181][ T7069] EXT4-fs: Ignoring removed nomblk_io_submit option
[  113.776308][ T7069] EXT4-fs: Invalid journal IO priority (must be 0-7)
[  113.956437][ T1272] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  113.958945][   T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  114.038911][ T7079] loop1: detected capacity change from 0 to 256
[  114.047387][ T7079] FAT-fs (loop1): bogus logical sector size 0
[  114.049384][ T7079] FAT-fs (loop1): Can't find a valid FAT filesystem
[  114.093705][ T7081] loop1: detected capacity change from 0 to 1024
[  114.108256][ T1272] usb 4-1: Using ep0 maxpacket: 8
[  114.112992][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  114.113513][ T7081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.125199][   T10] usb 3-1: config 3 has an invalid interface number: 51 but max is 0
[  114.126249][ T7081] EXT4-fs error (device loop1): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.1.361: path /142/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  114.128506][   T10] usb 3-1: config 3 has no interface number 0
[  114.140618][ T1272] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  114.144122][ T1272] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  114.155694][ T1272] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  114.160028][ T1272] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  114.165125][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.165432][   T10] usb 3-1: New USB device found, idVendor=0b57, idProduct=2c68, bcdDevice=6e.32
[  114.178879][ T1272] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.188585][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.191243][   T10] usb 3-1: Product: syz
[  114.192491][   T10] usb 3-1: Manufacturer: syz
[  114.193895][   T10] usb 3-1: SerialNumber: syz
[  114.199469][ T1272] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  114.202387][ T1272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.237668][   T10] usbhid 3-1:3.51: couldn't find an input interrupt endpoint
[  114.382507][ T7094] loop1: detected capacity change from 0 to 2048
[  114.401085][ T7095] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.415232][ T1272] usb 4-1: usb_control_msg returned -32
[  114.417336][ T1272] usbtmc 4-1:16.0: can't read capabilities
[  114.451544][ T1272] usb 3-1: USB disconnect, device number 19
[  114.490319][ T7097] loop1: detected capacity change from 0 to 1024
[  114.512807][ T6539] hfsplus: b-tree write err: -5, ino 4
[  114.677344][ T7099] loop1: detected capacity change from 0 to 32768
[  114.681111][ T7099] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.368 (7099)
[  114.703693][ T7099] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.708001][ T7099] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  114.738860][ T7099] BTRFS info (device loop1): enabling ssd optimizations
[  114.741556][ T7099] BTRFS info (device loop1): enabling free space tree
[  114.860529][   T13] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  114.894352][ T5851] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.974324][ T7119] could not allocate digest TFM handle _!5(iHP,omxę*71U"~2.>~e>/y
[  115.030971][ T7121] loop2: detected capacity change from 0 to 512
[  115.054424][ T7121] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  115.059705][ T7121] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.370: iget: bad i_size value: 12154757448730
[  115.066833][ T7121] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.370: couldn't read orphan inode 13 (err -117)
[  115.071939][ T7121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.095759][ T7127] loop1: detected capacity change from 0 to 1024
[  115.111395][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.140118][ T7127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.147678][ T7127] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.153513][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'.
[  115.227258][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.547867][ T7138] loop1: detected capacity change from 0 to 2048
[  115.574447][ T7138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.579190][ T7138] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.632239][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.245395][ T7146] loop1: detected capacity change from 0 to 32768
[  116.257524][ T7146] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  116.279577][ T7146] 
[  116.280431][ T7146] ======================================================
[  116.282926][ T7146] WARNING: possible circular locking dependency detected
[  116.285089][ T7146] syzkaller #0 Not tainted
[  116.286557][ T7146] ------------------------------------------------------
[  116.289770][ T7146] syz.1.379/7146 is trying to acquire lock:
[  116.291691][ T7146] ffff88811a904060 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320
[  116.295655][ T7146] 
[  116.295655][ T7146] but task is already holding lock:
[  116.297950][ T7146] ffff88811a9040f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  116.301342][ T7146] 
[  116.301342][ T7146] which lock already depends on the new lock.
[  116.301342][ T7146] 
[  116.304520][ T7146] 
[  116.304520][ T7146] the existing dependency chain (in reverse order) is:
[  116.307692][ T7146] 
[  116.307692][ T7146] -> #6 (&oi->ip_xattr_sem){++++}-{4:4}:
[  116.310483][ T7146]        lock_acquire+0x120/0x360
[  116.312360][ T7146]        down_read+0x46/0x2e0
[  116.314021][ T7146]        ocfs2_init_acl+0x2f9/0x720
[  116.315670][ T7146]        ocfs2_mknod+0x1321/0x2050
[  116.317256][ T7146]        ocfs2_create+0x1a5/0x440
[  116.318741][ T7146]        path_openat+0x14f4/0x3830
[  116.320281][ T7146]        do_filp_open+0x1fa/0x410
[  116.321830][ T7146]        do_sys_openat2+0x121/0x1c0
[  116.323461][ T7146]        __x64_sys_openat+0x138/0x170
[  116.325277][ T7146]        do_syscall_64+0xfa/0xfa0
[  116.326841][ T7146]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.328785][ T7146] 
[  116.328785][ T7146] -> #5 (jbd2_handle){++++}-{0:0}:
[  116.331180][ T7146]        lock_acquire+0x120/0x360
[  116.333085][ T7146]        start_this_handle+0x1fa7/0x21c0
[  116.335218][ T7146]        jbd2__journal_start+0x2c1/0x5b0
[  116.337336][ T7146]        jbd2_journal_start+0x2a/0x40
[  116.339394][ T7146]        ocfs2_start_trans+0x376/0x6d0
[  116.341271][ T7146]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  116.343157][ T7146]        ocfs2_dismount_volume+0x201/0x8d0
[  116.344958][ T7146]        generic_shutdown_super+0x135/0x2c0
[  116.346902][ T7146]        kill_block_super+0x44/0x90
[  116.348519][ T7146]        deactivate_locked_super+0xbc/0x130
[  116.350368][ T7146]        cleanup_mnt+0x425/0x4c0
[  116.351891][ T7146]        task_work_run+0x1d4/0x260
[  116.353541][ T7146]        exit_to_user_mode_loop+0xe9/0x130
[  116.355317][ T7146]        do_syscall_64+0x2bd/0xfa0
[  116.356862][ T7146]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.359211][ T7146] 
[  116.359211][ T7146] -> #4 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  116.362385][ T7146]        lock_acquire+0x120/0x360
[  116.364295][ T7146]        down_read+0x46/0x2e0
[  116.366080][ T7146]        ocfs2_start_trans+0x36a/0x6d0
[  116.367899][ T7146]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  116.369830][ T7146]        ocfs2_dismount_volume+0x201/0x8d0
[  116.371582][ T7146]        generic_shutdown_super+0x135/0x2c0
[  116.373423][ T7146]        kill_block_super+0x44/0x90
[  116.375042][ T7146]        deactivate_locked_super+0xbc/0x130
[  116.377121][ T7146]        cleanup_mnt+0x425/0x4c0
[  116.378694][ T7146]        task_work_run+0x1d4/0x260
[  116.380265][ T7146]        exit_to_user_mode_loop+0xe9/0x130
[  116.382504][ T7146]        do_syscall_64+0x2bd/0xfa0
[  116.384434][ T7146]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.386853][ T7146] 
[  116.386853][ T7146] -> #3 (sb_internal#6){.+.+}-{0:0}:
[  116.389569][ T7146]        lock_acquire+0x120/0x360
[  116.391225][ T7146]        ocfs2_start_trans+0x26b/0x6d0
[  116.392882][ T7146]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  116.394768][ T7146]        ocfs2_dismount_volume+0x201/0x8d0
[  116.396569][ T7146]        generic_shutdown_super+0x135/0x2c0
[  116.398492][ T7146]        kill_block_super+0x44/0x90
[  116.400319][ T7146]        deactivate_locked_super+0xbc/0x130
[  116.402209][ T7146]        cleanup_mnt+0x425/0x4c0
[  116.403779][ T7146]        task_work_run+0x1d4/0x260
[  116.405518][ T7146]        exit_to_user_mode_loop+0xe9/0x130
[  116.407344][ T7146]        do_syscall_64+0x2bd/0xfa0
[  116.409000][ T7146]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.411007][ T7146] 
[  116.411007][ T7146] -> #2 (&ocfs2_sysfile_lock_key[GLOBAL_BITMAP_SYSTEM_INODE]){+.+.}-{4:4}:
[  116.414770][ T7146]        lock_acquire+0x120/0x360
[  116.416711][ T7146]        down_write+0x96/0x1f0
[  116.418531][ T7146]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  116.420982][ T7146]        ocfs2_reserve_clusters_with_limit+0x2fb/0xba0
[  116.423635][ T7146]        ocfs2_reserve_suballoc_bits+0x6eb/0x4640
[  116.426032][ T7146]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  116.428585][ T7146]        ocfs2_extend_dir+0xc76/0x4870
[  116.430312][ T7146]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  116.432316][ T7146]        ocfs2_mknod+0x819/0x2050
[  116.433810][ T7146]        ocfs2_create+0x1a5/0x440
[  116.435441][ T7146]        path_openat+0x14f4/0x3830
[  116.437218][ T7146]        do_filp_open+0x1fa/0x410
[  116.438904][ T7146]        do_sys_openat2+0x121/0x1c0
[  116.440592][ T7146]        __x64_sys_openat+0x138/0x170
[  116.442504][ T7146]        do_syscall_64+0xfa/0xfa0
[  116.444252][ T7146]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.446172][ T7146] 
[  116.446172][ T7146] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  116.449481][ T7146]        lock_acquire+0x120/0x360
[  116.451025][ T7146]        down_write+0x96/0x1f0
[  116.452620][ T7146]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  116.454786][ T7146]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  116.457117][ T7146]        ocfs2_extend_dir+0xc76/0x4870
[  116.459074][ T7146]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  116.461553][ T7146]        ocfs2_mknod+0x819/0x2050
[  116.463209][ T7146]        ocfs2_create+0x1a5/0x440
[  116.465171][ T7146]        path_openat+0x14f4/0x3830
[  116.466685][ T7146]        do_filp_open+0x1fa/0x410
[  116.468235][ T7146]        do_sys_openat2+0x121/0x1c0
[  116.469891][ T7146]        __x64_sys_openat+0x138/0x170
[  116.471565][ T7146]        do_syscall_64+0xfa/0xfa0
[  116.473148][ T7146]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.475153][ T7146] 
[  116.475153][ T7146] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  116.478325][ T7146]        validate_chain+0xb9b/0x2140
[  116.479960][ T7146]        __lock_acquire+0xab9/0xd20
[  116.481599][ T7146]        lock_acquire+0x120/0x360
[  116.483202][ T7146]        down_write+0x96/0x1f0
[  116.484692][ T7146]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  116.486686][ T7146]        ocfs2_xattr_set+0x595/0x11f0
[  116.488356][ T7146]        ocfs2_set_acl+0x701/0x7b0
[  116.490118][ T7146]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  116.491753][ T7146]        vfs_set_acl+0x887/0xb00
[  116.493330][ T7146]        filename_setxattr+0x2e0/0x600
[  116.495160][ T7146]        path_setxattrat+0x364/0x3a0
[  116.496797][ T7146]        __x64_sys_setxattr+0xbc/0xe0
[  116.498542][ T7146]        do_syscall_64+0xfa/0xfa0
[  116.500137][ T7146]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.502097][ T7146] 
[  116.502097][ T7146] other info that might help us debug this:
[  116.502097][ T7146] 
[  116.505682][ T7146] Chain exists of:
[  116.505682][ T7146]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  116.505682][ T7146] 
[  116.510190][ T7146]  Possible unsafe locking scenario:
[  116.510190][ T7146] 
[  116.512451][ T7146]        CPU0                    CPU1
[  116.514104][ T7146]        ----                    ----
[  116.515746][ T7146]   lock(&oi->ip_xattr_sem);
[  116.517149][ T7146]                                lock(jbd2_handle);
[  116.519205][ T7146]                                lock(&oi->ip_xattr_sem);
[  116.521422][ T7146]   lock(&ocfs2_file_ip_alloc_sem_key);
[  116.523158][ T7146] 
[  116.523158][ T7146]  *** DEADLOCK ***
[  116.523158][ T7146] 
[  116.525611][ T7146] 3 locks held by syz.1.379/7146:
[  116.527170][ T7146]  #0: ffff888038a04420 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  116.529977][ T7146]  #1: ffff88811a9043c0 (&type->i_mutex_dir_key#19){+.+.}-{4:4}, at: vfs_set_acl+0x3cd/0xb00
[  116.533118][ T7146]  #2: ffff88811a9040f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  116.536548][ T7146] 
[  116.536548][ T7146] stack backtrace:
[  116.538427][ T7146] CPU: 1 UID: 0 PID: 7146 Comm: syz.1.379 Not tainted syzkaller #0 PREEMPT(full) 
[  116.538439][ T7146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.538446][ T7146] Call Trace:
[  116.538454][ T7146]  <TASK>
[  116.538460][ T7146]  dump_stack_lvl+0x189/0x250
[  116.538473][ T7146]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.538482][ T7146]  ? __pfx__printk+0x10/0x10
[  116.538493][ T7146]  ? print_lock_name+0xde/0x100
[  116.538504][ T7146]  print_circular_bug+0x2ee/0x310
[  116.538515][ T7146]  check_noncircular+0x134/0x160
[  116.538523][ T7146]  validate_chain+0xb9b/0x2140
[  116.538530][ T7146]  ? check_path+0x21/0x40
[  116.538537][ T7146]  ? look_up_lock_class+0x74/0x170
[  116.538548][ T7146]  ? register_lock_class+0x51/0x320
[  116.538559][ T7146]  __lock_acquire+0xab9/0xd20
[  116.538570][ T7146]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  116.538582][ T7146]  lock_acquire+0x120/0x360
[  116.538598][ T7146]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  116.538609][ T7146]  ? __lock_acquire+0xab9/0xd20
[  116.538620][ T7146]  down_write+0x96/0x1f0
[  116.538631][ T7146]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  116.538641][ T7146]  ? __pfx_down_write+0x10/0x10
[  116.538652][ T7146]  ocfs2_try_remove_refcount_tree+0xb6/0x320
[  116.538663][ T7146]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  116.538673][ T7146]  ? up_write+0x1c4/0x420
[  116.538681][ T7146]  ocfs2_xattr_set+0x595/0x11f0
[  116.538696][ T7146]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  116.538707][ T7146]  ? do_raw_spin_unlock+0x4d/0x240
[  116.538716][ T7146]  ? __lock_acquire+0xab9/0xd20
[  116.538729][ T7146]  ? do_raw_spin_unlock+0x4d/0x240
[  116.538737][ T7146]  ? _raw_spin_unlock+0x28/0x50
[  116.538744][ T7146]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  116.538756][ T7146]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  116.538765][ T7146]  ocfs2_set_acl+0x701/0x7b0
[  116.538775][ T7146]  ? __lock_acquire+0xab9/0xd20
[  116.538785][ T7146]  ocfs2_iop_set_acl+0x1aa/0x2a0
[  116.538795][ T7146]  ? vfs_set_acl+0x3cd/0xb00
[  116.538803][ T7146]  ? __pfx_ocfs2_iop_set_acl+0x10/0x10
[  116.538812][ T7146]  ? evm_inode_set_acl+0xba/0x410
[  116.538824][ T7146]  ? __pfx_evm_inode_set_acl+0x10/0x10
[  116.538834][ T7146]  ? down_write+0x162/0x1f0
[  116.538844][ T7146]  ? __pfx_down_write+0x10/0x10
[  116.538852][ T7146]  ? evm_revalidate_status+0x4f/0xb0
[  116.538862][ T7146]  ? make_vfsuid+0x49/0xa0
[  116.538869][ T7146]  ? inode_owner_or_capable+0xf1/0x1c0
[  116.538881][ T7146]  vfs_set_acl+0x887/0xb00
[  116.538891][ T7146]  filename_setxattr+0x2e0/0x600
[  116.538902][ T7146]  ? __pfx_filename_setxattr+0x10/0x10
[  116.538912][ T7146]  ? getname_flags+0x1e5/0x540
[  116.538922][ T7146]  path_setxattrat+0x364/0x3a0
[  116.538934][ T7146]  ? __pfx_path_setxattrat+0x10/0x10
[  116.538944][ T7146]  ? do_futex+0x395/0x420
[  116.538958][ T7146]  __x64_sys_setxattr+0xbc/0xe0
[  116.538968][ T7146]  do_syscall_64+0xfa/0xfa0
[  116.538977][ T7146]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.538986][ T7146]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.538994][ T7146]  ? exc_page_fault+0xab/0x100
[  116.539001][ T7146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.539009][ T7146] RIP: 0033:0x7f9e3a78ec29
[  116.539020][ T7146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.539026][ T7146] RSP: 002b:00007f9e3b647038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  116.539060][ T7146] RAX: ffffffffffffffda RBX: 00007f9e3a9d5fa0 RCX: 00007f9e3a78ec29
[  116.539067][ T7146] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000200000002a00
[  116.539073][ T7146] RBP: 00007f9e3a811e41 R08: 0000000000000000 R09: 0000000000000000
[  116.539079][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.539084][ T7146] R13: 00007f9e3a9d6038 R14: 00007f9e3a9d5fa0 R15: 00007ffcc24b00d8
[  116.539093][ T7146]  </TASK>
[  116.700100][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[  116.740819][ T5896] usb 4-1: USB disconnect, device number 13
[  116.926595][ T1272] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  117.076454][ T1272] usb 3-1: Using ep0 maxpacket: 16
[  117.080729][ T1272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.085338][ T1272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  117.090299][ T1272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  117.094482][ T1272] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  117.098687][ T1272] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  117.105597][ T1272] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  117.109604][ T1272] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  117.113055][ T1272] usb 3-1: Manufacturer: syz
[  117.116309][ T1272] usb 3-1: config 0 descriptor??
[  117.366508][ T1272] rc_core: IR keymap rc-hauppauge not found
[  117.369054][ T1272] Registered IR keymap rc-empty
[  117.371127][ T1272] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  117.386496][ T1272] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  117.406993][ T1272] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  117.412499][ T1272] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16
[  117.419019][ T1272] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  117.436583][ T1272] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  117.456498][ T1272] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  117.476564][ T1272] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  117.496451][ T1272] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  117.516478][ T1272] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  117.536428][ T1272] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  117.559907][ T1272] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  117.576474][ T1272] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  117.596434][ T1272] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  117.617196][ T1272] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  117.620374][ T1272] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  117.782590][ T5896] usb 3-1: USB disconnect, device number 20

VM DIAGNOSIS:
04:48:05  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4ebfb RBX=1ffff11026cc7ffd RCX=ffff888108e40000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900040f76c0 RSP=ffffc900040f7538
R8 =ffffffff8fc35777 R9 =1ffffffff1f86aee R10=dffffc0000000000 R11=fffffbfff1f86aef
R12=ffff88813663ffe8 R13=dffffc0000000000 R14=ffff88804b03b200 R15=0000000000000001
RIP=ffffffff81c05b57 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556912c500 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff5dc5056c0 CR3=000000011431c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007ff5db812e7b
XMM06=0000000000000000 00007ff5db812e75 XMM07=0000000000000000 00007ff5db812e89
XMM08=0000000000000000 00007ff5db812f0f XMM09=0000000000000000 00007ff5db812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000139e RDI=000000000000139f RBP=00000000000003f8 RSP=ffffc900030f6ab0
R8 =ffff8881077f8237 R9 =1ffff11020eff046 R10=dffffc0000000000 R11=ffffffff8556cf50
R12=dffffc0000000000 R13=ffffffff99d1991e R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556cfcc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9e3b6476c0 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002a00 CR3=0000000026f5c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8176012b ffffffff8169bc5f
XMM02=ffffffff8176012b ffffffff8176012b XMM03=ffffffff8169bc5f ffffffff8169bbcd
XMM04=00007fb7a3d0d100 00007fb7a31a7460 XMM05=00007fb7a31a7478 00007fb7a31a74c0
XMM06=00007fb7a31a74b8 00007fb7a31a74b0 XMM07=00007fb7a31a74a8 00007fb7a31a74a0
XMM08=0000000000000000 00007fb7a3012f0f XMM09=0000000000000000 00007fb7a3012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
