last executing test programs:

6.319759659s ago: executing program 1 (id=1398):
prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80306e85, &(0x7f0000001740)={@id={0x2, 0x0, @d}})

5.826520324s ago: executing program 1 (id=1399):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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")
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000000c0)={0x108, 0x0, [0x8, 0x9, 0x5, 0x38d5], 0x0})

4.322414181s ago: executing program 2 (id=1404):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x101c404, &(0x7f0000000800)={[{@nodots}, {@dots}, {@nodots}, {@fat=@uid}, {@fat=@sys_immutable}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xe65}}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@showexec}, {@fat=@flush}, {@nodots}, {@nodots}, {@dots}]}, 0x1, 0x1f7, &(0x7f0000000900)="$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")
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0)

4.060983304s ago: executing program 1 (id=1406):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x6, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="bb", 0x1}], 0x1, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x218}}], 0x2, 0x200400c4)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x629, 0x30, 0xfffffffffffffffb, 0x2}, &(0x7f0000000140)=0x18)

3.725272378s ago: executing program 2 (id=1408):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x10)

3.249746053s ago: executing program 1 (id=1412):
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="b5", 0x1}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)='t', 0x1}], 0x1}, 0x1)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x4)

3.155718864s ago: executing program 2 (id=1414):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001400000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x7, 0x0, 0x0})

2.498078832s ago: executing program 3 (id=1419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.399434483s ago: executing program 3 (id=1421):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e321000c8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0xc4)

2.228739964s ago: executing program 1 (id=1424):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d96700e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f5035d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fb4d8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c400"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976})
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000))

2.111941226s ago: executing program 3 (id=1425):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x3, @mcast1, 0x1}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)

1.918892508s ago: executing program 3 (id=1428):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x44040)
io_setup(0x8, &(0x7f0000000540)=<r0=>0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000080)="01000000ee", 0x5, 0x2a25}])

1.838599639s ago: executing program 4 (id=1429):
r0 = socket$inet6(0xa, 0x3, 0x3)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@loopback, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

1.618838361s ago: executing program 4 (id=1430):
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xa, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x3, 0x2, 0x1})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0x800, 0xfffffffe, {}, {0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x0, {0x77359400}, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}, 0xfffffffd})

1.603547292s ago: executing program 3 (id=1431):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="080026006c09000008009f0008"], 0x34}}, 0x0)

1.563938052s ago: executing program 0 (id=1432):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000600)=""/171, 0xab}], 0x2}, 0x20000040)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

1.451275053s ago: executing program 2 (id=1433):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x810412, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYBLOB="fafd009b56565279fc30", @ANYRES64=0x0, @ANYBLOB="43f6b5ccbeeed022a59ecb15026f812ca2edcef7b5c2d16e9b54382f7c3c1c22352ca05c5700c59c33b6a69c51c7cddaad95845e62c26c9ddf4984191e3d7bec1be828825e31a2d358fb757660c1a1c587134e0982cdbb4a1907d8ea076d0068c28f7a1cdb0d68be948d42", @ANYRESHEX], 0x2, 0x1e6, &(0x7f0000000300)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x148)
getdents64(r0, 0x0, 0x0)

1.295756145s ago: executing program 0 (id=1434):
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x1fc, &(0x7f0000000680)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0)

1.280551895s ago: executing program 3 (id=1435):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans'])
ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)=0x100)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3b, &(0x7f0000000000)=ANY=[])

1.080889037s ago: executing program 4 (id=1436):
io_setup(0x8, &(0x7f0000000540)=<r0=>0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r1, 0x0, 0x0, 0x2a25}])

942.418509ms ago: executing program 0 (id=1437):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)='A', 0x1}], 0x1}}, {{&(0x7f0000000a00)={0xa, 0x4e24, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='$', 0x1}], 0x1}}], 0x2, 0x40408d1)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x7d, &(0x7f0000000380)="020000000980ff9c", 0x8)

934.823259ms ago: executing program 2 (id=1438):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
mkdir(&(0x7f00000020c0)='./file0\x00', 0x28)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x20)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x10, @desc3})

719.809661ms ago: executing program 4 (id=1439):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b27, &(0x7f0000000040))

687.501402ms ago: executing program 0 (id=1440):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x2c, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x0, 0x8000, 0xffffffff, 0x9, 0x5}, &(0x7f0000000100)=0x14)

442.169675ms ago: executing program 4 (id=1441):
r0 = socket(0x11, 0xa, 0x8)
syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3c08"], 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x71, 0x4)
recvmmsg(r0, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x62, 0x0)

396.409385ms ago: executing program 2 (id=1442):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x40, r1, 0x1, 0x72bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x209, 0x79, 0xff, 0x6, 0x0, 0x4, 0x1, 0x7]}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

330.517926ms ago: executing program 0 (id=1443):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r1, 0x8}, &(0x7f00000002c0)=0x8)

175.774127ms ago: executing program 4 (id=1444):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x2)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x40000000)

67.440929ms ago: executing program 1 (id=1445):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$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")
open(&(0x7f0000000180)='./file1\x00', 0x60142, 0x102)
lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
setxattr$security_evm(&(0x7f0000001240)='./file1\x00', &(0x7f0000001340), &(0x7f00000002c0)=ANY=[@ANYBLOB="050102"], 0x51, 0x0)

0s ago: executing program 0 (id=1446):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9601"], 0x6e8a)

kernel console output (not intermixed with test programs):

882172][ T5765] XFS: attr2 mount option is deprecated.
[  142.951849][ T5765] XFS (loop3): Mounting V5 Filesystem
[  143.058136][ T5765] XFS (loop3): Ending clean mount
[  143.067352][ T5765] XFS (loop3): Quotacheck needed: Please wait.
[  143.137613][ T5765] XFS (loop3): Quotacheck: Done.
[  143.284945][ T4279] XFS (loop3): Unmounting Filesystem
[  143.449042][ T5807] loop0: detected capacity change from 0 to 512
[  143.552565][ T5807] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  143.618338][ T5807] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[  143.664267][ T5807] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #13: comm syz.0.568: iget: bad i_size value: 12154757448730
[  143.678089][ T5807] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.568: couldn't read orphan inode 13 (err -117)
[  143.691936][ T5807] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  143.843274][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  143.874361][ T5275] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  144.032879][ T5820] loop0: detected capacity change from 0 to 1024
[  144.059683][ T5820] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  144.064032][ T5275] usb 2-1: Using ep0 maxpacket: 16
[  144.090588][ T5275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.091064][ T5820] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: inode #32: comm syz.0.572: iget: special inode unallocated
[  144.102864][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  144.146650][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  144.170215][ T5275] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  144.184004][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.196570][ T5820] EXT4-fs (loop0): no journal found
[  144.202158][ T5820] EXT4-fs (loop0): can't get journal size
[  144.216312][ T4285] kernel read not supported for file /dsp1 (pid: 4285 comm: kworker/0:4)
[  144.229219][ T5275] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  144.265494][ T5275] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  144.266738][ T5820] EXT4-fs (loop0): filesystem is read-only
[  144.273681][ T5275] usb 2-1: Manufacturer: syz
[  144.308888][ T5275] usb 2-1: config 0 descriptor??
[  144.310157][ T5820] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  144.655917][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  144.684031][ T5275] rc_core: IR keymap rc-hauppauge not found
[  144.690023][ T5275] Registered IR keymap rc-empty
[  144.719424][ T5275] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  144.734984][ T5813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.767964][ T5813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.793938][ T5275] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  144.810731][ T5832] loop2: detected capacity change from 0 to 256
[  144.824589][ T5275] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  144.851538][ T5832] exfat: Deprecated parameter 'utf8'
[  144.871396][ T5275] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13
[  144.928362][ T5832] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe1018169, utbl_chksum : 0xe619d30d)
[  144.944365][ T5275] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  144.974012][ T5275] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.004062][ T5275] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.034109][ T5275] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.066847][ T5275] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.154015][ T5275] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.183091][ T5837] loop3: detected capacity change from 0 to 512
[  145.184070][ T5275] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.242109][ T5837] EXT4-fs (loop3): Test dummy encryption mode enabled
[  145.244138][ T5275] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.283539][ T5837] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  145.324079][ T5275] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.340015][ T5837] EXT4-fs (loop3): ea_inode feature is not supported for Hurd
[  145.364026][ T5275] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.388520][ T5843] loop2: detected capacity change from 0 to 256
[  145.407931][ T5275] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  145.425938][ T5275] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  145.456076][ T5275] usb 2-1: USB disconnect, device number 6
[  145.485168][ T5843] exfat: Deprecated parameter 'namecase'
[  145.532755][ T5843] exfat: Deprecated parameter 'namecase'
[  145.579342][ T5843] exFAT-fs (loop2): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d)
[  145.662065][ T5847] loop3: detected capacity change from 0 to 128
[  146.712525][ T5863] loop2: detected capacity change from 0 to 128
[  146.752494][ T5863] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  146.794263][ T5863] hpfs: filesystem error: improperly stopped
[  146.814249][ T5863] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  146.842485][ T5863] hpfs: You really don't want any checks? You are crazy...
[  146.854401][ T5863] hpfs: hpfs_map_sector(): read error
[  146.859879][ T5863] hpfs: code page support is disabled
[  146.904045][ T5863] hpfs: hpfs_map_4sectors(): unaligned read
[  146.923499][ T5830] loop0: detected capacity change from 0 to 65536
[  146.930270][ T5863] hpfs: hpfs_map_4sectors(): unaligned read
[  146.954020][ T5863] hpfs: filesystem error: unable to find root dir
[  147.037460][ T5830] XFS (loop0): Mounting V5 Filesystem
[  147.075608][ T5863] hpfs: hpfs_map_4sectors(): unaligned read
[  147.130576][ T5863] hpfs: hpfs_map_sector(): read error
[  147.153788][ T5830] XFS (loop0): Ending clean mount
[  147.175396][ T5830] XFS (loop0): Quotacheck needed: Please wait.
[  147.301674][ T5830] XFS (loop0): Quotacheck: Done.
[  147.660589][ T4275] XFS (loop0): Unmounting Filesystem
[  148.051054][ T5897] loop3: detected capacity change from 0 to 1024
[  148.188329][ T5901] hfsplus: request for non-existent node 16777216 in B*Tree
[  148.257818][ T5901] hfsplus: request for non-existent node 16777216 in B*Tree
[  148.300582][ T5901] hfsplus: request for non-existent node 16777216 in B*Tree
[  148.331664][ T5901] hfsplus: request for non-existent node 16777216 in B*Tree
[  148.357873][ T5897] hfsplus: request for non-existent node 16777216 in B*Tree
[  148.389088][ T5897] hfsplus: request for non-existent node 16777216 in B*Tree
[  148.472863][ T5907] device erspan0 entered promiscuous mode
[  148.473974][ T4278] Bluetooth: hci4: command 0x0411 tx timeout
[  148.558422][ T4337] hfsplus: request for non-existent node 16777216 in B*Tree
[  148.594217][ T4337] hfsplus: request for non-existent node 16777216 in B*Tree
[  148.991496][ T5922] loop3: detected capacity change from 0 to 2048
[  149.066486][ T5922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  149.416821][ T5930] loop1: detected capacity change from 0 to 64
[  149.467047][ T5930] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  149.905055][ T5934] loop3: detected capacity change from 0 to 128
[  149.953578][ T5934] VFS: Found a Xenix FS (block size = 512) on device loop3
[  149.995284][ T5934] sysv_count_free_blocks: free block count was -2041545935, correcting to 3
[  150.080678][ T5934] sysv_count_free_inodes: unable to read inode table
[  150.206151][ T4279] sysv_free_block: trying to free block not in datazone
[  150.237539][ T4279] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  150.642071][ T5942] loop1: detected capacity change from 0 to 8192
[  150.682547][ T5942] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  150.725948][ T5942] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  150.754071][ T5942] REISERFS (device loop1): using ordered data mode
[  150.762004][ T5942] reiserfs: using flush barriers
[  150.802475][ T5942] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  150.885748][ T5942] REISERFS (device loop1): checking transaction log (loop1)
[  150.925141][ T5942] REISERFS (device loop1): Using r5 hash to sort names
[  150.932445][ T5942] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  150.989574][ T5940] loop0: detected capacity change from 0 to 32768
[  151.031354][ T5940] (syz.0.621,5940,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  151.076512][ T5940] (syz.0.621,5940,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  151.190047][ T5940] (syz.0.621,5940,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  151.290882][ T5940] JBD2: Ignoring recovery information on journal
[  151.390651][ T5940] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  151.867151][ T4275] ocfs2: Unmounting device (7,0) on (node local)
[  152.642667][ T4278] Bluetooth: hci2: adv larger than maximum supported
[  152.642745][ T4278] Bluetooth: hci2: Malformed LE Event: 0x0d
[  152.657133][ T4285] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  152.736392][ T4278] block nbd0: Receive control failed (result -32)
[  152.860606][ T5999] loop1: detected capacity change from 0 to 128
[  152.878527][ T5999] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  152.894489][ T5998] loop3: detected capacity change from 0 to 128
[  152.897981][ T4285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.914561][ T5999] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  152.932728][ T5998] VFS: Found a Xenix FS (block size = 512) on device loop3
[  152.963736][ T4285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  153.001954][ T5998] sysv_free_block: trying to free block not in datazone
[  153.010390][ T4285] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  153.042930][ T4285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.083665][ T4285] usb 5-1: config 0 descriptor??
[  153.104182][ T1124] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  153.137412][ T4279] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  153.155977][ T4285] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  153.172941][ T4285] dvb-usb: bulk message failed: -22 (3/0)
[  153.227290][ T4285] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  153.278046][ T4285] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  153.297426][ T4285] usb 5-1: media controller created
[  153.322850][ T4285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  153.351347][ T5985] dvb-usb: bulk message failed: -22 (3/0)
[  153.387407][ T4285] dvb-usb: bulk message failed: -22 (6/0)
[  153.393681][ T4285] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  153.444815][ T4285] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14
[  153.465048][ T4285] dvb-usb: schedule remote query interval to 150 msecs.
[  153.497110][ T4285] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  153.565794][ T4285] usb 5-1: USB disconnect, device number 6
[  153.599043][ T4285] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  154.222273][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.661'.
[  154.292374][ T6028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'.
[  154.342534][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.661'.
[  154.405097][ T6028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'.
[  154.424186][ T6028] netlink: 'syz.4.661': attribute type 6 has an invalid length.
[  154.734448][ T6005] loop1: detected capacity change from 0 to 40427
[  154.765030][ T6036] netlink: 'syz.0.665': attribute type 1 has an invalid length.
[  154.772863][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'.
[  154.778639][ T6005] F2FS-fs (loop1): invalid crc value
[  154.843451][ T6005] F2FS-fs (loop1): Found nat_bits in checkpoint
[  155.025126][ T6005] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  155.116589][   T26] audit: type=1800 audit(2000000039.250:21): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.650" name="file1" dev="loop1" ino=10 res=0 errno=0
[  155.237806][ T4271] syz-executor: attempt to access beyond end of device
[  155.237806][ T4271] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  155.320392][ T6026] loop2: detected capacity change from 0 to 40427
[  155.351819][ T6026] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  155.365088][ T6026] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  155.431081][ T6026] F2FS-fs (loop2): invalid crc value
[  155.497423][ T6026] F2FS-fs (loop2): Found nat_bits in checkpoint
[  155.705789][ T6026] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  155.723989][ T6026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  156.710548][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.719777][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.801290][ T6069] loop1: detected capacity change from 0 to 32768
[  157.472467][ T6058] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.514398][ T6058] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.872716][ T6058] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.881781][ T6058] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.891165][ T6058] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.900327][ T6058] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.055111][ T6071] netlink: 'syz.1.679': attribute type 1 has an invalid length.
[  158.084180][ T6071] netlink: 'syz.1.679': attribute type 2 has an invalid length.
[  158.245212][ T6077] netlink: 72 bytes leftover after parsing attributes in process `syz.0.682'.
[  158.288746][ T6082] loop1: detected capacity change from 0 to 512
[  158.359065][ T6082] FAT-fs (loop1): Directory bread(block 199916) failed
[  158.400918][ T6082] FAT-fs (loop1): Directory bread(block 199917) failed
[  158.434698][ T6082] FAT-fs (loop1): Directory bread(block 199918) failed
[  158.441668][ T6082] FAT-fs (loop1): Directory bread(block 199919) failed
[  158.489792][ T6082] FAT-fs (loop1): Directory bread(block 199920) failed
[  158.525151][ T6082] FAT-fs (loop1): Directory bread(block 199921) failed
[  158.528867][ T6088] loop3: detected capacity change from 0 to 512
[  158.543607][ T6082] FAT-fs (loop1): Directory bread(block 199922) failed
[  158.549992][ T6083] loop4: detected capacity change from 0 to 4096
[  158.563575][ T6082] FAT-fs (loop1): Directory bread(block 199923) failed
[  158.628158][ T6082] FAT-fs (loop1): Directory bread(block 199916) failed
[  158.643012][ T6094] loop2: detected capacity change from 0 to 512
[  158.659920][ T6088] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.686: bad orphan inode 13
[  158.694517][ T6082] FAT-fs (loop1): Directory bread(block 199917) failed
[  158.713715][ T6094] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.688: corrupted in-inode xattr
[  158.747070][ T6094] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.688: couldn't read orphan inode 15 (err -117)
[  158.786359][ T6088] ext4_test_bit(bit=12, block=4) = 1
[  158.788858][ T6094] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  158.791798][ T6088] is_bad_inode(inode)=0
[  158.791815][ T6088] NEXT_ORPHAN(inode)=0
[  158.791823][ T6088] max_ino=32
[  158.791832][ T6088] i_nlink=1
[  158.791929][ T6088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  159.076315][ T6088] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.686: Hash code is SIPHASH, but hash not in dirent
[  159.111292][ T6083] overlayfs: upper fs does not support tmpfile.
[  159.126870][ T6088] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.686: Corrupt directory, running e2fsck is recommended
[  159.130852][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  159.162387][ T6083] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  159.264477][ T6088] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.686: path /125/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0
[  159.266431][ T6083] overlayfs: conflicting lowerdir path
[  159.340444][ T6088] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.686: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0
[  159.417494][ T6103] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.686: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0
[  159.604344][ T4279] EXT4-fs (loop3): unmounting filesystem.
[  159.971594][ T6121] loop3: detected capacity change from 0 to 256
[  160.055820][ T6123] nr0: tun_chr_ioctl cmd 1074025677
[  160.094169][ T6123] nr0: linktype set to 774
[  160.757548][ T6110] loop4: detected capacity change from 0 to 32768
[  160.920854][ T6110] XFS (loop4): Mounting V5 Filesystem
[  161.029967][ T6110] XFS (loop4): Ending clean mount
[  161.219141][ T4283] XFS (loop4): Unmounting Filesystem
[  161.465627][ T6167] loop2: detected capacity change from 0 to 64
[  161.538873][ T6169] loop1: detected capacity change from 0 to 256
[  161.654616][ T6169] exfat: Deprecated parameter 'utf8'
[  161.660068][ T6169] exfat: Deprecated parameter 'utf8'
[  161.683317][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'.
[  161.762300][ T6169] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  162.248052][ T6180] loop0: detected capacity change from 0 to 4096
[  162.269177][ T6180] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  162.391419][ T6180] ntfs: volume version 3.1.
[  162.669958][    T9] kworker/u4:0: attempt to access beyond end of device
[  162.669958][    T9] loop2: rw=1, sector=369, nr_sectors = 2896 limit=64
[  162.764449][    T9] kworker/u4:0: attempt to access beyond end of device
[  162.764449][    T9] loop2: rw=1, sector=3265, nr_sectors = 904 limit=64
[  162.799953][    T9] kworker/u4:0: attempt to access beyond end of device
[  162.799953][    T9] loop2: rw=1, sector=4169, nr_sectors = 1 limit=64
[  162.834279][    T9] Buffer I/O error on dev loop2, logical block 4169, lost async page write
[  162.843087][    T9] kworker/u4:0: attempt to access beyond end of device
[  162.843087][    T9] loop2: rw=1, sector=4170, nr_sectors = 1 limit=64
[  162.885328][    T9] Buffer I/O error on dev loop2, logical block 4170, lost async page write
[  162.903923][    T9] kworker/u4:0: attempt to access beyond end of device
[  162.903923][    T9] loop2: rw=1, sector=4172, nr_sectors = 1 limit=64
[  162.953887][    T9] Buffer I/O error on dev loop2, logical block 4172, lost async page write
[  162.985849][    T9] kworker/u4:0: attempt to access beyond end of device
[  162.985849][    T9] loop2: rw=1, sector=4173, nr_sectors = 1 limit=64
[  163.039335][    T9] Buffer I/O error on dev loop2, logical block 4173, lost async page write
[  163.073549][    T9] kworker/u4:0: attempt to access beyond end of device
[  163.073549][    T9] loop2: rw=1, sector=4174, nr_sectors = 1 limit=64
[  163.104479][    T9] Buffer I/O error on dev loop2, logical block 4174, lost async page write
[  163.150199][    T9] kworker/u4:0: attempt to access beyond end of device
[  163.150199][    T9] loop2: rw=1, sector=4175, nr_sectors = 1 limit=64
[  163.206095][    T9] Buffer I/O error on dev loop2, logical block 4175, lost async page write
[  163.226803][    T9] kworker/u4:0: attempt to access beyond end of device
[  163.226803][    T9] loop2: rw=1, sector=4176, nr_sectors = 1 limit=64
[  163.241022][    T9] Buffer I/O error on dev loop2, logical block 4176, lost async page write
[  163.250656][    T9] kworker/u4:0: attempt to access beyond end of device
[  163.250656][    T9] loop2: rw=1, sector=4177, nr_sectors = 1 limit=64
[  163.264789][    T9] Buffer I/O error on dev loop2, logical block 4177, lost async page write
[  163.283681][ T6203] loop4: detected capacity change from 0 to 256
[  163.306240][    T9] Buffer I/O error on dev loop2, logical block 4196, lost async page write
[  163.325471][ T6203] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  163.355968][    T9] Buffer I/O error on dev loop2, logical block 4197, lost async page write
[  163.379441][ T6203] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  163.641374][ T6212] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0
[  164.061691][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'.
[  164.264437][ T6231] MPI: mpi too large (16392 bits)
[  164.566856][ T6239] loop2: detected capacity change from 0 to 512
[  164.642139][ T6239] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  164.659972][ T6239] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.000474][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  165.358216][ T6259] loop4: detected capacity change from 0 to 4096
[  165.382089][ T6250] loop3: detected capacity change from 0 to 8192
[  165.407954][ T6250] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff" or missing value
[  166.313971][ T4317] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  166.503973][ T4317] usb 1-1: Using ep0 maxpacket: 8
[  166.511206][ T4317] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  166.552059][ T4317] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  166.612221][ T4317] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  166.643643][ T4317] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.673121][ T4317] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  166.693170][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.903592][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'.
[  166.940643][ T4317] usb 1-1: GET_CAPABILITIES returned 0
[  166.946574][ T4317] usbtmc 1-1:16.0: can't read capabilities
[  166.962397][ T6274] loop2: detected capacity change from 0 to 32768
[  166.998563][ T6294] device veth1_virt_wifi entered promiscuous mode
[  167.026719][ T6274] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.762 (6274)
[  167.027662][ T6294] device veth1_virt_wifi left promiscuous mode
[  167.072023][ T6274] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.112933][ T6274] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  167.155591][ T6278] usb 1-1: usbtmc_ioctl_clear_in_halt returned -32
[  167.172093][ T6274] BTRFS info (device loop2): using free space tree
[  167.186389][ T4317] usb 1-1: USB disconnect, device number 7
[  167.409177][ T6319] netlink: 774 bytes leftover after parsing attributes in process `syz.4.774'.
[  167.444728][ T6274] BTRFS info (device loop2): enabling ssd optimizations
[  167.595289][ T4282] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.054329][  T951] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  168.081350][ T4462] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (4462)
[  168.229421][ T6333] program syz.2.776 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  168.255349][  T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  168.290269][ T6337] program syz.1.782 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  168.309462][  T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.354115][  T951] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  168.392772][  T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.443608][  T951] usb 4-1: config 0 descriptor??
[  168.498141][ T6339] loop0: detected capacity change from 0 to 512
[  168.538519][ T6341] loop4: detected capacity change from 0 to 256
[  168.680745][ T6339] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  168.714120][ T6339] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.894588][  T951] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0
[  168.903102][  T951] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0
[  168.916245][  T951] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0
[  168.938239][  T951] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0
[  168.959099][  T951] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0
[  168.979914][  T951] petalynx 0003:18B1:0037.0006: unknown main item tag 0x0
[  169.000618][  T951] petalynx 0003:18B1:0037.0006: unknown global tag 0xd
[  169.024288][  T951] petalynx 0003:18B1:0037.0006: item 0 0 1 13 parsing failed
[  169.049141][  T951] petalynx 0003:18B1:0037.0006: parse failed
[  169.069154][  T951] petalynx: probe of 0003:18B1:0037.0006 failed with error -22
[  169.112986][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  169.141664][  T951] usb 4-1: USB disconnect, device number 7
[  169.273139][ T6355] loop0: detected capacity change from 0 to 512
[  169.302895][ T6355] EXT4-fs: Ignoring removed nomblk_io_submit option
[  169.339829][ T6355] EXT4-fs: Ignoring removed mblk_io_submit option
[  169.376046][ T6355] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  169.384534][ T6355] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  169.402619][ T6355] EXT4-fs (loop0): 1 truncate cleaned up
[  169.408753][ T6355] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  169.482289][ T6355] EXT4-fs (loop0): shut down requested (2)
[  169.648200][ T6343] loop1: detected capacity change from 0 to 32768
[  169.683349][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  169.746679][   T26] audit: type=1800 audit(2000000053.880:22): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.785" name="bus" dev="loop1" ino=7 res=0 errno=0
[  169.860671][ T6357] loop2: detected capacity change from 0 to 32768
[  169.880410][ T6360] loop4: detected capacity change from 0 to 256
[  169.933732][ T6360] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d)
[  170.075968][ T6360] exFAT-fs (loop4): error, broken FAT chain.
[  170.111169][ T6360] exFAT-fs (loop4): Filesystem has been set read-only
[  170.137426][ T6360] exFAT-fs (loop4): error, failed to bmap (inode : ffff888054682860 iblock : 0, err : -5)
[  170.567066][ T6375] loop3: detected capacity change from 0 to 4096
[  170.586542][ T6378] loop0: detected capacity change from 0 to 64
[  170.840202][ T6375] overlayfs: upper fs does not support tmpfile.
[  170.868856][ T6375] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  170.899993][ T6375] overlayfs: conflicting lowerdir path
[  171.814347][ T4314] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  171.895184][ T6414] team0: Device gtp0 is up. Set it down before adding it as a team port
[  172.033970][ T4314] usb 5-1: Using ep0 maxpacket: 16
[  172.054975][ T4314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.094583][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  172.133894][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  172.143624][ T4314] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  172.192466][ T4314] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  172.224638][ T4314] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  172.247126][ T6422] loop3: detected capacity change from 0 to 1024
[  172.256707][ T4314] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  172.278846][ T4314] usb 5-1: Manufacturer: syz
[  172.293981][ T4314] usb 5-1: config 0 descriptor??
[  172.670349][ T4314] rc_core: IR keymap rc-hauppauge not found
[  172.676197][ T6410] loop1: detected capacity change from 0 to 32768
[  172.676661][ T4314] Registered IR keymap rc-empty
[  172.733578][ T4314] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  172.784005][ T4314] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  172.834575][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  172.900365][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15
[  172.905340][ T6434] loop3: detected capacity change from 0 to 512
[  172.950468][ T6434] EXT4-fs: Ignoring removed orlov option
[  172.963685][ T4314] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  172.979328][ T6434] EXT4-fs (loop3): Test dummy encryption mode enabled
[  172.991674][ T6434] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  173.024052][ T4314] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  173.058513][ T6434] EXT4-fs (loop3): 1 truncate cleaned up
[  173.074205][ T4314] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  173.084606][ T6434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  173.096927][ T6436] loop0: detected capacity change from 0 to 4096
[  173.114111][ T4314] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  173.138978][ T6434] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  173.159946][ T4314] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  173.199824][ T6434] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  173.214028][ T4314] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  173.233319][ T6441] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.260843][ T4314] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  173.282789][ T6434] EXT4-fs (loop3): re-mounted. Quota mode: none.
[  173.333966][ T4314] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  173.363931][ T4314] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  173.373917][ T6436] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.'
[  173.398322][ T6436] Remounting filesystem read-only
[  173.414218][ T4314] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  173.436521][ T4279] EXT4-fs (loop3): unmounting filesystem.
[  173.459430][ T4314] mceusb 5-1:0.0: Registered 42424242 with mce emulator interface version 1
[  173.504095][ T4314] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  173.518626][ T4314] usb 5-1: USB disconnect, device number 7
[  174.034252][ T4285] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  174.248450][ T4285] usb 3-1: Using ep0 maxpacket: 16
[  174.256951][ T4285] usb 3-1: config 0 has no interfaces?
[  174.264166][ T4317] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  174.276104][ T4285] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  174.308845][ T4285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  174.328712][ T4285] usb 3-1: SerialNumber: syz
[  174.355985][ T4285] usb 3-1: config 0 descriptor??
[  174.455812][ T4317] usb 5-1: config 1 has an invalid interface number: 234 but max is 1
[  174.473889][ T4317] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  174.495537][ T4317] usb 5-1: config 1 has no interface number 2
[  174.513697][ T4317] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  174.545720][ T4317] usb 5-1: config 1 interface 234 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  174.564193][ T4317] usb 5-1: config 1 interface 234 has no altsetting 0
[  174.581350][ T5273] usb 3-1: USB disconnect, device number 9
[  174.583655][ T4317] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  174.625074][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.654570][ T4317] usb 5-1: Product: syz
[  174.659461][ T4317] usb 5-1: Manufacturer: syz
[  174.664614][ T4317] usb 5-1: SerialNumber: syz
[  174.696815][ T4317] usb 5-1: selecting invalid altsetting 1
[  174.792322][ T6455] loop0: detected capacity change from 0 to 40427
[  174.808132][ T6455] F2FS-fs (loop0): invalid crc value
[  174.839014][ T6455] F2FS-fs (loop0): Found nat_bits in checkpoint
[  174.958160][ T6455] F2FS-fs (loop0): Start checkpoint disabled!
[  175.002962][ T6455] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  175.116273][ T4317] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS
[  175.140167][ T4317] cdc_ncm 5-1:1.0: bind() failure
[  175.171383][ T4317] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  175.189273][ T6455] bio_check_eod: 63 callbacks suppressed
[  175.189292][ T6455] syz.0.832: attempt to access beyond end of device
[  175.189292][ T6455] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  175.217612][ T4317] cdc_ncm 5-1:1.1: bind() failure
[  175.240978][ T6459] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  175.514965][ T4278] Bluetooth: hci0: Invalid handle: 0xff00 > 0x0eff
[  175.521770][ T4337] kworker/u4:7: attempt to access beyond end of device
[  175.521770][ T4337] loop0: rw=1, sector=77824, nr_sectors = 8 limit=40427
[  175.540488][ T4317] usb 5-1: USB disconnect, device number 8
[  175.593458][ T4337] kworker/u4:7: attempt to access beyond end of device
[  175.593458][ T4337] loop0: rw=1, sector=77880, nr_sectors = 8 limit=40427
[  175.610764][   T38] kworker/u4:2: attempt to access beyond end of device
[  175.610764][   T38] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  175.873282][ T6493] loop2: detected capacity change from 0 to 1024
[  176.287194][ T6500] loop4: detected capacity change from 0 to 2048
[  176.400111][ T6500] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.437095][ T6505] loop1: detected capacity change from 0 to 64
[  176.602846][ T6509] loop2: detected capacity change from 0 to 2048
[  176.655627][ T6509] EXT4-fs: Ignoring removed mblk_io_submit option
[  176.662232][ T6509] EXT4-fs: Ignoring removed mblk_io_submit option
[  176.821406][ T6509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  176.999790][ T6509] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.855: bg 0: block 234: padding at end of block bitmap is not set
[  177.045297][ T6509] EXT4-fs (loop2): Remounting filesystem read-only
[  177.173324][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.859'.
[  177.250820][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  177.281293][ T6497] loop0: detected capacity change from 0 to 32768
[  177.460625][ T6497] XFS (loop0): Mounting V5 Filesystem
[  177.631978][ T6497] XFS (loop0): Ending clean mount
[  177.727060][ T4337] kworker/u4:7: attempt to access beyond end of device
[  177.727060][ T4337] loop1: rw=1, sector=593, nr_sectors = 3328 limit=64
[  177.771939][ T4337] kworker/u4:7: attempt to access beyond end of device
[  177.771939][ T4337] loop1: rw=1, sector=3921, nr_sectors = 248 limit=64
[  177.815318][ T4337] kworker/u4:7: attempt to access beyond end of device
[  177.815318][ T4337] loop1: rw=1, sector=4169, nr_sectors = 1 limit=64
[  177.883889][ T4337] buffer_io_error: 54 callbacks suppressed
[  177.883908][ T4337] Buffer I/O error on dev loop1, logical block 4169, lost async page write
[  177.899152][ T4275] XFS (loop0): Unmounting Filesystem
[  177.914593][ T4337] kworker/u4:7: attempt to access beyond end of device
[  177.914593][ T4337] loop1: rw=1, sector=4170, nr_sectors = 1 limit=64
[  177.945419][ T4337] Buffer I/O error on dev loop1, logical block 4170, lost async page write
[  177.996927][ T4337] kworker/u4:7: attempt to access beyond end of device
[  177.996927][ T4337] loop1: rw=1, sector=4172, nr_sectors = 1 limit=64
[  178.053939][ T4337] Buffer I/O error on dev loop1, logical block 4172, lost async page write
[  178.062695][ T4337] kworker/u4:7: attempt to access beyond end of device
[  178.062695][ T4337] loop1: rw=1, sector=4173, nr_sectors = 1 limit=64
[  178.123283][ T4337] Buffer I/O error on dev loop1, logical block 4173, lost async page write
[  178.156035][ T4337] Buffer I/O error on dev loop1, logical block 4174, lost async page write
[  178.173925][ T4337] Buffer I/O error on dev loop1, logical block 4175, lost async page write
[  178.182651][ T4337] Buffer I/O error on dev loop1, logical block 4176, lost async page write
[  178.233923][ T4337] Buffer I/O error on dev loop1, logical block 4177, lost async page write
[  178.242819][ T4337] Buffer I/O error on dev loop1, logical block 4196, lost async page write
[  178.264013][ T4337] Buffer I/O error on dev loop1, logical block 4197, lost async page write
[  178.362501][ T6520] loop3: detected capacity change from 0 to 40427
[  178.418911][ T6520] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  178.447674][ T6520] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  178.494623][ T6520] F2FS-fs (loop3): invalid crc value
[  178.541651][ T6520] F2FS-fs (loop3): Found nat_bits in checkpoint
[  178.730984][ T6520] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  178.753982][ T6520] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  179.231739][ T4314] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  179.281000][ T6541] loop4: detected capacity change from 0 to 32768
[  179.357587][ T6541] XFS (loop4): Mounting V5 Filesystem
[  179.433760][ T6541] XFS (loop4): Ending clean mount
[  179.441438][ T6541] XFS (loop4): Quotacheck needed: Please wait.
[  179.454018][ T4314] usb 2-1: Using ep0 maxpacket: 16
[  179.475997][ T4314] usb 2-1: unable to get BOS descriptor or descriptor too short
[  179.506628][ T4314] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.542821][ T4314] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024
[  179.558438][ T6541] XFS (loop4): Quotacheck: Done.
[  179.625871][ T4314] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  179.679800][ T4314] usb 2-1: config 1 interface 0 has no altsetting 0
[  179.707282][ T4314] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  179.747267][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.774915][ T4283] XFS (loop4): Unmounting Filesystem
[  179.777983][ T4314] usb 2-1: Product: syz
[  179.795071][ T4314] usb 2-1: Manufacturer: syz
[  179.809981][ T4314] usb 2-1: SerialNumber: syz
[  179.821977][ T6552] loop2: detected capacity change from 0 to 40427
[  179.846889][ T6560] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  179.913137][ T6552] F2FS-fs (loop2): invalid crc value
[  179.986459][ T6552] F2FS-fs (loop2): Found nat_bits in checkpoint
[  180.093400][ T4314] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input16
[  180.168437][ T6552] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  180.254041][ T5275] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  180.330091][   T26] audit: type=1800 audit(2000000064.460:23): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.870" name="file1" dev="loop2" ino=10 res=0 errno=0
[  180.453900][ T5275] usb 1-1: Using ep0 maxpacket: 32
[  180.465984][ T4282] bio_check_eod: 50 callbacks suppressed
[  180.466220][ T5275] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.483700][ T4282] syz-executor: attempt to access beyond end of device
[  180.483700][ T4282] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  180.508519][ T5275] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.558220][ T5275] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  180.593948][ T5275] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  180.622798][ T5275] usb 1-1: Product: syz
[  180.632962][ T5275] usb 1-1: Manufacturer: syz
[  180.695641][ T5275] hub 1-1:4.0: USB hub found
[  180.714036][ T4331] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  180.759629][ T3623] bcm5974 2-1:1.0: could not read from device
[  180.759797][ T4314] usb 2-1: USB disconnect, device number 7
[  180.778394][ T3623] bcm5974 2-1:1.0: could not read from device
[  180.794820][ T4461] bcm5974 2-1:1.0: could not read from device
[  180.904500][ T5275] hub 1-1:4.0: 2 ports detected
[  180.905694][ T4331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.914122][ T5275] hub 1-1:4.0: insufficient power available to use all downstream ports
[  180.933105][ T4331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16648, setting to 1024
[  180.963869][ T4331] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  180.983289][ T4331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.999759][ T4331] usb 4-1: config 0 descriptor??
[  181.331852][ T5275] hub 1-1:4.0: set hub depth failed
[  181.354107][ T5275] usb 1-1: USB disconnect, device number 8
[  181.441155][ T4331] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  181.470816][ T4331] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input17
[  181.640246][    C1] usb 4-1: input irq status -75 received
[  181.704720][ T4331] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  181.780058][ T6594] loop4: detected capacity change from 0 to 32768
[  181.888062][ T4331] usb 4-1: USB disconnect, device number 8
[  181.925981][ T6594] JBD2: Ignoring recovery information on journal
[  182.117501][ T6594] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  182.326676][ T6606] fido_id[6606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  182.395458][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  182.599907][ T6624] vcan0: tx address claim with dlc 0
[  183.131298][ T6642] loop1: detected capacity change from 0 to 256
[  183.352210][ T6650] netlink: 'syz.3.906': attribute type 6 has an invalid length.
[  183.378458][ T6650] netlink: 'syz.3.906': attribute type 6 has an invalid length.
[  183.667605][ T6657] loop2: detected capacity change from 0 to 512
[  184.004094][ T5275] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  184.196341][ T5275] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  184.225483][ T5275] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  184.260482][ T5275] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  184.305577][ T5275] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.337392][ T5275] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  184.370325][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  184.395246][ T5275] usb 4-1: Product: syz
[  184.399491][ T5275] usb 4-1: Manufacturer: syz
[  184.426550][ T5275] cdc_wdm 4-1:1.0: skipping garbage
[  184.431923][ T5275] cdc_wdm 4-1:1.0: skipping garbage
[  184.465200][ T5275] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  184.480418][ T5275] cdc_wdm 4-1:1.0: Unknown control protocol
[  184.542355][ T6686] loop0: detected capacity change from 0 to 8192
[  184.570693][ T6686] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  184.591599][ T6686] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  184.601353][ T6686] REISERFS (device loop0): using ordered data mode
[  184.613401][ T6686] reiserfs: using flush barriers
[  184.620113][ T6686] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  184.678845][ T6686] REISERFS (device loop0): checking transaction log (loop0)
[  184.794914][ T6686] REISERFS (device loop0): Using rupasov hash to sort names
[  184.822631][ T6686] REISERFS (device loop0): using 3.5.x disk format
[  184.843052][ T6686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  184.881031][ T6686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  184.901118][ T6686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  184.912978][ T6686] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  185.029327][ T6686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  185.094207][ T6686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  185.134268][ T6686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  185.350283][ T6704] loop2: detected capacity change from 0 to 512
[  185.392775][ T6704] EXT4-fs: Invalid gid value -1
[  185.572768][ T6710] loop0: detected capacity change from 0 to 1024
[  185.601647][ T6710] EXT4-fs: Ignoring removed orlov option
[  185.683992][ T6710] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  185.897014][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  185.984845][ T6724] overlayfs: upper fs does not support tmpfile.
[  186.192771][ T5275] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  186.251711][ T6728] loop1: detected capacity change from 0 to 4096
[  186.288560][ T6728] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  186.383951][ T5275] usb 3-1: Using ep0 maxpacket: 16
[  186.391423][ T5275] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  186.408152][ T5275] usb 3-1: config 0 has no interface number 0
[  186.441697][ T5275] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  186.459815][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.469671][ T5275] usb 3-1: Product: syz
[  186.481263][ T5275] usb 3-1: Manufacturer: syz
[  186.488187][ T5275] usb 3-1: SerialNumber: syz
[  186.537415][ T5275] usb 3-1: config 0 descriptor??
[  186.567409][ T5275] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  186.583279][ T6737] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  186.699840][ T4285] usb 4-1: USB disconnect, device number 9
[  187.381625][ T5275] gspca_spca1528: reg_w err -71
[  187.414072][ T5275] spca1528: probe of 3-1:0.1 failed with error -71
[  187.422651][ T5275] usb 3-1: USB disconnect, device number 10
[  187.486708][ T6759] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  188.479686][ T6794] program syz.4.968 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  188.875250][   T26] audit: type=1326 audit(2000000073.010:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.2.973" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7449f9cdd9 code=0x7ffc0000
[  188.963916][   T26] audit: type=1326 audit(2000000073.010:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.2.973" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7449f9cdd9 code=0x7ffc0000
[  189.064848][   T26] audit: type=1326 audit(2000000073.010:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.2.973" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7449f9cdd9 code=0x7ffc0000
[  189.160052][   T26] audit: type=1326 audit(2000000073.010:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.2.973" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f7449f9cdd9 code=0x7ffc0000
[  189.218347][ T6808] loop1: detected capacity change from 0 to 512
[  189.264302][ T6808] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  189.307450][   T26] audit: type=1326 audit(2000000073.010:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.2.973" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7449f9cdd9 code=0x7ffc0000
[  189.319656][ T6783] loop0: detected capacity change from 0 to 32768
[  189.373604][ T6808] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.975: invalid indirect mapped block 256 (level 2)
[  189.432671][   T26] audit: type=1326 audit(2000000073.010:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.2.973" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7449f9cdd9 code=0x7ffc0000
[  189.477574][ T6808] EXT4-fs (loop1): Remounting filesystem read-only
[  189.491824][   T26] audit: type=1326 audit(2000000073.010:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.2.973" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7449f9cdd9 code=0x7ffc0000
[  189.497891][ T6808] EXT4-fs (loop1): 2 truncates cleaned up
[  189.516573][   T26] audit: type=1326 audit(2000000073.010:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.2.973" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7449f9cdd9 code=0x7ffc0000
[  189.545892][   T26] audit: type=1326 audit(2000000073.010:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.2.973" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7449f9cdd9 code=0x7ffc0000
[  189.570320][   T26] audit: type=1326 audit(2000000073.010:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.2.973" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7449f9cdd9 code=0x7ffc0000
[  189.610292][ T6808] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  189.676796][ T6813] loop2: detected capacity change from 0 to 4096
[  189.687540][ T6783] XFS (loop0): Mounting V5 Filesystem
[  189.711199][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  189.721117][ T4278] CPU: 1 PID: 4278 Comm: kworker/u5:4 Not tainted syzkaller #0
[  189.728699][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  189.738772][ T4278] Workqueue: hci0 hci_rx_work
[  189.743571][ T4278] Call Trace:
[  189.746871][ T4278]  <TASK>
[  189.749842][ T4278]  dump_stack_lvl+0x188/0x24e
[  189.754607][ T4278]  ? show_regs_print_info+0x12/0x12
[  189.759825][ T4278]  ? load_image+0x400/0x400
[  189.764360][ T4278]  sysfs_create_dir_ns+0x26a/0x290
[  189.769501][ T4278]  ? sysfs_warn_dup+0xa0/0xa0
[  189.774216][ T4278]  ? do_raw_spin_unlock+0x11d/0x230
[  189.779435][ T4278]  kobject_add_internal+0x61c/0xcc0
[  189.784667][ T4278]  kobject_add+0x160/0x230
[  189.789110][ T4278]  ? kobject_init+0x1d0/0x1d0
[  189.793822][ T4278]  ? klist_children_get+0x50/0x50
[  189.798880][ T4278]  ? get_device_parent+0x121/0x3f0
[  189.804010][ T4278]  device_add+0x483/0xfb0
[  189.808353][ T4278]  ? kmem_cache_free+0xf7/0x290
[  189.813237][ T4278]  hci_conn_add_sysfs+0xd1/0x1e0
[  189.818239][ T4278]  le_conn_complete_evt+0x1062/0x1670
[  189.823645][ T4278]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  189.829912][ T4278]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  189.835572][ T4278]  ? skb_pull_data+0xf7/0x200
[  189.840270][ T4278]  hci_le_enh_conn_complete_evt+0x185/0x460
[  189.846184][ T4278]  ? hci_le_remote_conn_param_req_evt+0xce0/0xce0
[  189.852647][ T4278]  ? hci_remote_host_features_evt+0x270/0x270
[  189.858738][ T4278]  hci_event_packet+0x7b9/0x1280
[  189.863712][ T4278]  ? bis_list+0x280/0x280
[  189.868072][ T4278]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  189.874169][ T4278]  ? kcov_remote_start+0x4c7/0x7e0
[  189.879306][ T4278]  ? netdev_warn+0x3e/0x16c
[  189.883834][ T4278]  ? hci_send_to_monitor+0x9c/0x4a0
[  189.889058][ T4278]  hci_rx_work+0x3eb/0xd40
[  189.893494][ T4278]  ? _raw_spin_unlock+0x40/0x40
[  189.898374][ T4278]  ? process_one_work+0x7b0/0x1160
[  189.903588][ T4278]  process_one_work+0x8a2/0x1160
[  189.908555][ T4278]  ? worker_detach_from_pool+0x240/0x240
[  189.914222][ T4278]  ? _raw_spin_lock_irq+0xb7/0xf0
[  189.919273][ T4278]  ? _raw_spin_lock_irqsave+0x100/0x100
[  189.924853][ T4278]  ? kthread_data+0x4b/0xc0
[  189.929400][ T4278]  worker_thread+0xaa2/0x1270
[  189.934133][ T4278]  ? __kthread_parkme+0x162/0x1c0
[  189.939198][ T4278]  kthread+0x29d/0x330
[  189.943285][ T4278]  ? worker_clr_flags+0x1a0/0x1a0
[  189.948325][ T4278]  ? kthread_blkcg+0xd0/0xd0
[  189.953018][ T4278]  ret_from_fork+0x1f/0x30
[  189.957469][ T4278]  </TASK>
[  189.963419][ T6810] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  189.970972][ T4278] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  189.990351][ T4278] Bluetooth: hci0: failed to register connection device
[  190.044679][ T6813] ntfs: volume version 3.1.
[  190.061575][ T6810] EXT4-fs (loop1): Remounting filesystem read-only
[  190.070643][ T6783] XFS (loop0): Ending clean mount
[  190.262458][ T4275] XFS (loop0): Unmounting Filesystem
[  190.599520][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  191.371149][ T6847] loop0: detected capacity change from 0 to 256
[  191.441000][ T6847] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  191.591601][ T6827] loop2: detected capacity change from 0 to 32768
[  191.624011][ T4317] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  191.688447][ T6852] loop3: detected capacity change from 0 to 512
[  191.788493][ T6852] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  191.814165][ T6852] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  191.835721][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  191.853970][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.888075][ T6852] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.990: corrupted inode contents
[  191.920948][ T4317] usb 2-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00
[  191.957766][ T6852] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #2: comm syz.3.990: mark_inode_dirty error
[  191.964054][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.012508][ T4317] usb 2-1: config 0 descriptor??
[  192.020313][ T6852] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.990: corrupted inode contents
[  192.060966][ T6852] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.990: mark_inode_dirty error
[  192.136697][ T6852] EXT4-fs error (device loop3): ext4_get_first_dir_block:3594: inode #18: comm syz.3.990: directory missing '.'
[  192.290755][ T4279] EXT4-fs (loop3): unmounting filesystem.
[  192.439035][ T4317] hid-generic 0003:0925:8066.0008: unknown main item tag 0x0
[  192.458923][ T4317] hid-generic 0003:0925:8066.0008: hidraw0: USB HID v0.00 Device [HID 0925:8066] on usb-dummy_hcd.1-1/input0
[  192.562273][ T6850] loop4: detected capacity change from 0 to 32768
[  192.686647][ T4317] usb 2-1: USB disconnect, device number 8
[  192.691990][ T6870] loop3: detected capacity change from 0 to 512
[  192.747955][ T6870] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  192.762347][ T6850] ialloc: diAlloc returned -5!
[  192.770741][ T6868] fido_id[6868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  192.776401][ T6871] ialloc: diAlloc returned -5!
[  192.824068][ T6870] EXT4-fs (loop3): 1 truncate cleaned up
[  192.874211][ T6875] loop2: detected capacity change from 0 to 512
[  192.884184][ T6875] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  192.912136][ T6870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  192.930456][ T6875] EXT4-fs (loop2): 1 truncate cleaned up
[  192.944103][ T6875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  193.053407][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  193.371685][ T4279] EXT4-fs (loop3): unmounting filesystem.
[  194.099907][ T6906] tap0: tun_chr_ioctl cmd 1074025680
[  194.173356][ T6907] loop1: detected capacity change from 0 to 4096
[  194.231213][ T6907] __ntfs_error: 26 callbacks suppressed
[  194.231231][ T6907] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  194.311197][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.321320][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.338967][ T6907] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  194.367437][ T6910] loop3: detected capacity change from 0 to 4096
[  194.380606][ T6907] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  194.434022][ T6907] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  194.440225][ T6910] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  194.484113][ T6907] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  194.495498][ T6912] loop0: detected capacity change from 0 to 128
[  194.545159][ T6907] ntfs: volume version 3.1.
[  194.563102][ T6907] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  194.571524][ T6910] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  194.604546][ T6907] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  194.690099][ T6907] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  194.714016][ T6907] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  194.774265][ T6907] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  194.818787][ T6913] syz.0.1014: attempt to access beyond end of device
[  194.818787][ T6913] loop0: rw=1, sector=145, nr_sectors = 632 limit=128
[  195.205933][    T9] kworker/u4:0: attempt to access beyond end of device
[  195.205933][    T9] loop0: rw=1, sector=777, nr_sectors = 264 limit=128
[  195.252673][ T6918] loop3: detected capacity change from 0 to 256
[  195.454980][ T6921] loop2: detected capacity change from 0 to 256
[  195.496283][ T6926] xt_hashlimit: size too large, truncated to 1048576
[  195.534026][ T6921] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  195.724001][  T951] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  195.914725][  T951] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  195.928265][  T951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  195.953081][ T6934] syzkaller1: tun_chr_ioctl cmd 1074025677
[  195.961890][  T951] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  195.978363][ T6934] syzkaller1: linktype set to 270
[  195.983485][  T951] usb 2-1: config 0 interface 0 has no altsetting 0
[  196.031650][  T951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  196.062697][  T951] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  196.074255][  T951] usb 2-1: config 0 interface 0 has no altsetting 0
[  196.099732][  T951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  196.123976][  T951] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  196.154135][  T951] usb 2-1: config 0 interface 0 has no altsetting 0
[  196.171315][  T951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  196.216722][  T951] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  196.263442][  T951] usb 2-1: config 0 interface 0 has no altsetting 0
[  196.293467][  T951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  196.323958][  T951] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  196.363989][  T951] usb 2-1: config 0 interface 0 has no altsetting 0
[  196.375301][  T951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  196.384437][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  196.390483][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  196.396705][ T4278] Bluetooth: hci2: command 0x0406 tx timeout
[  196.396734][ T4274] Bluetooth: hci3: command 0x0406 tx timeout
[  196.411491][  T951] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  196.422677][  T951] usb 2-1: config 0 interface 0 has no altsetting 0
[  196.464293][  T951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  196.464341][  T951] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  196.464368][  T951] usb 2-1: config 0 interface 0 has no altsetting 0
[  196.465420][  T951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  196.465459][  T951] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  196.465486][  T951] usb 2-1: config 0 interface 0 has no altsetting 0
[  196.467617][  T951] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  196.467645][  T951] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  196.467667][  T951] usb 2-1: Product: syz
[  196.467683][  T951] usb 2-1: Manufacturer: syz
[  196.467698][  T951] usb 2-1: SerialNumber: syz
[  196.484892][  T951] usb 2-1: config 0 descriptor??
[  196.489491][  T951] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  196.542324][ T6952] program syz.0.1031 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  196.790877][    C1] usb 2-1: yurex_control_callback - control failed: -71
[  196.794495][ T4331] usb 2-1: USB disconnect, device number 9
[  196.797696][ T4331] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  196.909211][ T6962] loop4: detected capacity change from 0 to 256
[  196.923766][ T6962] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  196.988574][ T6964] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1036'.
[  196.988660][ T6964] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1036'.
[  197.192797][ T6968] loop4: detected capacity change from 0 to 512
[  197.226142][ T6968] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  197.751258][ T6960] loop2: detected capacity change from 0 to 32768
[  197.785327][ T6980] loop5: detected capacity change from 0 to 7
[  197.840602][ T6980] Dev loop5: unable to read RDB block 7
[  197.859838][ T6960] JBD2: Ignoring recovery information on journal
[  197.917732][ T6980]  loop5: unable to read partition table
[  197.923651][ T6980] loop5: partition table beyond EOD, truncated
[  197.994136][ T6980] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  198.073139][ T6960] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  198.445612][ T4282] ocfs2: Unmounting device (7,2) on (node local)
[  198.800682][ T6978] loop4: detected capacity change from 0 to 32768
[  198.919063][ T6978] XFS (loop4): Mounting V5 Filesystem
[  199.146765][ T6978] XFS (loop4): Ending clean mount
[  199.332073][  T951] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 
[  199.383865][  T951] XFS (loop4): Unmount and run xfs_repair
[  199.399610][  T951] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  199.438650][  T951] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  199.482589][  T951] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  199.503470][  T951] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  199.523737][  T951] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  199.548223][  T951] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  199.567697][  T951] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  199.583320][  T951] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  199.602161][  T951] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  199.629460][ T6978] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74
[  199.644958][ T6978] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1798/0x1e60 (fs/xfs/libxfs/xfs_defer.c:580).  Shutting down filesystem.
[  199.723919][ T6978] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  199.929965][ T4283] XFS (loop4): Unmounting Filesystem
[  200.041447][ T7044] loop1: detected capacity change from 0 to 64
[  200.324177][ T5275] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  200.517400][ T5275] usb 1-1: Using ep0 maxpacket: 16
[  200.526559][ T7050] netlink: 'syz.1.1071': attribute type 32 has an invalid length.
[  200.535941][ T5275] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.554216][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'.
[  200.568172][ T7050] (unnamed net_device) (uninitialized): option coupled_control: invalid value (20)
[  200.577808][ T5275] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  200.602139][ T5275] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  200.616132][ T7034] loop2: detected capacity change from 0 to 40427
[  200.622751][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.633439][ T7034] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  200.641680][ T5275] usb 1-1: Product: syz
[  200.646280][ T5275] usb 1-1: Manufacturer: syz
[  200.650925][ T5275] usb 1-1: SerialNumber: syz
[  200.669206][ T7034] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  200.757944][ T7034] F2FS-fs (loop2): Found nat_bits in checkpoint
[  200.900870][ T5275] usb 1-1: 0:2 : does not exist
[  200.916473][ T5275] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  200.931961][ T7034] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  200.949746][ T7034] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  201.015212][ T5275] usb 1-1: USB disconnect, device number 9
[  201.278730][ T4461] udevd[4461]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.995539][ T7074] loop2: detected capacity change from 0 to 64
[  202.826404][ T7070] loop4: detected capacity change from 0 to 32768
[  202.940442][ T7070] XFS (loop4): Mounting V5 Filesystem
[  203.045571][ T7070] XFS (loop4): Ending clean mount
[  203.123905][ T4331] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  203.192225][ T4283] XFS (loop4): Unmounting Filesystem
[  203.326700][ T4331] usb 2-1: Using ep0 maxpacket: 32
[  203.346802][ T4331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.373227][ T4331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.413590][ T4331] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  203.443851][ T4331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.474380][ T4331] usb 2-1: config 0 descriptor??
[  203.757611][ T7113] loop0: detected capacity change from 0 to 64
[  203.901186][ T4331] koneplus 0003:1E7D:2D51.0009: item fetching failed at offset 0/5
[  203.941889][ T4331] koneplus 0003:1E7D:2D51.0009: parse failed
[  203.958979][ T4331] koneplus: probe of 0003:1E7D:2D51.0009 failed with error -22
[  204.104710][ T4331] usb 2-1: USB disconnect, device number 10
[  204.111249][ T7120] IPv6: NLM_F_REPLACE set, but no existing node found!
[  204.520342][ T7131] loop2: detected capacity change from 0 to 512
[  204.542167][ T7133] loop0: detected capacity change from 0 to 128
[  204.578924][ T7133] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  204.644729][ T7133] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  204.691903][ T7110] loop3: detected capacity change from 0 to 32768
[  204.700510][ T7131] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  204.995808][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  205.290327][ T7148] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1108'.
[  205.394041][ T4285] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  205.584270][ T4285] usb 1-1: Using ep0 maxpacket: 32
[  205.591347][ T4285] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  205.630466][ T4285] usb 1-1: config 0 has no interface number 0
[  205.659541][ T4285] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  205.710078][ T4285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.741568][ T4285] usb 1-1: Product: syz
[  205.756930][ T4285] usb 1-1: Manufacturer: syz
[  205.772832][ T7150] loop2: detected capacity change from 0 to 4096
[  205.785653][ T4285] usb 1-1: SerialNumber: syz
[  205.803504][ T4285] usb 1-1: config 0 descriptor??
[  205.821420][ T7150] ntfs: volume version 3.1.
[  205.836254][ T4285] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  205.861441][ T7150] __ntfs_error: 6 callbacks suppressed
[  205.861462][ T7150] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  205.921204][ T7150] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  205.981420][ T7150] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  206.036194][ T7150] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[  206.058189][ T4285] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  206.129562][ T4285] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  206.140176][ T7150] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[  206.185847][ T7150] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  206.218149][ T7159] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  206.263905][ T7159] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  206.311761][ T7159] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  206.329252][ T7159] comedi comedi3: 8255: I/O port conflict (0xc9,4)
[  206.371008][ T7159] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  206.404564][ T7159] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  206.411410][ T7159] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  206.438479][ T7159] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  206.474026][ T7159] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  206.484277][ T7159] comedi comedi3: 8255: I/O port conflict (0x81,4)
[  206.515623][ T7159] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  206.522296][ T7159] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  206.530645][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  206.540183][ T4285] usb 1-1: USB disconnect, device number 10
[  206.560389][ T4285] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  206.563931][ T7159] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  206.630328][ T7159] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  206.638717][ T4285] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  206.655493][ T7159] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  206.668831][ T4285] quatech2 1-1:0.51: device disconnected
[  206.747306][ T7159] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  206.776287][ T7159] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4)
[  206.824170][ T7159] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  206.835859][ T7159] comedi comedi3: 8255: I/O port conflict (0x10002,4)
[  206.857439][ T7159] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  207.434342][  T951] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  207.633912][  T951] usb 2-1: Using ep0 maxpacket: 32
[  207.641014][  T951] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  207.668360][  T951] usb 2-1: config 0 has no interface number 0
[  207.707303][  T951] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  207.720504][  T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.740730][  T951] usb 2-1: Product: syz
[  207.750826][  T951] usb 2-1: Manufacturer: syz
[  207.767495][  T951] usb 2-1: SerialNumber: syz
[  207.785860][  T951] usb 2-1: config 0 descriptor??
[  207.800857][  T951] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  207.825870][  T951] usb 2-1: selecting invalid altsetting 1
[  207.832434][  T951] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  207.856604][  T951] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  207.871399][  T951] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  207.881190][  T951] usb 2-1: media controller created
[  207.913188][  T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  208.053271][  T951] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  208.070943][  T951] zl10353_read_register: readreg error (reg=127, ret==-32)
[  208.113023][ T7204] loop4: detected capacity change from 0 to 256
[  208.161786][ T7204] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  208.251174][ T4331] Process accounting resumed
[  208.260568][ T4331] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  208.270453][ T4331] FAT-fs (loop4): Filesystem has been set read-only
[  208.623269][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1137'.
[  208.704131][ T4274] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  209.114742][ T7171] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  209.178317][  T951] usb 2-1: USB disconnect, device number 11
[  209.830970][ T7239] loop4: detected capacity change from 0 to 512
[  209.919017][ T7239] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  209.946397][ T7247] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1150'.
[  209.963991][ T7239] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  210.208422][ T7246] loop2: detected capacity change from 0 to 4096
[  210.227100][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  210.273699][ T7246] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  210.542359][ T7255] loop1: detected capacity change from 0 to 128
[  210.589306][ T7255] EXT4-fs (loop1): Test dummy encryption mode enabled
[  210.655451][ T7255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  210.700775][ T7255] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  211.034970][ T7253] loop4: detected capacity change from 0 to 32768
[  211.122626][ T7241] loop0: detected capacity change from 0 to 32768
[  211.152478][ T7241] XFS (loop0): Mounting V5 Filesystem
[  211.173983][ T4285] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  211.273697][ T7241] XFS (loop0): Ending clean mount
[  211.326354][ T7249] loop3: detected capacity change from 0 to 40427
[  211.330381][ T7241] XFS (loop0): Quotacheck needed: Please wait.
[  211.353989][ T4285] usb 3-1: Using ep0 maxpacket: 32
[  211.361450][ T4285] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  211.391634][ T4285] usb 3-1: config 0 has no interface number 0
[  211.412952][ T7249] F2FS-fs (loop3): Found nat_bits in checkpoint
[  211.447350][ T4285] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  211.509410][ T7241] XFS (loop0): Quotacheck: Done.
[  211.511140][ T4285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.554395][ T4285] usb 3-1: Product: syz
[  211.558635][ T4285] usb 3-1: Manufacturer: syz
[  211.563253][ T4285] usb 3-1: SerialNumber: syz
[  211.627986][ T4285] usb 3-1: config 0 descriptor??
[  211.640512][ T7249] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  211.685449][ T4285] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  211.701117][   T26] audit: type=1800 audit(2000000095.830:44): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1152" name="file1" dev="loop3" ino=10 res=0 errno=0
[  211.721899][ T4285] usb 3-1: selecting invalid altsetting 1
[  211.721926][ T4285] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  211.745213][ T4275] XFS (loop0): Unmounting Filesystem
[  211.750275][ T4285] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  211.777736][ T7249] syz.3.1152: attempt to access beyond end of device
[  211.777736][ T7249] loop3: rw=2049, sector=77824, nr_sectors = 968 limit=40427
[  211.802770][ T7255] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  211.819478][ T4285] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  211.848447][ T4285] usb 3-1: media controller created
[  211.886782][ T4285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  211.890353][ T4279] syz-executor: attempt to access beyond end of device
[  211.890353][ T4279] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  211.984271][ T4285] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  212.003990][ T4285] zl10353_read_register: readreg error (reg=127, ret==-71)
[  212.048766][ T4285] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  212.109550][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  212.169252][ T4285] usb 3-1: USB disconnect, device number 11
[  212.602555][ T7288] loop4: detected capacity change from 0 to 2048
[  212.656182][ T7288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.666106][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'.
[  213.016067][ T7305] loop4: detected capacity change from 0 to 1024
[  213.092798][ T7305] hfsplus: keylen 65060 too large
[  213.105565][ T7305] hfsplus: xattr search failed
[  213.314010][  T951] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  213.504343][  T951] usb 3-1: Using ep0 maxpacket: 32
[  213.511396][  T951] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  213.533019][  T951] usb 3-1: config 0 has no interface number 0
[  213.555816][  T951] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  213.568739][  T951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.580318][  T951] usb 3-1: Product: syz
[  213.585025][  T951] usb 3-1: Manufacturer: syz
[  213.589790][  T951] usb 3-1: SerialNumber: syz
[  213.597553][  T951] usb 3-1: config 0 descriptor??
[  213.620277][  T951] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  213.647707][  T951] usb 3-1: selecting invalid altsetting 1
[  213.667094][  T951] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  213.694288][  T951] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  213.717570][  T951] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  213.732152][ T7325] loop1: detected capacity change from 0 to 256
[  213.738824][  T951] usb 3-1: media controller created
[  213.848118][  T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  213.888740][ T7327] loop4: detected capacity change from 0 to 64
[  214.040473][ T7327] syz.4.1178: attempt to access beyond end of device
[  214.040473][ T7327] loop4: rw=2049, sector=118, nr_sectors = 33 limit=64
[  214.067499][  T951] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  214.084346][  T951] zl10353_read_register: readreg error (reg=127, ret==-71)
[  214.111485][  T951] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  214.224168][  T951] usb 3-1: USB disconnect, device number 12
[  214.288586][ T2901] kworker/u4:5: attempt to access beyond end of device
[  214.288586][ T2901] loop4: rw=1, sector=65, nr_sectors = 1 limit=64
[  214.329193][ T2901] buffer_io_error: 38 callbacks suppressed
[  214.329211][ T2901] Buffer I/O error on dev loop4, logical block 65, lost async page write
[  214.391344][ T2901] kworker/u4:5: attempt to access beyond end of device
[  214.391344][ T2901] loop4: rw=1, sector=66, nr_sectors = 1 limit=64
[  214.450027][ T2901] Buffer I/O error on dev loop4, logical block 66, lost async page write
[  214.490508][ T2901] kworker/u4:5: attempt to access beyond end of device
[  214.490508][ T2901] loop4: rw=1, sector=67, nr_sectors = 1 limit=64
[  214.551101][ T2901] Buffer I/O error on dev loop4, logical block 67, lost async page write
[  214.570308][ T2901] kworker/u4:5: attempt to access beyond end of device
[  214.570308][ T2901] loop4: rw=1, sector=68, nr_sectors = 1 limit=64
[  214.603910][ T2901] Buffer I/O error on dev loop4, logical block 68, lost async page write
[  214.622787][ T2901] kworker/u4:5: attempt to access beyond end of device
[  214.622787][ T2901] loop4: rw=1, sector=72, nr_sectors = 1 limit=64
[  214.656899][ T2901] Buffer I/O error on dev loop4, logical block 72, lost async page write
[  214.681739][ T2901] kworker/u4:5: attempt to access beyond end of device
[  214.681739][ T2901] loop4: rw=1, sector=73, nr_sectors = 1 limit=64
[  214.737053][ T2901] Buffer I/O error on dev loop4, logical block 73, lost async page write
[  214.764448][ T2901] kworker/u4:5: attempt to access beyond end of device
[  214.764448][ T2901] loop4: rw=1, sector=76, nr_sectors = 1 limit=64
[  214.834356][ T2901] Buffer I/O error on dev loop4, logical block 76, lost async page write
[  214.842909][ T2901] Buffer I/O error on dev loop4, logical block 77, lost async page write
[  215.123914][  T951] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  215.219780][ T7335] loop1: detected capacity change from 0 to 32768
[  215.324165][  T951] usb 3-1: Using ep0 maxpacket: 8
[  215.331331][  T951] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  215.417259][  T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.428513][ T7363] loop4: detected capacity change from 0 to 1024
[  215.448009][ T7363] EXT4-fs: inline encryption not supported
[  215.462122][ T7335] XFS (loop1): Mounting V5 Filesystem
[  215.471837][ T7365] loop0: detected capacity change from 0 to 256
[  215.476532][  T951] pvrusb2: Hardware description: Terratec Grabster AV400
[  215.509934][  T951] pvrusb2: **********
[  215.546905][  T951] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  215.580231][ T7363] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  215.583160][  T951] pvrusb2: Important functionality might not be entirely working.
[  215.717490][  T951] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  215.761088][  T951] pvrusb2: **********
[  215.777501][ T7335] XFS (loop1): Ending clean mount
[  215.792862][ T2309] pvrusb2: Invalid write control endpoint
[  215.934800][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  215.988074][ T7345] pvrusb2: Invalid write control endpoint
[  216.027994][  T951] usb 3-1: USB disconnect, device number 13
[  216.090719][ T4271] XFS (loop1): Unmounting Filesystem
[  216.144158][ T2309] pvrusb2: Invalid write control endpoint
[  216.150869][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  216.161245][ T7375] loop0: detected capacity change from 0 to 4096
[  216.200858][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  216.208990][ T7375] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  216.239224][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  216.293508][ T2309] pvrusb2: Device being rendered inoperable
[  216.312942][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  216.329906][   T26] audit: type=1800 audit(2000000100.460:45): pid=7375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1194" name="file1" dev="loop0" ino=30 res=0 errno=0
[  216.363446][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  216.380261][ T2309] pvrusb2: Attached sub-driver cx25840
[  216.390444][ T7375] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[  216.399525][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  216.410522][ T7375] ntfs3: loop0: ino=1e, "file1" attr_set_size
[  216.420518][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  216.517531][ T1124] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22.
[  216.524818][ T4275] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[  216.532616][ T4275] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  216.568850][ T4275] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[  216.580495][    T9] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22.
[  216.589650][ T4275] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22.
[  217.321895][ T7379] loop4: detected capacity change from 0 to 40427
[  217.360593][ T7379] F2FS-fs (loop4): Unrecognized mount option "whint_mode=user-based" or missing value
[  217.662776][ T7410] device dummy0 entered promiscuous mode
[  217.702531][ T7410] device dummy0 left promiscuous mode
[  218.485440][ T7428] loop0: detected capacity change from 0 to 4096
[  218.530657][ T7432] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.609354][ T4314] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  218.813889][ T4314] usb 2-1: Using ep0 maxpacket: 32
[  218.821318][ T4314] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  218.847777][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.888052][ T7438] loop4: detected capacity change from 0 to 2048
[  218.904115][ T4317] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  218.987627][ T7438] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  219.079088][ T4314] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  219.091944][ T4314] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  219.102141][ T4314] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  219.109610][ T4314] usb 2-1: media controller created
[  219.119904][ T4317] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  219.133169][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.150369][ T4317] usb 4-1: Product: syz
[  219.158844][ T4314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  219.167975][ T4317] usb 4-1: Manufacturer: syz
[  219.175334][ T4317] usb 4-1: SerialNumber: syz
[  219.181556][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  219.290338][ T4314] az6027: usb out operation failed. (-71)
[  219.304402][ T4314] az6027: usb out operation failed. (-71)
[  219.314334][ T4314] stb0899_attach: Driver disabled by Kconfig
[  219.343967][ T4314] az6027: no front-end attached
[  219.343967][ T4314] 
[  219.366526][ T4314] az6027: usb out operation failed. (-71)
[  219.380191][ T4314] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  219.402784][ T4314] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18
[  219.434130][ T4317] rtl8150 4-1:1.0: couldn't reset the device
[  219.447189][ T4317] rtl8150: probe of 4-1:1.0 failed with error -5
[  219.455211][ T4314] dvb-usb: schedule remote query interval to 400 msecs.
[  219.469896][ T4314] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  219.488693][ T4317] usb 4-1: USB disconnect, device number 10
[  219.513994][ T4314] usb 2-1: USB disconnect, device number 12
[  219.638319][ T4314] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  219.710158][ T7457] loop0: detected capacity change from 0 to 1024
[  219.840476][ T1124] hfsplus: b-tree write err: -5, ino 25
[  219.853217][ T1124] hfsplus: b-tree write err: -5, ino 4
[  219.870993][ T1124] hfsplus: b-tree write err: -5, ino 2
[  220.172852][ T7471] netlink: 'syz.4.1236': attribute type 9 has an invalid length.
[  220.264006][  T125] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  220.465275][  T125] usb 3-1: Using ep0 maxpacket: 16
[  220.481368][  T125] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  220.497870][  T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.518781][  T125] usb 3-1: Product: syz
[  220.524308][  T125] usb 3-1: Manufacturer: syz
[  220.532581][  T125] usb 3-1: SerialNumber: syz
[  220.700396][ T7483] loop4: detected capacity change from 0 to 4096
[  220.804296][ T7486] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  220.882136][ T7483] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.'
[  220.907544][ T7483] Remounting filesystem read-only
[  220.941622][ T7468] loop1: detected capacity change from 0 to 32768
[  221.209088][ T7468] XFS (loop1): Mounting V5 Filesystem
[  221.211535][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'.
[  221.339493][ T7468] XFS (loop1): Ending clean mount
[  221.363962][  T125] snd-usb-audio: probe of 3-1:1.0 failed with error -71
[  221.407638][  T125] usb 3-1: USB disconnect, device number 14
[  221.447840][   T26] audit: type=1326 audit(2000000105.580:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.3.1248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b49d9cdd9 code=0x0
[  221.622970][ T4271] XFS (loop1): Unmounting Filesystem
[  222.463302][ T7531] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  222.489766][ T7531] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  222.503928][ T7531] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  222.518702][ T7531] comedi comedi3: 8255: I/O port conflict (0x100,4)
[  222.564301][ T7531] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  222.591410][ T7531] comedi comedi3: 8255: I/O port conflict (0x20000000,4)
[  222.613947][ T7531] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  222.652165][ T7531] comedi comedi3: 8255: I/O port conflict (0xa,4)
[  222.683871][  T125] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  222.769874][ T7524] loop0: detected capacity change from 0 to 32768
[  222.892153][  T125] usb 3-1: unable to get BOS descriptor or descriptor too short
[  222.910790][  T125] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  222.935027][  T125] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 142, changing to 7
[  222.965131][  T125] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[  222.993926][  T125] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  223.016448][  T125] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  223.053962][  T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.072241][  T125] usb 3-1: Product: syz
[  223.082432][  T125] usb 3-1: Manufacturer: syz
[  223.102591][  T125] usb 3-1: SerialNumber: syz
[  223.343365][  T125] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  223.381054][  T125] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  223.466558][  T125] usb 3-1: USB disconnect, device number 15
[  223.711325][ T7552] loop4: detected capacity change from 0 to 1024
[  223.743273][ T7552] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  223.776117][ T4461] udevd[4461]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  223.852076][ T7552] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  223.947904][ T7552] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 2 with error 28
[  223.983912][ T7552] EXT4-fs (loop4): This should not happen!! Data will be lost
[  223.983912][ T7552] 
[  224.002926][ T7552] EXT4-fs (loop4): Total free blocks count 0
[  224.021675][ T7552] EXT4-fs (loop4): Free/Dirty block details
[  224.033261][ T7552] EXT4-fs (loop4): free_blocks=0
[  224.048758][ T7552] EXT4-fs (loop4): dirty_blocks=0
[  224.058875][ T7552] EXT4-fs (loop4): Block reservation details
[  224.103047][ T7552] EXT4-fs (loop4): i_reserved_data_blocks=0
[  224.308264][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  224.529819][ T7577] overlayfs: filesystem on './file0' not supported as upperdir
[  225.203185][ T7569] loop0: detected capacity change from 0 to 32768
[  225.306846][ T7569] jfs_readdir called with invalid offset!
[  225.449532][ T7573] loop2: detected capacity change from 0 to 32768
[  225.774296][ T4461] udevd[4461]: incorrect btrfs checksum on /dev/loop2
[  225.826320][ T7583] loop4: detected capacity change from 0 to 32768
[  225.864188][ T7583] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1280 (7583)
[  225.941376][ T7583] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  225.979806][ T7583] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  226.001096][ T7583] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  226.023678][ T7583] BTRFS info (device loop4): use zstd compression, level 3
[  226.044327][ T7583] BTRFS info (device loop4): using free space tree
[  226.454450][ T7583] BTRFS info (device loop4): enabling ssd optimizations
[  226.470624][ T7623] loop3: detected capacity change from 0 to 256
[  226.802612][ T4283] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  227.837641][    C1] sd 0:0:1:0: [sda] tag#5360 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  227.848166][    C1] sd 0:0:1:0: [sda] tag#5360 CDB: Write(6) 0a 00 00 00 00 00 00 00 00 00 00 00
[  228.035001][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'.
[  228.054499][ T7630] loop1: detected capacity change from 0 to 40427
[  228.084396][ T7630] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  228.105637][ T7630] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  228.166553][ T7630] F2FS-fs (loop1): Found nat_bits in checkpoint
[  228.263985][ T4317] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  228.349413][ T7630] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  228.367740][ T7630] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  228.453907][ T4317] usb 1-1: Using ep0 maxpacket: 8
[  228.460986][ T4317] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  228.494136][ T4317] usb 1-1: config 179 has no interface number 0
[  228.502990][   T26] audit: type=1800 audit(2000000112.630:47): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1292" name="file1" dev="loop1" ino=10 res=0 errno=0
[  228.551086][ T4317] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  228.593276][ T4317] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  228.626571][ T4317] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  228.648824][ T7642] loop3: detected capacity change from 0 to 32768
[  228.658316][ T4317] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  228.704263][ T4317] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  228.754153][ T4317] usb 1-1: config 179 interface 65 has no altsetting 0
[  228.784376][ T4317] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  228.821793][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.919076][ T4317] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input19
[  228.961231][ T7673] loop2: detected capacity change from 0 to 256
[  229.087297][ T7673] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  229.188018][  T951] usb 1-1: USB disconnect, device number 11
[  229.188091][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  229.188500][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  229.259278][  T951] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  229.698781][ T7680] loop1: detected capacity change from 0 to 8192
[  229.763274][ T7680] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  229.785106][ T7680] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  229.848039][ T7680] REISERFS (device loop1): using ordered data mode
[  229.932423][ T7680] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  230.044290][ T7680] REISERFS (device loop1): checking transaction log (loop1)
[  230.086160][ T7680] REISERFS (device loop1): Using r5 hash to sort names
[  230.093592][ T7680] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  230.164620][ T7680] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  230.558809][ T4317] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  230.775587][ T4317] usb 1-1: config 246 has an invalid interface number: 166 but max is 0
[  230.796783][ T7712] program syz.1.1327 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  230.808265][ T4317] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[  230.829245][ T4317] usb 1-1: config 246 has no interface number 0
[  230.879898][ T4317] usb 1-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0
[  230.904189][ T4317] usb 1-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.970988][ T4317] usb 1-1: config 246 interface 166 has no altsetting 0
[  231.000510][ T4317] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  231.025770][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.052695][ T4317] usb 1-1: Product: syz
[  231.066990][ T4317] usb 1-1: Manufacturer: syz
[  231.074260][ T4317] usb 1-1: SerialNumber: syz
[  231.313931][ T5269] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  231.513999][ T5269] usb 2-1: Using ep0 maxpacket: 8
[  231.522023][ T5269] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  231.549865][ T5269] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  231.570704][ T5269] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  231.583509][ T5269] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  231.623871][ T5269] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  231.657591][ T5269] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  231.675839][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.704220][ T4317] usb 1-1: Limiting number of CPorts to U8_MAX
[  231.726492][ T4317] usb 1-1: Unknown endpoint type found, address 0x0b
[  231.733273][ T4317] usb 1-1: Not enough endpoints found in device, aborting!
[  231.832977][ T7716] loop4: detected capacity change from 0 to 40427
[  231.861075][ T7716] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  231.869378][ T7716] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  231.880503][ T7716] F2FS-fs (loop4): invalid crc_offset: 33558524
[  231.902748][ T7716] F2FS-fs (loop4): Found nat_bits in checkpoint
[  231.929895][ T4314] usb 1-1: USB disconnect, device number 12
[  231.931664][ T5269] usb 2-1: GET_CAPABILITIES returned 0
[  231.958667][ T5269] usbtmc 2-1:16.0: can't read capabilities
[  232.038242][ T7716] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  232.049129][ T4317] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  232.064059][ T7716] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  232.127495][ T7729] loop2: detected capacity change from 0 to 32768
[  232.149713][ T5269] usb 2-1: USB disconnect, device number 13
[  232.214954][ T7729] XFS (loop2): Mounting V5 Filesystem
[  232.260070][ T4317] usb 4-1: Using ep0 maxpacket: 32
[  232.285273][ T4317] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  232.305872][ T4317] usb 4-1: config 0 has no interface number 0
[  232.313487][ T4317] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.330852][ T4317] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.341377][ T4317] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  232.356872][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.371795][ T7729] XFS (loop2): Ending clean mount
[  232.390577][ T4317] usb 4-1: config 0 descriptor??
[  232.403506][ T7729] XFS (loop2): Quotacheck needed: Please wait.
[  232.454519][ T7729] XFS (loop2): Quotacheck: Done.
[  232.728396][ T4282] XFS (loop2): Unmounting Filesystem
[  232.922263][ T7755] loop1: detected capacity change from 0 to 64
[  232.956789][ T7755] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  233.003867][ T4314] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  233.021804][ T4317] uclogic 0003:28BD:0094.000A: pen parameters not found
[  233.033905][ T4317] uclogic 0003:28BD:0094.000A: interface is invalid, ignoring
[  233.058695][ T4317] usb 4-1: USB disconnect, device number 11
[  233.223874][ T4314] usb 1-1: Using ep0 maxpacket: 16
[  233.231545][ T4314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.271896][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  233.285277][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  233.296596][ T4314] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  233.309197][ T4314] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  233.327446][ T4314] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  233.337146][ T4314] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  233.345792][ T4314] usb 1-1: Manufacturer: syz
[  233.353370][ T4314] usb 1-1: config 0 descriptor??
[  233.472290][ T7767] loop1: detected capacity change from 0 to 256
[  233.743947][ T4314] rc_core: IR keymap rc-hauppauge not found
[  233.753002][ T4314] Registered IR keymap rc-empty
[  233.765927][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  233.803482][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  233.844678][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  233.866523][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20
[  233.923900][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  233.963344][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  234.013947][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  234.054232][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  234.094011][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  234.144026][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  234.166950][ T7778] loop4: detected capacity change from 0 to 2048
[  234.184819][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  234.234124][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  234.304117][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  234.312385][ T7778] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  234.361648][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  234.395296][ T4314] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  234.404577][ T4314] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  234.418317][ T4314] usb 1-1: USB disconnect, device number 13
[  234.501822][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  234.695662][ T7790] vivid-007: disconnect
[  234.722126][ T7788] vivid-007: reconnect
[  234.760523][ T7792] netlink: 464 bytes leftover after parsing attributes in process `syz.1.1356'.
[  234.834033][ T5273] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  234.975296][ T7794] loop0: detected capacity change from 0 to 4096
[  235.030953][ T7794] EXT4-fs (loop0): invalid inodes per group: 458784
[  235.030953][ T7794] 
[  235.057272][ T5273] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  235.082405][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.140325][ T5273] usb 4-1: config 0 descriptor??
[  235.176112][ T5273] cp210x 4-1:0.0: cp210x converter detected
[  235.577867][ T5273] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  235.628880][ T5273] usb 4-1: cp210x converter now attached to ttyUSB0
[  235.807944][ T5273] usb 4-1: USB disconnect, device number 12
[  235.838524][ T5273] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  235.982319][ T7796] loop4: detected capacity change from 0 to 131072
[  235.984155][ T5273] cp210x 4-1:0.0: device disconnected
[  235.995599][ T7796] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  236.002339][ T7796] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  236.011407][ T7796] F2FS-fs (loop4): invalid crc value
[  236.063667][ T7796] F2FS-fs (loop4): Found nat_bits in checkpoint
[  236.130098][ T7796] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  236.137305][ T7796] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  236.198199][ T7813] loop2: detected capacity change from 0 to 4096
[  236.282752][ T7796] fscrypt (loop4, inode 8): Error -61 getting encryption context
[  236.304949][ T7815] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  236.359040][   T26] audit: type=1800 audit(2000000120.490:48): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1364" name="file1" dev="loop2" ino=15 res=0 errno=0
[  237.081411][ T7831] loop3: detected capacity change from 0 to 2048
[  237.115285][ T7833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1372'.
[  237.182971][ T7831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  237.898936][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1381'.
[  237.973866][ T4317] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  238.093952][ T5275] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  238.113882][ T5269] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  238.154055][ T4317] usb 4-1: Using ep0 maxpacket: 16
[  238.163617][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.180603][ T4317] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  238.201814][ T4317] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00
[  238.218418][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.232768][ T4317] usb 4-1: config 0 descriptor??
[  238.296913][ T5269] usb 2-1: config 8 has an invalid interface number: 33 but max is 0
[  238.305581][ T5275] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.323938][ T5269] usb 2-1: config 8 has no interface number 0
[  238.333977][ T5275] usb 1-1: config 0 has no interfaces?
[  238.339523][ T5275] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  238.353885][ T5269] usb 2-1: config 8 interface 33 has no altsetting 0
[  238.362652][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.385367][ T5269] usb 2-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db
[  238.409365][ T5275] usb 1-1: config 0 descriptor??
[  238.421154][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.449901][ T5269] usb 2-1: Product: syz
[  238.460043][ T5269] usb 2-1: Manufacturer: syz
[  238.475973][ T5269] usb 2-1: SerialNumber: syz
[  238.477565][ T7844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.534376][ T7844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.652781][  T951] usb 1-1: USB disconnect, device number 14
[  238.753557][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.770131][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.787696][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.815597][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.827643][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.835278][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.850736][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.858520][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.869919][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.884167][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.891231][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.898220][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.905492][ T4317] apple 0003:05AC:0241.000B: unknown main item tag 0x0
[  238.912899][ T4317] apple 0003:05AC:0241.000B: item fetching failed at offset 32/41
[  238.940021][ T4317] apple 0003:05AC:0241.000B: parse failed
[  238.943130][ T5269] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware
[  238.955209][ T4317] apple: probe of 0003:05AC:0241.000B failed with error -22
[  238.992204][ T4317] usb 4-1: USB disconnect, device number 13
[  239.010987][ T5269] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  239.027271][ T5269] dib0700: firmware download failed at 7 with -22
[  239.042969][ T5269] usb 2-1: USB disconnect, device number 14
[  239.297165][ T7879] loop0: detected capacity change from 0 to 512
[  239.464017][ T5273] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  239.654034][ T5273] usb 3-1: Using ep0 maxpacket: 8
[  239.672436][ T5273] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  239.699171][ T5273] usb 3-1: config 179 has no interface number 0
[  239.713327][ T5273] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  239.731658][ T5273] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  239.768587][ T5273] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  239.795126][ T5273] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  239.820104][ T5273] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  239.850233][ T5273] usb 3-1: config 179 interface 65 has no altsetting 0
[  239.877960][ T5273] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  239.903608][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.979371][ T5273] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input21
[  240.033104][ T7893] loop1: detected capacity change from 0 to 4096
[  240.117133][ T7894] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.290798][ T4331] usb 3-1: USB disconnect, device number 16
[  240.290809][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  240.290849][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  240.314133][ T4331] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  240.559578][ T7886] loop4: detected capacity change from 0 to 40427
[  240.597210][ T7886] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  240.634789][ T7886] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  240.664500][ T7886] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff
[  240.685155][ T7886] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8
[  240.716954][ T7886] F2FS-fs (loop4): invalid crc value
[  240.747344][ T7886] F2FS-fs (loop4): Found nat_bits in checkpoint
[  240.946528][ T7886] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  240.967910][ T7886] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  241.042942][ T7906] loop0: detected capacity change from 0 to 1024
[  241.163117][ T7906] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  241.233706][ T4283] bio_check_eod: 2 callbacks suppressed
[  241.233726][ T4283] syz-executor: attempt to access beyond end of device
[  241.233726][ T4283] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  241.268101][ T7906] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.469341][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  241.587072][ T7898] loop1: detected capacity change from 0 to 32768
[  241.631048][ T7898] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1399 (7898)
[  241.689556][ T7898] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  241.718117][ T7898] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  241.770284][ T7898] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  241.809723][ T7898] BTRFS info (device loop1): use zstd compression, level 3
[  241.823115][ T7898] BTRFS info (device loop1): using free space tree
[  241.946349][ T4317] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  242.029712][ T7898] BTRFS info (device loop1): enabling ssd optimizations
[  242.030251][ T7930] loop2: detected capacity change from 0 to 256
[  242.137671][ T4271] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  242.184005][ T4317] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  242.228181][ T4317] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.273824][ T4317] usb 1-1: config 0 interface 0 has no altsetting 0
[  242.291436][ T4317] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  242.334289][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.386569][ T4317] usb 1-1: config 0 descriptor??
[  243.065042][ T4312] usb 1-1: USB disconnect, device number 15
[  243.096439][ T7953] loop3: detected capacity change from 0 to 4096
[  243.151145][ T7962] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.354303][ T4317] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  243.475929][ T7969] loop3: detected capacity change from 0 to 256
[  243.514784][ T7969] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[  243.531085][ T7969] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  243.554005][ T4317] usb 3-1: Using ep0 maxpacket: 32
[  243.561803][ T4317] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  243.586739][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.844741][ T4317] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  243.862590][ T4317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  243.894814][ T4317] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  243.934100][ T4317] usb 3-1: media controller created
[  243.992400][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  244.088512][ T4317] az6027: usb out operation failed. (-71)
[  244.112377][ T4317] az6027: usb out operation failed. (-71)
[  244.134002][ T4317] stb0899_attach: Driver disabled by Kconfig
[  244.140059][ T4317] az6027: no front-end attached
[  244.140059][ T4317] 
[  244.173859][ T4317] az6027: usb out operation failed. (-71)
[  244.181022][   T26] audit: type=1326 audit(2000000128.300:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.4.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516d79cdd9 code=0x7ffc0000
[  244.233988][ T4317] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  244.242423][ T4317] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22
[  244.286107][   T26] audit: type=1326 audit(2000000128.310:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.4.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516d79cdd9 code=0x7ffc0000
[  244.311569][ T4317] dvb-usb: schedule remote query interval to 400 msecs.
[  244.353975][ T4317] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  244.376606][ T4317] usb 3-1: USB disconnect, device number 17
[  244.406406][   T26] audit: type=1326 audit(2000000128.350:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.4.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516d79cdd9 code=0x7ffc0000
[  244.481750][   T26] audit: type=1326 audit(2000000128.350:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.4.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516d79cdd9 code=0x7ffc0000
[  244.500941][ T4317] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  244.583241][   T26] audit: type=1326 audit(2000000128.350:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.4.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f516d79cdd9 code=0x7ffc0000
[  244.659513][   T26] audit: type=1326 audit(2000000128.350:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.4.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516d79cdd9 code=0x7ffc0000
[  244.754090][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'.
[  244.792758][   T26] audit: type=1326 audit(2000000128.350:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.4.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516d79cdd9 code=0x7ffc0000
[  244.859440][ T8003] loop2: detected capacity change from 0 to 16
[  244.928878][   T26] audit: type=1326 audit(2000000128.350:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.4.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516d79cdd9 code=0x7ffc0000
[  244.969295][ T8003] erofs: (device loop2): mounted with root inode @ nid 36.
[  244.987893][ T8005] loop0: detected capacity change from 0 to 8
[  245.011674][   T26] audit: type=1326 audit(2000000128.350:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.4.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516d79cdd9 code=0x7ffc0000
[  245.080640][ T8003] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 36
[  245.119630][ T8005] SQUASHFS error: Unable to read inode 0x24
[  245.132033][   T26] audit: type=1326 audit(2000000128.350:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.4.1426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f516d79cdd9 code=0x7ffc0000
[  245.305173][ T7983] loop1: detected capacity change from 0 to 32768
[  245.314169][ T7946] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  245.348833][ T8012] loop2: detected capacity change from 0 to 128
[  245.398461][ T7983] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root
[  245.398461][ T7983] 
[  245.458691][ T8012] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  245.476683][ T7983] ERROR: (device loop1): remounting filesystem as read-only
[  245.510296][ T8012] ext4 filesystem being mounted at /282/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  245.513889][ T7946] usb 4-1: Using ep0 maxpacket: 8
[  245.550697][ T7946] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  245.564674][ T7946] usb 4-1: config 179 has no interface number 0
[  245.584075][ T7946] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  245.629843][ T7946] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  245.654605][ T8012] fscrypt (loop2, inode 12): Unsupported encryption flags (0x10)
[  245.674531][ T7946] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  245.713911][ T7946] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  245.745788][ T7946] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  245.784051][ T7946] usb 4-1: config 179 interface 65 has no altsetting 0
[  245.797671][ T7946] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  245.810924][ T7946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.833096][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  245.924291][ T7946] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input23
[  246.134166][  T107] BUG: Bad page state in process jfsCommit  pfn:2e002
[  246.142439][  T107] page:ffffea0000b80080 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x2e002
[  246.222066][  T107] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  246.267905][  T107] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000
[  246.308663][  T107] raw: 000000000000001c ffff8880275a32e8 00000000ffffffff 0000000000000000
[  246.346006][  T107] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  246.357189][  T107] page_owner tracks the page as allocated
[  246.371917][  T107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7983, tgid 7982 (syz.1.1424), ts 245341519549, free_ts 245249826402
[  246.391324][  T107]  post_alloc_hook+0x173/0x1a0
[  246.396680][  T107]  get_page_from_freelist+0x1a1e/0x1ab0
[  246.402554][  T107]  __alloc_pages+0x1ec/0x4f0
[  246.408552][  T107]  folio_alloc+0x1c/0x60
[  246.412988][  T107]  filemap_alloc_folio+0xdb/0x480
[  246.418420][  T107]  do_read_cache_folio+0x1bb/0x760
[  246.423708][  T107]  do_read_cache_page+0x32/0x220
[  246.429386][  T107]  __get_metapage+0x316/0xfa0
[  246.436509][  T107]  diRead+0x6f7/0xbb0
[  246.440554][  T107]  jfs_iget+0x89/0x3f0
[  246.445062][  T107]  jfs_fill_super+0x70e/0xad0
[  246.449904][  T107]  mount_bdev+0x287/0x3c0
[  246.454660][  T107]  legacy_get_tree+0xe6/0x180
[  246.459394][  T107]  vfs_get_tree+0x88/0x270
[  246.481789][  T107]  do_new_mount+0x24a/0xa40
[  246.487753][  T107]  __se_sys_mount+0x2e3/0x3d0
[  246.492764][  T107] page last free stack trace:
[  246.497814][  T107]  free_unref_page_prepare+0x8b4/0x9a0
[  246.503335][  T107]  free_unref_page+0x2e/0x3f0
[  246.508359][  T107]  __vunmap+0x856/0xa00
[  246.512552][  T107]  xz_dec_lzma2_end+0x63/0x90
[  246.517654][  T107]  xz_dec_end+0x45/0x80
[  246.521942][  T107]  squashfs_xz_free+0x3a/0x50
[  246.526784][  T107]  squashfs_decompressor_destroy+0x93/0xb0
[  246.538774][  T951] usb 4-1: USB disconnect, device number 14
[  246.538839][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  246.553447][  T951] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  246.564381][  T107]  squashfs_put_super+0xaf/0x1a0
[  246.569384][  T107]  generic_shutdown_super+0x130/0x340
[  246.574873][  T107]  kill_block_super+0x7c/0xe0
[  246.579602][  T107]  deactivate_locked_super+0x93/0xf0
[  246.591885][  T107]  cleanup_mnt+0x42c/0x4b0
[  246.596395][  T107]  task_work_run+0x1d0/0x260
[  246.601041][  T107]  exit_to_user_mode_loop+0xe6/0x110
[  246.606514][  T107]  exit_to_user_mode_prepare+0xee/0x180
[  246.612121][  T107]  syscall_exit_to_user_mode+0x16/0x40
[  246.620170][  T107] Modules linked in:
[  246.641368][  T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0
[  246.648661][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  246.658759][  T107] Call Trace:
[  246.662060][  T107]  <TASK>
[  246.664996][  T107]  dump_stack_lvl+0x188/0x24e
[  246.669687][  T107]  ? show_regs_print_info+0x12/0x12
[  246.674920][  T107]  ? swiotlb_print_info+0x60/0x60
[  246.680067][  T107]  bad_page+0x14b/0x170
[  246.684228][  T107]  free_unref_page_prepare+0x42a/0x9a0
[  246.689696][  T107]  free_unref_page+0x2e/0x3f0
[  246.694476][  T107]  ? __folio_put+0xf1/0x210
[  246.699002][  T107]  txUnlock+0x27e/0xcb0
[  246.703191][  T107]  ? lockdep_hardirqs_on+0x94/0x140
[  246.708410][  T107]  jfs_lazycommit+0x56a/0xa70
[  246.713114][  T107]  ? txFreelock+0x5a0/0x5a0
[  246.717635][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  246.723644][  T107]  ? do_task_dead+0xd0/0xd0
[  246.728171][  T107]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  246.734171][  T107]  ? __kthread_parkme+0x162/0x1c0
[  246.739225][  T107]  kthread+0x29d/0x330
[  246.743320][  T107]  ? txFreelock+0x5a0/0x5a0
[  246.748000][  T107]  ? kthread_blkcg+0xd0/0xd0
[  246.752604][  T107]  ret_from_fork+0x1f/0x30
[  246.757057][  T107]  </TASK>
[  246.770767][  T107] Disabling lock debugging due to kernel taint
[  246.777381][  T107] page:ffffea0000b80080 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x2e002
[  246.796179][  T107] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  246.808562][  T107] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000
[  246.818209][  T107] raw: 000000000000001c ffff8880275a32e8 00000000ffffffff 0000000000000000
[  246.826918][  T107] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[  246.837362][  T107] page_owner tracks the page as allocated
[  246.843302][  T107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7983, tgid 7982 (syz.1.1424), ts 245341519549, free_ts 245249826402
[  246.861760][  T107]  post_alloc_hook+0x173/0x1a0
[  246.867292][  T107]  get_page_from_freelist+0x1a1e/0x1ab0
[  246.872880][  T107]  __alloc_pages+0x1ec/0x4f0
[  246.877563][  T107]  folio_alloc+0x1c/0x60
[  246.881833][  T107]  filemap_alloc_folio+0xdb/0x480
[  246.887121][  T107]  do_read_cache_folio+0x1bb/0x760
[  246.892263][  T107]  do_read_cache_page+0x32/0x220
[  246.897261][  T107]  __get_metapage+0x316/0xfa0
[  246.901972][  T107]  diRead+0x6f7/0xbb0
[  246.905993][  T107]  jfs_iget+0x89/0x3f0
[  246.910095][  T107]  jfs_fill_super+0x70e/0xad0
[  246.915193][  T107]  mount_bdev+0x287/0x3c0
[  246.919570][  T107]  legacy_get_tree+0xe6/0x180
[  246.924331][  T107]  vfs_get_tree+0x88/0x270
[  246.928782][  T107]  do_new_mount+0x24a/0xa40
[  246.933307][  T107]  __se_sys_mount+0x2e3/0x3d0
[  246.938066][  T107] page last free stack trace:
[  246.943192][  T107]  free_unref_page_prepare+0x8b4/0x9a0
[  246.948848][  T107]  free_unref_page+0x2e/0x3f0
[  246.953567][  T107]  __vunmap+0x856/0xa00
[  246.957769][  T107]  xz_dec_lzma2_end+0x63/0x90
[  246.962492][  T107]  xz_dec_end+0x45/0x80
[  246.966721][  T107]  squashfs_xz_free+0x3a/0x50
[  246.971423][  T107]  squashfs_decompressor_destroy+0x93/0xb0
[  246.977369][  T107]  squashfs_put_super+0xaf/0x1a0
[  246.982323][  T107]  generic_shutdown_super+0x130/0x340
[  246.987744][  T107]  kill_block_super+0x7c/0xe0
[  246.992443][  T107]  deactivate_locked_super+0x93/0xf0
[  246.997797][  T107]  cleanup_mnt+0x42c/0x4b0
[  247.002235][  T107]  task_work_run+0x1d0/0x260
[  247.006858][  T107]  exit_to_user_mode_loop+0xe6/0x110
[  247.012186][  T107]  exit_to_user_mode_prepare+0xee/0x180
[  247.017982][  T107]  syscall_exit_to_user_mode+0x16/0x40
[  247.023617][  T107] ------------[ cut here ]------------
[  247.029120][  T107] kernel BUG at include/linux/mm.h:1146!
[  247.034826][  T107] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  247.040913][  T107] CPU: 1 PID: 107 Comm: jfsCommit Tainted: G    B              syzkaller #0
[  247.049592][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  247.059656][  T107] RIP: 0010:put_metapage+0x24f/0x340
[  247.064960][  T107] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 40 32 c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f
[  247.084582][  T107] RSP: 0018:ffffc90002ce7ce0 EFLAGS: 00010246
[  247.090662][  T107] RAX: 965e7f870e328c00 RBX: ffff8880275a32e8 RCX: 965e7f870e328c00
[  247.098730][  T107] RDX: 0000000000000000 RSI: ffffffff8adf1300 RDI: ffffffff8adf12c0
[  247.106711][  T107] RBP: 000000000000007f R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d
[  247.114970][  T107] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: ffff8880275a3310
[  247.123053][  T107] R13: ffffea0000b800b4 R14: 1ffff11004eb4662 R15: 1ffff11004eb466f
[  247.131245][  T107] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  247.140215][  T107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  247.146820][  T107] CR2: 0000001b2ff14ff8 CR3: 000000002c300000 CR4: 00000000003506e0
[  247.154825][  T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  247.162811][  T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  247.170790][  T107] Call Trace:
[  247.174078][  T107]  <TASK>
[  247.177045][  T107]  txUnlock+0x427/0xcb0
[  247.181281][  T107]  jfs_lazycommit+0x56a/0xa70
[  247.185988][  T107]  ? txFreelock+0x5a0/0x5a0
[  247.190504][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  247.196409][  T107]  ? do_task_dead+0xd0/0xd0
[  247.200926][  T107]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  247.206831][  T107]  ? __kthread_parkme+0x162/0x1c0
[  247.211872][  T107]  kthread+0x29d/0x330
[  247.215954][  T107]  ? txFreelock+0x5a0/0x5a0
[  247.220472][  T107]  ? kthread_blkcg+0xd0/0xd0
[  247.225072][  T107]  ret_from_fork+0x1f/0x30
[  247.229510][  T107]  </TASK>
[  247.232543][  T107] Modules linked in:
[  247.243816][  T107] ---[ end trace 0000000000000000 ]---
[  247.249712][  T107] RIP: 0010:put_metapage+0x24f/0x340
[  247.255194][  T107] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 40 32 c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f
[  247.275976][  T107] RSP: 0018:ffffc90002ce7ce0 EFLAGS: 00010246
[  247.282382][  T107] RAX: 965e7f870e328c00 RBX: ffff8880275a32e8 RCX: 965e7f870e328c00
[  247.290500][  T107] RDX: 0000000000000000 RSI: ffffffff8adf1300 RDI: ffffffff8adf12c0
[  247.298793][  T107] RBP: 000000000000007f R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d
[  247.306836][  T107] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: ffff8880275a3310
[  247.314973][  T107] R13: ffffea0000b800b4 R14: 1ffff11004eb4662 R15: 1ffff11004eb466f
[  247.322970][  T107] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  247.331939][  T107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  247.338602][  T107] CR2: 0000001b2ff14ff8 CR3: 000000007a4db000 CR4: 00000000003506e0
[  247.346846][  T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  247.355154][  T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  247.363163][  T107] Kernel panic - not syncing: Fatal exception
[  247.369464][  T107] Kernel Offset: disabled
[  247.373797][  T107] Rebooting in 86400 seconds..