last executing test programs:

53.745463803s ago: executing program 0 (id=767):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r0, 0x40047459, 0xf0ff1f00000000)

53.092825276s ago: executing program 0 (id=774):
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x11, 0x2, 0x4c, 0x1, 0x0})

52.849685311s ago: executing program 0 (id=776):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xed, [{{0x9, 0x4, 0x0, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="001105000000050f32"], 0x0, 0x0, 0x0, 0x0}, 0x0)

51.006186877s ago: executing program 0 (id=784):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0)
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

50.882308329s ago: executing program 0 (id=785):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r1, 0x103, 0x70bd25, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x84880}, 0x4000024)

50.345553879s ago: executing program 0 (id=792):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
r1 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, &(0x7f0000001600), 0x0}, 0x20)

50.133911254s ago: executing program 32 (id=792):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
r1 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, &(0x7f0000001600), 0x0}, 0x20)

3.992800752s ago: executing program 1 (id=1151):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x20, 0x0, 0xff, r1}, [@IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_CACHEINFO={0x14, 0x6, {0x1ff, 0x1ff, 0x1, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0)

3.805141546s ago: executing program 1 (id=1155):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000080)='./file1\x00', 0x10042, &(0x7f0000004240)=ANY=[@ANYBLOB='discard=0x00000000000000f2,errors=continue,errors=continue,iocharset=cp861,iocharset=euc-jp,integrity,usrquota,errors=remount-ro,uid=', @ANYRESHEX=0xee01, @ANYBLOB='\x00\x00'], 0x24, 0x6202, &(0x7f000000d780)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f00000000c0)=""/55, 0x37)

3.05191167s ago: executing program 1 (id=1159):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x4, 0xf3, 0x0, 0x0, @binary}]}, 0x24}], 0x1}, 0x0)

2.533593921s ago: executing program 1 (id=1160):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
setrlimit(0x7, &(0x7f00000001c0)={0x5, 0xd})
syz_init_net_socket$x25(0x9, 0x5, 0x0)

2.393744633s ago: executing program 1 (id=1161):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x20, 0x21, 0x7, {0x7, 0x0, "406116c99e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.0790714s ago: executing program 4 (id=1164):
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r0, 0x0)

1.937443102s ago: executing program 4 (id=1165):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4038ae7a, &(0x7f0000000040)={[{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x8001}], 0x2})

1.564042389s ago: executing program 3 (id=1166):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x810410, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x2, 0x1d6, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300})

1.421784542s ago: executing program 4 (id=1167):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
ptrace(0x10, 0x1)

1.281737885s ago: executing program 4 (id=1169):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44084)

1.03618989s ago: executing program 4 (id=1170):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000480)=ANY=[@ANYBLOB='quota,noquota,discard=0x0000000000000007,discard=0x00000000000004e5,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nointegrity,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=koi8-u,uid=', @ANYRESHEX=0xee01, @ANYBLOB='\x00'], 0x24, 0x61b6, &(0x7f00000075c0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

917.962452ms ago: executing program 3 (id=1171):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18)

711.855816ms ago: executing program 3 (id=1173):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90)

609.719788ms ago: executing program 2 (id=1174):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x880)

578.829079ms ago: executing program 2 (id=1175):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)

538.26836ms ago: executing program 3 (id=1176):
unshare(0x6020400)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)

428.146782ms ago: executing program 2 (id=1177):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x679, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@tclass={{0x14, 0x29, 0x43, 0x10000}}], 0x18}}], 0x2, 0x20001000)

364.451183ms ago: executing program 3 (id=1178):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x208000000000002})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2})

363.314653ms ago: executing program 1 (id=1179):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000001500)={r1, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, 0x300}, 0x90)

270.110254ms ago: executing program 2 (id=1180):
r0 = syz_io_uring_setup(0x1f97, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x1, 0x2})
io_uring_enter(r0, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5)

197.756906ms ago: executing program 3 (id=1181):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@quota}]}, 0x0, 0x236, &(0x7f00000007c0)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}, 0x40, 0x0, '\x00', @b})
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000540)={@desc={0x1, 0x0, @auto="e3323fe38d0792d9"}, 0x21, 0x0, '\x00', @c})

111.161598ms ago: executing program 2 (id=1182):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x2, @multicast2}}}, 0x88)

18.190069ms ago: executing program 4 (id=1183):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file2\x00', 0x8, &(0x7f0000000240)={[{@autodefrag}, {@autodefrag}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@space_cache_v2}, {@thread_pool={'thread_pool', 0x3d, 0x1}}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xcaee2d060857d293)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0)

0s ago: executing program 2 (id=1184):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffed}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40014}, 0x0)

kernel console output (not intermixed with test programs):

32768
[  103.585667][ T6786] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.371 (6786)
[  103.655042][ T6786] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  103.680538][ T6786] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  103.717629][ T6786] BTRFS info (device loop1): force clearing of disk cache
[  103.737849][ T6786] BTRFS info (device loop1): disabling tree log
[  103.751730][ T6786] BTRFS info (device loop1): doing ref verification
[  103.766706][ T6786] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11
[  103.805414][ T6786] BTRFS info (device loop1): enabling auto defrag
[  103.831211][ T6786] BTRFS info (device loop1): enabling ssd optimizations
[  103.857624][ T6786] BTRFS info (device loop1): using spread ssd allocation scheme
[  103.901847][ T6786] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11
[  103.950199][ T6786] BTRFS info (device loop1): using free space tree
[  104.014511][ T6809] loop2: detected capacity change from 0 to 2048
[  104.046173][ T6809] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.070794][ T6786] BTRFS info (device loop1): auto enabling async discard
[  104.109544][ T6786] BTRFS info (device loop1): rebuilding free space tree
[  104.434338][ T5789] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  104.852679][ T6842] loop2: detected capacity change from 0 to 2048
[  104.880763][ T6842] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  104.921351][ T6842] NILFS (loop2): mounting unchecked fs
[  104.993677][ T6842] NILFS (loop2): recovery complete
[  105.008519][ T6342] udevd[6342]: incorrect nilfs2 checksum on /dev/loop2
[  105.048152][ T6847] loop1: detected capacity change from 0 to 4096
[  105.064108][ T6851] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.090426][ T6850] ALSA: seq fatal error: cannot create timer (-22)
[  105.212171][ T6847] ntfs: volume version 3.1.
[  105.558566][ T6862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.399'.
[  106.196859][ T6859] loop0: detected capacity change from 0 to 32768
[  106.229049][ T6859] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.395 (6859)
[  106.261250][ T6859] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  106.273786][  T787] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  106.285948][ T6859] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  106.312644][ T6859] BTRFS info (device loop0): force clearing of disk cache
[  106.336243][ T6859] BTRFS info (device loop0): disabling tree log
[  106.339230][ T6887] loop3: detected capacity change from 0 to 64
[  106.342635][ T6859] BTRFS info (device loop0): doing ref verification
[  106.367223][ T6859] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[  106.384137][ T6859] BTRFS info (device loop0): enabling auto defrag
[  106.392849][ T6859] BTRFS info (device loop0): enabling ssd optimizations
[  106.400949][ T6859] BTRFS info (device loop0): using spread ssd allocation scheme
[  106.411716][ T6889] tipc: Started in network mode
[  106.418302][ T6889] tipc: Node identity , cluster identity 4711
[  106.425526][ T6889] tipc: Failed to set node id, please configure manually
[  106.442817][ T6859] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[  106.461658][ T6889] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  106.476234][ T6859] BTRFS info (device loop0): using free space tree
[  106.483846][  T787] usb 2-1: Using ep0 maxpacket: 8
[  106.510848][  T787] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  106.528629][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.544532][  T787] usb 2-1: Product: syz
[  106.561957][  T787] usb 2-1: Manufacturer: syz
[  106.583196][  T787] usb 2-1: SerialNumber: syz
[  106.594801][  T787] usb 2-1: config 0 descriptor??
[  106.608663][  T787] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  106.644581][  T787] dvb-usb: bulk message failed: -22 (2/0)
[  106.669981][  T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  106.689361][ T6859] BTRFS info (device loop0): auto enabling async discard
[  106.689551][  T787] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  106.712239][  T787] usb 2-1: media controller created
[  106.722722][ T6859] BTRFS info (device loop0): rebuilding free space tree
[  106.739614][  T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  106.815300][ T6879] dvb-usb: bulk message failed: -22 (3/0)
[  106.834836][  T787] cxusb: set interface failed
[  106.839585][  T787] dvb-usb: bulk message failed: -22 (1/0)
[  106.940892][  T787] DVB: Unable to find symbol mt352_attach()
[  106.951173][  T787] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  106.971933][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  107.074093][  T787] rc_core: IR keymap rc-dvico-portable not found
[  107.080475][  T787] Registered IR keymap rc-empty
[  107.108436][ T6917] loop3: detected capacity change from 0 to 512
[  107.125705][  T787] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  107.140007][  T787] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input11
[  107.174889][ T6917] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  107.202989][  T787] dvb-usb: schedule remote query interval to 100 msecs.
[  107.216998][ T6917] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  107.221384][  T787] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  107.253108][ T6917] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  107.297395][  T787] usb 2-1: USB disconnect, device number 5
[  107.313986][ T6917] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  107.343725][ T6917] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0080]
[  107.351806][ T6917] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.416: inode #0: comm syz.3.416: iget: illegal inode #
[  107.493369][ T6924] loop0: detected capacity change from 0 to 512
[  107.509465][ T6917] EXT4-fs (loop3): get orphan inode failed
[  107.530256][ T6917] EXT4-fs (loop3): mount failed
[  107.556714][  T787] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  107.561318][ T6924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.987052][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.251450][ T6928] loop2: detected capacity change from 0 to 32768
[  108.299068][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  108.318750][   T27] kauditd_printk_skb: 11 callbacks suppressed
[  108.318762][   T27] audit: type=1800 audit(1758692375.401:31): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.420" name="file1" dev="loop2" ino=4 res=0 errno=0
[  108.352714][ T6928] ERROR: (device loop2): dbAllocBits: leaf page corrupt
[  108.352714][ T6928] 
[  108.370606][ T6950] loop1: detected capacity change from 0 to 1024
[  108.377355][ T6928] ERROR: (device loop2): remounting filesystem as read-only
[  108.391723][ T6952] netlink: 'syz.0.430': attribute type 4 has an invalid length.
[  108.395067][ T6928] syz.2.420: attempt to access beyond end of device
[  108.395067][ T6928] loop2: rw=34817, sector=4680704, nr_sectors = 792 limit=32768
[  108.421250][ T6950] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  108.435931][ T6950] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  108.452744][  T111] blkno = 8ed80, nblocks = 63
[  108.467325][ T6950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.468007][  T111] ERROR: (device loop2): dbFree: block to be freed is outside the map
[  108.468007][  T111] 
[  108.535366][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.553655][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.563444][    T9] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  108.573165][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.585979][    T9] usb 4-1: config 0 descriptor??
[  108.628677][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.941989][ T6966] loop0: detected capacity change from 0 to 1024
[  108.962384][ T6966] EXT4-fs: Ignoring removed nobh option
[  108.968540][ T6966] EXT4-fs: Ignoring removed bh option
[  108.984729][ T6966] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  109.049452][ T6966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.219900][    T9] razer 0003:1532:010E.0008: failed to enable macro keys: -71
[  109.245648][    T9] razer 0003:1532:010E.0008: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0
[  109.303996][    T9] usb 4-1: USB disconnect, device number 5
[  109.334863][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.419349][ T6975] fido_id[6975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  109.947556][ T6970] loop1: detected capacity change from 0 to 32768
[  109.960602][ T6996] loop2: detected capacity change from 0 to 512
[  110.082120][ T5774] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  110.297351][ T7007] loop3: detected capacity change from 0 to 512
[  110.394970][ T7007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.425407][ T7007] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  110.651650][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.703805][  T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  110.843960][   T28] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  110.896789][  T787] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  110.911703][  T787] usb 3-1: config 0 interface 0 has no altsetting 0
[  110.922111][  T787] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  110.932224][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.954694][  T787] usb 3-1: config 0 descriptor??
[  111.003092][ T7025] loop3: detected capacity change from 0 to 32768
[  111.023993][   T28] usb 1-1: Using ep0 maxpacket: 16
[  111.041237][   T28] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  111.042649][ T7025] XFS (loop3): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[  111.055377][   T28] usb 1-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00
[  111.073197][   T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.087921][   T28] usb 1-1: config 0 descriptor??
[  111.160847][ T7025] XFS (loop3): Ending clean mount
[  111.223390][ T5781] XFS (loop3): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[  111.385725][  T787] nintendo 0003:057E:2009.0009: unbalanced delimiter at end of report description
[  111.396364][  T787] nintendo 0003:057E:2009.0009: HID parse failed
[  111.404964][  T787] nintendo 0003:057E:2009.0009: probe - fail = -22
[  111.411886][  T787] nintendo: probe of 0003:057E:2009.0009 failed with error -22
[  111.522616][   T28] apple 0003:05AC:029F.000A: unknown main item tag 0x0
[  111.529771][   T28] apple 0003:05AC:029F.000A: unknown main item tag 0x0
[  111.538459][   T28] apple 0003:05AC:029F.000A: unknown main item tag 0x0
[  111.545447][   T28] apple 0003:05AC:029F.000A: unknown main item tag 0x0
[  111.552336][   T28] apple 0003:05AC:029F.000A: unknown main item tag 0x0
[  111.562769][   T28] apple 0003:05AC:029F.000A: hidraw0: USB HID v0.fe Device [HID 05ac:029f] on usb-dummy_hcd.0-1/input0
[  111.633978][   T28] usb 3-1: USB disconnect, device number 4
[  111.733490][    T9] usb 1-1: USB disconnect, device number 6
[  111.740156][ T5847] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  111.933680][ T5847] usb 4-1: Using ep0 maxpacket: 16
[  111.941324][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.959107][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.970146][ T5847] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  111.971332][ T7042] loop1: detected capacity change from 0 to 32768
[  111.979545][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.007957][ T7042] JBD2: Ignoring recovery information on journal
[  112.033831][ T5847] usb 4-1: config 0 descriptor??
[  112.061313][ T7042] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  112.159192][ T5789] ocfs2: Unmounting device (7,1) on (node local)
[  112.407303][ T7048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.467'.
[  112.434006][ T7048] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  112.462432][ T5847] hid-multitouch 0003:1FD2:6007.000B: unknown main item tag 0x0
[  112.480708][ T5847] hid-multitouch 0003:1FD2:6007.000B: unknown main item tag 0x0
[  112.504268][ T5847] hid-multitouch 0003:1FD2:6007.000B: item fetching failed at offset 3/5
[  112.524424][ T5847] hid-multitouch: probe of 0003:1FD2:6007.000B failed with error -22
[  112.676793][ T5847] usb 4-1: USB disconnect, device number 6
[  112.753063][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'.
[  112.882940][ T7066] loop2: detected capacity change from 0 to 512
[  112.921991][ T7066] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  112.985232][ T7066] EXT4-fs (loop2): 1 orphan inode deleted
[  112.991005][ T7066] EXT4-fs (loop2): 1 truncate cleaned up
[  113.025162][ T7066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.106277][ T7069] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  113.168093][ T7066] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.475: iget: bad extra_isize 46 (inode size 256)
[  113.215889][ T7069] EXT4-fs (loop2): Remounting filesystem read-only
[  113.225880][ T7066] EXT4-fs (loop2): Remounting filesystem read-only
[  113.291430][ T7077] loop3: detected capacity change from 0 to 512
[  113.324551][ T7077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.334170][ T7075] loop1: detected capacity change from 0 to 512
[  113.349479][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.379762][ T7070] loop0: detected capacity change from 0 to 32768
[  113.399990][ T7075] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  113.458673][ T7075] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  113.466382][ T7070] JBD2: Ignoring recovery information on journal
[  113.469682][ T7075] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  113.508163][ T7075] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  113.536009][ T7075] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0080]
[  113.546676][ T7075] EXT4-fs error (device loop1): ext4_init_orphan_info:586: comm syz.1.478: inode #0: comm syz.1.478: iget: illegal inode #
[  113.546910][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.605193][ T7070] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  113.623989][ T7075] EXT4-fs (loop1): get orphan inode failed
[  113.630178][ T7075] EXT4-fs (loop1): mount failed
[  113.987827][ T5788] ocfs2: Unmounting device (7,0) on (node local)
[  114.022478][ T7091] loop2: detected capacity change from 0 to 2048
[  114.042009][ T7091] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  114.108119][ T7093] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.324247][ T7097] loop1: detected capacity change from 0 to 4096
[  114.402373][ T7097] NILFS (loop1): invalid segment: Checksum error in segment payload
[  114.436876][ T7097] NILFS (loop1): trying rollback from an earlier position
[  114.496558][ T7097] NILFS (loop1): recovery complete
[  114.520487][ T7106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.619198][ T7111] loop3: detected capacity change from 0 to 16
[  114.673277][ T7111] erofs: (device loop3): mounted with root inode @ nid 36.
[  115.216428][ T5864] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  115.274929][ T7134] loop2: detected capacity change from 0 to 512
[  115.320064][ T7134] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  115.326347][ T7136] loop0: detected capacity change from 0 to 2048
[  115.342425][ T7134] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  115.387859][ T7134] EXT4-fs (loop2): orphan cleanup on readonly fs
[  115.407293][ T7136] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.420519][ T5864] usb 2-1: Using ep0 maxpacket: 32
[  115.433859][ T7134] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.501: bad orphan inode 267
[  115.443088][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.470297][ T5864] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.474213][ T7134] EXT4-fs (loop2): Remounting filesystem read-only
[  115.504875][ T7134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  115.506607][ T5864] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.558366][ T5864] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  115.587569][ T5864] usb 2-1: config 0 interface 0 has no altsetting 0
[  115.621621][ T5864] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  115.638633][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.675048][ T5864] usb 2-1: config 0 descriptor??
[  115.697950][ T7134] System zones: 1-12
[  115.701917][ T7134] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000007.
[  115.799237][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  115.818500][ T7132] loop3: detected capacity change from 0 to 32768
[  115.903142][ T7132] JBD2: Ignoring recovery information on journal
[  115.932869][ T7143] loop2: detected capacity change from 0 to 512
[  116.072640][ T7132] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  116.095603][ T7143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.107839][ T5864] hid-thrustmaster 0003:044F:B65D.000C: item fetching failed at offset 3/5
[  116.108496][ T5864] hid-thrustmaster 0003:044F:B65D.000C: parse failed with error -22
[  116.125214][ T5864] hid-thrustmaster: probe of 0003:044F:B65D.000C failed with error -22
[  116.310220][ T5781] ocfs2: Unmounting device (7,3) on (node local)
[  116.366768][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.464240][ T5827] usb 2-1: USB disconnect, device number 6
[  116.876241][ T7168] loop0: detected capacity change from 0 to 64
[  116.892759][ T7166] loop2: detected capacity change from 0 to 2048
[  116.910179][ T7168] hfs: unable to locate alternate MDB
[  116.922131][ T7168] hfs: continuing without an alternate MDB
[  116.957824][ T7166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.200051][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'.
[  117.224115][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'.
[  117.252562][ T7176] netlink: 'syz.0.529': attribute type 14 has an invalid length.
[  117.279518][ T7176] netlink: 'syz.0.529': attribute type 12 has an invalid length.
[  117.328332][ T7180] loop2: detected capacity change from 0 to 736
[  117.454942][ T7182] loop1: detected capacity change from 0 to 1024
[  117.510149][ T7182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.660560][   T27] audit: type=1800 audit(1758692384.741:32): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.525" name="file1" dev="loop1" ino=15 res=0 errno=0
[  117.764342][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.930979][ T7201] loop1: detected capacity change from 0 to 1764
[  117.972708][ T7201] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  118.013729][ T5827] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  118.108033][ T7204] loop2: detected capacity change from 0 to 1024
[  118.136397][ T7204] EXT4-fs: Ignoring removed nobh option
[  118.143347][ T7207] loop1: detected capacity change from 0 to 64
[  118.150551][ T7204] EXT4-fs: Ignoring removed bh option
[  118.163518][ T7207] hfs: unable to locate alternate MDB
[  118.179655][ T7204] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  118.190046][ T7207] hfs: continuing without an alternate MDB
[  118.197961][ T5827] usb 4-1: Using ep0 maxpacket: 32
[  118.223125][ T5827] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  118.240569][ T7204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.277148][ T5827] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  118.323487][ T5827] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  118.356451][ T5827] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  118.389854][ T5827] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.412801][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.439491][ T5827] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  118.450596][ T5827] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  118.476911][ T5827] usb 4-1: Product: syz
[  118.481112][ T5827] usb 4-1: Manufacturer: syz
[  118.481999][ T7215] netlink: 36 bytes leftover after parsing attributes in process `syz.1.536'.
[  118.490426][ T5827] usb 4-1: SerialNumber: syz
[  118.524211][ T5827] usb 4-1: config 0 descriptor??
[  118.545445][ T5827] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  118.567851][ T5827] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  118.675726][ T7219] loop1: detected capacity change from 0 to 4096
[  118.824062][ T5827] usb 4-1: USB disconnect, device number 7
[  118.836900][ T5827] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  118.857641][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'.
[  118.873537][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.549'.
[  118.888112][ T5864] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  118.912422][ T7223] loop1: detected capacity change from 0 to 2048
[  118.939883][ T7223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.058907][ T7225] loop1: detected capacity change from 0 to 512
[  119.083661][ T7225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.093902][ T5864] usb 3-1: Using ep0 maxpacket: 32
[  119.103980][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.125689][ T5864] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.138414][ T5864] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.148580][ T5864] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  119.161566][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0
[  119.168318][ T5864] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  119.178435][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.210366][ T5864] usb 3-1: config 0 descriptor??
[  119.261234][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.635973][   T27] audit: type=1326 audit(1758692386.721:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1134f8eec9 code=0x7ffc0000
[  119.646393][ T5864] hid-thrustmaster 0003:044F:B65D.000D: item fetching failed at offset 3/5
[  119.701686][   T27] audit: type=1326 audit(1758692386.741:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f1134f8eec9 code=0x7ffc0000
[  119.722295][ T5864] hid-thrustmaster 0003:044F:B65D.000D: parse failed with error -22
[  119.765585][ T5864] hid-thrustmaster: probe of 0003:044F:B65D.000D failed with error -22
[  119.768636][   T27] audit: type=1326 audit(1758692386.741:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1134f8eec9 code=0x7ffc0000
[  119.855424][ T7246] loop0: detected capacity change from 0 to 8
[  119.874724][   T27] audit: type=1326 audit(1758692386.741:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1134f8eec9 code=0x7ffc0000
[  120.000446][ T5827] usb 3-1: USB disconnect, device number 5
[  120.038196][ T7246] SQUASHFS error: Unable to read inode 0x87
[  120.393069][ T7256] netlink: 84 bytes leftover after parsing attributes in process `syz.3.557'.
[  120.402189][ T7256] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  120.489939][ T7244] loop1: detected capacity change from 0 to 32768
[  120.498001][ T7244] XFS: ikeep mount option is deprecated.
[  120.574733][ T7244] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  120.664681][ T7244] XFS (loop1): Ending clean mount
[  120.666658][ T7272] loop2: detected capacity change from 0 to 512
[  120.680228][ T7272] EXT4-fs: Ignoring removed mblk_io_submit option
[  120.689227][ T7272] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  120.701243][ T7244] XFS (loop1): Quotacheck needed: Please wait.
[  120.704899][ T7272] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002]
[  120.727581][ T7272] EXT4-fs (loop2): orphan cleanup on readonly fs
[  120.730941][ T7276] loop3: detected capacity change from 0 to 64
[  120.749048][ T7272] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.560: bg 0: block 361: padding at end of block bitmap is not set
[  120.766584][ T7272] EXT4-fs (loop2): Remounting filesystem read-only
[  120.810434][ T7276] hfs: unable to locate alternate MDB
[  120.819967][ T7272] EXT4-fs (loop2): 1 truncate cleaned up
[  120.827126][ T7272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  120.849866][ T7244] XFS (loop1): Quotacheck: Done.
[  120.864591][ T7276] hfs: continuing without an alternate MDB
[  120.919451][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  121.073841][ T5789] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  121.137322][ T7280] loop2: detected capacity change from 0 to 256
[  121.175112][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'.
[  121.187732][ T7280] FAT-fs (loop2): Directory bread(block 64) failed
[  121.204415][ T7280] FAT-fs (loop2): Directory bread(block 65) failed
[  121.234460][ T7280] FAT-fs (loop2): Directory bread(block 66) failed
[  121.241027][ T7280] FAT-fs (loop2): Directory bread(block 67) failed
[  121.284012][ T7280] FAT-fs (loop2): Directory bread(block 68) failed
[  121.290671][ T7280] FAT-fs (loop2): Directory bread(block 69) failed
[  121.324071][ T7280] FAT-fs (loop2): Directory bread(block 70) failed
[  121.330635][ T7280] FAT-fs (loop2): Directory bread(block 71) failed
[  121.354104][ T7280] FAT-fs (loop2): Directory bread(block 72) failed
[  121.360662][ T7280] FAT-fs (loop2): Directory bread(block 73) failed
[  121.614448][ T7280] openvswitch: netlink: Key type 12917 is out of range max 32
[  121.757526][ T7291] loop3: detected capacity change from 0 to 4096
[  121.914025][ T5827] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  121.930638][ T7296] loop2: detected capacity change from 0 to 4096
[  121.967512][ T7296] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  122.138197][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  122.184348][ T5827] usb 2-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00
[  122.193422][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.245785][ T5827] usb 2-1: config 0 descriptor??
[  122.417637][ T7310] netlink: 'syz.2.577': attribute type 1 has an invalid length.
[  122.447600][ T7310] netlink: 244 bytes leftover after parsing attributes in process `syz.2.577'.
[  122.685811][ T7314] dvmrp1: entered allmulticast mode
[  122.720131][ T5827] wacom 0003:056A:0017.000E: unknown main item tag 0x0
[  122.721014][ T7301] loop3: detected capacity change from 0 to 32768
[  122.732677][ T7314] dvmrp1: left allmulticast mode
[  122.738953][ T5827] wacom 0003:056A:0017.000E: unknown main item tag 0x0
[  122.747783][ T5827] wacom 0003:056A:0017.000E: unknown main item tag 0x0
[  122.755010][ T5827] wacom 0003:056A:0017.000E: unknown main item tag 0x0
[  122.761930][ T5827] wacom 0003:056A:0017.000E: unknown main item tag 0x0
[  122.770148][ T5827] wacom 0003:056A:0017.000E: Unknown device_type for 'HID 056a:0017'. Assuming pen.
[  122.785119][ T5827] wacom 0003:056A:0017.000E: hidraw0: USB HID v0.03 Device [HID 056a:0017] on usb-dummy_hcd.1-1/input0
[  122.798371][ T7301] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  122.814538][ T5827] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0017.000E/input/input12
[  122.963067][ T7301] XFS (loop3): Ending clean mount
[  122.979694][ T5827] usb 2-1: USB disconnect, device number 7
[  123.126982][ T5781] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  123.466229][ T7333] loop3: detected capacity change from 0 to 1024
[  123.492520][ T7333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  123.520264][ T7333] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.609220][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  123.661736][ T7340] loop2: detected capacity change from 0 to 512
[  123.756668][ T7340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.793935][ T7340] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.796203][ T7346] loop0: detected capacity change from 0 to 256
[  123.835159][ T7346] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  123.836316][ T7348] loop3: detected capacity change from 0 to 1024
[  123.854758][ T7348] EXT4-fs: Ignoring removed nobh option
[  123.860342][ T7348] EXT4-fs: Ignoring removed bh option
[  123.872729][ T7348] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  123.954120][ T7348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.075130][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.230332][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.587710][ T7342] loop1: detected capacity change from 0 to 32768
[  124.603978][ T7365] loop2: detected capacity change from 0 to 1024
[  124.609874][ T7342] XFS (loop1): Cannot mount filesystem with identical rtdev and ddev/logdev.
[  124.700310][ T7365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.763806][ T7371] loop0: detected capacity change from 0 to 512
[  124.788164][   T27] audit: type=1800 audit(1758692391.871:37): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.595" name="file1" dev="loop2" ino=15 res=0 errno=0
[  124.866940][ T7371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.891945][ T7371] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.902083][ T6931] udevd[6931]: incorrect xfs checksum on /dev/loop1
[  124.931822][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.962530][ T7371] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  125.097435][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.134729][ T5864] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  125.337331][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.348388][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.359121][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  125.372229][ T5864] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00
[  125.381364][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.392043][ T5864] usb 2-1: config 0 descriptor??
[  125.810331][ T5864] wacom 0003:056A:0027.000F: ignoring exceeding usage max
[  125.819206][ T5864] wacom 0003:056A:0027.000F: Unknown device_type for 'HID 056a:0027'. Assuming pen.
[  125.831132][ T5864] wacom 0003:056A:0027.000F: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.1-1/input0
[  125.851817][ T5864] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0027.000F/input/input15
[  126.013347][ T5847] usb 2-1: USB disconnect, device number 8
[  126.631975][ T7382] loop1: detected capacity change from 0 to 1024
[  126.653457][ T7382] EXT4-fs: Ignoring removed nobh option
[  126.667198][ T7386] loop0: detected capacity change from 0 to 128
[  126.674296][ T7382] EXT4-fs: Ignoring removed bh option
[  126.696963][ T7382] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  126.720933][ T7388] loop2: detected capacity change from 0 to 512
[  126.797674][ T7382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.823189][ T7388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.900778][ T7388] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.947341][ T7396] loop3: detected capacity change from 0 to 512
[  126.989477][ T7396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.052156][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.086714][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.281060][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'.
[  127.302678][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.939857][ T7423] loop0: detected capacity change from 0 to 512
[  127.948220][ T7405] loop1: detected capacity change from 0 to 32768
[  127.960281][ T7426] tipc: Started in network mode
[  127.982083][ T7426] tipc: Node identity , cluster identity 4711
[  127.986087][ T7423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.009042][ T7426] tipc: Failed to set node id, please configure manually
[  128.045382][ T7431] syz.2.620 uses obsolete (PF_INET,SOCK_PACKET)
[  128.054320][ T7426] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  128.078851][   T27] audit: type=1800 audit(1758692395.161:38): pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.607" name="file1" dev="loop1" ino=4 res=0 errno=0
[  128.094932][ T7405] ERROR: (device loop1): dbAllocBits: leaf page corrupt
[  128.094932][ T7405] 
[  128.111438][ T7423] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  128.137362][ T7405] ERROR: (device loop1): remounting filesystem as read-only
[  128.154989][ T7405] syz.1.607: attempt to access beyond end of device
[  128.154989][ T7405] loop1: rw=34817, sector=4680704, nr_sectors = 792 limit=32768
[  128.229819][  T111] blkno = 8ed80, nblocks = 63
[  128.244863][  T111] ERROR: (device loop1): dbFree: block to be freed is outside the map
[  128.244863][  T111] 
[  128.397365][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.561212][ T7441] loop0: detected capacity change from 0 to 2048
[  128.586449][ T7441] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  128.599053][ T7441] NILFS (loop0): mounting unchecked fs
[  128.617053][ T7441] NILFS (loop0): recovery complete
[  128.617238][ T6342] udevd[6342]: incorrect nilfs2 checksum on /dev/loop0
[  128.640538][ T7442] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.714570][ T5864] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  128.893717][ T5864] usb 4-1: Using ep0 maxpacket: 16
[  128.902784][ T5864] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  128.909967][ T7446] loop1: detected capacity change from 0 to 1024
[  128.913712][ T5864] usb 4-1: config 0 has no interface number 0
[  128.936489][ T5864] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  128.947777][ T7446] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  128.964083][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.967272][ T7446] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  128.986419][ T7446] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  128.991056][ T5864] usb 4-1: Product: syz
[  129.006204][ T5864] usb 4-1: Manufacturer: syz
[  129.010835][ T5864] usb 4-1: SerialNumber: syz
[  129.021540][ T7446] EXT4-fs error (device loop1): ext4_get_journal_inode:5807: inode #32: comm syz.1.625: iget: special inode unallocated
[  129.025788][ T5864] usb 4-1: config 0 descriptor??
[  129.062559][ T5864] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  129.064072][ T7446] EXT4-fs (loop1): no journal found
[  129.089572][ T7446] EXT4-fs (loop1): can't get journal size
[  129.107222][ T7446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  129.250957][ T7446] EXT4-fs: Ignoring removed orlov option
[  129.270874][ T5864] gspca_spca1528: reg_w err -71
[  129.277442][ T7446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  129.297503][ T7446] EXT4-fs (loop1): can't enable nombcache during remount
[  129.324227][ T5864] spca1528: probe of 4-1:0.1 failed with error -71
[  129.363251][ T5864] usb 4-1: USB disconnect, device number 8
[  129.402688][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.570281][    T9] IPVS: starting estimator thread 0...
[  129.673903][ T7464] IPVS: using max 21 ests per chain, 50400 per kthread
[  129.920218][ T7474] loop3: detected capacity change from 0 to 512
[  129.946873][ T7474] EXT4-fs: Ignoring removed oldalloc option
[  129.984008][ T5864] IPVS: starting estimator thread 0...
[  130.018807][ T7474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  130.047474][ T7474] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  130.091343][ T7474] EXT4-fs (loop3): 1 truncate cleaned up
[  130.093777][ T7477] IPVS: using max 20 ests per chain, 48000 per kthread
[  130.112743][ T7474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.130626][ T7461] loop0: detected capacity change from 0 to 32768
[  130.175344][   T27] audit: type=1800 audit(1758692397.261:39): pid=7461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.636" name="file1" dev="loop0" ino=4 res=0 errno=0
[  130.221050][ T7461] ERROR: (device loop0): dbAllocBits: leaf page corrupt
[  130.221050][ T7461] 
[  130.249649][ T7461] ERROR: (device loop0): remounting filesystem as read-only
[  130.274518][ T7461] syz.0.636: attempt to access beyond end of device
[  130.274518][ T7461] loop0: rw=34817, sector=4680704, nr_sectors = 792 limit=32768
[  130.296484][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.300023][ T7484] loop1: detected capacity change from 0 to 2048
[  130.347460][ T7484] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  130.363053][  T112] blkno = 8ed80, nblocks = 63
[  130.383101][  T112] ERROR: (device loop0): dbFree: block to be freed is outside the map
[  130.383101][  T112] 
[  130.413786][ T7485] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.707670][ T7491] vcan0: MTU too low for tipc bearer
[  130.713161][ T7491] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  130.783949][ T5864] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  130.808172][ T7493] loop1: detected capacity change from 0 to 8
[  130.900169][ T7493] SQUASHFS error: Unable to read directory block [249:c]
[  130.981470][ T5864] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  131.012154][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.021578][ T7489] loop3: detected capacity change from 0 to 32768
[  131.032104][ T5864] usb 3-1: Product: syz
[  131.043517][ T5864] usb 3-1: Manufacturer: syz
[  131.065101][ T5864] usb 3-1: SerialNumber: syz
[  131.088410][ T5864] usb 3-1: config 0 descriptor??
[  131.091003][ T7495] loop0: detected capacity change from 0 to 128
[  131.176267][ T7495] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  131.225608][ T7495] hpfs: filesystem error: improperly stopped
[  131.231738][ T7495] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  131.273741][ T7495] hpfs: You really don't want any checks? You are crazy...
[  131.284708][ T7495] hpfs: hpfs_map_sector(): read error
[  131.294910][ T7495] hpfs: code page support is disabled
[  131.314700][ T7495] hpfs: hpfs_map_4sectors(): unaligned read
[  131.320744][ T7495] hpfs: hpfs_map_4sectors(): unaligned read
[  131.329894][ T5864] usb 3-1: Firmware version (0.0) predates our first public release.
[  131.331402][ T7495] hpfs: filesystem error: unable to find root dir
[  131.358752][ T5864] usb 3-1: Please update to version 0.2 or newer
[  131.471755][ T5864] usb 3-1: USB disconnect, device number 6
[  131.895574][ T7515] loop1: detected capacity change from 0 to 1024
[  132.133275][ T7522] netlink: 'syz.2.662': attribute type 2 has an invalid length.
[  132.146611][ T1104] hfsplus: b-tree write err: -5, ino 4
[  132.163070][ T7522] netlink: 'syz.2.662': attribute type 2 has an invalid length.
[  132.181461][ T7522] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.662'.
[  132.657496][ T7543] loop3: detected capacity change from 0 to 1024
[  132.770739][   T58] hfsplus: b-tree write err: -5, ino 4
[  132.893767][ T5864] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  132.903939][ T5847] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  132.951253][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.957883][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.047231][ T7557] loop1: detected capacity change from 0 to 256
[  133.073990][ T5864] usb 3-1: Using ep0 maxpacket: 16
[  133.091697][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.103307][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.126581][ T7557] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  133.134123][ T5847] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  133.152069][ T5864] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  133.176734][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.180317][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.193377][ T5847] usb 1-1: Product: syz
[  133.207853][ T5847] usb 1-1: Manufacturer: syz
[  133.210682][ T5864] usb 3-1: config 0 descriptor??
[  133.218198][ T5847] usb 1-1: SerialNumber: syz
[  133.250727][ T5847] usb 1-1: config 0 descriptor??
[  133.268775][ T7561] loop3: detected capacity change from 0 to 1024
[  133.330843][ T7561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.481706][ T5847] usb 1-1: Firmware version (0.0) predates our first public release.
[  133.493819][ T5847] usb 1-1: Please update to version 0.2 or newer
[  133.577910][ T5847] usb 1-1: USB disconnect, device number 7
[  133.680286][ T6342] udevd[6342]: setting owner of /dev/bus/usb/001/007 to uid=0, gid=0 failed: No such file or directory
[  133.721938][ T5864] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  133.757717][ T5864] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0
[  133.790809][ T5864] hid-multitouch 0003:1FD2:6007.0010: item fetching failed at offset 3/5
[  133.815023][ T5864] hid-multitouch: probe of 0003:1FD2:6007.0010 failed with error -22
[  133.974156][ T5864] usb 3-1: USB disconnect, device number 7
[  134.081322][   T27] audit: type=1800 audit(1758692401.161:40): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.682" name="file1" dev="loop3" ino=15 res=0 errno=0
[  134.161009][ T7572] loop1: detected capacity change from 0 to 32768
[  134.191431][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.195198][ T7572] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.685 (7572)
[  134.237423][ T7572] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  134.265336][ T7572] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  134.307357][ T7572] BTRFS info (device loop1): setting nodatacow, compression disabled
[  134.340432][ T7572] BTRFS info (device loop1): turning off barriers
[  134.383724][ T7572] BTRFS info (device loop1): enabling all of the rescue options
[  134.391435][ T7572] BTRFS info (device loop1): ignoring data csums
[  134.425389][ T7578] loop3: detected capacity change from 0 to 8
[  134.453696][ T7572] BTRFS info (device loop1): ignoring bad roots
[  134.459977][ T7572] BTRFS info (device loop1): disabling log replay at mount time
[  134.463764][ T7578] SQUASHFS error: Unable to read directory block [249:c]
[  134.482538][ T7572] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  134.538829][ T7572] BTRFS info (device loop1): trying to use backup root at mount time
[  134.571760][ T7572] BTRFS info (device loop1): setting datacow
[  134.603464][ T7572] BTRFS info (device loop1): turning on async discard
[  134.634312][ T7572] BTRFS info (device loop1): setting nodatacow, compression disabled
[  134.642859][ T7572] BTRFS info (device loop1): enabling auto defrag
[  134.665522][ T7572] BTRFS info (device loop1): using free space tree
[  134.871332][ T7572] BTRFS info (device loop1: state C): enabling ssd optimizations
[  135.132481][ T5789] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  136.174191][ T7650] loop0: detected capacity change from 0 to 4096
[  136.182295][ T7650] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  136.235203][ T7650] ntfs: volume version 3.1.
[  136.273746][ T5847] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  136.278094][ T7650] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9.  You might want to try to use the mount option nls=utf8.
[  136.302459][ T7650] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  136.501305][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.507307][ T7654] loop0: detected capacity change from 0 to 2048
[  136.522699][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.538428][ T7654] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  136.553723][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  136.582246][ T7655] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.597213][ T5847] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00
[  136.613865][ T6931] udevd[6931]: incorrect nilfs2 checksum on /dev/loop0
[  136.617389][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.674636][ T5847] usb 4-1: config 0 descriptor??
[  136.808842][ T7649] loop2: detected capacity change from 0 to 32768
[  136.896154][ T7649] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.014837][ T7649] XFS (loop2): Ending clean mount
[  137.112455][ T5847] wacom 0003:056A:0027.0011: ignoring exceeding usage max
[  137.151512][ T5847] wacom 0003:056A:0027.0011: Unknown device_type for 'HID 056a:0027'. Assuming pen.
[  137.173342][ T7652] loop1: detected capacity change from 0 to 32768
[  137.196372][ T7652] XFS: noikeep mount option is deprecated.
[  137.203031][ T5847] wacom 0003:056A:0027.0011: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.3-1/input0
[  137.248470][ T5847] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0027.0011/input/input20
[  137.253151][ T7652] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  137.283051][ T5784] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.455277][ T5847] usb 4-1: USB disconnect, device number 9
[  137.580354][ T7652] XFS (loop1): Ending clean mount
[  137.619050][ T7652] XFS (loop1): Quotacheck needed: Please wait.
[  137.747022][ T7652] XFS (loop1): Quotacheck: Done.
[  137.963373][ T5789] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  137.967910][ T7688] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  137.985330][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'.
[  137.989725][ T7685] IPVS: stopping backup sync thread 7688 ...
[  138.637561][ T7706] netlink: 188 bytes leftover after parsing attributes in process `syz.1.733'.
[  138.873691][ T7715] loop1: detected capacity change from 0 to 1024
[  139.134085][   T11] hfsplus: b-tree write err: -5, ino 4
[  139.331677][ T7727] loop1: detected capacity change from 0 to 64
[  139.427062][ T7727] hfs: request for non-existent node 56 in B*Tree
[  139.454110][ T7727] hfs: request for non-existent node 56 in B*Tree
[  139.485259][ T7727] hfs: request for non-existent node 57 in B*Tree
[  139.514078][ T7727] hfs: request for non-existent node 57 in B*Tree
[  139.786684][ T7743] loop3: detected capacity change from 0 to 16
[  139.844684][ T7743] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  139.863949][ T5847] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  140.009944][ T7748] loop3: detected capacity change from 0 to 256
[  140.054648][ T7748] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  140.073876][ T5847] usb 3-1: Using ep0 maxpacket: 32
[  140.090557][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.120581][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.122527][ T7750] netlink: 'syz.0.754': attribute type 2 has an invalid length.
[  140.161357][ T5847] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  140.185962][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.223985][ T5847] usb 3-1: config 0 descriptor??
[  140.239839][ T5847] hub 3-1:0.0: USB hub found
[  140.358698][ T7740] loop1: detected capacity change from 0 to 32768
[  140.444127][ T5847] hub 3-1:0.0: 29 ports detected
[  140.461969][ T5847] hub 3-1:0.0: insufficient power available to use all downstream ports
[  140.891482][ T5847] usb 3-1: USB disconnect, device number 8
[  141.148066][ T7753] loop0: detected capacity change from 0 to 32768
[  141.163369][ T7753] XFS: ikeep mount option is deprecated.
[  141.212540][ T7753] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.246268][ T7780] loop1: detected capacity change from 0 to 16
[  141.286981][ T7780] erofs: (device loop1): mounted with root inode @ nid 36.
[  141.329124][ T7753] XFS (loop0): Ending clean mount
[  141.347446][ T7753] XFS (loop0): Quotacheck needed: Please wait.
[  141.414654][ T7753] XFS (loop0): Quotacheck: Done.
[  141.601008][ T5788] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.853864][  T787] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  142.053813][  T787] usb 2-1: Using ep0 maxpacket: 8
[  142.071148][  T787] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  142.080051][  T787] usb 2-1: config 179 has no interface number 0
[  142.093715][  T787] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  142.118403][  T787] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  142.150133][  T787] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  142.172588][  T787] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  142.213644][  T787] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  142.254074][  T787] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  142.283694][  T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.315558][ T7787] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  142.334596][ T7785] loop3: detected capacity change from 0 to 40427
[  142.372445][ T7785] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff
[  142.416434][ T7785] F2FS-fs (loop3): invalid crc value
[  142.453676][ T7785] F2FS-fs (loop3): Found nat_bits in checkpoint
[  142.639693][ T7785] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  142.741019][ T5781] syz-executor: attempt to access beyond end of device
[  142.741019][ T5781] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  142.757211][ T5781] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  142.843815][  T787] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  142.961284][ T5827] usb 2-1: USB disconnect, device number 9
[  142.961352][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  142.977360][    C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending?
[  143.023997][  T787] usb 1-1: Using ep0 maxpacket: 16
[  143.031573][  T787] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  143.045265][  T787] usb 1-1: config 0 interface 0 has no altsetting 0
[  143.051904][  T787] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  143.061577][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.074386][  T787] usb 1-1: config 0 descriptor??
[  143.163950][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  143.245863][ T7817] loop3: detected capacity change from 0 to 512
[  143.260525][ T7817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  143.289617][ T7817] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.779: invalid indirect mapped block 4294967295 (level 1)
[  143.307992][ T7817] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.779: invalid indirect mapped block 4294967295 (level 1)
[  143.322757][ T7817] EXT4-fs (loop3): 2 truncates cleaned up
[  143.329961][ T7817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.360584][ T7817] EXT4-fs error (device loop3): ext4_get_parent:1906: inode #11: comm syz.3.779: bad parent inode number: 3
[  143.380566][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.394306][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.406196][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  143.419166][    T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00
[  143.422167][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.428319][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.460334][    T9] usb 3-1: config 0 descriptor??
[  143.509877][  T787] zydacron 0003:13EC:0006.0012: item fetching failed at offset 2/3
[  143.528889][  T787] zydacron 0003:13EC:0006.0012: parse failed
[  143.544011][  T787] zydacron: probe of 0003:13EC:0006.0012 failed with error -22
[  143.659173][   T27] audit: type=1326 audit(1758692410.741:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7822 comm="syz.1.781" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc0278eec9 code=0x0
[  143.713048][  T787] usb 1-1: USB disconnect, device number 8
[  143.908476][    T9] wacom 0003:056A:0027.0013: ignoring exceeding usage max
[  143.923368][    T9] wacom 0003:056A:0027.0013: Unknown device_type for 'HID 056a:0027'. Assuming pen.
[  143.939628][    T9] wacom 0003:056A:0027.0013: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.2-1/input0
[  143.959339][    T9] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0027.0013/input/input23
[  144.012197][ T7825] loop3: detected capacity change from 0 to 32768
[  144.156221][ T5864] usb 3-1: USB disconnect, device number 9
[  144.334233][ T7829] loop3: detected capacity change from 0 to 4096
[  144.354877][ T7829] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  144.427067][ T7829] ntfs: volume version 3.1.
[  144.526484][ T7829] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9.  You might want to try to use the mount option nls=utf8.
[  144.559898][ T7829] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  144.876168][ T7839] loop2: detected capacity change from 0 to 512
[  144.926307][ T7839] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  145.011304][ T7839] EXT4-fs (loop2): 1 truncate cleaned up
[  145.050834][ T7839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.165635][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.229302][ T7839] netlink: 36 bytes leftover after parsing attributes in process `syz.2.789'.
[  145.264041][ T7839] netlink: 40 bytes leftover after parsing attributes in process `syz.2.789'.
[  145.314680][ T7839] bridge1: entered promiscuous mode
[  145.335583][ T7839] bridge1: entered allmulticast mode
[  145.387027][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.476278][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.545671][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.686412][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.720738][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'.
[  145.805658][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  145.816030][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  145.824459][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  145.833307][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  145.842561][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  145.850385][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  146.091793][ T7849] loop1: detected capacity change from 0 to 40427
[  146.149669][ T7849] F2FS-fs (loop1): Found nat_bits in checkpoint
[  146.283791][ T7849] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  146.435797][ T5789] syz-executor: attempt to access beyond end of device
[  146.435797][ T5789] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  146.464868][ T5789] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  146.606082][ T7855] chnl_net:caif_netlink_parms(): no params data found
[  146.869875][ T7855] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.893833][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.901052][ T7855] bridge_slave_0: entered allmulticast mode
[  146.920535][ T7855] bridge_slave_0: entered promiscuous mode
[  146.992762][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.000194][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.008888][ T7855] bridge_slave_1: entered allmulticast mode
[  147.016320][ T7855] bridge_slave_1: entered promiscuous mode
[  147.065270][ T7855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.077687][ T7855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.127982][ T7855] team0: Port device team_slave_0 added
[  147.136588][ T7855] team0: Port device team_slave_1 added
[  147.187363][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.194749][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.222553][ T7855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.235698][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.242660][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.269737][ T7855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.340097][ T7855] hsr_slave_0: entered promiscuous mode
[  147.351317][ T7855] hsr_slave_1: entered promiscuous mode
[  147.369264][ T7855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  147.379030][ T7855] Cannot create hsr debugfs directory
[  147.746662][   T11] hsr_slave_0: left promiscuous mode
[  147.762448][   T11] hsr_slave_1: left promiscuous mode
[  147.769325][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.777589][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.787372][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.795139][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.803439][   T11] bridge_slave_1: left allmulticast mode
[  147.810646][   T11] bridge_slave_1: left promiscuous mode
[  147.823028][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.842567][   T11] bridge_slave_0: left allmulticast mode
[  147.848615][   T11] bridge_slave_0: left promiscuous mode
[  147.854646][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.882767][   T11] veth1_macvtap: left promiscuous mode
[  147.889496][   T11] veth0_macvtap: left promiscuous mode
[  147.897197][   T11] veth1_vlan: left promiscuous mode
[  147.902642][   T11] veth0_vlan: left promiscuous mode
[  147.984729][ T5792] Bluetooth: hci2: command tx timeout
[  148.401370][   T11] team0 (unregistering): Port device team_slave_1 removed
[  148.449330][   T11] team0 (unregistering): Port device team_slave_0 removed
[  148.490544][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.535129][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.988898][   T11] bond0 (unregistering): Released all slaves
[  149.121782][ T7855] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  149.135166][ T7855] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  149.147842][ T7855] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  149.157421][ T7855] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  149.350752][ T7855] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.378481][ T7855] 8021q: adding VLAN 0 to HW filter on device team0
[  149.390928][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.398116][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.421999][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.429204][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.732056][ T7855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.015924][ T7855] veth0_vlan: entered promiscuous mode
[  150.034424][ T7855] veth1_vlan: entered promiscuous mode
[  150.063823][ T5792] Bluetooth: hci2: command tx timeout
[  150.086008][ T7855] veth0_macvtap: entered promiscuous mode
[  150.098287][ T7855] veth1_macvtap: entered promiscuous mode
[  150.118937][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.129642][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.140357][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.158791][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.168983][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.179835][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.192300][ T7855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.212575][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.235860][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.251258][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.263000][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.277504][ T7855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.288492][ T7855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.307189][ T7855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.329249][ T7855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.344555][ T7855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.353285][ T7855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.369121][ T7855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.513989][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.521844][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.577126][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.586616][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.733148][ T7942] loop3: detected capacity change from 0 to 1024
[  150.772834][ T7947] loop1: detected capacity change from 0 to 512
[  150.847839][ T7947] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.805: iget: bad i_size value: 38620345925642
[  150.863555][ T7942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.877543][ T7942] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.912400][   T27] audit: type=1800 audit(1758692417.981:42): pid=7942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.807" name="file1" dev="loop3" ino=15 res=0 errno=0
[  150.928183][ T7947] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.805: couldn't read orphan inode 15 (err -117)
[  150.980864][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.995756][ T7947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.305514][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.315339][ T7967] gretap0: entered promiscuous mode
[  151.321487][ T7967] vlan2: entered promiscuous mode
[  151.354056][  T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  151.545788][  T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.564061][  T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.565127][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.804'.
[  151.583706][  T787] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  151.614270][  T787] usb 5-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00
[  151.625421][  T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.658094][  T787] usb 5-1: config 0 descriptor??
[  151.934565][ T7988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  152.107453][  T787] wacom 0003:056A:0027.0014: ignoring exceeding usage max
[  152.130130][  T787] wacom 0003:056A:0027.0014: Unknown device_type for 'HID 056a:0027'. Assuming pen.
[  152.144123][ T5792] Bluetooth: hci2: command tx timeout
[  152.164872][  T787] wacom 0003:056A:0027.0014: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.4-1/input0
[  152.196268][  T787] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0027.0014/input/input26
[  152.308171][  T787] usb 5-1: USB disconnect, device number 2
[  152.393142][ T8002] loop3: detected capacity change from 0 to 1024
[  152.410563][ T7996] fido_id[7996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  152.540813][ T8002] hfsplus: invalid catalog entry type in lookup
[  152.578510][ T8008] gretap0: entered promiscuous mode
[  152.612397][ T8008] vlan2: entered promiscuous mode
[  153.016272][ T8023] loop2: detected capacity change from 0 to 1024
[  153.122330][ T8023] hfsplus: bad catalog entry type
[  153.179138][ T8029] loop1: detected capacity change from 0 to 512
[  153.212717][ T8029] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  153.254870][   T11] hfsplus: b-tree write err: -5, ino 4
[  153.272860][ T8029] EXT4-fs (loop1): 1 truncate cleaned up
[  153.298032][ T8029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.317066][ T8034] loop4: detected capacity change from 0 to 256
[  153.454772][   T27] audit: type=1800 audit(1758692420.541:43): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.825" name="bus" dev="loop1" ino=18 res=0 errno=0
[  153.511177][ T8034] FAT-fs (loop4): Directory bread(block 64) failed
[  153.555816][ T8034] FAT-fs (loop4): Directory bread(block 65) failed
[  153.562523][ T8034] FAT-fs (loop4): Directory bread(block 66) failed
[  153.599194][ T8034] FAT-fs (loop4): Directory bread(block 67) failed
[  153.643766][ T8034] FAT-fs (loop4): Directory bread(block 68) failed
[  153.672906][ T8034] FAT-fs (loop4): Directory bread(block 69) failed
[  153.726648][ T8034] FAT-fs (loop4): Directory bread(block 70) failed
[  153.740614][ T8045] gretap0: entered promiscuous mode
[  153.749552][ T8034] FAT-fs (loop4): Directory bread(block 71) failed
[  153.756553][ T8045] vlan2: entered promiscuous mode
[  153.761802][ T8034] FAT-fs (loop4): Directory bread(block 72) failed
[  153.777803][ T8034] FAT-fs (loop4): Directory bread(block 73) failed
[  153.784273][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.223799][ T5792] Bluetooth: hci2: command tx timeout
[  154.458554][ T8062] [U] ¹
[  154.484690][  T787] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  154.613936][ T5827] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  154.693754][  T787] usb 2-1: Using ep0 maxpacket: 32
[  154.706751][  T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.732563][  T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.754856][  T787] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  154.768324][  T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.784674][  T787] usb 2-1: config 0 descriptor??
[  154.798004][  T787] hub 2-1:0.0: USB hub found
[  154.823784][ T5827] usb 4-1: Using ep0 maxpacket: 32
[  154.836471][ T5827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  154.874326][ T5827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  154.899951][ T5827] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.929516][ T5827] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  154.939409][ T8074] syz.4.840 (8074) used greatest stack depth: 17960 bytes left
[  154.961701][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  155.006175][ T5827] usb 4-1: Product: syz
[  155.010383][ T5827] usb 4-1: Manufacturer: syz
[  155.028969][  T787] hub 2-1:0.0: 29 ports detected
[  155.032747][ T5827] usb 4-1: SerialNumber: syz
[  155.063738][  T787] hub 2-1:0.0: insufficient power available to use all downstream ports
[  155.069909][ T5827] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input29
[  155.366172][ T5827] usb 4-1: USB disconnect, device number 10
[  155.462417][ T5827] appletouch 4-1:1.0: input: appletouch disconnected
[  155.487358][  T787] usb 2-1: USB disconnect, device number 10
[  155.593826][ T8090] gretap0: entered promiscuous mode
[  155.608831][ T8090] vlan2: entered promiscuous mode
[  156.162824][ T8104] loop2: detected capacity change from 0 to 4096
[  156.191475][ T8104] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  156.379401][ T8104] ntfs3: loop2: failed to convert "c46c" to macturkish
[  156.949030][ T8136] loop3: detected capacity change from 0 to 1024
[  156.975134][ T8136] EXT4-fs: Ignoring removed oldalloc option
[  157.006030][ T8136] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  157.043909][ T5864] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  157.090229][ T8136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.171338][ T8115] loop4: detected capacity change from 0 to 32768
[  157.179186][ T8115] XFS: ikeep mount option is deprecated.
[  157.241107][ T8115] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.242540][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.260433][ T5864] usb 2-1: Using ep0 maxpacket: 32
[  157.269213][ T8151] loop2: detected capacity change from 0 to 128
[  157.295021][ T5864] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  157.360082][ T5864] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  157.412841][ T5864] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.448649][ T5864] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  157.467286][ T8115] XFS (loop4): Ending clean mount
[  157.479200][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  157.507640][ T5864] usb 2-1: Product: syz
[  157.520137][ T8115] XFS (loop4): Quotacheck needed: Please wait.
[  157.531366][ T5864] usb 2-1: Manufacturer: syz
[  157.544567][ T5864] usb 2-1: SerialNumber: syz
[  157.566347][ T5864] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input30
[  157.622127][ T8115] XFS (loop4): Quotacheck: Done.
[  157.843430][ T7855] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.962760][ T5827] usb 2-1: USB disconnect, device number 11
[  158.055634][ T5827] appletouch 2-1:1.0: input: appletouch disconnected
[  158.388208][ T8176] sp0: Synchronizing with TNC
[  158.731524][ T8170] loop3: detected capacity change from 0 to 32768
[  158.757758][ T8170] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.867 (8170)
[  158.796336][ T8170] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  158.808931][ T8170] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  158.829241][ T8170] BTRFS info (device loop3): using free space tree
[  158.874600][ T5864] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  158.969884][ T8170] BTRFS info (device loop3): enabling ssd optimizations
[  158.993114][ T8170] BTRFS info (device loop3): auto enabling async discard
[  159.093880][ T5864] usb 3-1: Using ep0 maxpacket: 32
[  159.119795][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  159.134911][ T5781] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  159.163101][ T5864] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  159.184798][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.208685][ T5864] usb 3-1: Product: syz
[  159.235407][ T5864] usb 3-1: Manufacturer: syz
[  159.244673][ T5864] usb 3-1: SerialNumber: syz
[  159.307660][ T8184] loop4: detected capacity change from 0 to 40427
[  159.318626][ T5864] usb 3-1: config 0 descriptor??
[  159.332452][ T8184] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  159.340671][ T8184] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  159.400454][ T5864] usb 3-1: bad CDC descriptors
[  159.411960][ T8184] F2FS-fs (loop4): Found nat_bits in checkpoint
[  159.425380][ T5864] usb 3-1: unsupported MDLM descriptors
[  159.550466][ T5864] usb 3-1: USB disconnect, device number 10
[  159.574723][ T8184] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  159.598813][ T8184] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  159.859617][ T7855] syz-executor: attempt to access beyond end of device
[  159.859617][ T7855] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  159.924239][ T7855] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  159.941852][ T8227] sp0: Synchronizing with TNC
[  160.914378][ T8256] xt_l2tp: unknown flags: 10
[  161.077297][ T8262] loop1: detected capacity change from 0 to 512
[  161.115953][ T8262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.152358][ T8262] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.285226][ T8262] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.896: invalid size
[  161.347836][ T8262] EXT4-fs (loop1): Remounting filesystem read-only
[  161.459786][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.470307][ T8272] [U] 
[  161.473355][ T8272] [U] 
[  161.476066][ T8272] [U] 
[  161.478763][ T8272] [U] 
[  161.481461][ T8272] [U] 
[  161.484156][ T8272] [U] 
[  161.486851][ T8272] [U] 
[  161.489550][ T8272] [U] 
[  161.499283][ T1104] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  161.516229][ T1104] Quota error (device loop1): write_blk: dquota write failed
[  161.524333][ T8272] [U] 
[  161.527049][ T8272] [U] 
[  161.529745][ T8272] [U] 
[  161.532472][ T1104] Quota error (device loop1): free_dqentry: Can't write quota data block 5
[  161.562389][ T8271] [U] 
[  161.672290][ T8269] loop3: detected capacity change from 0 to 32768
[  161.701514][ T8276] loop2: detected capacity change from 0 to 512
[  161.721494][ T8276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  161.766988][ T8276] EXT4-fs (loop2): 1 truncate cleaned up
[  161.775782][ T8269] jfs_rename did not expect dtDelete to return rc = -2
[  161.783031][ T8269] ERROR: (device loop3): jfs_rename: 
[  161.783031][ T8269] 
[  161.793541][ T8276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.807362][ T8269] ERROR: (device loop3): remounting filesystem as read-only
[  161.963009][   T27] audit: type=1800 audit(1758692429.041:44): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.900" name="bus" dev="loop2" ino=18 res=0 errno=0
[  162.130352][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.658410][ T8302] loop1: detected capacity change from 0 to 2048
[  162.699054][ T8302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  162.894577][ T8310] loop3: detected capacity change from 0 to 4096
[  162.909425][ T8310] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  163.117742][   T27] audit: type=1326 audit(1758692430.201:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0278eec9 code=0x7ffc0000
[  163.188449][ T8310] ntfs3: loop3: failed to convert "c46c" to macturkish
[  163.191862][ T8318] 9p: Unknown Cache mode or invalid value m
[  163.223841][   T27] audit: type=1326 audit(1758692430.201:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0278eec9 code=0x7ffc0000
[  163.300502][   T27] audit: type=1326 audit(1758692430.201:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbc0278eec9 code=0x7ffc0000
[  163.359855][   T27] audit: type=1326 audit(1758692430.201:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0278eec9 code=0x7ffc0000
[  163.413753][   T27] audit: type=1326 audit(1758692430.201:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0278eec9 code=0x7ffc0000
[  163.466475][   T27] audit: type=1326 audit(1758692430.201:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fbc0278eec9 code=0x7ffc0000
[  163.533462][   T27] audit: type=1326 audit(1758692430.201:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.1.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbc02785d67 code=0x7ffc0000
[  164.263919][ T5773] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  164.276867][ T8360] loop2: detected capacity change from 0 to 1024
[  164.346329][ T8360] hfsplus: bad catalog entry type
[  164.440539][   T12] hfsplus: b-tree write err: -5, ino 4
[  164.483926][ T5773] usb 5-1: Using ep0 maxpacket: 8
[  164.498342][ T5773] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.523717][ T5773] usb 5-1: config 0 interface 0 has no altsetting 0
[  164.544278][ T5773] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[  164.554886][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.566675][ T5773] usb 5-1: config 0 descriptor??
[  164.803854][ T5864] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  164.999375][ T5773] hid-u2fzero 0003:20A0:4287.0015: item fetching failed at offset 3/5
[  165.008385][ T5773] hid-u2fzero: probe of 0003:20A0:4287.0015 failed with error -22
[  165.043974][ T5864] usb 3-1: Using ep0 maxpacket: 16
[  165.051669][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  165.063298][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  165.077169][ T5864] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  165.086491][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.097047][ T5864] usb 3-1: config 0 descriptor??
[  165.201188][    T9] usb 5-1: USB disconnect, device number 3
[  165.290740][ T8374] loop3: detected capacity change from 0 to 512
[  165.317111][ T8374] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  165.357070][ T8374] EXT4-fs (loop3): 1 truncate cleaned up
[  165.377362][ T8374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.401009][ T8378] loop1: detected capacity change from 0 to 512
[  165.441933][ T8378] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.940: iget: bad extended attribute block 1
[  165.461859][ T8378] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.940: couldn't read orphan inode 15 (err -117)
[  165.480325][ T8378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.520106][ T5864] playstation 0003:054C:0DF2.0016: item fetching failed at offset 4/5
[  165.564486][ T5864] playstation 0003:054C:0DF2.0016: Parse failed
[  165.582788][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.596161][ T5864] playstation: probe of 0003:054C:0DF2.0016 failed with error -22
[  165.604117][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.731446][  T787] usb 3-1: USB disconnect, device number 11
[  165.974008][ T5864] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  166.114361][ T8397] loop1: detected capacity change from 0 to 24
[  166.130578][ T8397] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  166.152758][ T8397] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  166.176155][ T5864] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.197632][ T5864] usb 4-1: config 0 interface 0 has no altsetting 0
[  166.234246][ T5864] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  166.259007][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.297132][ T5864] usb 4-1: config 0 descriptor??
[  166.496876][ T8403] loop1: detected capacity change from 0 to 8192
[  166.510087][ T8408] vivid-003: =================  START STATUS  =================
[  166.547058][ T8408] vivid-003: Radio HW Seek Mode: Bounded
[  166.553235][ T8408] vivid-003: Radio Programmable HW Seek: false
[  166.564146][ T8403] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  166.577386][ T8403] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  166.586794][ T8403] REISERFS (device loop1): using ordered data mode
[  166.593379][ T8403] reiserfs: using flush barriers
[  166.602423][ T8408] vivid-003: RDS Rx I/O Mode: Block I/O
[  166.603912][ T8403] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  166.608194][ T8408] vivid-003: Generate RBDS Instead of RDS: false
[  166.631283][ T8408] vivid-003: RDS Reception: true
[  166.636493][ T8408] vivid-003: RDS Program Type: 0 inactive
[  166.642266][ T8408] vivid-003: RDS PS Name:  inactive
[  166.647894][ T8408] vivid-003: RDS Radio Text:  inactive
[  166.653425][ T8408] vivid-003: RDS Traffic Announcement: false inactive
[  166.660527][ T8408] vivid-003: RDS Traffic Program: false inactive
[  166.667099][ T8408] vivid-003: RDS Music: false inactive
[  166.672708][ T8408] vivid-003: ==================  END STATUS  ==================
[  166.682590][ T8403] REISERFS (device loop1): checking transaction log (loop1)
[  166.716097][ T8403] REISERFS (device loop1): Using r5 hash to sort names
[  166.725228][ T8403] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  166.820821][ T5864] nintendo 0003:057E:2009.0017: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.3-1/input0
[  166.975113][ T5864] nintendo 0003:057E:2009.0017: failed reading SPI flash; ret=-38
[  167.015939][ T5864] nintendo 0003:057E:2009.0017: using factory cal for left stick
[  167.026118][ T5864] nintendo 0003:057E:2009.0017: failed reading SPI flash; ret=-38
[  167.056441][ T5864] nintendo 0003:057E:2009.0017: using factory cal for right stick
[  167.097281][ T5864] nintendo 0003:057E:2009.0017: failed reading SPI flash; ret=-38
[  167.125959][ T5864] nintendo 0003:057E:2009.0017: Failed to read left stick cal, using defaults; e=-38
[  167.166703][ T5864] nintendo 0003:057E:2009.0017: failed reading SPI flash; ret=-38
[  167.193758][ T5864] nintendo 0003:057E:2009.0017: Failed to read right stick cal, using defaults; e=-38
[  167.223859][ T5864] nintendo 0003:057E:2009.0017: failed reading SPI flash; ret=-38
[  167.256143][ T5864] nintendo 0003:057E:2009.0017: using factory cal for IMU
[  167.283856][ T5864] nintendo 0003:057E:2009.0017: failed reading SPI flash; ret=-38
[  167.291607][ T8405] loop2: detected capacity change from 0 to 32768
[  167.303752][ T5864] nintendo 0003:057E:2009.0017: Failed to read IMU cal, using defaults; ret=-38
[  167.323284][ T8405] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.954 (8405)
[  167.354309][ T5864] nintendo 0003:057E:2009.0017: Unable to read IMU calibration data
[  167.374116][ T8405] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.385635][ T5864] nintendo 0003:057E:2009.0017: Failed to set report mode; ret=-38
[  167.404676][ T5864] nintendo 0003:057E:2009.0017: Failed to initialize controller; ret=-38
[  167.409515][ T8405] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  167.438239][ T5864] nintendo 0003:057E:2009.0017: probe - fail = -38
[  167.452613][ T8405] BTRFS info (device loop2): using free space tree
[  167.484319][ T5864] nintendo: probe of 0003:057E:2009.0017 failed with error -38
[  167.501564][ T5864] usb 4-1: USB disconnect, device number 11
[  167.713837][ T8405] BTRFS info (device loop2): enabling ssd optimizations
[  167.734888][ T8405] BTRFS info (device loop2): auto enabling async discard
[  167.937390][ T8405] BTRFS info (device loop2): Snapshot src from another FS
[  168.099406][ T5784] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.514718][ T8418] loop1: detected capacity change from 0 to 32768
[  168.559980][ T8463] loop3: detected capacity change from 0 to 4096
[  168.620613][ T8463] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  168.636680][ T8463] UDF-fs: Scanning with blocksize 512 failed
[  168.636979][ T8418] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  168.673876][ T8463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.918575][ T8418] XFS (loop1): Ending clean mount
[  169.164629][ T5789] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  169.601783][ T8500] loop4: detected capacity change from 0 to 256
[  169.669223][ T8500] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  170.161800][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'.
[  170.377705][ T8492] loop3: detected capacity change from 0 to 32768
[  170.482952][ T8492] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.858463][ T8492] XFS (loop3): Ending clean mount
[  170.894027][ T8492] XFS (loop3): Quotacheck needed: Please wait.
[  171.005259][ T8492] XFS (loop3): Quotacheck: Done.
[  171.098654][ T8513] loop1: detected capacity change from 0 to 40427
[  171.122973][ T5781] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  171.138329][ T8513] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  171.173702][ T8513] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  171.241011][ T8513] F2FS-fs (loop1): invalid crc value
[  171.316284][ T8513] F2FS-fs (loop1): Found nat_bits in checkpoint
[  171.609608][ T8513] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  171.618177][ T8513] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  171.799962][ T5789] syz-executor: attempt to access beyond end of device
[  171.799962][ T5789] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  171.861465][ T5789] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  172.291178][ T8592] loop3: detected capacity change from 0 to 24
[  172.318190][ T8592] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  172.354247][ T8592] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  172.922085][ T8579] loop4: detected capacity change from 0 to 32768
[  172.972807][ T8606] loop1: detected capacity change from 0 to 64
[  173.004126][ T8579] jfs_rename did not expect dtDelete to return rc = -2
[  173.019939][ T8579] ERROR: (device loop4): jfs_rename: 
[  173.019939][ T8579] 
[  173.043985][ T8579] ERROR: (device loop4): remounting filesystem as read-only
[  173.134126][ T8606] syz.1.1001: attempt to access beyond end of device
[  173.134126][ T8606] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  173.185743][ T8606] Buffer I/O error on dev loop1, logical block 134217734, lost async page write
[  173.512280][ T8599] loop3: detected capacity change from 0 to 32768
[  173.534667][ T8599] XFS: noikeep mount option is deprecated.
[  173.608865][ T8599] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.761369][ T8599] XFS (loop3): Ending clean mount
[  173.817347][ T8599] XFS (loop3): Quotacheck needed: Please wait.
[  173.893080][ T8599] XFS (loop3): Quotacheck: Done.
[  174.008901][ T5781] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  174.116989][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  174.117002][   T27] audit: type=1326 audit(1758692441.201:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8640 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df298eec9 code=0x7ffc0000
[  174.237159][   T27] audit: type=1326 audit(1758692441.201:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8640 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df298eec9 code=0x7ffc0000
[  174.344487][   T27] audit: type=1326 audit(1758692441.251:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8640 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8df298eec9 code=0x7ffc0000
[  174.442892][   T27] audit: type=1326 audit(1758692441.251:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8640 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df298eec9 code=0x7ffc0000
[  174.535090][   T27] audit: type=1326 audit(1758692441.251:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8640 comm="syz.2.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df298eec9 code=0x7ffc0000
[  174.563656][ T5792] Bluetooth: hci2: command tx timeout
[  174.631459][ T8653] loop4: detected capacity change from 0 to 8192
[  174.660318][ T8653] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  174.723840][ T8653] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  174.733156][ T8653] REISERFS (device loop4): using ordered data mode
[  174.739986][ T8653] reiserfs: using flush barriers
[  174.754378][ T8653] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  174.815609][ T8659] loop2: detected capacity change from 0 to 1024
[  174.840983][ T8653] REISERFS (device loop4): checking transaction log (loop4)
[  174.867761][ T8659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.935891][ T8653] REISERFS (device loop4): Using r5 hash to sort names
[  174.943187][ T8653] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  175.062393][ T8641] loop1: detected capacity change from 0 to 32768
[  175.098010][ T8641] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 scanned by syz.1.1004 (8641)
[  175.170655][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.201748][ T8641] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  175.226102][ T8641] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  175.248181][ T8641] BTRFS info (device loop1): using free space tree
[  175.523510][ T8641] BTRFS info (device loop1): enabling ssd optimizations
[  175.572956][ T8641] BTRFS info (device loop1): auto enabling async discard
[  175.777983][ T8702] loop3: detected capacity change from 0 to 1024
[  175.847190][ T5789] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  176.076956][ T8702] Process accounting resumed
[  176.095566][ T6342] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 9 /dev/loop1 scanned by udevd (6342)
[  176.199357][ T1147] hfsplus: b-tree write err: -5, ino 4
[  176.879004][ T8692] loop4: detected capacity change from 0 to 32768
[  176.921198][ T8692] XFS: ikeep mount option is deprecated.
[  177.068821][   T27] audit: type=1326 audit(1758692444.141:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.2.1028" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8df298eec9 code=0x0
[  177.123438][ T8692] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.238560][ T8692] XFS (loop4): Ending clean mount
[  177.289238][ T8692] XFS (loop4): Quotacheck needed: Please wait.
[  177.421575][ T8692] XFS (loop4): Quotacheck: Done.
[  177.499403][ T7855] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.791479][ T8735] loop3: detected capacity change from 0 to 32768
[  177.811148][ T8735] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  177.939005][ T8767] loop2: detected capacity change from 0 to 512
[  177.946537][ T8767] EXT4-fs: Ignoring removed mblk_io_submit option
[  177.989277][ T8767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.004977][ T6931] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  178.125513][   T27] audit: type=1800 audit(1758692445.191:61): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1031" name="file2" dev="loop2" ino=16 res=0 errno=0
[  178.295209][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.533138][ T8785] loop3: detected capacity change from 0 to 1024
[  178.630787][ T8785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.775076][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.944357][ T5847] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  179.007026][ T8799] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  179.055851][ T8801] loop4: detected capacity change from 0 to 512
[  179.096103][ T8801] EXT4-fs: Ignoring removed mblk_io_submit option
[  179.138276][ T8801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.155308][ T5847] usb 3-1: Using ep0 maxpacket: 16
[  179.164553][ T5847] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30
[  179.187118][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.197324][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  179.210591][ T5847] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  179.220671][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.238732][ T5847] usb 3-1: config 0 descriptor??
[  179.264819][   T27] audit: type=1800 audit(1758692446.351:62): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1044" name="file2" dev="loop4" ino=16 res=0 errno=0
[  179.336742][ T7855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.509096][ T8812] loop4: detected capacity change from 0 to 64
[  179.571984][ T8816] loop1: detected capacity change from 0 to 1024
[  179.586494][ T8815] loop3: detected capacity change from 0 to 1024
[  179.617852][ T8815] EXT4-fs: Ignoring removed nobh option
[  179.623556][ T8815] EXT4-fs: Ignoring removed bh option
[  179.648398][ T8816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.663757][ T8815] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  179.709392][ T5847] samsung 0003:0419:0001.0018: unknown main item tag 0x0
[  179.724224][ T5847] samsung 0003:0419:0001.0018: unknown main item tag 0x0
[  179.725327][ T8815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.731289][ T5847] samsung 0003:0419:0001.0018: unknown main item tag 0x0
[  179.731326][ T5847] samsung 0003:0419:0001.0018: unknown main item tag 0x0
[  179.761905][ T5847] samsung 0003:0419:0001.0018: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0
[  179.765375][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.862187][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.072030][ T5864] usb 3-1: USB disconnect, device number 12
[  180.340609][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'.
[  180.816043][ T8856] loop1: detected capacity change from 0 to 64
[  181.382193][ T8852] loop4: detected capacity change from 0 to 32768
[  181.427842][ T8851] loop3: detected capacity change from 0 to 40427
[  181.446261][ T8851] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  181.453747][ T8851] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  181.471517][ T8851] F2FS-fs (loop3): invalid crc value
[  181.501970][ T8851] F2FS-fs (loop3): Found nat_bits in checkpoint
[  181.609558][ T8860] loop2: detected capacity change from 0 to 32768
[  181.651114][ T8860] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1069 (8860)
[  181.683914][ T8868] loop1: detected capacity change from 0 to 256
[  181.694313][ T8870] loop4: detected capacity change from 0 to 64
[  181.710060][ T8860] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  181.721825][ T8868] exfat: Deprecated parameter 'namecase'
[  181.727855][ T8851] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  181.748218][ T8851] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  181.756147][ T8860] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  181.780164][ T8868] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  181.799916][ T8860] BTRFS info (device loop2): using free space tree
[  181.929050][ T5781] syz-executor: attempt to access beyond end of device
[  181.929050][ T5781] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  181.990406][ T5781] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  181.990423][ T8860] BTRFS info (device loop2): enabling ssd optimizations
[  181.990442][ T8860] BTRFS info (device loop2): auto enabling async discard
[  182.009683][ T8870] syz.4.1071: attempt to access beyond end of device
[  182.009683][ T8870] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  182.052935][ T8870] Buffer I/O error on dev loop4, logical block 134217734, lost async page write
[  182.283857][ T8860] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  182.414281][ T8892] loop1: detected capacity change from 0 to 64
[  182.602344][ T5784] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.622039][ T8890] loop4: detected capacity change from 0 to 8192
[  182.682355][ T8890] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  182.788955][ T8890] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  182.838878][ T8890] REISERFS (device loop4): using ordered data mode
[  182.875068][ T8890] reiserfs: using flush barriers
[  182.898450][ T8890] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  182.965201][ T8890] REISERFS (device loop4): checking transaction log (loop4)
[  183.010888][ T8890] REISERFS (device loop4): Using r5 hash to sort names
[  183.051591][ T8890] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  183.093923][ T8900] sp0: Synchronizing with TNC
[  183.134603][ T8899] [U] è
[  183.813927][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  184.013713][    T9] usb 4-1: Using ep0 maxpacket: 8
[  184.031548][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  184.051455][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.069753][    T9] usb 4-1: Product: syz
[  184.074270][    T9] usb 4-1: Manufacturer: syz
[  184.078885][    T9] usb 4-1: SerialNumber: syz
[  184.099900][    T9] usb 4-1: config 0 descriptor??
[  184.345064][    T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  184.407184][ T8922] loop4: detected capacity change from 0 to 32768
[  184.494686][ T8922] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.565411][ T8924] loop1: detected capacity change from 0 to 40427
[  184.583698][ T8924] F2FS-fs (loop1): heap/no_heap options were deprecated
[  184.601891][ T8924] F2FS-fs (loop1): invalid crc value
[  184.607346][ T8924] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  184.625642][ T8924] F2FS-fs (loop1): Found nat_bits in checkpoint
[  184.735063][ T8922] XFS (loop4): Ending clean mount
[  184.755501][    T9] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  184.784118][ T8922] XFS (loop4): Quotacheck needed: Please wait.
[  184.790883][    T9] usb 4-1: USB disconnect, device number 12
[  184.860010][ T8924] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  184.903819][ T8922] XFS (loop4): Quotacheck: Done.
[  184.924195][ T8924] F2FS-fs (loop1): heap/no_heap options were deprecated
[  184.958103][ T8924] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  185.024167][ T7855] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  185.425996][ T8950] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[  185.602718][   T27] audit: type=1326 audit(1758692452.681:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.1.1100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc0278eec9 code=0x0
[  185.934230][ T8964] loop3: detected capacity change from 0 to 128
[  185.974809][ T6931] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  185.982978][ T8964] autofs4:pid:8964:autofs_fill_super: called with bogus options
[  186.059226][ T8952] loop4: detected capacity change from 0 to 32768
[  186.087660][ T8952] XFS: noikeep mount option is deprecated.
[  186.124145][ T8966] blktrace: Concurrent blktraces are not allowed on sg0
[  186.165212][ T8952] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  186.226103][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  186.235841][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  186.297162][ T8952] XFS (loop4): Ending clean mount
[  186.305383][ T8952] XFS (loop4): Quotacheck needed: Please wait.
[  186.338003][ T8952] XFS (loop4): Quotacheck: Done.
[  186.407270][ T7855] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  186.915182][ T8994] loop1: detected capacity change from 0 to 1024
[  187.017468][ T1104] hfsplus: b-tree write err: -5, ino 4
[  187.088967][ T8998] loop3: detected capacity change from 0 to 256
[  187.106711][ T8998] exfat: Deprecated parameter 'utf8'
[  187.127332][ T8998] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  187.543926][    T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  187.663968][ T5847] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  187.705830][ T9000] loop1: detected capacity change from 0 to 32768
[  187.723946][ T9000] XFS: noikeep mount option is deprecated.
[  187.725700][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  187.748030][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.752815][ T9000] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.758048][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  187.758097][    T9] usb 3-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00
[  187.789127][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.800091][    T9] usb 3-1: config 0 descriptor??
[  187.895799][ T5847] usb 5-1: config 0 has an invalid interface number: 145 but max is 0
[  187.913654][ T5847] usb 5-1: config 0 has no interface number 0
[  187.927269][ T5847] usb 5-1: New USB device found, idVendor=0fce, idProduct=d0e1, bcdDevice= 0.00
[  187.936855][ T9000] XFS (loop1): Ending clean mount
[  187.943635][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.959227][ T9000] XFS (loop1): Quotacheck needed: Please wait.
[  187.961997][ T5847] usb 5-1: Product: syz
[  187.969872][ T5847] usb 5-1: Manufacturer: syz
[  187.992149][ T5847] usb 5-1: SerialNumber: syz
[  188.009709][ T5847] usb 5-1: config 0 descriptor??
[  188.053789][ T5847] usb-storage 5-1:0.145: USB Mass Storage device detected
[  188.065537][ T9000] XFS (loop1): Quotacheck: Done.
[  188.095746][ T5847] usb-storage 5-1:0.145: device ignored
[  188.153902][ T9014] loop3: detected capacity change from 0 to 32768
[  188.173024][ T9014] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1124 (9014)
[  188.211040][ T9014] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  188.231750][ T9014] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  188.238498][ T5789] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.260875][ T9014] BTRFS info (device loop3): using free space tree
[  188.267736][ T5847] usb 5-1: USB disconnect, device number 4
[  188.276351][    T9] wacom 0003:056A:005D.0019: hidraw0: USB HID vff.fa Device [HID 056a:005d] on usb-dummy_hcd.2-1/input0
[  188.512760][ T9014] BTRFS info (device loop3): enabling ssd optimizations
[  188.557740][ T9041] loop1: detected capacity change from 0 to 8192
[  188.565938][ T9014] BTRFS info (device loop3): auto enabling async discard
[  188.604967][ T5864] usb 3-1: USB disconnect, device number 13
[  188.610531][ T9041] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  188.647364][ T9032] fido_id[9032]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:005D.0019/report_descriptor': No such device
[  188.713784][ T9041] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  188.789993][ T9041] REISERFS (device loop1): using ordered data mode
[  188.829662][ T9041] reiserfs: using flush barriers
[  188.839904][ T9014] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  188.873421][ T9041] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  188.934379][ T9041] REISERFS (device loop1): checking transaction log (loop1)
[  188.983983][ T9041] REISERFS (device loop1): Using r5 hash to sort names
[  188.991194][ T9041] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  189.064337][ T5781] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.129753][   T28] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  189.350584][   T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  189.393881][   T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  189.403569][   T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  189.409205][   T27] audit: type=1326 audit(1758692456.491:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.3.1127" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f343a58eec9 code=0x0
[  189.485149][ T9055] program syz.1.1130 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  189.500242][   T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  189.527713][ T9058] loop2: detected capacity change from 0 to 128
[  189.531019][   T28] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  189.553792][   T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.561817][   T28] usb 5-1: Product: syz
[  189.594681][   T28] usb 5-1: Manufacturer: syz
[  189.617884][   T28] usb 5-1: SerialNumber: syz
[  189.631212][   T28] usb 5-1: config 0 descriptor??
[  189.669779][ T9058] FAT-fs (loop2): Directory bread(block 32) failed
[  189.689477][ T9058] FAT-fs (loop2): Directory bread(block 33) failed
[  189.711065][ T9058] FAT-fs (loop2): Directory bread(block 34) failed
[  189.733276][ T9058] FAT-fs (loop2): Directory bread(block 35) failed
[  189.755590][ T9058] FAT-fs (loop2): Directory bread(block 36) failed
[  189.779061][ T9058] FAT-fs (loop2): Directory bread(block 37) failed
[  189.810485][ T9058] FAT-fs (loop2): Directory bread(block 38) failed
[  189.831357][ T9058] FAT-fs (loop2): Directory bread(block 39) failed
[  189.850655][ T9058] FAT-fs (loop2): Directory bread(block 40) failed
[  189.860440][ T9058] FAT-fs (loop2): Directory bread(block 41) failed
[  189.873917][   T28] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  189.987831][ T9058] syz.2.1131: attempt to access beyond end of device
[  189.987831][ T9058] loop2: rw=524288, sector=4108, nr_sectors = 4 limit=128
[  190.021595][ T9058] syz.2.1131: attempt to access beyond end of device
[  190.021595][ T9058] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128
[  190.036141][   T27] audit: type=1800 audit(1758692457.121:65): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1131" name="file1" dev="loop2" ino=1048618 res=0 errno=0
[  190.091098][ T5820] usb 5-1: USB disconnect, device number 5
[  190.548357][ T9064] loop1: detected capacity change from 0 to 32768
[  190.668875][ T9079] loop3: detected capacity change from 0 to 512
[  190.743093][ T9079] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  190.825709][ T9079] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  190.827388][ T9087] loop2: detected capacity change from 0 to 64
[  190.899109][ T9079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.029699][ T9079] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.1141: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=9, size=1024 fake=1
[  191.218881][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.239697][ T9096] raw_sendmsg: syz.2.1147 forgot to set AF_INET. Fix it!
[  191.283809][   T28] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  191.369019][ T9100] loop3: detected capacity change from 0 to 8
[  191.473715][   T28] usb 5-1: Using ep0 maxpacket: 16
[  191.485613][   T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.528166][   T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.558909][   T28] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  191.581354][   T28] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  191.586922][ T9107] loop3: detected capacity change from 0 to 256
[  191.590697][   T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.623269][ T9108] sp0: Synchronizing with TNC
[  191.638482][ T9105] [U] è
[  191.670765][   T28] usb 5-1: config 0 descriptor??
[  192.127737][   T28] shield 0003:0955:7214.001A: unknown main item tag 0x0
[  192.159231][   T28] shield 0003:0955:7214.001A: unknown main item tag 0x0
[  192.173736][   T28] shield 0003:0955:7214.001A: unknown main item tag 0x0
[  192.174001][ T9110] loop1: detected capacity change from 0 to 32768
[  192.201089][   T28] shield 0003:0955:7214.001A: unknown main item tag 0x0
[  192.221352][   T28] shield 0003:0955:7214.001A: unknown main item tag 0x0
[  192.264105][   T28] input: HID 0955:7214 Haptics as /devices/virtual/input/input34
[  192.351346][   T28] shield 0003:0955:7214.001A: Registered Thunderstrike controller
[  192.374281][   T28] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  192.472816][  T787] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  192.499512][   T28] usb 5-1: USB disconnect, device number 6
[  192.515823][ T9114] loop2: detected capacity change from 0 to 32768
[  192.522539][  T787] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  192.534597][ T9114] XFS: noikeep mount option is deprecated.
[  192.582724][  T787] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  192.602827][ T9114] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  192.623918][  T787] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  192.843917][ T9114] XFS (loop2): Ending clean mount
[  192.909801][ T9114] XFS (loop2): Quotacheck needed: Please wait.
[  193.029119][ T9114] XFS (loop2): Quotacheck: Done.
[  193.075445][ T9118] loop3: detected capacity change from 0 to 32768
[  193.162523][ T9118] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  193.189248][ T5784] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  193.345845][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  193.409445][ T9118] XFS (loop3): Ending clean mount
[  193.446918][ T9118] XFS (loop3): Quotacheck needed: Please wait.
[  193.479209][ T9146] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  193.582460][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.584695][ T9118] XFS (loop3): Quotacheck: Done.
[  193.599023][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.614290][    T9] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00
[  193.623463][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.656651][    T9] usb 2-1: config 0 descriptor??
[  193.726376][ T9151] loop2: detected capacity change from 0 to 128
[  193.793229][ T5781] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  193.812189][ T9151] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  193.845906][ T9151] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  194.004020][ T9155] ptrace attach of "./syz-executor exec"[7855] was attempted by "\x22"[9155]
[  194.032993][ T5784] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.114782][    T9] ntrig 0003:1B96:0012.001B: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.1-1/input0
[  194.199784][ T9161] loop3: detected capacity change from 0 to 16
[  194.216701][ T9161] erofs: (device loop3): mounted with root inode @ nid 36.
[  194.226681][ T9162] loop2: detected capacity change from 0 to 256
[  194.254818][ T9162] exfat: Deprecated parameter 'utf8'
[  194.301795][ T9162] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  194.335777][    T9] usb 2-1: USB disconnect, device number 12
[  194.399882][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.406629][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.933757][ T9178] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  195.043201][ T9164] loop4: detected capacity change from 0 to 32768
[  195.118598][ T9164] read_mapping_page failed!
[  195.144686][ T9164] ERROR: (device loop4): txCommit: 
[  195.144686][ T9164] 
[  195.167703][ T9164] ERROR: (device loop4): remounting filesystem as read-only
[  195.171315][ T9187] loop3: detected capacity change from 0 to 128
[  195.288615][ T9187] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  195.339892][  T112] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  195.363903][  T112] ------------[ cut here ]------------
[  195.369395][  T112] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  195.395582][ T9187] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.424804][  T112] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  195.430916][  T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted syzkaller #0
[  195.438124][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  195.448196][  T112] RIP: 0010:txUnlock+0xc87/0xcb0
[  195.453161][  T112] Code: af b8 61 07 0f 0b e8 08 55 84 fe 48 c7 c7 c0 14 e4 8a 48 c7 c6 b9 10 e4 8a ba a3 03 00 00 48 c7 c1 a0 21 e4 8a e8 89 b8 61 07 <0f> 0b e8 e2 54 84 fe 48 c7 c7 c0 14 e4 8a 48 c7 c6 b9 10 e4 8a ba
[  195.472786][  T112] RSP: 0018:ffffc90002d77d08 EFLAGS: 00010246
[  195.478862][  T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 3db298a1aa62dd00
[  195.486847][  T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  195.494827][  T112] RBP: ffffc900028da048 R08: ffffc90002d77a07 R09: 1ffff920005aef40
[  195.502809][  T112] R10: dffffc0000000000 R11: fffff520005aef41 R12: ffff888023b613e0
[  195.510880][  T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802673e894
[  195.518840][  T112] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  195.527764][  T112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  195.534335][  T112] CR2: 00007fc1a2803000 CR3: 0000000074dd7000 CR4: 00000000003506e0
[  195.542292][  T112] Call Trace:
[  195.545557][  T112]  <TASK>
[  195.548475][  T112]  ? lockdep_hardirqs_on+0x98/0x150
[  195.553674][  T112]  jfs_lazycommit+0x570/0xa60
[  195.558340][  T112]  ? txFreelock+0x5a0/0x5a0
[  195.562827][  T112]  ? do_task_dead+0xd0/0xd0
[  195.567316][  T112]  ? __kthread_parkme+0x7a/0x1c0
[  195.572241][  T112]  kthread+0x2fa/0x390
[  195.576291][  T112]  ? txFreelock+0x5a0/0x5a0
[  195.580780][  T112]  ? kthread_blkcg+0xd0/0xd0
[  195.585352][  T112]  ret_from_fork+0x48/0x80
[  195.589752][  T112]  ? kthread_blkcg+0xd0/0xd0
[  195.594337][  T112]  ret_from_fork_asm+0x11/0x20
[  195.599100][  T112]  </TASK>
[  195.602109][  T112] Modules linked in:
[  195.615994][  T112] ---[ end trace 0000000000000000 ]---
[  195.621546][  T112] RIP: 0010:txUnlock+0xc87/0xcb0
[  195.625027][ T5781] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.627702][  T112] Code: af b8 61 07 0f 0b e8 08 55 84 fe 48 c7 c7 c0 14 e4 8a 48 c7 c6 b9 10 e4 8a ba a3 03 00 00 48 c7 c1 a0 21 e4 8a e8 89 b8 61 07 <0f> 0b e8 e2 54 84 fe 48 c7 c7 c0 14 e4 8a 48 c7 c6 b9 10 e4 8a ba
[  195.655272][  T112] RSP: 0018:ffffc90002d77d08 EFLAGS: 00010246
[  195.661365][  T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 3db298a1aa62dd00
[  195.671296][  T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  195.680729][  T112] RBP: ffffc900028da048 R08: ffffc90002d77a07 R09: 1ffff920005aef40
[  195.689521][  T112] R10: dffffc0000000000 R11: fffff520005aef41 R12: ffff888023b613e0
[  195.697784][  T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802673e894
[  195.705849][  T112] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  195.715574][  T112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  195.722265][  T112] CR2: 00007f343a7b4198 CR3: 0000000030490000 CR4: 00000000003506f0
[  195.730482][  T112] Kernel panic - not syncing: Fatal exception
[  195.736748][  T112] Kernel Offset: disabled
[  195.741063][  T112] Rebooting in 86400 seconds..