last executing test programs:

24.811071309s ago: executing program 4 (id=1207):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unshare(0x400)
r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/anycast6\x00')
lseek(r0, 0x2004, 0xf5)

24.504001115s ago: executing program 4 (id=1209):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0xc201})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNGETFILTER(r0, 0x801054db, 0x0)

24.143726263s ago: executing program 4 (id=1211):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r0, 0x80)

23.805368571s ago: executing program 4 (id=1213):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x1)

23.502300207s ago: executing program 4 (id=1216):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

22.791534883s ago: executing program 4 (id=1224):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})

22.412143351s ago: executing program 32 (id=1224):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})

9.436793314s ago: executing program 0 (id=1276):
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x808400, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@acl}]}, 0x1, 0x45f, &(0x7f0000000340)="$eJzs28tvG0UYAPBvN4++iSnl0QcQKIiIR9K0BXrgAAgkDkVCggMcoyStSt0GNUFqqwpahMoJISTuiCP/Aie4IMQJiSvcUaUK9dKWk9F6dxvHtd0kteOCfz9pk5nd2Z35vDv27I4dwMAaz/4kEdsj4o+IGMuzKwuM5/9uXLswe/PahdkkarV3/07q5a5fuzBbFi3321ZkJtKI9PMk9raod/Hc+ZMz1er8mSI/tXTqo6nFc+dfOHFq5vj88fnTB48cOXxo+uWXDr7YlTizNl3f88nCvt1vffD120e/zNaNlvE3xdEl4502Pl2rdbm6/trRkE6G+9gQ1mQoIrLTNVLv/2MxFMsnbyze/KyvjQN6qlar1ba133yxBvyPbW14J8jo8jAoyg/67P63XJoHAa/2ZuhxT7j6Wn4DlMV9o1jyLcORFmVGmu5vu2k8It6/+M+32RK9eQ4BALDCj9n45/lW4780Hmood18xN1SJiPsjYmdEPBARuyLiwYh62Ycj4pE11t88SXL7+Ce9sq7AVikb/71SzG2tHP+Vo7+oDBW5HfX4R5JjJ6rzB4rXZCJGNmX56Q51/PTG71+129Y4/suWrP5yLFi048rwppX7zM0szdxNzI2uXorYM9wq/uTWTEASEbsjYs866zjx7Pf72m27c/wddGGeqfZdxDP5+b8YTfGXks7zk1Obozp/YKq8Km7362+X32lX/13F3wXZ+d/a8vq/FX8laZyvXVx7HZf//KLtPc0qr/9K4z7Z9T+avFdPjxbrzs4sLZ2ZjhhNjuaNblx/cHnfMl+Wz+Kf2N+6/++M5Vdib0RkF/GjEfFYRDxetP2JiHgyIvZ3iP+X15/6cP3x91YW/9yazv9yYjSa17RODJ38+YcVlVZui/9m5/N/uJ6aKNas5v1vNe1a39UMAAAA/z1pRGyPJJ28lU7Tycn8+/K7ItLqwuLSc8cWPj49l/9GoBIjafmka6zheeh0cVuf5y9FRP7VgnL7oeK58TdDW+r5ydmF6ly/g4cBt61N/8/8NdTv1gE95/daMLj0fxhc+j8Mrtb9f8uGtwPYeC36v84PA6LV5/+nfWgHsPGa+r9pPxggnv/B4NL/YXDp/zCQFrfEnX8k3zFRHmmdu3dKDJ/ND939I29AIkbuiWbkic3dP3Kk90BcEj1L9PFNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoIv+DQAA///U99eV")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)

9.417762105s ago: executing program 1 (id=1277):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x8010, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
creat(&(0x7f0000000240)='./file1\x00', 0xd)

9.407568915s ago: executing program 2 (id=1278):
r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000200)=0xf0)
r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000200)=0xf0)

9.407366735s ago: executing program 3 (id=1279):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0xc, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)

7.80056516s ago: executing program 0 (id=1280):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xff}]}, 0x24}}, 0x18)

7.7986887s ago: executing program 1 (id=1281):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r0}, 0x38)

7.79838271s ago: executing program 2 (id=1282):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@private=0xa010102}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@flushpolicy={0x10, 0x1d, 0x2d, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x0)

7.7977727s ago: executing program 3 (id=1283):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x6, 0x7, 0x93, 0x0, 0x1b, "100056f200"})
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8002)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)

5.99684457s ago: executing program 0 (id=1284):
io_setup(0xc, &(0x7f0000000100)=<r0=>0x0)
r1 = timerfd_create(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000140)=0x5)

5.99636766s ago: executing program 1 (id=1285):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='d', 0x1)

5.98639792s ago: executing program 2 (id=1286):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r1}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1}, 0x4)

5.97724199s ago: executing program 3 (id=1287):
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000840)={0x51, 0x103, 0x7, {0xffff, 0x1}, {0x4b, 0x2}, @cond=[{0x9, 0x6, 0x1, 0x8c68, 0x4, 0x5}, {0x2, 0x3, 0x3, 0x9, 0xa, 0x1ca6}]})
mount$9p_fd(0x0, 0x0, 0x0, 0x2000090, 0x0)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

4.14120337s ago: executing program 0 (id=1288):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)

4.107440241s ago: executing program 1 (id=1289):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast=0xe0000001}, {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0)

4.098734731s ago: executing program 2 (id=1290):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000020c0)='./file1\x00', 0x1c002, &(0x7f0000000400)=ANY=[], 0x1, 0x5f12, &(0x7f0000008040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x101, 0x2000003, 0x1758})
mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)

4.031199092s ago: executing program 3 (id=1291):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0', 0x1)

2.122103834s ago: executing program 0 (id=1292):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000380)='./bus/file0\x00', &(0x7f0000000100)='./file0\x00')

2.121873984s ago: executing program 1 (id=1293):
r0 = semget$private(0x0, 0x1, 0x483)
setresgid(0xee00, 0xee01, 0x0)
setuid(0xee00)
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x43, 0x1000}], 0x1, 0x0)

2.121438604s ago: executing program 2 (id=1294):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0x5, 0x1, 0x5, 0x400, 0x5}, 0x14)

2.121183674s ago: executing program 3 (id=1295):
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)

451.06µs ago: executing program 0 (id=1296):
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000700)={0x0, 0xc350}, 0x10)
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/89, 0x59}], 0x1)

316.18µs ago: executing program 1 (id=1297):
unshare(0x22020400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x4b225cdc61248344)

215.44µs ago: executing program 2 (id=1298):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x81, "287e7e6d8832aaa075c77e0c8e70f95445f1181e24384065fdcfe46afd3edebe"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x8, "7b807005005a4fc30ce0e60542e84423b48e277209f789e408b565e81a71a796"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x8, "55780d4dc328ff0f000000000008b6723b0800e91cf82578e35bde00"})

0s ago: executing program 3 (id=1299):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f00000003c0)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4467, &(0x7f0000004480)="$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")
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280))
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)

kernel console output (not intermixed with test programs):

use=failed(directio) comm="syz.1.484" name="file2" dev="loop1" ino=17058 res=0 errno=0
[  142.787346][ T4279] ocfs2: Unmounting device (7,1) on (node local)
[  143.184999][ T4275] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  143.296532][ T5734] loop3: detected capacity change from 0 to 256
[  143.432281][   T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  143.622388][   T27] usb 1-1: Using ep0 maxpacket: 32
[  143.629459][   T27] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  143.656063][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  143.699817][   T27] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  143.735225][   T27] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  143.762211][   T27] usb 1-1: Product: syz
[  143.766542][   T27] usb 1-1: Manufacturer: syz
[  143.771195][   T27] usb 1-1: SerialNumber: syz
[  143.804361][   T27] usb 1-1: config 0 descriptor??
[  143.832800][   T27] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  143.884273][   T27] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  143.941261][ T5749] loop2: detected capacity change from 0 to 2048
[  143.965752][ T5749] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  144.075651][   T27] usb 1-1: USB disconnect, device number 5
[  144.087930][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  144.105527][   T27] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  144.266979][ T5730] ldusb: No device or device unplugged -19
[  144.498436][ T5767] netlink: 68 bytes leftover after parsing attributes in process `syz.3.517'.

syzkaller
syzkaller login: [  144.782217][   T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  144.986139][   T27] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  145.029308][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.037782][   T27] usb 3-1: Product: syz
[  145.042076][   T27] usb 3-1: Manufacturer: syz
[  145.052672][   T27] usb 3-1: SerialNumber: syz
[  145.071413][   T27] usb 3-1: config 0 descriptor??
[  145.315461][   T27] usb 3-1: USB disconnect, device number 7
[  146.033181][ T1172] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  146.254197][ T1172] usb 4-1: Using ep0 maxpacket: 32
[  146.261056][ T1172] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  146.280669][ T1172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  146.303576][ T5832] kAFS: Invalid Command on /proc/fs/afs/cells file
[  146.318923][ T1172] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  146.348504][ T1172] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  146.377411][ T1172] usb 4-1: Product: syz
[  146.381657][ T1172] usb 4-1: Manufacturer: syz
[  146.399850][ T1172] usb 4-1: SerialNumber: syz
[  146.411990][ T1172] usb 4-1: config 0 descriptor??
[  146.428597][ T1172] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  146.444406][ T1172] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  146.674362][ T1172] usb 4-1: USB disconnect, device number 4
[  146.680286][    C0] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  146.709182][ T1172] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  146.894697][ T5811] ldusb: No device or device unplugged -19
[  147.273007][ T5838] loop0: detected capacity change from 0 to 40427
[  147.291087][ T5838] F2FS-fs (loop0): Wrong segment_count / block_count (64 > 16384)
[  147.310038][ T5838] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  147.356212][ T5838] F2FS-fs (loop0): Found nat_bits in checkpoint
[  147.463602][ T5838] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  147.483554][ T5867] loop4: detected capacity change from 0 to 64
[  147.491170][ T5838] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  147.566668][ T5867] hfs: hfs: Invalid key length: 256
[  147.625629][   T26] audit: type=1800 audit(1786712754.180:11): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.557" name="file1" dev="loop4" ino=21 res=0 errno=0
[  147.801107][ T4284] hfs: node 4:3 still has 1 user(s)!
[  148.205464][ T5881] loop4: detected capacity change from 0 to 4096
[  148.287492][ T5886] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.353065][ T5891] Set syz1 is full, maxelem 2 reached
[  148.854585][ T5900] loop0: detected capacity change from 0 to 2048
[  148.951494][ T5900] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.976410][ T1172] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  149.183618][ T1172] usb 5-1: Using ep0 maxpacket: 32
[  149.190829][ T1172] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  149.205840][ T1172] usb 5-1: config 0 has no interface number 0
[  149.227572][ T1172] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  149.250374][ T1172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.286774][ T1172] usb 5-1: Product: syz
[  149.301272][ T1172] usb 5-1: Manufacturer: syz
[  149.321531][ T1172] usb 5-1: SerialNumber: syz
[  149.345300][ T1172] usb 5-1: config 0 descriptor??
[  149.401733][ T1172] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  149.589121][ T1172] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  149.635764][ T1172] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  149.737163][ T5921] loop2: detected capacity change from 0 to 1024
[  149.889048][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101
[  150.099320][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  150.114038][ T4322] usb 5-1: USB disconnect, device number 7
[  150.148415][ T4322] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  150.206981][ T4322] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  150.250517][ T4322] quatech2 5-1:0.51: device disconnected
[  150.446875][ T5942] netlink: 'syz.3.590': attribute type 11 has an invalid length.
[  150.471942][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'.
[  150.508119][ T5944] loop0: detected capacity change from 0 to 256
[  150.530600][ T5944] exfat: Deprecated parameter 'utf8'
[  150.581348][ T5944] exfat: Deprecated parameter 'utf8'
[  150.596242][ T5944] exfat: Deprecated parameter 'namecase'
[  150.649517][ T5944] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d)
[  151.222224][ T4325] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  151.422227][ T4325] usb 3-1: Using ep0 maxpacket: 16
[  151.429459][ T4325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.451670][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  151.470332][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  151.480592][ T4325] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  151.496458][ T4325] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  151.517929][ T4325] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  151.528181][ T4325] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  151.541685][ T4325] usb 3-1: Manufacturer: syz
[  151.579027][ T4325] usb 3-1: config 0 descriptor??
[  151.694318][ T5977] Set syz1 is full, maxelem 2 reached
[  151.816376][ T5981] program syz.1.609 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.942304][ T4325] rc_core: IR keymap rc-hauppauge not found
[  151.948275][ T4325] Registered IR keymap rc-empty
[  151.992944][ T4325] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.022949][ T4325] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.053531][ T4325] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  152.089904][ T4325] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16
[  152.158951][ T4325] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.212304][ T4325] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.242386][ T4325] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.272294][ T4325] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.302298][ T4325] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.336373][ T4325] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.386840][ T4325] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.424365][ T4325] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.464424][ T4325] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.492370][ T4325] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.523838][ T4325] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  152.542057][ T4325] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  152.552293][ T1172] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  152.598843][ T4325] usb 3-1: USB disconnect, device number 8
[  152.751029][ T1172] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  152.770353][ T1172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.799846][ T1172] usb 1-1: Product: syz
[  152.808629][ T1172] usb 1-1: Manufacturer: syz
[  152.837624][ T1172] usb 1-1: SerialNumber: syz
[  152.873811][ T1172] usb 1-1: config 0 descriptor??
[  153.123967][ T1172] usb 1-1: USB disconnect, device number 6
[  153.432796][ T5535] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  153.632336][ T5535] usb 5-1: Using ep0 maxpacket: 8
[  153.641934][ T5535] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  153.656168][ T5535] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  153.671040][ T5535] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  153.681649][ T5535] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  153.691995][ T5535] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  153.710256][ T5535] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  153.719767][ T5535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.828344][ T6032] loop3: detected capacity change from 0 to 1024
[  153.882202][   T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  153.942836][ T5535] usb 5-1: GET_CAPABILITIES returned 0
[  153.948478][ T5535] usbtmc 5-1:16.0: can't read capabilities
[  154.074269][   T27] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  154.093394][   T27] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  154.133666][   T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  154.156643][ T6011] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71
[  154.179781][   T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  154.217239][   T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  154.275434][ T5142] usb 5-1: USB disconnect, device number 8
[  154.289449][   T27] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  154.327543][   T27] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  154.365178][   T27] usb 3-1: Product: syz
[  154.378455][   T27] usb 3-1: Manufacturer: syz
[  154.399726][   T27] cdc_wdm 3-1:1.0: skipping garbage
[  154.417923][   T27] cdc_wdm 3-1:1.0: skipping garbage
[  154.441401][   T27] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  154.459719][   T27] cdc_wdm 3-1:1.0: Unknown control protocol
[  154.643563][ T1172] usb 3-1: USB disconnect, device number 9
[  154.759995][ T6050] program syz.3.639 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  154.883399][ T6053] loop1: detected capacity change from 0 to 2048
[  154.973060][ T6053] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  155.034528][ T6053] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.354729][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  155.500886][ T6069] syz.1.645 uses obsolete (PF_INET,SOCK_PACKET)
[  155.668390][   T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  155.703571][ T6074] loop0: detected capacity change from 0 to 2048
[  155.892190][   T27] usb 4-1: Using ep0 maxpacket: 16
[  155.900292][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.921478][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.934628][   T26] audit: type=1326 audit(1786712762.490:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6066 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7ffc0000
[  155.966414][   T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  155.990661][   T26] audit: type=1326 audit(1786712762.510:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6066 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7ffc0000
[  156.020620][   T27] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  156.029984][   T26] audit: type=1326 audit(1786712762.510:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6066 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f38e679e0d9 code=0x7ffc0000
[  156.053262][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.062438][   T26] audit: type=1326 audit(1786712762.510:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6066 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7ffc0000
[  156.091520][   T27] usb 4-1: config 0 descriptor??
[  156.169102][   T26] audit: type=1326 audit(1786712762.510:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6066 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7ffc0000
[  156.276330][   T26] audit: type=1326 audit(1786712762.510:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6066 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7ffc0000
[  156.315096][   T26] audit: type=1326 audit(1786712762.510:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6066 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f38e679e0d9 code=0x7ffc0000
[  156.346357][   T26] audit: type=1326 audit(1786712762.510:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6066 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f38e679e0d9 code=0x7ffc0000
[  156.582011][ T6085] loop0: detected capacity change from 0 to 1024
[  156.604531][   T27] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0
[  156.611825][   T27] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max
[  156.691265][   T27] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input17
[  156.739467][ T6090] loop1: detected capacity change from 0 to 1024
[  156.783390][   T27] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  156.866263][   T27] usb 4-1: USB disconnect, device number 5
[  156.905272][ T6095] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  157.118802][ T6096] fido_id[6096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  157.194564][ T6100] loop0: detected capacity change from 0 to 4096
[  157.213322][ T6100] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  157.307400][ T6100] ntfs3: loop0: failed to convert "c46c" to iso8859-5
[  157.542394][ T1172] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  157.744097][ T1172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.774209][ T6110] loop3: detected capacity change from 0 to 2048
[  157.792214][ T1172] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  157.808454][ T1172] usb 5-1: config 0 interface 0 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  157.826832][ T1172] usb 5-1: config 0 interface 0 has no altsetting 0
[  157.839496][ T1172] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  157.851049][ T1172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.862402][ T1172] usb 5-1: Product: syz
[  157.867167][ T1172] usb 5-1: Manufacturer: syz
[  157.874053][ T6110] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  157.882969][ T1172] usb 5-1: SerialNumber: syz
[  157.893314][ T1172] usb 5-1: config 0 descriptor??
[  157.982484][    T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  158.024164][ T6121] WARNING! power/level is deprecated; use power/control instead
[  158.061586][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  158.106747][ T1172] usb 5-1: Found UVC 34.00 device syz (8086:0b5b)
[  158.126125][ T1172] usb 5-1: No valid video chain found.
[  158.187758][ T6123] loop2: detected capacity change from 0 to 4096
[  158.196661][    T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  158.215978][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.251396][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.269012][ T6123] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  158.331045][    T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  158.396850][ T1172] usb 5-1: USB disconnect, device number 9
[  158.409533][    T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  158.479780][    T7] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  158.500096][    T7] usb 1-1: Manufacturer: syz
[  158.521973][    T7] usb 1-1: config 0 descriptor??
[  158.546411][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  158.780105][ T6136] loop3: detected capacity change from 0 to 2048
[  158.826899][ T6139] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.871162][ T6139] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  158.902221][ T6139] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  158.940493][ T6139] Remounting filesystem read-only
[  158.954665][    T7] appleir 0003:05AC:8243.000D: unknown main item tag 0x0
[  158.964198][ T6136] NILFS (loop3): mounting fs with errors
[  158.974137][    T7] appleir 0003:05AC:8243.000D: No inputs registered, leaving
[  158.996308][    T7] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  159.008101][ T6139] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  159.019124][ T5535] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  159.040165][ T6139] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  159.071024][ T6139] Remounting filesystem read-only
[  159.096130][ T6141] loop1: detected capacity change from 0 to 2048
[  159.129200][ T6141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.181358][ T4281] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  159.222198][ T5535] usb 3-1: Using ep0 maxpacket: 32
[  159.229224][ T5535] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  159.248079][    T7] usb 1-1: USB disconnect, device number 7
[  159.272459][ T5535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.304423][ T5535] usb 3-1: config 0 descriptor??
[  159.371570][ T6146] loop3: detected capacity change from 0 to 512
[  159.427340][ T6144] fido_id[6144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  159.517559][ T5535] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  159.538222][ T5535] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  159.583039][ T5535] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  159.627769][ T5535] usb 3-1: media controller created
[  159.682986][ T5535] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.726004][ T6134] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  159.753908][ T5535] az6027: usb out operation failed. (-71)
[  159.762893][ T5535] az6027: usb out operation failed. (-71)
[  159.779485][ T5535] stb0899_attach: Driver disabled by Kconfig
[  159.792183][ T5535] az6027: no front-end attached
[  159.792183][ T5535] 
[  159.810096][ T6152] loop4: detected capacity change from 0 to 4096
[  159.832422][ T5535] az6027: usb out operation failed. (-71)
[  159.838244][ T5535] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  159.854244][ T5535] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18
[  159.883513][ T5535] dvb-usb: schedule remote query interval to 400 msecs.
[  159.902764][ T6152] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  159.923539][ T5535] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  159.961331][ T5535] usb 3-1: USB disconnect, device number 10
[  160.066157][ T6146] EXT4-fs (loop3): Test dummy encryption mode enabled
[  160.110857][ T5535] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  160.127402][ T6146] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.677: missing EA_INODE flag
[  160.180038][ T4284] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  160.201424][ T6146] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.677: error while reading EA inode 12 err=-117
[  160.290712][ T6146] EXT4-fs (loop3): 1 orphan inode deleted
[  160.317032][ T6146] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  160.395098][ T6169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.685'.
[  160.783061][ T6180] loop1: detected capacity change from 0 to 1024
[  160.835233][ T6180] EXT4-fs: Ignoring removed bh option
[  160.917357][ T6180] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  160.984123][ T6146] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  161.066806][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  161.210020][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  161.659302][ T6200] loop0: detected capacity change from 0 to 16384
[  161.731528][ T6216] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.996616][ T6225] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  162.133335][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.710'.
[  162.381992][ T6239] loop2: detected capacity change from 0 to 512
[  162.404404][ T6238] loop4: detected capacity change from 0 to 512
[  162.411416][ T6238] EXT4-fs: Ignoring removed nobh option
[  162.512072][ T6238] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix.
[  162.534176][ T6238] EXT4-fs (loop4): mount failed
[  162.551863][ T6239] EXT4-fs (loop2): 1 truncate cleaned up
[  162.566541][ T6239] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  162.616549][ T6244] loop3: detected capacity change from 0 to 4096
[  162.653383][ T6239] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.715: bg 0: block 465: padding at end of block bitmap is not set
[  162.671991][ T6239] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  162.689389][ T6239] EXT4-fs (loop2): This should not happen!! Data will be lost
[  162.689389][ T6239] 
[  162.709342][ T6239] EXT4-fs (loop2): Total free blocks count 0
[  162.720453][ T6244] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  162.733187][ T6239] EXT4-fs (loop2): Free/Dirty block details
[  162.739191][ T6239] EXT4-fs (loop2): free_blocks=0
[  162.806474][ T6239] EXT4-fs (loop2): dirty_blocks=62
[  162.842038][ T6239] EXT4-fs (loop2): Block reservation details
[  162.882335][ T5535] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  162.927608][ T6239] EXT4-fs (loop2): i_reserved_data_blocks=62
[  162.945517][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  163.045378][ T6252] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  163.073257][ T4337] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 60 with error 28
[  163.079878][ T5535] usb 5-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40
[  163.132164][ T5535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.140241][ T5535] usb 5-1: Product: syz
[  163.222873][ T5535] usb 5-1: Manufacturer: syz
[  163.230679][ T5535] usb 5-1: SerialNumber: syz
[  163.489217][ T5535] usb 5-1: 1:1: All rates were zero
[  163.513879][ T5535] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  163.637845][ T5535] usb 5-1: USB disconnect, device number 10
[  163.775884][ T6270] loop1: detected capacity change from 0 to 64
[  164.096360][ T6277] loop1: detected capacity change from 0 to 512
[  164.157555][ T4527] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  164.579226][ T6291] block2mtd: device name too long
[  165.352412][ T4275] Bluetooth: hci4: command 0x0405 tx timeout
[  165.369052][ T6320] loop1: detected capacity change from 0 to 1024
[  165.407455][ T6320] EXT4-fs: Ignoring removed bh option
[  165.460226][ T6320] EXT4-fs: inline encryption not supported
[  165.542573][ T5535] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  165.565868][ T6320] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.749: lblock 2 mapped to illegal pblock 2 (length 1)
[  165.600840][ T6320] EXT4-fs (loop1): Remounting filesystem read-only
[  165.614042][ T6320] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  165.622510][ T6320] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.749: Invalid inode table block 1 in block_group 0
[  165.638542][ T6320] EXT4-fs (loop1): Remounting filesystem read-only
[  165.651363][ T6320] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  165.672523][ T6320] EXT4-fs (loop1): Remounting filesystem read-only
[  165.679140][ T6320] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.749: mark_inode_dirty error
[  165.724574][ T6320] EXT4-fs (loop1): Remounting filesystem read-only
[  165.731181][ T6320] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  165.741566][ T5535] usb 5-1: Using ep0 maxpacket: 32
[  165.749052][ T5535] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.776558][ T6329] loop0: detected capacity change from 0 to 2048
[  165.783038][ T5535] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.798243][ T6320] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.749: Failed to acquire dquot type 0
[  165.811236][ T5535] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  165.821818][ T5535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.837295][ T6320] EXT4-fs (loop1): Remounting filesystem read-only
[  165.846121][ T6329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.873223][ T5535] usb 5-1: config 0 descriptor??
[  165.879690][ T6320] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  165.911964][ T5535] hub 5-1:0.0: USB hub found
[  165.939392][ T6320] EXT4-fs (loop1): Remounting filesystem read-only
[  165.970619][ T6320] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.749: mark_inode_dirty error
[  166.009103][ T6320] EXT4-fs (loop1): Remounting filesystem read-only
[  166.017598][ T6320] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  166.028125][ T6320] EXT4-fs (loop1): 1 orphan inode deleted
[  166.035182][ T6320] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  166.044951][    T9] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  166.072658][    T9] EXT4-fs (loop1): Remounting filesystem read-only
[  166.084245][ T5535] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  166.089706][    T9] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  166.092939][ T6320] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 16: comm syz.1.749: lblock 0 mapped to illegal pblock 16 (length 1)
[  166.118372][    T9] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0
[  166.151816][    T9] EXT4-fs (loop1): Remounting filesystem read-only
[  166.172816][ T6320] EXT4-fs (loop1): Remounting filesystem read-only
[  166.212303][ T6337] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 16: comm syz.1.749: lblock 0 mapped to illegal pblock 16 (length 1)
[  166.265260][ T6337] EXT4-fs (loop1): Remounting filesystem read-only
[  166.423153][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  166.434712][ T4279] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  166.489424][ T4279] EXT4-fs (loop1): Remounting filesystem read-only
[  166.512211][ T4279] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  166.517476][ T5535] hid-generic 0003:046D:C31C.000E: item fetching failed at offset 0/1
[  166.538770][ T4279] EXT4-fs (loop1): Remounting filesystem read-only
[  166.558823][ T4279] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  166.595668][ T5535] hid-generic: probe of 0003:046D:C31C.000E failed with error -22
[  166.605792][ T4279] EXT4-fs (loop1): Remounting filesystem read-only
[  166.839182][ T5535] usb 5-1: USB disconnect, device number 11
[  166.987965][ T6350] loop0: detected capacity change from 0 to 1024
[  167.185858][ T6354] program syz.3.761 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  167.206261][   T48] hfsplus: b-tree write err: -5, ino 25
[  167.217595][   T48] hfsplus: b-tree write err: -5, ino 4
[  167.239463][   T48] hfsplus: b-tree write err: -5, ino 2
[  167.681424][ T6364] loop0: detected capacity change from 0 to 16
[  167.711927][ T6352] loop1: detected capacity change from 0 to 32768
[  167.734125][ T6364] erofs: (device loop0): mounted with root inode @ nid 36.
[  167.785162][ T6364] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89
[  167.818332][ T6363] loop4: detected capacity change from 0 to 2048
[  167.837675][ T6364] syz.0.775: attempt to access beyond end of device
[  167.837675][ T6364] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  167.894349][ T6364] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89
[  167.934406][ T6363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.935658][ T6364] syz.0.775: attempt to access beyond end of device
[  167.935658][ T6364] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  168.004944][ T6370] sctp: [Deprecated]: syz.2.767 (pid 6370) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.004944][ T6370] Use struct sctp_sack_info instead
[  168.072490][ T6364] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[8192]
[  168.110768][   T26] audit: type=1800 audit(1786712774.660:20): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.775" name="file2" dev="loop0" ino=89 res=0 errno=0
[  168.287211][ T6376] loop2: detected capacity change from 0 to 256
[  168.387022][ T6376] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  168.529540][   T26] audit: type=1800 audit(1786712775.080:21): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.770" name="file1" dev="loop2" ino=1048618 res=0 errno=0
[  169.293593][ T6406] loop1: detected capacity change from 0 to 8
[  169.476822][ T6414] loop0: detected capacity change from 0 to 128
[  169.553156][ T6416] loop2: detected capacity change from 0 to 512
[  169.595456][ T6416] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  169.773123][ T4396] kworker/u4:7: attempt to access beyond end of device
[  169.773123][ T4396] loop0: rw=1, sector=145, nr_sectors = 424 limit=128
[  170.152516][    T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  170.186942][   T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  170.282021][ T6435] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  170.330411][ T6435] hpfs: filesystem error: improperly stopped
[  170.353736][    T7] usb 2-1: Using ep0 maxpacket: 32
[  170.364325][ T6435] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  170.373400][    T7] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  170.382454][   T27] usb 3-1: Using ep0 maxpacket: 32
[  170.388265][   T27] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  170.399247][ T6435] hpfs: You really don't want any checks? You are crazy...
[  170.407721][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.411649][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.433223][ T6435] hpfs: hpfs_map_sector(): read error
[  170.438734][ T6435] hpfs: code page support is disabled
[  170.449893][   T27] usb 3-1: config 0 descriptor??
[  170.467328][    T7] usb 2-1: config 0 descriptor??
[  170.474656][ T6435] hpfs: hpfs_map_4sectors(): unaligned read
[  170.485390][ T6435] hpfs: hpfs_map_4sectors(): unaligned read
[  170.491512][ T6435] hpfs: filesystem error: unable to find root dir
[  170.688351][    T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  170.695252][   T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  170.728000][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  170.733273][   T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  170.768100][    T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  170.785709][    T7] usb 2-1: media controller created
[  170.804432][   T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  170.811716][   T27] usb 3-1: media controller created
[  170.848682][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  170.939942][    T7] az6027: usb out operation failed. (-71)
[  170.950363][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  170.962821][    T7] az6027: usb out operation failed. (-71)
[  170.978555][    T7] stb0899_attach: Driver disabled by Kconfig
[  171.012273][    T7] az6027: no front-end attached
[  171.012273][    T7] 
[  171.035223][    T7] az6027: usb out operation failed. (-71)
[  171.044990][    T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  171.052764][   T27] az6027: usb out operation failed. (-71)
[  171.063818][    T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19
[  171.079289][ T6451] set_capacity_and_notify: 2 callbacks suppressed
[  171.079302][ T6451] loop3: detected capacity change from 0 to 1024
[  171.086286][   T27] az6027: usb out operation failed. (-71)
[  171.109594][   T27] stb0899_attach: Driver disabled by Kconfig
[  171.110501][    T7] dvb-usb: schedule remote query interval to 400 msecs.
[  171.128175][   T27] az6027: no front-end attached
[  171.128175][   T27] 
[  171.132068][ T6451] EXT4-fs: Ignoring removed orlov option
[  171.141949][    T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  171.152958][    T7] usb 2-1: USB disconnect, device number 6
[  171.193533][   T27] az6027: usb out operation failed. (-71)
[  171.206406][   T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  171.221712][   T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20
[  171.233967][ T6451] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  171.244902][   T27] dvb-usb: schedule remote query interval to 400 msecs.
[  171.251891][   T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  171.301883][   T27] usb 3-1: USB disconnect, device number 11
[  171.359343][    T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  171.463070][   T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  171.492712][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  171.718777][ T6463] sg_write: data in/out 1024/136 bytes for SCSI command 0x0-- guessing data in;
[  171.718777][ T6463]    program syz.3.805 not setting count and/or reply_len properly
[  171.882475][ T6469] input: syz1 as /devices/virtual/input/input21
[  171.966537][ T6473] usbcore.quirks: string doesn't fit in 127 chars.
[  172.236177][   T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  172.410189][ T6490] loop3: detected capacity change from 0 to 256
[  172.445744][ T6490] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  172.892808][ T6500] loop3: detected capacity change from 0 to 8192
[  172.917613][ T6500] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  172.931056][   T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  172.981571][ T6500] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  172.991165][ T6500] REISERFS (device loop3): using ordered data mode
[  172.998025][ T6500] reiserfs: using flush barriers
[  173.005102][ T6500] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  173.021905][ T6500] REISERFS (device loop3): checking transaction log (loop3)
[  173.050421][ T6494] loop4: detected capacity change from 0 to 32768
[  173.058438][ T6494] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.824 (6494)
[  173.096889][ T6500] REISERFS (device loop3): Using r5 hash to sort names
[  173.105867][ T6494] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.123056][ T6500] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  173.140087][ T6494] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  173.172220][ T6494] BTRFS info (device loop4): metadata ratio 2
[  173.178403][ T6494] BTRFS info (device loop4): force zlib compression, level 3
[  173.182394][   T27] usb 2-1: Using ep0 maxpacket: 8
[  173.213358][   T27] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  173.237710][ T6509] device bridge0 entered promiscuous mode
[  173.249330][ T6494] BTRFS info (device loop4): enabling auto defrag
[  173.252612][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.270257][ T6509] device macsec1 entered promiscuous mode
[  173.297518][   T27] pvrusb2: Hardware description: Terratec Grabster AV400
[  173.298773][ T6494] BTRFS info (device loop4): max_inline at 0
[  173.326579][   T27] pvrusb2: **********
[  173.343239][   T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  173.345024][ T6494] BTRFS info (device loop4): using free space tree
[  173.380748][   T27] pvrusb2: Important functionality might not be entirely working.
[  173.418876][   T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  173.434145][   T27] pvrusb2: **********
[  173.504356][ T2312] pvrusb2: Invalid write control endpoint
[  173.710181][ T6496] pvrusb2: Invalid write control endpoint
[  173.725731][ T1172] usb 2-1: USB disconnect, device number 7
[  173.780047][ T2312] pvrusb2: Invalid write control endpoint
[  173.801946][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  173.882374][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  173.921475][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  173.970209][ T2312] pvrusb2: Device being rendered inoperable
[  173.988413][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  174.011799][ T4284] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  174.034136][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  174.092382][ T2312] pvrusb2: Attached sub-driver cx25840
[  174.098167][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  174.138198][ T6545] loop3: detected capacity change from 0 to 2048
[  174.172410][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  174.207051][ T6545] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  175.018845][ T6546] loop0: detected capacity change from 0 to 32768
[  175.026285][ T6566] loop1: detected capacity change from 0 to 256
[  175.727145][ T6579] program syz.0.854 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  175.902296][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.142711][ T6591] loop4: detected capacity change from 0 to 128
[  176.436853][ T6598] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  176.464002][ T2931] kworker/u4:5: attempt to access beyond end of device
[  176.464002][ T2931] loop4: rw=1, sector=145, nr_sectors = 760 limit=128
[  176.586722][ T6581] loop3: detected capacity change from 0 to 32768
[  176.668630][ T6603] netlink: 26332 bytes leftover after parsing attributes in process `syz.2.865'.
[  176.684798][ T6581] XFS (loop3): Mounting V5 Filesystem
[  176.812333][ T6581] XFS (loop3): Ending clean mount
[  177.141290][ T4281] XFS (loop3): Unmounting Filesystem
[  177.476191][ T6615] loop0: detected capacity change from 0 to 32768
[  177.557164][ T6615] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  177.604223][ T6636] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received
[  177.628961][ T6615] (syz.0.866,6615,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  177.666875][ T6615] (syz.0.866,6615,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 124554051584 failed -12
[  177.718385][ T6615] (syz.0.866,6615,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12
[  177.764394][ T6615] (syz.0.866,6615,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12
[  177.782293][ T6615] (syz.0.866,6615,0):ocfs2_test_inode_bit:2896 ERROR: status = -12
[  177.833665][ T6615] (syz.0.866,6615,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  177.861030][ T6638] (syz.0.866,6638,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  177.932367][ T6638] (syz.0.866,6638,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 124554051584 failed -12
[  177.953564][ T6644] zero sized request
[  178.052182][ T6638] (syz.0.866,6638,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12
[  178.060772][ T6638] (syz.0.866,6638,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12
[  178.108320][ T6638] (syz.0.866,6638,1):ocfs2_test_inode_bit:2896 ERROR: status = -12
[  178.125235][ T6638] (syz.0.866,6638,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  178.232619][ T4325] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  178.245634][ T4273] ocfs2: Unmounting device (7,0) on (node local)
[  178.268125][ T6651] loop3: detected capacity change from 0 to 512
[  178.350016][ T6651] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  178.432194][ T4325] usb 2-1: Using ep0 maxpacket: 32
[  178.439206][ T4325] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  178.455344][ T6651] EXT4-fs (loop3): shut down requested (2)
[  178.501864][ T4325] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  178.542333][ T4325] usb 2-1: config 0 interface 0 has no altsetting 0
[  178.561755][ T4325] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  178.602388][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.618568][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  178.630919][ T4325] usb 2-1: Product: syz
[  178.652265][ T4325] usb 2-1: Manufacturer: syz
[  178.656909][ T4325] usb 2-1: SerialNumber: syz
[  178.674000][ T4325] usb 2-1: config 0 descriptor??
[  179.025087][ T6668] loop4: detected capacity change from 0 to 2048
[  179.045147][ T6668] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  179.072010][ T6649] loop2: detected capacity change from 0 to 32768
[  179.097302][ T6671] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.104975][ T4325] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  179.126655][ T6668] NILFS error (device loop4): nilfs_readdir: zero-length directory entry
[  179.136495][ T6649] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.878 (6649)
[  179.161960][ T6668] Remounting filesystem read-only
[  179.176167][ T6649] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  179.215913][ T6649] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  179.249958][ T6649] BTRFS info (device loop2): setting nodatacow, compression disabled
[  179.272236][ T6649] BTRFS info (device loop2): setting datasum, datacow enabled
[  179.279825][ T6649] BTRFS info (device loop2): force clearing of disk cache
[  179.349623][ T6649] BTRFS info (device loop2): enabling ssd optimizations
[  179.373192][ T6649] BTRFS info (device loop2): using spread ssd allocation scheme
[  179.411327][ T6649] BTRFS info (device loop2): turning on sync discard
[  179.475281][ T6649] BTRFS info (device loop2): turning on flush-on-commit
[  179.522389][ T4325] usb 2-1: USB disconnect, device number 8
[  179.532275][ T6649] BTRFS info (device loop2): not using ssd optimizations
[  179.559111][ T6649] BTRFS info (device loop2): not using spread ssd allocation scheme
[  179.581872][ T6649] BTRFS info (device loop2): using free space tree
[  179.612746][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'.
[  179.627026][ T6673] alloc_netdev: Unable to allocate device with zero queues
[  179.838460][ T6649] BTRFS info (device loop2): rebuilding free space tree
[  179.997550][ T6707] loop4: detected capacity change from 0 to 2048
[  180.023777][ T6649] BTRFS info (device loop2): balance: start -d -m
[  180.081198][ T6707] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  180.100294][ T6649] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[  180.453426][ T6649] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata
[  180.617774][ T6649] BTRFS info (device loop2): balance: canceled
[  180.851142][ T4274] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  181.479695][ T6758] loop1: detected capacity change from 0 to 128
[  181.563537][ T6758] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  181.583739][ T6758] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  181.658877][ T6758] EXT4-fs warning (device loop1): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new)
[  181.683715][ T6758] EXT4-fs warning (device loop1): ext4_group_extend:1899: can't read last block, resize aborted
[  181.950021][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  182.498857][ T6790] loop1: detected capacity change from 0 to 8192
[  183.102299][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  183.184546][ T6808] loop1: detected capacity change from 0 to 4096
[  183.229893][ T6791] loop4: detected capacity change from 0 to 32768
[  183.287709][ T6808] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  183.358143][ T6791] XFS (loop4): Mounting V5 Filesystem
[  183.456997][ T6791] XFS (loop4): Ending clean mount
[  183.643491][ T4279] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  183.746056][ T4284] XFS (loop4): Unmounting Filesystem
[  184.341939][ T6839] loop1: detected capacity change from 0 to 8192
[  184.368437][ T6839] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  184.455585][ T6839] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  184.468197][ T6839] REISERFS (device loop1): using ordered data mode
[  184.475976][ T6839] reiserfs: using flush barriers
[  184.552732][ T6839] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  184.642661][ T6839] REISERFS (device loop1): checking transaction log (loop1)
[  184.870795][ T6839] REISERFS (device loop1): Using tea hash to sort names
[  184.892811][ T6839] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  185.240204][ T6849] loop4: detected capacity change from 0 to 32768
[  185.319094][ T6849] XFS (loop4): Mounting V5 Filesystem
[  185.327651][ T6673] netdevsim: probe of netdevsim10 failed with error -12
[  185.396861][ T6849] XFS (loop4): Ending clean mount
[  185.591077][ T4284] XFS (loop4): Unmounting Filesystem
[  186.434125][ T6887] netlink: 128 bytes leftover after parsing attributes in process `syz.1.947'.
[  186.451034][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'.
[  186.772215][ T4342] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  186.789531][ T6897] loop1: detected capacity change from 0 to 64
[  186.850952][ T6897] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop1:00000002
[  186.928262][ T6871] loop2: detected capacity change from 0 to 40427
[  186.972293][ T4342] usb 1-1: Using ep0 maxpacket: 8
[  186.979614][ T4342] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  187.009201][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.021221][ T6871] F2FS-fs (loop2): invalid crc value
[  187.037476][ T4342] pvrusb2: Hardware description: Terratec Grabster AV400
[  187.062387][ T4342] pvrusb2: **********
[  187.066581][ T4342] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  187.102317][ T4342] pvrusb2: Important functionality might not be entirely working.
[  187.120653][ T4342] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  187.132316][ T4673] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  187.139975][ T6871] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  187.162346][ T4342] pvrusb2: **********
[  187.241758][ T2312] pvrusb2: Invalid write control endpoint
[  187.354249][ T4673] usb 4-1: Using ep0 maxpacket: 16
[  187.361437][ T4673] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.404686][ T4673] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.432176][ T4673] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  187.467537][ T6889] pvrusb2: Invalid write control endpoint
[  187.474536][ T4673] usb 4-1: config 0 interface 0 has no altsetting 0
[  187.491466][ T4673] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  187.520504][ T2312] pvrusb2: Invalid write control endpoint
[  187.536711][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  187.546343][ T4673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.566592][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  187.575471][ T6871] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  187.584576][ T4673] usb 4-1: config 0 descriptor??
[  187.592681][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  187.604825][ T6901] loop4: detected capacity change from 0 to 32768
[  187.611205][ T4342] usb 1-1: USB disconnect, device number 8
[  187.632033][ T2312] pvrusb2: Device being rendered inoperable
[  187.650750][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  187.663332][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  187.682064][ T6901] XFS (loop4): Mounting V5 Filesystem
[  187.717770][ T2312] pvrusb2: Attached sub-driver cx25840
[  187.740550][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  187.809019][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  187.888368][ T6901] XFS (loop4): Ending clean mount
[  187.941625][ T6901] XFS (loop4): Quotacheck needed: Please wait.
[  188.043643][ T6901] XFS (loop4): Quotacheck: Done.
[  188.172061][ T4274] syz-executor: attempt to access beyond end of device
[  188.172061][ T4274] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  188.235323][ T4342] usb 4-1: USB disconnect, device number 6
[  188.310991][ T4284] XFS (loop4): Unmounting Filesystem
[  189.219989][ T6943] loop3: detected capacity change from 0 to 8
[  189.483430][ T6749] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  189.573942][ T6961] netlink: 40 bytes leftover after parsing attributes in process `syz.3.972'.
[  189.684348][ T6749] usb 5-1: Using ep0 maxpacket: 8
[  189.697327][ T6749] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  189.735186][ T6749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.780139][ T6749] pvrusb2: Hardware description: Terratec Grabster AV400
[  189.809615][ T6749] pvrusb2: **********
[  189.818745][ T6965] kAFS: bad VL server IP address
[  189.835240][ T6749] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  189.848072][ T6971] device bond0 entered promiscuous mode
[  189.872970][ T6971] device bond_slave_0 entered promiscuous mode
[  189.876249][ T6749] pvrusb2: Important functionality might not be entirely working.
[  189.884547][ T6971] device bond_slave_1 entered promiscuous mode
[  189.914179][ T6971] device batadv_slave_0 entered promiscuous mode
[  189.918135][ T6749] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  189.962241][ T6749] pvrusb2: **********
[  189.992061][ T2312] pvrusb2: Invalid write control endpoint
[  190.207665][ T6946] pvrusb2: Invalid write control endpoint
[  190.236217][ T2312] pvrusb2: Invalid write control endpoint
[  190.248526][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  190.259544][ T6749] usb 5-1: USB disconnect, device number 12
[  190.288300][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  190.318541][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  190.345368][ T2312] pvrusb2: Device being rendered inoperable
[  190.363316][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  190.383595][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  190.425175][ T2312] pvrusb2: Attached sub-driver cx25840
[  190.449920][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  190.491367][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  190.764400][ T6999] loop3: detected capacity change from 0 to 512
[  190.843384][   T26] audit: type=1326 audit(1786712797.400:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7fc00000
[  191.022266][   T26] audit: type=1326 audit(1786712797.430:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f38e679e0d9 code=0x7fc00000
[  191.097316][   T26] audit: type=1326 audit(1786712797.430:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7fc00000
[  191.198131][   T26] audit: type=1326 audit(1786712797.430:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7fc00000
[  191.252679][   T26] audit: type=1326 audit(1786712797.430:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7fc00000
[  191.336197][   T26] audit: type=1326 audit(1786712797.430:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7fc00000
[  191.360696][ T5143] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  191.401039][   T26] audit: type=1326 audit(1786712797.430:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7fc00000
[  191.538194][   T26] audit: type=1326 audit(1786712797.430:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7fc00000
[  191.563623][ T5143] usb 1-1: not running at top speed; connect to a high speed hub
[  191.591073][ T5143] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.641574][ T5143] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  191.650818][   T26] audit: type=1326 audit(1786712797.430:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7fc00000
[  191.681410][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.692333][ T7032] netlink: 'syz.3.996': attribute type 9 has an invalid length.
[  191.700005][ T7032] netlink: 668 bytes leftover after parsing attributes in process `syz.3.996'.
[  191.709153][ T7034] loop1: detected capacity change from 0 to 128
[  191.737051][ T5143] usb 1-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  191.783041][ T7034] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  191.819203][   T26] audit: type=1326 audit(1786712797.430:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e679e0d9 code=0x7fc00000
[  191.864251][ T7034] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  191.949678][ T7034] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x14)
[  192.184586][ T7050] loop4: detected capacity change from 0 to 1024
[  192.219060][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  192.380777][ T7050] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  192.420574][ T7050] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.749718][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  192.859447][ T7047] loop2: detected capacity change from 0 to 131072
[  192.871407][ T5143] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  192.890817][ T1172] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  192.916301][ T5143] videodev: could not get a free minor
[  192.922981][ T7047] F2FS-fs (loop2): invalid crc value
[  192.928478][ T5143] uvcvideo 1-1:1.1: Failed to register meta-cap device (-23).
[  192.967943][ T7047] F2FS-fs (loop2): Found nat_bits in checkpoint
[  193.016530][ T7047] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  193.060896][ T7047] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  193.094070][ T7047] F2FS-fs (loop2): access invalid blkaddr:36
[  193.100587][ T7047] CPU: 1 PID: 7047 Comm: syz.2.1000 Not tainted syzkaller #0
[  193.107999][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  193.112561][ T1172] usb 2-1: Using ep0 maxpacket: 32
[  193.118079][ T7047] Call Trace:
[  193.126535][ T7047]  <TASK>
[  193.129492][ T7047]  dump_stack_lvl+0x188/0x24e
[  193.134255][ T7047]  ? show_regs_print_info+0x12/0x12
[  193.139528][ T7047]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  193.145376][ T7047]  ? f2fs_get_dnode_of_data+0x129b/0x1c20
[  193.151157][ T7047]  f2fs_is_valid_blkaddr+0xc4a/0x1260
[  193.156565][ T7047]  f2fs_get_read_data_page+0x40f/0x640
[  193.162046][ T7047]  ? f2fs_reserve_block+0x240/0x240
[  193.167295][ T7047]  ? folio_unlock+0x114/0x2f0
[  193.171988][ T7047]  ? folio_unlock+0x114/0x2f0
[  193.176689][ T7047]  f2fs_get_new_data_page+0x3c8/0x600
[  193.182092][ T7047]  ? lock_page+0x2b0/0x2b0
[  193.186544][ T7047]  ? has_not_enough_free_secs+0xe20/0xe20
[  193.192283][ T7047]  ? __kasan_slab_alloc+0x6b/0x80
[  193.197321][ T7047]  ? memset+0x1e/0x40
[  193.201319][ T7047]  f2fs_add_regular_entry+0x5c7/0xd30
[  193.206724][ T7047]  f2fs_add_dentry+0xdd/0x1d0
[  193.211470][ T7047]  f2fs_do_add_link+0x1c8/0x2a0
[  193.216348][ T7047]  ? __might_sleep+0xd0/0xd0
[  193.220961][ T7047]  ? f2fs_add_dentry+0x1d0/0x1d0
[  193.225916][ T7047]  ? up_read+0x20/0x20
[  193.230005][ T7047]  ? f2fs_lookup+0x4be/0x800
[  193.234648][ T7047]  ? down_read+0x1a8/0x2d0
[  193.239082][ T7047]  f2fs_create+0x74a/0xa30
[  193.243519][ T7047]  ? f2fs_lookup+0x800/0x800
[  193.248143][ T7047]  path_openat+0x11b9/0x2f10
[  193.252791][ T7047]  ? do_filp_open+0x420/0x420
[  193.257513][ T7047]  do_filp_open+0x1ee/0x420
[  193.262036][ T7047]  ? vfs_tmpfile+0x470/0x470
[  193.266681][ T7047]  ? _raw_spin_unlock+0x24/0x40
[  193.271546][ T7047]  ? alloc_fd+0x590/0x640
[  193.275988][ T7047]  do_sys_openat2+0x14b/0x4f0
[  193.280693][ T7047]  ? do_sys_open+0xe0/0xe0
[  193.285138][ T7047]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  193.291144][ T7047]  ? lock_chain_count+0x20/0x20
[  193.296106][ T7047]  __x64_sys_openat+0x135/0x160
[  193.300993][ T7047]  do_syscall_64+0x4c/0xa0
[  193.305440][ T7047]  ? clear_bhb_loop+0x60/0xb0
[  193.310163][ T7047]  ? clear_bhb_loop+0x60/0xb0
[  193.314894][ T7047]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  193.320821][ T7047] RIP: 0033:0x7f38e679e0d9
[  193.325265][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.344915][ T7047] RSP: 002b:00007f38e770d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  193.353356][ T7047] RAX: ffffffffffffffda RBX: 00007f38e6a25fa0 RCX: 00007f38e679e0d9
[  193.361344][ T7047] RDX: 0000000000000140 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  193.369327][ T7047] RBP: 00007f38e6835024 R08: 0000000000000000 R09: 0000000000000000
[  193.377311][ T7047] R10: 00000000000000a3 R11: 0000000000000246 R12: 0000000000000000
[  193.385341][ T7047] R13: 00007f38e6a26038 R14: 00007f38e6a25fa0 R15: 00007ffe8fde30b8
[  193.393365][ T7047]  </TASK>
[  193.407355][ T6748] usb 1-1: USB disconnect, device number 9
[  193.447687][ T1172] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  193.505696][ T7070] loop4: detected capacity change from 0 to 128
[  193.509480][ T1172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.573085][ T1172] usb 2-1: config 0 descriptor??
[  193.588411][ T7070] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  193.612290][ T7070] System zones: 1-3, 19-19, 35-36
[  193.660702][ T7070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  193.690485][ T7070] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  193.805330][ T1172] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  193.832556][ T1172] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  193.851761][ T1172] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  193.877069][ T1172] usb 2-1: media controller created
[  193.921479][ T1172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  193.985814][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  193.992208][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.015813][ T1172] az6027: usb out operation failed. (-71)
[  194.031199][ T1172] az6027: usb out operation failed. (-71)
[  194.037321][ T1172] stb0899_attach: Driver disabled by Kconfig
[  194.039600][ T4284] EXT4-fs (loop4): unmounting filesystem.
[  194.052200][ T1172] az6027: no front-end attached
[  194.052200][ T1172] 
[  194.089020][ T1172] az6027: usb out operation failed. (-71)
[  194.105538][ T1172] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  194.133275][ T1172] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22
[  194.194592][ T1172] dvb-usb: schedule remote query interval to 400 msecs.
[  194.201619][ T1172] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  194.238567][ T7084] netem: incorrect ge model size
[  194.261607][ T7084] netem: change failed
[  194.266626][ T1172] usb 2-1: USB disconnect, device number 9
[  194.417857][ T1172] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  194.510403][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'.
[  194.718382][   T53] device offline error, dev sda, sector 721238 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  194.729411][   T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90154)
[  194.741516][   T53] Buffer I/O error on device sda1, logical block 90116
[  194.749280][   T53] Buffer I/O error on device sda1, logical block 90117
[  194.756283][   T53] Buffer I/O error on device sda1, logical block 90118
[  194.763350][   T53] Buffer I/O error on device sda1, logical block 90119
[  194.770259][   T53] device offline error, dev sda, sector 721278 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[  194.781317][   T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90159)
[  194.792882][   T53] Buffer I/O error on device sda1, logical block 90121
[  194.799774][   T53] Buffer I/O error on device sda1, logical block 90122
[  194.807031][   T53] Buffer I/O error on device sda1, logical block 90123
[  194.813987][   T53] Buffer I/O error on device sda1, logical block 90124
[  194.820879][   T53] Buffer I/O error on device sda1, logical block 90125
[  194.828217][   T53] device offline error, dev sda, sector 721334 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  194.838716][   T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90166)
[  194.850500][   T53] Buffer I/O error on device sda1, logical block 90128
[  194.857496][   T53] device offline error, dev sda, sector 721366 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  194.868311][   T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90170)
[  194.879920][   T53] device offline error, dev sda, sector 721414 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[  194.890754][   T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90176)
[  194.902964][   T53] device offline error, dev sda, sector 721462 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  194.914015][   T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90182)
[  194.925691][   T53] device offline error, dev sda, sector 721558 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[  194.936206][   T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90194)
[  194.952525][   T53] device offline error, dev sda, sector 721606 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  194.963227][   T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90200)
[  194.974980][   T53] device offline error, dev sda, sector 721638 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  194.985487][   T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90204)
[  194.997133][   T53] device offline error, dev sda, sector 721670 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  195.007600][   T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90208)
[  195.154269][ T3601] Aborting journal on device sda1-8.
[  195.163369][   T53] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[  195.177031][ T3601] JBD2: I/O error when updating journal superblock for sda1-8.
[  195.193664][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  195.201249][ T7097] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1020: Detected aborted journal
[  195.214572][   T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  195.225263][ T4260] EXT4-fs (sda1): I/O error while writing superblock
[  195.274349][ T7101] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1021: Detected aborted journal
[  195.291184][ T4260] EXT4-fs (sda1): Remounting filesystem read-only
[  195.327311][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  195.340370][   T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  195.349865][ T7101] EXT4-fs (sda1): previous I/O error to superblock detected
[  195.361277][   T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  195.372331][ T7097] EXT4-fs (sda1): I/O error while writing superblock
[  195.379049][ T7097] EXT4-fs (sda1): Remounting filesystem read-only
[  195.382592][ T7101] EXT4-fs (sda1): Remounting filesystem read-only
[  195.402042][ T7093] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1018: Detected aborted journal
[  195.404235][   T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  195.421646][ T4260] EXT4-fs (sda1): I/O error while writing superblock
[  195.433515][ T7101] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1021: Detected aborted journal
[  195.434593][ T7097] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1020: Detected aborted journal
[  195.452817][ T7101] EXT4-fs (sda1): previous I/O error to superblock detected
[  195.462209][ T4260] EXT4-fs (sda1): Remounting filesystem read-only
[  195.472687][   T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  195.480932][ T7093] EXT4-fs (sda1): previous I/O error to superblock detected
[  195.492329][   T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  195.499152][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  195.504150][ T7093] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1018: Detected aborted journal
[  195.512659][   T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  195.531316][   T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  195.547010][ T7097] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1020: Detected aborted journal
[  195.562407][   T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  195.738727][ T7112] capability: warning: `syz.0.1026' uses deprecated v2 capabilities in a way that may be insecure
[  195.755352][ T7113] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  195.770532][ T7113] xt_hashlimit: size too large, truncated to 1048576
[  195.789662][ T7113] xt_hashlimit: max too large, truncated to 1048576
[  196.022846][ T7121] loop2: detected capacity change from 0 to 512
[  196.041953][ T7094] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  196.087596][ T7121] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  196.198602][ T7121] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1030: bg 0: block 104: invalid block bitmap
[  196.327506][ T7121] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  196.398863][ T7121] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1030: invalid indirect mapped block 1 (level 1)
[  196.435639][ T7121] EXT4-fs (loop2): 1 truncate cleaned up
[  196.441392][ T7121] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  196.740643][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  196.848616][ T7119] loop4: detected capacity change from 0 to 32768
[  196.949079][ T7141] loop2: detected capacity change from 0 to 1024
[  197.036273][ T7141] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.1038: lblock 2 mapped to illegal pblock 2 (length 1)
[  197.052466][ T4342] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  197.061670][ T7141] __quota_error: 6 callbacks suppressed
[  197.061686][ T7141] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  197.077253][ T7141] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.1038: lblock 0 mapped to illegal pblock 48 (length 1)
[  197.091729][ T7141] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  197.100777][ T7141] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1038: Failed to acquire dquot type 0
[  197.114466][ T7141] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  197.124156][ T7141] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.1038: mark_inode_dirty error
[  197.173543][ T7141] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  197.192050][ T7141] EXT4-fs (loop2): 1 orphan inode deleted
[  197.192508][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  197.202697][    T9] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  197.230290][ T7141] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  197.242456][    T9] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  197.270942][ T7141] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm syz.2.1038: lblock 1 mapped to illegal pblock 1 (length 1)
[  197.292355][ T4342] usb 1-1: Using ep0 maxpacket: 32
[  197.299481][ T4342] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  197.308803][    T9] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0
[  197.352701][ T7141] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 1
[  197.359614][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.388595][ T7141] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 60928
[  197.413673][ T4342] usb 1-1: config 0 descriptor??
[  197.428658][ T7150] loop1: detected capacity change from 0 to 512
[  197.439885][ T7141] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1038: Failed to acquire dquot type 0
[  197.516888][   T26] audit: type=1107 audit(1786712804.070:38): pid=7151 uid=0 auid=0 ses=1 subj=unconfined msg='.'
[  197.530915][ T7150] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  197.602448][ T7150] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.624200][ T4342] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  197.634807][ T4342] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  197.644779][ T4342] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  197.651959][ T4342] usb 1-1: media controller created
[  197.669645][ T4342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  197.742941][ T7156] loop4: detected capacity change from 0 to 64
[  197.763649][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  197.769658][    T9] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  197.815895][    T9] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  197.833643][ T4342] az6027: usb out operation failed. (-71)
[  197.852871][    T9] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0
[  197.864446][ T4342] az6027: usb out operation failed. (-71)
[  197.870200][ T4342] stb0899_attach: Driver disabled by Kconfig
[  197.905518][ T4342] az6027: no front-end attached
[  197.905518][ T4342] 
[  197.920000][ T4274] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  197.940326][ T4342] az6027: usb out operation failed. (-71)
[  197.950076][ T4342] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  197.959640][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  197.962780][ T4274] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  197.992290][ T4342] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23
[  198.026454][ T4274] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  198.059098][ T4342] dvb-usb: schedule remote query interval to 400 msecs.
[  198.089965][ T4342] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  198.143558][ T4342] usb 1-1: USB disconnect, device number 10
[  198.260673][ T4342] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  198.349735][ T7146] loop3: detected capacity change from 0 to 32768
[  198.447544][   T26] audit: type=1800 audit(1786712805.000:39): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1040" name="file2" dev="loop3" ino=5 res=0 errno=0
[  198.541555][   T26] audit: type=1800 audit(1786712805.030:40): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1040" name="file2" dev="loop3" ino=5 res=0 errno=0
[  198.619338][ T7164] loop2: detected capacity change from 0 to 4096
[  198.726807][ T7169] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.231078][ T7185] input: syz0 as /devices/virtual/input/input24
[  199.243274][ T6748] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  199.456248][ T6748] usb 3-1: Using ep0 maxpacket: 32
[  199.466503][ T6748] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  199.510337][ T6748] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  199.542197][ T6748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.550259][ T6748] usb 3-1: Product: syz
[  199.582421][ T6748] usb 3-1: Manufacturer: syz
[  199.587065][ T6748] usb 3-1: SerialNumber: syz
[  199.677365][ T7171] loop4: detected capacity change from 0 to 40427
[  199.718536][ T7171] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  199.737109][ T7171] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  199.780500][ T7171] F2FS-fs (loop4): Found nat_bits in checkpoint
[  199.843849][ T6748] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  199.852419][ T6748] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  199.908640][ T6748] usb 3-1: USB disconnect, device number 12
[  199.934910][ T7171] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  199.982292][ T7171] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  199.998954][ T7183] loop1: detected capacity change from 0 to 32768
[  200.096824][ T7183] XFS (loop1): Mounting V5 Filesystem
[  200.194049][ T4527] udevd[4527]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  200.210436][ T4260] EXT4-fs error: 196 callbacks suppressed
[  200.210452][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  200.234219][ T7183] XFS (loop1): Ending clean mount
[  200.265055][ T7178] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1055: Detected aborted journal
[  200.286118][ T7170] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1051: Detected aborted journal
[  200.314154][ T4260] EXT4-fs: 221 callbacks suppressed
[  200.314168][ T4260] EXT4-fs (sda1): Remounting filesystem read-only
[  200.332319][ T7178] EXT4-fs (sda1): Remounting filesystem read-only
[  200.345469][ T7182] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1057: Detected aborted journal
[  200.347688][ T7178] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1055: Detected aborted journal
[  200.367726][ T7182] EXT4-fs (sda1): Remounting filesystem read-only
[  200.377199][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  200.398944][ T7182] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1057: Detected aborted journal
[  200.422837][ T4260] EXT4-fs (sda1): Remounting filesystem read-only
[  200.432146][ T7170] EXT4-fs (sda1): Remounting filesystem read-only
[  200.439762][ T7170] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1051: Detected aborted journal
[  200.443214][ T7171] syz.4.1051: attempt to access beyond end of device
[  200.443214][ T7171] loop4: rw=2049, sector=53248, nr_sectors = 2056 limit=40427
[  200.465309][ T7178] EXT4-fs (sda1): Remounting filesystem read-only
[  200.465424][ T7178] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1055: Detected aborted journal
[  200.482841][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  200.482871][ T4260] EXT4-fs (sda1): Remounting filesystem read-only
[  200.529715][ T7207] EXT4-fs (sda1): Remounting filesystem read-only
[  200.532340][ T7182] EXT4-fs (sda1): Remounting filesystem read-only
[  200.556764][ T7207] EXT4-fs (sda1): Remounting filesystem read-only
[  200.628256][ T4279] XFS (loop1): Unmounting Filesystem
[  200.639497][ T7190] loop0: detected capacity change from 0 to 40427
[  200.698855][ T7190] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  200.721249][ T7190] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  200.761502][ T4284] syz-executor: attempt to access beyond end of device
[  200.761502][ T4284] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  200.866731][ T7190] F2FS-fs (loop0): Found nat_bits in checkpoint
[  201.057689][ T7190] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  201.071603][ T7190] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  201.217450][ T5535] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  201.382500][ T4342] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  201.422621][ T5535] usb 3-1: Using ep0 maxpacket: 8
[  201.434087][ T5535] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  201.449435][ T5535] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  201.479923][ T5535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.499664][ T5535] usb 3-1: Product: syz
[  201.504146][ T5535] usb 3-1: Manufacturer: syz
[  201.508779][ T5535] usb 3-1: SerialNumber: syz
[  201.542875][ T5535] usb 3-1: config 0 descriptor??
[  201.567817][ T5535] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  201.592424][ T4342] usb 4-1: Using ep0 maxpacket: 8
[  201.599326][ T5535] usb 3-1: setting power ON
[  201.605574][ T4342] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  201.622637][ T5535] dvb-usb: bulk message failed: -22 (2/0)
[  201.629484][ T4342] usb 4-1: config 179 has no interface number 0
[  201.645808][ T5535] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  201.655570][ T4342] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  201.679028][ T4342] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  201.692477][ T5535] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  201.701018][ T5535] usb 3-1: media controller created
[  201.709646][ T4342] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  201.753230][ T4342] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  201.769748][ T7215] dvb-usb: bulk message failed: -22 (3/0)
[  201.778843][ T5535] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  201.787370][ T7215] dvb-usb: bulk message failed: -22 (3/0)
[  201.795449][ T7215] dvb-usb: bulk message failed: -22 (5/0)
[  201.802318][ T4342] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  201.831903][ T5535] usb 3-1: selecting invalid altsetting 6
[  201.838516][ T4342] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  201.847897][ T5535] usb 3-1: digital interface selection failed (-22)
[  201.854937][ T5535] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  201.864004][ T4342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.873968][ T5535] usb 3-1: setting power OFF
[  201.879174][ T5535] dvb-usb: bulk message failed: -22 (2/0)
[  201.907256][ T7220] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  201.921691][ T5535] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  201.952872][ T5535] (NULL device *): no alternate interface
[  202.050817][ T5535] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  202.130536][ T5535] usb 3-1: USB disconnect, device number 13
[  202.170576][ T7232] loop1: detected capacity change from 0 to 1024
[  202.360392][ T7220] loop3: detected capacity change from 0 to 8
[  202.447802][ T7220] SQUASHFS error: zlib decompression failed, data probably corrupt
[  202.467181][ T7234] loop0: detected capacity change from 0 to 512
[  202.482971][ T7220] SQUASHFS error: Failed to read block 0x9b: -5
[  202.518694][ T7220] SQUASHFS error: Unable to read metadata cache entry [99]
[  202.573199][ T7220] SQUASHFS error: Unable to read inode 0x104
[  202.611089][ T7234] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1071: invalid indirect mapped block 4294967295 (level 1)
[  202.636149][ T6749] usb 4-1: USB disconnect, device number 7
[  202.636178][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  202.650477][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  202.732744][ T7234] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1071: invalid indirect mapped block 4294967295 (level 1)
[  202.811208][ T7234] EXT4-fs (loop0): 2 truncates cleaned up
[  202.820082][ T7242] loop1: detected capacity change from 0 to 128
[  202.841652][ T7234] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  202.943803][ T7234] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1071: bg 0: block 5: invalid block bitmap
[  202.989165][ T7234] EXT4-fs error (device loop0) in ext4_setattr:5695: error 28
[  203.121115][ T7247] loop1: detected capacity change from 0 to 512
[  203.130478][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  203.195486][ T7247] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  203.259387][ T7247] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.544710][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  205.229316][ T7315] EXT4-fs error: 164 callbacks suppressed
[  205.229332][ T7315] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1108: Detected aborted journal
[  205.271096][ T7315] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1108: Detected aborted journal
[  205.310397][ T7317] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1109: Detected aborted journal
[  205.325490][ T7315] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1108: Detected aborted journal
[  205.344169][ T7315] EXT4-fs: 160 callbacks suppressed
[  205.344181][ T7315] EXT4-fs (sda1): Remounting filesystem read-only
[  205.352315][ T7317] EXT4-fs (sda1): Remounting filesystem read-only
[  205.366662][ T7315] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1108: Detected aborted journal
[  205.379170][ T7315] EXT4-fs (sda1): Remounting filesystem read-only
[  205.390628][ T7315] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1108: Detected aborted journal
[  205.402005][ T6748] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  205.413246][ T7315] EXT4-fs (sda1): Remounting filesystem read-only
[  205.420333][ T7317] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1109: Detected aborted journal
[  205.421078][ T7315] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1108: Detected aborted journal
[  205.443414][ T7315] EXT4-fs (sda1): Remounting filesystem read-only
[  205.471991][ T7317] EXT4-fs (sda1): Remounting filesystem read-only
[  205.493484][ T7317] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1109: Detected aborted journal
[  205.545256][ T7317] EXT4-fs (sda1): Remounting filesystem read-only
[  205.589554][ T7317] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1109: Detected aborted journal
[  205.603704][ T6748] usb 3-1: not running at top speed; connect to a high speed hub
[  205.617521][ T7320] EXT4-fs (sda1): Remounting filesystem read-only
[  205.632696][ T7317] EXT4-fs (sda1): Remounting filesystem read-only
[  205.639349][ T7320] EXT4-fs (sda1): Remounting filesystem read-only
[  205.640778][ T6748] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.672474][ T6748] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  205.722196][ T6748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.748411][ T6748] usb 3-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  205.884491][ T7325] loop3: detected capacity change from 0 to 1024
[  205.891787][ T7325] EXT4-fs: Ignoring removed nomblk_io_submit option
[  206.007272][ T7333] loop1: detected capacity change from 0 to 256
[  206.023067][ T7325] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.1112: lblock 2 mapped to illegal pblock 2 (length 1)
[  206.087731][ T7325] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  206.152309][ T7325] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.1112: lblock 0 mapped to illegal pblock 48 (length 1)
[  206.174575][ T6748] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  206.197149][ T6748] videodev: could not get a free minor
[  206.203021][ T7325] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  206.212369][ T6748] uvcvideo 3-1:1.1: Failed to register meta-cap device (-23).
[  206.219959][ T7325] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1112: Failed to acquire dquot type 0
[  206.256105][ T7325] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  206.285278][ T7325] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.1112: mark_inode_dirty error
[  206.307108][ T4275] Bluetooth: hci1: command 0x0406 tx timeout
[  206.313226][ T4275] Bluetooth: hci2: command 0x0406 tx timeout
[  206.319278][ T4275] Bluetooth: hci3: command 0x0406 tx timeout
[  206.326845][ T4285] Bluetooth: hci0: command 0x0406 tx timeout
[  206.340052][ T7335] udevd[7335]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': Input/output error
[  206.343561][ T7325] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  206.406781][ T7325] EXT4-fs (loop3): 1 orphan inode deleted
[  206.417139][ T6748] usb 3-1: USB disconnect, device number 14
[  206.434025][   T57] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  206.434220][ T7325] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  206.558269][   T57] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  206.583454][   T57] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0
[  206.669718][ T7323] loop4: detected capacity change from 0 to 40427
[  206.698268][ T7323] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  206.713841][ T7323] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  206.722323][   T57] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  206.734729][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  206.783196][   T57] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  206.788959][ T7323] F2FS-fs (loop4): Found nat_bits in checkpoint
[  206.791672][   T57] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0
[  206.836058][ T4281] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  206.881363][ T4281] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  206.921538][ T4281] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  206.960247][ T7323] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  206.990440][ T7323] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  207.119405][ T7348] tap0: tun_chr_ioctl cmd 2148553947
[  207.430174][ T7358] loop2: detected capacity change from 0 to 2048
[  207.518813][ T7358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  207.606890][ T7358] EXT4-fs (loop2): shut down requested (1)
Aug 14 13:06:54 syzkaller kern.alert kernel: [  207.606890][ T7358] EXT4-fs (loop2): shut down requested (1)
[  207.751154][ T7369] IPv6: addrconf: prefix option has invalid lifetime
[  207.755044][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  207.829337][ T7367] loop3: detected capacity change from 0 to 4096
[  207.881720][ T7367] EXT4-fs: inline encryption not supported
[  207.910234][ T7367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  207.936731][ T7367] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003]
[  207.948086][ T7367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  208.034140][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  208.202232][ T1172] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  208.402318][ T1172] usb 3-1: Using ep0 maxpacket: 16
[  208.411029][ T1172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.448135][ T1172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.469462][ T1172] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  208.491236][ T7390] netlink: 'syz.4.1127': attribute type 11 has an invalid length.
[  208.499364][ T1172] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  208.509924][ T7390] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1127'.
[  208.520053][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.548904][ T1172] usb 3-1: config 0 descriptor??
[  208.561845][ T7389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.973137][ T1172] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max
[  208.987568][ T1172] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  209.001837][ T7404] overlayfs: conflicting lowerdir path
[  209.008465][ T1172] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  209.018523][ T1172] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  209.044591][ T1172] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  209.051881][ T1172] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  209.071288][ T1172] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  209.082246][ T6749] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  209.102407][ T1172] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  209.119902][ T1172] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  209.127429][ T1172] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  209.142788][ T1172] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0
[  209.181556][ T1172] microsoft 0003:045E:07DA.0010: No inputs registered, leaving
[  209.202010][ T1172] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  209.227959][ T1172] microsoft 0003:045E:07DA.0010: no inputs found
[  209.245824][ T7410] loop4: detected capacity change from 0 to 16
[  209.248938][ T1172] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway
[  209.279447][ T7410] erofs: (device loop4): mounted with root inode @ nid 36.
[  209.282325][ T6749] usb 4-1: Using ep0 maxpacket: 8
[  209.309013][ T6749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  209.309095][ T7410] overlayfs: failed to set xattr on upper
[  209.329582][ T7411] udevd[7411]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[  209.353318][ T7410] overlayfs: ...falling back to index=off,metacopy=off.
[  209.361817][ T6749] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  209.402159][ T6749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.426893][ T4342] usb 3-1: USB disconnect, device number 15
[  209.459288][ T6749] usb 4-1: config 0 descriptor??
[  209.691245][ T6749] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  209.809090][ T7406] loop1: detected capacity change from 0 to 40427
[  209.830120][ T7406] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  209.849157][ T7406] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  209.860457][ T7417] loop4: detected capacity change from 0 to 256
[  209.880979][ T7406] F2FS-fs (loop1): Found nat_bits in checkpoint
[  209.922825][ T5143] usb 4-1: USB disconnect, device number 8
[  210.071446][ T7406] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  210.101854][ T7406] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  210.238132][ T7397] EXT4-fs error: 177 callbacks suppressed
[  210.238149][ T7397] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1142: Detected aborted journal
[  210.286949][ T7397] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1142: Detected aborted journal
[  210.317501][ T7406] syz.1.1146: attempt to access beyond end of device
[  210.317501][ T7406] loop1: rw=2049, sector=53248, nr_sectors = 2056 limit=40427
[  210.331840][ T7397] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1142: Detected aborted journal
[  210.348529][ T7424] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1154: Detected aborted journal
[  210.360114][ T7405] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1146: Detected aborted journal
[  210.372021][ T7424] EXT4-fs: 158 callbacks suppressed
[  210.372031][ T7424] EXT4-fs (sda1): Remounting filesystem read-only
[  210.385054][ T7405] EXT4-fs (sda1): Remounting filesystem read-only
[  210.391681][ T7405] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1146: Detected aborted journal
[  210.419672][ T7424] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1154: Detected aborted journal
[  210.442386][ T7424] EXT4-fs (sda1): Remounting filesystem read-only
[  210.449022][ T7405] EXT4-fs (sda1): Remounting filesystem read-only
[  210.460689][ T7405] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1146: Detected aborted journal
[  210.476827][ T7405] EXT4-fs (sda1): Remounting filesystem read-only
[  210.485916][ T7405] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1146: Detected aborted journal
[  210.503318][ T7405] EXT4-fs (sda1): Remounting filesystem read-only
[  210.516604][ T7427] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1155: Detected aborted journal
[  210.542249][ T7427] EXT4-fs (sda1): Remounting filesystem read-only
[  210.561513][ T7427] EXT4-fs (sda1): Remounting filesystem read-only
[  210.578968][ T7427] EXT4-fs (sda1): Remounting filesystem read-only
[  210.589817][ T7405] EXT4-fs (sda1): Remounting filesystem read-only
[  210.710995][ T7430] 8021q: adding VLAN 0 to HW filter on device batadv1
[  210.719959][ T7430] team0: Port device batadv1 added
[  210.763467][ T4279] syz-executor: attempt to access beyond end of device
[  210.763467][ T4279] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  211.305633][ T7446] loop1: detected capacity change from 0 to 1024
[  211.979000][ T7448] loop2: detected capacity change from 0 to 40427
[  211.986967][ T7448] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  212.002375][ T7448] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  212.064990][ T7448] F2FS-fs (loop2): Found nat_bits in checkpoint
[  212.204654][ T7448] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  212.211761][ T7448] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  212.220039][ T7465] input: syz0 as /devices/virtual/input/input25
[  212.834396][ T7477] netlink: 'syz.1.1178': attribute type 1 has an invalid length.
[  212.850208][ T7456] loop0: detected capacity change from 0 to 40427
[  212.919847][ T7456] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  212.945448][ T7456] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  213.019991][ T7469] loop4: detected capacity change from 0 to 32768
[  213.056184][ T7456] F2FS-fs (loop0): Found nat_bits in checkpoint
[  213.162054][ T7456] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  213.169671][ T7456] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  213.246994][ T7469] XFS (loop4): Mounting V5 Filesystem
[  213.291145][ T7475] loop3: detected capacity change from 0 to 32768
[  213.318104][ T7475] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1177 (7475)
[  213.467650][ T7469] XFS (loop4): Ending clean mount
[  213.478382][ T7456] syz.0.1168: attempt to access beyond end of device
[  213.478382][ T7456] loop0: rw=2049, sector=53248, nr_sectors = 2056 limit=40427
[  213.487252][ T7475] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  213.528329][ T7469] XFS (loop4): Quotacheck needed: Please wait.
[  213.546304][ T7475] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  213.571041][ T7493] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  213.595997][ T7475] BTRFS info (device loop3): enabling ssd optimizations
[  213.641322][ T7475] BTRFS info (device loop3): turning on sync discard
[  213.662223][ T7475] BTRFS info (device loop3): using free space tree
[  213.763451][ T7502] sctp: [Deprecated]: syz.2.1182 (pid 7502) Use of int in maxseg socket option.
[  213.763451][ T7502] Use struct sctp_assoc_value instead
[  213.783158][ T7469] XFS (loop4): Quotacheck: Done.
[  213.852760][ T7499] udevd[7499]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  213.930779][ T4273] syz-executor: attempt to access beyond end of device
[  213.930779][ T4273] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  214.304772][ T4284] XFS (loop4): Unmounting Filesystem
[  214.554373][ T4281] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  214.743863][ T7535] udevd[7535]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  215.075380][ T7543] loop9: detected capacity change from 0 to 524287936
[  215.242874][ T7542] EXT4-fs error: 144 callbacks suppressed
[  215.242892][ T7542] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1194: Detected aborted journal
[  215.308330][ T7542] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1194: Detected aborted journal
[  215.335830][ T7547] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1196: Detected aborted journal
[  215.355454][ T7548] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1189: Detected aborted journal
[  215.373953][ T7542] EXT4-fs: 135 callbacks suppressed
[  215.373967][ T7542] EXT4-fs (sda1): Remounting filesystem read-only
[  215.389829][ T7547] EXT4-fs (sda1): Remounting filesystem read-only
[  215.402293][ T7542] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1194: Detected aborted journal
[  215.410124][ T7547] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1196: Detected aborted journal
[  215.414170][ T7548] EXT4-fs (sda1): Remounting filesystem read-only
[  215.431182][ T7542] EXT4-fs (sda1): Remounting filesystem read-only
[  215.448161][ T7542] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1194: Detected aborted journal
[  215.471172][ T7542] EXT4-fs (sda1): Remounting filesystem read-only
[  215.481707][ T7548] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1189: Detected aborted journal
[  215.498889][ T7542] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1194: Detected aborted journal
[  215.511286][ T7542] EXT4-fs (sda1): Remounting filesystem read-only
[  215.524634][ T7542] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1194: Detected aborted journal
[  215.532551][ T7547] EXT4-fs (sda1): Remounting filesystem read-only
[  215.546840][ T7548] EXT4-fs (sda1): Remounting filesystem read-only
[  215.558137][ T7542] EXT4-fs (sda1): Remounting filesystem read-only
[  215.572600][ T7548] EXT4-fs (sda1): Remounting filesystem read-only
[  215.859103][ T7534] loop2: detected capacity change from 0 to 40427
[  215.879903][ T7534] F2FS-fs (loop2): invalid crc value
[  215.919473][ T7534] F2FS-fs (loop2): Found nat_bits in checkpoint
[  216.002011][ T7541] loop3: detected capacity change from 0 to 32768
[  216.021636][ T7563] loop4: detected capacity change from 0 to 64
[  216.052541][ T7541] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1191 (7541)
[  216.133453][ T7534] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  216.173150][ T7541] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  216.212382][ T7541] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  216.232066][ T7567] loop1: detected capacity change from 0 to 512
[  216.240019][ T7567] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  216.271128][ T7541] BTRFS info (device loop3): enabling auto defrag
[  216.322241][ T7541] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  216.348865][ T7541] BTRFS info (device loop3): use zstd compression, level 3
[  216.418819][ T7541] BTRFS info (device loop3): turning on async discard
[  216.463711][ T7541] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  216.521031][ T7541] BTRFS info (device loop3): trying to use backup root at mount time
[  216.544297][ T4274] syz-executor: attempt to access beyond end of device
[  216.544297][ T4274] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  216.545568][ T7541] BTRFS info (device loop3): enabling ssd optimizations
[  216.670185][ T7573] udevd[7573]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  216.672327][ T7541] BTRFS info (device loop3): using spread ssd allocation scheme
[  216.699769][ T7541] BTRFS info (device loop3): setting nodatacow, compression disabled
[  216.762181][ T7541] BTRFS info (device loop3): using free space tree
[  216.872061][ T7583] loop0: detected capacity change from 0 to 1024
[  216.961392][ T7577] loop1: detected capacity change from 0 to 8192
[  217.025269][ T4396] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  217.102887][ T7541] BTRFS error (device loop3): failed to load root extent
[  217.111118][ T7541] BTRFS warning (device loop3): try to load backup roots slot 1
[  217.119887][ T7577] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  217.123962][ T7597] tun0: tun_chr_ioctl cmd 2148553947
[  217.148010][ T2931] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  217.172296][ T7577] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  217.202527][ T7541] BTRFS warning (device loop3): couldn't read tree root
[  217.209617][ T7541] BTRFS warning (device loop3): try to load backup roots slot 2
[  217.222448][ T7577] REISERFS (device loop1): using ordered data mode
[  217.229023][ T7577] reiserfs: using flush barriers
[  217.250646][ T7577] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  217.251362][ T7541] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  217.317360][ T7577] REISERFS (device loop1): checking transaction log (loop1)
[  217.382620][ T7541] BTRFS warning (device loop3): couldn't read tree root
[  217.389721][ T7541] BTRFS warning (device loop3): try to load backup roots slot 3
[  217.492763][ T7541] BTRFS info (device loop3): rebuilding free space tree
[  217.544339][ T7541] BTRFS info (device loop3): checking UUID tree
[  217.688953][ T7577] REISERFS (device loop1): Using tea hash to sort names
[  217.719406][ T7577] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  217.995329][ T7617] udevd[7617]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  218.100113][ T4281] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  218.743381][ T7630] loop3: detected capacity change from 0 to 64
[  218.886752][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.051495][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.174326][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.354876][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.435273][ T7649] tipc: Started in network mode
[  219.440227][ T7649] tipc: Node identity ac14140f, cluster identity 4711
[  219.481159][ T7649] tipc: New replicast peer: 255.255.255.255
[  219.520519][ T7649] tipc: Enabled bearer <udp:syz2>, priority 10
[  220.255885][ T3935] EXT4-fs error: 175 callbacks suppressed
[  220.255901][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  220.278205][ T7682] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  220.300217][ T7683] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  220.328980][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  220.346313][ T7684] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  220.392860][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  220.409139][ T7685] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  220.442984][ T7686] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  220.458796][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  220.491520][ T7687] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  220.558021][ T4260] EXT4-fs: 144 callbacks suppressed
[  220.558038][ T4260] EXT4-fs (sda1): Remounting filesystem read-only
[  220.615413][ T6748] tipc: Node number set to 2886997007
[  220.623193][ T7693] EXT4-fs (sda1): Remounting filesystem read-only
[  220.638152][ T7696] EXT4-fs (sda1): Remounting filesystem read-only
[  220.646840][ T7695] EXT4-fs (sda1): Remounting filesystem read-only
[  220.653006][ T7696] EXT4-fs (sda1): Remounting filesystem read-only
[  220.661330][ T7693] EXT4-fs (sda1): Remounting filesystem read-only
[  220.724087][ T7695] EXT4-fs (sda1): Remounting filesystem read-only
[  220.743015][ T7695] EXT4-fs (sda1): Remounting filesystem read-only
[  220.975192][    T9] device hsr_slave_0 left promiscuous mode
[  220.981813][    T9] device hsr_slave_1 left promiscuous mode
[  220.989065][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.997266][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.006121][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.014549][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.022187][    T9] device bridge_slave_1 left promiscuous mode
[  221.030526][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.046916][    T9] device bridge_slave_0 left promiscuous mode
[  221.056443][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.093751][    T9] device veth1_macvtap left promiscuous mode
[  221.100349][    T9] device veth0_macvtap left promiscuous mode
[  221.106660][    T9] device veth1_vlan left promiscuous mode
[  221.112889][    T9] device veth0_vlan left promiscuous mode
[  221.243351][ T4260] EXT4-fs (sda1): Remounting filesystem read-only
[  221.321577][ T7701] EXT4-fs (sda1): Remounting filesystem read-only
[  221.863643][    T9] team0 (unregistering): Port device team_slave_1 removed
[  221.908348][    T9] team0 (unregistering): Port device team_slave_0 removed
[  221.955716][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.010734][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.422289][ T6748] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  222.490832][    T9] bond0 (unregistering): Released all slaves
[  222.627871][ T6748] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  222.656028][ T6748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.677909][ T6748] usb 3-1: config 0 descriptor??
[  223.147704][ T6748] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  223.158111][ T6748] [drm] Initialized udl on minor 2
[  223.307138][ T6748] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  223.316186][ T6748] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  223.524764][ T6748] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  223.533498][ T6747] usb 3-1: USB disconnect, device number 16
[  223.548243][ T6748] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  223.556922][ T6748] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  224.167696][ T7735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1252'.
[  224.703545][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  226.336013][ T7752] EXT4-fs error: 94 callbacks suppressed
[  226.336031][ T7752] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  226.391797][ T7756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1261: Detected aborted journal
[  226.392714][ T7755] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1262: Detected aborted journal
[  226.419230][ T7757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1263: Detected aborted journal
[  226.424057][ T7754] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1260: Detected aborted journal
[  226.442194][ T7756] EXT4-fs: 60 callbacks suppressed
[  226.442215][ T7756] EXT4-fs (sda1): Remounting filesystem read-only
[  226.454300][ T7754] EXT4-fs (sda1): Remounting filesystem read-only
[  226.461131][ T7757] EXT4-fs (sda1): Remounting filesystem read-only
[  226.469410][ T7754] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1260: Detected aborted journal
[  226.481499][ T7755] EXT4-fs (sda1): Remounting filesystem read-only
[  226.492617][ T7754] EXT4-fs (sda1): Remounting filesystem read-only
[  226.499998][ T7756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1261: Detected aborted journal
[  226.514057][ T7755] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1262: Detected aborted journal
[  226.525613][ T7757] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1263: Detected aborted journal
[  226.537523][ T7756] EXT4-fs (sda1): Remounting filesystem read-only
[  226.546731][ T7755] EXT4-fs (sda1): Remounting filesystem read-only
[  226.553386][ T7756] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1261: Detected aborted journal
[  226.553423][ T7756] EXT4-fs (sda1): Remounting filesystem read-only
[  226.566176][ T7754] EXT4-fs (sda1): Remounting filesystem read-only
[  226.582027][ T7757] EXT4-fs (sda1): Remounting filesystem read-only
[  229.110447][ T7783] Invalid ELF header magic: != ELF
[  230.809476][ T7797] loop0: detected capacity change from 0 to 1024
[  230.837294][ T7797] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  230.862497][ T7797] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.019477][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  231.364827][ T7801] EXT4-fs error: 48 callbacks suppressed
[  231.364855][ T7801] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  231.583102][ T7803] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  232.043176][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  232.059498][ T4260] EXT4-fs: 42 callbacks suppressed
[  232.059512][ T4260] EXT4-fs (sda1): Remounting filesystem read-only
[  232.076088][ T7804] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  232.114353][ T7805] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1277: Detected aborted journal
[  232.145121][ T7807] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1279: Detected aborted journal
[  232.145193][ T7806] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1276: Detected aborted journal
[  232.168322][ T7807] EXT4-fs (sda1): Remounting filesystem read-only
[  232.172266][ T7805] EXT4-fs (sda1): Remounting filesystem read-only
[  232.182230][ T7808] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1278: Detected aborted journal
[  232.199250][ T7807] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1279: Detected aborted journal
[  232.213547][ T7811] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  232.218592][ T7808] EXT4-fs (sda1): Remounting filesystem read-only
[  232.225711][ T7807] EXT4-fs (sda1): Remounting filesystem read-only
[  232.236205][ T7806] EXT4-fs (sda1): Remounting filesystem read-only
[  232.264568][ T7808] EXT4-fs (sda1): Remounting filesystem read-only
[  232.281459][ T7813] loop0: detected capacity change from 0 to 512
[  232.291590][ T7808] EXT4-fs (sda1): Remounting filesystem read-only
[  232.335741][ T7813] EXT4-fs (loop0): Test dummy encryption mode enabled
[  232.343930][ T7808] EXT4-fs (sda1): Remounting filesystem read-only
[  232.353997][ T7813] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  232.365337][ T7813] EXT4-fs (loop0): SIPHASH is not a valid default hash value
[  232.372777][ T7808] EXT4-fs (sda1): Remounting filesystem read-only
[  232.573537][ T7810] loop1: detected capacity change from 0 to 32768
[  232.584434][ T7810] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1277 (7810)
[  232.607857][ T7810] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  232.618579][ T7810] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  232.642196][ T7810] BTRFS info (device loop1): use zlib compression, level 3
[  232.649459][ T7810] BTRFS info (device loop1): using free space tree
[  232.712223][ T7810] BTRFS info (device loop1): enabling ssd optimizations
[  232.880448][ T4279] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  237.386516][ T7857] EXT4-fs error: 42 callbacks suppressed
[  237.386533][ T7857] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0
[  237.410461][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  237.431555][ T7858] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1288: Detected aborted journal
[  237.432615][ T4260] EXT4-fs: 31 callbacks suppressed
[  237.432646][ T4260] EXT4-fs (sda1): Remounting filesystem read-only
[  237.457245][ T7858] EXT4-fs (sda1): Remounting filesystem read-only
[  237.467414][ T7859] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1289: Detected aborted journal
[  237.489242][ T7858] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1288: Detected aborted journal
[  237.501125][ T7859] EXT4-fs (sda1): Remounting filesystem read-only
[  237.507988][ T7858] EXT4-fs (sda1): Remounting filesystem read-only
[  237.515552][ T7858] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1288: Detected aborted journal
[  237.531420][ T7859] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1289: Detected aborted journal
[  237.542983][ T7858] EXT4-fs (sda1): Remounting filesystem read-only
[  237.554144][ T7859] EXT4-fs (sda1): Remounting filesystem read-only
[  237.561102][ T7862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1291: Detected aborted journal
[  237.573526][ T7859] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1289: Detected aborted journal
[  237.585373][ T7862] EXT4-fs (sda1): Remounting filesystem read-only
[  237.590768][ T7858] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1288: Detected aborted journal
[  237.606022][ T7863] EXT4-fs (sda1): Remounting filesystem read-only
[  237.612555][ T7859] EXT4-fs (sda1): Remounting filesystem read-only
[  237.619223][ T7862] EXT4-fs (sda1): Remounting filesystem read-only
[  237.706379][ T6741] smpboot: CPU 1 is now offline
[  238.015369][ T7865] loop2: detected capacity change from 0 to 32768
[  239.461724][ T7873] loop0: detected capacity change from 0 to 128
[  239.501851][ T7873] EXT4-fs: inline encryption not supported
[  239.551632][ T7873] EXT4-fs (loop0): Test dummy encryption mode enabled
[  239.597739][ T7873] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  239.632579][ T7873] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  239.806525][ T4273] EXT4-fs (loop0): unmounting filesystem.
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: failed to mkdtemp
 (errno 5: Input/output error)
SYZFAIL: repeatedly failed to execute the program
proc=5 req=1225 state=1 status=67 (errno 9: Bad file descriptor)
[  242.616863][ T4273] EXT4-fs error: 52 callbacks suppressed
[  242.616876][ T4273] EXT4-fs error (device sda1): ext4_wait_block_bitmap:573: comm syz-executor: Cannot read block bitmap - block_group = 2, block_bitmap = 131
[  242.682985][ T4273] EXT4-fs error (device sda1): ext4_discard_preallocations:5132: comm syz-executor: Error -5 reading block bitmap for 2
[  242.735390][ T4273] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  242.763238][ T4273] EXT4-fs: 35 callbacks suppressed
[  242.763250][ T4273] EXT4-fs (sda1): Remounting filesystem read-only
[  242.785578][ T5850] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.551: Detected aborted journal
[  242.803753][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.822359][ T4273] EXT4-fs error (device sda1) in ext4_evict_inode:256: Journal has aborted
[  242.831056][ T5850] EXT4-fs (sda1): Remounting filesystem read-only
[  242.842312][    T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0
[  242.878516][ T4273] EXT4-fs error (device sda1): ext4_wait_block_bitmap:573: comm syz-executor: Cannot read block bitmap - block_group = 2, block_bitmap = 131
[  242.902380][ T5850] EXT4-fs error (device sda1) in ext4_evict_inode:256: Journal has aborted
[  242.915903][    T1] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm init: reading directory lblock 0
[  242.935823][ T5850] EXT4-fs error (device sda1): ext4_wait_block_bitmap:573: comm syz.1.551: Cannot read block bitmap - block_group = 2, block_bitmap = 131
[  242.951834][ T4273] EXT4-fs (sda1): Remounting filesystem read-only
[  243.000804][ T5850] EXT4-fs (sda1): Remounting filesystem read-only
[  243.055348][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.245835][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.268306][ T7894] EXT4-fs (sda1): Remounting filesystem read-only
[  243.320480][ T7894] EXT4-fs (sda1): Remounting filesystem read-only
[  243.348122][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.962030][ T7894] EXT4-fs (sda1): Remounting filesystem read-only
[  244.109351][ T4274] EXT4-fs (sda1): Remounting filesystem read-only
[  244.201857][ T4274] EXT4-fs (sda1): Remounting filesystem read-only
[  244.557265][   T11] device hsr_slave_0 left promiscuous mode
[  244.564829][   T11] device hsr_slave_1 left promiscuous mode
[  244.571096][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.581971][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.589824][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.600545][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.608695][   T11] device bridge_slave_1 left promiscuous mode
[  244.619712][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.628131][   T11] device bridge_slave_0 left promiscuous mode
[  244.638669][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.669060][   T11] device veth1_macvtap left promiscuous mode
[  244.679161][   T11] device veth0_macvtap left promiscuous mode
[  244.690177][   T11] device veth1_vlan left promiscuous mode
[  244.707599][   T11] device veth0_vlan left promiscuous mode
[  245.379303][   T11] team0 (unregistering): Port device team_slave_1 removed
[  245.430798][   T11] team0 (unregistering): Port device team_slave_0 removed
[  245.480765][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.539882][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.942057][   T11] bond0 (unregistering): Released all slaves
[  246.423904][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.483311][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.539883][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.597515][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.795128][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.866021][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.938571][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.008528][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.250990][   T11] tipc: Disabling bearer <udp:syz2>
[  247.274747][   T11] tipc: Left network mode
[  247.635112][ T3935] EXT4-fs error: 159 callbacks suppressed
[  247.635128][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  247.660407][ T7956] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  247.718185][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  247.740669][ T7957] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  247.776338][ T7958] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  247.870068][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  247.888617][ T7960] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  247.919377][ T7961] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  248.011794][ T3935] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  248.028641][ T7963] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0
[  248.520970][   T11] device bond0 left promiscuous mode
[  248.528872][   T11] device bond_slave_0 left promiscuous mode
[  248.536251][   T11] device bond_slave_1 left promiscuous mode
[  248.547577][   T11] device batadv_slave_0 left promiscuous mode
[  248.561343][   T11] device hsr_slave_0 left promiscuous mode
[  248.577368][   T11] device hsr_slave_1 left promiscuous mode
[  248.586613][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.595150][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.605731][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.628564][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.636380][   T11] device bridge_slave_1 left promiscuous mode
[  248.648283][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.658653][   T11] device bridge_slave_0 left promiscuous mode
[  248.667571][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.679946][   T11] device hsr_slave_0 left promiscuous mode
[  248.694201][   T11] device hsr_slave_1 left promiscuous mode
[  248.709417][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.721499][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.732084][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.739833][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.750068][   T11] device bridge_slave_1 left promiscuous mode
[  248.756491][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.770958][   T11] device bridge_slave_0 left promiscuous mode
[  248.777419][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.834845][   T11] device veth1_macvtap left promiscuous mode
[  248.840899][   T11] device veth0_macvtap left promiscuous mode
[  248.850045][   T11] device veth1_vlan left promiscuous mode
[  248.855908][   T11] device veth0_vlan left promiscuous mode
[  248.868177][   T11] device veth1_macvtap left promiscuous mode
[  248.875598][   T11] device veth0_macvtap left promiscuous mode
[  248.881688][   T11] device veth1_vlan left promiscuous mode
[  248.894560][   T11] device veth0_vlan left promiscuous mode
[  249.156770][   T11] team0 (unregistering): Port device batadv1 removed
[  249.657015][   T11] team0 (unregistering): Port device team_slave_1 removed
[  249.737417][   T11] team0 (unregistering): Port device team_slave_0 removed
[  249.791858][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.874545][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.318311][   T11] bond0 (unregistering): Released all slaves
[  250.991778][   T11] team0 (unregistering): Port device team_slave_1 removed
[  251.047336][   T11] team0 (unregistering): Port device team_slave_0 removed