last executing test programs:

1m5.212615277s ago: executing program 1 (id=714):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x17)

1m4.95059303s ago: executing program 1 (id=716):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000180)=[{0x6, 0x6000, 0x1, &(0x7f0000000740)="b9"}], 0x1})

1m1.985664772s ago: executing program 1 (id=733):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100d10401a80016ea1f0006", 0xfffffffffffffd74}], 0x1, 0x0, 0x0, 0x7400}, 0x4000)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33)

1m1.604743336s ago: executing program 1 (id=738):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00)

1m1.127378148s ago: executing program 1 (id=744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}}, 0x0)

1m0.515358622s ago: executing program 1 (id=747):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000440)={r1, r1, 0xd, 0x0, 0x0, 0x9, 0x81, 0x10cf, 0x4, 0x8b, 0x5, 0x9, 'syz0\x00'})

59.956996422s ago: executing program 32 (id=747):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000440)={r1, r1, 0xd, 0x0, 0x0, 0x9, 0x81, 0x10cf, 0x4, 0x8b, 0x5, 0x9, 'syz0\x00'})

4.27243339s ago: executing program 2 (id=1189):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2)

2.968327376s ago: executing program 4 (id=1207):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200050, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0x1, 0x1513, &(0x7f0000003140)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189)
write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400)

2.58727929s ago: executing program 4 (id=1210):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000600)=@x86={0x7, 0x0, 0x3, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0xf, 0x5, 0x70, 0x0, 0x81, 0x2b, 0x0, 0x0, 0x3, 0xf8, '\x00', 0xe1, 0xd})

2.332227452s ago: executing program 4 (id=1212):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000140)={[{@fat=@nfs_stale_rw}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_lower}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@shortname_lower}]}, 0x4, 0x350, &(0x7f0000000580)="$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")
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41)

1.960400126s ago: executing program 3 (id=1215):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000019240)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffff, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x5c0, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x1}, {0x5, 0x2, 0x2}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200410d1}, 0x0)

1.873502243s ago: executing program 2 (id=1216):
r0 = socket(0x25, 0x1, 0x0)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad9, 0x10000, 0x1}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x81}})
io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0)

1.742813095s ago: executing program 2 (id=1217):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$UHID_INPUT(r0, &(0x7f0000000400)={0x8, {"46a02b34d31c31436e7771de689fda137d31466992ec6bc1dbacf76831425f0f29edf16fc9debef4d844f2e40f5bf067b72fbebfe2045ffc2c9d01f200cb2a7f7071455d8122d3bbffb0ac42fcc71546617b7a661a3414dade37c3202c37507db442b82d68d5e2a98e7a0db6a642d0717ee40a1a0c502dcfa26144c16e931b665d8362c9659b6c760a39d935ccf62ca2a024c2a4bac9f2af4f694748de19595d2a7e1e7cdde5288ddb70b2c513ccbd522de4b84522fe4fd9cddeea6cc6b6726f4973dc312f7523736fa60e0860ced268de8c5fb4b94038c40597102f829ba2c477fd43ee5124f0570de8cbbab1c28a84bb3237e991242bd222cdf8c16471c3e2eb45ee5629eacc6ef335a1826e55047363777242d91c75d9411179eff7cca1e792d0722d712c83a0a4235a1d68c13948a2d24d89ef1aca24f0f01257b38d54d35979c8fbfe06b78d9135443a12f52f29ec899570bd368b00aa26a968cc301ee627edafddc4e5b1dbdade33df10592e35d50b289318b6948b508f1fd3368051cee6655ad34cd3d6b2fe1791d78bbbd2eab19219ac49bd278fbd266ad9aff136b369d0f43a45035df1c6eeebb440824299daf8277917e3be852ee181b3a66ee295de42dbaf5598131ca0b7d1be95de2585d606b3f9d47092b73ee2e4a294c9a35e31f81a8602a3eb7a4364a426ee01fde0313bb569843491d4d10fba4513e0536c37be2e4e093361965aefc285d920cbd1ff7c22621da9d834839646496a248966bad435c790c3b3f0c769d55beff2d2d01ac52dfc7be1e1c9d3fc78a2e3fcca75b16f4c9bb73fc7b3fb79f0fa0cab0c62de7e0c8306d9df8abdd642ab6da91376ca17be688def79fa781b041107a6439b186d5742ca30a68d88d146652170695822c67bf171d6aa6dcf43742e2f27e709fea4243dd7acd0034fff0991a3b53a425cf6ef9bcf1c7927406a6966a1c438972ee3360f6e59de3b28890e17eb9100f7dc9225904ff98c4dff3c9727f676e06179e95ce8008267b57de4794051b044830939cf199441e69cf11817b099c16c4482f49cd44ff5523be48bad8340485f285e50b7934facc26d4583d4ce12d0328051ef03514c580d2f74455b893b4c8f1544dbad52d8411d47db919ea6173d8d68f21989ef07c988b888d89957f792b64ace5db37e216b38efb19eb62a656d8186a7e859ddbfe312ea80f43a556bcf8df7a8cdd5356ed348d2bf5e59b001711d76ee3d59978402c8bb0bf10afbdea88ed66c8b9bc96e4dd14bb0e3efaf265bb80b2a704f6a0c3bfb9b5de19b27bb83fb4182c6a023448f3a6239943a1b87d3df26cbf167acd25a1d234de9d23597bfab5f85ddc1fbf42035b91a5c681f711ac6d50304253e47e484dddc1f0fcea84745c6c6d4bca9bcd63465cd0fbc04fb239bf51523e519d6bcd1a4c25bf2c7a1cf74d515772ee2d7ade61929d040ee0682e2392086cacf760d32f04fc6377a3df56611c32d9f59e96074ade64603f06761d2661bf7d582c26af85c2abf343370bb9bbf610c9f8c92f343cc1d2dfe8858f472e88583c738b3b23f0afe6ce4ca0ab8dab844d537621121796cd94379147637a08d74ca2ff3df4608cb6905a8c4d58bd8d74a2404ea5b37f38f25e14dfaeeb079a89c998716aa5016a4482986d2acf1d0697b770b07a9d4eef6144edca7d2c7e6d9bf8f4aa7fd2319f8387b40a7c59a49aa3e8959f49c4b54953f52fadadbdb5bc3cddd1f8b2c9baebe8b60c18a8fda72e89c7ef69615f2515321504d3ef68f50436beb1294568cd98465d6a15fba3566f7ec05bfb5364fe4110f2bc2938bda67a3b94c869d3cb6e90fa237e82b7f067abecc451619c8035a322ce7ed2df11e56e0fa20159fdb5016f2925f8655a1ace4dc9feb1069c4a906e974426fcef5dd001eb3fee1ef82e52e2858cbb13ed0b71cd1383d1616e47520858dd33bf69b3d392ba8482683ba1f50eeb135ccb461064ce468221d0834fc8ee35c07acc00163f4caf0d4130cb3e3f07c68bf38448da5fa47064f18a882e33fc843ff53eb3f2d777752d455cbeabcbe6feb4ea3477660bf8ea795c4b97a45f6d956922c4119e21038e79821def6640760874a4ed88369b1c74e69a78ed9fde65ea27a10e8e548e69d59ebe803d2108daf35bc7809c2f1d1d30a0c0f562491ef12189ff228339a5c32e953b2910f537331fbe16059533739ec817b477bbd7170036b0b57594545db7dc3f2835efd4ce136513cb5967536e51db5b6cad17510b6e3024e6481793da1faff8504e726954ec8456609119e69b21596e1e0b99d68fe58f898b9b7c1b3f13c57020c8d2317656f4bc44d79eb024efd5847a110e42fcd3734b5253315336c67dc3da4e0722d58b8a2913b1d7c9d2255d79060a5fff7b00ea966479039008d80cace88cb5bc2ed3d3527ca5da419e6bb4d893667ec632898b26463197f17ed3359d788a4ff83115fdeff5602cdf1b95b5ceb827c16eaf42c41d5443c89fc124e61d68051def0a12f88284cbcd9b6b2611464f392d7c106a1fd11634bd1a9cb906255b30d7a3e89278d5847b8c27c449bbc43474edd64e9b284f6bc3c34affb07c9a10773166b30fb642d96e634b82e77fbb98898504fa003879f7bac25c6795008c74b215e4f951cbaa3ad1eb7df348effbe3a3a370aa65df407fa95eb050c6c611d7e1c6f8678a190e0c338bd3b71bd826e1cd4917d49925639f23e9742e3491d6de77d61fa225f96ba0ac7dffa0f0c53eda768897817cdfb125f30fa7cbcd654b980e28b2e1f08d95aa5184856d1c5bde1e46c407c477b10711e659add458f03730df1863d52dacd7e19c41fcbfb565676dfbca08e666e678abf5765c1bcaa2f70f8366006665ceb7a19d2e28444199d797e02351db9e42edb148cea502d04356a2fdd4e9630f1f0a059daac91387226270e2e537017e0b9b99a609ad3b52b33de213eb2e4c570fcd2cf40a5e6774970702fe071fdcad27674167b2f1a558763e4bc5ba8ddfed6bfffa83d9df699845c171e6fb24d61adbbadcce0b814121de1b1504a8eaa3ca23f55614ecc25f18de8a9983c8edf8ae4ade73a097e99b934af06cc1a2173b49acf0ccf67757c5f98ffe83f5d8d17de24adfb3c830481f40f9158d4cefdd8415c340424fe9aac9152b834721d4b898718a0921267cb399329c8ca6f0783a6eb92405eea0968e9db9dd7a584f1205374868ff3b22ff88c33d894fa5651e9f94709ffa3a73bf58817943b8f16f82d111510c3320a53d26f040ee72545dac5235bee0cf839b8a6d00c7a8e6cd11c41772ee35653bad8f19ac5914aaecb0eb164d0f5df10bc6752542e1117b65a3729a7100746410f583db834d81ff1c20ed1122c52fac331ef31e17c69ec5676941caf7ffbe8234b7ae76887fbd9102598ad3c75ef0603658f5dfcafce6029ff2daf775dc098fb9196fdc82dbb2fef1daea7bedbee1143ce6ec1ac11b5ee389e1d69c2763c3a4ab8f52eefcd67604b099dac223399c85b19f3623910f3cecc930bd8a43535642e9a1003a619f36f3750e1a4c42a17f864cbd0a33df71597e49f0085cd3942cc339d824c4b32f80bbe22e5ec42b20b4199ba9129089886c53c63e0ca01c6421b5fd3a1b7b15e6b4dbb72a1264c19ee6b694b53a9a335c2f0cb9285560d9e6c602a5ed396eb6010ee9b5d58599351fc616f17d9a4edf01b08296a6c9c17d237809e6721290efe5d820fecbb3e8f03fc816013f1dd81d1d2529ef4f82c8bf75a2e0f4f1b405fe5b2d31c34c52a4da16f9c41fdf70b1fdbad23e73e7809c51c2fa8a06300621328e3ac8267b21274e85a93673c377c74119d2c5ed08eab7290516328bffd8916347599ab9447fb6899353be28856ecc7732a7f7ebabceb0dd0ef47943bd2087557f1a51e1621b61546748bc57d6735f534019c0873dec12ea8d7ff326d49695c71a71b63fec0733a68084f9b9a12ffabe432e14b1bb0fccb6760067d1dbf131e1729df990a61b80b5dfa47405d6e4e4904179fbfd9be2aae64ba817dd0178d3cccfe8c5fd3162c429fdfca4a34c6bd718937b6728c7eacce19e1ef149f1066d8c585155f7b5465e321d2da28da5daa41a23aed980719cd53a0c72e8cb3e661e190b8f89779b91b877a035367c7f5eb4dda731ea538753c5930f7c3561aee91d0b1255beef5efdcd9bafb3f6508b65490253f9907ba9059237c2e9ba2c079efb14d318fef6ca1a1d8c48b149417f0de058020cc103fb0f77a638158875c6fbf73c34c3aa41768f860fcd7f2ac2399cfb743b71aa44cc69913d6df701c5c7a2f62b163f0b9b71b9d9c1dba1acda12ff67b125fdfba816883ea76a2530890c901cc13447deae9c7d330642fbb207180f82311e5f572a5e305ed41c229e1506114683c744ef0a17d8255c65d1e4c4d7454845264e22b5f59e365856c1267cd8012ef6a94f6d85779c15fda5b7baaa5c918fe5f8ac1794045552b253d31aeca910e09acf0f65f392e66e7420b307adf5d8997a480848b1dcfc6baf4da2db13a5ee14c5dc90f7cfd92098d559267db30bfdc82ebb94fc65a9107ae113b9aa68632c453eea74f85c3f8205d1ffd8eaf949dfac0849fd083e8992c9832f29a64b05850c4b7543d00d56afe98ea00c3567e688f9a21e634791c202d158fa57856ac86acf79af03a82565e3b826e6946ac53d9ef4100ddc2c148638d2eee81e2d9ca2a462af0ab0a73027cd01d1fb284dc5f7c9074f793c338a7d4d5a41facc4f7f279f54f15b7040c935bf84c62cc87a6488656496ad87cc2cf62ac2a2cc5908c95b7d1c62b6dc8e1ecd3934b6ed407ad7acc2cf6224be01289544428bfe0d89869b9e730273e23cbdaf851b3266c7d8f1c19db13204cafcf1d63dccaa1c38801926c99569530df57a14a12669abe256278f8cf6a83133c9cfba960236f44a606eb9697a1070119ca1bc0752980ec6374043173678ddb3f569f904cc0244e894295f57f8a787c37493d0321a69c855a625a9ca52b38d6fa757611c32f90ad56de44103840c07dd52969f9fae810ce0a810c0117d13734f7f413b081b7b10a0c0726428a3c7290cd2f62e93b52ba0215facaa92fc74bbcbc4a24f9f6349e7839e14c1ef054c13238dba19f34d27b1258e791c23038072f5b50d22d6fce2bd2e8e42178e907ad5b9233dd6dffc9e4479331bc8b32e3260b28494a70be0aedc1dd98767c993f3b9f36c9da5d85a9577a01491962ddf9161db0c8aee0e69275504ecef0318117876e3d504d9fb8a228c00fd675e6f1ecba785b3fb085af97d2ac26f2e28ae73aff79ec9415bc083a7eeaef4ccf0394f62bc87b591071ec9b66b29b2d06123a2057833b788505778ecc55c8689f1f8c230bfd08551904be1580ca3794c03be803f44753f8087f9f18c2f788869d219224fa0f4430bb70a70b23ab7591b3d154057886babaec330da0b440b9a0a421030fdc4313b5c88f826d455567c6521b6de71c88bc91b42291e13461ceb84adbb9123af5ab55fccfb5c377f369056e3eb9cb2842b2b2ae0db0dd38727f3cbd10b9eae5701cda976b9bed4ac7215e5b03b6228f307f2ac51a8dddbc729e3c1506f190d3fed8dd9daf01a4551b72f4c30eb2f2b01a2a4424a72c495ffdf69754477becf004300db3facae568b84da58d47ad1c598359481344d11e6cda59a1bf0e810a86df8b76e85ae4c81b57835906b634bc344f93555261241208e342b747e1265a6d065359dc61d0195154575ad539762153ea54aa9f2b6a58d3a52caf8d90a66b1730", 0x1000}}, 0x1006)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)=ANY=[@ANYBLOB='size=3,'])

1.656396173s ago: executing program 3 (id=1218):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x5)

1.57629813s ago: executing program 4 (id=1219):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x7ff}, 0x28)

1.467046289s ago: executing program 2 (id=1220):
munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000)
personality(0x87bf5ac905ea0f7f)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
brk(0x200000ffc000)

1.392327086s ago: executing program 3 (id=1221):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)

1.34744188s ago: executing program 4 (id=1222):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r2, 0x4, 0xfb, 0x53, 0x3, 0x58, @local, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd01}})

1.243476199s ago: executing program 2 (id=1223):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c880, &(0x7f0000000200)=ANY=[], 0xf9, 0x60f1, &(0x7f0000006f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x73, 0xffffffffffffffff})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1.160350687s ago: executing program 3 (id=1224):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977720a89"], 0xa)

1.100261512s ago: executing program 4 (id=1225):
syz_usb_connect(0x3, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x69b, 0x7c, 0xbd, 0xb4, 0x20, 0xb48, 0x300d, 0x16c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x8, 0xe8, 0xe, [{{0x9, 0x4, 0x88, 0xb, 0x0, 0xc3, 0x51, 0x2, 0x9}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x60, 0x0, 0x64})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0xb219, 0x1a11, 0x0, 0x0}, {0x1000, 0x14201, 0x0, 0x0}, {0x6, 0x1000, 0x0, 0x0}], 0x3})

1.097862172s ago: executing program 0 (id=1226):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x10002}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x32, {0xff}}}], 0x18}, 0x40)

978.322763ms ago: executing program 3 (id=1227):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file1\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c1)

875.500532ms ago: executing program 0 (id=1228):
r0 = socket(0x200000000000011, 0x2, 0xb)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x66, 0x0, 0x0, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010101, {[@generic={0x7, 0x2}]}}}}}}, 0x0)

687.691449ms ago: executing program 0 (id=1229):
r0 = socket$inet(0x2, 0x3, 0x2f)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x24008000, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendto$inet(r0, &(0x7f0000000180)="b67cd901", 0x4, 0x2004082c, &(0x7f0000000f00)={0x2, 0x4e22, @multicast1}, 0x10)

520.260214ms ago: executing program 3 (id=1230):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xdab1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
semtimedop(0x0, 0x0, 0x0, 0x0)

520.063334ms ago: executing program 0 (id=1231):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x8000000, 0x0, 0x6})

373.760286ms ago: executing program 0 (id=1232):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000400)=0x2)

10.150349ms ago: executing program 2 (id=1233):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000024c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)

0s ago: executing program 0 (id=1234):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "6b210acfeda5a0d6c477d874f77f552917"}], 0x28}}], 0x1, 0x4000000)

kernel console output (not intermixed with test programs):

oop1): Found nat_bits in checkpoint
[  118.659913][ T6522] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  118.667674][ T6522] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  118.720280][ T6522] fscrypt (loop1, inode 8): Error -61 getting encryption context
[  119.062694][ T6530] loop0: detected capacity change from 0 to 32768
[  119.163909][ T6530] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  119.337356][ T6548] mkiss: ax0: crc mode is auto.
[  119.352902][ T6530] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  119.421601][ T6530] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30
[  119.508605][ T6530] XFS (loop0): Ending clean mount
[  119.646801][ T6563] loop1: detected capacity change from 0 to 512
[  119.754890][ T6530] XFS (loop0): User initiated shutdown received.
[  119.774511][ T6530] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  119.808829][ T6530] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  119.887625][ T6544] loop3: detected capacity change from 0 to 32768
[  119.943109][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  120.015381][ T6544] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  120.204179][ T6544] XFS (loop3): Ending clean mount
[  120.342191][ T6544] XFS (loop3): Quotacheck needed: Please wait.
[  120.504471][ T6544] XFS (loop3): Quotacheck: Done.
[  120.735869][ T6544] overlayfs: failed to create directory ./bus/work (errno: 2); mounting read-only
[  121.013916][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  121.590924][ T6589] loop2: detected capacity change from 0 to 32768
[  121.671675][ T6589] JBD2: Ignoring recovery information on journal
[  121.819099][ T6589] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  121.966488][ T6602] loop1: detected capacity change from 0 to 4096
[  122.051944][ T6589] (syz.2.279,6589,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  122.114401][ T6589] (syz.2.279,6589,0):ocfs2_group_add:495 ERROR: Can't read the group descriptor # 35184372089856 from the device.
[  122.192839][ T6602] ntfs3: loop1: failed to convert "0080" to cp852
[  122.241446][ T6602] ntfs3: loop1: failed to convert name for inode 1e.
[  122.289861][ T5775] ocfs2: Unmounting device (7,2) on (node local)
[  122.383053][ T6610] program syz.0.289 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.404614][ T5834] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  122.605288][ T5834] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  122.635924][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.654608][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.703016][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0
[  122.726817][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.740401][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.771858][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0
[  122.783622][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.793083][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.815346][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0
[  122.823745][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.833709][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.855456][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0
[  122.863791][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.873638][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.903713][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0
[  122.912243][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.922753][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  122.944312][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0
[  122.962887][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  122.973031][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  123.004310][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0
[  123.012705][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  123.022795][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  123.044299][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0
[  123.056095][ T5835] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  123.087336][ T5834] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  123.097699][ T5834] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  123.114286][ T5834] usb 4-1: Product: syz
[  123.124569][ T5834] usb 4-1: Manufacturer: syz
[  123.134456][ T5834] usb 4-1: SerialNumber: syz
[  123.142305][ T5834] usb 4-1: config 0 descriptor??
[  123.175720][ T5834] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  123.266917][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.284836][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.320859][ T5835] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  123.340514][ T5835] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  123.360989][ T5835] usb 2-1: Manufacturer: syz
[  123.412005][ T5835] usb 2-1: config 0 descriptor??
[  123.475612][    C0] usb 4-1: yurex_control_callback - control failed: -71
[  123.485049][    T8] usb 4-1: USB disconnect, device number 5
[  123.496065][    T8] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  123.580210][ T6614] loop0: detected capacity change from 0 to 32768
[  123.618787][ T6614] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.726525][ T6614] XFS (loop0): Ending clean mount
[  123.769534][ T6614] XFS (loop0): Quotacheck needed: Please wait.
[  123.861152][ T6614] XFS (loop0): Quotacheck: Done.
[  123.900585][ T5835] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  124.093811][ T5774] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  124.287230][ T5835] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device
[  124.304464][ T5835] pyra 0003:1E7D:2CF6.0003: couldn't install mouse
[  124.323034][ T5835] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -71
[  124.357947][ T5835] usb 2-1: USB disconnect, device number 8
[  124.568250][ T6647] fido_id[6647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  124.750984][ T6653] overlayfs: upper fs does not support tmpfile.
[  125.050728][ T6660] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  125.273134][ T6670] loop0: detected capacity change from 0 to 1024
[  125.311820][ T6670] hfsplus: invalid length 32517 has been corrected to 255
[  125.460826][ T2969] hfsplus: b-tree write err: -5, ino 4
[  126.129523][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'.
[  126.457277][ T6699] loop3: detected capacity change from 0 to 4096
[  127.330068][ T6701] loop2: detected capacity change from 0 to 32768
[  127.364188][ T6701] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.325 (6701)
[  127.424564][ T6701] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  127.449603][ T6701] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  127.480370][ T6701] BTRFS info (device loop2): using free space tree
[  127.640010][ T6701] BTRFS info (device loop2): enabling ssd optimizations
[  127.653657][ T6701] BTRFS info (device loop2): auto enabling async discard
[  128.038941][ T6734] input: syz0 as /devices/virtual/input/input9
[  128.172801][ T5775] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.429879][ T5764] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5764)
[  128.451648][ T6741] loop0: detected capacity change from 0 to 4096
[  128.500216][ T6741] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  129.014482][    T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  129.225181][    T8] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  129.252429][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  129.253828][ T6761] loop0: detected capacity change from 0 to 16
[  129.265430][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  129.306806][ T6761] erofs: (device loop0): mounted with root inode @ nid 36.
[  129.314307][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  129.323486][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  129.354384][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  129.383313][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  129.391885][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  129.419369][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  129.448523][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  129.468535][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  129.494338][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  129.520081][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  129.553073][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  129.564535][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  129.604296][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  129.615165][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  129.634448][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  129.654298][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  129.685150][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  129.695079][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  129.724286][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  129.732689][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  129.742462][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  129.767811][ T6767] loop1: detected capacity change from 0 to 8
[  129.790215][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  129.811246][    T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  129.816062][ T6769] input: syz1 as /devices/virtual/input/input10
[  129.844309][    T8] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  129.880350][    T8] usb 4-1: Product: syz
[  129.885778][    T8] usb 4-1: Manufacturer: syz
[  129.910836][    T8] usb 4-1: SerialNumber: syz
[  129.912332][ T6767] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  129.935643][    T8] usb 4-1: config 0 descriptor??
[  129.976597][    T8] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  129.987632][ T6767] SQUASHFS error: Unable to read directory block [1d0:22]
[  130.019935][ T6767] SQUASHFS error: Unable to read directory block [1d0:22]
[  130.076134][ T6767] SQUASHFS error: Unable to read directory block [1d0:0]
[  130.103000][ T6767] overlayfs: failed to look up (syzcgroup) for ino (-5)
[  130.177161][ T6759] loop2: detected capacity change from 0 to 32768
[  130.190770][ T5773] SQUASHFS error: Unable to read directory block [1d0:22]
[  130.217755][ T5773] SQUASHFS error: Unable to read directory block [1d0:22]
[  130.245417][ T6759] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  130.347809][ T6782] netem: incorrect ge model size
[  130.353346][ T6782] netem: change failed
[  130.362418][    C0] usb 4-1: yurex_control_callback - control failed: -71
[  130.363407][  T966] usb 4-1: USB disconnect, device number 6
[  130.390292][ T6759] XFS (loop2): Ending clean mount
[  130.404876][  T966] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  130.434801][ T5834] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  130.588124][ T5775] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  130.644576][ T5834] usb 1-1: Using ep0 maxpacket: 16
[  130.656455][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.704991][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.723442][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  130.769278][ T5834] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  130.789780][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.818505][ T5834] usb 1-1: config 0 descriptor??
[  131.088773][ T6795] loop2: detected capacity change from 0 to 2048
[  131.115829][ T6795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.321542][ T5834] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input11
[  131.361663][ T5834] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  131.665893][ T5834] usb 1-1: USB disconnect, device number 4
[  131.824366][  T966] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  131.869281][ T6802] loop3: detected capacity change from 0 to 32768
[  131.907347][ T6802] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  131.984182][ T6802] XFS (loop3): Ending clean mount
[  132.000833][ T6802] XFS (loop3): Quotacheck needed: Please wait.
[  132.018804][  T966] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  132.028612][  T966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.036869][  T966] usb 3-1: Product: syz
[  132.044818][  T966] usb 3-1: Manufacturer: syz
[  132.049619][  T966] usb 3-1: SerialNumber: syz
[  132.087919][ T6802] XFS (loop3): Quotacheck: Done.
[  132.300385][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  132.776089][  T966] rtl8150 3-1:1.0: eth1: rtl8150 is detected
[  133.025698][ T5835] usb 3-1: USB disconnect, device number 4
[  133.112182][ T6834] loop3: detected capacity change from 0 to 512
[  133.141454][ T6834] EXT4-fs: Ignoring removed nobh option
[  133.226762][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  133.233548][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  133.242782][ T6834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.280711][ T6834] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  133.335098][ T6834] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.367: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  133.437080][ T6844] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.369'.
[  133.508957][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.797856][ T6825] loop1: detected capacity change from 0 to 40427
[  133.846451][ T6825] F2FS-fs (loop1): invalid crc value
[  133.874579][ T6825] F2FS-fs (loop1): Found nat_bits in checkpoint
[  133.994717][  T966] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  134.066923][ T6825] F2FS-fs (loop1): Start checkpoint disabled!
[  134.119542][ T6825] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  134.214336][  T966] usb 1-1: Using ep0 maxpacket: 16
[  134.242565][  T966] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  134.264849][  T966] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 166, changing to 11
[  134.306943][  T966] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 9233, setting to 1024
[  134.359996][  T966] usb 1-1: config 0 interface 0 has no altsetting 0
[  134.387606][  T966] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  134.418110][  T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.439221][  T966] usb 1-1: Product: syz
[  134.443463][  T966] usb 1-1: Manufacturer: syz
[  134.464417][  T966] usb 1-1: SerialNumber: syz
[  134.485722][  T966] usb 1-1: config 0 descriptor??
[  134.495678][ T6849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  134.739866][ T2934] kworker/u4:9: attempt to access beyond end of device
[  134.739866][ T2934] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  134.787686][ T6849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  134.810639][ T6851] loop3: detected capacity change from 0 to 32768
[  134.816444][ T2934] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  134.829914][ T6851] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.370 (6851)
[  134.832392][  T966] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12
[  134.856025][ T2934] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  134.930484][ T6851] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.007209][ T6851] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  135.045789][ T6851] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  135.062367][ T6851] BTRFS info (device loop3): trying to use backup root at mount time
[  135.091470][ T6851] BTRFS info (device loop3): setting nodatasum
[  135.125271][ T6851] BTRFS info (device loop3): force zlib compression, level 3
[  135.173454][ T6851] BTRFS info (device loop3): setting nodatacow
[  135.183277][ T6851] BTRFS info (device loop3): turning off barriers
[  135.214284][ T6851] BTRFS info (device loop3): disabling tree log
[  135.255431][ T6851] BTRFS info (device loop3): using free space tree
[  135.406944][  T966] usb 1-1: USB disconnect, device number 5
[  135.483939][ T6851] BTRFS info (device loop3): enabling ssd optimizations
[  136.072645][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.952047][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'.
[  137.093300][ T6938] loop0: detected capacity change from 0 to 1024
[  137.118939][ T6938] EXT4-fs: Ignoring removed mblk_io_submit option
[  137.199664][ T6938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  137.274640][ T6938] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.293744][ T6945] warning: `syz.3.396' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  137.454745][ T6938] EXT4-fs (loop0): re-mounted 00000000-0000-0006-0000-000000000000 ro.
[  137.566741][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  138.576846][ T6992] loop3: detected capacity change from 0 to 128
[  138.601125][ T6992] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  138.635178][ T6992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.042014][ T6984] loop0: detected capacity change from 0 to 40427
[  139.108165][ T6984] F2FS-fs (loop0): invalid crc value
[  139.141976][ T6984] F2FS-fs (loop0): Found nat_bits in checkpoint
[  139.319495][ T6984] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  139.459943][ T7015] loop2: detected capacity change from 0 to 8192
[  139.552571][ T7015] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  139.646194][ T5774] syz-executor: attempt to access beyond end of device
[  139.646194][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  139.675946][ T7015] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  139.751393][ T7015] REISERFS (device loop2): using ordered data mode
[  139.763442][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  139.824448][ T7015] reiserfs: using flush barriers
[  139.880275][ T7015] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  139.899787][ T7015] REISERFS (device loop2): checking transaction log (loop2)
[  139.922187][ T7015] REISERFS (device loop2): Using rupasov hash to sort names
[  139.932752][ T7015] REISERFS (device loop2): using 3.5.x disk format
[  139.941775][ T7015] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  139.971727][ T7015] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  140.001313][ T7015] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  140.031974][ T7015] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  140.061540][ T7015] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  140.230846][ T7015] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  140.293092][ T7015] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  140.320824][ T7035] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  140.379826][ T7035] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  140.424057][ T7015] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  140.672877][ T7042] [U] 
[  140.708656][ T7042] [U] )½0
[  140.723133][ T7042] [U] 
[  140.725984][ T7042] [U] 
[  140.729069][ T7042] [U] 
[  140.735330][ T7042] [U] 
[  140.738117][ T7042] [U] 
[  140.740953][ T7042] [U] 
[  140.743791][ T7042] [U] 
[  140.759526][ T7042] [U] 
[  140.762294][ T7042] [U] 
[  140.765027][ T7042] [U] 
[  140.786204][ T7041] [U] 
[  141.208279][ T7057] sp0: Synchronizing with TNC
[  142.792331][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.451'.
[  143.024342][  T966] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  143.236592][  T966] usb 2-1: Using ep0 maxpacket: 8
[  143.257056][  T966] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  143.285296][  T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.379385][ T7076] loop3: detected capacity change from 0 to 131072
[  143.395100][ T7076] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  143.396727][  T966] usb 2-1: config 0 descriptor??
[  143.403922][ T7076] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  143.422431][ T7076] F2FS-fs (loop3): invalid crc value
[  143.480026][ T7076] F2FS-fs (loop3): Found nat_bits in checkpoint
[  143.555576][ T7076] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  143.563054][ T7076] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  143.769551][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'.
[  143.899909][  T966] logitech 0003:046D:C294.0005: unknown main item tag 0xe
[  143.945441][  T966] logitech 0003:046D:C294.0005: item fetching failed at offset 3/5
[  143.982522][  T966] logitech 0003:046D:C294.0005: parse failed
[  144.014641][  T966] logitech: probe of 0003:046D:C294.0005 failed with error -22
[  144.126071][  T966] usb 2-1: USB disconnect, device number 9
[  144.717103][ T7109] dccp_invalid_packet: pskb_may_pull failed
[  145.349269][ T7125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.469'.
[  145.543606][ T7128] loop0: detected capacity change from 0 to 256
[  145.572938][ T7128] exfat: Deprecated parameter 'namecase'
[  145.603494][ T7128] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd6e59d5e, utbl_chksum : 0xe619d30d)
[  145.736899][ T7134] netlink: 44 bytes leftover after parsing attributes in process `syz.1.472'.
[  145.816216][ T7136] loop0: detected capacity change from 0 to 1024
[  146.008972][ T7136] hfsplus: xattr searching failed
[  146.134017][   T59] hfsplus: bad catalog file entry
[  146.154567][   T59] hfsplus: b-tree write err: -5, ino 3
[  146.634153][ T7161] loop1: detected capacity change from 0 to 512
[  146.761164][ T7161] FAT-fs (loop1): Directory bread(block 199916) failed
[  146.783906][ T7166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'.
[  146.800158][ T7161] FAT-fs (loop1): Directory bread(block 199917) failed
[  146.812865][ T7161] FAT-fs (loop1): Directory bread(block 199918) failed
[  146.840576][ T7161] FAT-fs (loop1): Directory bread(block 199919) failed
[  146.858711][ T7161] FAT-fs (loop1): Directory bread(block 199920) failed
[  146.887412][ T7161] FAT-fs (loop1): Directory bread(block 199921) failed
[  146.910663][ T7161] FAT-fs (loop1): Directory bread(block 199922) failed
[  146.923319][ T7161] FAT-fs (loop1): Directory bread(block 199923) failed
[  147.704038][ T7189] loop2: detected capacity change from 0 to 256
[  147.727887][ T7189] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  147.751209][ T7189] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  148.582549][ T7215] loop1: detected capacity change from 0 to 512
[  148.647209][ T7215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.717209][ T7215] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.816664][ T7199] loop2: detected capacity change from 0 to 32768
[  148.863031][ T7199] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  148.941503][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.975843][ T5812] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  149.076535][ T7199] XFS (loop2): Ending clean mount
[  149.178410][ T5812] usb 1-1: Using ep0 maxpacket: 32
[  149.183897][ T5775] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  149.197192][ T5812] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  149.209414][ T5812] usb 1-1: config 0 has no interface number 0
[  149.228225][ T7232] loop1: detected capacity change from 0 to 2048
[  149.233576][ T5812] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  149.246497][ T5812] usb 1-1: config 0 interface 85 has no altsetting 0
[  149.271336][ T5812] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  149.281258][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.290174][ T5812] usb 1-1: Product: syz
[  149.294927][ T5812] usb 1-1: Manufacturer: syz
[  149.299980][ T5812] usb 1-1: SerialNumber: syz
[  149.310794][ T7233] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.321817][ T5812] usb 1-1: config 0 descriptor??
[  149.546467][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.513'.
[  149.555450][ T7232] NILFS error (device loop1): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  149.597174][ T7232] Remounting filesystem read-only
[  149.710979][ T5773] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  149.743009][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=18
[  149.754485][ T5773] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  149.764319][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  149.773247][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  149.811562][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  149.822282][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=2
[  149.833865][ T5773] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  149.841859][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  149.864262][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  149.894346][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  149.907508][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=6
[  149.954572][ T5773] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  149.962246][ T5773] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  149.985352][ T5812] appletouch 1-1:0.85: Geyser mode initialized.
[  150.002999][ T5773] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  150.013663][ T5812] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input13
[  150.028248][ T5773] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  150.037972][ T5773] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  150.051094][ T5773] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  150.074321][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  150.095280][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  150.124550][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  150.196266][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=3
[  150.203042][ T5773] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  150.210946][ T5812] usb 1-1: USB disconnect, device number 6
[  150.211039][    C0] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  150.236479][ T5773] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  150.243853][ T5773] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  150.262394][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  150.276827][ T5812] appletouch 1-1:0.85: input: appletouch disconnected
[  150.299661][ T5773] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  150.336737][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  150.360201][ T7237] loop3: detected capacity change from 0 to 32768
[  150.360540][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  150.386357][ T5773] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  150.390563][ T7237] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  150.405267][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  150.468773][ T7237] XFS (loop3): Ending clean mount
[  150.678261][ T5776] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  151.350675][ T7269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.524'.
[  151.703489][ T7280] loop3: detected capacity change from 0 to 2048
[  151.719282][ T7280] UDF-fs: iocharset maccenteur37ØŸ»)¬â�~\ª¹�éði®Ô�}­”îvU§~ÝÑ#ê@IË«š9€Ìx‚ÅÔHÓ¦ŸI"¡“½Áæ3:Ö not found
[  151.747442][ T7282] loop0: detected capacity change from 0 to 65
[  151.773550][ T7282] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  151.791089][ T7282] BFS-fs: bfs_iget(): Unknown vtype=458754 loop0:00000002
[  151.824968][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  151.845527][ T5835] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  151.988193][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.531'.
[  152.040254][ T5835] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.074630][ T5835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  152.089094][ T5835] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  152.106937][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  152.126658][ T5835] usb 3-1: SerialNumber: syz
[  152.381466][ T5835] usb 3-1: 0:2 : does not exist
[  152.402382][ T5835] usb 3-1: unit 255 not found!
[  152.442374][ T5835] usb 3-1: USB disconnect, device number 5
[  152.510487][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  152.524577][ T7294] loop1: detected capacity change from 0 to 164
[  153.223489][ T7292] loop0: detected capacity change from 0 to 32768
[  153.377736][ T7292] ERROR: (device loop0): dtReadFirst: btstack overrun
[  153.377736][ T7292] 
[  153.421579][ T7292] ERROR: (device loop0): remounting filesystem as read-only
[  153.434394][ T7292] btstack dump:
[  153.438107][ T7292] bn = 0, index = 0
[  153.447540][ T7292] bn = 0, index = 0
[  153.451738][ T7292] bn = 0, index = 0
[  153.460119][ T7292] bn = 0, index = 0
[  153.464168][ T7292] bn = 0, index = 0
[  153.481743][ T7292] bn = 0, index = 0
[  153.490653][ T7292] bn = 0, index = 0
[  153.509524][ T7292] bn = 0, index = 0
[  154.409852][ T7323] 9pnet: Could not find request transport: ?
[  154.454348][   T28] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  154.667927][   T28] usb 2-1: Using ep0 maxpacket: 32
[  154.681484][   T28] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  154.695706][   T28] usb 2-1: config 0 has no interface number 0
[  154.709362][   T28] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.734323][   T28] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.754640][   T28] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  154.786415][   T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.825741][   T28] usb 2-1: config 0 descriptor??
[  154.904917][ T7347] loop0: detected capacity change from 0 to 64
[  155.066193][   T27] audit: type=1800 audit(2000000057.350:7): pid=7347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.558" name="file1" dev="loop0" ino=21 res=0 errno=0
[  155.087183][    C0] vkms_vblank_simulate: vblank timer overrun
[  155.108424][ T7346] loop3: detected capacity change from 0 to 4096
[  155.144325][ T7346] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  155.164380][ T7346] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  155.236244][ T7346] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  155.256893][   T28] hid (null): unknown global tag 0xe
[  155.257869][ T2969] kworker/u4:12: attempt to access beyond end of device
[  155.257869][ T2969] loop0: rw=1, sector=65, nr_sectors = 1 limit=64
[  155.311929][ T7346] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  155.312635][ T2969] Buffer I/O error on dev loop0, logical block 65, lost async page write
[  155.357059][ T7346] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  155.362375][ T2969] kworker/u4:12: attempt to access beyond end of device
[  155.362375][ T2969] loop0: rw=1, sector=66, nr_sectors = 1 limit=64
[  155.394520][ T2969] Buffer I/O error on dev loop0, logical block 66, lost async page write
[  155.403918][ T2969] kworker/u4:12: attempt to access beyond end of device
[  155.403918][ T2969] loop0: rw=1, sector=67, nr_sectors = 1 limit=64
[  155.422737][ T7346] ntfs: volume version 3.1.
[  155.428168][ T2969] Buffer I/O error on dev loop0, logical block 67, lost async page write
[  155.437307][ T2969] kworker/u4:12: attempt to access beyond end of device
[  155.437307][ T2969] loop0: rw=1, sector=68, nr_sectors = 1 limit=64
[  155.453626][ T2969] Buffer I/O error on dev loop0, logical block 68, lost async page write
[  155.474343][   T28] input: HID 28bd:0094 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0006/input/input14
[  155.496557][ T2969] kworker/u4:12: attempt to access beyond end of device
[  155.496557][ T2969] loop0: rw=1, sector=72, nr_sectors = 1 limit=64
[  155.518762][ T7346] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  155.530605][ T7346] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  155.554417][ T2969] Buffer I/O error on dev loop0, logical block 72, lost async page write
[  155.563430][ T7346] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  155.578333][ T2969] kworker/u4:12: attempt to access beyond end of device
[  155.578333][ T2969] loop0: rw=1, sector=73, nr_sectors = 1 limit=64
[  155.592281][ T2969] Buffer I/O error on dev loop0, logical block 73, lost async page write
[  155.601385][ T2969] kworker/u4:12: attempt to access beyond end of device
[  155.601385][ T2969] loop0: rw=1, sector=76, nr_sectors = 1 limit=64
[  155.618162][ T7346] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  155.655104][ T2969] Buffer I/O error on dev loop0, logical block 76, lost async page write
[  155.665986][   T28] uclogic 0003:28BD:0094.0006: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1
[  155.678094][ T2969] kworker/u4:12: attempt to access beyond end of device
[  155.678094][ T2969] loop0: rw=1, sector=77, nr_sectors = 1 limit=64
[  155.696561][   T28] usb 2-1: USB disconnect, device number 10
[  155.721469][ T2969] Buffer I/O error on dev loop0, logical block 77, lost async page write
[  155.759915][ T2969] kworker/u4:12: attempt to access beyond end of device
[  155.759915][ T2969] loop0: rw=1, sector=78, nr_sectors = 24 limit=64
[  155.920405][ T7354] fido_id[7354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  156.204706][ T7357] loop2: detected capacity change from 0 to 8192
[  156.237711][ T7357] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  156.272479][ T7357] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  156.282263][ T7357] REISERFS (device loop2): using ordered data mode
[  156.289077][ T7357] reiserfs: using flush barriers
[  156.296452][ T7357] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  156.314266][ T7357] REISERFS (device loop2): checking transaction log (loop2)
[  156.338561][ T7357] REISERFS (device loop2): Using r5 hash to sort names
[  156.366080][ T7357] REISERFS (device loop2): using 3.5.x disk format
[  156.373153][ T7357] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  157.103930][ T7358] loop3: detected capacity change from 0 to 32768
[  157.202963][ T7358] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.371041][ T7392] loop2: detected capacity change from 0 to 1024
[  157.385888][ T7392] EXT4-fs: inline encryption not supported
[  157.464982][ T7372] loop1: detected capacity change from 0 to 32768
[  157.474409][ T7392] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  157.501878][ T7358] XFS (loop3): Ending clean mount
[  157.573502][ T7392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.605736][ T7372] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  157.811922][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.854252][ T7369] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2048 but claims that 39166 are free
[  157.876801][ T7369] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  157.887061][ T7369] OCFS2: File system is now read-only.
[  157.893381][ T7369] (syz.1.569,7369,0):ocfs2_search_chain:1761 ERROR: status = -30
[  157.909287][ T7369] (syz.1.569,7369,0):ocfs2_search_chain:1871 ERROR: status = -30
[  157.922210][ T7369] (syz.1.569,7369,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  157.966185][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.010714][ T7369] (syz.1.569,7369,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  158.050262][ T7369] (syz.1.569,7369,1):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  158.073341][ T7369] (syz.1.569,7369,1):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  158.113039][ T7369] (syz.1.569,7369,1):ocfs2_mknod_locked:639 ERROR: status = -30
[  158.184446][ T7369] (syz.1.569,7369,1):ocfs2_symlink:1944 ERROR: status = -30
[  158.196480][ T7369] (syz.1.569,7369,1):ocfs2_symlink:2068 ERROR: status = -30
[  158.343959][ T5773] ocfs2: Unmounting device (7,1) on (node local)
[  158.444005][ T7412] loop3: detected capacity change from 0 to 512
[  158.475418][ T7412] EXT4-fs: Ignoring removed i_version option
[  158.481504][ T7412] EXT4-fs: Ignoring removed nobh option
[  158.528067][ T7412] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  158.552012][ T7412] EXT4-fs (loop3): 1 truncate cleaned up
[  158.575789][ T7412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.871485][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.377745][ T7430] (null): rxe_set_mtu: Set mtu to 256
[  159.401021][ T7430] vxcan1 speed is unknown, defaulting to 1000
[  159.449066][ T7430] vxcan1 speed is unknown, defaulting to 1000
[  159.474457][ T7433] netlink: 'syz.3.589': attribute type 10 has an invalid length.
[  159.518984][ T7433] team0: Device vxcan1 is of different type
[  159.610377][ T7430] vxcan1 speed is unknown, defaulting to 1000
[  159.766014][ T7419] loop1: detected capacity change from 0 to 40427
[  159.793859][ T7419] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  159.802691][ T7419] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  159.881530][ T7419] F2FS-fs (loop1): Found nat_bits in checkpoint
[  160.065816][ T7419] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  160.089582][ T7419] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  160.119375][ T7447] loop0: detected capacity change from 0 to 256
[  160.229992][ T7447] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  160.325735][   T28] vxcan1 speed is unknown, defaulting to 1000
[  160.354362][ T7430] infiniband syz2: set down
[  160.359773][ T7430] infiniband syz2: added vxcan1
[  160.408017][ T7430] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  160.438546][ T7430] infiniband syz2: Couldn't open port 1
[  160.549547][ T7430] RDS/IB: syz2: added
[  160.577276][ T7430] smc: adding ib device syz2 with port count 1
[  160.583744][ T7430] smc:    ib device syz2 port 1 has pnetid 
[  160.608889][   T23] vxcan1 speed is unknown, defaulting to 1000
[  160.613050][ T7455] mkiss: ax0: crc mode is auto.
[  160.626456][ T7430] vxcan1 speed is unknown, defaulting to 1000
[  161.121284][ T7430] vxcan1 speed is unknown, defaulting to 1000
[  161.560072][ T7430] vxcan1 speed is unknown, defaulting to 1000
[  161.644409][ T5835] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  161.668404][ T7472] loop2: detected capacity change from 0 to 128
[  161.685852][ T7472] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  161.719014][ T7472] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  161.851287][ T5835] usb 2-1: config index 0 descriptor too short (expected 65298, got 18)
[  161.874314][ T5835] usb 2-1: config 0 has too many interfaces: 230, using maximum allowed: 32
[  161.898815][ T5835] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 230
[  161.926269][ T5835] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  161.950904][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.969504][ T7430] vxcan1 speed is unknown, defaulting to 1000
[  161.976047][ T5835] usb 2-1: Product: syz
[  161.994273][ T5835] usb 2-1: Manufacturer: syz
[  161.999116][ T5835] usb 2-1: SerialNumber: syz
[  162.032751][ T5835] usb 2-1: config 0 descriptor??
[  162.268406][ T5835] usb 2-1: ignoring: probably an ADSL modem
[  162.433832][ T7484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.611'.
[  162.670372][ T5835] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  162.737501][ T7492] loop2: detected capacity change from 0 to 1024
[  162.843062][ T7494] loop3: detected capacity change from 0 to 256
[  162.878127][ T5835] usb 2-1: USB disconnect, device number 11
[  162.913290][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  162.913306][   T27] audit: type=1800 audit(2000000065.210:8): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.616" name="file1" dev="loop3" ino=1048609 res=0 errno=0
[  163.382283][   T27] audit: type=1326 audit(2000000065.680:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.2.620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e2359c629 code=0x0
[  163.680961][ T7510] (null): rxe_set_mtu: Set mtu to 256
[  163.688579][ T7510] rdma_rxe: rxe_newlink: failed to add vxcan1
[  163.698877][ T7510] netlink: 'syz.0.622': attribute type 10 has an invalid length.
[  163.729018][ T7510] team0: Device vxcan1 is of different type
[  163.788199][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'.
[  163.824391][ T5812] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  164.054302][ T5812] usb 2-1: Using ep0 maxpacket: 16
[  164.066608][ T5812] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.078896][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0
[  164.086104][ T5812] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  164.096049][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.112675][ T5812] usb 2-1: config 0 descriptor??
[  164.565822][ T5812] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  164.883669][ T7516] loop3: detected capacity change from 0 to 40427
[  164.944422][ T7516] F2FS-fs (loop3): invalid crc value
[  164.955087][ T7516] F2FS-fs (loop3): Ignore s_resuid=980643439, s_resgid=0 w/o reserve_root
[  164.975902][ T5812] usb 2-1: USB disconnect, device number 12
[  165.018662][ T7516] F2FS-fs (loop3): Found nat_bits in checkpoint
[  165.162950][ T7516] F2FS-fs (loop3): Start checkpoint disabled!
[  165.181359][ T7516] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  165.340453][ T7516] F2FS-fs (loop3): Ignore s_resuid=980643439, s_resgid=0 w/o reserve_root
[  165.449363][ T7539] program syz.0.635 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  165.705116][ T7528] loop2: detected capacity change from 0 to 32768
[  165.815246][ T7528] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  165.891351][ T7528] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  166.056707][ T7528] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  166.306502][ T7528] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  166.512046][ T7558] overlayfs: workdir and upperdir must reside under the same mount
[  166.813884][ T7543] loop0: detected capacity change from 0 to 32768
[  166.831822][ T7543] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  166.993688][ T5764] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  167.141652][ T7570] loop1: detected capacity change from 0 to 512
[  167.150753][ T7571] loop0: detected capacity change from 0 to 256
[  167.184121][ T7571] exfat: Deprecated parameter 'namecase'
[  167.220392][ T7571] exfat: Deprecated parameter 'namecase'
[  167.247260][ T7571] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  167.290273][ T7571] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  167.480411][ T7570] EXT4-fs (loop1): Test dummy encryption mode enabled
[  167.490597][ T7570] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  167.543144][ T7570] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.650: bad orphan inode 131083
[  167.587544][ T7570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.781169][ T7584] loop0: detected capacity change from 0 to 1024
[  167.823580][ T7584] EXT4-fs: Ignoring removed orlov option
[  167.894058][ T7584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.983901][ T7572] loop3: detected capacity change from 0 to 32768
[  168.045782][ T7570] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  168.083975][ T7572] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  168.159055][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.281134][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.416134][ T7572] syz.3.651 (7572) used greatest stack depth: 18736 bytes left
[  168.590128][ T5776] ocfs2: Unmounting device (7,3) on (node local)
[  168.646708][ T7579] loop2: detected capacity change from 0 to 32768
[  168.683191][ T7579] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.653 (7579)
[  168.765811][ T7579] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  168.790283][ T7579] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  168.800806][ T7579] BTRFS info (device loop2): setting nodatacow, compression disabled
[  168.826675][ T7579] BTRFS info (device loop2): force clearing of disk cache
[  168.849341][ T7579] BTRFS info (device loop2): enabling ssd optimizations
[  168.870177][ T7579] BTRFS info (device loop2): using spread ssd allocation scheme
[  168.899488][ T7579] BTRFS info (device loop2): turning off barriers
[  168.918997][ T7579] BTRFS info (device loop2): disabling free space tree
[  168.939007][ T7579] BTRFS info (device loop2): not using ssd optimizations
[  168.972657][ T7579] BTRFS info (device loop2): not using spread ssd allocation scheme
[  169.139323][ T7579] BTRFS info (device loop2): rebuilding free space tree
[  169.262821][ T7579] BTRFS info (device loop2): disabling free space tree
[  169.282200][ T7579] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  169.334624][ T7579] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  169.822579][ T5775] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  170.011727][ T7623] loop1: detected capacity change from 0 to 32768
[  170.164503][ T7623] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  170.427056][ T7623] XFS (loop1): Ending clean mount
[  170.683266][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  170.820448][ T1094] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96
[  171.173519][ T7659] loop2: detected capacity change from 0 to 4096
[  171.237526][ T7659] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  171.354356][ T7659] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  171.683357][ T7667] loop0: detected capacity change from 0 to 4096
[  171.797734][ T7667] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  171.843531][ T7667] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[  172.197222][ T7681] hsr0: entered promiscuous mode
[  172.203008][ T7681] macsec1: entered allmulticast mode
[  172.252358][ T7681] hsr0: entered allmulticast mode
[  172.270417][ T7681] hsr_slave_0: entered allmulticast mode
[  172.293860][ T7681] hsr_slave_1: entered allmulticast mode
[  172.322850][ T7681] hsr0: left allmulticast mode
[  172.335729][ T7681] hsr_slave_0: left allmulticast mode
[  172.351600][ T7681] hsr_slave_1: left allmulticast mode
[  172.734571][ T7694] team0: entered allmulticast mode
[  172.752840][ T7694] team_slave_0: entered allmulticast mode
[  172.771674][ T7694] team_slave_1: entered allmulticast mode
[  172.981421][ T7697] loop1: detected capacity change from 0 to 764
[  173.323256][ T7690] loop2: detected capacity change from 0 to 40427
[  173.344956][ T7690] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  173.351539][ T7690] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  173.394375][ T7690] F2FS-fs (loop2): invalid crc value
[  173.494411][   T28] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  173.614284][ T7690] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  173.621403][ T7690] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  173.712933][   T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.732072][   T28] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  173.734471][ T5835] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  173.756493][   T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.770035][   T28] usb 2-1: config 0 descriptor??
[  173.782849][   T28] pwc: Askey VC010 type 2 USB webcam detected.
[  173.796094][ T5775] syz-executor: attempt to access beyond end of device
[  173.796094][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  173.816052][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  173.934403][ T5835] usb 1-1: Using ep0 maxpacket: 32
[  173.942675][ T5835] usb 1-1: config 0 interface 0 has no altsetting 0
[  173.955662][ T5835] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  173.966941][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.975604][ T5835] usb 1-1: Product: syz
[  173.980217][ T5835] usb 1-1: Manufacturer: syz
[  173.985931][ T5835] usb 1-1: SerialNumber: syz
[  174.005935][ T5835] usb 1-1: config 0 descriptor??
[  174.208949][   T28] pwc: recv_control_msg error -32 req 02 val 2b00
[  174.429664][   T28] pwc: recv_control_msg error -71 req 02 val 2c00
[  174.439237][ T5835] gs_usb 1-1:0.0: Configuring for 222 interfaces
[  174.443097][   T28] pwc: recv_control_msg error -71 req 04 val 1000
[  174.460472][   T28] pwc: recv_control_msg error -71 req 04 val 1300
[  174.470540][   T28] pwc: recv_control_msg error -71 req 04 val 1400
[  174.487189][   T28] pwc: recv_control_msg error -71 req 02 val 2000
[  174.506339][   T28] pwc: recv_control_msg error -71 req 02 val 2100
[  174.528164][   T28] pwc: recv_control_msg error -71 req 04 val 1500
[  174.545566][   T28] pwc: recv_control_msg error -71 req 02 val 2500
[  174.555589][   T28] pwc: recv_control_msg error -71 req 02 val 2400
[  174.562897][ T7724] loop2: detected capacity change from 0 to 1024
[  174.571120][ T7724] EXT4-fs: Ignoring removed orlov option
[  174.606006][   T28] pwc: recv_control_msg error -71 req 02 val 2600
[  174.627153][   T28] pwc: recv_control_msg error -71 req 02 val 2900
[  174.628769][ T7724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.640634][   T28] pwc: recv_control_msg error -71 req 02 val 2800
[  174.678783][ T5835] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  174.700801][   T28] pwc: recv_control_msg error -71 req 04 val 1100
[  174.709021][ T5835] gs_usb: probe of 1-1:0.0 failed with error -22
[  174.718777][   T28] pwc: recv_control_msg error -71 req 04 val 1200
[  174.779729][   T28] pwc: Registered as video103.
[  174.825851][   T28] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15
[  174.855809][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.925887][   T28] usb 2-1: USB disconnect, device number 13
[  175.002294][ T5835] usb 1-1: USB disconnect, device number 7
[  175.120436][ T7734] loop3: detected capacity change from 0 to 4096
[  175.192130][ T7734] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  175.217307][ T7734] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  175.506140][ T7742] loop1: detected capacity change from 0 to 256
[  175.507461][ T7744] program syz.3.707 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  175.530193][ T7742] exfat: Deprecated parameter 'namecase'
[  175.605215][ T7742] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  175.993979][ T7753] loop0: detected capacity change from 0 to 1024
[  176.053103][ T7753] EXT4-fs: Ignoring removed orlov option
[  176.118117][ T7753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.189754][ T7738] loop2: detected capacity change from 0 to 32768
[  176.212550][ T7738] (syz.2.705,7738,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  176.257017][ T7738] (syz.2.705,7738,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  176.338308][ T7738] JBD2: Ignoring recovery information on journal
[  176.371716][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.397934][ T7738] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  176.474579][ T5834] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  176.596059][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  176.635514][ T5775] ocfs2: Unmounting device (7,2) on (node local)
[  176.688421][ T5834] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  176.707868][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.728027][ T5834] usb 4-1: config 0 descriptor??
[  176.749333][ T5834] cp210x 4-1:0.0: cp210x converter detected
[  176.787158][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  176.796311][    T9] usb 2-1: config 0 has no interface number 0
[  176.807451][    T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  176.828398][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.870514][    T9] usb 2-1: Product: syz
[  176.891096][    T9] usb 2-1: Manufacturer: syz
[  176.901487][    T9] usb 2-1: SerialNumber: syz
[  176.919968][    T9] usb 2-1: config 0 descriptor??
[  177.186391][ T5834] usb 4-1: cp210x converter now attached to ttyUSB0
[  177.203968][    T9] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  177.230139][    T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  177.241549][    T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  177.251751][    T9] usb 2-1: media controller created
[  177.274632][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  177.394657][ T5812] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  177.422862][   T23] usb 4-1: USB disconnect, device number 7
[  177.440856][   T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  177.460536][   T23] cp210x 4-1:0.0: device disconnected
[  177.586586][ T5812] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  177.594921][ T5812] usb 1-1: config 0 has no interface number 0
[  177.601193][ T5812] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  177.612831][ T5812] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  177.624077][ T5812] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  177.637080][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.655023][ T5812] usb 1-1: config 0 descriptor??
[  177.661049][ T7777] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  177.683069][ T5812] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  177.939832][ T5812] usb 1-1: USB disconnect, device number 8
[  178.343386][    T9] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  178.424474][    T9] usb 2-1: USB disconnect, device number 14
[  178.601392][ T7796] loop2: detected capacity change from 0 to 512
[  178.613961][ T7796] EXT4-fs: Ignoring removed mblk_io_submit option
[  178.671415][ T7796] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.728: invalid block
[  178.700936][ T7796] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.728: invalid indirect mapped block 10 (level 1)
[  178.716818][ T7796] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.728: invalid indirect mapped block 8 (level 1)
[  178.731084][ T7796] EXT4-fs (loop2): 1 truncate cleaned up
[  178.738684][ T7796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.847934][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.087554][ T7805] loop2: detected capacity change from 0 to 128
[  179.348149][ T7809] netlink: 'syz.1.733': attribute type 2 has an invalid length.
[  179.404952][ T7809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.733'.
[  179.652142][ T7822] loop0: detected capacity change from 0 to 64
[  179.732669][ T7822] hfs: walked past end of dir
[  179.749292][ T7823] loop1: detected capacity change from 0 to 2048
[  179.803115][ T7823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.934693][   T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  180.038931][ T5773] UDF-fs: error (device loop1): udf_read_inode: (ino 1410) failed !bh
[  180.055300][ T5773] UDF-fs: error (device loop1): udf_read_inode: (ino 1410) failed !bh
[  180.114307][   T23] usb 4-1: Using ep0 maxpacket: 32
[  180.123676][   T23] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  180.141480][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.158098][   T23] usb 4-1: config 0 descriptor??
[  180.328158][ T7835] loop2: detected capacity change from 0 to 1024
[  180.399572][ T7835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.434750][   T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  180.461697][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  180.491132][   T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  180.518197][   T27] audit: type=1800 audit(2000000082.820:10): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.745" name="file1" dev="loop2" ino=15 res=0 errno=0
[  180.559772][   T23] usb 4-1: media controller created
[  180.633411][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  180.695725][   T23] az6027: usb out operation failed. (-71)
[  180.714839][   T23] az6027: usb out operation failed. (-71)
[  180.720756][   T23] stb0899_attach: Driver disabled by Kconfig
[  180.734325][   T23] az6027: no front-end attached
[  180.734325][   T23] 
[  180.735708][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.749650][   T23] az6027: usb out operation failed. (-71)
[  180.765316][   T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  180.790755][   T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16
[  180.837428][   T23] dvb-usb: schedule remote query interval to 400 msecs.
[  180.864306][   T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  180.919150][   T23] usb 4-1: USB disconnect, device number 8
[  181.051294][   T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  181.062395][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.098891][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.119556][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.130221][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.140614][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.151568][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.162302][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.173792][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.188127][ T7846] batman_adv: batadv0: Adding interface: ipvlan2
[  181.195747][ T7846] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.230224][ T7846] batman_adv: batadv0: Interface activated: ipvlan2
[  181.816609][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.844660][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.870228][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.883681][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.892982][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  181.901232][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.059334][ T7862] vxcan1 speed is unknown, defaulting to 1000
[  182.072420][ T7871] syz_tun: entered promiscuous mode
[  182.092728][ T7870] syz_tun: left promiscuous mode
[  182.805954][ T7862] chnl_net:caif_netlink_parms(): no params data found
[  182.915714][ T7862] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.923224][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.930749][ T7862] bridge_slave_0: entered allmulticast mode
[  182.938610][ T7862] bridge_slave_0: entered promiscuous mode
[  182.956421][ T7873] loop3: detected capacity change from 0 to 32768
[  182.969421][ T7862] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.977584][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.985148][ T7862] bridge_slave_1: entered allmulticast mode
[  182.993611][ T7862] bridge_slave_1: entered promiscuous mode
[  183.031877][ T7873] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  183.034505][ T7862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.077175][ T7873] JBD2: Ignoring recovery information on journal
[  183.084479][ T7862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.157590][ T5834] kernel read not supported for file /dsp1 (pid: 5834 comm: kworker/0:5)
[  183.182920][ T7873] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  183.208784][ T7887] program syz.2.764 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  183.223459][ T7862] team0: Port device team_slave_0 added
[  183.275116][ T7862] team0: Port device team_slave_1 added
[  183.391387][ T7862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.444799][ T7862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.506224][ T7862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.537107][ T7862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.548778][ T7862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.620776][ T7862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.695019][ T5776] ocfs2: Unmounting device (7,3) on (node local)
[  183.798202][ T7862] hsr_slave_0: entered promiscuous mode
[  183.835774][ T7897] loop2: detected capacity change from 0 to 4096
[  183.848034][ T7862] hsr_slave_1: entered promiscuous mode
[  183.861333][ T7897] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  183.887448][ T7862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.909673][ T7862] Cannot create hsr debugfs directory
[  183.934625][ T5787] Bluetooth: hci1: command tx timeout
[  183.971311][ T7897] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  184.470196][ T7862] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  184.506991][ T7862] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  184.547558][ T7862] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  184.597438][ T7862] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  184.876878][ T7862] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.977267][ T7862] 8021q: adding VLAN 0 to HW filter on device team0
[  185.036449][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.043728][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.104748][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.112212][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.289747][ T7899] loop0: detected capacity change from 0 to 32768
[  185.460915][ T7899] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  185.648093][ T7899] XFS (loop0): Ending clean mount
[  185.691642][ T7899] XFS (loop0): Quotacheck needed: Please wait.
[  185.818652][ T7899] XFS (loop0): Quotacheck: Done.
[  186.017157][ T5787] Bluetooth: hci1: command tx timeout
[  186.031444][ T7908] loop3: detected capacity change from 0 to 131072
[  186.054908][ T7908] F2FS-fs (loop3): invalid crc value
[  186.084692][ T7908] F2FS-fs (loop3): Found nat_bits in checkpoint
[  186.176684][ T7908] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  186.403620][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  186.419557][ T7862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.940335][ T7939] input: syz0 as /devices/virtual/input/input17
[  187.055993][ T7862] veth0_vlan: entered promiscuous mode
[  187.106127][ T7862] veth1_vlan: entered promiscuous mode
[  187.189154][ T7862] veth0_macvtap: entered promiscuous mode
[  187.198998][ T7941] loop2: detected capacity change from 0 to 256
[  187.211170][ T7862] veth1_macvtap: entered promiscuous mode
[  187.225464][ T7941] exfat: Deprecated parameter 'utf8'
[  187.231092][ T7941] exfat: Deprecated parameter 'utf8'
[  187.277823][ T7941] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  187.292835][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.324295][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.354561][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.384450][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.401933][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.413057][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.424041][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.435878][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.446186][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2
[  187.456686][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.476036][ T7862] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.549778][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.560989][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.595556][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.614246][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.642462][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.681425][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.726593][ T7862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  187.757422][ T7862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.788602][ T7862] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.844918][ T7862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.892904][ T7862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.932561][ T7862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.961365][ T7862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.080499][   T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  188.097560][ T5787] Bluetooth: hci1: command tx timeout
[  188.139592][   T23] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  188.365080][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.373070][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.496811][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.540197][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.586180][ T7952] loop2: detected capacity change from 0 to 131072
[  189.640231][ T7952] F2FS-fs (loop2): invalid crc value
[  189.681990][ T7952] F2FS-fs (loop2): Found nat_bits in checkpoint
[  189.755664][ T7952] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  189.932495][ T7952] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36
[  190.174781][ T5787] Bluetooth: hci1: command tx timeout
[  190.422696][ T7986] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  190.730124][ T7993] loop4: detected capacity change from 0 to 512
[  191.135802][ T8000] loop3: detected capacity change from 0 to 512
[  191.189820][ T8000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.352949][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.422150][ T8008] loop2: detected capacity change from 0 to 16
[  191.442894][ T8008] erofs: (device loop2): mounted with root inode @ nid 36.
[  192.375435][ T8027] loop3: detected capacity change from 0 to 1024
[  193.417939][    T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  193.634384][    T8] usb 4-1: Using ep0 maxpacket: 8
[  193.643892][    T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  193.673631][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.700647][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.713357][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  193.742954][    T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  193.754555][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.775525][ T8062] loop4: detected capacity change from 0 to 256
[  193.777241][    T8] usb 4-1: config 0 descriptor??
[  193.913048][ T8062] FAT-fs (loop4): Directory bread(block 64) failed
[  193.938874][ T8062] FAT-fs (loop4): Directory bread(block 65) failed
[  193.964553][ T8062] FAT-fs (loop4): Directory bread(block 66) failed
[  193.971168][ T8062] FAT-fs (loop4): Directory bread(block 67) failed
[  194.034482][ T8062] FAT-fs (loop4): Directory bread(block 68) failed
[  194.051575][ T8062] FAT-fs (loop4): Directory bread(block 69) failed
[  194.070927][ T8062] FAT-fs (loop4): Directory bread(block 70) failed
[  194.090338][ T8062] FAT-fs (loop4): Directory bread(block 71) failed
[  194.102965][ T8062] FAT-fs (loop4): Directory bread(block 72) failed
[  194.124359][ T8062] FAT-fs (loop4): Directory bread(block 73) failed
[  194.250004][ T8062] syz.4.827: attempt to access beyond end of device
[  194.250004][ T8062] loop4: rw=1, sector=1224, nr_sectors = 64 limit=256
[  194.281143][    T8] redragon 0003:0C45:760B.0009: unknown main item tag 0x6
[  194.292177][ T8062] syz.4.827: attempt to access beyond end of device
[  194.292177][ T8062] loop4: rw=1, sector=1320, nr_sectors = 36 limit=256
[  194.324264][    T8] redragon 0003:0C45:760B.0009: item fetching failed at offset 7/133
[  194.353112][    T8] redragon: probe of 0003:0C45:760B.0009 failed with error -22
[  194.357492][ T8069] loop0: detected capacity change from 0 to 1764
[  194.575028][ T5812] usb 4-1: USB disconnect, device number 9
[  194.664661][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.671410][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  195.102234][ T8090] loop0: detected capacity change from 0 to 512
[  195.181154][ T8090] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.840: iget: bad i_size value: 38620345925642
[  195.215036][ T8090] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.840: couldn't read orphan inode 15 (err -117)
[  195.234572][ T8090] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.294642][ T5812] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  195.309378][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  195.434014][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'.
[  195.484472][ T5812] usb 3-1: Using ep0 maxpacket: 32
[  195.493885][ T5812] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  195.503396][   T28] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  195.520713][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.552007][ T5812] usb 3-1: config 0 descriptor??
[  195.584483][ T5812] gspca_main: sunplus-2.14.0 probing 041e:400b
[  195.714294][   T28] usb 4-1: Using ep0 maxpacket: 32
[  195.733026][   T28] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  195.746885][   T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.772718][   T28] usb 4-1: config 0 descriptor??
[  195.881941][ T8110] loop0: detected capacity change from 0 to 256
[  195.915806][ T8110] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372)
[  196.022087][   T28] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  196.037352][   T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  196.048422][   T28] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  196.055844][   T28] usb 4-1: media controller created
[  196.088247][   T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  196.224522][   T28] az6027: usb out operation failed. (-71)
[  196.241925][   T28] az6027: usb out operation failed. (-71)
[  196.248860][   T28] stb0899_attach: Driver disabled by Kconfig
[  196.261297][   T28] az6027: no front-end attached
[  196.261297][   T28] 
[  196.283723][   T28] az6027: usb out operation failed. (-71)
[  196.290345][   T28] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  196.307938][   T28] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18
[  196.322984][   T28] dvb-usb: schedule remote query interval to 400 msecs.
[  196.332535][   T28] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  196.351568][   T28] usb 4-1: USB disconnect, device number 10
[  196.418551][ T5812] gspca_sunplus: reg_r err -71
[  196.424009][ T5812] sunplus: probe of 3-1:0.0 failed with error -71
[  196.455153][ T5812] usb 3-1: USB disconnect, device number 6
[  196.464758][   T28] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  196.566668][ T8106] loop4: detected capacity change from 0 to 40427
[  196.584484][ T8106] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  196.601803][ T8106] F2FS-fs (loop4): invalid crc value
[  196.621931][ T8106] F2FS-fs (loop4): Found nat_bits in checkpoint
[  196.706260][ T8106] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  196.814887][ T7862] syz-executor: attempt to access beyond end of device
[  196.814887][ T7862] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  196.830225][ T7862] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  197.327725][ T8122] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input19
[  197.534603][   T28] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  197.738124][   T28] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  197.748915][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.764691][   T28] usb 4-1: Product: syz
[  197.775501][   T28] usb 4-1: Manufacturer: syz
[  197.784651][   T28] usb 4-1: SerialNumber: syz
[  197.821594][   T28] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  197.906572][ T5812] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  198.127416][ T8138] loop0: detected capacity change from 0 to 4096
[  198.149491][ T8138] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  198.229758][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.241675][ T8138] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  198.253913][ T8138] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  198.259132][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.301306][ T8138] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  198.335208][ T8138] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  198.369821][ T8138] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  198.383532][ T8138] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  198.452499][ T8138] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  198.481713][ T8138] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  198.534836][ T8138] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  198.556544][ T8138] ntfs: volume version 3.1.
[  198.749067][   T28] usb 4-1: USB disconnect, device number 11
[  199.053162][ T8149] tap0: tun_chr_ioctl cmd 1074025677
[  199.060072][ T8149] tap0: linktype set to 774
[  199.408253][ T8159] loop2: detected capacity change from 0 to 128
[  199.454506][ T5812] usb 4-1: Service connection timeout for: 256
[  199.460924][ T5812] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  199.517879][ T5812] ath9k_htc: Failed to initialize the device
[  199.564516][   T28] usb 4-1: ath9k_htc: USB layer deinitialized
[  199.788470][ T8164] loop4: detected capacity change from 0 to 4096
[  199.986154][ T8164] ntfs3: loop4: ino=5, "/" attr_set_size
[  199.992924][ T8164] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  200.053638][ T8175] loop2: detected capacity change from 0 to 512
[  200.197235][ T8175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.462575][ T8188] netlink: 72 bytes leftover after parsing attributes in process `syz.0.882'.
[  200.559688][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.859770][ T8198] program syz.2.887 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  201.062846][ T8203] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.890'.
[  201.113197][ T8203] openvswitch: netlink: Flow key attribute not present in set flow.
[  201.175473][ T8207] loop2: detected capacity change from 0 to 4096
[  201.304656][ T8211] loop0: detected capacity change from 0 to 512
[  201.342647][ T8211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.742822][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.855065][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  201.861493][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  202.676079][ T8249] tap0: tun_chr_ioctl cmd 1074025677
[  202.691952][ T8249] tap0: linktype set to 778
[  203.035011][ T8237] loop3: detected capacity change from 0 to 32768
[  203.125322][ T8237] JBD2: Ignoring recovery information on journal
[  203.262721][ T8251] loop0: detected capacity change from 0 to 32768
[  203.302943][ T8237] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  203.334369][ T8251] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  203.397404][ T8251] JBD2: Ignoring recovery information on journal
[  203.536439][ T8251] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  203.678442][ T8251] (syz.0.912,8251,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  203.709921][ T8251] (syz.0.912,8251,1):ocfs2_get_suballoc_slot_bit:2719 ERROR: read block 42949672960000000 failed -12
[  203.766148][ T8251] (syz.0.912,8251,1):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -12
[  203.831694][ T8251] (syz.0.912,8251,1):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -12
[  203.851904][ T5776] ocfs2: Unmounting device (7,3) on (node local)
[  203.909608][ T8251] (syz.0.912,8251,1):ocfs2_test_inode_bit:2874 ERROR: status = -12
[  203.925101][ T8251] (syz.0.912,8251,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  204.067981][ T5774] ocfs2: Unmounting device (7,0) on (node local)
[  204.519521][ T8279] loop3: detected capacity change from 0 to 64
[  204.538626][ T8281] loop2: detected capacity change from 0 to 128
[  204.702762][ T5776] hfs: request for non-existent node 131072 in B*Tree
[  204.903834][ T8285] process 'syz.3.926' launched './file0' with NULL argv: empty string added
[  205.002271][ T8287] loop2: detected capacity change from 0 to 256
[  205.043734][ T8271] loop4: detected capacity change from 0 to 40427
[  205.084012][ T8271] F2FS-fs (loop4): Image doesn't support compression
[  205.133876][ T8271] F2FS-fs (loop4): invalid crc value
[  205.263303][ T8292] loop3: detected capacity change from 0 to 164
[  205.594467][ T8271] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  205.689437][ T8297] loop2: detected capacity change from 0 to 128
[  205.821460][ T8297] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  205.879222][ T8297] hpfs: filesystem error: improperly stopped
[  205.914279][ T8297] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  205.940081][ T8297] hpfs: You really don't want any checks? You are crazy...
[  205.948048][ T7862] syz-executor: attempt to access beyond end of device
[  205.948048][ T7862] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  205.963948][ T8297] hpfs: hpfs_map_sector(): read error
[  205.984921][ T7862] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  205.993120][ T8297] hpfs: code page support is disabled
[  206.001135][ T8297] hpfs: hpfs_map_4sectors(): unaligned read
[  206.024976][ T8297] hpfs: hpfs_map_4sectors(): unaligned read
[  206.032161][ T8297] hpfs: filesystem error: unable to find root dir
[  206.275787][ T8283] loop0: detected capacity change from 0 to 40427
[  206.324444][ T8283] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  206.331458][ T8283] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  206.393530][ T8283] F2FS-fs (loop0): heap/no_heap options were deprecated
[  206.459634][ T8283] F2FS-fs (loop0): invalid crc value
[  206.520257][ T8283] F2FS-fs (loop0): Found nat_bits in checkpoint
[  206.739005][ T8283] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  206.765069][ T8283] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  206.877137][ T8283] F2FS-fs (loop0): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix.
[  206.909536][ T8312] loop2: detected capacity change from 0 to 4096
[  206.953669][ T8312] ntfs3: loop2: ino=3, Correct links count -> 2.
[  207.016453][ T5774] syz-executor: attempt to access beyond end of device
[  207.016453][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  207.058697][ T5774] F2FS-fs (loop0): Remounting filesystem read-only
[  207.101453][ T8312] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  207.580495][ T8307] loop3: detected capacity change from 0 to 32768
[  207.647072][ T8307] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  207.776612][ T8307] XFS (loop3): Ending clean mount
[  207.817912][ T8307] XFS (loop3): Quotacheck needed: Please wait.
[  207.888713][ T8307] XFS (loop3): Quotacheck: Done.
[  208.209225][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  208.447189][ T8347] input: syz0 as /devices/virtual/input/input20
[  208.728718][ T8359] loop0: detected capacity change from 0 to 256
[  208.750571][ T8359] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  208.754779][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  208.762083][ T8359] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  208.805063][ T8359] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  208.974384][    T8] usb 5-1: Using ep0 maxpacket: 8
[  208.989231][    T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  209.004118][    T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  209.034323][    T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  209.052489][    T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  209.080026][    T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  209.101647][ T8363] loop2: detected capacity change from 0 to 512
[  209.117536][    T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  209.128122][ T8363] EXT4-fs: Ignoring removed oldalloc option
[  209.134975][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.163572][ T8363] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  209.247208][ T8363] EXT4-fs (loop2): 1 truncate cleaned up
[  209.270362][ T8363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.406098][    T8] usb 5-1: GET_CAPABILITIES returned 0
[  209.413099][    T8] usbtmc 5-1:16.0: can't read capabilities
[  209.575978][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.619283][ T5812] usb 5-1: USB disconnect, device number 2
[  209.682026][ T8373] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ
[  209.838444][ T8379] loop0: detected capacity change from 0 to 64
[  210.235425][ T5812] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  210.438074][ T5812] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 4361, setting to 64
[  210.469680][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0
[  210.503065][ T5812] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  210.523963][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  210.543288][ T5812] usb 3-1: Product: syz
[  210.556338][ T5812] usb 3-1: Manufacturer: syz
[  210.571586][ T5812] usb 3-1: SerialNumber: syz
[  210.584691][ T5812] usb 3-1: config 0 descriptor??
[  210.592308][ T8381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  210.628737][ T5812] usb 3-1: selecting invalid altsetting 0
[  210.928654][ T8383] loop3: detected capacity change from 0 to 40427
[  210.983990][ T8383] F2FS-fs (loop3): Image doesn't support compression
[  210.992458][ T8397] netlink: 332 bytes leftover after parsing attributes in process `syz.4.969'.
[  211.020909][ T5812] usb 3-1: USB disconnect, device number 7
[  211.033942][ T8383] F2FS-fs (loop3): invalid crc value
[  211.248104][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'.
[  211.354656][ T8383] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  211.572608][ T5776] syz-executor: attempt to access beyond end of device
[  211.572608][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  211.598186][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  212.162775][ T8425] loop0: detected capacity change from 0 to 2048
[  212.256241][ T8425] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.554865][ T8434] netem: incorrect gi model size
[  213.639021][ T8442] loop2: detected capacity change from 0 to 32768
[  213.707214][ T8442] JBD2: Ignoring recovery information on journal
[  213.774343][   T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  213.902849][ T8474] loop3: detected capacity change from 0 to 1024
[  213.909772][ T8442] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  213.998325][   T23] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  214.032486][   T23] usb 5-1: config 0 has no interface number 0
[  214.069273][   T23] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  214.112754][   T23] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  214.158557][ T1094] hfsplus: b-tree write err: -5, ino 4
[  214.177791][   T23] usb 5-1: config 0 interface 255 has no altsetting 0
[  214.205530][   T23] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  214.234263][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.260772][   T23] usb 5-1: config 0 descriptor??
[  214.309324][   T23] ums-realtek 5-1:0.255: USB Mass Storage device detected
[  214.469580][ T5775] ocfs2: Unmounting device (7,2) on (node local)
[  214.623312][   T23] usb 5-1: USB disconnect, device number 3
[  214.702051][ T8487] loop0: detected capacity change from 0 to 2048
[  214.810001][ T8487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.870458][ T8487] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  214.927043][ T8487] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28
[  214.994731][ T8487] EXT4-fs (loop0): This should not happen!! Data will be lost
[  214.994731][ T8487] 
[  215.024376][ T8487] EXT4-fs (loop0): Total free blocks count 0
[  215.030611][ T8487] EXT4-fs (loop0): Free/Dirty block details
[  215.054610][ T8487] EXT4-fs (loop0): free_blocks=2415919504
[  215.074499][ T8487] EXT4-fs (loop0): dirty_blocks=32
[  215.085408][ T8487] EXT4-fs (loop0): Block reservation details
[  215.091685][ T8487] EXT4-fs (loop0): i_reserved_data_blocks=2
[  215.186042][ T8493] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  215.270183][ T8499] loop3: detected capacity change from 0 to 1024
[  215.306945][ T8499] EXT4-fs: Ignoring removed nomblk_io_submit option
[  215.485487][ T8499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.631781][ T8509] loop2: detected capacity change from 0 to 128
[  215.684283][ T8509] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  215.742877][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.930876][   T59] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  216.032490][ T8517] loop0: detected capacity change from 0 to 256
[  216.036853][ T8515] ALSA: mixer_oss: invalid OSS volume ''
[  216.077658][ T8517] exfat: Deprecated parameter 'namecase'
[  216.106880][ T8517] exfat: Deprecated parameter 'namecase'
[  216.119755][ T8517] exfat: Deprecated parameter 'namecase'
[  216.133937][ T8519] loop2: detected capacity change from 0 to 64
[  216.174956][ T8517] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  216.252930][ T8519] hfs: request for non-existent node 131072 in B*Tree
[  216.275772][ T8519] hfs: request for non-existent node 131072 in B*Tree
[  216.303837][ T8517] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  216.564595][    T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  216.702879][ T8527] loop0: detected capacity change from 0 to 512
[  216.759647][ T8527] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  216.797388][    T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30
[  216.835391][    T8] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.852173][ T8527] EXT4-fs (loop0): 1 truncate cleaned up
[  216.852329][    T8] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.867130][ T8529] loop2: detected capacity change from 0 to 512
[  216.886612][ T8527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.908970][ T8529] EXT4-fs: Ignoring removed bh option
[  216.919301][    T8] usb 4-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127
[  216.959832][ T8533] netlink: 'syz.4.1022': attribute type 3 has an invalid length.
[  216.963628][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  216.977543][    T8] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  216.986189][ T8529] EXT4-fs (loop2): 1 truncate cleaned up
[  216.987683][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.001501][ T8533] netlink: 'syz.4.1022': attribute type 3 has an invalid length.
[  217.012417][ T8529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.077863][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.099459][    T8] usb 4-1: config 0 descriptor??
[  217.183666][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.192886][ T8537] loop4: detected capacity change from 0 to 1024
[  217.195936][ T8537] EXT4-fs: Ignoring removed bh option
[  217.205047][ T8537] EXT4-fs: Ignoring removed nobh option
[  217.215632][ T8537] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  217.315970][ T8537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.450092][ T8544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1025'.
[  217.517997][ T7862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.518389][ T8544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1025'.
[  218.023408][ T8559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1030'.
[  218.038151][    T8] uclogic 0003:5543:004D.000A: failed retrieving Huion firmware version: -71
[  218.064887][    T8] uclogic 0003:5543:004D.000A: failed probing parameters: -71
[  218.072803][    T8] uclogic: probe of 0003:5543:004D.000A failed with error -71
[  218.116538][    T8] usb 4-1: USB disconnect, device number 12
[  218.596883][ T8551] loop0: detected capacity change from 0 to 32768
[  218.648704][ T8551] JBD2: Ignoring recovery information on journal
[  218.707250][ T8551] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  219.070845][ T8577] use of bytesused == 0 is deprecated and will be removed in the future,
[  219.104366][ T8577] use the actual size instead.
[  219.224695][ T5774] ocfs2: Unmounting device (7,0) on (node local)
[  219.582153][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1041'.
[  220.130164][ T8598] loop4: detected capacity change from 0 to 64
[  220.227766][ T8598] BFS-fs: bfs_readdir(): Bad f_pos=00000049 for loop4:00000002
[  220.615876][ T8608] loop6: detected capacity change from 0 to 7
[  220.660705][ T8608] Dev loop6: unable to read RDB block 7
[  220.685359][ T8608]  loop6: unable to read partition table
[  220.694533][ T8608] loop6: partition table beyond EOD, truncated
[  220.710383][ T2934] loop: Write error at byte offset 50, length 3584.
[  220.718846][ T8608] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾SêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5)
[  220.774395][    C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  220.783967][    C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  221.119753][ T8596] loop3: detected capacity change from 0 to 32768
[  221.126861][ T8596] XFS: attr2 mount option is deprecated.
[  221.195220][ T8596] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  221.292541][ T8596] XFS (loop3): Ending clean mount
[  221.302444][ T8596] XFS (loop3): Quotacheck needed: Please wait.
[  221.356007][ T5763] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  221.389524][ T8596] XFS (loop3): Quotacheck: Done.
[  221.418755][ T8633] loop4: detected capacity change from 0 to 128
[  221.554403][ T5763] usb 3-1: Using ep0 maxpacket: 8
[  221.588322][ T5763] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  221.626694][ T5763] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  221.654779][ T5776] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  221.671087][ T5763] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  221.692844][ T5763] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.724344][ T5763] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  221.739343][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.885940][ T8638] loop0: detected capacity change from 0 to 512
[  221.967490][ T8638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.018963][ T8638] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.055775][ T8645] loop3: detected capacity change from 0 to 128
[  222.063649][ T8645] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  222.081410][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'.
[  222.091922][ T5763] usb 3-1: GET_CAPABILITIES returned 0
[  222.112690][ T8645] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  222.122333][ T5763] usbtmc 3-1:16.0: can't read capabilities
[  222.139016][ T8638] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.1061: iget: bad i_size value: 2533274857506816
[  222.325347][ T3499] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  222.368795][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.376388][ T5763] usb 3-1: USB disconnect, device number 8
[  223.208279][ T8673] bridge1: entered promiscuous mode
[  223.757336][ T8666] loop0: detected capacity change from 0 to 32768
[  223.769281][ T8666] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1071 (8666)
[  223.816131][ T8666] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  223.851855][ T8666] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  223.879562][ T8666] BTRFS info (device loop0): force zlib compression, level 3
[  223.907183][ T8666] BTRFS info (device loop0): force clearing of disk cache
[  223.929885][ T8666] BTRFS info (device loop0): setting nodatasum
[  223.958915][ T8666] BTRFS info (device loop0): doing ref verification
[  223.977498][ T8666] BTRFS info (device loop0): allowing degraded mounts
[  223.991083][ T8692] loop4: detected capacity change from 0 to 1024
[  223.997856][ T8666] BTRFS info (device loop0): using free space tree
[  224.096237][ T8692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  224.133841][ T8692] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.207275][ T8666] BTRFS info (device loop0): enabling ssd optimizations
[  224.224326][ T5763] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  224.252883][   T27] kauditd_printk_skb: 10 callbacks suppressed
[  224.252901][   T27] audit: type=1800 audit(2000000126.550:11): pid=8692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1079" name="file1" dev="loop4" ino=15 res=0 errno=0
[  224.254004][ T8666] BTRFS info (device loop0): auto enabling async discard
[  224.316803][ T8666] BTRFS info (device loop0): rebuilding free space tree
[  224.343146][ T7862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  224.479212][ T8714] loop4: detected capacity change from 0 to 256
[  224.479796][ T5763] usb 4-1: too many configurations: 47, using maximum allowed: 8
[  224.507724][ T8714] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  224.549076][ T5763] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  224.584374][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.623316][ T5763] usb 4-1: Product: syz
[  224.643968][ T5763] usb 4-1: Manufacturer: syz
[  224.694290][ T5763] usb 4-1: SerialNumber: syz
[  224.715097][ T5763] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  224.784084][ T5774] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  224.784500][   T28] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  225.532130][ T8727] loop0: detected capacity change from 0 to 512
[  225.593138][ T8727] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  225.656004][ T5812] usb 4-1: USB disconnect, device number 13
[  225.679431][ T8727] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  225.758555][ T8727] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  225.767047][ T8727] System zones: 0-2, 18-18, 34-35
[  225.775996][ T8727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  225.874638][ T8727] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  225.893837][ T8727] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  225.924884][ T8727] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  226.007692][ T8727] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1087: bg 0: block 353: padding at end of block bitmap is not set
[  226.258043][   T28] usb 4-1: Service connection timeout for: 256
[  226.291743][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.292488][   T28] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  226.311657][   T28] ath9k_htc: Failed to initialize the device
[  226.344328][ T5812] usb 4-1: ath9k_htc: USB layer deinitialized
[  226.561530][ T8748] loop4: detected capacity change from 0 to 512
[  226.644071][ T8748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.666474][ T8748] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.805404][ T8748] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  226.980831][ T7862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.005376][ T8759] trusted_key: syz.0.1101 sent an empty control message without MSG_MORE.
[  227.221937][ T8740] loop2: detected capacity change from 0 to 32768
[  227.281634][ T8740] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.378271][ T5089] Bluetooth: hci1: command tx timeout
[  227.401658][ T8740] XFS (loop2): Ending clean mount
[  227.444054][ T8740] XFS (loop2): Quotacheck needed: Please wait.
[  227.570588][ T8740] XFS (loop2): Quotacheck: Done.
[  227.807729][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.941699][ T8789] Bluetooth: MGMT ver 1.22
[  227.975431][   T28] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  228.176268][   T28] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  228.194044][   T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.202401][ T8795] input: syz1 as /devices/virtual/input/input21
[  228.204114][ T5812] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  228.222049][   T28] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  228.234407][   T28] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  228.266236][   T28] usb 4-1: Manufacturer: syz
[  228.273519][   T28] usb 4-1: config 0 descriptor??
[  228.403329][ T8801] loop2: detected capacity change from 0 to 128
[  228.414667][   T28] rc_core: IR keymap rc-hauppauge not found
[  228.425186][ T5812] usb 5-1: Using ep0 maxpacket: 32
[  228.436343][   T28] Registered IR keymap rc-empty
[  228.452410][   T27] audit: type=1800 audit(2000000130.750:12): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1116" name="bus" dev="loop2" ino=1048630 res=0 errno=0
[  228.456643][   T28] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  228.487883][ T5812] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  228.511342][ T8801] syz.2.1116: attempt to access beyond end of device
[  228.511342][ T8801] loop2: rw=2049, sector=145, nr_sectors = 43 limit=128
[  228.524255][ T5812] usb 5-1: config 0 has no interface number 0
[  228.531923][ T5812] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  228.562844][ T5812] usb 5-1: config 0 interface 196 has no altsetting 0
[  228.571938][   T28] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22
[  228.606130][ T5812] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  228.624258][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.637570][ T5812] usb 5-1: Product: syz
[  228.649307][ T5812] usb 5-1: Manufacturer: syz
[  228.664374][ T5812] usb 5-1: SerialNumber: syz
[  228.676587][ T5812] usb 5-1: config 0 descriptor??
[  228.682418][ T8790] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  228.992903][ T8803] rc rc0: two consecutive events of type space
[  229.136907][ T5812] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  229.156018][ T5812] ipheth: probe of 5-1:0.196 failed with error -22
[  229.196745][    T8] usb 4-1: USB disconnect, device number 14
[  229.368190][ T5834] usb 5-1: USB disconnect, device number 4
[  229.375977][ T8807] loop2: detected capacity change from 0 to 40427
[  229.384467][   T28] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  229.400101][ T8807] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  229.422135][ T8807] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  229.443248][ T8807] F2FS-fs (loop2): Found nat_bits in checkpoint
[  229.510906][ T8807] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  229.522300][ T8807] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  229.612796][   T28] usb 1-1: Using ep0 maxpacket: 16
[  229.630320][   T28] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  229.648028][   T28] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  229.661088][   T28] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  229.675984][   T28] usb 1-1: config 1 interface 0 has no altsetting 0
[  229.710761][   T28] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  229.734576][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.742899][   T28] usb 1-1: Product: syz
[  229.758802][   T28] usb 1-1: Manufacturer: syz
[  229.763575][   T28] usb 1-1: SerialNumber: syz
[  229.867189][ T8817] loop3: detected capacity change from 0 to 128
[  229.884819][ T8817] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  229.914657][ T8817] hpfs: filesystem error: improperly stopped
[  229.924466][ T8817] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  229.948415][ T8817] hpfs: You really don't want any checks? You are crazy...
[  229.982924][ T8817] hpfs: hpfs_map_sector(): read error
[  230.005196][ T8817] hpfs: code page support is disabled
[  230.012786][   T28] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  230.023028][ T8817] hpfs: hpfs_map_4sectors(): unaligned read
[  230.051569][ T8817] hpfs: hpfs_map_4sectors(): unaligned read
[  230.058660][ T8817] hpfs: filesystem error: unable to find root dir
[  230.228507][    T8] usb 1-1: USB disconnect, device number 9
[  230.276581][    T8] usblp0: removed
[  230.611162][ T8829] loop4: detected capacity change from 0 to 64
[  230.840817][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'.
[  231.031525][ T8837] input: syz0 as /devices/virtual/input/input23
[  231.093673][ T8840] loop4: detected capacity change from 0 to 16
[  231.132777][ T8840] erofs: (device loop4): mounted with root inode @ nid 36.
[  231.216292][ T8840] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  231.254382][ T8840] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  231.278144][ T8840] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  231.314986][ T8840] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  231.349729][ T8840] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 72 of nid 36
[  231.741855][ T8859] loop0: detected capacity change from 0 to 512
[  231.797490][ T8859] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.1141: bad orphan inode 15
[  231.866084][ T8859] EXT4-fs (loop0): Remounting filesystem read-only
[  231.881196][ T8859] ext4_test_bit(bit=14, block=18) = 1
[  231.905865][ T8859] is_bad_inode(inode)=0
[  231.910098][ T8859] NEXT_ORPHAN(inode)=1023
[  231.954338][ T8859] max_ino=32
[  231.957632][ T8859] i_nlink=0
[  231.962239][ T8859] EXT4-fs (loop0): mounted filesystem 00000000-0001-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  231.979334][ T8859] ext4 filesystem being mounted at /307/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  232.115916][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0001-0000-0009-000000000000.
[  232.579319][ T5089] Bluetooth: hci2: command 0x0406 tx timeout
[  233.111421][ T8897] loop2: detected capacity change from 0 to 512
[  233.122608][ T8897] EXT4-fs: Ignoring removed nobh option
[  233.244919][ T8897] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  233.265407][ T8897] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1155: invalid indirect mapped block 256 (level 1)
[  233.350852][ T8903] loop3: detected capacity change from 0 to 512
[  233.351172][ T8897] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1155: invalid indirect mapped block 2683928664 (level 1)
[  233.386523][ T8903] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1157: invalid block
[  233.414951][ T8897] EXT4-fs (loop2): 1 truncate cleaned up
[  233.422445][ T8897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.448984][ T8903] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1157: invalid indirect mapped block 4294967295 (level 1)
[  233.540413][ T8903] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1157: invalid indirect mapped block 4294967295 (level 1)
[  233.579497][ T8903] EXT4-fs (loop3): 2 truncates cleaned up
[  233.614001][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.627736][ T8903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.771953][ T8903] EXT4-fs (loop3): shut down requested (0)
[  234.016297][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.924430][ T5812] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  235.152447][ T5812] usb 3-1: Using ep0 maxpacket: 16
[  235.160015][ T5812] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  235.178755][ T5812] usb 3-1: config 0 has no interface number 0
[  235.189744][ T5812] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  235.211326][ T5812] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  235.241646][ T5812] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  235.253488][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.272263][ T5812] usb 3-1: Product: syz
[  235.282378][ T5812] usb 3-1: Manufacturer: syz
[  235.292500][ T5812] usb 3-1: SerialNumber: syz
[  235.313830][ T5812] usb 3-1: config 0 descriptor??
[  235.330115][ T8928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  235.338028][ T8928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  235.584829][ T8928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  235.605587][ T8928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  235.933141][ T8950] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1177'.
[  236.029654][ T5812] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  236.055541][ T5812] asix: probe of 3-1:0.251 failed with error -524
[  236.311265][    T8] usb 3-1: USB disconnect, device number 9
[  237.102629][   T59] Bluetooth: hci4: Frame reassembly failed (-84)
[  237.286247][ T8983] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1192'.
[  237.427343][ T8991] program syz.3.1195 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  237.667531][ T8998] loop4: detected capacity change from 0 to 512
[  237.708403][ T8998] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1199: invalid indirect mapped block 4294967295 (level 1)
[  237.744675][ T8998] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1199: invalid indirect mapped block 4294967295 (level 1)
[  237.792520][ T8998] EXT4-fs (loop4): 2 truncates cleaned up
[  237.800123][ T8998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.833236][ T8998] EXT4-fs (loop4): shut down requested (0)
[  237.939749][ T7862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.245547][ T9014] loop4: detected capacity change from 0 to 256
[  238.287378][ T9014] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc0e7db9a, utbl_chksum : 0xe619d30d)
[  238.302821][ T9014] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  238.408195][   T27] audit: type=1800 audit(2000000140.710:13): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1207" name="file2" dev="loop4" ino=1048631 res=0 errno=0
[  238.888973][ T9027] loop4: detected capacity change from 0 to 256
[  238.952691][ T9027] FAT-fs (loop4): Directory bread(block 64) failed
[  238.974014][ T9027] FAT-fs (loop4): Directory bread(block 65) failed
[  238.992920][ T9027] FAT-fs (loop4): Directory bread(block 66) failed
[  239.023802][ T9027] FAT-fs (loop4): Directory bread(block 67) failed
[  239.034049][ T9027] FAT-fs (loop4): Directory bread(block 68) failed
[  239.053258][ T9027] FAT-fs (loop4): Directory bread(block 69) failed
[  239.069566][ T9027] FAT-fs (loop4): Directory bread(block 70) failed
[  239.085915][ T9027] FAT-fs (loop4): Directory bread(block 71) failed
[  239.110992][ T9027] FAT-fs (loop4): Directory bread(block 72) failed
[  239.129672][ T9027] FAT-fs (loop4): Directory bread(block 73) failed
[  239.134274][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  239.136932][ T5089] Bluetooth: hci4: command 0x1003 tx timeout
[  239.576016][ T9038] tmpfs: Too small a size for current use
[  240.232244][ T9059] loop3: detected capacity change from 0 to 256
[  240.252010][ T9059] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  240.269656][ T9059] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  240.353863][ T9059] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  240.454619][ T5812] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  240.506038][ T9059] exFAT-fs (loop3): error, found bogus dentry(18) beyond unused empty group(0) (start_clu : 5, cur_clu : 5)
[  240.529286][ T9059] exFAT-fs (loop3): Filesystem has been set read-only
[  240.644856][ T5812] usb 5-1: Using ep0 maxpacket: 32
[  240.667474][ T5812] usb 5-1: unable to get BOS descriptor or descriptor too short
[  240.697245][ T5812] usb 5-1: config 4 has an invalid interface number: 136 but max is 0
[  240.718387][ T5812] usb 5-1: config 4 has no interface number 0
[  240.741666][ T5812] usb 5-1: config 4 interface 136 has no altsetting 0
[  240.766671][ T5812] usb 5-1: string descriptor 0 read error: -22
[  240.788540][ T5812] usb 5-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=16.c8
[  240.818582][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.851931][ T5812] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state.
[  240.860029][ T9051] loop2: detected capacity change from 0 to 32768
[  240.870762][ T5812] dvb-usb: bulk message failed: -22 (4/0)
[  240.884305][ T5812] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  240.904390][ T5812] dvb-usb: bulk message failed: -22 (5/0)
[  240.913162][ T5812] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  240.975615][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  241.004258][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  241.064682][ T5812] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650)
[  241.073186][ T5812] usb 5-1: media controller created
[  241.096724][ T9056] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO.
[  241.139150][ T9056] dvb-usb: bulk message failed: -22 (7/0)
[  241.175527][  T111] ------------[ cut here ]------------
[  241.181583][  T111] WARNING: CPU: 0 PID: 111 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0
[  241.190532][  T111] Modules linked in:
[  241.190838][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  241.194492][  T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted syzkaller #0
[  241.194559][  T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  241.194572][  T111] RIP: 0010:dbAdjTree+0x448/0x4d0
[  241.194600][  T111] Code: e8 4d 01 dc fe e9 5a ff ff ff e8 13 d2 83 fe eb 05 e8 0c d2 83 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f8 d1 83 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c
[  241.194615][  T111] RSP: 0018:ffffc900024ef648 EFLAGS: 00010293
[  241.194636][  T111] RAX: ffffffff83034318 RBX: ffff88805342c010 RCX: ffff888018fb3c00
[  241.194652][  T111] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 000000005ff20056
[  241.203002][ T9056] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  241.210709][  T111] RBP: 000000005ff20056 R08: ffffea00014d0b07 R09: 1ffffd400029a160
[  241.289545][  T111] R10: dffffc0000000000 R11: fffff9400029a161 R12: ffff88805342c018
[  241.298367][  T111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  241.306710][  T111] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  241.314675][ T5812] ttusb2: set interface to alts=3 failed
[  241.315955][  T111] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  241.328672][  T111] CR2: 00007f573fd50000 CR3: 0000000061bd2000 CR4: 00000000003506f0
[  241.336941][  T111] Call Trace:
[  241.340267][  T111]  <TASK>
[  241.343334][  T111]  ? lock_page+0x2a0/0x2a0
[  241.348016][  T111]  dbJoin+0x238/0x300
[  241.352056][  T111]  dbFreeBits+0x4e1/0xda0
[  241.356496][  T111]  dbFree+0x332/0x650
[  241.361525][  T111]  txFreeMap+0x9e6/0xde0
[  241.366133][  T111]  ? do_raw_spin_unlock+0x121/0x230
[  241.371477][  T111]  xtTruncate+0xd27/0x2ec0
[  241.376410][  T111]  ? xtInitRoot+0x170/0x170
[  241.381023][  T111]  jfs_free_zero_link+0x35c/0x4c0
[  241.386181][  T111]  ? jfs_write_failed+0x190/0x190
[  241.391266][  T111]  ? _raw_spin_lock_irq+0xbb/0xf0
[  241.396427][  T111]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.401773][  T111]  ? lockdep_hardirqs_on+0x98/0x150
[  241.407066][  T111]  jfs_evict_inode+0x35d/0x440
[  241.412066][  T111]  ? evict+0x4c4/0x8d0
[  241.416488][  T111]  ? jfs_write_inode+0x220/0x220
[  241.421664][  T111]  evict+0x4ca/0x8d0
[  241.425906][  T111]  ? proc_nr_inodes+0x230/0x230
[  241.431488][  T111]  ? do_raw_spin_unlock+0x121/0x230
[  241.436902][  T111]  ? _raw_spin_unlock+0x28/0x40
[  241.441885][  T111]  ? iput+0x706/0x920
[  241.445958][  T111]  jfs_lazycommit+0x429/0xa70
[  241.450784][  T111]  ? txFreelock+0x5a0/0x5a0
[  241.455518][  T111]  ? do_task_dead+0xd0/0xd0
[  241.460063][  T111]  ? __kthread_parkme+0x7a/0x1c0
[  241.462802][ T9056] ttusb2: i2c transfer failed.
[  241.465860][  T111]  kthread+0x2fa/0x390
[  241.474394][  T111]  ? txFreelock+0x5a0/0x5a0
[  241.478951][  T111]  ? kthread_blkcg+0xd0/0xd0
[  241.483673][  T111]  ret_from_fork+0x48/0x80
[  241.488256][  T111]  ? kthread_blkcg+0xd0/0xd0
[  241.492903][  T111]  ret_from_fork_asm+0x11/0x20
[  241.497890][  T111]  </TASK>
[  241.501030][  T111] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  241.508525][  T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted syzkaller #0
[  241.516024][  T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  241.526381][  T111] Call Trace:
[  241.529801][  T111]  <TASK>
[  241.532764][  T111]  dump_stack_lvl+0x18c/0x250
[  241.537764][  T111]  ? show_regs_print_info+0x20/0x20
[  241.543639][  T111]  ? load_image+0x400/0x400
[  241.548389][  T111]  panic+0x2dc/0x730
[  241.552349][  T111]  ? bpf_jit_dump+0xd0/0xd0
[  241.556930][  T111]  ? ret_from_fork_asm+0x11/0x20
[  241.561920][  T111]  __warn+0x2e0/0x470
[  241.565938][  T111]  ? dbAdjTree+0x448/0x4d0
[  241.570574][  T111]  ? dbAdjTree+0x448/0x4d0
[  241.575296][  T111]  report_bug+0x2be/0x4f0
[  241.579760][  T111]  ? dbAdjTree+0x448/0x4d0
[  241.584210][  T111]  ? dbAdjTree+0x448/0x4d0
[  241.588787][  T111]  ? dbAdjTree+0x44a/0x4d0
[  241.593246][  T111]  handle_bug+0xcf/0x120
[  241.597538][  T111]  exc_invalid_op+0x1a/0x50
[  241.602175][  T111]  asm_exc_invalid_op+0x1a/0x20
[  241.607079][  T111] RIP: 0010:dbAdjTree+0x448/0x4d0
[  241.612152][  T111] Code: e8 4d 01 dc fe e9 5a ff ff ff e8 13 d2 83 fe eb 05 e8 0c d2 83 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f8 d1 83 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c
[  241.632156][  T111] RSP: 0018:ffffc900024ef648 EFLAGS: 00010293
[  241.638330][  T111] RAX: ffffffff83034318 RBX: ffff88805342c010 RCX: ffff888018fb3c00
[  241.646410][  T111] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 000000005ff20056
[  241.655087][  T111] RBP: 000000005ff20056 R08: ffffea00014d0b07 R09: 1ffffd400029a160
[  241.663119][  T111] R10: dffffc0000000000 R11: fffff9400029a161 R12: ffff88805342c018
[  241.671133][  T111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  241.679229][  T111]  ? dbAdjTree+0x448/0x4d0
[  241.683876][  T111]  ? dbAdjTree+0x448/0x4d0
[  241.688303][  T111]  ? lock_page+0x2a0/0x2a0
[  241.692918][  T111]  dbJoin+0x238/0x300
[  241.696943][  T111]  dbFreeBits+0x4e1/0xda0
[  241.701386][  T111]  dbFree+0x332/0x650
[  241.705590][  T111]  txFreeMap+0x9e6/0xde0
[  241.709849][  T111]  ? do_raw_spin_unlock+0x121/0x230
[  241.715065][  T111]  xtTruncate+0xd27/0x2ec0
[  241.719671][  T111]  ? xtInitRoot+0x170/0x170
[  241.724314][  T111]  jfs_free_zero_link+0x35c/0x4c0
[  241.729445][  T111]  ? jfs_write_failed+0x190/0x190
[  241.734652][  T111]  ? _raw_spin_lock_irq+0xbb/0xf0
[  241.739690][  T111]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.744990][  T111]  ? lockdep_hardirqs_on+0x98/0x150
[  241.750294][  T111]  jfs_evict_inode+0x35d/0x440
[  241.755085][  T111]  ? evict+0x4c4/0x8d0
[  241.759425][  T111]  ? jfs_write_inode+0x220/0x220
[  241.764464][  T111]  evict+0x4ca/0x8d0
[  241.768382][  T111]  ? proc_nr_inodes+0x230/0x230
[  241.773240][  T111]  ? do_raw_spin_unlock+0x121/0x230
[  241.778607][  T111]  ? _raw_spin_unlock+0x28/0x40
[  241.783512][  T111]  ? iput+0x706/0x920
[  241.787604][  T111]  jfs_lazycommit+0x429/0xa70
[  241.792525][  T111]  ? txFreelock+0x5a0/0x5a0
[  241.797070][  T111]  ? do_task_dead+0xd0/0xd0
[  241.801607][  T111]  ? __kthread_parkme+0x7a/0x1c0
[  241.807001][  T111]  kthread+0x2fa/0x390
[  241.811092][  T111]  ? txFreelock+0x5a0/0x5a0
[  241.815695][  T111]  ? kthread_blkcg+0xd0/0xd0
[  241.820469][  T111]  ret_from_fork+0x48/0x80
[  241.824899][  T111]  ? kthread_blkcg+0xd0/0xd0
[  241.829586][  T111]  ret_from_fork_asm+0x11/0x20
[  241.834637][  T111]  </TASK>
[  241.837791][  T111] Kernel Offset: disabled
[  241.842201][  T111] Rebooting in 86400 seconds..