last executing test programs:

4.752451532s ago: executing program 2 (id=3592):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000200)={[{@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc2}, 0x21, 0x0, '\x00', @c})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000140)={@desc={0x1, 0x0, @desc2}})

4.487927138s ago: executing program 1 (id=3596):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000008f00008500000082000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.208446975s ago: executing program 2 (id=3599):
unshare(0x6060400)
r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sendfile(r0, r0, 0x0, 0x2)

3.923150924s ago: executing program 2 (id=3601):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.623998033s ago: executing program 2 (id=3603):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@journal_async_commit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x9d}}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x452, &(0x7f0000000bc0)="$eJzs3M1vG0UbAPDHdux+v8lbykdLC4GCqPhImjQtPXApAokDSEhwKOIUkrQKdRvUBIlWEQQO4YgqcUcckfgLuFAuCDghcYU7QopQLhRORmvvpm5iO3HixKX+/aRtZzzjzDy7O/Z41usAetZg8k8uYn9E/BoR/bXsnRUGa//dWp6f+Ht5fiIXlcobf+aq9f5anp/IqmbP21fLVCot2l18O2K8XJ66muaH5y6/Nzx77fpz05fHL05dnLoyenZ27NSx0pnR0x2J80DS1yMfzhw9/MpbN16bOH/jnR+/Tvq7Py2vj6NTBmt7t6EnO91Ylx2oS+f6utgR2lKIiORwFavjvz8KsWelrD9e/qSrnQO2VaWSr+xqXrxQAe5hyUQd6EXZG33y+TfbdmjqcVdYOhcr6xi30q1W0hf5tE4x/Yy0HQYj4vzCP18kW2zTOgQAQL2b5yLi2Ubzv3w8UFfvf+m1oYGI+H9EHIyI+yLiUETcH1Gt+2BEPNRm+6uvkKyd/1T6NxXYBiXzvxfSa1t3zv+y2V8MFNLcgWr8xdyF6fLUyXSfnIjiriQ/0qKN71765bNmZfXzv2RL2s/mgmk//uhbtUA3OT43Hquv023S0scRR/oaxZ9bmfMm7RyOiCObbGP66a+ONitbP/4WOjApr3wZ8VTt+C/EqvgzucbXJ8+OnRp5/szo6eHdUZ46OZydFWv99PPi683a31L8HbB0sxJ7G57/K/EP5HZHzF67fql6vXa2/TYWf/u06WeazZ7/pdyb1XQpfeyD8bm5qyMRpdyrax8fvf3cLJ/VT87/E8cbj/+DcXtPPBwRyUl8LCIeiYhH074/FhGPR8TxFvH/8OIT77Yff4tV+Q5K4p9c7/hH/fFvP1G49P037cefSY7/WDV1In0ke/1rZaMd3Mq+AwAAgP+KfPU78Ln80Eo6nx8aqn2H/1DszZdnZueeuTDz/pXJ2nflB6KYr1/pytZDR9K14Sw/uip/Kl03/rywp5ofmpgpT3Y5duh1+5qM/8TvhW73Dth27teC3mX8A0Dv8f4Pvcv4h97VaPx/1IV+ADtvnff/PTvVD2Dnmf9D7zL+oXcZ/9CTmt4bn9/SLf8SbSVKHfuD35a29lsNG09E/q7YdfdQohgNi/o2/GMWm0zsaljU7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvg3AAD//4IU4tg=")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

3.399902885s ago: executing program 1 (id=3604):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x1c, r1, 0xe81, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x804c090)

3.24664735s ago: executing program 1 (id=3607):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x85494000)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

3.241722321s ago: executing program 4 (id=3608):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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")
chdir(&(0x7f00000000c0)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)

2.94248971s ago: executing program 2 (id=3611):
syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x101004e, &(0x7f0000009880), 0x1, 0x97f5, &(0x7f00000130c0)="$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")
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000082000000ff0f000000000078"], 0x0)

2.726091812s ago: executing program 0 (id=3613):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

2.569947267s ago: executing program 4 (id=3614):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000740)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x38}}, 0x0)

2.456484328s ago: executing program 0 (id=3615):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

2.376845706s ago: executing program 4 (id=3617):
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}}, 0x20000000)
r0 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

2.211011492s ago: executing program 4 (id=3618):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000001dc0))

2.207506733s ago: executing program 0 (id=3620):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000180)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c67727071756f74612c696e6f646536342c61636c2c6c6f63616c666c6f636b732c005ea7501d3984f30800000034dd9b5f52523eb71133652077aca5d26b513822020aa04ceba373f5ce95c0d1d4d8d88b077307143bab05b944c8717fae9043000a828674b0cdb1a82528e59e857c2049a73f8389f4eb91af6e2f93e4894cc0e776da52222dc59219"], 0x0, 0x4703, &(0x7f0000004800)="$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")
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x6000)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, r0, 0x0)

2.1355021s ago: executing program 4 (id=3621):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10)
sendmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="dc20a49645", 0x5}], 0x1}}], 0x1, 0x40840)

2.054366788s ago: executing program 1 (id=3622):
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x200800, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@gid}, {@shortname_lower}, {@shortname_winnt}, {@fat=@check_strict}]}, 0x11, 0x305, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x189)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0)

1.864678126s ago: executing program 4 (id=3623):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="e901000daf"])

1.386108603s ago: executing program 1 (id=3624):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]})
pause()

664.412114ms ago: executing program 0 (id=3626):
unshare(0x20000600)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

523.485619ms ago: executing program 3 (id=3627):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r0, 0xffffffff)
sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="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", 0xfffffec7}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0508000000e0f0efc26e29aca6bf6c8e5d69fd2223dcedc80ce676a9b9a3b03532c1074e5e1478b0bf20a26514ac666b036911d8b6f788cf92b3421a013e394e1a1c9cfbae82f819f7fd364f338ed2dcad104eddcec3897da548c1790e1f6d62e5bcdf775ef8a86a09062ba37a04"], 0xfe61}}], 0x2, 0x40c88c4)

490.897522ms ago: executing program 2 (id=3628):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000740)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@errors_remount}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@dmask={'dmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

490.173492ms ago: executing program 3 (id=3629):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f023})
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}})

359.447245ms ago: executing program 3 (id=3630):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1}, @in={0x2, 0x0, @broadcast}], 0x20)

297.409861ms ago: executing program 3 (id=3631):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

277.833353ms ago: executing program 3 (id=3632):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x2c, r1, 0x5, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4008080)

208.28447ms ago: executing program 1 (id=3633):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file2\x00', 0x800, &(0x7f0000000440)=ANY=[], 0x1, 0x1d2, &(0x7f0000001ec0)="$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")
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000001340))

130.970167ms ago: executing program 3 (id=3634):
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100)

68.205734ms ago: executing program 0 (id=3635):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @default, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
close(0x4)

0s ago: executing program 0 (id=3636):
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffc5d5c01000", "d78cb8b0291a83be12ff0bff", "0000efffffffffffbfff00"]})
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0)

kernel console output (not intermixed with test programs):

SB device number 14 using dummy_hcd
[  282.716508][T10558] hfs: unable to locate alternate MDB
[  282.725446][T10558] hfs: continuing without an alternate MDB
[  282.766686][T10531] orangefs_mount: mount request failed with -4
[  282.913935][ T6871] usb 3-1: Using ep0 maxpacket: 32
[  282.953318][ T4245] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.964866][   T21] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  282.979665][ T4245] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  282.999734][T10568] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2557'.
[  283.009624][ T4245] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  283.023768][ T4245] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  283.044042][ T6871] usb 3-1: config index 0 descriptor too short (expected 1316, got 36)
[  283.057803][ T4245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.067431][ T6871] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  283.077452][ T6871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  283.088693][ T6871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.103526][ T6871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.114568][T10542] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  283.121994][ T6871] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  283.134621][ T4245] hub 5-1:1.0: bad descriptor, ignoring hub
[  283.140586][ T4245] hub: probe of 5-1:1.0 failed with error -5
[  283.149084][ T6871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.165634][ T4245] cdc_wdm 5-1:1.0: skipping garbage
[  283.171153][ T4245] cdc_wdm 5-1:1.0: skipping garbage
[  283.183294][ T6871] usb 3-1: config 0 descriptor??
[  283.220255][ T4245] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  283.229969][   T21] usb 4-1: Using ep0 maxpacket: 16
[  283.236255][ T4245] cdc_wdm 5-1:1.0: Unknown control protocol
[  283.353403][   T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  283.390358][   T21] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  283.410083][T10576] loop0: detected capacity change from 0 to 512
[  283.423484][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.441770][   T21] usb 4-1: config 0 descriptor??
[  283.476343][T10576] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  283.497023][T10576] EXT4-fs (loop0): filesystem is read-only
[  283.548567][T10576] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  283.573782][T10576] EXT4-fs (loop0): filesystem is read-only
[  283.579672][T10576] EXT4-fs (loop0): orphan cleanup on readonly fs
[  283.605098][T10581] loop1: detected capacity change from 0 to 1024
[  283.612066][T10576] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #16: comm syz.0.2561: iget: bad i_size value: 648518346341360424
[  283.638175][T10576] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2561: couldn't read orphan inode 16 (err -117)
[  283.651406][T10576] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000001000,user_xattr,noblock_validity,nomblk_io_submit,nolazytime,grpid,noauto_da_alloc,,errors=continue. Quota mode: none.
[  283.665814][ T6871] cypress 0003:04B4:BCA1.0026: item fetching failed at offset 2/5
[  283.687802][ T6871] cypress 0003:04B4:BCA1.0026: parse failed
[  283.694545][ T6871] cypress: probe of 0003:04B4:BCA1.0026 failed with error -22
[  283.735872][T10581] hfsplus: bad catalog entry type
[  283.823903][ T4430] usb 5-1: USB disconnect, device number 19
[  283.853083][  T144] hfsplus: b-tree write err: -5, ino 4
[  283.919975][ T4245] usb 3-1: USB disconnect, device number 14
[  283.951269][   T21] ryos 0003:1E7D:31CE.0027: unbalanced collection at end of report description
[  283.974107][   T21] ryos 0003:1E7D:31CE.0027: parse failed
[  283.991118][   T21] ryos: probe of 0003:1E7D:31CE.0027 failed with error -22
[  284.028764][T10583] loop0: detected capacity change from 0 to 4096
[  284.150562][T10583] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  284.178612][ T4430] usb 4-1: USB disconnect, device number 18
[  284.527015][T10600] sp0: Synchronizing with TNC
[  284.542314][T10599] [U] è
[  284.721793][T10607] loop1: detected capacity change from 0 to 4096
[  284.781316][T10613] loop0: detected capacity change from 0 to 512
[  284.839145][T10613] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  284.851124][T10617] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  284.947914][T10613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002]
[  284.982325][T10613] EXT4-fs (loop0): orphan cleanup on readonly fs
[  284.990154][T10613] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2577: bg 0: block 361: padding at end of block bitmap is not set
[  285.006539][T10613] EXT4-fs (loop0): Remounting filesystem read-only
[  285.013352][T10613] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem
[  285.029677][T10613] EXT4-fs (loop0): Remounting filesystem read-only
[  285.059426][T10613] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.2577: attempt to clear invalid blocks 33619980 len 1
[  285.118262][T10613] EXT4-fs (loop0): Remounting filesystem read-only
[  285.162741][T10613] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2577: invalid indirect mapped block 1811939328 (level 0)
[  285.185596][T10624] ptrace attach of "./syz-executor exec"[4190] was attempted by ""[10624]
[  285.208023][T10613] EXT4-fs (loop0): Remounting filesystem read-only
[  285.242099][T10613] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2577: invalid indirect mapped block 2185560079 (level 1)
[  285.328100][T10613] EXT4-fs (loop0): Remounting filesystem read-only
[  285.356025][T10636] loop2: detected capacity change from 0 to 64
[  285.363458][T10613] EXT4-fs (loop0): 1 truncate cleaned up
[  285.394901][T10613] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none.
[  285.487183][T10642] loop3: detected capacity change from 0 to 64
[  285.557005][T10640] loop1: detected capacity change from 0 to 4096
[  285.839748][T10640] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  285.888113][T10640] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  285.903951][T10649] loop0: detected capacity change from 0 to 4096
[  285.927294][T10640] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  285.970910][T10649] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  285.980229][T10640] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  285.980305][T10640] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  285.982150][T10640] ntfs: volume version 3.1.
[  286.047494][T10640] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  286.071408][T10640] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  286.153293][T10640] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  286.215101][T10640] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  286.249391][T10640] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  286.906397][ T6878] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  286.955949][T10685] program syz.3.2611 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  287.289049][ T6878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  287.307023][ T6878] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  287.489035][ T6878] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  287.509018][ T6878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  287.533090][ T6878] usb 2-1: Product: syz
[  287.537622][ T6878] usb 2-1: Manufacturer: syz
[  287.573118][ T6878] usb 2-1: SerialNumber: syz
[  287.744133][T10718] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  287.901343][T10722] loop4: detected capacity change from 0 to 1024
[  287.928141][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2628'.
[  288.106484][T10722] EXT4-fs (loop4): Ignoring removed nobh option
[  288.147844][T10722] EXT4-fs (loop4): Ignoring removed bh option
[  288.174258][T10726] loop2: detected capacity change from 0 to 32768
[  288.215445][T10722] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  288.228408][T10726] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2630 (10726)
[  288.287927][T10726] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  288.297533][T10726] BTRFS info (device loop2): enabling disk space caching
[  288.305897][T10726] BTRFS info (device loop2): max_inline at 0
[  288.312807][T10726] BTRFS info (device loop2): turning on sync discard
[  288.319580][T10726] BTRFS info (device loop2): turning on flush-on-commit
[  288.327129][T10726] BTRFS info (device loop2): doing ref verification
[  288.334328][T10726] BTRFS error (device loop2): cannot disable free space tree
[  288.354814][T10726] BTRFS error (device loop2): open_ctree failed: -22
[  288.374977][T10722] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback.
[  288.550012][ T4418] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4418)
[  289.296929][T10761] loop3: detected capacity change from 0 to 512
[  289.350347][T10761] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  289.412953][T10761] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  289.450943][T10761] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  289.492119][T10761] System zones: 0-2, 18-18, 34-34
[  289.510798][T10761] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.2645: iget: bad i_size value: 360287970189639680
[  289.531158][T10761] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2645: couldn't read orphan inode 15 (err -117)
[  289.549646][T10761] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  289.664767][ T4430] usb 2-1: USB disconnect, device number 17
[  289.953770][T10778] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  289.961300][T10778] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  290.038053][T10778] team0: Device macvtap1 is already an upper device of the team interface
[  290.064764][T10748] loop0: detected capacity change from 0 to 32768
[  290.125626][T10748] 
[  290.125626][T10748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.125626][T10748] 
[  290.135943][T10785] loop3: detected capacity change from 0 to 8
[  290.206735][T10748] 
[  290.206735][T10748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.206735][T10748] 
[  290.281108][T10748] 
[  290.281108][T10748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.281108][T10748] 
[  290.342659][T10748] 
[  290.342659][T10748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.342659][T10748] 
[  290.393457][T10748] 
[  290.393457][T10748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.393457][T10748] 
[  290.434660][T10748] 
[  290.434660][T10748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.434660][T10748] 
[  290.521447][T10748] 
[  290.521447][T10748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.521447][T10748] 
[  290.559209][  T276] 
[  290.559209][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.559209][  T276] 
[  290.622818][T10748] 
[  290.622818][T10748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.622818][T10748] 
[  290.646941][T10767] loop4: detected capacity change from 0 to 32768
[  290.665465][T10748] 
[  290.665465][T10748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.665465][T10748] 
[  290.680800][T10748] 
[  290.680800][T10748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.680800][T10748] 
[  290.702589][T10748] 
[  290.702589][T10748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.702589][T10748] 
[  290.738998][  T276] 
[  290.738998][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.738998][  T276] 
[  290.778573][ T4183] 
[  290.778573][ T4183]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.778573][ T4183] 
[  290.791828][ T4183] 
[  290.791828][ T4183]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.791828][ T4183] 
[  291.007087][T10767] XFS (loop4): Mounting V5 Filesystem
[  291.179303][T10767] XFS (loop4): Ending clean mount
[  291.230034][T10767] XFS (loop4): Quotacheck needed: Please wait.
[  291.389440][T10812] loop2: detected capacity change from 0 to 736
[  291.426257][T10767] XFS (loop4): Quotacheck: Done.
[  291.675973][T10795] loop3: detected capacity change from 0 to 32768
[  291.690778][ T4190] XFS (loop4): Unmounting Filesystem
[  291.698186][ T6878] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  291.785597][T10825] loop2: detected capacity change from 0 to 512
[  291.969208][T10825] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  292.050776][T10825] EXT4-fs (loop2): 1 truncate cleaned up
[  292.061674][T10795] XFS (loop3): Mounting V5 Filesystem
[  292.072347][T10825] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000007,init_itable,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none.
[  292.092688][ T6878] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  292.109221][ T6878] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  292.118821][ T6878] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  292.130351][ T6878] usb 1-1: config 220 has no interface number 2
[  292.137480][ T6878] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  292.152183][ T6878] usb 1-1: config 220 interface 0 has no altsetting 0
[  292.160250][ T6878] usb 1-1: config 220 interface 76 has no altsetting 0
[  292.168659][ T6878] usb 1-1: config 220 interface 1 has no altsetting 0
[  292.297770][T10825] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.2671: corrupted in-inode xattr
[  292.329132][T10825] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1761: inode #15: comm syz.2.2671: unable to update i_inline_off
[  292.346585][T10795] XFS (loop3): Ending clean mount
[  292.347426][ T6878] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  292.398876][ T6878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.411577][T10835] EXT4-fs error (device loop2): ext4_xattr_ibody_list:748: inode #15: comm syz.2.2671: corrupted in-inode xattr
[  292.426587][ T6878] usb 1-1: Product: syz
[  292.430922][ T6878] usb 1-1: Manufacturer: syz
[  292.453087][ T6878] usb 1-1: SerialNumber: syz
[  292.541044][ T4194] XFS (loop3): Unmounting Filesystem
[  292.845491][ T6878] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  292.851906][ T6878] usb 1-1: No valid video chain found.
[  292.904172][ T6878] usb 1-1: selecting invalid altsetting 0
[  293.011923][ T6878] usb 1-1: selecting invalid altsetting 0
[  293.039038][ T6878] usbtest: probe of 1-1:220.1 failed with error -22
[  293.079357][ T6878] usb 1-1: USB disconnect, device number 16
[  293.595002][T10851] loop4: detected capacity change from 0 to 32768
[  293.914236][T10877] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2691'.
[  294.121745][T10888] loop3: detected capacity change from 0 to 256
[  294.230976][T10888] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  294.325176][T10892] loop2: detected capacity change from 0 to 16
[  294.399575][T10892] erofs: (device loop2): mounted with root inode @ nid 36.
[  294.771926][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2703'.
[  294.947343][T10910] loop1: detected capacity change from 0 to 2048
[  294.959005][T10914] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  294.976641][T10916] loop2: detected capacity change from 0 to 1024
[  295.048937][ T4416] Alternate GPT is invalid, using primary GPT.
[  295.094878][ T4416]  loop1: p1 p2 p3
[  295.245589][T10910] Alternate GPT is invalid, using primary GPT.
[  295.264876][T10910]  loop1: p1 p2 p3
[  295.367939][T10932] loop0: detected capacity change from 0 to 2048
[  295.474115][ T4418] udevd[4418]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  295.475386][ T5076] udevd[5076]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  295.484808][ T5048] udevd[5048]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  295.567044][T10932] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  295.579180][T10932] ext4 filesystem being mounted at /588/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.616212][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  295.623512][ T5048] udevd[5048]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  295.645667][ T4418] udevd[4418]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  295.732838][T10940] loop3: detected capacity change from 0 to 1024
[  295.892294][T10940] EXT4-fs (loop3): Ignoring removed nobh option
[  295.907088][T10940] EXT4-fs (loop3): Ignoring removed bh option
[  295.923869][T10940] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  296.021766][T10940] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback.
[  296.152155][T10956] loop4: detected capacity change from 0 to 512
[  296.217171][T10943] loop1: detected capacity change from 0 to 32768
[  296.258994][T10943] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  296.288516][T10943] BTRFS info (device loop1): turning off barriers
[  296.317235][T10943] BTRFS info (device loop1): disabling tree log
[  296.338903][T10943] BTRFS info (device loop1): max_inline at 4096
[  296.351914][T10943] BTRFS info (device loop1): using free space tree
[  296.359802][ T6878] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  296.374686][T10943] BTRFS info (device loop1): has skinny extents
[  296.482109][T10943] BTRFS info (device loop1): enabling ssd optimizations
[  296.643536][ T6878] usb 1-1: Using ep0 maxpacket: 16
[  296.779673][ T6878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.811397][ T6878] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[  296.853475][ T6878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.919115][ T6878] usb 1-1: config 0 descriptor??
[  296.924785][T10987] loop4: detected capacity change from 0 to 64
[  296.993026][T10991] loop2: detected capacity change from 0 to 64
[  297.183734][T10987] minix_free_block (loop4:21): bit already cleared
[  297.238093][T10987] Trying to free block not in datazone
[  297.405673][ T6878] microsoft 0003:045E:00F9.0028: unbalanced collection at end of report description
[  297.428034][T10990] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.451632][ T6878] microsoft 0003:045E:00F9.0028: parse failed
[  297.502036][ T6878] microsoft: probe of 0003:045E:00F9.0028 failed with error -22
[  297.514412][T10998] loop2: detected capacity change from 0 to 512
[  297.629888][ T4430] usb 1-1: USB disconnect, device number 17
[  297.679976][T11004] loop1: detected capacity change from 0 to 1024
[  297.727329][T10998] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback.
[  297.785833][T10998] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.855383][T10998] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.2733: invalid size
[  297.869655][T11004] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,i_version,,errors=continue. Quota mode: none.
[  297.885393][T11004] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.889595][T10998] EXT4-fs (loop2): Remounting filesystem read-only
[  298.107460][T11024] loop3: detected capacity change from 0 to 256
[  298.171106][T11029] sp0: Synchronizing with TNC
[  298.285895][T11024] FAT-fs (loop3): Directory bread(block 64) failed
[  298.302386][T11024] FAT-fs (loop3): Directory bread(block 65) failed
[  298.333484][T11024] FAT-fs (loop3): Directory bread(block 66) failed
[  298.340453][T11024] FAT-fs (loop3): Directory bread(block 67) failed
[  298.388237][T11024] FAT-fs (loop3): Directory bread(block 68) failed
[  298.443841][T11024] FAT-fs (loop3): Directory bread(block 69) failed
[  298.450536][T11024] FAT-fs (loop3): Directory bread(block 70) failed
[  298.520396][T11024] FAT-fs (loop3): Directory bread(block 71) failed
[  298.577504][T11024] FAT-fs (loop3): Directory bread(block 72) failed
[  298.599671][T11024] FAT-fs (loop3): Directory bread(block 73) failed
[  298.883343][ T6878] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  298.883449][ T6867] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  298.887867][ T4430] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  299.032984][T11068] loop3: detected capacity change from 0 to 1024
[  299.143362][ T4430] usb 2-1: Using ep0 maxpacket: 16
[  299.243977][ T6878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  299.256390][ T6867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  299.283345][ T6878] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  299.283378][ T6878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.284337][ T6867] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  299.284370][ T6867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.303971][ T4430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.304005][ T4430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.304028][ T4430] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  299.304066][ T4430] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  299.304072][ T6867] usb 1-1: config 0 descriptor??
[  299.304090][ T4430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.305113][ T6878] usb 3-1: config 0 descriptor??
[  299.307975][ T4430] usb 2-1: config 0 descriptor??
[  299.332788][T11052] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  299.654728][ T6874] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  299.658632][T11089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2758'.
[  299.788051][ T6867] asus 0003:0B05:17E0.0029: item fetching failed at offset 2/5
[  299.800955][ T6878] arvo 0003:1E7D:30D4.002A: hidraw0: USB HID v1.01 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  299.804830][ T4430] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  299.826312][ T4430] microsoft 0003:045E:07DA.002B: ignoring exceeding usage max
[  299.826851][ T6867] asus 0003:0B05:17E0.0029: Asus hid parse failed: -22
[  299.873431][ T6867] asus: probe of 0003:0B05:17E0.0029 failed with error -22
[  299.900666][ T4430] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002B/input/input32
[  299.913367][ T6874] usb 4-1: Using ep0 maxpacket: 16
[  299.980053][T11102] loop4: detected capacity change from 0 to 164
[  300.006142][ T4430] microsoft 0003:045E:07DA.002B: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  300.030774][ T4430] usb 2-1: USB disconnect, device number 18
[  300.034772][ T6867] usb 3-1: USB disconnect, device number 15
[  300.043704][ T6874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.091531][   T13] usb 1-1: USB disconnect, device number 18
[  300.102470][T11102] Unable to read rock-ridge attributes
[  300.107658][ T6874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.148511][T11099] fido_id[11099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  300.170708][ T6874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  300.173027][T11102] Unable to read rock-ridge attributes
[  300.185319][ T6874] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  300.204158][T11102] iso9660: Corrupted directory entry in block 4 of inode 1792
[  300.236472][T11103] fido_id[11103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  300.238334][ T6874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.284197][ T6874] usb 4-1: config 0 descriptor??
[  300.481830][T11113] loop4: detected capacity change from 0 to 1024
[  300.533931][T11113] hfsplus: invalid secondary volume header
[  300.541080][T11113] hfsplus: unable to find HFS+ superblock
[  300.648064][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2768'.
[  300.765838][ T6874] microsoft 0003:045E:07DA.002C: ignoring exceeding usage max
[  300.928338][T11127] loop2: detected capacity change from 0 to 512
[  300.973918][ T6874] microsoft 0003:045E:07DA.002C: No inputs registered, leaving
[  300.994945][ T6874] microsoft 0003:045E:07DA.002C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  301.024482][ T6874] microsoft 0003:045E:07DA.002C: no inputs found
[  301.032797][   T13] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  301.041196][ T6874] microsoft 0003:045E:07DA.002C: could not initialize ff, continuing anyway
[  301.074397][ T6874] usb 4-1: USB disconnect, device number 19
[  301.081803][T11127] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mb_optimize_scan=0x0000000000000000,commit=0x0000000000000000,. Quota mode: writeback.
[  301.173253][T11127] ext4 filesystem being mounted at /574/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  301.278563][T11127] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 1073741831 (only 1 groups)
[  301.294535][T11132] fido_id[11132]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  301.476954][   T13] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  301.494958][   T13] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  301.504223][   T13] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  301.515164][   T13] usb 2-1: config 220 has no interface number 2
[  301.521841][   T13] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  301.536096][   T13] usb 2-1: config 220 interface 0 has no altsetting 0
[  301.536126][   T13] usb 2-1: config 220 interface 76 has no altsetting 0
[  301.536146][   T13] usb 2-1: config 220 interface 1 has no altsetting 0
[  301.634205][T11142] loop0: detected capacity change from 0 to 64
[  301.722758][   T13] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  301.764151][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.807387][   T13] usb 2-1: Product: syz
[  301.828230][   T13] usb 2-1: Manufacturer: syz
[  301.855479][   T13] usb 2-1: SerialNumber: syz
[  302.076250][T11159] loop4: detected capacity change from 0 to 256
[  302.110505][T11160] loop0: detected capacity change from 0 to 512
[  302.113051][T11162] loop2: detected capacity change from 0 to 64
[  302.177686][T11160] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  302.228870][T11160] EXT4-fs (loop0): orphan cleanup on readonly fs
[  302.259726][T11160] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.2786: iget: bad i_size value: 360287970189639680
[  302.273798][   T13] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  302.280197][   T13] usb 2-1: No valid video chain found.
[  302.292095][   T13] usb 2-1: selecting invalid altsetting 0
[  302.305846][T11160] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2786: couldn't read orphan inode 15 (err -117)
[  302.336967][T11160] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,barrier,nogrpid,max_dir_size_kb=0x0000000000001000,,errors=continue. Quota mode: writeback.
[  302.340558][T11169] overlayfs: conflicting options: nfs_export=on,index=off
[  302.395935][   T13] usb 2-1: selecting invalid altsetting 0
[  302.403111][   T13] usbtest: probe of 2-1:220.1 failed with error -22
[  302.433442][   T13] usb 2-1: USB disconnect, device number 19
[  302.763483][ T6878] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  302.852719][ T4430] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  303.009089][ T6878] usb 3-1: Using ep0 maxpacket: 32
[  303.133299][ T6878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.147190][T11201] loop1: detected capacity change from 0 to 256
[  303.152647][ T4430] usb 5-1: Using ep0 maxpacket: 16
[  303.154990][ T6878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.190703][ T6878] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  303.229515][T11201] exfat: Deprecated parameter 'namecase'
[  303.239207][ T6878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.260208][ T6878] usb 3-1: config 0 descriptor??
[  303.293479][T11208] tipc: Enabled bearer <eth:vlan0>, priority 10
[  303.304440][ T6878] hub 3-1:0.0: USB hub found
[  303.341692][T11201] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb2d6c, utbl_chksum : 0xe619d30d)
[  303.391270][T11201] exFAT-fs (loop1): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5)
[  303.433625][T11201] exFAT-fs (loop1): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5)
[  303.473397][ T4430] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  303.486511][ T4430] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.513193][ T4430] usb 5-1: Product: syz
[  303.523820][ T4430] usb 5-1: Manufacturer: syz
[  303.524382][ T6878] hub 3-1:0.0: config failed, can't read hub descriptor (err -90)
[  303.533741][ T4430] usb 5-1: SerialNumber: syz
[  303.581360][ T4430] r8152-cfgselector 5-1: config 0 descriptor??
[  303.658796][T11219] device veth1_macvtap left promiscuous mode
[  303.665970][T11219] device macsec0 entered promiscuous mode
[  303.713735][T11219] device veth1_macvtap entered promiscuous mode
[  303.735856][T11219] device macsec0 left promiscuous mode
[  303.742298][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  303.833580][ T6878] usbhid 3-1:0.0: can't add hid device: -71
[  303.839886][ T6878] usbhid: probe of 3-1:0.0 failed with error -71
[  303.909522][ T6878] usb 3-1: USB disconnect, device number 16
[  304.105726][T11237] loop3: detected capacity change from 0 to 128
[  304.123134][ T4430] r8152-cfgselector 5-1: Unknown version 0x0000
[  304.129711][ T4430] r8152-cfgselector 5-1: bad CDC descriptors
[  304.169130][ T4430] r8152-cfgselector 5-1: Unknown version 0x0000
[  304.181588][T11237] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  304.206165][T11239] loop0: detected capacity change from 0 to 4096
[  304.213207][ T4430] r8152-cfgselector 5-1: USB disconnect, device number 20
[  304.293454][ T7803] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  304.408423][ T6878] tipc: Node number set to 2130706433
[  304.553409][ T7803] usb 2-1: Using ep0 maxpacket: 32
[  304.634352][T11249] loop3: detected capacity change from 0 to 2048
[  304.670462][T11242] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  304.713033][ T7803] usb 2-1: unable to get BOS descriptor or descriptor too short
[  304.772772][T11249] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  304.803356][ T7803] usb 2-1: config 6 has an invalid interface number: 203 but max is 0
[  304.811767][ T7803] usb 2-1: config 6 has no interface number 0
[  304.833326][ T7803] usb 2-1: config 6 interface 203 has no altsetting 0
[  304.869454][T11260] loop4: detected capacity change from 0 to 512
[  304.921418][T11264] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  304.929374][T11264] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  305.004956][ T7803] usb 2-1: New USB device found, idVendor=1a8d, idProduct=100f, bcdDevice= 2.fa
[  305.019971][ T7803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.043227][ T7803] usb 2-1: Product: syz
[  305.047464][ T7803] usb 2-1: Manufacturer: �玌敮ি藊︕蒘ଳ痣괢��礀봤�꽼禮�⩳ꄻ�떉᠘휀൱]�츦㴻솨┼렽胟侈픟㡗쇺冖㟼퇨ﰤ�⚴顷⤎껸㺜퓜䲲〄ﰋ壄僄尯릻攛濜犬팺
[  305.072335][T11260] EXT4-fs (loop4): 1 truncate cleaned up
[  305.094096][T11260] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  305.189585][ T7803] usb 2-1: SerialNumber: syz
[  305.221968][T11273] loop3: detected capacity change from 0 to 512
[  305.355464][T11273] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,journal_ioprio=0x0000000000000001,dioread_lock,dioread_nolock,dioread_lock,norecovery,,errors=continue. Quota mode: writeback.
[  305.374827][    C1] vkms_vblank_simulate: vblank timer overrun
[  305.419106][T11273] ext4 filesystem being mounted at /563/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  305.514264][ T7803] option 2-1:6.203: GSM modem (1-port) converter detected
[  305.543594][ T7803] usb 2-1: USB disconnect, device number 20
[  305.550663][ T7803] option 2-1:6.203: device disconnected
[  305.753217][ T6878] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  305.795048][T11293] loop3: detected capacity change from 0 to 4096
[  305.853345][ T4430] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  305.869942][T11293] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  305.971839][T11299] loop0: detected capacity change from 0 to 16
[  305.979258][T11293] ntfs3: loop3: failed to convert "076c" to iso8859-1
[  306.016824][T11301] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.2851'.
[  306.039202][T11299] erofs: (device loop0): mounted with root inode @ nid 36.
[  306.066990][T11299] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  306.116075][T11299] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851]
[  306.133195][ T4430] usb 5-1: Using ep0 maxpacket: 16
[  306.134115][ T6878] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.169723][ T6878] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.186666][T11299] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[  306.200965][ T6878] usb 3-1: config 0 interface 0 has no altsetting 0
[  306.220518][ T6878] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  306.259577][ T6878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.279913][ T6878] usb 3-1: config 0 descriptor??
[  306.292728][ T4430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.305331][ T4430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.315258][ T4430] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  306.324651][ T4430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.357792][ T4430] usb 5-1: config 0 descriptor??
[  306.544050][ T5348] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[  306.566755][T11319] loop0: detected capacity change from 0 to 1024
[  306.701110][    T9] hfsplus: b-tree write err: -5, ino 4
[  306.741388][T11323] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  306.817785][ T6878] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.002D/input/input33
[  306.881312][ T4430] corsair 0003:1B1C:1B02.002E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0
[  306.930495][ T6878] sony 0003:054C:03D5.002D: input,hidraw1: USB HID v1d.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0
[  306.981186][ T6878] usb 3-1: USB disconnect, device number 17
[  306.987446][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  306.987485][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.987522][ T5348] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  306.987548][ T5348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.030303][ T5348] usb 2-1: config 0 descriptor??
[  307.077522][T11333] netlink: 364 bytes leftover after parsing attributes in process `syz.0.2866'.
[  307.083063][ T4430] corsair 0003:1B1C:1B02.002E: Failed to get K90 initial state (error -71).
[  307.101764][T11333] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  307.164554][ T4430] usb 5-1: USB disconnect, device number 21
[  307.270886][T11334] fido_id[11334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  307.366395][T11336] fido_id[11336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  307.393698][T11341] netlink: 'syz.3.2870': attribute type 16 has an invalid length.
[  307.556284][ T5348] glorious 0003:258A:0036.002F: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.1-1/input0
[  307.668688][T11350] loop3: detected capacity change from 0 to 4096
[  307.719042][T11357] CUSE: unknown device info "�KJéH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,�°
ð<Ö_e¤FÀÆ"
[  307.737472][T11357] CUSE: unknown device info "3�ÜŸ•,²¥Ì˜õ"
[  307.767852][ T6878] usb 2-1: USB disconnect, device number 21
[  307.774642][T11357] CUSE: unknown device info "Jô©Ð2SZûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q	´ƒ
[  307.774642][T11357] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR�É�Q÷®(hÒ�j	pøVdY0¨Æ|M?2JÿúIšvö^
RÎ@´å"
[  307.807542][T11360] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.808403][T11350] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  307.890381][T11350] Remounting filesystem read-only
[  307.893083][T11354] fido_id[11354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  307.916958][T11357] CUSE: unknown device info "!ToÛ}Ý�&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E•gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô"
[  307.939619][T11357] CUSE: DEVNAME unspecified
[  308.088848][T11365] loop4: detected capacity change from 0 to 1024
[  308.253979][ T4319] hfsplus: b-tree write err: -5, ino 4
[  308.414305][T11376] loop4: detected capacity change from 0 to 4096
[  308.502782][ T5348] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  308.535593][T11376] ntfs: volume version 3.1.
[  308.891032][T11399] loop0: detected capacity change from 0 to 16
[  308.941943][T11399] erofs: (device loop0): mounted with root inode @ nid 36.
[  309.010834][T11399] erofs: (device loop0): find_target_block_classic: corrupted dir block 8200 @ nid 36
[  309.072797][ T5348] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  309.085801][ T5348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.102475][ T5348] usb 3-1: Product: syz
[  309.107201][ T5348] usb 3-1: Manufacturer: syz
[  309.112111][ T5348] usb 3-1: SerialNumber: syz
[  309.122693][ T5348] usb 3-1: config 0 descriptor??
[  309.172745][ T5348] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  309.208412][ T5348] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  309.253375][ T5348] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  309.302520][ T5348] usb 3-1: media controller created
[  309.367463][T11414] loop3: detected capacity change from 0 to 512
[  309.379390][T11372] dvb-usb: bulk message failed: -22 (7/0)
[  309.389292][ T5348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  309.430551][T11414] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  309.470587][ T5348] DVB: Unable to find symbol mt352_attach()
[  309.504644][T11414] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback.
[  309.577910][ T5348] DVB: Unable to find symbol nxt6000_attach()
[  309.578105][T11414] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.590932][ T5348] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  309.694965][T11431] EXT4-fs error (device loop3): __ext4_new_inode:1286: comm syz.3.2904: failed to insert inode 16: doubly allocated?
[  309.709459][   T13] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  309.738500][ T5348] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34
[  309.768583][ T5348] dvb-usb: schedule remote query interval to 1000 msecs.
[  309.793463][ T5348] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  309.817658][ T5348] dvb-usb: bulk message failed: -22 (7/0)
[  309.828263][ T5348] dvb-usb: bulk message failed: -22 (7/0)
[  309.838953][ T5348] usb 3-1: USB disconnect, device number 18
[  309.922822][ T5348] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  309.944116][T11439] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2914'.
[  310.117384][T11446] [U] ¹é
[  310.172915][   T13] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.195066][   T13] usb 2-1: config 0 interface 0 has no altsetting 0
[  310.231786][   T13] usb 2-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00
[  310.292834][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.325840][   T13] usb 2-1: config 0 descriptor??
[  310.497949][T11458] loop0: detected capacity change from 0 to 8192
[  310.611321][T11458] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  310.633121][T11458] REISERFS (device loop0): using ordered data mode
[  310.640283][T11458] reiserfs: using flush barriers
[  310.707971][T11458] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  310.726277][T11458] REISERFS (device loop0): checking transaction log (loop0)
[  310.739548][T11458] REISERFS (device loop0): Using r5 hash to sort names
[  310.748149][T11458] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  310.763367][T11458] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  310.813383][T11458] REISERFS warning (device loop0): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=2, len=0 - odd
[  310.836558][   T13] wacom 0003:056A:0015.0030: Unknown device_type for 'HID 056a:0015'. Assuming pen.
[  310.911640][   T13] wacom 0003:056A:0015.0030: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.1-1/input0
[  310.943896][   T13] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0015.0030/input/input35
[  311.116183][   T13] usb 2-1: USB disconnect, device number 22
[  311.360770][T11478] fido_id[11478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  311.530247][T11464] loop2: detected capacity change from 0 to 32768
[  311.634787][T11492] loop1: detected capacity change from 0 to 512
[  311.700888][T11492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  311.816904][T11492] EXT4-fs (loop1): 1 truncate cleaned up
[  311.880311][T11492] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  311.891334][T11473] loop3: detected capacity change from 0 to 32768
[  311.980143][T11473] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2930 (11473)
[  312.023869][T11492] EXT4-fs (loop1): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback.
[  312.141445][T11473] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  312.176673][T11508] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  312.226797][T11473] BTRFS info (device loop3): using free space tree
[  312.258500][T11473] BTRFS info (device loop3): has skinny extents
[  312.324312][T11508] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  312.366982][T11508] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  312.595173][T11539] loop0: detected capacity change from 0 to 64
[  312.611220][T11541] delete_channel: no stack
[  312.658068][T11473] BTRFS info (device loop3): enabling ssd optimizations
[  312.738826][T11539] hfs: unable to locate alternate MDB
[  312.765709][T11539] hfs: continuing without an alternate MDB
[  312.916847][T11557] loop1: detected capacity change from 0 to 64
[  313.667129][T11580] netlink: 'syz.2.2960': attribute type 3 has an invalid length.
[  313.811791][T11588] program syz.0.2963 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  313.874052][T11592] loop1: detected capacity change from 0 to 1024
[  313.902212][T11590] loop2: detected capacity change from 0 to 2048
[  314.018708][T11592] hfsplus: request for non-existent node 16777216 in B*Tree
[  314.062815][T11592] hfsplus: request for non-existent node 16777216 in B*Tree
[  314.081117][T11601] program syz.4.2967 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  314.098097][T11592] hfsplus: request for non-existent node 16777216 in B*Tree
[  314.152745][T11592] hfsplus: request for non-existent node 16777216 in B*Tree
[  314.217764][T11592] hfsplus: request for non-existent node 16777216 in B*Tree
[  314.242318][T11592] hfsplus: request for non-existent node 16777216 in B*Tree
[  314.404697][T11609] loop4: detected capacity change from 0 to 2048
[  314.529355][T11609] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  314.575490][T11609] NILFS (loop4): mounting unchecked fs
[  314.586553][T11612] loop0: detected capacity change from 0 to 1024
[  314.624303][ T4418] udevd[4418]: incorrect nilfs2 checksum on /dev/loop4
[  314.648721][T11609] NILFS (loop4): recovery complete
[  314.698307][T11613] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  314.777406][T11614] mmap: syz.3.2962 (11614) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  314.803640][T11612] hfsplus: bad catalog entry type
[  314.872887][ T4319] hfsplus: b-tree write err: -5, ino 4
[  314.917834][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  314.917854][   T26] audit: type=1800 audit(1761017639.012:34): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2965" name="file1" dev="loop1" ino=20 res=0 errno=0
[  315.240280][T11631] loop0: detected capacity change from 0 to 512
[  315.250763][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2981'.
[  315.319879][T11631] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  315.388582][T11631] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #12: comm syz.0.2980: corrupted in-inode xattr
[  315.517762][T11631] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2980: couldn't read orphan inode 12 (err -117)
[  315.563489][T11631] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,noload,noload,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none.
[  315.641605][T11641] loop1: detected capacity change from 0 to 1024
[  315.900734][ T5439] hfsplus: b-tree write err: -5, ino 4
[  316.221855][T11628] loop2: detected capacity change from 0 to 32768
[  316.359504][T11628] XFS (loop2): Mounting V5 Filesystem
[  316.434560][T11647] loop3: detected capacity change from 0 to 32768
[  316.493714][T11628] XFS (loop2): Ending clean mount
[  316.503225][T11647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2988 (11647)
[  316.538005][T11628] XFS (loop2): Quotacheck needed: Please wait.
[  316.598229][T11647] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  316.659544][T11647] BTRFS info (device loop3): allowing degraded mounts
[  316.669906][T11649] loop4: detected capacity change from 0 to 32768
[  316.700091][T11647] BTRFS info (device loop3): setting nodatasum
[  316.743307][T11647] BTRFS info (device loop3): disabling tree log
[  316.750772][T11647] BTRFS info (device loop3): max_inline at 0
[  316.763108][T11647] BTRFS info (device loop3): using free space tree
[  316.769801][T11647] BTRFS info (device loop3): has skinny extents
[  316.886351][T11628] XFS (loop2): Quotacheck: Done.
[  316.897183][T11649] XFS (loop4): Mounting V5 Filesystem
[  316.933289][T11647] BTRFS info (device loop3): enabling ssd optimizations
[  317.008692][   T26] audit: type=1800 audit(1761017641.122:35): pid=11647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2988" name="file1" dev="loop3" ino=260 res=0 errno=0
[  317.029636][    C1] vkms_vblank_simulate: vblank timer overrun
[  317.049645][T11647] BTRFS error (device loop3): balance: invalid convert system profile raid0
[  317.144821][T11649] XFS (loop4): Ending clean mount
[  317.166824][T11649] XFS (loop4): Quotacheck needed: Please wait.
[  317.197023][T11698] loop0: detected capacity change from 0 to 32768
[  317.219245][ T4189] XFS (loop2): Unmounting Filesystem
[  317.228186][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  317.228239][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  317.258103][T11698] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2998 (11698)
[  317.375811][T11698] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  317.419396][T11698] BTRFS info (device loop0): using free space tree
[  317.466127][T11698] BTRFS info (device loop0): has skinny extents
[  317.470299][T11649] XFS (loop4): Quotacheck: Done.
[  317.906769][T11698] BTRFS info (device loop0): enabling ssd optimizations
[  318.076854][ T4190] XFS (loop4): Unmounting Filesystem
[  318.278208][    C1] vkms_vblank_simulate: vblank timer overrun
[  318.514310][T11733] loop1: detected capacity change from 0 to 16
[  318.599330][T11733] erofs: (device loop1): mounted with root inode @ nid 36.
[  319.252978][ T6867] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  319.320191][T11751] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  319.347010][T11751] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  319.370464][T11751] comedi comedi3: 8255: I/O port conflict (0x21,4)
[  319.392133][T11751] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  319.526225][T11759] loop4: detected capacity change from 0 to 512
[  319.561532][T11757] loop0: detected capacity change from 0 to 2048
[  319.613093][T11759] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  319.624418][ T6867] usb 4-1: New USB device found, idVendor=05ac, idProduct=029a, bcdDevice= 0.00
[  319.640529][T11757] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  319.653223][ T6867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.697807][ T4416] udevd[4416]: incorrect nilfs2 checksum on /dev/loop0
[  319.707372][ T6867] usb 4-1: config 0 descriptor??
[  319.714400][T11759] EXT4-fs (loop4): 1 truncate cleaned up
[  319.753983][T11768] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  319.769025][T11759] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,debug_want_extra_isize=0x0000000000000066,nobarrier,nodiscard,inode_readahead_blks=0x0000000008000000,. Quota mode: none.
[  320.171378][T11763] loop1: detected capacity change from 0 to 32768
[  320.236863][ T6867] hid-generic 0003:05AC:029A.0031: hidraw0: USB HID v1.01 Device [HID 05ac:029a] on usb-dummy_hcd.3-1/input0
[  320.281132][T11779] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  320.341160][T11763] JBD2: Ignoring recovery information on journal
[  320.365362][T11763] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[  320.410107][T11763] JBD2: bad block at offset 32
[  320.430851][T11763] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  320.437310][ T4231] usb 4-1: USB disconnect, device number 20
[  320.714200][ T4187] ocfs2: Unmounting device (7,1) on (node local)
[  320.719692][T11786] fido_id[11786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  320.846145][T11774] loop2: detected capacity change from 0 to 32768
[  321.140407][ T4231] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  321.161308][T11801] loop0: detected capacity change from 0 to 1024
[  321.250463][T11801] EXT4-fs (loop0): Ignoring removed orlov option
[  321.291086][T11801] EXT4-fs (loop0): Ignoring removed nobh option
[  321.313409][T11801] EXT4-fs (loop0): Ignoring removed bh option
[  321.361400][T11798] loop3: detected capacity change from 0 to 4096
[  321.392746][ T4231] usb 2-1: Using ep0 maxpacket: 16
[  321.400793][T11801] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,orlov,barrier=0x0000000000000002,journal_dev=0x0000000000000001,data_err=ignore,max_batch_time=0x0000000000000007,min_batch_time=0x0000000000000008,grpquota,nobh,user_xattr,bh,abort,,errors=continue. Quota mode: writeback.
[  321.446593][   T26] audit: type=1400 audit(1761017645.562:36): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11808 comm="syz.2.3036"
[  321.528975][ T4231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.584014][ T4231] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  321.651030][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.709769][ T4231] usb 2-1: config 0 descriptor??
[  322.028445][T11828] loop3: detected capacity change from 0 to 64
[  322.188790][T11833] loop2: detected capacity change from 0 to 64
[  322.206097][T11825] loop4: detected capacity change from 0 to 8192
[  322.236386][ T4231] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.0032/input/input38
[  322.300225][   T26] audit: type=1800 audit(1761017646.412:37): pid=11833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3047" name="file1" dev="loop2" ino=21 res=0 errno=0
[  322.327553][T11825] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  322.363064][T11825] REISERFS (device loop4): using ordered data mode
[  322.377708][ T4231] creative-sb0540 0003:041E:3100.0032: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0
[  322.459569][T11825] reiserfs: using flush barriers
[  322.492101][T11840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3049'.
[  322.540219][T11825] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  322.559761][ T4231] usb 2-1: USB disconnect, device number 23
[  322.650423][T11825] REISERFS (device loop4): checking transaction log (loop4)
[  322.704171][T11825] REISERFS (device loop4): Using r5 hash to sort names
[  322.769808][T11825] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  322.789700][T11825] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  322.870276][T11841] fido_id[11841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  323.096123][T11850] loop3: detected capacity change from 0 to 1024
[  323.262846][T11850] hfsplus: request for non-existent node 16777216 in B*Tree
[  323.270290][T11850] hfsplus: request for non-existent node 16777216 in B*Tree
[  323.304221][T11850] hfsplus: request for non-existent node 16777216 in B*Tree
[  323.311580][T11850] hfsplus: request for non-existent node 16777216 in B*Tree
[  323.441690][T11853] loop1: detected capacity change from 0 to 8192
[  323.587194][T11858] loop0: detected capacity change from 0 to 4096
[  323.621658][T11864] loop2: detected capacity change from 0 to 64
[  323.651421][T11853] overlayfs: filesystem on './file0' not supported
[  323.903743][T11858] ntfs: volume version 3.1.
[  324.227425][   T26] audit: type=1800 audit(1761017648.342:38): pid=11850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3053" name="file1" dev="loop3" ino=20 res=0 errno=0
[  324.265948][ T5346] libceph: connect (1)[c::]:6789 error -101
[  324.287419][T11875] loop2: detected capacity change from 0 to 1024
[  324.347387][ T5346] libceph: mon0 (1)[c::]:6789 connect error
[  324.431762][ T7294] libceph: connect (1)[c::]:6789 error -101
[  324.442797][ T7294] libceph: mon0 (1)[c::]:6789 connect error
[  324.485200][T11875] hfsplus: bad catalog entry type
[  324.756409][ T7294] libceph: connect (1)[c::]:6789 error -101
[  324.778866][ T7294] libceph: mon0 (1)[c::]:6789 connect error
[  324.878309][T11872] ceph: No mds server is up or the cluster is laggy
[  324.945824][T11883] loop3: detected capacity change from 0 to 4096
[  325.006458][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3073'.
[  325.045052][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3073'.
[  325.165978][T11883] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  325.427366][T11896] loop2: detected capacity change from 0 to 8192
[  325.606711][T11896] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  325.706915][T11909] loop4: detected capacity change from 0 to 32768
[  325.720911][T11909] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®: Trying to join cluster "lock_nolock", "#ãvúSÖñ^Ñ°Õ~oó»Á$®"
[  325.732266][T11909] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®: Now mounting FS (format 1801)...
[  325.750689][T11909] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: fatal: filesystem consistency error
[  325.750689][T11909]   inode = 1 19
[  325.750689][T11909]   function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115
[  325.771628][T11909] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: about to withdraw this file system
[  325.780887][T11909] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: Journal recovery skipped for jid 0 until next mount.
[  325.792054][T11909] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: Glock dequeues delayed: 0
[  325.801361][T11909] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: File system withdrawn
[  325.809963][T11909] CPU: 1 PID: 11909 Comm: syz.4.3080 Not tainted syzkaller #0
[  325.817566][T11909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  325.827857][T11909] Call Trace:
[  325.831344][T11909]  <TASK>
[  325.834532][T11909]  dump_stack_lvl+0x168/0x230
[  325.839636][T11909]  ? kobject_uevent_env+0x371/0x890
[  325.844966][T11909]  ? show_regs_print_info+0x20/0x20
[  325.850220][T11909]  ? load_image+0x3b0/0x3b0
[  325.854917][T11909]  ? kobject_uevent_env+0x371/0x890
[  325.860188][T11909]  gfs2_withdraw+0x111b/0x1460
[  325.865014][T11909]  ? gfs2_lm+0x220/0x220
[  325.869306][T11909]  ? _raw_spin_unlock+0x24/0x40
[  325.874192][T11909]  ? gfs2_glock_nq+0xcb0/0x1550
[  325.879084][T11909]  ? gfs2_consist_inode_i+0xc0/0xe0
[  325.884519][T11909]  gfs2_jdesc_check+0x137/0x290
[  325.889428][T11909]  check_journal_clean+0x151/0x300
[  325.894589][T11909]  ? gfs2_trans_remove_revoke+0x370/0x370
[  325.900444][T11909]  ? check_journal_clean+0x10d/0x300
[  325.905858][T11909]  ? __rwlock_init+0x140/0x140
[  325.910687][T11909]  ? do_raw_spin_unlock+0x11d/0x230
[  325.916112][T11909]  ? _raw_spin_unlock+0x24/0x40
[  325.921205][T11909]  ? gfs2_jdesc_find+0xa7/0xc0
[  325.926166][T11909]  init_journal+0x179c/0x2220
[  325.930913][T11909]  ? end_bio_io_page+0x100/0x100
[  325.935905][T11909]  ? vsnprintf+0x1905/0x1a00
[  325.940655][T11909]  ? snprintf+0xd7/0x120
[  325.945042][T11909]  ? init_journal+0x710/0x2220
[  325.949949][T11909]  ? vscnprintf+0x80/0x80
[  325.954422][T11909]  ? gfs2_glock_nq_num+0x17a/0x1b0
[  325.959596][T11909]  init_inodes+0xdb/0x320
[  325.963979][T11909]  gfs2_fill_super+0x1701/0x1f50
[  325.968973][T11909]  ? gfs2_reconfigure+0xcd0/0xcd0
[  325.974036][T11909]  ? gfs2_glock_nq_num+0x82/0x1b0
[  325.979106][T11909]  ? preempt_count_add+0x8d/0x190
[  325.984189][T11909]  ? sb_set_blocksize+0xa5/0xe0
[  325.989084][T11909]  get_tree_bdev+0x3f1/0x610
[  325.993722][T11909]  ? gfs2_reconfigure+0xcd0/0xcd0
[  325.998809][T11909]  gfs2_get_tree+0x4d/0x1e0
[  326.003363][T11909]  vfs_get_tree+0x88/0x270
[  326.007842][T11909]  do_new_mount+0x24a/0xa40
[  326.012493][T11909]  __se_sys_mount+0x2d6/0x3c0
[  326.017224][T11909]  ? __x64_sys_mount+0xc0/0xc0
[  326.022184][T11909]  ? lockdep_hardirqs_on+0x94/0x140
[  326.027439][T11909]  ? __x64_sys_mount+0x1c/0xc0
[  326.032337][T11909]  do_syscall_64+0x4c/0xa0
[  326.037099][T11909]  ? clear_bhb_loop+0x30/0x80
[  326.042100][T11909]  ? clear_bhb_loop+0x30/0x80
[  326.046824][T11909]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  326.052846][T11909] RIP: 0033:0x7f9a915ef76a
[  326.057307][T11909] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.077046][T11909] RSP: 002b:00007f9a8f854e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  326.085526][T11909] RAX: ffffffffffffffda RBX: 00007f9a8f854ef0 RCX: 00007f9a915ef76a
[  326.093540][T11909] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f9a8f854eb0
[  326.101657][T11909] RBP: 0000200000000400 R08: 00007f9a8f854ef0 R09: 0000000000200001
[  326.110017][T11909] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500
[  326.118240][T11909] R13: 00007f9a8f854eb0 R14: 00000000000125bb R15: 0000200000000f00
[  326.126457][T11909]  </TASK>
[  326.131317][T11909] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: Error checking journal for spectator mount.
[  326.195330][T11914] loop0: detected capacity change from 0 to 256
[  326.233778][T11914] exfat: Deprecated parameter 'utf8'
[  326.239286][T11914] exfat: Deprecated parameter 'namecase'
[  326.260730][T11914] exfat: Deprecated parameter 'utf8'
[  326.278335][T11914] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  326.313061][ T4231] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  326.388348][   T26] audit: type=1800 audit(1761017650.502:39): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3082" name="file1" dev="loop0" ino=1048735 res=0 errno=0
[  326.433237][T11914] [syz.0.3082/11914] FS: loop0 File: /file1 would truncate fibmap result
[  326.536831][ T5346] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  326.591666][T11920] delete_channel: no stack
[  326.723508][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.753046][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.783641][ T4231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  326.807965][ T5346] usb 3-1: Using ep0 maxpacket: 16
[  326.810038][ T4231] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00
[  326.825451][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.880094][ T4231] usb 4-1: config 0 descriptor??
[  326.922456][T11911] loop1: detected capacity change from 0 to 40427
[  326.952948][ T5346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.987490][ T5346] usb 3-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00
[  327.018063][ T5346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.030789][T11911] F2FS-fs (loop1): Invalid segment count (1)
[  327.040941][T11911] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  327.056088][ T5346] usb 3-1: config 0 descriptor??
[  327.076551][T11911] F2FS-fs (loop1): invalid crc value
[  327.097018][T11911] F2FS-fs (loop1): Found nat_bits in checkpoint
[  327.206104][T11911] F2FS-fs (loop1): recover fsync data on readonly fs
[  327.231019][T11911] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30
[  327.271061][T11911] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  327.365430][ T4231] elecom 0003:056E:00FB.0033: report_id 22043 is invalid
[  327.374960][T11911] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0
[  327.403747][ T4231] elecom 0003:056E:00FB.0033: item 0 2 1 8 parsing failed
[  327.411166][T11911] F2FS-fs (loop1): switch extent_cache option is not allowed
[  327.424304][ T4231] elecom: probe of 0003:056E:00FB.0033 failed with error -22
[  327.539774][ T5346] wacom 0003:056A:006B.0034: Unknown device_type for 'HID 056a:006b'. Assuming pen.
[  327.568719][ T5346] wacom 0003:056A:006B.0034: hidraw0: USB HID v0.05 Device [HID 056a:006b] on usb-dummy_hcd.2-1/input0
[  327.601659][ T5346] input: Wacom Bamboo1 5x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:006B.0034/input/input39
[  327.655582][ T7295] usb 4-1: USB disconnect, device number 21
[  327.770852][ T6867] usb 3-1: USB disconnect, device number 19
[  327.864667][T11957] fido_id[11957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  328.280534][T11967] loop3: detected capacity change from 0 to 764
[  328.328485][T11967] rock: directory entry would overflow storage
[  328.348935][T11967] rock: sig=0x4654, size=5, remaining=4
[  328.633651][T11965] loop4: detected capacity change from 0 to 32768
[  328.682227][T11971] loop2: detected capacity change from 0 to 4096
[  328.725872][T11971] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  328.799190][T11971] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  328.876231][T11971] ntfs3: loop2: ntfs_set_state r=3 failed, -22.
[  328.947833][T11985] loop1: detected capacity change from 0 to 1024
[  329.185763][ T4319] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22.
[  329.195184][T11994] program syz.0.3118 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  329.205648][ T5439] hfsplus: b-tree write err: -5, ino 4
[  329.245414][ T4319] ntfs3: loop2: ino=1e, Internal error
[  329.250966][ T4319] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22.
[  329.316525][ T4189] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  329.334209][ T4189] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22.
[  329.374347][T11997] netlink: 'syz.1.3121': attribute type 4 has an invalid length.
[  329.666048][T12007] loop2: detected capacity change from 0 to 512
[  329.688600][T12005] loop1: detected capacity change from 0 to 4096
[  329.744682][ T6867] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  329.773922][T12007] EXT4-fs (loop2): inline encryption not supported
[  329.818568][T12012] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  329.888823][T12007] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,grpquota,,errors=continue. Quota mode: writeback.
[  329.997052][T12007] ext4 filesystem being mounted at /630/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.020072][T12023] loop4: detected capacity change from 0 to 16
[  330.110882][ T6867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.122821][T12023] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  330.141682][ T6867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.153944][ T6867] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  330.193263][ T6867] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  330.223189][T12025] loop1: detected capacity change from 0 to 256
[  330.225184][ T6867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.264790][ T6867] usb 1-1: config 0 descriptor??
[  330.377295][T12025] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  330.708174][T12043] sch_fq: defrate 4294967295 ignored.
[  330.755380][ T6867] plantronics 0003:047F:FFFF.0035: unbalanced delimiter at end of report description
[  330.790807][ T6867] plantronics 0003:047F:FFFF.0035: parse failed
[  330.814590][ T6867] plantronics: probe of 0003:047F:FFFF.0035 failed with error -22
[  330.892615][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3144'.
[  330.982728][ T6867] usb 1-1: USB disconnect, device number 19
[  331.253269][T12064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3151'.
[  331.367885][T12070] loop1: detected capacity change from 0 to 512
[  331.396893][T12070] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  331.409288][T12070] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  331.419500][T12070] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3154: Corrupt directory, running e2fsck is recommended
[  331.449034][T12070] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  331.457511][T12070] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.3154: corrupted in-inode xattr
[  331.469823][T12070] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.3154: couldn't read orphan inode 15 (err -117)
[  331.489396][T12070] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,barrier=0x0000000000000000,grpid,,,errors=continue. Quota mode: writeback.
[  331.726867][T12053] loop4: detected capacity change from 0 to 32768
[  331.874467][T12086] loop0: detected capacity change from 0 to 1024
[  331.913069][T12053] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  332.043569][T12086] hfsplus: bad catalog entry type
[  332.089065][ T4263] hfsplus: b-tree write err: -5, ino 4
[  332.102150][ T4190] ocfs2: Unmounting device (7,4) on (node local)
[  332.327078][ T7295] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  332.361311][T12110] loop3: detected capacity change from 0 to 256
[  332.369202][T12108] program syz.0.3181 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  332.426944][T12110] exfat: Deprecated parameter 'utf8'
[  332.440403][T12110] exfat: Deprecated parameter 'namecase'
[  332.449495][T12110] exfat: Deprecated parameter 'utf8'
[  332.539556][T12110] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  332.682065][   T26] audit: type=1800 audit(1761017656.792:40): pid=12110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3171" name="file1" dev="loop3" ino=1048737 res=0 errno=0
[  332.709199][T12110] [syz.3.3171/12110] FS: loop3 File: /file1 would truncate fibmap result
[  332.742613][ T7295] usb 3-1: config 0 has an invalid interface number: 102 but max is 0
[  332.771323][ T7295] usb 3-1: config 0 has no interface number 0
[  332.777616][ T7295] usb 3-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5
[  332.807274][ T7295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.843479][ T7295] usb 3-1: config 0 descriptor??
[  333.053046][T12134] loop1: detected capacity change from 0 to 1024
[  333.147814][T12134] hfsplus: bad catalog entry type
[  333.349715][T12145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3188'.
[  333.522904][ T7295] asix 3-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  333.540799][ T7295] asix: probe of 3-1:0.102 failed with error -71
[  333.583821][ T7295] usb 3-1: USB disconnect, device number 20
[  333.763224][   T13] libceph: connect (1)[c::]:6789 error -101
[  333.795308][   T13] libceph: mon0 (1)[c::]:6789 connect error
[  333.869274][   T13] Bluetooth: hci4: command 0x0405 tx timeout
[  334.093460][   T13] libceph: connect (1)[c::]:6789 error -101
[  334.120222][   T13] libceph: mon0 (1)[c::]:6789 connect error
[  334.308748][T12157] loop1: detected capacity change from 0 to 32768
[  334.324551][T12178] loop2: detected capacity change from 0 to 256
[  334.367222][T12157] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.3194 (12157)
[  334.401514][T12178] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  334.435561][T12178] exFAT-fs (loop2): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5)
[  334.467136][T12157] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  334.494325][T12178] exFAT-fs (loop2): Filesystem has been set read-only
[  334.506190][T12157] BTRFS info (device loop1): using free space tree
[  334.517047][T12157] BTRFS info (device loop1): has skinny extents
[  334.554733][T12161] ceph: No mds server is up or the cluster is laggy
[  334.675834][   T13] libceph: connect (1)[c::]:6789 error -101
[  334.708023][   T13] libceph: mon0 (1)[c::]:6789 connect error
[  334.931211][T12157] BTRFS info (device loop1): enabling ssd optimizations
[  335.038563][T12214] loop2: detected capacity change from 0 to 1024
[  335.046725][T12169] loop3: detected capacity change from 0 to 32768
[  335.113832][T12169] XFS: attr2 mount option is deprecated.
[  335.232293][T12214] hfsplus: request for non-existent node 16777216 in B*Tree
[  335.305490][T12214] hfsplus: request for non-existent node 16777216 in B*Tree
[  335.373368][T12214] hfsplus: request for non-existent node 16777216 in B*Tree
[  335.428130][T12214] hfsplus: request for non-existent node 16777216 in B*Tree
[  335.450029][T12214] hfsplus: request for non-existent node 16777216 in B*Tree
[  335.473312][T12214] hfsplus: request for non-existent node 16777216 in B*Tree
[  335.543251][T12214] hfsplus: request for non-existent node 16777216 in B*Tree
[  335.572664][T12214] hfsplus: request for non-existent node 16777216 in B*Tree
[  335.796293][ T4416] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (4416)
[  335.809470][T12169] XFS (loop3): Mounting V5 Filesystem
[  335.907385][T12169] XFS (loop3): Ending clean mount
[  335.927682][T12169] XFS (loop3): Quotacheck needed: Please wait.
[  335.958503][   T26] audit: type=1800 audit(1761017660.072:41): pid=12214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3211" name="file1" dev="loop2" ino=20 res=0 errno=0
[  336.017809][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'.
[  336.106199][ T7295] libceph: connect (1)[c::]:6789 error -101
[  336.113517][ T7295] libceph: mon0 (1)[c::]:6789 connect error
[  336.126166][T12169] XFS (loop3): Quotacheck: Done.
[  336.400980][ T4194] XFS (loop3): Unmounting Filesystem
[  336.423332][ T7295] libceph: connect (1)[c::]:6789 error -101
[  336.447728][ T7295] libceph: mon0 (1)[c::]:6789 connect error
[  336.851616][T12249] ceph: No mds server is up or the cluster is laggy
[  337.451256][T12303] loop2: detected capacity change from 0 to 2048
[  337.611821][T12303] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none.
[  337.649666][T12303] ext4 filesystem being mounted at /657/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.718486][T12316] loop1: detected capacity change from 0 to 64
[  337.792876][T12316] hfs: request for non-existent node 1280 in B*Tree
[  337.801473][T12316] hfs: request for non-existent node 1280 in B*Tree
[  337.859360][T12303] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3246: bg 0: block 345: padding at end of block bitmap is not set
[  337.909087][ T5439] hfs: request for non-existent node 1280 in B*Tree
[  337.939900][ T5439] hfs: request for non-existent node 1280 in B*Tree
[  337.966257][T12303] EXT4-fs (loop2): Remounting filesystem read-only
[  338.369146][T12313] loop3: detected capacity change from 0 to 32768
[  338.478542][T12313] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  338.668571][ T4194] ocfs2: Unmounting device (7,3) on (node local)
[  338.930590][T12329] loop1: detected capacity change from 0 to 32768
[  339.079628][T12329] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  339.121585][T12329] (syz.1.3260,12329,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64
[  339.172032][ T4187] ocfs2: Unmounting device (7,1) on (node local)
[  339.243414][T12370] nbd: must specify at least one socket
[  339.742551][T12381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.745079][T12383] loop3: detected capacity change from 0 to 4096
[  340.010723][T12399] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  340.207460][T12407] loop0: detected capacity change from 0 to 16
[  340.322877][T12413] loop2: detected capacity change from 0 to 4096
[  340.339994][T12407] erofs: (device loop0): mounted with root inode @ nid 36.
[  340.384634][T12407] overlayfs: upper fs is r/o, try multi-lower layers mount
[  340.438540][T12413] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  340.470807][T12413] NILFS (loop2): invalid segment: Checksum error in segment payload
[  340.479236][T12413] NILFS (loop2): unable to fall back to spare super block
[  340.486627][T12413] NILFS (loop2): error -22 while searching super root
[  340.574325][   T13] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  340.588779][T12415] loop3: detected capacity change from 0 to 8192
[  340.698302][T12423] loop1: detected capacity change from 0 to 64
[  340.722911][T12415] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  340.734274][T12415] REISERFS (device loop3): using ordered data mode
[  340.781825][T12427] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  340.785609][T12423] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  340.789255][T12427] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  340.798693][T12415] reiserfs: using flush barriers
[  340.841672][T12415] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  340.845694][T12427] vhci_hcd vhci_hcd.0: Device attached
[  340.885445][T12415] REISERFS (device loop3): checking transaction log (loop3)
[  340.928692][T12415] REISERFS (device loop3): Using r5 hash to sort names
[  340.936326][T12415] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  340.957080][T12415] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  340.987163][   T13] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  341.005142][T12415] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  341.030223][   T13] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  341.043635][ T6871] vhci_hcd: vhci_device speed not set
[  341.058292][   T13] usb 5-1: config 0 interface 0 has no altsetting 0
[  341.072900][ T4245] usb 3-1: new low-speed USB device number 21 using dummy_hcd
[  341.079800][   T13] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  341.092291][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.116106][ T6871] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  341.125447][   T13] usb 5-1: config 0 descriptor??
[  341.408311][T12443] loop3: detected capacity change from 0 to 4096
[  341.434514][T12443] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  341.444170][ T4245] usb 3-1: config 0 has no interfaces?
[  341.449906][ T4245] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  341.460303][ T4245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.489651][ T4245] usb 3-1: config 0 descriptor??
[  341.606293][   T13] holtek 0003:1241:5015.0036: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0
[  341.651197][   T13] holtek 0003:1241:5015.0036: no inputs found
[  341.651887][T12445] loop0: detected capacity change from 0 to 1024
[  341.765380][T12445] hfsplus: bad catalog entry type
[  341.792084][T12429] vhci_hcd: connection closed
[  341.798618][ T4245] usb 3-1: USB disconnect, device number 21
[  341.819104][ T4288] vhci_hcd: stop threads
[  341.838694][  T154] hfsplus: b-tree write err: -5, ino 4
[  341.856020][ T4288] vhci_hcd: release socket
[  341.859539][ T6878] usb 5-1: USB disconnect, device number 22
[  341.872777][ T6871] vhci_hcd: vhci_device speed not set
[  341.899552][T12436] loop1: detected capacity change from 0 to 32768
[  341.916354][T12446] fido_id[12446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  341.933399][ T4288] vhci_hcd: disconnect device
[  341.971950][T12436] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  342.062800][T12436] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  342.109753][T12436] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  342.219076][T12436] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  342.273188][T12436] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error
[  342.273188][T12436]   inode = 12 2341
[  342.273188][T12436]   function = gfs2_dirent_search, file = fs/gfs2/dir.c, line = 821
[  342.296480][    C1] vkms_vblank_simulate: vblank timer overrun
[  342.324979][T12436] gfs2: fsid=syz:syz.s: about to withdraw this file system
[  342.333477][T12436] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount.
[  342.343589][T12436] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0
[  342.350252][T12436] gfs2: fsid=syz:syz.s: File system withdrawn
[  342.383741][T12436] CPU: 1 PID: 12436 Comm: syz.1.3307 Not tainted syzkaller #0
[  342.391398][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  342.402468][T12436] Call Trace:
[  342.405968][T12436]  <TASK>
[  342.408945][T12436]  dump_stack_lvl+0x168/0x230
[  342.413752][T12436]  ? kobject_uevent_env+0x371/0x890
[  342.419273][T12436]  ? show_regs_print_info+0x20/0x20
[  342.424517][T12436]  ? load_image+0x3b0/0x3b0
[  342.429261][T12436]  ? kobject_uevent_env+0x371/0x890
[  342.434980][T12436]  gfs2_withdraw+0x111b/0x1460
[  342.439824][T12436]  ? gfs2_lm+0x220/0x220
[  342.444249][T12436]  ? __lock_acquire+0x7c60/0x7c60
[  342.449422][T12436]  ? do_raw_spin_lock+0x11d/0x280
[  342.454494][T12436]  ? gfs2_consist_inode_i+0xc0/0xe0
[  342.460020][T12436]  gfs2_dirent_search+0x268/0x7e0
[  342.465104][T12436]  ? gfs2_dirent_search+0x7e0/0x7e0
[  342.470667][T12436]  ? gfs2_permission+0x3ed/0x4b0
[  342.475801][T12436]  ? gfs2_dir_search+0x220/0x220
[  342.480848][T12436]  ? gfs2_lookupi+0x5e0/0x5e0
[  342.485638][T12436]  ? gfs2_glock_nq+0xcb0/0x1550
[  342.490538][T12436]  gfs2_dir_search+0x49/0x220
[  342.492720][   T13] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  342.495355][T12436]  gfs2_lookupi+0x45c/0x5e0
[  342.495397][T12436]  ? gfs2_lookup_simple+0xf0/0xf0
[  342.513034][T12436]  ? gfs2_lookupi+0x3fe/0x5e0
[  342.517766][T12436]  ? __rwlock_init+0x140/0x140
[  342.522883][T12436]  __gfs2_lookup+0x8c/0x260
[  342.527638][T12436]  ? d_alloc_parallel+0x1203/0x12d0
[  342.532891][T12436]  ? gfs2_atomic_open+0x210/0x210
[  342.538036][T12436]  ? __init_waitqueue_head+0xa5/0x150
[  342.543667][T12436]  __lookup_slow+0x27d/0x3d0
[  342.548308][T12436]  ? lookup_one_len+0x2c0/0x2c0
[  342.553218][T12436]  ? gfs2_lookupi+0x5e0/0x5e0
[  342.558016][T12436]  ? preempt_count_add+0x8d/0x190
[  342.563104][T12436]  ? down_read+0x1aa/0x2e0
[  342.567749][T12436]  lookup_slow+0x53/0x70
[  342.572227][T12436]  walk_component+0x319/0x460
[  342.577069][T12436]  link_path_walk+0x662/0xd40
[  342.582138][T12436]  ? handle_lookup_down+0x130/0x130
[  342.587499][T12436]  path_lookupat+0x9d/0x440
[  342.592244][T12436]  filename_lookup+0x1e2/0x4f0
[  342.597379][T12436]  ? hashlen_string+0x110/0x110
[  342.602791][T12436]  ? strncpy_from_user+0x1fb/0x360
[  342.608400][T12436]  ? getname_flags+0x1fe/0x500
[  342.613328][T12436]  user_path_at_empty+0x40/0x190
[  342.618541][T12436]  vfs_statx+0x102/0x4d0
[  342.622931][T12436]  ? vfs_fstatat+0x40/0x40
[  342.627570][T12436]  __x64_sys_statx+0x17e/0x200
[  342.632668][T12436]  ? cp_statx+0x590/0x590
[  342.637371][T12436]  ? lock_chain_count+0x20/0x20
[  342.643023][T12436]  ? vtime_user_exit+0x2dc/0x400
[  342.648640][T12436]  ? lockdep_hardirqs_on+0x94/0x140
[  342.654425][T12436]  do_syscall_64+0x4c/0xa0
[  342.659109][T12436]  ? clear_bhb_loop+0x30/0x80
[  342.664254][T12436]  ? clear_bhb_loop+0x30/0x80
[  342.669446][T12436]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  342.675481][T12436] RIP: 0033:0x7f56d383cfc9
[  342.680180][T12436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  342.700612][T12436] RSP: 002b:00007f56d1aa4038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  342.709274][T12436] RAX: ffffffffffffffda RBX: 00007f56d3a93fa0 RCX: 00007f56d383cfc9
[  342.717850][T12436] RDX: 0000000000000100 RSI: 0000200000000580 RDI: ffffffffffffff9c
[  342.725967][T12436] RBP: 00007f56d38bff91 R08: 0000000000000000 R09: 0000000000000000
[  342.733964][T12436] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[  342.742418][T12436] R13: 00007f56d3a94038 R14: 00007f56d3a93fa0 R15: 00007ffec9072698
[  342.750533][T12436]  </TASK>
[  342.753615][    C1] vkms_vblank_simulate: vblank timer overrun
[  342.824951][   T13] usb 4-1: Using ep0 maxpacket: 8
[  342.858148][T12467] loop4: detected capacity change from 0 to 1024
[  342.981877][   T13] usb 4-1: config index 0 descriptor too short (expected 29970, got 18)
[  343.000594][   T13] usb 4-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  343.022974][T12467] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  343.065715][T12467] ext4 filesystem being mounted at /692/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.072624][   T13] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 168
[  343.121866][T12467] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.3319: corrupted xattr block 128
[  343.135286][   T13] usb 4-1: config 0 has no interface number 0
[  343.293023][ T7295] usb 3-1: new low-speed USB device number 22 using dummy_hcd
[  343.312889][   T13] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  343.337055][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.371344][   T13] usb 4-1: Product: syz
[  343.391613][   T13] usb 4-1: Manufacturer: syz
[  343.404480][   T13] usb 4-1: SerialNumber: syz
[  343.410715][T12483] loop0: detected capacity change from 0 to 1024
[  343.428230][   T13] usb 4-1: config 0 descriptor??
[  343.438700][T12487] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3324'.
[  343.450492][T12487] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes.
[  343.476180][T12489] loop1: detected capacity change from 0 to 256
[  343.523792][T12483] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  343.534346][T12489] exfat: Deprecated parameter 'utf8'
[  343.547691][T12489] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  343.687554][   T13] usb 4-1: USB disconnect, device number 22
[  343.732749][ T7295] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  343.762470][ T7295] usb 3-1: config 0 interface 0 has no altsetting 0
[  343.792247][ T7295] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00
[  343.822567][ T7295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.855743][ T7295] usb 3-1: config 0 descriptor??
[  343.892827][T12469] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  344.199084][T12514] netlink: 'syz.0.3340': attribute type 3 has an invalid length.
[  344.227174][T12514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3340'.
[  344.385737][ T7295] pantherlord 0003:0E8F:0003.0037: unexpected long global item
[  344.391642][T12523] loop0: detected capacity change from 0 to 1024
[  344.404119][ T7295] pantherlord 0003:0E8F:0003.0037: parse failed
[  344.422508][ T7295] pantherlord: probe of 0003:0E8F:0003.0037 failed with error -22
[  344.451265][T12501] loop1: detected capacity change from 0 to 32768
[  344.607015][ T7295] usb 3-1: USB disconnect, device number 22
[  344.612893][ T6871] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  344.815569][T12535] loop0: detected capacity change from 0 to 64
[  344.978915][T12540] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  344.992277][T12540] overlayfs: missing 'lowerdir'
[  344.998399][ T6871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.028492][ T6871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.047113][ T6871] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  345.057183][T12542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3353'.
[  345.075202][ T6871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.087497][ T6871] usb 4-1: config 0 descriptor??
[  345.576160][ T6871] wacom 0003:056A:0000.0038: unbalanced collection at end of report description
[  345.613366][ T6871] wacom 0003:056A:0000.0038: parse failed
[  345.632752][ T6871] wacom: probe of 0003:056A:0000.0038 failed with error -22
[  345.814908][ T7295] usb 4-1: USB disconnect, device number 23
[  345.940984][T12582] loop2: detected capacity change from 0 to 1024
[  346.098741][T12582] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  346.426031][T12609] loop2: detected capacity change from 0 to 512
[  346.529268][T12609] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  346.555042][T12616] loop4: detected capacity change from 0 to 256
[  346.559494][T12609] ext4 filesystem being mounted at /678/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.812733][ T7295] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  347.090310][T12638] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  347.240518][ T7295] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97
[  347.255645][ T7295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.304256][ T7295] usb 1-1: config 0 descriptor??
[  347.335524][T12623] loop3: detected capacity change from 0 to 32768
[  347.354512][ T7295] sisusb 1-1:0.0: Invalid USB2VGA device
[  347.360273][ T7295] sisusb: probe of 1-1:0.0 failed with error -22
[  347.492715][T12632] loop4: detected capacity change from 0 to 32768
[  347.535254][T12623] XFS (loop3): Mounting V5 Filesystem
[  347.556882][ T7295] usb 1-1: USB disconnect, device number 20
[  347.704806][T12623] XFS (loop3): Ending clean mount
[  347.741421][T12623] XFS (loop3): Quotacheck needed: Please wait.
[  347.812734][T12648] loop1: detected capacity change from 0 to 32768
[  347.902610][T12623] XFS (loop3): Quotacheck: Done.
[  347.937990][T12648] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  348.132853][ T4187] ocfs2: Unmounting device (7,1) on (node local)
[  348.217097][T12671] netlink: 209824 bytes leftover after parsing attributes in process `syz.0.3408'.
[  348.290756][ T4194] XFS (loop3): Unmounting Filesystem
[  348.542927][T12688] loop2: detected capacity change from 0 to 1024
[  348.572713][ T7295] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  348.631901][T12686] loop0: detected capacity change from 0 to 4096
[  348.688713][T12688] hfsplus: bad catalog entry type
[  348.796788][ T5439] hfsplus: b-tree write err: -5, ino 4
[  348.917076][ T7295] usb 5-1: too many configurations: 17, using maximum allowed: 8
[  349.222023][T12715] loop0: detected capacity change from 0 to 64
[  349.280609][T12720] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.3430'.
[  349.328096][ T7294] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  349.510096][ T4183] hfs: node 4:3 still has 1 user(s)!
[  349.688705][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'.
[  349.701113][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'.
[  349.730065][T12730] netlink: 'syz.0.3433': attribute type 14 has an invalid length.
[  349.738391][T12730] netlink: 'syz.0.3433': attribute type 13 has an invalid length.
[  349.902775][ T7295] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  349.922625][ T7294] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  349.932007][ T7294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.941728][ T7295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.961026][ T7295] usb 5-1: Product: syz
[  349.965607][ T7294] usb 2-1: Product: syz
[  349.969811][ T7294] usb 2-1: Manufacturer: syz
[  349.974874][ T7295] usb 5-1: Manufacturer: syz
[  349.979513][ T7295] usb 5-1: SerialNumber: syz
[  349.992467][ T7294] usb 2-1: SerialNumber: syz
[  350.010080][ T7295] usb 5-1: config 0 descriptor??
[  350.019668][ T7294] usb 2-1: config 0 descriptor??
[  350.074784][ T7295] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  350.086047][ T7294] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  350.107152][ T7295] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  350.146817][ T7295] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  350.164761][ T7295] usb 5-1: media controller created
[  350.171437][T12734] loop2: detected capacity change from 0 to 8192
[  350.216682][ T7295] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  350.236482][T12750] loop3: detected capacity change from 0 to 256
[  350.262991][ T4175]  loop2: p1 p2
[  350.266653][ T4175] loop2: partition table partially beyond EOD, truncated
[  350.289143][T12678] dvb-usb: bulk message failed: -22 (7/0)
[  350.314851][ T4175] loop2: p1 start 16777216 is beyond EOD, truncated
[  350.344645][ T4175] loop2: p2 size 515840 extends beyond EOD, truncated
[  350.390565][T12734]  loop2: p1 p2
[  350.411089][ T7295] DVB: Unable to find symbol mt352_attach()
[  350.417739][T12734] loop2: partition table partially beyond EOD, truncated
[  350.432938][T12734] loop2: p1 start 16777216 is beyond EOD, truncated
[  350.452973][T12734] loop2: p2 size 515840 extends beyond EOD, truncated
[  350.499986][ T7295] DVB: Unable to find symbol nxt6000_attach()
[  350.506919][ T7295] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  350.527050][ T7294] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input43
[  350.644333][ T7295] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44
[  350.680608][T12762] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  350.695927][ T7295] dvb-usb: schedule remote query interval to 1000 msecs.
[  350.722454][ T7295] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  350.746172][ T6871] usb 2-1: USB disconnect, device number 24
[  350.773480][ T7295] dvb-usb: bulk message failed: -22 (7/0)
[  350.779291][ T7295] dvb-usb: bulk message failed: -22 (7/0)
[  350.840013][ T7295] usb 5-1: USB disconnect, device number 23
[  350.949553][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  351.041706][ T7295] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  351.076689][ T4416] udevd[4416]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  351.191061][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3455'.
[  351.219255][T12780] block nbd3: Unsupported socket: shutdown callout must be supported.
[  351.339454][T12784] loop1: detected capacity change from 0 to 1024
[  351.450344][ T5439] hfsplus: b-tree write err: -5, ino 4
[  351.572508][ T7295] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  351.821802][T12803] loop2: detected capacity change from 0 to 1024
[  351.852919][ T6871] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  351.862653][ T7295] usb 5-1: Using ep0 maxpacket: 8
[  351.885694][T12806] loop3: detected capacity change from 0 to 512
[  351.921970][T12808] loop0: detected capacity change from 0 to 8
[  351.930805][T12803] hfsplus: bad catalog entry type
[  351.967516][T12806] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  352.002750][ T7295] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  352.011379][T12806] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  352.066122][ T1244] hfsplus: b-tree write err: -5, ino 4
[  352.161889][T12812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3470'.
[  352.192827][T12812] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3470'.
[  352.210524][T12812] netlink: 'syz.0.3470': attribute type 6 has an invalid length.
[  352.232862][ T7295] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  352.247895][T12806] FAT-fs (loop3): FAT read failed (blocknr 128)
[  352.252663][T12812] netlink: 'syz.0.3470': attribute type 5 has an invalid length.
[  352.262802][ T6871] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  352.271549][ T7295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.280469][T12812] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3470'.
[  352.285012][ T6871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.290134][ T7295] usb 5-1: Product: syz
[  352.303030][ T7295] usb 5-1: Manufacturer: syz
[  352.322519][ T7295] usb 5-1: SerialNumber: syz
[  352.330755][ T7295] usb 5-1: config 0 descriptor??
[  352.336815][ T6871] usb 2-1: config 0 descriptor??
[  352.395199][ T6871] cp210x 2-1:0.0: cp210x converter detected
[  352.434998][ T7295] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  352.462618][ T7295] usb 5-1: setting power ON
[  352.516360][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3474'.
[  352.526128][ T7295] dvb-usb: bulk message failed: -22 (2/0)
[  352.556351][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3474'.
[  352.567223][T12824] loop2: detected capacity change from 0 to 64
[  352.574675][T12822] netlink: 'syz.3.3474': attribute type 7 has an invalid length.
[  352.588461][ T7295] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  352.633016][ T7295] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  352.643641][ T7295] usb 5-1: media controller created
[  352.649846][T12781] dvb-usb: bulk message failed: -22 (3/0)
[  352.666617][T12781] dvb-usb: bulk message failed: -22 (3/0)
[  352.717713][ T7295] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  352.813769][ T7295] usb 5-1: selecting invalid altsetting 6
[  352.848258][ T7295] usb 5-1: digital interface selection failed (-22)
[  352.879549][ T7295] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  352.953174][ T7295] usb 5-1: setting power OFF
[  352.958991][ T7295] dvb-usb: bulk message failed: -22 (2/0)
[  352.967548][ T7295] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  352.982827][ T7295] (NULL device *): no alternate interface
[  353.039647][ T7295] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  353.055582][ T6871] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[  353.055643][ T6871] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  353.058676][ T6871] usb 2-1: cp210x converter now attached to ttyUSB0
[  353.133947][ T6871] usb 2-1: USB disconnect, device number 25
[  353.162732][ T7295] usb 5-1: USB disconnect, device number 24
[  353.176624][ T6871] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  353.208988][ T6871] cp210x 2-1:0.0: device disconnected
[  353.388801][T12844] loop3: detected capacity change from 0 to 4096
[  353.480523][T12844] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  353.622963][T12844] ntfs3: loop3: MFT: r=b, expect seq=0 instead of b!
[  353.773858][T12858] netlink: 'syz.0.3493': attribute type 29 has an invalid length.
[  353.782083][T12858] netlink: 'syz.0.3493': attribute type 29 has an invalid length.
[  353.874559][T12863] netlink: 'syz.0.3493': attribute type 29 has an invalid length.
[  353.891387][T12854] loop4: detected capacity change from 0 to 4096
[  353.914293][T12867] netlink: 'syz.2.3496': attribute type 1 has an invalid length.
[  354.030546][T12854] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  354.117017][T12854] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  354.169096][T12877] loop1: detected capacity change from 0 to 128
[  354.170915][T12854] ntfs3: loop4: Failed to load $Extend.
[  354.278083][T12877] VFS: Found a Xenix FS (block size = 512) on device loop1
[  354.312629][   T13] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  354.437724][ T4187] sysv_free_block: trying to free block not in datazone
[  354.462833][ T4231] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  354.491098][ T4187] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  354.750873][T12899] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3512'.
[  354.802950][ T4231] usb 4-1: not running at top speed; connect to a high speed hub
[  354.838928][T12901] tipc: Started in network mode
[  354.847729][T12901] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711
[  354.868026][T12901] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  354.903232][ T4231] usb 4-1: config 0 has an invalid interface number: 19 but max is 0
[  354.922756][ T4231] usb 4-1: config 0 has no interface number 0
[  354.937483][ T4231] usb 4-1: config 0 interface 19 has no altsetting 0
[  354.961926][   T13] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  354.970078][T12906] loop1: detected capacity change from 0 to 24
[  354.977612][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.986759][   T13] usb 1-1: Product: syz
[  354.990996][   T13] usb 1-1: Manufacturer: syz
[  354.996459][   T13] usb 1-1: SerialNumber: syz
[  355.003509][   T13] usb 1-1: config 0 descriptor??
[  355.078246][   T13] ch341 1-1:0.0: ch341-uart converter detected
[  355.112798][ T4231] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a0, bcdDevice=bf.dd
[  355.148371][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.168447][ T4231] usb 4-1: Product: syz
[  355.176866][T12890] loop4: detected capacity change from 0 to 32768
[  355.199522][ T4231] usb 4-1: Manufacturer: syz
[  355.215350][ T4231] usb 4-1: SerialNumber: syz
[  355.238043][ T4231] usb 4-1: config 0 descriptor??
[  355.249280][T12890] (syz.4.3508,12890,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  355.331003][T12890] (syz.4.3508,12890,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  355.431288][T12890] JBD2: Ignoring recovery information on journal
[  355.450838][T12917] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3521'.
[  355.480497][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'.
[  355.539929][T12890] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  355.597137][ T4231] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware
[  355.710065][ T4231] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  355.733640][ T4231] dib0700: firmware download failed at 7 with -22
[  355.753139][   T13] usb 1-1: failed to send control message: -71
[  355.760127][   T13] ch341-uart: probe of ttyUSB0 failed with error -71
[  355.767784][ T4231] usb 4-1: USB disconnect, device number 24
[  355.806695][T12927] loop1: detected capacity change from 0 to 8192
[  355.833671][   T13] usb 1-1: USB disconnect, device number 21
[  355.864449][T12927] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  355.882753][T12927] REISERFS (device loop1): using ordered data mode
[  355.889641][T12927] reiserfs: using flush barriers
[  355.894093][   T13] ch341 1-1:0.0: device disconnected
[  355.903021][T12927] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  355.920488][T12927] REISERFS (device loop1): checking transaction log (loop1)
[  355.948588][ T4190] ocfs2: Unmounting device (7,4) on (node local)
[  356.108550][T12927] REISERFS (device loop1): Using tea hash to sort names
[  356.133748][T12927] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  356.443230][T12925] loop2: detected capacity change from 0 to 32768
[  356.529572][   T26] audit: type=1326 audit(1761017680.642:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.4.3531" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a915edfc9 code=0x0
[  356.631558][T12925] XFS (loop2): Mounting V5 Filesystem
[  356.796503][T12957] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  356.836876][T12925] XFS (loop2): Ending clean mount
[  356.866748][T12925] XFS (loop2): Quotacheck needed: Please wait.
[  356.964447][T12925] XFS (loop2): Quotacheck: Done.
[  357.022878][T12942] loop0: detected capacity change from 0 to 32768
[  357.113003][T12959] loop1: detected capacity change from 0 to 8192
[  357.149402][T12942] XFS (loop0): Mounting V5 Filesystem
[  357.161333][ T4189] XFS (loop2): Unmounting Filesystem
[  357.229783][T12959] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  357.266327][T12959] REISERFS (device loop1): using ordered data mode
[  357.288362][T12942] XFS (loop0): Ending clean mount
[  357.332977][T12959] reiserfs: using flush barriers
[  357.346339][ T4183] XFS (loop0): Unmounting Filesystem
[  357.351890][T12959] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  357.539325][T12959] REISERFS (device loop1): checking transaction log (loop1)
[  357.659262][T12959] REISERFS (device loop1): Using r5 hash to sort names
[  357.687921][T12959] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  357.818050][T12985] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  357.934406][ T4288] wlan1: Trigger new scan to find an IBSS to join
[  358.132253][T12997] loop3: detected capacity change from 0 to 64
[  358.163334][T12999] loop1: detected capacity change from 0 to 64
[  358.320480][    C1] vkms_vblank_simulate: vblank timer overrun
[  358.355715][T13003] loop4: detected capacity change from 0 to 1024
[  358.415512][T13003] hfsplus: bad catalog file entry
[  358.421792][T13003] hfsplus: failed to load root directory
[  358.645025][T13017] loop0: detected capacity change from 0 to 256
[  358.724793][T13020] loop1: detected capacity change from 0 to 512
[  358.790828][T13020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  358.825911][T13017] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  358.867296][T13017] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  358.884531][T13031] netlink: 'syz.4.3564': attribute type 2 has an invalid length.
[  358.910833][T13020] EXT4-fs (loop1): 1 truncate cleaned up
[  358.959015][T13020] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback.
[  359.022065][T13017] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  359.361975][T13042] loop4: detected capacity change from 0 to 1024
[  359.390417][T13045] tipc: Started in network mode
[  359.442291][T13045] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  359.486625][T13045] tipc: Enabled bearer <eth:geneve1>, priority 12
[  359.542992][ T4288] hfsplus: b-tree write err: -5, ino 4
[  359.682095][T13063] loop3: detected capacity change from 0 to 512
[  359.856102][T13063] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  359.908965][T13063] EXT4-fs (loop3): 1 truncate cleaned up
[  359.920931][T13063] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[  359.968978][T13085] tipc: Started in network mode
[  359.974702][T13085] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  359.983080][T13085] tipc: Enabled bearer <eth:geneve1>, priority 12
[  360.121139][T13089] loop2: detected capacity change from 0 to 128
[  360.245712][T13089] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000006,,errors=continue. Quota mode: none.
[  360.272916][ T4231] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  360.278283][T13095] loop3: detected capacity change from 0 to 512
[  360.321548][T13089] ext4 filesystem being mounted at /738/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.360580][T13095] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  360.410241][T13095] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  360.483627][T13095] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.3593: attempt to clear invalid blocks 2 len 1
[  360.576865][T13095] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  360.613179][ T6878] tipc: Node number set to 15444650
[  360.642620][T13095] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3593: invalid indirect mapped block 1819239214 (level 0)
[  360.673107][ T4231] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  360.682349][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.691759][T13095] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3593: invalid indirect mapped block 1819239214 (level 1)
[  360.730576][ T4231] usb 1-1: config 0 descriptor??
[  360.784802][ T4231] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  360.796589][T13095] EXT4-fs (loop3): 1 truncate cleaned up
[  360.806128][T13109] loop4: detected capacity change from 0 to 256
[  360.813983][T13095] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback.
[  360.925242][T13109] FAT-fs (loop4): Directory bread(block 64) failed
[  360.968530][T13109] FAT-fs (loop4): Directory bread(block 65) failed
[  360.978494][ T7294] tipc: Node number set to 15444650
[  360.994806][T13095] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work
[  361.010305][T13109] FAT-fs (loop4): Directory bread(block 66) failed
[  361.012743][ T4231] gp8psk: usb in 128 operation failed.
[  361.027708][T13109] FAT-fs (loop4): Directory bread(block 67) failed
[  361.041784][T13109] FAT-fs (loop4): Directory bread(block 68) failed
[  361.058802][T13109] FAT-fs (loop4): Directory bread(block 69) failed
[  361.089267][T13109] FAT-fs (loop4): Directory bread(block 70) failed
[  361.128431][T13109] FAT-fs (loop4): Directory bread(block 71) failed
[  361.135986][T13109] FAT-fs (loop4): Directory bread(block 72) failed
[  361.153102][T13109] FAT-fs (loop4): Directory bread(block 73) failed
[  361.199587][T13114] loop2: detected capacity change from 0 to 1024
[  361.297428][ T4231] gp8psk: usb in 137 operation failed.
[  361.304970][ T4231] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  361.356964][T13114] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  361.388960][T13117] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3602'.
[  361.402846][ T4231] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  361.480234][ T4231] usb 1-1: USB disconnect, device number 22
[  361.507674][T13114] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring
[  361.577404][T13114] EXT4-fs (loop2): re-mounted. Opts: journal_async_commit,journal_ioprio=0x0000000000000002,stripe=0x000000000000009d,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback.
[  361.636551][T13128] loop4: detected capacity change from 0 to 2048
[  361.680849][T13128] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  361.755311][T13128] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback.
[  361.797642][T13131] loop3: detected capacity change from 0 to 4096
[  361.839013][T13131] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  361.940029][T13128] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 5: comm syz.4.3608: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=56 fake=0
[  362.062538][T13128] EXT4-fs (loop4): Remounting filesystem read-only
[  362.354637][T13144] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3615'.
[  362.404202][T13144] device bond_slave_0 entered promiscuous mode
[  362.411708][T13144] device bond_slave_1 entered promiscuous mode
[  362.888950][T13158] loop1: detected capacity change from 0 to 512
[  362.895607][ T4288] wlan1: Trigger new scan to find an IBSS to join
[  362.916568][T13151] loop3: detected capacity change from 0 to 32768
[  362.980647][T13151] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  362.989007][T13151] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  363.004774][T13151] gfs2: fsid=syz:syz.s: fatal: invalid metadata block
[  363.004774][T13151]   bh = 34 (type: exp=5, found=4)
[  363.004774][T13151]   function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493
[  363.027240][T13151] gfs2: fsid=syz:syz.s: about to withdraw this file system
[  363.035016][T13151] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount.
[  363.044341][T13151] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0
[  363.052770][T13151] gfs2: fsid=syz:syz.s: File system withdrawn
[  363.058923][T13151] CPU: 1 PID: 13151 Comm: syz.3.3619 Not tainted syzkaller #0
[  363.066533][T13151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  363.076714][T13151] Call Trace:
[  363.080023][T13151]  <TASK>
[  363.082985][T13151]  dump_stack_lvl+0x168/0x230
[  363.087703][T13151]  ? kobject_uevent_env+0x371/0x890
[  363.093077][T13151]  ? show_regs_print_info+0x20/0x20
[  363.098326][T13151]  ? load_image+0x3b0/0x3b0
[  363.102872][T13151]  ? kobject_uevent_env+0x371/0x890
[  363.108133][T13151]  gfs2_withdraw+0x111b/0x1460
[  363.112969][T13151]  ? gfs2_lm+0x220/0x220
[  363.117255][T13151]  ? gfs2_meta_read+0x7d4/0xa50
[  363.122149][T13151]  ? gfs2_meta_read+0x7d4/0xa50
[  363.127042][T13151]  ? gfs2_meta_new+0x160/0x160
[  363.132113][T13151]  gfs2_metatype_check_ii+0x74/0x90
[  363.137463][T13151]  gfs2_meta_buffer+0x262/0x310
[  363.142452][T13151]  __fillup_metapath+0x14d/0x340
[  363.147436][T13151]  __gfs2_iomap_get+0x703/0x13e0
[  363.152478][T13151]  ? gfs2_alloc_extent+0x4f0/0x4f0
[  363.157947][T13151]  ? rcu_is_watching+0x11/0xa0
[  363.162752][T13151]  ? trace_gfs2_bmap+0x8a/0x1f0
[  363.167653][T13151]  gfs2_block_map+0x229/0x670
[  363.172387][T13151]  ? gfs2_iomap_end+0x6b0/0x6b0
[  363.177368][T13151]  ? mark_lock+0x94/0x320
[  363.182167][T13151]  ? verify_lock_unused+0x140/0x140
[  363.187620][T13151]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  363.194246][T13151]  ? lockdep_hardirqs_on+0x94/0x140
[  363.199497][T13151]  gfs2_write_alloc_required+0x362/0x610
[  363.205177][T13151]  ? __rwlock_init+0x140/0x140
[  363.210095][T13151]  ? gfs2_map_journal_extents+0xaa0/0xaa0
[  363.215978][T13151]  ? _raw_spin_unlock+0x24/0x40
[  363.221071][T13151]  ? gfs2_glock_nq+0xcb0/0x1550
[  363.225983][T13151]  gfs2_jdesc_check+0x1c3/0x290
[  363.230890][T13151]  check_journal_clean+0x151/0x300
[  363.236073][T13151]  ? gfs2_trans_remove_revoke+0x370/0x370
[  363.241841][T13151]  ? check_journal_clean+0x10d/0x300
[  363.247178][T13151]  ? __rwlock_init+0x140/0x140
[  363.252208][T13151]  ? do_raw_spin_unlock+0x11d/0x230
[  363.257469][T13151]  ? _raw_spin_unlock+0x24/0x40
[  363.262362][T13151]  ? gfs2_jdesc_find+0xa7/0xc0
[  363.267168][T13151]  init_journal+0x179c/0x2220
[  363.271910][T13151]  ? end_bio_io_page+0x100/0x100
[  363.276884][T13151]  ? vsnprintf+0x1905/0x1a00
[  363.281623][T13151]  ? snprintf+0xd7/0x120
[  363.286068][T13151]  ? init_journal+0x710/0x2220
[  363.290879][T13151]  ? vscnprintf+0x80/0x80
[  363.295446][T13151]  ? gfs2_glock_nq_num+0x17a/0x1b0
[  363.300621][T13151]  init_inodes+0xdb/0x320
[  363.305058][T13151]  gfs2_fill_super+0x1701/0x1f50
[  363.310186][T13151]  ? gfs2_reconfigure+0xcd0/0xcd0
[  363.315624][T13151]  ? gfs2_glock_nq_num+0x82/0x1b0
[  363.320694][T13151]  ? preempt_count_add+0x8d/0x190
[  363.322498][   T13] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  363.325769][T13151]  ? sb_set_blocksize+0xa5/0xe0
[  363.325859][T13151]  get_tree_bdev+0x3f1/0x610
[  363.325888][T13151]  ? gfs2_reconfigure+0xcd0/0xcd0
[  363.325915][T13151]  gfs2_get_tree+0x4d/0x1e0
[  363.325950][T13151]  vfs_get_tree+0x88/0x270
[  363.325976][T13151]  do_new_mount+0x24a/0xa40
[  363.326009][T13151]  __se_sys_mount+0x2d6/0x3c0
[  363.326040][T13151]  ? __x64_sys_mount+0xc0/0xc0
[  363.326068][T13151]  ? lockdep_hardirqs_on+0x94/0x140
[  363.326092][T13151]  ? __x64_sys_mount+0x1c/0xc0
[  363.326118][T13151]  do_syscall_64+0x4c/0xa0
[  363.326138][T13151]  ? clear_bhb_loop+0x30/0x80
[  363.326160][T13151]  ? clear_bhb_loop+0x30/0x80
[  363.326184][T13151]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  363.326207][T13151] RIP: 0033:0x7f7198d1876a
[  363.326237][T13151] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.326257][T13151] RSP: 002b:00007f7196f7de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  363.326281][T13151] RAX: ffffffffffffffda RBX: 00007f7196f7def0 RCX: 00007f7198d1876a
[  363.326296][T13151] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007f7196f7deb0
[  363.326311][T13151] RBP: 000020000001f680 R08: 00007f7196f7def0 R09: 0000000000000084
[  363.326325][T13151] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0
[  363.326340][T13151] R13: 00007f7196f7deb0 R14: 000000000001f707 R15: 00002000000000c0
[  363.326372][T13151]  </TASK>
[  363.326482][    C1] vkms_vblank_simulate: vblank timer overrun
[  363.485596][    C1] vkms_vblank_simulate: vblank timer overrun
[  363.493246][T13151] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount.
[  363.559783][T13137] loop2: detected capacity change from 0 to 32768
[  363.646486][T13155] loop0: detected capacity change from 0 to 32768
[  363.662845][   T13] usb 5-1: Using ep0 maxpacket: 8
[  363.695019][T13137] XFS (loop2): Mounting V5 Filesystem
[  363.739209][T13155] (syz.0.3620,13155,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  363.775768][T13155] (syz.0.3620,13155,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  363.792858][   T13] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  363.805344][   T13] usb 5-1: config 179 has no interface number 0
[  363.827990][   T13] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  363.873241][T13173] mkiss: ax0: crc mode is auto.
[  363.876446][T13155] JBD2: Ignoring recovery information on journal
[  363.914993][T13155] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  363.979059][ T5439] wlan1: Creating new IBSS network, BSSID 12:c6:af:6c:95:ff
[  363.988587][   T13] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  364.049901][   T13] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  364.067806][   T13] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  364.087418][   T13] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  364.105432][   T13] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  364.115456][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.131871][T13137] XFS (loop2): Ending clean mount
[  364.152816][T13160] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  364.191752][ T4183] ocfs2: Unmounting device (7,0) on (node local)
[  364.248912][ T4189] XFS (loop2): Unmounting Filesystem
[  364.461247][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3631'.
[  364.628684][T13188] loop1: detected capacity change from 0 to 8
[  364.701194][T13188] SQUASHFS error: zlib decompression failed, data probably corrupt
[  364.723514][T13188] SQUASHFS error: Failed to read block 0x9b: -5
[  364.731332][T13188] SQUASHFS error: Unable to read metadata cache entry [99]
[  364.757276][T13188] SQUASHFS error: Unable to read inode 0x127
[  364.805836][ T4231] usb 5-1: USB disconnect, device number 25
[  364.812544][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  364.822028][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  364.832092][    C0] ==================================================================
[  364.840213][    C0] BUG: KASAN: use-after-free in register_lock_class+0x7e9/0x880
[  364.847890][    C0] Read of size 1 at addr ffff88807630a091 by task syz.0.3636/13195
[  364.855823][    C0] 
[  364.858174][    C0] CPU: 0 PID: 13195 Comm: syz.0.3636 Not tainted syzkaller #0
[  364.865673][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  364.875850][    C0] Call Trace:
[  364.879190][    C0]  <IRQ>
[  364.882064][    C0]  dump_stack_lvl+0x168/0x230
[  364.886795][    C0]  ? show_regs_print_info+0x20/0x20
[  364.892034][    C0]  ? load_image+0x3b0/0x3b0
[  364.896559][    C0]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  364.902151][    C0]  print_address_description+0x60/0x2d0
[  364.908413][    C0]  ? register_lock_class+0x7e9/0x880
[  364.913931][    C0]  kasan_report+0xdf/0x130
[  364.918563][    C0]  ? register_lock_class+0x7e9/0x880
[  364.923882][    C0]  register_lock_class+0x7e9/0x880
[  364.929155][    C0]  ? is_dynamic_key+0x1f0/0x1f0
[  364.934311][    C0]  ? __down_trylock_console_sem+0x184/0x1e0
[  364.940385][    C0]  ? vprintk_emit+0xa7/0x150
[  364.945170][    C0]  __lock_acquire+0x160/0x7c60
[  364.950183][    C0]  ? mark_lock+0x94/0x320
[  364.954671][    C0]  ? __lock_acquire+0x13ad/0x7c60
[  364.959973][    C0]  ? snprintf+0xd7/0x120
[  364.964376][    C0]  ? mark_lock+0x94/0x320
[  364.968763][    C0]  ? __lock_acquire+0x13ad/0x7c60
[  364.973806][    C0]  ? verify_lock_unused+0x140/0x140
[  364.979071][    C0]  ? _dev_info+0x150/0x150
[  364.983519][    C0]  lock_acquire+0x197/0x3f0
[  364.988177][    C0]  ? __wake_up+0xed/0x180
[  364.992630][    C0]  ? read_lock_is_recursive+0x10/0x10
[  364.998063][    C0]  _raw_spin_lock_irqsave+0xa4/0xf0
[  365.003514][    C0]  ? __wake_up+0xed/0x180
[  365.007995][    C0]  ? _raw_spin_lock+0x40/0x40
[  365.012819][    C0]  ? kcov_remote_stop+0x3c9/0x4c0
[  365.018177][    C0]  __wake_up+0xed/0x180
[  365.022595][    C0]  ? remove_wait_queue+0x120/0x120
[  365.028195][    C0]  ? _raw_spin_unlock+0x24/0x40
[  365.033171][    C0]  __usb_hcd_giveback_urb+0x396/0x520
[  365.039069][    C0]  dummy_timer+0x827/0x2e10
[  365.047785][    C0]  ? verify_lock_unused+0x140/0x140
[  365.053047][    C0]  ? dummy_free_streams+0x530/0x530
[  365.058979][    C0]  ? dummy_free_streams+0x530/0x530
[  365.064499][    C0]  call_timer_fn+0x16c/0x530
[  365.069163][    C0]  ? dummy_free_streams+0x530/0x530
[  365.074819][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  365.080968][    C0]  ? __run_timers+0x7c0/0x7c0
[  365.093515][    C0]  ? rcu_is_watching+0x11/0xa0
[  365.098544][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  365.104416][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  365.109931][    C0]  ? dummy_free_streams+0x530/0x530
[  365.115739][    C0]  __run_timers+0x525/0x7c0
[  365.121337][    C0]  ? detach_timer+0x2b0/0x2b0
[  365.126054][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  365.132209][    C0]  ? sched_clock_cpu+0x15/0x3c0
[  365.137242][    C0]  ? ktime_get_real_ts64+0x420/0x420
[  365.143265][    C0]  run_timer_softirq+0x63/0xf0
[  365.148085][    C0]  handle_softirqs+0x328/0x820
[  365.153427][    C0]  ? __irq_exit_rcu+0x12f/0x220
[  365.158679][    C0]  ? do_softirq+0x200/0x200
[  365.163891][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  365.169339][    C0]  __irq_exit_rcu+0x12f/0x220
[  365.174612][    C0]  ? irq_exit_rcu+0x20/0x20
[  365.179161][    C0]  irq_exit_rcu+0x5/0x20
[  365.183521][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  365.189401][    C0]  </IRQ>
[  365.193192][    C0]  <TASK>
[  365.196585][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  365.203122][    C0] RIP: 0010:lock_acquire+0x1f2/0x3f0
[  365.209187][    C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b
[  365.231648][    C0] RSP: 0018:ffffc90002fdf620 EFLAGS: 00000206
[  365.237899][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ae718f3975dad400
[  365.245885][    C0] RDX: 0000000000000000 RSI: ffffffff8a0b2b40 RDI: ffffffff8a59a880
[  365.254022][    C0] RBP: ffffc90002fdf740 R08: dffffc0000000000 R09: fffffbfff1ff7a19
[  365.262061][    C0] R10: fffffbfff1ff7a19 R11: 1ffffffff1ff7a18 R12: ffffffff8c11c720
[  365.270412][    C0] R13: 1ffff920005fbed0 R14: 0000000000000246 R15: dffffc0000000000
[  365.278545][    C0]  ? read_lock_is_recursive+0x10/0x10
[  365.283970][    C0]  rcu_lock_acquire+0x20/0x30
[  365.288752][    C0]  ? __page_memcg+0x140/0x140
[  365.293428][    C0]  lock_page_memcg+0xa9/0x410
[  365.298529][    C0]  ? mem_cgroup_get_oom_group+0x350/0x350
[  365.304277][    C0]  ? rcu_lock_acquire+0x30/0x30
[  365.309275][    C0]  ? __lock_acquire+0x7c60/0x7c60
[  365.314491][    C0]  ? workingset_activation+0x606/0x760
[  365.320299][    C0]  page_remove_rmap+0x2a/0x10f0
[  365.325169][    C0]  ? __tlb_remove_page_size+0x19b/0x3f0
[  365.330818][    C0]  ? vm_normal_page+0x95/0x1e0
[  365.335746][    C0]  unmap_page_range+0xfbc/0x2520
[  365.340891][    C0]  ? uprobe_munmap+0x165/0x3f0
[  365.345698][    C0]  unmap_vmas+0x11b/0x230
[  365.350036][    C0]  ? uprobe_clear_state+0x4f/0x460
[  365.355163][    C0]  ? unmap_page_range+0x2520/0x2520
[  365.360363][    C0]  ? __mutex_lock_common+0x431/0x2390
[  365.365742][    C0]  ? memset+0x1e/0x40
[  365.369876][    C0]  exit_mmap+0x38f/0x5f0
[  365.374139][    C0]  ? vm_brk+0x20/0x20
[  365.378137][    C0]  ? uprobe_clear_state+0x2f6/0x460
[  365.383336][    C0]  ? mm_update_next_owner+0x5ce/0x640
[  365.388760][    C0]  __mmput+0x115/0x3b0
[  365.392881][    C0]  exit_mm+0x567/0x6c0
[  365.396948][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  365.402321][    C0]  ? do_exit+0x20a0/0x20a0
[  365.406758][    C0]  ? taskstats_exit+0x439/0xab0
[  365.411839][    C0]  ? sync_mm_rss+0x211/0x350
[  365.416604][    C0]  do_exit+0x5a1/0x20a0
[  365.420787][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  365.426876][    C0]  ? put_task_struct+0x80/0x80
[  365.431680][    C0]  ? lock_chain_count+0x20/0x20
[  365.436743][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  365.442096][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  365.447834][    C0]  do_group_exit+0x12e/0x300
[  365.452794][    C0]  __x64_sys_exit_group+0x3b/0x40
[  365.458200][    C0]  do_syscall_64+0x4c/0xa0
[  365.462728][    C0]  ? clear_bhb_loop+0x30/0x80
[  365.467410][    C0]  ? clear_bhb_loop+0x30/0x80
[  365.472242][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  365.478142][    C0] RIP: 0033:0x7f6e41024fc9
[  365.482565][    C0] Code: Unable to access opcode bytes at RIP 0x7f6e41024f9f.
[  365.490297][    C0] RSP: 002b:00007ffdc1f6b158 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  365.500046][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6e41024fc9
[  365.508711][    C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  365.517375][    C0] RBP: 00007ffdc1f6b1bc R08: 00000003c1f6b24f R09: 00000000000927c0
[  365.525569][    C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000321
[  365.533768][    C0] R13: 00000000000927c0 R14: 000000000005907b R15: 00007ffdc1f6b210
[  365.542086][    C0]  </TASK>
[  365.545197][    C0] 
[  365.547515][    C0] Allocated by task 13:
[  365.551660][    C0]  __kasan_kmalloc+0xb5/0xf0
[  365.556259][    C0]  xpad_probe+0x3f6/0x1b20
[  365.560694][    C0]  usb_probe_interface+0x5a0/0xaf0
[  365.565819][    C0]  really_probe+0x284/0xc80
[  365.570428][    C0]  __driver_probe_device+0x18c/0x330
[  365.575728][    C0]  driver_probe_device+0x4f/0x420
[  365.580762][    C0]  __device_attach_driver+0x2b0/0x500
[  365.586129][    C0]  bus_for_each_drv+0x175/0x200
[  365.591103][    C0]  __device_attach+0x29b/0x460
[  365.595882][    C0]  bus_probe_device+0xbc/0x1e0
[  365.600778][    C0]  device_add+0xa00/0xfb0
[  365.605220][    C0]  usb_set_configuration+0x1991/0x1fd0
[  365.611375][    C0]  usb_generic_driver_probe+0x89/0x150
[  365.617048][    C0]  usb_probe_device+0x139/0x270
[  365.622056][    C0]  really_probe+0x284/0xc80
[  365.626578][    C0]  __driver_probe_device+0x18c/0x330
[  365.631881][    C0]  driver_probe_device+0x4f/0x420
[  365.636917][    C0]  __device_attach_driver+0x2b0/0x500
[  365.642467][    C0]  bus_for_each_drv+0x175/0x200
[  365.647425][    C0]  __device_attach+0x29b/0x460
[  365.652317][    C0]  bus_probe_device+0xbc/0x1e0
[  365.657082][    C0]  device_add+0xa00/0xfb0
[  365.661410][    C0]  usb_new_device+0xd53/0x1640
[  365.666176][    C0]  hub_event+0x2dd9/0x5560
[  365.670751][    C0]  process_one_work+0x863/0x1000
[  365.675812][    C0]  worker_thread+0xaa8/0x12a0
[  365.680518][    C0]  kthread+0x436/0x520
[  365.684798][    C0]  ret_from_fork+0x1f/0x30
[  365.689244][    C0] 
[  365.691584][    C0] Freed by task 4231:
[  365.695568][    C0]  kasan_set_track+0x4b/0x70
[  365.700578][    C0]  kasan_set_free_info+0x1f/0x40
[  365.705641][    C0]  ____kasan_slab_free+0xd5/0x110
[  365.710677][    C0]  slab_free_freelist_hook+0xea/0x170
[  365.716180][    C0]  kfree+0xef/0x2a0
[  365.720006][    C0]  xpad_disconnect+0x34c/0x470
[  365.724787][    C0]  usb_unbind_interface+0x1ee/0x860
[  365.730164][    C0]  device_release_driver_internal+0x4b4/0x750
[  365.736338][    C0]  bus_remove_device+0x2e2/0x400
[  365.741286][    C0]  device_del+0x628/0xa70
[  365.745621][    C0]  usb_disable_device+0x3e2/0x890
[  365.750649][    C0]  usb_disconnect+0x348/0x8a0
[  365.755323][    C0]  hub_event+0x1e9f/0x5560
[  365.759736][    C0]  process_one_work+0x863/0x1000
[  365.764673][    C0]  worker_thread+0xaa8/0x12a0
[  365.769364][    C0]  kthread+0x436/0x520
[  365.773733][    C0]  ret_from_fork+0x1f/0x30
[  365.778347][    C0] 
[  365.780691][    C0] Last potentially related work creation:
[  365.786797][    C0]  kasan_save_stack+0x35/0x60
[  365.791577][    C0]  kasan_record_aux_stack+0xb8/0x100
[  365.796951][    C0]  call_rcu+0x182/0x930
[  365.801119][    C0]  taprio_destroy+0x2b0/0x410
[  365.805871][    C0]  qdisc_create+0xecb/0x1170
[  365.810533][    C0]  tc_modify_qdisc+0xaa1/0x1770
[  365.815848][    C0]  rtnetlink_rcv_msg+0x9b9/0xe60
[  365.821095][    C0]  netlink_rcv_skb+0x1e0/0x430
[  365.825865][    C0]  netlink_unicast+0x774/0x920
[  365.830652][    C0]  netlink_sendmsg+0x8ab/0xbc0
[  365.835438][    C0]  ____sys_sendmsg+0x5a2/0x8c0
[  365.840263][    C0]  ___sys_sendmsg+0x1f0/0x260
[  365.845138][    C0]  __se_sys_sendmsg+0x190/0x250
[  365.850008][    C0]  do_syscall_64+0x4c/0xa0
[  365.854524][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  365.860539][    C0] 
[  365.862858][    C0] Second to last potentially related work creation:
[  365.869432][    C0]  kasan_save_stack+0x35/0x60
[  365.874106][    C0]  kasan_record_aux_stack+0xb8/0x100
[  365.879391][    C0]  kvfree_call_rcu+0x10a/0x7c0
[  365.884322][    C0]  neigh_remove_one+0x4e8/0x5f0
[  365.889173][    C0]  ___neigh_create+0x468/0x2250
[  365.894129][    C0]  ip6_finish_output2+0xa01/0x1500
[  365.899882][    C0]  ndisc_send_skb+0xbea/0x14a0
[  365.904878][    C0]  addrconf_rs_timer+0x2b8/0x600
[  365.909939][    C0]  call_timer_fn+0x16c/0x530
[  365.914560][    C0]  __run_timers+0x525/0x7c0
[  365.919372][    C0]  run_timer_softirq+0x63/0xf0
[  365.924157][    C0]  handle_softirqs+0x328/0x820
[  365.928975][    C0]  __irq_exit_rcu+0x12f/0x220
[  365.933799][    C0]  irq_exit_rcu+0x5/0x20
[  365.938183][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  365.943915][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  365.950236][    C0] 
[  365.952567][    C0] The buggy address belongs to the object at ffff88807630a000
[  365.952567][    C0]  which belongs to the cache kmalloc-1k of size 1024
[  365.966807][    C0] The buggy address is located 145 bytes inside of
[  365.966807][    C0]  1024-byte region [ffff88807630a000, ffff88807630a400)
[  365.980167][    C0] The buggy address belongs to the page:
[  365.985887][    C0] page:ffffea0001d8c200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76308
[  365.996132][    C0] head:ffffea0001d8c200 order:3 compound_mapcount:0 compound_pincount:0
[  366.004452][    C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  366.012431][    C0] raw: 00fff00000010200 0000000000000000 0000000600000001 ffff888016841dc0
[  366.021098][    C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  366.029684][    C0] page dumped because: kasan: bad access detected
[  366.036215][    C0] page_owner tracks the page as allocated
[  366.041935][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4187, ts 71781996744, free_ts 71661571933
[  366.061197][    C0]  get_page_from_freelist+0x1b77/0x1c60
[  366.066774][    C0]  __alloc_pages+0x1e1/0x470
[  366.071516][    C0]  new_slab+0xc0/0x4b0
[  366.075593][    C0]  ___slab_alloc+0x81e/0xdf0
[  366.080659][    C0]  __kmalloc_node_track_caller+0x1fc/0x3a0
[  366.086473][    C0]  __alloc_skb+0x22c/0x750
[  366.090983][    C0]  rtmsg_fib+0xe7/0x4b0
[  366.095152][    C0]  fib_table_insert+0x987/0x1b20
[  366.100091][    C0]  fib_magic+0x2c1/0x390
[  366.104704][    C0]  fib_add_ifaddr+0x389/0x5e0
[  366.109377][    C0]  fib_netdev_event+0x35c/0x480
[  366.114308][    C0]  raw_notifier_call_chain+0xcb/0x160
[  366.120826][    C0]  __dev_notify_flags+0x178/0x2d0
[  366.126245][    C0]  dev_change_flags+0xe3/0x1a0
[  366.131912][    C0]  do_setlink+0xc01/0x3980
[  366.136439][    C0]  rtnl_newlink+0x1419/0x17d0
[  366.141296][    C0] page last free stack trace:
[  366.146047][    C0]  free_unref_page_prepare+0x637/0x6c0
[  366.151594][    C0]  free_unref_page+0x94/0x280
[  366.156279][    C0]  __unfreeze_partials+0x1a5/0x200
[  366.161562][    C0]  put_cpu_partial+0x12d/0x190
[  366.166322][    C0]  qlist_free_all+0x35/0x90
[  366.170829][    C0]  kasan_quarantine_reduce+0x150/0x160
[  366.176288][    C0]  __kasan_slab_alloc+0x2f/0xd0
[  366.181232][    C0]  slab_post_alloc_hook+0x4c/0x380
[  366.186425][    C0]  kmem_cache_alloc_trace+0x103/0x2a0
[  366.191799][    C0]  netdevice_event+0x324/0x900
[  366.196888][    C0]  raw_notifier_call_chain+0xcb/0x160
[  366.202460][    C0]  __dev_notify_flags+0x178/0x2d0
[  366.207970][    C0]  dev_change_flags+0xe3/0x1a0
[  366.213321][    C0]  do_setlink+0xc01/0x3980
[  366.218748][    C0]  rtnl_newlink+0x1419/0x17d0
[  366.223495][    C0]  rtnetlink_rcv_msg+0x9b9/0xe60
[  366.228793][    C0] 
[  366.231142][    C0] Memory state around the buggy address:
[  366.236862][    C0]  ffff888076309f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  366.245173][    C0]  ffff88807630a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  366.253335][    C0] >ffff88807630a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  366.261525][    C0]                          ^
[  366.266114][    C0]  ffff88807630a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  366.274176][    C0]  ffff88807630a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  366.282438][    C0] ==================================================================
[  366.290599][    C0] Disabling lock debugging due to kernel taint
[  366.297010][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  366.304400][    C0] CPU: 0 PID: 13195 Comm: syz.0.3636 Tainted: G    B             syzkaller #0
[  366.313346][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  366.323582][    C0] Call Trace:
[  366.326878][    C0]  <IRQ>
[  366.329729][    C0]  dump_stack_lvl+0x168/0x230
[  366.334499][    C0]  ? show_regs_print_info+0x20/0x20
[  366.340340][    C0]  ? load_image+0x3b0/0x3b0
[  366.344886][    C0]  panic+0x2c9/0x7f0
[  366.348792][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  366.353304][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  366.359207][    C0]  ? _raw_spin_unlock+0x40/0x40
[  366.364060][    C0]  ? register_lock_class+0x7e9/0x880
[  366.369444][    C0]  check_panic_on_warn+0x80/0xa0
[  366.374387][    C0]  ? register_lock_class+0x7e9/0x880
[  366.379679][    C0]  end_report+0x6d/0xf0
[  366.383923][    C0]  kasan_report+0x102/0x130
[  366.388440][    C0]  ? register_lock_class+0x7e9/0x880
[  366.393793][    C0]  register_lock_class+0x7e9/0x880
[  366.399523][    C0]  ? is_dynamic_key+0x1f0/0x1f0
[  366.404394][    C0]  ? __down_trylock_console_sem+0x184/0x1e0
[  366.410416][    C0]  ? vprintk_emit+0xa7/0x150
[  366.415042][    C0]  __lock_acquire+0x160/0x7c60
[  366.419819][    C0]  ? mark_lock+0x94/0x320
[  366.424156][    C0]  ? __lock_acquire+0x13ad/0x7c60
[  366.429185][    C0]  ? snprintf+0xd7/0x120
[  366.433743][    C0]  ? mark_lock+0x94/0x320
[  366.438281][    C0]  ? __lock_acquire+0x13ad/0x7c60
[  366.443416][    C0]  ? verify_lock_unused+0x140/0x140
[  366.448737][    C0]  ? _dev_info+0x150/0x150
[  366.453270][    C0]  lock_acquire+0x197/0x3f0
[  366.457803][    C0]  ? __wake_up+0xed/0x180
[  366.462144][    C0]  ? read_lock_is_recursive+0x10/0x10
[  366.467913][    C0]  _raw_spin_lock_irqsave+0xa4/0xf0
[  366.473209][    C0]  ? __wake_up+0xed/0x180
[  366.477565][    C0]  ? _raw_spin_lock+0x40/0x40
[  366.482333][    C0]  ? kcov_remote_stop+0x3c9/0x4c0
[  366.487440][    C0]  __wake_up+0xed/0x180
[  366.491680][    C0]  ? remove_wait_queue+0x120/0x120
[  366.496822][    C0]  ? _raw_spin_unlock+0x24/0x40
[  366.501695][    C0]  __usb_hcd_giveback_urb+0x396/0x520
[  366.507090][    C0]  dummy_timer+0x827/0x2e10
[  366.511708][    C0]  ? verify_lock_unused+0x140/0x140
[  366.517023][    C0]  ? dummy_free_streams+0x530/0x530
[  366.522224][    C0]  ? dummy_free_streams+0x530/0x530
[  366.527417][    C0]  call_timer_fn+0x16c/0x530
[  366.532022][    C0]  ? dummy_free_streams+0x530/0x530
[  366.537247][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  366.543332][    C0]  ? __run_timers+0x7c0/0x7c0
[  366.548019][    C0]  ? rcu_is_watching+0x11/0xa0
[  366.552792][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  366.557996][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  366.563281][    C0]  ? dummy_free_streams+0x530/0x530
[  366.568499][    C0]  __run_timers+0x525/0x7c0
[  366.573033][    C0]  ? detach_timer+0x2b0/0x2b0
[  366.577971][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  366.584087][    C0]  ? sched_clock_cpu+0x15/0x3c0
[  366.588998][    C0]  ? ktime_get_real_ts64+0x420/0x420
[  366.594306][    C0]  run_timer_softirq+0x63/0xf0
[  366.599111][    C0]  handle_softirqs+0x328/0x820
[  366.603995][    C0]  ? __irq_exit_rcu+0x12f/0x220
[  366.608845][    C0]  ? do_softirq+0x200/0x200
[  366.613538][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  366.618778][    C0]  __irq_exit_rcu+0x12f/0x220
[  366.623468][    C0]  ? irq_exit_rcu+0x20/0x20
[  366.628083][    C0]  irq_exit_rcu+0x5/0x20
[  366.632753][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  366.638756][    C0]  </IRQ>
[  366.641819][    C0]  <TASK>
[  366.644750][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  366.650830][    C0] RIP: 0010:lock_acquire+0x1f2/0x3f0
[  366.656139][    C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b
[  366.675986][    C0] RSP: 0018:ffffc90002fdf620 EFLAGS: 00000206
[  366.682067][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ae718f3975dad400
[  366.690250][    C0] RDX: 0000000000000000 RSI: ffffffff8a0b2b40 RDI: ffffffff8a59a880
[  366.698229][    C0] RBP: ffffc90002fdf740 R08: dffffc0000000000 R09: fffffbfff1ff7a19
[  366.706289][    C0] R10: fffffbfff1ff7a19 R11: 1ffffffff1ff7a18 R12: ffffffff8c11c720
[  366.714269][    C0] R13: 1ffff920005fbed0 R14: 0000000000000246 R15: dffffc0000000000
[  366.722384][    C0]  ? read_lock_is_recursive+0x10/0x10
[  366.727876][    C0]  rcu_lock_acquire+0x20/0x30
[  366.732747][    C0]  ? __page_memcg+0x140/0x140
[  366.737445][    C0]  lock_page_memcg+0xa9/0x410
[  366.742468][    C0]  ? mem_cgroup_get_oom_group+0x350/0x350
[  366.748305][    C0]  ? rcu_lock_acquire+0x30/0x30
[  366.753174][    C0]  ? __lock_acquire+0x7c60/0x7c60
[  366.758227][    C0]  ? workingset_activation+0x606/0x760
[  366.763719][    C0]  page_remove_rmap+0x2a/0x10f0
[  366.768590][    C0]  ? __tlb_remove_page_size+0x19b/0x3f0
[  366.774158][    C0]  ? vm_normal_page+0x95/0x1e0
[  366.778929][    C0]  unmap_page_range+0xfbc/0x2520
[  366.783917][    C0]  ? uprobe_munmap+0x165/0x3f0
[  366.788695][    C0]  unmap_vmas+0x11b/0x230
[  366.793044][    C0]  ? uprobe_clear_state+0x4f/0x460
[  366.798156][    C0]  ? unmap_page_range+0x2520/0x2520
[  366.803625][    C0]  ? __mutex_lock_common+0x431/0x2390
[  366.809014][    C0]  ? memset+0x1e/0x40
[  366.813260][    C0]  exit_mmap+0x38f/0x5f0
[  366.817504][    C0]  ? vm_brk+0x20/0x20
[  366.821549][    C0]  ? uprobe_clear_state+0x2f6/0x460
[  366.826771][    C0]  ? mm_update_next_owner+0x5ce/0x640
[  366.832168][    C0]  __mmput+0x115/0x3b0
[  366.836245][    C0]  exit_mm+0x567/0x6c0
[  366.840322][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  366.845719][    C0]  ? do_exit+0x20a0/0x20a0
[  366.850172][    C0]  ? taskstats_exit+0x439/0xab0
[  366.855027][    C0]  ? sync_mm_rss+0x211/0x350
[  366.859622][    C0]  do_exit+0x5a1/0x20a0
[  366.863796][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  366.869879][    C0]  ? put_task_struct+0x80/0x80
[  366.874653][    C0]  ? lock_chain_count+0x20/0x20
[  366.879566][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  366.884898][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  366.890988][    C0]  do_group_exit+0x12e/0x300
[  366.896255][    C0]  __x64_sys_exit_group+0x3b/0x40
[  366.901286][    C0]  do_syscall_64+0x4c/0xa0
[  366.905890][    C0]  ? clear_bhb_loop+0x30/0x80
[  366.910743][    C0]  ? clear_bhb_loop+0x30/0x80
[  366.915418][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  366.921312][    C0] RIP: 0033:0x7f6e41024fc9
[  366.925856][    C0] Code: Unable to access opcode bytes at RIP 0x7f6e41024f9f.
[  366.933300][    C0] RSP: 002b:00007ffdc1f6b158 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  366.942160][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6e41024fc9
[  366.950385][    C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  366.958366][    C0] RBP: 00007ffdc1f6b1bc R08: 00000003c1f6b24f R09: 00000000000927c0
[  366.966428][    C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000321
[  366.974483][    C0] R13: 00000000000927c0 R14: 000000000005907b R15: 00007ffdc1f6b210
[  366.982471][    C0]  </TASK>
[  368.134987][    C0] Shutting down cpus with NMI
[  368.140082][    C0] Kernel Offset: disabled
[  368.144453][    C0] Rebooting in 86400 seconds..