last executing test programs:

3m36.208476128s ago: executing program 4 (id=253):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3ff, r0, 0x4}, 0x38)

3m36.121258319s ago: executing program 4 (id=255):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@add_del={0x2, 0x0})
getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4)

3m36.067365s ago: executing program 4 (id=256):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

3m35.778451974s ago: executing program 4 (id=259):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x189, &(0x7f00000027c0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340))

3m35.601191987s ago: executing program 4 (id=260):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000280)={[{@numtail}, {@fat=@nfs_nostale_ro}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xd}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@utf8no}]}, 0x25, 0x34c, &(0x7f0000001740)="$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")
umount2(&(0x7f0000000040)='.\x00', 0x2)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

3m34.749615041s ago: executing program 4 (id=268):
r0 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2)
pread64(r0, &(0x7f0000000700)=""/115, 0x73, 0x5)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@mmap={0x2, 0xb, 0x4, 0x0, 0x4, {0x77359400}, {0x3, 0xc, 0x10, 0x8, 0x80, 0x60, "ad322947"}, 0x7, 0x1, {}, 0x5})

3m34.522223964s ago: executing program 32 (id=268):
r0 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2)
pread64(r0, &(0x7f0000000700)=""/115, 0x73, 0x5)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@mmap={0x2, 0xb, 0x4, 0x0, 0x4, {0x77359400}, {0x3, 0xc, 0x10, 0x8, 0x80, 0x60, "ad322947"}, 0x7, 0x1, {}, 0x5})

3m22.217424349s ago: executing program 0 (id=340):
r0 = socket(0x18, 0x800, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @broadcast, 'geneve1\x00'}}, 0x1e)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0)

3m21.962270803s ago: executing program 0 (id=342):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendmsg$netlink(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0)

3m21.645259958s ago: executing program 0 (id=352):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={0x24, r0, 0x301, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xc, 0x2, 0x0, 0x1, [{0x4}, {0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c0)

3m21.470503821s ago: executing program 0 (id=354):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000080, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d63703836342c756e695f786c6174653d312c636f6465706167653d313235302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c696f636861727365743d63703836322c726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c002aa220cdeeb5ba33c93123800bef80e5155d8840d88fc461c6"], 0x25, 0x336, &(0x7f0000000500)="$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")
mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0)
unlink(&(0x7f00000002c0)='./file1\x00')

3m20.557900745s ago: executing program 0 (id=348):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/key-users\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x3)

3m19.910800755s ago: executing program 0 (id=353):
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x10001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f043})
ppoll(&(0x7f0000000300)=[{r0, 0x2007}], 0x1, 0x0, 0x0, 0x0)

3m19.61135741s ago: executing program 33 (id=353):
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x10001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f043})
ppoll(&(0x7f0000000300)=[{r0, 0x2007}], 0x1, 0x0, 0x0, 0x0)

18.446402218s ago: executing program 2 (id=1557):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)

18.096227344s ago: executing program 2 (id=1559):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000054}, 0x44)

17.971506497s ago: executing program 2 (id=1561):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r0}, 0x38)

17.663270133s ago: executing program 2 (id=1567):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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")
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

14.640645917s ago: executing program 2 (id=1571):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x4490, &(0x7f0000000100)={[{@utf8no}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8no}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@fat=@flush}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x1, 0x216, &(0x7f0000000e00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

11.734071719s ago: executing program 1 (id=1583):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd='])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))

11.497830763s ago: executing program 1 (id=1584):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2c, 0x0, {}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}}, 0x0)

11.320209906s ago: executing program 1 (id=1586):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x140)
readahead(r0, 0xc000000, 0x1)

11.14250119s ago: executing program 1 (id=1589):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x5591, &(0x7f0000002080)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
utimes(&(0x7f00000000c0)='./file0\x00', 0x0)

7.647171452s ago: executing program 1 (id=1595):
syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000080)='./file2\x00', 0x1000000, &(0x7f0000000500)={[{@allow_utime={'allow_utime', 0x3d, 0x4}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@allow_utime={'allow_utime', 0x3d, 0x103}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@discard}, {@gid}, {@utf8}, {@errors_continue}, {@time_offset={'time_offset', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0x1}}, {@dmask={'dmask', 0x3d, 0x1}}]}, 0x1, 0x1505, &(0x7f0000002c80)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
fstatfs(r0, &(0x7f0000000140)=""/15)

6.782762918s ago: executing program 2 (id=1596):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x102}}, 0xb4}}, 0x0)

5.993072892s ago: executing program 3 (id=1603):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write(r0, 0x0, 0x0)

5.882400284s ago: executing program 3 (id=1604):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
setresuid(0xee00, 0xee00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="850000002f000000d40a0000200000009500000000000000851dcf63e0572fc4b9955cf3a3e0aa203cd3175b205f119603fb20321b1cac1b411a51e0a7421c1fa73496df12a6deb7b2ae77c9796db246c4a2120f3de9172c163453d387f42f0ad500581f0215ff598944851e695fbc1016f74fd4fbd55d5599e772b25a6a0fba4d0e8a0688872a278787b6e21c8a5d224cb7913a9430c5e77b226925335890da"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

5.765938036s ago: executing program 3 (id=1605):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}})

5.702929547s ago: executing program 3 (id=1606):
r0 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000080), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@ieee802154, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="9fcc8c5c4b0b01c0c4c230a57be824a2292eec2b7db24f005cd40e096dfcc849c65ced0629a609cf4ff999650fce20264d2a9d2535db43ec29ecd1bf21ae3cfd542e7b08f8fb26f3ac62c83d596d3a6736e055a8747398de2699712db965e268def060c3cceed6ef24", @ANYRESOCT=r0], 0x3}, 0x44080)

5.592828069s ago: executing program 3 (id=1607):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0xcc04, &(0x7f0000000100)={[{@dots}, {@fat=@quiet}, {@dots}, {@dots}, {@dots}, {@fat=@flush}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@usefree}, {@fat=@gid}, {}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@dots}]}, 0x1, 0x1bf, &(0x7f0000000300)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

5.293319594s ago: executing program 5 (id=1610):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
close(r0)

5.063152149s ago: executing program 5 (id=1612):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000240)=0x2000003, 0x4)

4.881222932s ago: executing program 5 (id=1613):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCFLSH(r0, 0x804c4700, 0x20000000)

4.697003016s ago: executing program 5 (id=1614):
io_setup(0x8, &(0x7f00000002c0)=<r0=>0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x8e, r1, 0x0}])

3.095781624s ago: executing program 3 (id=1615):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@ssd_spread}, {@nodatasum}, {@enospc_debug}, {@ssd_spread}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x400)

2.478485395s ago: executing program 6 (id=1616):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000340)=0xfffffffd, 0x4)

2.291331239s ago: executing program 6 (id=1617):
recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40008022, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000)

2.21489189s ago: executing program 6 (id=1618):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010000)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.108615412s ago: executing program 6 (id=1619):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a3c40, 0x0)
r1 = dup(r0)
ioctl$FIONREAD(r1, 0x541b, 0x0)

1.958224255s ago: executing program 6 (id=1620):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000700)={0x3, &(0x7f0000000000)=[{0x50}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)

1.881302086s ago: executing program 1 (id=1621):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00222200000096231306073f07060000002afa1057dc9522ce0b6dcd6d127add9b80"], 0x0}, 0x0)

1.813554637s ago: executing program 6 (id=1622):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_setup(0x60, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)="8c664d01fa5e0ba5f3cbe22df8fe6504d1f9951033fee6d365dcb8a65071e7b478", 0x21}])

170.423267ms ago: executing program 5 (id=1623):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01082b9d7000fedbdf250c00000020000580070001"], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x8000)

0s ago: executing program 5 (id=1624):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="0c000000010001", 0x7)

kernel console output (not intermixed with test programs):

ock", "syz:syz"
[  156.772601][ T6750] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  156.804957][ T6750] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  156.886155][ T4917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.909829][ T4917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.940175][ T4917] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  156.951160][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.990439][ T6750] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  156.998937][ T4917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.046695][ T4917] usb 4-1: config 0 descriptor??
[  157.095940][ T4920] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  157.162434][ T6803] loop1: detected capacity change from 0 to 64
[  157.217241][ T6803] hfs: unable to locate alternate MDB
[  157.222663][ T6803] hfs: continuing without an alternate MDB
[  157.320224][ T6803] attempt to access beyond end of device
[  157.320224][ T6803] loop1: rw=2049, want=105, limit=64
[  157.496185][ T4920] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.514794][ T4920] usb 7-1: config 0 interface 0 has no altsetting 0
[  157.524946][ T4920] usb 7-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00
[  157.550616][ T4917] hid_mf 0003:0079:1846.0014: unknown main item tag 0x0
[  157.563642][ T4917] hid_mf 0003:0079:1846.0014: unknown main item tag 0x0
[  157.571074][ T4920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.586192][ T4917] hid_mf 0003:0079:1846.0014: unknown main item tag 0x0
[  157.593294][ T4917] hid_mf 0003:0079:1846.0014: unknown main item tag 0x0
[  157.610524][ T4920] usb 7-1: config 0 descriptor??
[  157.620453][ T4917] hid_mf 0003:0079:1846.0014: unknown main item tag 0x0
[  157.629590][ T4917] hid_mf 0003:0079:1846.0014: unknown main item tag 0x0
[  157.650429][ T4917] hid_mf 0003:0079:1846.0014: unknown main item tag 0x0
[  157.664374][ T4917] hid_mf 0003:0079:1846.0014: unknown main item tag 0x0
[  157.682011][ T4917] hid_mf 0003:0079:1846.0014: unknown main item tag 0x0
[  157.695069][ T4917] hid_mf 0003:0079:1846.0014: unknown main item tag 0x0
[  157.708633][ T4917] hid_mf 0003:0079:1846.0014: unknown main item tag 0x0
[  157.747747][ T4917] hid_mf 0003:0079:1846.0014: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0
[  157.771046][ T4917] hid_mf 0003:0079:1846.0014: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  157.795861][ T5156] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  157.822355][ T4917] usb 4-1: USB disconnect, device number 6
[  157.900744][ T6829] fido_id[6829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  158.112188][ T4920] wacom 0003:056A:00E5.0015: hidraw0: USB HID v0.01 Device [HID 056a:00e5] on usb-dummy_hcd.6-1/input0
[  158.156041][ T5156] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.162319][ T4918] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  158.179867][ T5156] usb 2-1: config 0 interface 0 has no altsetting 0
[  158.192007][ T5156] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  158.221865][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.243961][ T5156] usb 2-1: config 0 descriptor??
[  158.336974][ T5154] usb 7-1: USB disconnect, device number 3
[  158.436031][ T4918] usb 6-1: Using ep0 maxpacket: 32
[  158.531555][ T6863] loop3: detected capacity change from 0 to 256
[  158.565881][ T4918] usb 6-1: config 0 has an invalid interface number: 16 but max is 0
[  158.574139][ T4918] usb 6-1: config 0 has no interface number 0
[  158.580665][ T4918] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  158.590741][ T4918] usb 6-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  158.719302][ T6863] FAT-fs (loop3): IO charset cpush not found
[  158.739932][ T5156] hid-generic 0003:05AC:027A.0016: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0
[  158.781714][ T4918] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  158.791046][ T4918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.804847][ T4918] usb 6-1: Product: syz
[  158.809412][ T4918] usb 6-1: Manufacturer: syz
[  158.816267][ T4918] usb 6-1: SerialNumber: syz
[  158.846384][ T6863] smb3: Unexpected value for 'acl'
[  158.854430][ T4918] usb 6-1: config 0 descriptor??
[  158.932671][ T4918] snd-usb-audio: probe of 6-1:0.16 failed with error -2
[  158.948712][ T6872] loop6: detected capacity change from 0 to 256
[  158.971652][ T4918] usb 2-1: USB disconnect, device number 8
[  159.011075][ T4162] udevd[4162]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  159.054967][ T6872] FAT-fs (loop6): Directory bread(block 64) failed
[  159.064131][ T6872] FAT-fs (loop6): Directory bread(block 65) failed
[  159.079304][ T6872] FAT-fs (loop6): Directory bread(block 66) failed
[  159.093339][ T6872] FAT-fs (loop6): Directory bread(block 67) failed
[  159.100374][ T6872] FAT-fs (loop6): Directory bread(block 68) failed
[  159.107425][ T6872] FAT-fs (loop6): Directory bread(block 69) failed
[  159.114693][ T6872] FAT-fs (loop6): Directory bread(block 70) failed
[  159.134121][ T6872] FAT-fs (loop6): Directory bread(block 71) failed
[  159.141750][ T4920] usb 6-1: USB disconnect, device number 7
[  159.146469][ T6872] FAT-fs (loop6): Directory bread(block 72) failed
[  159.163972][ T6872] FAT-fs (loop6): Directory bread(block 73) failed
[  159.384620][ T6881] loop6: detected capacity change from 0 to 256
[  159.449158][ T6881] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d)
[  159.521303][ T6885] netlink: 'syz.2.834': attribute type 1 has an invalid length.
[  159.522384][ T6886] netlink: 'syz.3.832': attribute type 1 has an invalid length.
[  159.804010][ T6900] loop5: detected capacity change from 0 to 256
[  159.821437][ T6901] loop1: detected capacity change from 0 to 256
[  159.844627][ T6898] mkiss: ax0: crc mode is auto.
[  159.966097][ T6900] FAT-fs (loop5): Directory bread(block 64) failed
[  159.993817][ T6900] FAT-fs (loop5): Directory bread(block 65) failed
[  160.016884][ T6900] FAT-fs (loop5): Directory bread(block 66) failed
[  160.028168][ T6900] FAT-fs (loop5): Directory bread(block 67) failed
[  160.066891][ T6906] loop3: detected capacity change from 0 to 256
[  160.074510][ T6900] FAT-fs (loop5): Directory bread(block 68) failed
[  160.115839][ T6900] FAT-fs (loop5): Directory bread(block 69) failed
[  160.123142][ T6900] FAT-fs (loop5): Directory bread(block 70) failed
[  160.151663][ T6900] FAT-fs (loop5): Directory bread(block 71) failed
[  160.168356][ T6900] FAT-fs (loop5): Directory bread(block 72) failed
[  160.212586][ T6906] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  160.245978][ T6900] FAT-fs (loop5): Directory bread(block 73) failed
[  160.390651][ T6893] loop2: detected capacity change from 0 to 32768
[  160.420106][ T6893] XFS: ikeep mount option is deprecated.
[  160.469260][ T6893] XFS: noikeep mount option is deprecated.
[  160.656262][ T5154] Bluetooth: hci0: command 0x0405 tx timeout
[  160.733883][ T6893] XFS (loop2): Mounting V5 Filesystem
[  160.890817][ T6893] XFS (loop2): Ending clean mount
[  160.941371][ T6893] XFS (loop2): Quotacheck needed: Please wait.
[  160.994724][ T6904] loop6: detected capacity change from 0 to 32768
[  161.052869][ T6893] XFS (loop2): Quotacheck: Done.
[  161.159880][ T6904] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  161.173631][ T4173] XFS (loop2): Unmounting Filesystem
[  161.186112][ T6904] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  161.203587][ T6926] loop1: detected capacity change from 0 to 32768
[  161.228708][ T5154] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  161.297218][ T6904] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  161.428369][ T6904] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  161.566014][ T4920] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  161.626381][ T5154] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.645882][ T5154] usb 6-1: config 0 interface 0 has no altsetting 0
[  161.659789][ T5154] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  161.680557][ T5154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.721843][ T5154] usb 6-1: config 0 descriptor??
[  161.836118][ T4920] usb 4-1: Using ep0 maxpacket: 16
[  161.971962][ T4920] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  162.011519][ T4920] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.042398][ T4920] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  162.075901][ T4920] usb 4-1: config 0 interface 0 has no altsetting 0
[  162.102229][ T4920] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  162.175860][ T4920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.219015][ T6943] loop6: detected capacity change from 0 to 256
[  162.247052][ T4920] usb 4-1: config 0 descriptor??
[  162.342493][ T6943] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  162.640903][ T6947] loop1: detected capacity change from 0 to 256
[  162.697615][ T6947] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d)
[  162.766209][ T4920] hid-alps 0003:044E:120B.0017: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.3-1/input0
[  162.849580][ T6949] loop6: detected capacity change from 0 to 128
[  163.007058][ T6949] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  163.064836][ T6949] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  163.112774][ T4918] usb 4-1: USB disconnect, device number 7
[  163.131104][ T6955] loop1: detected capacity change from 0 to 256
[  163.256522][ T6951] fido_id[6951]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  163.280190][ T6955] FAT-fs (loop1): Directory bread(block 64) failed
[  163.307000][ T6955] FAT-fs (loop1): Directory bread(block 65) failed
[  163.355014][ T6955] FAT-fs (loop1): Directory bread(block 66) failed
[  163.427007][ T6955] FAT-fs (loop1): Directory bread(block 67) failed
[  163.435086][ T6949] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.871: No space for directory leaf checksum. Please run e2fsck -D.
[  163.489942][ T6955] FAT-fs (loop1): Directory bread(block 68) failed
[  163.508485][ T6955] FAT-fs (loop1): Directory bread(block 69) failed
[  163.515225][ T6949] EXT4-fs error (device loop6): htree_dirblock_to_tree:1083: inode #2: comm syz.6.871: Directory block failed checksum
[  163.536940][ T6955] FAT-fs (loop1): Directory bread(block 70) failed
[  163.543942][ T6955] FAT-fs (loop1): Directory bread(block 71) failed
[  163.564795][ T6955] FAT-fs (loop1): Directory bread(block 72) failed
[  163.583350][ T6936] loop2: detected capacity change from 0 to 262144
[  163.613775][ T6955] FAT-fs (loop1): Directory bread(block 73) failed
[  163.634889][ T5154] hid-generic 0003:05AC:027A.0018: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.5-1/input0
[  163.731480][ T6936] F2FS-fs (loop2): Found nat_bits in checkpoint
[  163.779791][ T6936] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  163.886126][ T4912] usb 6-1: USB disconnect, device number 8
[  163.968571][ T6964] fido_id[6964]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  164.185960][ T5154] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  164.425843][ T5154] usb 2-1: Using ep0 maxpacket: 16
[  164.631867][ T6982] loop5: detected capacity change from 0 to 4096
[  164.634815][ T6986] loop2: detected capacity change from 0 to 256
[  164.674333][ T6982] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  164.726082][ T5154] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  164.735389][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.786152][ T5154] usb 2-1: Product: syz
[  164.790376][ T5154] usb 2-1: Manufacturer: syz
[  164.794996][ T5154] usb 2-1: SerialNumber: syz
[  164.829193][ T6986] FAT-fs (loop2): Directory bread(block 64) failed
[  164.845127][ T5154] usb 2-1: config 0 descriptor??
[  164.879563][ T6970] loop3: detected capacity change from 0 to 32768
[  164.886654][ T6986] FAT-fs (loop2): Directory bread(block 65) failed
[  164.897796][ T5154] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  164.924800][ T6986] FAT-fs (loop2): Directory bread(block 66) failed
[  164.953102][ T6986] FAT-fs (loop2): Directory bread(block 67) failed
[  164.972835][ T6972] loop6: detected capacity change from 0 to 32768
[  164.986672][ T6970] XFS (loop3): Mounting V5 Filesystem
[  164.997591][ T6972] XFS: ikeep mount option is deprecated.
[  165.006195][ T6986] FAT-fs (loop2): Directory bread(block 68) failed
[  165.015960][ T6986] FAT-fs (loop2): Directory bread(block 69) failed
[  165.022698][ T6986] FAT-fs (loop2): Directory bread(block 70) failed
[  165.082187][ T6972] XFS: noikeep mount option is deprecated.
[  165.093009][ T6986] FAT-fs (loop2): Directory bread(block 71) failed
[  165.106068][ T6986] FAT-fs (loop2): Directory bread(block 72) failed
[  165.127391][ T6986] FAT-fs (loop2): Directory bread(block 73) failed
[  165.135959][ T5154] ssu100: probe of 2-1:0.0 failed with error -71
[  165.166096][ T5154] usb 2-1: USB disconnect, device number 9
[  165.269361][ T6970] XFS (loop3): Ending clean mount
[  165.276597][ T6972] XFS (loop6): Mounting V5 Filesystem
[  165.294727][ T6970] XFS (loop3): Quotacheck needed: Please wait.
[  165.418210][ T6970] XFS (loop3): Quotacheck: Done.
[  165.598715][ T6972] XFS (loop6): Ending clean mount
[  165.611276][ T6972] XFS (loop6): Quotacheck needed: Please wait.
[  165.676958][ T4172] XFS (loop3): Unmounting Filesystem
[  165.883082][ T7010] loop2: detected capacity change from 0 to 128
[  165.897159][ T6972] XFS (loop6): Quotacheck: Done.
[  166.057957][ T7010] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  166.089292][ T7010] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  166.139203][ T5324] XFS (loop6): Unmounting Filesystem
[  166.519748][ T7030] RDS: rds_bind could not find a transport for ::4006:0:20:0, load rds_tcp or rds_rdma?
[  166.563996][ T7026] loop1: detected capacity change from 0 to 4096
[  166.631159][ T7026] ntfs3: loop1: ino=3, Correct links count -> 2.
[  166.755071][ T7026] ntfs3: loop1: failed to convert "0080" to macgreek
[  166.775135][ T7026] ntfs3: loop1: failed to convert name for inode 1e.
[  167.022138][ T7048] loop5: detected capacity change from 0 to 1024
[  167.052494][ T7047] loop1: detected capacity change from 0 to 512
[  167.213553][ T7047] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.894: corrupted inode contents
[  167.321889][ T7047] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #16: comm syz.1.894: mark_inode_dirty error
[  167.344640][ T7047] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.894: corrupted inode contents
[  167.385129][ T7047] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.894: mark_inode_dirty error
[  167.410963][ T7053] loop2: detected capacity change from 0 to 64
[  167.446827][ T7032] loop3: detected capacity change from 0 to 32768
[  167.453880][ T7047] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.894: corrupted inode contents
[  167.480298][ T7047] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  167.548031][ T7047] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.894: corrupted inode contents
[  167.561868][ T7032] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  167.570203][ T7053] hfs: unable to locate alternate MDB
[  167.575606][ T7053] hfs: continuing without an alternate MDB
[  167.603533][ T7032] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  167.611226][ T7047] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.894: mark_inode_dirty error
[  167.654965][ T7032] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  167.668799][ T7047] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  167.726408][ T7044] loop6: detected capacity change from 0 to 32768
[  167.746675][ T7047] EXT4-fs (loop1): 1 truncate cleaned up
[  167.761714][ T7047] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,dioread_nolock,data=journal,noblock_validity,bsddf,,errors=continue. Quota mode: writeback.
[  167.825190][ T7047] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.864324][ T7032] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  167.887584][ T7044] JBD2: Ignoring recovery information on journal
[  168.041606][ T7064] loop5: detected capacity change from 0 to 256
[  168.067538][ T7044] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  168.209481][ T7064] FAT-fs (loop5): Directory bread(block 64) failed
[  168.224344][   T26] audit: type=1800 audit(1748913268.180:7): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.882" name="bus" dev="loop6" ino=17058 res=0 errno=0
[  168.225612][ T7064] FAT-fs (loop5): Directory bread(block 65) failed
[  168.306023][ T7064] FAT-fs (loop5): Directory bread(block 66) failed
[  168.306281][ T7067] loop2: detected capacity change from 0 to 2048
[  168.352472][ T7064] FAT-fs (loop5): Directory bread(block 67) failed
[  168.372101][ T5324] ocfs2: Unmounting device (7,6) on (node local)
[  168.384391][ T7064] FAT-fs (loop5): Directory bread(block 68) failed
[  168.411783][ T7064] FAT-fs (loop5): Directory bread(block 69) failed
[  168.419488][ T7064] FAT-fs (loop5): Directory bread(block 70) failed
[  168.426185][ T7064] FAT-fs (loop5): Directory bread(block 71) failed
[  168.433012][ T7064] FAT-fs (loop5): Directory bread(block 72) failed
[  168.440352][ T7064] FAT-fs (loop5): Directory bread(block 73) failed
[  168.483934][ T7067] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  168.533156][ T7067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.719953][ T4946] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  168.818244][ T4946] FAT-fs (loop5): Filesystem has been set read-only
[  168.904480][ T7077] loop2: detected capacity change from 0 to 4096
[  168.997958][ T7077] ntfs3: loop2: ino=3, Correct links count -> 2.
[  169.095906][ T4912] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  169.175197][ T7077] ntfs3: loop2: failed to convert "0080" to macgreek
[  169.188904][  T440] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.246295][ T7077] ntfs3: loop2: failed to convert name for inode 1e.
[  169.328560][  T440] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.467495][  T440] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.496072][ T4912] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  169.504439][ T4912] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  169.506929][ T7076] loop3: detected capacity change from 0 to 32768
[  169.525262][ T4912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  169.539975][ T4912] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  169.552187][ T4912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  169.567453][ T4912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  169.642033][ T7076] XFS (loop3): Mounting V5 Filesystem
[  169.673806][ T7087] loop6: detected capacity change from 0 to 32768
[  169.683446][  T440] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.794683][ T7087] XFS (loop6): Mounting V5 Filesystem
[  169.802237][ T7076] XFS (loop3): Ending clean mount
[  169.842034][ T7076] XFS (loop3): Quotacheck needed: Please wait.
[  169.877039][ T4912] usb 2-1: string descriptor 0 read error: -22
[  169.902240][ T4912] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  169.944603][ T4912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.982587][ T4912] usb 2-1: config 0 descriptor??
[  170.011235][ T7076] XFS (loop3): Quotacheck: Done.
[  170.026262][ T7081] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  170.097629][ T4912] hub 2-1:0.0: bad descriptor, ignoring hub
[  170.118678][ T7087] XFS (loop6): Ending clean mount
[  170.119016][ T4912] hub: probe of 2-1:0.0 failed with error -5
[  170.128145][ T7087] XFS (loop6): Quotacheck needed: Please wait.
[  170.162684][ T4912] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18
[  170.253497][ T4172] XFS (loop3): Unmounting Filesystem
[  170.273687][ T7112] loop2: detected capacity change from 0 to 1024
[  170.302961][ T7087] XFS (loop6): Quotacheck: Done.
[  170.435340][ T7081] loop1: detected capacity change from 0 to 2048
[  170.683730][ T5156] usb 2-1: USB disconnect, device number 10
[  170.695788][    C0] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -19
[  170.765517][ T5324] XFS (loop6): Unmounting Filesystem
[  170.991319][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'.
[  171.020406][ T7124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.917'.
[  171.312973][ T7139] loop3: detected capacity change from 0 to 256
[  171.331386][  T440] device hsr_slave_0 left promiscuous mode
[  171.353145][  T440] device hsr_slave_1 left promiscuous mode
[  171.363896][  T440] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.423470][  T440] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.469052][ T4912] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  171.481271][  T440] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.523285][  T440] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.566767][  T440] device bridge_slave_1 left promiscuous mode
[  171.573040][  T440] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.604669][  T440] device bridge_slave_0 left promiscuous mode
[  171.611828][  T440] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.630928][  T440] device veth1_macvtap left promiscuous mode
[  171.637705][  T440] device veth0_macvtap left promiscuous mode
[  171.644403][  T440] device veth1_vlan left promiscuous mode
[  171.651134][  T440] device veth0_vlan left promiscuous mode
[  171.725927][ T4912] usb 3-1: Using ep0 maxpacket: 16
[  171.766181][ T4912] usb 3-1: too many configurations: 60, using maximum allowed: 8
[  172.051291][  T440] team0 (unregistering): Port device team_slave_1 removed
[  172.077679][  T440] team0 (unregistering): Port device team_slave_0 removed
[  172.093392][  T440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.111506][  T440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.180416][ T7160] loop6: detected capacity change from 0 to 256
[  172.219814][ T7160] FAT-fs (loop6): Directory bread(block 64) failed
[  172.231299][ T7160] FAT-fs (loop6): Directory bread(block 65) failed
[  172.238183][ T7160] FAT-fs (loop6): Directory bread(block 66) failed
[  172.245326][ T7160] FAT-fs (loop6): Directory bread(block 67) failed
[  172.253350][ T7160] FAT-fs (loop6): Directory bread(block 68) failed
[  172.260279][ T7160] FAT-fs (loop6): Directory bread(block 69) failed
[  172.268854][ T7160] FAT-fs (loop6): Directory bread(block 70) failed
[  172.275696][ T7160] FAT-fs (loop6): Directory bread(block 71) failed
[  172.282583][ T7160] FAT-fs (loop6): Directory bread(block 72) failed
[  172.290928][ T7160] FAT-fs (loop6): Directory bread(block 73) failed
[  172.296713][  T440] bond0 (unregistering): Released all slaves
[  172.367572][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'.
[  172.558414][ T7167] loop1: detected capacity change from 0 to 1024
[  172.691556][ T7125] chnl_net:caif_netlink_parms(): no params data found
[  172.736080][ T4912] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[  172.752705][ T4912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[  172.789191][ T4912] usb 3-1: Product: syz
[  172.807078][ T4912] usb 3-1: Manufacturer: syz
[  172.824058][ T4912] usb 3-1: SerialNumber: syz
[  172.830815][ T4912] usb 3-1: config 0 descriptor??
[  172.860256][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.868925][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.879080][ T4912] pwc: Philips SPC 880NC USB webcam detected.
[  172.886881][ T7125] device bridge_slave_0 entered promiscuous mode
[  172.902643][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.909973][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.918384][ T7125] device bridge_slave_1 entered promiscuous mode
[  172.974802][ T7125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.987370][ T7125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.016109][ T4920] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  173.025912][ T5154] Bluetooth: hci4: command 0x0409 tx timeout
[  173.100896][ T7125] team0: Port device team_slave_0 added
[  173.118287][ T7125] team0: Port device team_slave_1 added
[  173.126119][ T4912] pwc: Warning: more than 1 configuration available.
[  173.146021][ T4912] pwc: Failed to set LED on/off time (-71)
[  173.176107][ T4912] pwc: send_video_command error -71
[  173.181533][ T4912] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  173.199095][ T4912] Philips webcam: probe of 3-1:0.0 failed with error -71
[  173.217641][ T4912] usb 3-1: USB disconnect, device number 10
[  173.257682][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.277275][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.434197][ T7125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.454989][ T4920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  173.495808][ T4920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  173.515885][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.547165][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.579949][ T4920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  173.606094][ T4920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  173.626033][ T7195] loop6: detected capacity change from 0 to 512
[  173.643510][ T7125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.742023][ T7125] device hsr_slave_0 entered promiscuous mode
[  173.766651][ T7125] device hsr_slave_1 entered promiscuous mode
[  173.773524][ T7125] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  173.781668][ T7125] Cannot create hsr debugfs directory
[  173.790418][ T4920] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  173.806132][ T7195] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  173.819636][ T4920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.830157][ T4920] usb 4-1: Product: syz
[  173.834544][ T4920] usb 4-1: Manufacturer: syz
[  173.840326][ T4920] usb 4-1: SerialNumber: syz
[  173.847179][ T4920] usb 4-1: config 0 descriptor??
[  173.872978][ T7195] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.897436][ T4920] ums-isd200 4-1:0.0: USB Mass Storage device detected
[  174.025827][    T7] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  174.033395][ T7182] loop1: detected capacity change from 0 to 32768
[  174.134057][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.935'.
[  174.223847][ T4920] scsi host1: usb-storage 4-1:0.0
[  174.244376][ T7182] XFS (loop1): Mounting V5 Filesystem
[  174.408828][ T4912] usb 4-1: USB disconnect, device number 8
[  174.459249][    T7] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[  174.480492][    T7] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  174.510058][    T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  174.539543][    T7] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  174.564079][ T7182] XFS (loop1): Ending clean mount
[  174.570986][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  174.571241][ T7182] XFS (loop1): Quotacheck needed: Please wait.
[  174.634323][    T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  174.701246][ T7182] XFS (loop1): Quotacheck: Done.
[  174.712463][ T7224] loop6: detected capacity change from 0 to 2048
[  174.780244][ T7224] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  174.837455][ T7230] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.975981][    T7] usb 3-1: string descriptor 0 read error: -22
[  174.985632][    T7] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  175.037025][ T4171] XFS (loop1): Unmounting Filesystem
[  175.045808][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.085116][    T7] usb 3-1: config 0 descriptor??
[  175.120607][ T7198] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  175.143748][ T7235] loop6: detected capacity change from 0 to 2048
[  175.150550][ T5156] Bluetooth: hci4: command 0x041b tx timeout
[  175.163554][ T7236] loop3: detected capacity change from 0 to 256
[  175.166778][    T7] hub 3-1:0.0: bad descriptor, ignoring hub
[  175.208006][    T7] hub: probe of 3-1:0.0 failed with error -5
[  175.234319][ T7236] FAT-fs (loop3): Directory bread(block 64) failed
[  175.261868][ T7236] FAT-fs (loop3): Directory bread(block 65) failed
[  175.270005][ T7238] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.272378][    T7] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19
[  175.322848][ T7236] FAT-fs (loop3): Directory bread(block 66) failed
[  175.332091][ T7236] FAT-fs (loop3): Directory bread(block 67) failed
[  175.343830][ T7235] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12
[  175.353883][ T7236] FAT-fs (loop3): Directory bread(block 68) failed
[  175.377034][ T7236] FAT-fs (loop3): Directory bread(block 69) failed
[  175.404427][ T7236] FAT-fs (loop3): Directory bread(block 70) failed
[  175.418752][ T7235] Remounting filesystem read-only
[  175.463594][ T7236] FAT-fs (loop3): Directory bread(block 71) failed
[  175.501276][ T7236] FAT-fs (loop3): Directory bread(block 72) failed
[  175.566976][ T7236] FAT-fs (loop3): Directory bread(block 73) failed
[  175.567398][ T7198] loop2: detected capacity change from 0 to 2048
[  175.641578][ T4920] usb 3-1: USB disconnect, device number 11
[  175.647698][    C0] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -19
[  175.962253][ T7125] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  175.997044][ T7125] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  176.078430][ T7125] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  176.105374][ T7125] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  176.203779][ T7254] loop1: detected capacity change from 0 to 256
[  176.323586][ T7125] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.428433][ T7125] 8021q: adding VLAN 0 to HW filter on device team0
[  176.461309][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  176.480117][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  176.545704][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  176.616729][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  176.664768][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.671925][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.757076][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  176.785143][ T7279] loop3: detected capacity change from 0 to 2048
[  176.797195][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  176.810813][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.818060][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.863741][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  176.898994][ T7279] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  176.931734][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  176.970591][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  176.982748][ T7284] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.005864][ T4918] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  177.012659][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  177.050151][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  177.063711][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  177.084070][ T7282] tipc: Enabling of bearer <dth:te> rejected, media not registered
[  177.109731][ T7286] sp0: Synchronizing with TNC
[  177.109798][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  177.139465][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  177.168783][ T7285] [U] è
[  177.185988][ T5154] Bluetooth: hci4: command 0x040f tx timeout
[  177.255809][ T4918] usb 2-1: Using ep0 maxpacket: 16
[  177.266477][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  177.275467][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.352924][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  177.376595][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  177.386221][ T4918] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30
[  177.410827][ T4918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.437807][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  177.479437][ T4918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  177.524779][ T7300] usb usb8: usbfs: process 7300 (syz.6.956) did not claim interface 9 before use
[  177.548670][ T4918] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  177.594913][ T4918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.632594][ T4918] usb 2-1: config 0 descriptor??
[  177.896550][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  177.924587][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  177.927460][ T7327] loop6: detected capacity change from 0 to 256
[  177.943867][ T7125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.986157][    T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  178.158980][ T4918] samsung 0003:0419:0001.0019: item fetching failed at offset 8/11
[  178.176144][ T7336] tipc: Enabling of bearer <dth:te> rejected, media not registered
[  178.185389][ T4918] samsung 0003:0419:0001.0019: parse failed
[  178.205208][ T4918] samsung: probe of 0003:0419:0001.0019 failed with error -22
[  178.386241][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.420366][    T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  178.445946][    T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00
[  178.477111][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.479131][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  178.508273][    T7] usb 3-1: config 0 descriptor??
[  178.529333][ T7354] loop3: detected capacity change from 0 to 164
[  178.536379][ T4918] usb 2-1: USB disconnect, device number 11
[  178.546556][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  178.612142][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  178.622041][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  178.648012][ T7354] iso9660: Corrupted directory entry in block 2 of inode 1920
[  178.659643][ T7125] device veth0_vlan entered promiscuous mode
[  178.676905][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  178.699763][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  178.742594][ T7125] device veth1_vlan entered promiscuous mode
[  178.840200][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  178.873841][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  178.894247][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  178.913748][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  178.915588][ T7361] loop6: detected capacity change from 0 to 4096
[  178.938906][ T7125] device veth0_macvtap entered promiscuous mode
[  178.966810][ T7125] device veth1_macvtap entered promiscuous mode
[  179.019759][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.021470][    T7] wacom 0003:056A:0026.001A: Unknown device_type for 'HID 056a:0026'. Assuming pen.
[  179.073842][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.084096][    T7] wacom 0003:056A:0026.001A: hidraw0: USB HID v10.00 Device [HID 056a:0026] on usb-dummy_hcd.2-1/input0
[  179.104153][ T7364] loop3: detected capacity change from 0 to 4096
[  179.107658][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.114439][    T7] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0026.001A/input/input20
[  179.131817][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.162933][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.174029][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.191707][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.235897][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.261007][ T7125] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.265988][ T5154] Bluetooth: hci4: command 0x0419 tx timeout
[  179.281446][ T4920] usb 3-1: USB disconnect, device number 12
[  179.295327][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  179.307118][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  179.330098][ T7361] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  179.340494][ T7364] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  179.344926][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  179.385002][ T7364] ntfs: (device loop3): ntfs_read_inode_mount(): ntfs_mapping_pairs_decompress() failed with error code -5.  $MFT is corrupt.
[  179.394458][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  179.473563][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.501680][ T7364] ntfs: (device loop3): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  179.527770][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.550525][ T7364] ntfs: (device loop3): ntfs_fill_super(): Failed to load essential metadata.
[  179.571252][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.604743][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.670943][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.697082][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.701935][ T7379] fido_id[7379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  179.756524][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.783593][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.818011][ T5324] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22.
[  179.824243][ T5324] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  179.870852][ T7125] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.928670][ T5324] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22.
[  179.942848][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  179.962312][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  179.997812][ T7125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.998648][ T7385] sp0: Synchronizing with TNC
[  180.009502][ T7125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.029593][ T7125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.040816][ T7125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.062563][ T7384] [U] è
[  180.108167][ T7395] team0: Device geneve2 is up. Set it down before adding it as a team port
[  180.402079][ T5010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.445370][ T5010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.482035][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  180.514939][ T5010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.564260][ T5010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.593012][ T7412] loop6: detected capacity change from 0 to 2048
[  180.658906][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  180.746241][ T7423] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.809801][ T7422] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  180.844619][ T7427] loop2: detected capacity change from 0 to 1024
[  181.050866][ T7436] sp0: Synchronizing with TNC
[  181.132851][ T7431] loop1: detected capacity change from 0 to 4096
[  181.220552][ T7431] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  181.241259][ T7431] ntfs: (device loop1): ntfs_read_inode_mount(): ntfs_mapping_pairs_decompress() failed with error code -5.  $MFT is corrupt.
[  181.296489][ T7431] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  181.321178][ T7431] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata.
[  181.372016][ T7456] tmpfs: Bad value for 'mpol'
[  181.633029][ T4920] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  182.061788][ T4920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  182.105118][ T4920] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  182.135786][ T4920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.167152][ T4920] usb 6-1: config 0 descriptor??
[  182.196143][ T7453] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  182.240088][ T7495] loop6: detected capacity change from 0 to 4096
[  182.248343][ T7501] tipc: Started in network mode
[  182.253232][ T7501] tipc: Node identity , cluster identity 4711
[  182.260835][ T7501] tipc: Failed to set node id, please configure manually
[  182.276129][ T7501] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  182.364081][ T7495] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512)
[  182.510292][ T7512] loop1: detected capacity change from 0 to 2048
[  182.603132][ T7512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.667688][ T4920] elan 0003:04F3:0755.001B: unknown main item tag 0x0
[  182.674720][ T4920] elan 0003:04F3:0755.001B: item fetching failed at offset 3/5
[  182.709282][ T4920] elan 0003:04F3:0755.001B: Hid Parse failed
[  182.739952][ T4920] elan: probe of 0003:04F3:0755.001B failed with error -22
[  182.835527][ T7518] loop6: detected capacity change from 0 to 4096
[  182.894853][ T7518] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  182.898160][ T5154] usb 6-1: USB disconnect, device number 9
[  183.185212][ T7535] loop3: detected capacity change from 0 to 1024
[  183.292034][ T7539] tipc: Started in network mode
[  183.300248][ T7539] tipc: Node identity , cluster identity 4711
[  183.307003][ T7539] tipc: Failed to set node id, please configure manually
[  183.315527][ T7539] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  183.501334][ T7541] loop2: detected capacity change from 0 to 2048
[  183.587547][ T5158] Bluetooth: hci2: command 0x0401 tx timeout
[  184.251621][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'.
[  184.279430][ T7564] loop2: detected capacity change from 0 to 4096
[  184.343752][ T7553] loop1: detected capacity change from 0 to 32768
[  184.371187][ T7564] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  184.463673][ T7553] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  184.512886][ T7553] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  184.558989][ T7553] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  184.673707][ T7553] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  184.996544][ T7571] loop5: detected capacity change from 0 to 32768
[  185.074129][ T7577] loop6: detected capacity change from 0 to 8192
[  185.115250][ T7571] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  185.149389][ T7591] loop2: detected capacity change from 0 to 64
[  185.225694][ T7577] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  185.240973][ T7596] loop1: detected capacity change from 0 to 1024
[  185.265919][ T7577] REISERFS (device loop6): using ordered data mode
[  185.273137][ T7577] reiserfs: using flush barriers
[  185.299408][ T7571] (syz.5.1049,7571,0):ocfs2_verify_group_and_input:420 ERROR: add a group which is in the current volume.
[  185.348815][ T7577] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  185.406336][ T7577] REISERFS (device loop6): checking transaction log (loop6)
[  185.414766][ T7571] (syz.5.1049,7571,1):ocfs2_group_add:503 ERROR: status = -22
[  185.469015][  T440] hfsplus: b-tree write err: -5, ino 4
[  185.480060][ T7125] ocfs2: Unmounting device (7,5) on (node local)
[  185.535567][ T7577] REISERFS (device loop6): Using r5 hash to sort names
[  185.594544][ T7577] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  185.705875][ T5158] Bluetooth: hci2: command 0x0401 tx timeout
[  185.785664][   T26] audit: type=1800 audit(1748913285.740:8): pid=7577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1066" name="file2" dev="loop6" ino=2 res=0 errno=0
[  186.069332][ T7608] loop2: detected capacity change from 0 to 128
[  186.216472][ T7608] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  186.246054][ T7608] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  186.318077][ T7609] loop1: detected capacity change from 0 to 4096
[  186.347525][ T7617] loop5: detected capacity change from 0 to 64
[  186.432588][ T7609] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  186.545024][ T7620] loop2: detected capacity change from 0 to 512
[  186.589825][ T7125] hfs: node 4:3 still has 1 user(s)!
[  186.593563][ T7620] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  186.632931][ T7620] EXT4-fs (loop2): 1 truncate cleaned up
[  186.632963][ T7620] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000000,inode_readahead_blks=0x0000000000000010,nobarrier,nodiscard,quota,. Quota mode: writeback.
[  186.702452][ T7589] loop3: detected capacity change from 0 to 32768
[  186.801723][ T7589] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  186.895144][ T7589] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  186.963890][ T7589] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  187.040549][ T7630] loop5: detected capacity change from 0 to 1024
[  187.136221][ T7589] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  187.193658][ T7630] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  187.392169][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1081'.
[  187.503486][ T7634] loop1: detected capacity change from 0 to 8192
[  187.594957][ T7634] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  187.645235][ T7634] REISERFS (device loop1): using ordered data mode
[  187.671876][ T7634] reiserfs: using flush barriers
[  187.696682][ T7653] loop3: detected capacity change from 0 to 128
[  187.709166][ T7634] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  187.753680][ T7634] REISERFS (device loop1): checking transaction log (loop1)
[  187.764741][ T7634] REISERFS (device loop1): Using r5 hash to sort names
[  187.775817][ T4918] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  187.796165][ T5156] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  187.814020][ T7653] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  187.819035][ T7634] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  187.866778][ T7653] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  187.882342][   T26] audit: type=1800 audit(1748913287.840:9): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1078" name="file2" dev="loop1" ino=2 res=0 errno=0
[  187.906223][ T5154] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  188.036018][ T5156] usb 6-1: Using ep0 maxpacket: 8
[  188.180424][ T4918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  188.193072][ T4918] usb 3-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00
[  188.202949][ T4918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.220722][ T4918] usb 3-1: config 0 descriptor??
[  188.270579][ T5154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  188.283966][ T5154] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  188.297061][ T5154] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.309241][ T5154] usb 7-1: config 0 descriptor??
[  188.325920][ T5156] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  188.326123][ T7651] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  188.335496][ T5156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.403265][ T5156] usb 6-1: Product: syz
[  188.414872][ T5156] usb 6-1: Manufacturer: syz
[  188.425109][ T5156] usb 6-1: SerialNumber: syz
[  188.447390][ T5156] usb 6-1: config 0 descriptor??
[  188.487962][ T5156] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  188.520425][ T5156] usb 6-1: setting power ON
[  188.525080][ T5156] dvb-usb: bulk message failed: -22 (2/0)
[  188.526109][ T7672] loop3: detected capacity change from 0 to 128
[  188.534567][ T5156] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  188.572554][ T5156] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  188.585691][ T5156] usb 6-1: media controller created
[  188.621964][ T7672] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000006,,errors=continue. Quota mode: none.
[  188.642311][ T7672] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.646581][ T5156] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  188.684534][ T5156] usb 6-1: selecting invalid altsetting 6
[  188.701583][ T5156] usb 6-1: digital interface selection failed (-22)
[  188.722513][ T7643] dvb-usb: bulk message failed: -22 (3/0)
[  188.729328][ T5156] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  188.730294][ T4918] wacom 0003:056A:00DA.001C: Unknown device_type for 'HID 056a:00da'. Assuming pen.
[  188.738602][ T7643] usb 6-1: gpio_write failed.
[  188.756146][ T7643] dvb-usb: bulk message failed: -22 (3/0)
[  188.768502][ T4918] wacom 0003:056A:00DA.001C: hidraw0: USB HID v0.00 Device [HID 056a:00da] on usb-dummy_hcd.2-1/input0
[  188.781297][ T4920] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  188.786330][ T5156] usb 6-1: setting power OFF
[  188.803909][ T4918] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00DA.001C/input/input23
[  188.815902][ T5156] dvb-usb: bulk message failed: -22 (2/0)
[  188.823130][ T5156] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  188.837745][ T5154] elan 0003:04F3:0755.001D: unknown main item tag 0x0
[  188.855542][ T5154] elan 0003:04F3:0755.001D: item fetching failed at offset 3/5
[  188.871519][ T5156] (NULL device *): no alternate interface
[  188.873940][ T5154] elan 0003:04F3:0755.001D: Hid Parse failed
[  188.921846][ T5154] elan: probe of 0003:04F3:0755.001D failed with error -22
[  188.992832][ T5154] usb 3-1: USB disconnect, device number 13
[  189.014421][ T5156] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  189.042028][ T5156] usb 6-1: USB disconnect, device number 10
[  189.067758][ T5159] usb 7-1: USB disconnect, device number 4
[  189.075990][ T4920] usb 2-1: Using ep0 maxpacket: 16
[  189.216112][ T4920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.228537][ T4920] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[  189.249604][ T4920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.276681][ T4920] usb 2-1: config 0 descriptor??
[  189.458238][ T7684] loop3: detected capacity change from 0 to 32768
[  189.538712][ T7684] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  189.582787][ T7687] loop5: detected capacity change from 0 to 512
[  189.603433][ T7684] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  189.691603][ T7687] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  189.702832][ T4172] ocfs2: Unmounting device (7,3) on (node local)
[  189.781271][ T7692] loop6: detected capacity change from 0 to 512
[  189.790656][ T4920] glorious 0003:22D4:1503.001E: unknown main item tag 0x0
[  189.807431][ T4920] glorious 0003:22D4:1503.001E: unknown main item tag 0x0
[  189.831966][ T4920] glorious 0003:22D4:1503.001E: unknown main item tag 0x0
[  189.838363][ T7687] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1100: bad orphan inode 16
[  189.850095][ T4920] glorious 0003:22D4:1503.001E: unknown main item tag 0x0
[  189.857984][ T4920] glorious 0003:22D4:1503.001E: unknown main item tag 0x0
[  189.868762][ T4920] glorious 0003:22D4:1503.001E: hidraw0: USB HID v0.05 Device [Glorious Model I] on usb-dummy_hcd.1-1/input0
[  189.882416][ T7692] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  189.923422][ T7687] ext4_test_bit(bit=15, block=18) = 1
[  189.961386][ T7687] is_bad_inode(inode)=0
[  189.966678][ T7687] NEXT_ORPHAN(inode)=65535
[  189.971350][ T7687] max_ino=32
[  189.974573][ T7687] i_nlink=0
[  189.978820][ T7687] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,minixdf,,errors=continue. Quota mode: writeback.
[  190.011662][ T4920] usb 2-1: USB disconnect, device number 12
[  190.019862][ T7687] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.398175][ T7714] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  190.816369][ T7735] loop6: detected capacity change from 0 to 512
[  190.906511][ T7743] loop1: detected capacity change from 0 to 128
[  190.984930][ T7735] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled
[  191.063995][ T7743] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000006,,errors=continue. Quota mode: none.
[  191.098618][ T7735] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.1120: bad orphan inode 16
[  191.147096][ T7743] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.165821][ T7735] ext4_test_bit(bit=15, block=18) = 1
[  191.171468][ T7735] is_bad_inode(inode)=0
[  191.175641][ T7735] NEXT_ORPHAN(inode)=65535
[  191.177447][ T7724] loop5: detected capacity change from 0 to 32768
[  191.227077][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'.
[  191.246053][ T7735] max_ino=32
[  191.249476][ T7735] i_nlink=0
[  191.253482][ T7735] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,minixdf,,errors=continue. Quota mode: writeback.
[  191.267491][ T5159] Bluetooth: hci2: command 0x0406 tx timeout
[  191.280589][ T5159] Bluetooth: hci3: command 0x0406 tx timeout
[  191.292770][ T5159] Bluetooth: hci1: command 0x0406 tx timeout
[  191.300196][ T7724] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  191.323748][ T7735] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.401668][ T7724] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  191.542343][   T26] audit: type=1326 audit(1748913291.500:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.1.1128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f803ce5e969 code=0x0
[  191.613644][ T7125] ocfs2: Unmounting device (7,5) on (node local)
[  191.719152][ T7764] loop6: detected capacity change from 0 to 64
[  191.723499][ T7745] loop2: detected capacity change from 0 to 32768
[  191.741668][ T4918] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  191.833630][ T7745] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1125 (7745)
[  191.913101][ T7745] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  191.949594][ T7745] BTRFS info (device loop2): setting nodatacow, compression disabled
[  191.984944][ T7745] BTRFS info (device loop2): setting datacow
[  191.997222][ T7745] BTRFS info (device loop2): doing ref verification
[  191.997248][ T7745] BTRFS info (device loop2): force clearing of disk cache
[  191.997293][ T7745] BTRFS info (device loop2): max_inline at 0
[  191.997315][ T7745] BTRFS info (device loop2): enabling ssd optimizations
[  191.997331][ T7745] BTRFS info (device loop2): using spread ssd allocation scheme
[  191.997361][ T7745] BTRFS info (device loop2): using free space tree
[  191.997376][ T7745] BTRFS info (device loop2): has skinny extents
[  192.016022][ T4918] usb 4-1: Using ep0 maxpacket: 16
[  192.097080][ T7745] BTRFS info (device loop2): clearing free space tree
[  192.104377][ T7745] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  192.114469][ T7745] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  192.136745][ T7745] BTRFS info (device loop2): creating free space tree
[  192.144688][ T7745] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  192.155265][ T7745] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  192.162143][ T4918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.199736][ T4918] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[  192.266284][ T4918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.274489][   T26] audit: type=1800 audit(1748913292.230:11): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1125" name="bus" dev="loop2" ino=263 res=0 errno=0
[  192.288165][ T7786] loop5: detected capacity change from 0 to 2048
[  192.332715][ T4918] usb 4-1: config 0 descriptor??
[  192.564898][ T7786] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  192.605055][ T7786] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.783353][ T7798] loop6: detected capacity change from 0 to 64
[  192.854852][ T4918] glorious 0003:22D4:1503.001F: unknown main item tag 0x0
[  192.869040][ T4918] glorious 0003:22D4:1503.001F: unknown main item tag 0x0
[  192.895808][ T4918] glorious 0003:22D4:1503.001F: unknown main item tag 0x0
[  192.931600][ T4918] glorious 0003:22D4:1503.001F: unknown main item tag 0x0
[  192.955885][ T4918] glorious 0003:22D4:1503.001F: unknown main item tag 0x0
[  192.976818][ T4918] glorious 0003:22D4:1503.001F: hidraw0: USB HID v0.05 Device [Glorious Model I] on usb-dummy_hcd.3-1/input0
[  193.071732][ T4221] usb 4-1: USB disconnect, device number 9
[  193.085031][ T7800] loop1: detected capacity change from 0 to 4096
[  193.297449][ T7807] fido_id[7807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  193.384781][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'.
[  193.523313][ T7817] loop5: detected capacity change from 0 to 64
[  193.861114][ T7820] loop3: detected capacity change from 0 to 4096
[  193.976671][   T26] audit: type=1326 audit(1748913293.920:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7823 comm="syz.2.1149" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31da0b9969 code=0x0
[  194.011585][ T7820] ntfs3: loop3: ino=21, "bus" fiemap is not supported for compressed file (cp -r)
[  194.035897][ T5154] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  194.056655][ T4172] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  194.064997][ T4172] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  194.075459][ T7815] loop1: detected capacity change from 0 to 32768
[  194.099639][ T7815] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1145 (7815)
[  194.172698][ T7815] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  194.215186][ T7815] BTRFS info (device loop1): setting nodatacow, compression disabled
[  194.241822][ T7815] BTRFS info (device loop1): setting datacow
[  194.261985][ T7815] BTRFS info (device loop1): doing ref verification
[  194.283718][ T7815] BTRFS info (device loop1): force clearing of disk cache
[  194.301429][ T7815] BTRFS info (device loop1): max_inline at 0
[  194.321043][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  194.328234][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  194.340130][ T7815] BTRFS info (device loop1): enabling ssd optimizations
[  194.359365][ T7815] BTRFS info (device loop1): using spread ssd allocation scheme
[  194.401698][ T7815] BTRFS info (device loop1): using free space tree
[  194.416127][ T5154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  194.434192][ T7815] BTRFS info (device loop1): has skinny extents
[  194.454184][ T5154] usb 6-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00
[  194.483789][ T5154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.510013][ T5154] usb 6-1: config 0 descriptor??
[  194.614057][ T7815] BTRFS info (device loop1): clearing free space tree
[  194.621310][ T7815] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  194.637874][ T7815] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  194.665598][ T7828] loop3: detected capacity change from 0 to 32768
[  194.666165][ T7815] BTRFS info (device loop1): creating free space tree
[  194.686201][ T7815] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  194.703543][ T7815] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  194.732359][ T7828] XFS (loop3): Mounting V5 Filesystem
[  194.777307][   T26] audit: type=1800 audit(1748913294.740:13): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1145" name="bus" dev="loop1" ino=263 res=0 errno=0
[  195.004994][ T4164] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop1 scanned by udevd (4164)
[  195.006465][ T7828] XFS (loop3): Ending clean mount
[  195.013353][ T7828] XFS (loop3): Quotacheck needed: Please wait.
[  195.039536][ T5154] wacom 0003:056A:00DA.0020: Unknown device_type for 'HID 056a:00da'. Assuming pen.
[  195.040952][ T5154] wacom 0003:056A:00DA.0020: hidraw0: USB HID v0.00 Device [HID 056a:00da] on usb-dummy_hcd.5-1/input0
[  195.042504][ T5154] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00DA.0020/input/input26
[  195.197820][ T7828] XFS (loop3): Quotacheck: Done.
[  195.282823][ T4221] usb 6-1: USB disconnect, device number 11
[  195.385083][ T7867] fido_id[7867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  195.630233][ T7870] loop1: detected capacity change from 0 to 512
[  195.682063][ T4172] XFS (loop3): Unmounting Filesystem
[  195.838501][ T7870] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  195.865841][ T7870] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  195.895555][ T7870] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  195.950070][ T7870] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  195.971659][ T7870] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e018, mo2=0000]
[  196.003144][ T7870] EXT4-fs (loop1): orphan cleanup on readonly fs
[  196.010922][ T7865] loop2: detected capacity change from 0 to 32768
[  196.033936][ T7870] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present
[  196.099425][ T7865] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1155 (7865)
[  196.121308][ T7870] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  196.161590][ T7870] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.1152: Failed to acquire dquot type 1
[  196.190334][ T7865] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  196.221868][ T7865] BTRFS info (device loop2): force zlib compression, level 3
[  196.241030][ T7865] BTRFS info (device loop2): force clearing of disk cache
[  196.250191][ T7865] BTRFS info (device loop2): setting nodatasum
[  196.256968][ T7865] BTRFS info (device loop2): doing ref verification
[  196.263870][ T7865] BTRFS info (device loop2): allowing degraded mounts
[  196.286863][ T7870] EXT4-fs (loop1): 1 truncate cleaned up
[  196.297326][ T7865] BTRFS info (device loop2): enabling disk space caching
[  196.311971][ T7870] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,noblock_validity,nogrpid,discard,,errors=continue. Quota mode: writeback.
[  196.358373][ T7865] BTRFS info (device loop2): disk space caching is enabled
[  196.384918][ T7865] BTRFS info (device loop2): has skinny extents
[  196.426750][ T7870] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1152: bg 0: block 34: padding at end of block bitmap is not set
[  196.484468][ T7880] loop3: detected capacity change from 0 to 4096
[  196.532041][ T7874] loop6: detected capacity change from 0 to 32768
[  196.618070][ T7874] 
[  196.618070][ T7874]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.618070][ T7874] 
[  196.682529][ T7865] BTRFS info (device loop2): enabling ssd optimizations
[  196.728091][ T7865] BTRFS info (device loop2): clearing free space tree
[  196.735230][ T7865] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  196.755151][ T5324] 
[  196.755151][ T5324]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.755151][ T5324] 
[  196.775836][ T7865] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  196.826870][ T5324] 
[  196.826870][ T5324]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.826870][ T5324] 
[  197.009546][ T7865] BTRFS info (device loop2): balance: start -d -m
[  197.044011][ T7899] loop1: detected capacity change from 0 to 8192
[  197.080558][ T7865] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[  197.145503][ T7899] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  197.264342][ T7899] REISERFS (device loop1): using ordered data mode
[  197.280455][ T7865] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata
[  197.332884][ T7899] reiserfs: using flush barriers
[  197.371539][ T7899] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  197.462001][ T7899] REISERFS (device loop1): checking transaction log (loop1)
[  197.526399][ T7865] BTRFS info (device loop2): balance: canceled
[  197.728736][ T7899] REISERFS (device loop1): Using tea hash to sort names
[  197.736686][ T7899] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  197.893766][ T7908] loop6: detected capacity change from 0 to 32768
[  198.110840][ T7915] loop3: detected capacity change from 0 to 32768
[  198.476616][ T7925] loop5: detected capacity change from 0 to 64
[  198.999753][ T7923] loop3: detected capacity change from 0 to 32768
[  199.055038][ T7923] 
[  199.055038][ T7923]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.055038][ T7923] 
[  199.090663][ T7923] ERROR: (device loop3): diWrite: ixpxd invalid
[  199.090663][ T7923] 
[  199.114715][ T7923] ERROR: (device loop3): txCommit: 
[  199.114715][ T7923] 
[  199.195915][ T4172] 
[  199.195915][ T4172]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.195915][ T4172] 
[  199.219317][ T4172] 
[  199.219317][ T4172]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.219317][ T4172] 
[  199.254447][ T7930] loop6: detected capacity change from 0 to 32768
[  199.282393][ T7927] loop1: detected capacity change from 0 to 32768
[  199.521426][ T7927] XFS (loop1): Mounting V5 Filesystem
[  199.730280][ T7927] XFS (loop1): Ending clean mount
[  199.747693][ T7927] XFS (loop1): Quotacheck needed: Please wait.
[  199.815555][ T7952] loop6: detected capacity change from 0 to 4096
[  199.940058][ T7927] XFS (loop1): Quotacheck: Done.
[  200.059088][ T7945] loop2: detected capacity change from 0 to 32768
[  200.086076][ T7953] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  200.135876][ T4171] XFS (loop1): Unmounting Filesystem
[  200.195827][ T7945] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  200.294126][ T7947] loop3: detected capacity change from 0 to 32768
[  200.324505][ T7945] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  200.327130][ T7947] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1177 (7947)
[  200.353309][ T7961] delete_channel: no stack
[  200.534053][ T7947] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  200.569816][ T4173] ocfs2: Unmounting device (7,2) on (node local)
[  200.579680][ T7947] BTRFS info (device loop3): force zlib compression, level 3
[  200.635821][ T7947] BTRFS info (device loop3): force clearing of disk cache
[  200.670002][ T7947] BTRFS info (device loop3): setting nodatasum
[  200.700309][ T7947] BTRFS info (device loop3): doing ref verification
[  200.716065][ T7964] loop6: detected capacity change from 0 to 4096
[  200.728746][ T7947] BTRFS info (device loop3): allowing degraded mounts
[  200.785476][ T7947] BTRFS info (device loop3): enabling disk space caching
[  200.843727][ T7947] BTRFS info (device loop3): disk space caching is enabled
[  200.865959][ T4221] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  200.907796][ T7947] BTRFS info (device loop3): has skinny extents
[  200.982417][ T5324] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22.
[  201.025494][ T5324] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  201.226306][ T7947] BTRFS info (device loop3): enabling ssd optimizations
[  201.268968][ T4221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  201.283149][ T7971] loop2: detected capacity change from 0 to 32768
[  201.293389][ T7947] BTRFS info (device loop3): clearing free space tree
[  201.309070][ T7947] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  201.333568][ T4221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.341427][ T7947] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  201.486777][ T4221] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  201.520529][ T4221] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  201.554011][ T4221] usb 6-1: Manufacturer: syz
[  201.581937][ T4221] usb 6-1: config 0 descriptor??
[  201.693980][ T7947] BTRFS info (device loop3): balance: start -d -m
[  201.734856][ T7947] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[  201.779209][ T7802] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  201.862257][ T7947] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata
[  201.978410][ T8011] device gtp0 entered promiscuous mode
[  201.993200][ T7947] BTRFS info (device loop3): balance: canceled
[  202.055941][ T7802] usb 7-1: Using ep0 maxpacket: 32
[  202.079910][ T4221] cougar 0003:060B:700A.0021: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  202.176170][ T7802] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.176207][ T7802] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  202.176237][ T7802] usb 7-1: config 0 interface 0 has no altsetting 0
[  202.176268][ T7802] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  202.176314][ T7802] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.178506][ T7802] usb 7-1: config 0 descriptor??
[  202.297322][ T8020] loop1: detected capacity change from 0 to 65
[  202.302464][ T4918] usb 6-1: USB disconnect, device number 12
[  202.354999][ T8020] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  202.368392][ T8018] fido_id[8018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  202.658104][ T7802] aureal 0003:0755:2626.0022: item fetching failed at offset 3/5
[  202.676160][ T7802] aureal: probe of 0003:0755:2626.0022 failed with error -22
[  202.842170][ T8030] loop2: detected capacity change from 0 to 512
[  202.882651][ T7802] usb 7-1: USB disconnect, device number 5
[  202.947612][ T8032] loop5: detected capacity change from 0 to 1024
[  202.964107][ T8030] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  203.006549][ T8030] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  203.029039][ T8030] EXT4-fs (loop2): 1 truncate cleaned up
[  203.034829][ T8030] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="errors=continue,noload,noblock_validity,grpjquota="grpquota,jqfmt=vfsold,data_err=ignore,,errors=continue. Quota mode: writeback.
[  203.047360][ T8032] EXT4-fs (loop5): Ignoring removed nobh option
[  203.062686][ T8032] EXT4-fs (loop5): Ignoring removed bh option
[  203.074256][ T8032] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  203.117847][ T8032] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1206: bad orphan inode 32767
[  203.183048][ T8032] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,noload,journal_dev=0x0000000000000009,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  203.258896][ T8028] loop3: detected capacity change from 0 to 32768
[  203.696430][ T4615] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  204.010580][ T8038] loop2: detected capacity change from 0 to 32768
[  204.116122][ T4615] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  204.132617][ T4615] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  204.162770][ T4615] usb 4-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  204.205858][ T4615] usb 4-1: config 0 interface 0 has no altsetting 0
[  204.223131][ T4615] usb 4-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00
[  204.265813][ T4615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.300160][ T4615] usb 4-1: config 0 descriptor??
[  204.347394][ T8040] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  204.354531][ T8040] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  204.437958][ T8047] loop5: detected capacity change from 0 to 40427
[  204.462707][ T8047] F2FS-fs (loop5): Invalid log sectors per block(0) log sectorsize(9)
[  204.479227][ T8047] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  204.491602][ T8055] loop6: detected capacity change from 0 to 32768
[  204.501145][ T8047] F2FS-fs (loop5): invalid crc value
[  204.529946][ T8047] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  204.626204][ T8055] XFS (loop6): Mounting V5 Filesystem
[  204.755982][ T8047] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1
[  204.774720][ T8047] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  204.822627][ T8055] XFS (loop6): Ending clean mount
[  204.841349][ T8055] XFS (loop6): Quotacheck needed: Please wait.
[  204.856402][ T4615] smartjoyplus 0003:6666:8802.0023: hidraw0: USB HID v0.00 Device [HID 6666:8802] on usb-dummy_hcd.3-1/input0
[  204.899759][ T4615] smartjoyplus 0003:6666:8802.0023: Force feedback for SmartJoy PLUS PS2/USB adapter
[  204.977556][ T8055] XFS (loop6): Quotacheck: Done.
[  205.105037][ T4615] usb 4-1: USB disconnect, device number 10
[  205.195625][ T5324] XFS (loop6): Unmounting Filesystem
[  206.051868][ T8079] loop1: detected capacity change from 0 to 32768
[  206.269502][ T8100] netlink: 'syz.2.1241': attribute type 16 has an invalid length.
[  206.815968][ T4620] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  206.970347][ T8132] loop5: detected capacity change from 0 to 128
[  207.101440][ T8132] VFS: Found a Xenix FS (block size = 512) on device loop5
[  207.131257][ T8132] attempt to access beyond end of device
[  207.131257][ T8132] loop5: rw=0, want=8767745, limit=128
[  207.133870][ T8116] loop6: detected capacity change from 0 to 40427
[  207.144315][ T8132] buffer_io_error: 4 callbacks suppressed
[  207.144334][ T8132] Buffer I/O error on dev loop5, logical block 8767744, async page read
[  207.174626][ T8132] attempt to access beyond end of device
[  207.174626][ T8132] loop5: rw=0, want=13269810, limit=128
[  207.187936][ T8132] Buffer I/O error on dev loop5, logical block 13269809, async page read
[  207.196022][ T8116] F2FS-fs (loop6): Invalid log sectors per block(0) log sectorsize(9)
[  207.205753][ T8132] attempt to access beyond end of device
[  207.205753][ T8132] loop5: rw=0, want=1158, limit=128
[  207.220791][ T8132] Buffer I/O error on dev loop5, logical block 1157, async page read
[  207.224431][ T8116] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  207.233914][ T8132] attempt to access beyond end of device
[  207.233914][ T8132] loop5: rw=0, want=3211265, limit=128
[  207.252693][ T8132] Buffer I/O error on dev loop5, logical block 3211264, async page read
[  207.261833][ T8132] attempt to access beyond end of device
[  207.261833][ T8132] loop5: rw=0, want=8768636, limit=128
[  207.273978][ T4620] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  207.277504][ T8132] Buffer I/O error on dev loop5, logical block 8768635, async page read
[  207.291341][ T4620] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  207.309415][ T4620] usb 3-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  207.318983][ T8116] F2FS-fs (loop6): invalid crc value
[  207.323538][ T4620] usb 3-1: config 0 interface 0 has no altsetting 0
[  207.332546][ T8132] attempt to access beyond end of device
[  207.332546][ T8132] loop5: rw=0, want=13466418, limit=128
[  207.336161][ T4620] usb 3-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00
[  207.362797][ T8132] Buffer I/O error on dev loop5, logical block 13466417, async page read
[  207.363406][ T4620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.374048][ T8132] attempt to access beyond end of device
[  207.374048][ T8132] loop5: rw=0, want=209286, limit=128
[  207.390487][ T4620] usb 3-1: config 0 descriptor??
[  207.400748][ T8132] Buffer I/O error on dev loop5, logical block 209285, async page read
[  207.410115][ T8116] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  207.427670][ T8114] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  207.438021][ T8132] attempt to access beyond end of device
[  207.438021][ T8132] loop5: rw=0, want=8767745, limit=128
[  207.444565][ T8114] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  207.465921][ T8132] Buffer I/O error on dev loop5, logical block 8767744, async page read
[  207.475017][ T8132] attempt to access beyond end of device
[  207.475017][ T8132] loop5: rw=0, want=13269810, limit=128
[  207.493703][ T8132] Buffer I/O error on dev loop5, logical block 13269809, async page read
[  207.500176][ T8116] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1
[  207.505103][ T8132] attempt to access beyond end of device
[  207.505103][ T8132] loop5: rw=0, want=1158, limit=128
[  207.518507][ T8116] F2FS-fs (loop6): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  207.523746][ T8132] Buffer I/O error on dev loop5, logical block 1157, async page read
[  207.604315][ T7125] sysv_free_block: trying to free block not in datazone
[  207.615547][ T7125] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  207.723944][ T8141] loop1: detected capacity change from 0 to 1024
[  207.743245][ T8143] loop5: detected capacity change from 0 to 128
[  207.815918][ T8143] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  207.857427][ T8141] hfsplus: bad catalog entry type
[  207.902141][ T8143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.929545][ T4620] smartjoyplus 0003:6666:8802.0024: hidraw0: USB HID v0.00 Device [HID 6666:8802] on usb-dummy_hcd.2-1/input0
[  207.996002][ T4620] smartjoyplus 0003:6666:8802.0024: Force feedback for SmartJoy PLUS PS2/USB adapter
[  208.027481][  T440] hfsplus: b-tree write err: -5, ino 4
[  208.123960][ T8150] loop1: detected capacity change from 0 to 128
[  208.202477][ T4615] usb 3-1: USB disconnect, device number 14
[  208.242496][ T8150] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  208.277832][ T8150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.383418][ T8161] fido_id[8161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  208.449582][ T8166] netlink: 'syz.6.1257': attribute type 16 has an invalid length.
[  209.165917][ T4620] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  209.170556][ T8160] loop3: detected capacity change from 0 to 32768
[  209.200963][   T26] audit: type=1800 audit(1748913309.160:14): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1271" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  209.455803][ T4620] usb 2-1: Using ep0 maxpacket: 32
[  209.521492][ T8172] loop5: detected capacity change from 0 to 32768
[  209.645117][ T4620] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  209.681727][ T4620] usb 2-1: config 0 has no interface number 0
[  209.703219][ T4620] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  209.731529][ T4620] usb 2-1: config 0 interface 126 has no altsetting 0
[  209.973849][ T4620] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  209.986197][ T4620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.010271][ T4620] usb 2-1: Product: syz
[  210.028123][ T4620] usb 2-1: Manufacturer: syz
[  210.033696][ T4620] usb 2-1: SerialNumber: syz
[  210.055152][ T4620] usb 2-1: config 0 descriptor??
[  210.061661][ T8172] JBD2: Ignoring recovery information on journal
[  210.061681][ T8172] JBD2: corrupted journal superblock
[  210.061689][ T8172] JBD2: error -117 scanning journal
[  210.061701][ T8172] (syz.5.1260,8172,0):ocfs2_journal_wipe:1154 ERROR: status = -117
[  210.061727][ T8172] (syz.5.1260,8172,0):ocfs2_check_volume:2424 ERROR: status = -117
[  210.061751][ T8172] (syz.5.1260,8172,0):ocfs2_check_volume:2493 ERROR: status = -117
[  210.061774][ T8172] (syz.5.1260,8172,0):ocfs2_mount_volume:1824 ERROR: status = -117
[  210.077054][ T8172] (syz.5.1260,8172,0):ocfs2_fill_super:1177 ERROR: status = -117
[  210.277263][ T8180] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  210.560536][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1260'.
[  210.983716][ T8231] loop6: detected capacity change from 0 to 1024
[  211.160834][ T8239] loop2: detected capacity change from 0 to 256
[  211.189831][ T4620] ir_usb 2-1:0.126: required endpoints missing
[  211.286421][ T4620] usb 2-1: USB disconnect, device number 13
[  211.357158][  T440] hfsplus: b-tree write err: -5, ino 4
[  211.565238][ T8249] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1298'.
[  211.725195][ T8251] loop5: detected capacity change from 0 to 512
[  211.955942][ T8251] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  212.013624][ T8251] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  212.093371][ T8251] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  212.119340][ T8251] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  212.131024][ T8251] System zones: 0-2, 18-18, 34-34
[  212.191615][ T8251] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  212.255269][ T8245] loop6: detected capacity change from 0 to 32768
[  212.324971][ T8251] EXT4-fs (loop5): 1 truncate cleaned up
[  212.358689][ T8251] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  212.377126][ T8245] JBD2: Ignoring recovery information on journal
[  212.428318][ T8245] JBD2: corrupted journal superblock
[  212.473563][ T8245] JBD2: error -117 scanning journal
[  212.481980][ T8245] (syz.6.1294,8245,1):ocfs2_journal_wipe:1154 ERROR: status = -117
[  212.510817][ T8245] (syz.6.1294,8245,1):ocfs2_check_volume:2424 ERROR: status = -117
[  212.522891][ T8241] loop3: detected capacity change from 0 to 40427
[  212.541793][ T8245] (syz.6.1294,8245,0):ocfs2_check_volume:2493 ERROR: status = -117
[  212.555320][ T8245] (syz.6.1294,8245,0):ocfs2_mount_volume:1824 ERROR: status = -117
[  212.589743][ T8245] (syz.6.1294,8245,0):ocfs2_fill_super:1177 ERROR: status = -117
[  212.606499][ T4620] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  212.607269][ T8241] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  212.696699][ T8241] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  212.796454][ T8241] F2FS-fs (loop3): invalid crc value
[  212.985148][ T8241] F2FS-fs (loop3): Found nat_bits in checkpoint
[  213.059588][ T8263] loop5: detected capacity change from 0 to 512
[  213.176684][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1294'.
[  213.242142][ T8241] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  213.256477][ T8241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  213.276465][ T4620] usb 2-1: not running at top speed; connect to a high speed hub
[  213.417735][ T4620] usb 2-1: config 95 has an invalid interface number: 1 but max is 0
[  213.426850][  T154] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  213.428301][ T4620] usb 2-1: config 95 has no interface number 0
[  213.452725][  T154] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  213.480432][ T4620] usb 2-1: config 95 interface 1 has no altsetting 0
[  213.933161][ T4620] usb 2-1: string descriptor 0 read error: -22
[  213.941465][ T4620] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[  213.992165][ T4620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.231552][ T8288] loop3: detected capacity change from 0 to 2048
[  214.332290][ T8293] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.370953][ T8288] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5
[  214.405405][ T8288] Remounting filesystem read-only
[  214.422088][ T8296] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5
[  214.563919][ T4620] usb 2-1: USB disconnect, device number 14
[  214.602088][ T4615] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  215.041600][ T4615] usb 3-1: Using ep0 maxpacket: 32
[  215.100896][ T8305] loop3: detected capacity change from 0 to 32768
[  215.128526][ T8263] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  215.191529][ T8263] EXT4-fs (loop5): 1 truncate cleaned up
[  215.300615][ T4615] usb 3-1: config 0 has an invalid interface number: 126 but max is 0
[  215.304001][ T8263] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,data_err=ignore,,errors=continue. Quota mode: none.
[  215.332921][ T4615] usb 3-1: config 0 has no interface number 0
[  215.371163][ T4615] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  215.424994][ T4615] usb 3-1: config 0 interface 126 has no altsetting 0
[  215.737246][ T4615] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  215.751474][ T4615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.777824][ T4615] usb 3-1: Product: syz
[  215.783541][ T4615] usb 3-1: Manufacturer: syz
[  215.802040][ T4615] usb 3-1: SerialNumber: syz
[  215.869928][ T4615] usb 3-1: config 0 descriptor??
[  215.881272][ T8331] loop5: detected capacity change from 0 to 2048
[  215.964282][ T8286] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  216.397787][ T8340] loop6: detected capacity change from 0 to 64
[  216.670823][ T4615] ir_usb 3-1:0.126: required endpoints missing
[  216.731812][ T4615] usb 3-1: USB disconnect, device number 15
[  216.886639][ T8336] loop1: detected capacity change from 0 to 32768
[  217.274862][ T8342] capability: warning: `syz.2.1334' uses 32-bit capabilities (legacy support in use)
[  218.591012][ T8350] loop2: detected capacity change from 0 to 32768
[  218.599417][ T8351] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.683353][ T8336] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1330 (8336)
[  220.713795][ T8336] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  220.748254][ T8336] BTRFS info (device loop1): force zlib compression, level 3
[  220.770246][ T8336] BTRFS info (device loop1): force clearing of disk cache
[  220.793049][ T8336] BTRFS info (device loop1): setting nodatasum
[  220.832805][ T8336] BTRFS info (device loop1): doing ref verification
[  220.854485][ T8336] BTRFS info (device loop1): allowing degraded mounts
[  220.882302][ T8336] BTRFS info (device loop1): enabling disk space caching
[  220.892397][ T8336] BTRFS info (device loop1): disk space caching is enabled
[  220.911525][ T8354] loop5: detected capacity change from 0 to 1024
[  220.917614][ T8336] BTRFS info (device loop1): has skinny extents
[  221.105514][ T8357] overlayfs: option "workdir=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  221.105863][ T8357] overlayfs: missing 'lowerdir'
[  221.979273][ T8373] loop6: detected capacity change from 0 to 512
[  223.528510][  T144] hfsplus: b-tree write err: -5, ino 4
[  223.710968][ T2240] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  224.190880][ T8336] BTRFS error (device loop1): open_ctree failed: -12
[  224.327963][ T2240] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  224.342118][ T2240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.416163][ T2240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.447253][ T2240] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  224.525780][ T2240] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  224.542143][ T8373] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  224.565852][ T2240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.624807][ T8373] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  224.642421][ T2240] usb 4-1: config 0 descriptor??
[  224.782096][ T8373] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[  224.872472][ T8373] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  224.891038][ T8373] System zones: 0-2, 18-18, 34-34
[  224.986241][ T8373] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  225.036586][ T8373] EXT4-fs (loop6): 1 truncate cleaned up
[  225.055379][ T8373] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  225.264866][ T2240] hid-picolcd 0003:04D8:C002.0025: item fetching failed at offset 3/7
[  225.283098][ T2240] hid-picolcd 0003:04D8:C002.0025: device report parse failed
[  225.310547][ T2240] hid-picolcd: probe of 0003:04D8:C002.0025 failed with error -22
[  225.552007][ T4918] usb 4-1: USB disconnect, device number 11
[  226.828879][ T8402] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1359'.
[  228.294645][ T8451] loop1: detected capacity change from 0 to 512
[  228.481004][ T8458] loop2: detected capacity change from 0 to 128
[  228.754477][ T8457] loop3: detected capacity change from 0 to 8192
[  231.003790][ T8458] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  231.029636][ T4620] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  231.094633][ T8458] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  231.445865][ T8457] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  231.458221][  T440] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  231.473733][ T8457] REISERFS (device loop3): using ordered data mode
[  231.535426][ T8457] reiserfs: using flush barriers
[  231.635581][ T8457] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  231.688457][ T4620] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.701799][ T4620] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.728248][ T4620] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  231.745206][ T4620] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.788427][ T8457] REISERFS (device loop3): checking transaction log (loop3)
[  231.811423][ T4620] usb 6-1: config 0 descriptor??
[  231.944321][ T8457] REISERFS (device loop3): Using r5 hash to sort names
[  231.955308][ T8457] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  232.364407][ T4620] hid-retrode 0003:0403:97C1.0026: bogus close delimiter
[  232.373249][ T4620] hid-retrode 0003:0403:97C1.0026: item 0 0 2 10 parsing failed
[  232.396778][ T4620] hid-retrode: probe of 0003:0403:97C1.0026 failed with error -22
[  232.613231][ T4620] usb 6-1: USB disconnect, device number 13
[  233.243839][ T8465] loop5: detected capacity change from 0 to 256
[  233.526615][ T8451] EXT4-fs: failed to create workqueue
[  233.532038][ T8451] EXT4-fs (loop1): mount failed
[  234.214181][ T8478] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1389'.
[  234.270058][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1389'.
[  234.750513][ T7802] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  234.786888][ T8486] loop6: detected capacity change from 0 to 4096
[  235.847546][ T7802] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  235.857797][ T7802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.893603][ T7802] usb 3-1: Product: syz
[  235.898134][ T7802] usb 3-1: Manufacturer: syz
[  235.902864][ T7802] usb 3-1: SerialNumber: syz
[  235.914411][ T7802] r8152-cfgselector 3-1: config 0 descriptor??
[  236.260345][ T7802] r8152-cfgselector 3-1: Unknown version 0x0000
[  236.560843][ T7802] r8152-cfgselector 3-1: Unknown version 0x0000
[  236.611404][ T7802] r8152-cfgselector 3-1: USB disconnect, device number 16
[  237.049834][ T8465] FAT-fs (loop5): Directory bread(block 64) failed
[  237.056706][ T8465] FAT-fs (loop5): Directory bread(block 65) failed
[  237.063426][ T8465] FAT-fs (loop5): Directory bread(block 66) failed
[  237.084160][ T8465] FAT-fs (loop5): Directory bread(block 67) failed
[  237.109057][ T8465] FAT-fs (loop5): Directory bread(block 68) failed
[  237.130765][ T8465] FAT-fs (loop5): Directory bread(block 69) failed
[  237.160180][ T8465] FAT-fs (loop5): Directory bread(block 70) failed
[  237.167288][ T8465] FAT-fs (loop5): Directory bread(block 71) failed
[  237.187304][ T8465] FAT-fs (loop5): Directory bread(block 72) failed
[  237.212025][ T8465] FAT-fs (loop5): Directory bread(block 73) failed
[  237.216684][ T8490] ucma_write: process 638 (syz.2.1395) changed security contexts after opening file descriptor, this is not allowed.
[  238.369698][ T8516] loop3: detected capacity change from 0 to 512
[  238.592571][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1408'.
[  238.927864][ T8504] loop2: detected capacity change from 0 to 32768
[  239.138561][ T8526] loop1: detected capacity change from 0 to 64
[  241.044239][ T8516] EXT4-fs (loop3): 1 orphan inode deleted
[  241.050152][ T8516] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  241.074975][ T8516] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.825486][ T8531] loop6: detected capacity change from 0 to 1024
[  243.451491][ T8533] loop3: detected capacity change from 0 to 64
[  243.729134][ T8537] loop1: detected capacity change from 0 to 8192
[  244.320143][ T8541] netlink: 110 bytes leftover after parsing attributes in process `syz.5.1417'.
[  244.329394][ T8541] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1417'.
[  245.246845][ T8543] loop5: detected capacity change from 0 to 32768
[  245.723574][  T440] hfsplus: b-tree write err: -5, ino 4
[  246.529896][ T8545] 9pnet: p9_fd_create_unix (8545): problem connecting socket: éq‰Y’3aK: -111
[  247.438468][ T4910] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  247.865736][ T4910] usb 3-1: Using ep0 maxpacket: 32
[  248.075815][ T4910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.092270][ T4910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.102702][ T4910] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  248.132578][ T4910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.182813][ T4910] usb 3-1: config 0 descriptor??
[  248.399039][ T8561] loop3: detected capacity change from 0 to 4096
[  248.484953][ T8561] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  248.796249][ T4910] sunplus 0003:04FC:05D8.0027: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0
[  249.080757][ T8563] loop6: detected capacity change from 0 to 32768
[  249.089089][ T4910] usb 3-1: USB disconnect, device number 17
[  249.546498][ T8567] loop1: detected capacity change from 0 to 32768
[  250.436228][ T8569] loop2: detected capacity change from 0 to 32768
[  250.481437][ T8561] ntfs3: loop3: failed to convert "c46c" to cp865
[  252.794501][ T8569] XFS (loop2): Mounting V5 Filesystem
[  252.837795][ T8580] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  252.857175][ T8574] loop3: detected capacity change from 0 to 8192
[  252.921321][ T8569] XFS (loop2): log mount failed
[  254.636078][ T8597] loop5: detected capacity change from 0 to 32768
[  255.272688][ T8605] loop6: detected capacity change from 0 to 32768
[  255.766241][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  255.772792][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  255.846938][ T8613] loop1: detected capacity change from 0 to 32768
[  258.692052][ T8628] loop2: detected capacity change from 0 to 64
[  258.848437][ T8621] loop3: detected capacity change from 0 to 32768
[  260.434184][ T8638] loop6: detected capacity change from 0 to 512
[  260.799709][ T8640] loop1: detected capacity change from 0 to 4096
[  261.955471][ T8645] loop5: detected capacity change from 0 to 256
[  262.520380][ T8638] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  262.679123][ T8638] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 2: comm syz.6.1461: invalid block
[  262.742970][ T8640] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  262.765908][ T8638] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1461: invalid indirect mapped block 10 (level 1)
[  262.831613][ T8638] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1461: invalid indirect mapped block 8 (level 1)
[  262.912498][ T8638] EXT4-fs (loop6): 1 truncate cleaned up
[  262.920889][ T8638] EXT4-fs (loop6): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x0000000000000000,,errors=continue. Quota mode: none.
[  263.872210][ T8662] loop2: detected capacity change from 0 to 4096
[  264.035554][ T8666] loop3: detected capacity change from 0 to 1024
[  264.318408][ T8645] exfat: Deprecated parameter 'utf8'
[  264.323887][ T8645] exfat: Deprecated parameter 'namecase'
[  264.359401][ T8645] exfat: Deprecated parameter 'namecase'
[  264.365187][ T8645] exfat: Deprecated parameter 'utf8'
[  266.224618][ T8677] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  266.340280][ T8666] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,data_err=ignore,,errors=continue. Quota mode: writeback.
[  267.228534][   T26] audit: type=1800 audit(1748913367.190:15): pid=8695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1486" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  267.687425][ T8645] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  268.039413][ T8700] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1489'.
[  268.049896][ T8699] delete_channel: no stack
[  268.907479][ T8713] device ip6_vti0 entered promiscuous mode
[  269.643114][ T8731] loop3: detected capacity change from 0 to 128
[  269.801520][ T8733] loop6: detected capacity change from 0 to 1024
[  270.441810][ T8749] binder: 8748:8749 ioctl c0306201 200000000080 returned -22
[  270.723875][ T8753] loop2: detected capacity change from 0 to 4096
[  271.453471][ T8751] loop1: detected capacity change from 0 to 40427
[  272.197067][ T8733] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  272.348597][ T8733] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback.
[  272.557656][ T8733] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2755: inode #2: comm syz.6.1501: corrupted in-inode xattr
[  272.713012][ T8733] EXT4-fs (loop6): Remounting filesystem read-only
[  272.720629][ T8733] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2825: Unable to expand inode 2. Delete some EAs or run e2fsck.
[  272.797362][ T8759] loop5: detected capacity change from 0 to 4096
[  273.069873][ T8753] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  273.206396][ T5158] Bluetooth: hci0: command 0x0406 tx timeout
[  275.008098][ T8759] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  275.163496][ T8764] loop3: detected capacity change from 0 to 32768
[  275.207185][ T8759] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  275.225769][ T8759] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  276.051967][ T8759] ntfs: volume version 3.1.
[  276.438304][ T8783] loop6: detected capacity change from 0 to 32768
[  278.441951][ T8783] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.1516 (8783)
[  279.251899][ T8788] loop2: detected capacity change from 0 to 8192
[  280.279485][ T4620] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  280.395060][ T8783] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  280.432541][ T8783] BTRFS info (device loop6): force zlib compression, level 3
[  280.442680][ T8783] BTRFS info (device loop6): force clearing of disk cache
[  280.462772][ T8783] BTRFS info (device loop6): setting nodatasum
[  280.517295][ T8783] BTRFS info (device loop6): allowing degraded mounts
[  280.524136][ T8783] BTRFS info (device loop6): enabling disk space caching
[  280.546384][ T8783] BTRFS info (device loop6): disk space caching is enabled
[  280.554076][ T8783] BTRFS info (device loop6): has skinny extents
[  280.974094][ T4620] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  280.984376][ T4620] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  281.158421][ T4620] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  281.167726][ T4620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  281.189593][ T4620] usb 4-1: SerialNumber: syz
[  281.272662][ T4620] usb 4-1: 0:2 : does not exist
[  281.277923][ T4620] usb 4-1: unit 101 not found!
[  281.617770][ T8822] loop5: detected capacity change from 0 to 1024
[  281.640875][ T4620] usb 4-1: USB disconnect, device number 12
[  281.708928][ T8788] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  281.720189][ T8788] REISERFS (device loop2): using ordered data mode
[  281.790602][ T8788] reiserfs: using flush barriers
[  281.848195][ T8788] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  281.899812][ T8788] REISERFS (device loop2): checking transaction log (loop2)
[  282.067188][ T8788] REISERFS (device loop2): Using r5 hash to sort names
[  282.074536][ T8788] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  282.113412][ T8788] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  283.216795][ T8783] BTRFS error (device loop6): open_ctree failed: -12
[  283.947240][ T8822] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1525'.
[  284.880147][ T4613] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  285.508715][ T4613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.525731][ T4613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.576061][ T4613] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  285.597924][ T4613] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  285.642520][ T4613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.709686][ T4613] usb 2-1: config 0 descriptor??
[  286.098856][ T4910] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  286.239816][ T4613] plantronics 0003:047F:FFFF.0028: unbalanced collection at end of report description
[  286.274479][ T4613] plantronics 0003:047F:FFFF.0028: parse failed
[  286.293496][ T4613] plantronics: probe of 0003:047F:FFFF.0028 failed with error -22
[  286.504220][ T4910] usb 7-1: Using ep0 maxpacket: 8
[  286.523489][ T2240] usb 2-1: USB disconnect, device number 15
[  286.750321][ T4910] usb 7-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  286.795726][ T4910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  286.825740][ T4910] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 129
[  286.870400][ T4910] usb 7-1: config 0 has no interface number 0
[  286.876913][ T4910] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  286.905729][ T4910] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  286.939672][ T4910] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  286.978010][ T4910] usb 7-1: config 0 interface 52 has no altsetting 0
[  287.126721][ T4910] usb 7-1: New USB device found, idVendor=06cb, idProduct=0002, bcdDevice=e8.00
[  287.150499][ T4613] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  287.152120][ T4910] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  287.170497][   T26] audit: type=1326 audit(1748913387.130:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.1.1534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f803ce5e969 code=0x0
[  287.245734][ T4910] usb 7-1: Manufacturer: syz
[  287.258002][ T4910] usb 7-1: config 0 descriptor??
[  287.605055][ T4910] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input29
[  287.616096][ T3534] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  287.632636][ T8835] loop5: detected capacity change from 0 to 32768
[  287.658159][ T3534] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  287.718652][ T3534] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  287.729842][ T3534] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  287.831529][ T4613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.850194][ T8831] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  287.858918][ T4613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.905091][ T4613] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  287.941491][ T4613] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  287.965513][ T4613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.019552][ T4613] usb 4-1: config 0 descriptor??
[  288.073936][ T4918] usb 7-1: USB disconnect, device number 6
[  288.525068][ T4910] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  288.555656][ T8847] loop2: detected capacity change from 0 to 512
[  288.579386][ T4613] plantronics 0003:047F:FFFF.0029: unbalanced collection at end of report description
[  288.591865][ T4613] plantronics 0003:047F:FFFF.0029: parse failed
[  288.638431][ T8849] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1537'.
[  288.654065][ T4613] plantronics: probe of 0003:047F:FFFF.0029 failed with error -22
[  288.834221][ T4918] usb 4-1: USB disconnect, device number 13
[  288.948641][ T4910] usb 2-1: Using ep0 maxpacket: 32
[  289.152293][ T4910] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  289.161855][ T4910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.173300][ T4910] usb 2-1: config 0 descriptor??
[  289.181916][ T8851] loop6: detected capacity change from 0 to 4096
[  289.719618][ T4910] uclogic 0003:5543:0005.002A: unknown main item tag 0x1
[  289.750992][ T4910] uclogic 0003:5543:0005.002A: No inputs registered, leaving
[  289.794227][ T4910] uclogic 0003:5543:0005.002A: hidraw0: USB HID v0.f5 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0
[  289.973691][ T4613] usb 2-1: USB disconnect, device number 16
[  290.813804][ T8847] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  291.018753][ T8847] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1536: invalid block
[  291.115565][ T8847] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1536: invalid indirect mapped block 4294967295 (level 1)
[  291.169146][ T8847] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1536: invalid indirect mapped block 4294967295 (level 1)
[  291.280839][ T8847] EXT4-fs (loop2): 2 truncates cleaned up
[  291.286774][ T8847] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback.
[  291.368070][ T8869] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  291.404089][ T8847] EXT4-fs warning (device loop2): ext4_resize_begin:73: won't resize using backup superblock at 1
[  291.550105][ T8851] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  292.096883][ T7802] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  292.922311][ T7802] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  292.933533][ T7802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.941986][ T7802] usb 2-1: Product: syz
[  292.946629][ T7802] usb 2-1: Manufacturer: syz
[  292.965509][ T7802] usb 2-1: SerialNumber: syz
[  292.972942][ T7802] usb 2-1: config 0 descriptor??
[  293.054484][ T7802] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  293.800725][ T7802] gspca_sunplus: reg_r err -71
[  293.812813][ T7802] sunplus: probe of 2-1:0.0 failed with error -71
[  293.893022][ T7802] usb 2-1: USB disconnect, device number 17
[  294.551123][ T8891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1558'.
[  294.599236][ T2240] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  295.071563][ T8910] loop1: detected capacity change from 0 to 1024
[  295.129115][ T8912] loop2: detected capacity change from 0 to 512
[  295.239874][ T8914] loop5: detected capacity change from 0 to 2048
[  295.451912][ T2240] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4
[  295.462444][ T2240] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0
[  295.507656][ T2240] usb 4-1: Manufacturer: syz
[  295.533219][ T2240] usb 4-1: config 0 descriptor??
[  296.110294][ T2240] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  296.349886][ T2240] gs_usb 4-1:0.0: Couldn't get bit timing const for channel (err=-71)
[  296.381808][ T2240] gs_usb: probe of 4-1:0.0 failed with error -71
[  296.456504][ T2240] usb 4-1: USB disconnect, device number 14
[  297.624007][ T8914] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  297.673052][ T8912] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback.
[  297.677968][ T8917] loop3: detected capacity change from 0 to 32768
[  297.733177][ T8912] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.860142][ T8922] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  297.889756][  T144] hfsplus: b-tree write err: -5, ino 4
[  298.204365][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  298.236635][ T8914] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  298.272397][ T8914] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  298.290732][ T8930] nbd: must specify a size in bytes for the device
[  298.481085][ T8914] Remounting filesystem read-only
[  298.550730][ T8928] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  298.585888][   T26] audit: type=1800 audit(1748913398.550:17): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1568" name="file3" dev="loop5" ino=16 res=0 errno=0
[  298.613238][ T8928] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16)
[  298.667667][ T8928] NILFS (loop5): error -5 truncating bmap (ino=16)
[  298.748706][ T7125] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  299.285320][ T7802] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  299.876399][ T7802] usb 7-1: config 7 has an invalid interface number: 101 but max is 0
[  299.884621][ T7802] usb 7-1: config 7 has no interface number 0
[  299.891174][ T7802] usb 7-1: config 7 interface 101 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  300.083413][ T8917] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  300.145956][ T8917] XFS (loop3): log mount failed
[  300.155926][ T7802] usb 7-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  300.165850][ T7802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.174253][ T7802] usb 7-1: Product: syz
[  300.191753][ T7802] usb 7-1: Manufacturer: syz
[  300.225617][ T7802] usb 7-1: SerialNumber: syz
[  300.584740][ T8951] loop2: detected capacity change from 0 to 256
[  300.767101][ T7802] as10x_usb: device has been detected
[  300.772937][ T7802] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  300.847727][ T7802] usb 7-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  300.971612][ T8960] autofs4:pid:8960:autofs_fill_super: called with bogus options
[  301.009729][ T7802] as10x_usb: error during firmware upload part1
[  301.017366][ T7802] Registered device Elgato EyeTV DTT Deluxe
[  301.051405][ T7802] usb 7-1: USB disconnect, device number 7
[  301.150423][ T7802] Unregistered device Elgato EyeTV DTT Deluxe
[  301.152325][ T7802] as10x_usb: device has been disconnected
[  301.398684][ T8967] loop6: detected capacity change from 0 to 4096
[  301.644655][ T8977] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1590'.
[  301.770431][ T8979] loop5: detected capacity change from 0 to 1024
[  302.768938][ T8974] loop1: detected capacity change from 0 to 40427
[  307.160325][ T9005] loop3: detected capacity change from 0 to 256
[  307.770440][ T9019] loop1: detected capacity change from 0 to 256
[  308.027733][ T4620] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  308.704117][ T4620] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.733948][ T4620] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.743958][ T4620] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  308.787817][ T4620] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.812622][ T4620] usb 7-1: config 0 descriptor??
[  309.368338][ T4620] playstation 0003:054C:0DF2.002B: unknown main item tag 0x0
[  309.377395][ T4620] playstation 0003:054C:0DF2.002B: unknown main item tag 0x0
[  309.419733][ T4620] playstation 0003:054C:0DF2.002B: unknown main item tag 0x0
[  309.429568][ T4620] playstation 0003:054C:0DF2.002B: unknown main item tag 0x0
[  309.456524][ T4620] playstation 0003:054C:0DF2.002B: unknown main item tag 0x0
[  309.500549][ T4620] playstation 0003:054C:0DF2.002B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0
[  309.662392][ T4620] playstation 0003:054C:0DF2.002B: Failed to retrieve feature with reportID 9: -71
[  309.678380][ T4620] playstation 0003:054C:0DF2.002B: Failed to retrieve DualSense pairing info: -71
[  309.718355][ T4620] playstation 0003:054C:0DF2.002B: Failed to get MAC address from DualSense
[  309.728520][ T4620] playstation 0003:054C:0DF2.002B: Failed to create dualsense.
[  309.747295][ T4620] playstation: probe of 0003:054C:0DF2.002B failed with error -71
[  309.834203][ T4620] usb 7-1: USB disconnect, device number 8
[  309.840515][ T9019] exfat: Deprecated parameter 'utf8'
[  309.846148][ T9019] exfat: Deprecated parameter 'utf8'
[  310.627248][ T9019] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d)
[  312.603810][ T9039] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1623'.
[  312.619418][ T9037] loop3: detected capacity change from 0 to 32768
[  312.716809][    C1] ==================================================================
[  312.725618][    C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150
[  312.733548][    C1] Read of size 2 at addr ffff8880634e8940 by task ksoftirqd/1/20
[  312.741287][    C1] 
[  312.743639][    C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.184-syzkaller #0
[  312.752224][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  312.763564][    C1] Call Trace:
[  312.767218][    C1]  <TASK>
[  312.770343][    C1]  dump_stack_lvl+0x168/0x230
[  312.775063][    C1]  ? show_regs_print_info+0x20/0x20
[  312.780956][    C1]  ? _printk+0xcc/0x110
[  312.785334][    C1]  ? __nft_trace_packet+0x135/0x150
[  312.791355][    C1]  ? load_image+0x3b0/0x3b0
[  312.796274][    C1]  ? nft_synproxy_do_eval+0x341/0x570
[  312.802344][    C1]  print_address_description+0x60/0x2d0
[  312.808152][    C1]  ? __nft_trace_packet+0x135/0x150
[  312.814005][    C1]  kasan_report+0xdf/0x130
[  312.818552][    C1]  ? __nft_trace_packet+0x135/0x150
[  312.824223][    C1]  __nft_trace_packet+0x135/0x150
[  312.829462][    C1]  nft_do_chain+0x120e/0x1420
[  312.834442][    C1]  ? mark_lock+0x94/0x320
[  312.838820][    C1]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  312.844832][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  312.851883][    C1]  ? rcu_lock_release+0x5/0x20
[  312.857307][    C1]  ? ipt_do_table+0x138e/0x1580
[  312.863107][    C1]  nft_do_chain_inet+0x22b/0x300
[  312.868714][    C1]  ? nft_do_chain_arp+0xe0/0xe0
[  312.873652][    C1]  ? nf_nat_ipv4_local_in+0x209/0x5b0
[  312.879822][    C1]  ? nft_do_chain_arp+0xe0/0xe0
[  312.884980][    C1]  nf_hook_slow+0xb9/0x200
[  312.889434][    C1]  ? NF_HOOK+0x360/0x360
[  312.893808][    C1]  NF_HOOK+0x1cb/0x360
[  312.898015][    C1]  ? NF_HOOK+0x360/0x360
[  312.902379][    C1]  ? ip_local_deliver+0x1a0/0x1a0
[  312.907408][    C1]  ? ip_rcv_finish_core+0xd8b/0x1bc0
[  312.912957][    C1]  ? NF_HOOK+0x360/0x360
[  312.917397][    C1]  ? ip_local_deliver+0x11e/0x1a0
[  312.922507][    C1]  ? ip_rcv_core+0xb60/0xb60
[  312.927528][    C1]  NF_HOOK+0x2d6/0x360
[  312.931638][    C1]  ? ip_rcv_core+0xb60/0xb60
[  312.936283][    C1]  ? ip_local_deliver+0x1a0/0x1a0
[  312.941316][    C1]  ? ip_rcv_core+0xb60/0xb60
[  312.945910][    C1]  ? ip_local_deliver_finish+0x320/0x320
[  312.951544][    C1]  ? ip_local_deliver_finish+0x320/0x320
[  312.957181][    C1]  __netif_receive_skb+0xcc/0x290
[  312.962398][    C1]  process_backlog+0x364/0x780
[  312.967179][    C1]  ? rps_trigger_softirq+0x210/0x210
[  312.972462][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  312.978446][    C1]  ? lock_chain_count+0x20/0x20
[  312.983298][    C1]  ? rcu_is_watching+0x11/0xa0
[  312.988059][    C1]  __napi_poll+0xc0/0x430
[  312.992389][    C1]  ? net_rx_action+0x2db/0x9c0
[  312.997239][    C1]  net_rx_action+0x4a8/0x9c0
[  313.001832][    C1]  ? net_tx_action+0x870/0x870
[  313.006604][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  313.012704][    C1]  ? detach_timer+0x2b0/0x2b0
[  313.017940][    C1]  ? lockdep_hardirqs_on_prepare+0x760/0x760
[  313.023998][    C1]  handle_softirqs+0x328/0x820
[  313.028776][    C1]  ? run_ksoftirqd+0x98/0xf0
[  313.033374][    C1]  ? do_softirq+0x200/0x200
[  313.037878][    C1]  ? run_ksoftirqd+0x75/0xf0
[  313.042488][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  313.047686][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  313.053265][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  313.058648][    C1]  run_ksoftirqd+0x98/0xf0
[  313.063427][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  313.068799][    C1]  ? preempt_schedule_thunk+0x16/0x18
[  313.074177][    C1]  ? smpboot_thread_fn+0x5bc/0x970
[  313.079375][    C1]  smpboot_thread_fn+0x4f6/0x970
[  313.084476][    C1]  kthread+0x436/0x520
[  313.088561][    C1]  ? cpu_report_death+0x180/0x180
[  313.093612][    C1]  ? kthread_blkcg+0xd0/0xd0
[  313.098730][    C1]  ret_from_fork+0x1f/0x30
[  313.103352][    C1]  </TASK>
[  313.106367][    C1] 
[  313.108707][    C1] Allocated by task 20:
[  313.112991][    C1]  __kasan_slab_alloc+0x9c/0xd0
[  313.118150][    C1]  slab_post_alloc_hook+0x4c/0x380
[  313.124165][    C1]  kmem_cache_alloc_node+0x12d/0x2d0
[  313.129608][    C1]  __alloc_skb+0xf4/0x750
[  313.134080][    C1]  synproxy_send_client_synack+0x169/0xdd0
[  313.139893][    C1]  nft_synproxy_eval_v4+0x36b/0x560
[  313.145091][    C1]  nft_synproxy_do_eval+0x341/0x570
[  313.150539][    C1]  nft_do_chain+0x3fc/0x1420
[  313.155166][    C1]  nft_do_chain_inet+0x22b/0x300
[  313.160264][    C1]  nf_hook_slow+0xb9/0x200
[  313.164734][    C1]  NF_HOOK+0x1cb/0x360
[  313.168974][    C1]  NF_HOOK+0x2d6/0x360
[  313.173176][    C1]  __netif_receive_skb+0xcc/0x290
[  313.178304][    C1]  process_backlog+0x364/0x780
[  313.183155][    C1]  __napi_poll+0xc0/0x430
[  313.187478][    C1]  net_rx_action+0x4a8/0x9c0
[  313.192151][    C1]  handle_softirqs+0x328/0x820
[  313.196997][    C1]  run_ksoftirqd+0x98/0xf0
[  313.201498][    C1]  smpboot_thread_fn+0x4f6/0x970
[  313.206644][    C1]  kthread+0x436/0x520
[  313.214497][    C1]  ret_from_fork+0x1f/0x30
[  313.220807][    C1] 
[  313.223316][    C1] Freed by task 20:
[  313.227120][    C1]  kasan_set_track+0x4b/0x70
[  313.231715][    C1]  kasan_set_free_info+0x1f/0x40
[  313.237035][    C1]  ____kasan_slab_free+0xd5/0x110
[  313.243123][    C1]  slab_free_freelist_hook+0xea/0x170
[  313.248731][    C1]  kmem_cache_free+0x8f/0x210
[  313.254610][    C1]  nft_synproxy_eval_v4+0x373/0x560
[  313.259970][    C1]  nft_synproxy_do_eval+0x341/0x570
[  313.265178][    C1]  nft_do_chain+0x3fc/0x1420
[  313.270394][    C1]  nft_do_chain_inet+0x22b/0x300
[  313.276650][    C1]  nf_hook_slow+0xb9/0x200
[  313.281780][    C1]  NF_HOOK+0x1cb/0x360
[  313.286170][    C1]  NF_HOOK+0x2d6/0x360
[  313.290361][    C1]  __netif_receive_skb+0xcc/0x290
[  313.295758][    C1]  process_backlog+0x364/0x780
[  313.300745][    C1]  __napi_poll+0xc0/0x430
[  313.305165][    C1]  net_rx_action+0x4a8/0x9c0
[  313.309770][    C1]  handle_softirqs+0x328/0x820
[  313.314888][    C1]  run_ksoftirqd+0x98/0xf0
[  313.319504][    C1]  smpboot_thread_fn+0x4f6/0x970
[  313.324556][    C1]  kthread+0x436/0x520
[  313.329683][    C1]  ret_from_fork+0x1f/0x30
[  313.336084][    C1] 
[  313.338882][    C1] The buggy address belongs to the object at ffff8880634e88c0
[  313.338882][    C1]  which belongs to the cache skbuff_head_cache of size 232
[  313.356835][    C1] The buggy address is located 128 bytes inside of
[  313.356835][    C1]  232-byte region [ffff8880634e88c0, ffff8880634e89a8)
[  313.371400][    C1] The buggy address belongs to the page:
[  313.377698][    C1] page:ffffea00018d3a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x634e8
[  313.391803][    C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  313.400478][    C1] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff88801b5e5140
[  313.411069][    C1] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[  313.421742][    C1] page dumped because: kasan: bad access detected
[  313.434142][    C1] page_owner tracks the page as allocated
[  313.444264][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x132a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_MEMALLOC|__GFP_HARDWALL), pid 5010, ts 265377303028, free_ts 252343104894
[  313.467331][    C1]  get_page_from_freelist+0x1b77/0x1c60
[  313.474119][    C1]  __alloc_pages+0x1e1/0x470
[  313.480384][    C1]  new_slab+0xc0/0x4b0
[  313.485840][    C1]  ___slab_alloc+0x81e/0xdf0
[  313.491496][    C1]  kmem_cache_alloc_node+0x1c3/0x2d0
[  313.497465][    C1]  __alloc_skb+0xf4/0x750
[  313.501998][    C1]  __netdev_alloc_skb+0x103/0x4a0
[  313.507233][    C1]  batadv_iv_ogm_queue_add+0x73e/0xcf0
[  313.513651][    C1]  batadv_iv_ogm_schedule+0x81c/0xe90
[  313.519229][    C1]  batadv_iv_send_outstanding_bat_ogm_packet+0x72d/0x840
[  313.527457][    C1]  process_one_work+0x863/0x1000
[  313.532690][    C1]  worker_thread+0xaa8/0x12a0
[  313.537735][    C1]  kthread+0x436/0x520
[  313.541906][    C1]  ret_from_fork+0x1f/0x30
[  313.546768][    C1] page last free stack trace:
[  313.551749][    C1]  free_unref_page_prepare+0x637/0x6c0
[  313.557893][    C1]  free_unref_page+0x94/0x280
[  313.563879][    C1]  __unfreeze_partials+0x1a5/0x200
[  313.572795][    C1]  put_cpu_partial+0x12d/0x190
[  313.578369][    C1]  qlist_free_all+0x35/0x90
[  313.584712][    C1]  kasan_quarantine_reduce+0x150/0x160
[  313.590774][    C1]  __kasan_slab_alloc+0x2f/0xd0
[  313.597606][    C1]  slab_post_alloc_hook+0x4c/0x380
[  313.605221][    C1]  kmem_cache_alloc_node+0x12d/0x2d0
[  313.611401][    C1]  __alloc_skb+0xf4/0x750
[  313.617883][    C1]  alloc_uevent_skb+0x7d/0x230
[  313.625704][    C1]  kobject_uevent_net_broadcast+0x2e6/0x530
[  313.632793][    C1]  kobject_uevent_env+0x556/0x890
[  313.639715][    C1]  __loop_clr_fd+0x776/0xb90
[  313.645458][    C1]  lo_ioctl+0xffa/0x1cf0
[  313.650771][    C1]  blkdev_ioctl+0x33c/0x690
[  313.660287][    C1] 
[  313.663432][    C1] Memory state around the buggy address:
[  313.670610][    C1]  ffff8880634e8800: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc
[  313.680582][    C1]  ffff8880634e8880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  313.689813][    C1] >ffff8880634e8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  313.699008][    C1]                                            ^
[  313.706798][    C1]  ffff8880634e8980: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[  313.715455][    C1]  ffff8880634e8a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  313.725205][    C1] ==================================================================
[  313.735149][    C1] Disabling lock debugging due to kernel taint
[  313.742181][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  313.750651][    C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G    B             5.15.184-syzkaller #0
[  313.762883][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  313.774428][    C1] Call Trace:
[  313.778860][    C1]  <TASK>
[  313.782243][    C1]  dump_stack_lvl+0x168/0x230
[  313.787713][    C1]  ? show_regs_print_info+0x20/0x20
[  313.794774][    C1]  ? load_image+0x3b0/0x3b0
[  313.799577][    C1]  panic+0x2c9/0x7f0
[  313.804085][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  313.809677][    C1]  ? _raw_spin_unlock_irqrestore+0xa5/0x100
[  313.816386][    C1]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  313.822495][    C1]  ? _raw_spin_unlock+0x40/0x40
[  313.827551][    C1]  ? print_memory_metadata+0x314/0x400
[  313.833682][    C1]  ? __nft_trace_packet+0x135/0x150
[  313.839686][    C1]  check_panic_on_warn+0x80/0xa0
[  313.845177][    C1]  ? __nft_trace_packet+0x135/0x150
[  313.850412][    C1]  end_report+0x6d/0xf0
[  313.855052][    C1]  kasan_report+0x102/0x130
[  313.860552][    C1]  ? __nft_trace_packet+0x135/0x150
[  313.866894][    C1]  __nft_trace_packet+0x135/0x150
[  313.872693][    C1]  nft_do_chain+0x120e/0x1420
[  313.878916][    C1]  ? mark_lock+0x94/0x320
[  313.884367][    C1]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  313.890566][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  313.896626][    C1]  ? rcu_lock_release+0x5/0x20
[  313.901806][    C1]  ? ipt_do_table+0x138e/0x1580
[  313.907161][    C1]  nft_do_chain_inet+0x22b/0x300
[  313.912995][    C1]  ? nft_do_chain_arp+0xe0/0xe0
[  313.918562][    C1]  ? nf_nat_ipv4_local_in+0x209/0x5b0
[  313.925737][    C1]  ? nft_do_chain_arp+0xe0/0xe0
[  313.932475][    C1]  nf_hook_slow+0xb9/0x200
[  313.939448][    C1]  ? NF_HOOK+0x360/0x360
[  313.945170][    C1]  NF_HOOK+0x1cb/0x360
[  313.949619][    C1]  ? NF_HOOK+0x360/0x360
[  313.955484][    C1]  ? ip_local_deliver+0x1a0/0x1a0
[  313.960960][    C1]  ? ip_rcv_finish_core+0xd8b/0x1bc0
[  313.969212][    C1]  ? NF_HOOK+0x360/0x360
[  313.975281][    C1]  ? ip_local_deliver+0x11e/0x1a0
[  313.980780][    C1]  ? ip_rcv_core+0xb60/0xb60
[  313.985517][    C1]  NF_HOOK+0x2d6/0x360
[  313.989856][    C1]  ? ip_rcv_core+0xb60/0xb60
[  313.995112][    C1]  ? ip_local_deliver+0x1a0/0x1a0
[  314.000355][    C1]  ? ip_rcv_core+0xb60/0xb60
[  314.005419][    C1]  ? ip_local_deliver_finish+0x320/0x320
[  314.011820][    C1]  ? ip_local_deliver_finish+0x320/0x320
[  314.018679][    C1]  __netif_receive_skb+0xcc/0x290
[  314.024786][    C1]  process_backlog+0x364/0x780
[  314.030159][    C1]  ? rps_trigger_softirq+0x210/0x210
[  314.035744][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  314.043288][    C1]  ? lock_chain_count+0x20/0x20
[  314.048342][    C1]  ? rcu_is_watching+0x11/0xa0
[  314.053138][    C1]  __napi_poll+0xc0/0x430
[  314.057886][    C1]  ? net_rx_action+0x2db/0x9c0
[  314.062962][    C1]  net_rx_action+0x4a8/0x9c0
[  314.068035][    C1]  ? net_tx_action+0x870/0x870
[  314.073524][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  314.079639][    C1]  ? detach_timer+0x2b0/0x2b0
[  314.086497][    C1]  ? lockdep_hardirqs_on_prepare+0x760/0x760
[  314.094504][    C1]  handle_softirqs+0x328/0x820
[  314.099388][    C1]  ? run_ksoftirqd+0x98/0xf0
[  314.105019][    C1]  ? do_softirq+0x200/0x200
[  314.110860][    C1]  ? run_ksoftirqd+0x75/0xf0
[  314.116507][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  314.121919][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  314.127534][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  314.133784][    C1]  run_ksoftirqd+0x98/0xf0
[  314.139740][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  314.145324][    C1]  ? preempt_schedule_thunk+0x16/0x18
[  314.152573][    C1]  ? smpboot_thread_fn+0x5bc/0x970
[  314.158418][    C1]  smpboot_thread_fn+0x4f6/0x970
[  314.164266][    C1]  kthread+0x436/0x520
[  314.168740][    C1]  ? cpu_report_death+0x180/0x180
[  314.173887][    C1]  ? kthread_blkcg+0xd0/0xd0
[  314.178849][    C1]  ret_from_fork+0x1f/0x30
[  314.183305][    C1]  </TASK>
[  314.186727][    C1] Kernel Offset: disabled
[  314.191485][    C1] Rebooting in 86400 seconds..