last executing test programs:

12.282635845s ago: executing program 0 (id=1443):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xffff, 0x0, 0x5e55b37311de6d89, 0x0, @private, @multicast2}}}})

12.163050975s ago: executing program 0 (id=1447):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
readv(r0, &(0x7f0000002880)=[{&(0x7f0000002800)=""/99, 0x63}], 0x1)

12.041770877s ago: executing program 0 (id=1451):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e927755835e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37477813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f126e6df1b0e9c676d1ab57144581328ff37230d7a669a8b7364ac7aea544e758471f4a8d1ceeca5a2ee255bd325303ea6ac28d2cc60c1f736b4be179ba8e4846790e87c86ba708dbb09ff226e55f8d0d1293dbd7a6fd3e96103438fee8035f78a05583f056b1a380ce21f689a24ceab372d9fa9625dd4864813a91de8e13473d9304b60264fea98296e280bbd04651fe40e3d28a67f808534e74771a43eea13eb2d902dabd1254b190659a59a0523440db7182a8be685d5fa9c6c50464d75be460bb5f14a409239eda5406788d42217e9ee3a3875456e58dd767231378495f3237ac7f3eda70401a69babf75b9e403c9f873578255085dd2e02506afec27dd91407cc5ed0df98a0f8164c39d81f55dc82fd2d873db5f41492b8adde98a147a10ab09df8f24e887e2b19f548587abb9a877925ee1f1f190a44ef64a480015c77b6ba4d68eba77796903391b3d5f5b583ea5edd4df839ada033d00768b0abd611fea9d32ef15396b35a3822997d7ddd90d7adca509b7f829d79679f8ba6fbc4da3b1d6bd61e238d906b94fed13d8e5acd14b66d0bdd672ba506a7dae99e29dd3a8585ff7eb0e23ebbb27b0782d2197bf05d9dd71ad0a51224e29c8e5beace96b498ef99bb48034d4323f5e70c96fdf5258f1e5838f458defbcc5a48ad3d391244e26be89cf608a2092c647297e21ae1c2f8615f7d9798a016c6d62617e4c7ea8524f1c274863a7151183ddaa7856e48467dd25bb04c5b240e15217db80ae1d7d9453b6ed9b9311f37f7db2ea29a04764e2ecc45239bd0c8a6bdc1261854806e76c01505c3abeb3a8a655f0b952c9cad3840820747e36cc5c5d89f0b571ee7ddea4ff50ecf0aa7a7aad03df95b95a01abbe8424cc1c3d4d64822b74d958bde0a1706b30deeccf36102cb569b1e8725258b9fcf73b18f5be30164ef3836df1bc3452aab9a792113c25efd32f4c54df4e7ae06ca493e96f9af63c34279ed84cca0bff50bf603071006f5b5dcdc85eade1f060105287fb87acee13898fb181d8a9657cd13cfedcb71cf55da7f7f87dff00869f56606b2a258f6521f938e1b778dd6f074d616d5cd2dccf0888f0a4fbce3b91c207cc01d080cf73d3c1b4d5b0c0f6cee858e21f5fa2d8e5132baa6f1de9511b35588068d2df9c0c88073e41e288afcae690d65272ff899c9f5bf32cba0d26e42fdf58e2b1330c8688db6ca0a57a975c13f0ce1d7267c0cbddc24d9e47725e629a4d7577bae50a932d269c6dbed0865df87e61ba99c1d0a0a230d4f0b87aaf130da28ba75bb38916914f04350740d06119d4fccdbe0ae76abf7d7dd818f2ea5fd203b4a2b2d73ee27b7b66f7af515a7f85837f234cc843726d8e18f8974e098e8b4bf05775c07875793a68d6445bc0db6eb4d0eb71fa5aef62b559e505e47998586c3e65ce6b384f7b044de04308fdcdd7c529e44715a323f52f8f7a82f51d78a6ac8a35fb062e0c656ab7b668fb4bca4e7d6f76451a9503362d592251eea20bcadaa6baefecfda626cfc02c53fa071db2cb01c6aecc031b6612000ef7f08f2f0fb286a14658582e1a6675e5079a0eff2899bbd2d334a8a21df59dde4c54efe2c6513b011adcd87a00e010b60df635793abcc09b77a", 0xa44}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @private}}}], 0x20}, 0x0)

12.012903499s ago: executing program 0 (id=1453):
r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x101001)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="bbef12c9e8", 0x0, 0x0, 0x0, 0x0, 0x0})

11.868619512s ago: executing program 0 (id=1458):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000004c0)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@unhide}, {@undelete}, {@adinicb}, {@gid}, {@nostrict}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x1, 0xc43, &(0x7f00000010c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)

11.587259788s ago: executing program 0 (id=1467):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x82041)
ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523)

2.888364985s ago: executing program 4 (id=1649):
creat(&(0x7f00000000c0)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000580)={[{@mpol={'mpol', 0x3d, {'local', '=static'}}}]})

2.776799815s ago: executing program 4 (id=1652):
syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000440)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8e8d089b806053c44bbc71da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec88", @ANYBLOB="bfe49d"], 0x1, 0x65c, &(0x7f0000002280)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108c0, 0x24)

2.548005186s ago: executing program 4 (id=1655):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0xfa, 0x70, 0x10, 0x8, 0x413, 0x6023, 0xb636, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x1, 0x7a, 0x9e, 0xc0, 0x0, [], [{{0x9, 0x5, 0x82}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

2.111159777s ago: executing program 3 (id=1666):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000850000007d0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x46)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.088466229s ago: executing program 2 (id=1668):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x61}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x0}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21)

2.022125455s ago: executing program 3 (id=1670):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="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", 0x74}, {&(0x7f0000000000)="e2", 0xfffffffd}], 0x2)

1.96287622s ago: executing program 2 (id=1672):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010002b00020300000000000000000000fe880000000000000000000000000001fc010000000000000000000000000000040004"], 0xc0}}, 0x0)

1.892923206s ago: executing program 3 (id=1674):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0)

1.884164407s ago: executing program 2 (id=1675):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d63703836342c756e695f786c6174653d312c636f6465706167653d313235302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c696f636861727365743d63703836322c726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c002aa220cdeeb5ba33c93123800bef80e5155d8840d88fc461c6"], 0x25, 0x336, &(0x7f0000000500)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)

1.816021123s ago: executing program 3 (id=1677):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x16, 0x0, &(0x7f0000000100))

1.74020732s ago: executing program 3 (id=1679):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0)

1.682224015s ago: executing program 3 (id=1680):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0xc0c09425, &(0x7f0000000040))

1.137779175s ago: executing program 2 (id=1687):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x47)

942.539283ms ago: executing program 2 (id=1689):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0835247313088b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"})

920.439115ms ago: executing program 2 (id=1690):
syz_usb_connect(0x3, 0x2ca, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)

775.687269ms ago: executing program 1 (id=1693):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000120005ff00000000000000000700004a", @ANYBLOB="000000000000000014001280090001"], 0x3c}}, 0x0)

668.304519ms ago: executing program 1 (id=1694):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@can_newroute={0x2c, 0x18, 0x321, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "30a11b39b3b3f180"}, 0x1}}]}, 0x2c}}, 0x0)

582.805907ms ago: executing program 1 (id=1695):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "f422640dfa2b2c76"}, 0x2}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xfffffffffffffff8}}]}, 0x34}}, 0x0)

359.577867ms ago: executing program 1 (id=1696):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000380)={0x2, @none={0x0, 0xffff}}, 0x14)

268.422575ms ago: executing program 4 (id=1697):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20)

206.16277ms ago: executing program 1 (id=1698):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0)

127.508358ms ago: executing program 4 (id=1699):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x2b8, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x3f0)

20.745557ms ago: executing program 4 (id=1700):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xda4b}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x64}}, 0x0)

0s ago: executing program 1 (id=1701):
r0 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000240)={0x14, {{0x29, 0x0, 0x8000000, @mcast1}}}, 0x88)

kernel console output (not intermixed with test programs):

.587580][ T3896] XFS (loop2): Mounting V5 Filesystem
[   54.621946][   T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   54.658144][ T3896] XFS (loop2): Ending clean mount
[   54.666784][ T3896] XFS (loop2): Quotacheck needed: Please wait.
[   54.693789][ T3896] XFS (loop2): Quotacheck: Done.
[   54.749823][ T3566] XFS (loop2): Unmounting Filesystem
[   54.793275][ T3707] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   54.853397][ T3835] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   55.022090][    C0] usb 1-1: ath: unknown panic pattern!
[   55.062101][   T13] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   55.091985][   T13] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   55.111313][   T13] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   55.123217][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.172208][ T3898] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   55.236786][ T3570] usb 1-1: USB disconnect, device number 2
[   55.256754][ T3835] usb 5-1: config index 0 descriptor too short (expected 3133, got 61)
[   55.277618][ T3835] usb 5-1: config 0 has an invalid interface number: 156 but max is 1
[   55.300854][ T3835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   55.320402][ T3835] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[   55.333373][ T3835] usb 5-1: config 0 has no interface number 0
[   55.339491][ T3835] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   55.355791][ T3835] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   55.367607][ T3835] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   55.387030][ T3920] loop2: detected capacity change from 0 to 32768
[   55.394840][ T3835] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   55.439148][ T3835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.471617][ T3835] usb 5-1: config 0 descriptor??
[   55.499694][ T3920] JBD2: Ignoring recovery information on journal
[   55.510480][ T3920] JBD2: corrupted journal superblock
[   55.516303][ T3920] JBD2: error -117 scanning journal
[   55.521507][ T3920] (syz.2.108,3920,1):ocfs2_journal_wipe:1131 ERROR: status = -117
[   55.530843][ T3920] (syz.2.108,3920,1):ocfs2_check_volume:2416 ERROR: status = -117
[   55.533827][ T3835] gspca_main: spca561-2.14.0 probing abcd:cdee
[   55.556431][ T3920] (syz.2.108,3920,1):ocfs2_check_volume:2485 ERROR: status = -117
[   55.570127][ T3920] (syz.2.108,3920,1):ocfs2_mount_volume:1824 ERROR: status = -117
[   55.579809][ T3920] (syz.2.108,3920,1):ocfs2_journal_shutdown:1023 ERROR: status = -5
[   55.602165][ T3920] (syz.2.108,3920,0):ocfs2_fill_super:1177 ERROR: status = -117
[   55.789476][ T3949] dlm: dev_write: no op 0 74000000000000
[   55.822179][ T3835] spca561: probe of 5-1:0.156 failed with error -22
[   55.842885][ T3835] usb 5-1: MIDIStreaming interface descriptor not found
[   55.882085][ T3707] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[   55.891163][ T3707] ath9k_htc: Failed to initialize the device
[   55.940302][ T3570] usb 1-1: ath9k_htc: USB layer deinitialized
[   55.973941][ T3835] usb 5-1: USB disconnect, device number 3
[   56.071122][ T3960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.126'.
[   56.334582][ T3976] loop2: detected capacity change from 0 to 256
[   56.572083][ T3976] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005)
[   56.633059][ T3976] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006005)
[   56.723752][ T4007] netlink: 'syz.1.147': attribute type 3 has an invalid length.
[   56.803190][ T3707] usb 4-1: USB disconnect, device number 2
[   56.982366][ T4017] loop0: detected capacity change from 0 to 4096
[   57.074333][ T3669] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   57.253118][ T4027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'.
[   57.279014][ T4027] tc_dump_action: action bad kind
[   57.321871][ T3669] usb 2-1: Using ep0 maxpacket: 32
[   57.442053][ T3669] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[   57.461522][ T3669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.483239][ T4000] loop4: detected capacity change from 0 to 32768
[   57.490711][ T3669] usb 2-1: config 0 descriptor??
[   57.544505][ T3669] gspca_main: sunplus-2.14.0 probing 0458:7006
[   57.601965][ T3707] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   57.671496][ T4000] XFS (loop4): Mounting V5 Filesystem
[   57.801086][ T4032] loop3: detected capacity change from 0 to 32768
[   57.833915][ T4000] XFS (loop4): Ending clean mount
[   57.852271][ T4000] XFS (loop4): Quotacheck needed: Please wait.
[   57.887118][ T3707] usb 1-1: Using ep0 maxpacket: 8
[   57.905187][ T4000] XFS (loop4): Quotacheck: Done.
[   57.968645][ T4032] XFS (loop3): Mounting V5 Filesystem
[   57.982028][ T3669] gspca_sunplus: reg_w_riv err -71
[   57.987809][ T3669] sunplus: probe of 2-1:0.0 failed with error -71
[   58.004937][ T3669] usb 2-1: USB disconnect, device number 3
[   58.007167][ T3707] usb 1-1: config 150 has an invalid interface number: 204 but max is 1
[   58.030880][ T3707] usb 1-1: config 150 has no interface number 0
[   58.039581][ T3574] XFS (loop4): Unmounting Filesystem
[   58.050983][ T3707] usb 1-1: config 150 interface 204 has no altsetting 0
[   58.058223][ T3707] usb 1-1: config 150 interface 1 has no altsetting 0
[   58.145492][ T4032] XFS (loop3): Ending clean mount
[   58.155198][ T4032] XFS (loop3): Quotacheck needed: Please wait.
[   58.156413][ T4049] loop2: detected capacity change from 0 to 32768
[   58.223334][ T4032] XFS (loop3): Quotacheck: Done.
[   58.272388][ T3707] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[   58.282268][ T3707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.311399][ T3707] usb 1-1: Product: syz
[   58.323749][ T3707] usb 1-1: Manufacturer: syz
[   58.329104][ T3707] usb 1-1: SerialNumber: syz
[   58.344181][ T4049] XFS (loop2): Mounting V5 Filesystem
[   58.350087][ T3575] XFS (loop3): Unmounting Filesystem
[   58.455373][ T4049] XFS (loop2): Ending clean mount
[   58.540133][ T3566] XFS (loop2): Unmounting Filesystem
[   58.624004][ T4075] nfs: Unknown parameter 'smackfsroot'
[   58.666732][ T3707] xr_serial 1-1:150.204: xr_serial converter detected
[   58.712119][ T3707] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[   58.733963][ T3707] xr_serial: probe of ttyUSB0 failed with error -71
[   58.779548][ T3707] usb 1-1: USB disconnect, device number 3
[   58.839269][ T3707] xr_serial 1-1:150.204: device disconnected
[   58.980475][ T4083] loop3: detected capacity change from 0 to 4096
[   59.028067][ T4083] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[   59.061882][   T26] audit: type=1326 audit(1727781765.353:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4095 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb3acbff9 code=0x50000
[   59.084695][   T26] audit: type=1326 audit(1727781765.363:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4095 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb3acbff9 code=0x50000
[   59.107784][   T26] audit: type=1326 audit(1727781765.363:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4095 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb3acbff9 code=0x50000
[   59.137792][   T26] audit: type=1326 audit(1727781765.363:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4095 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb3acbff9 code=0x50000
[   59.181885][   T26] audit: type=1326 audit(1727781765.363:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4095 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb3acbff9 code=0x50000
[   59.262327][   T26] audit: type=1326 audit(1727781765.363:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4095 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb3acbff9 code=0x50000
[   59.318620][   T26] audit: type=1326 audit(1727781765.363:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4095 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb3acbff9 code=0x50000
[   59.343022][ T4104] Cannot find add_set index 0 as target
[   59.354026][   T26] audit: type=1326 audit(1727781765.363:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4095 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb3acbff9 code=0x50000
[   59.376153][   T26] audit: type=1326 audit(1727781765.363:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4095 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb3acbff9 code=0x50000
[   59.398700][   T26] audit: type=1326 audit(1727781765.363:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4095 comm="syz.1.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb3acbff9 code=0x50000
[   59.992207][ T4136] IPv6: addrconf: prefix option has invalid lifetime
[   60.072902][ T4140] netlink: 'syz.3.203': attribute type 7 has an invalid length.
[   60.102084][ T4140] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.203'.
[   60.356919][ T4156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.210'.
[   60.359985][ T4102] loop4: detected capacity change from 0 to 32768
[   60.490004][ T4166] loop0: detected capacity change from 0 to 512
[   60.550241][ T4172] QAT: failed to copy from user cfg_data.
[   60.591925][ T4102] XFS (loop4): Mounting V5 Filesystem
[   60.605677][ T4166] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback.
[   60.651913][ T4166] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff)
[   60.730821][ T4102] XFS (loop4): Ending clean mount
[   60.828720][ T4189] loop3: detected capacity change from 0 to 256
[   60.835701][ T3574] XFS (loop4): Unmounting Filesystem
[   60.879414][ T4192] netlink: 1076 bytes leftover after parsing attributes in process `syz.0.221'.
[   61.063767][ T4189] loop3: detected capacity change from 0 to 256
[   61.112220][ T4189] exfat: Deprecated parameter 'utf8'
[   61.117827][ T4189] exfat: Unexpected value for 'utf8'
[   61.366189][ T4213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.233'.
[   61.409467][ T4217] loop3: detected capacity change from 0 to 512
[   61.507212][ T3707] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   61.585313][ T4217] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback.
[   61.628821][ T4217] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff)
[   61.688620][ T4217] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.235: Failed to acquire dquot type 0
[   61.781946][ T3707] usb 1-1: Using ep0 maxpacket: 8
[   61.784072][ T4233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'.
[   61.831854][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'.
[   61.912187][ T3707] usb 1-1: config 0 has an invalid interface number: 33 but max is 1
[   61.940857][ T3707] usb 1-1: config 0 has no interface number 1
[   61.969666][ T3707] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[   61.999854][ T4241] loop4: detected capacity change from 0 to 1024
[   62.033594][ T3707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2039, setting to 1024
[   62.065932][ T4247] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0
[   62.079952][ T4241] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000008,discard,max_batch_time=0x0000000004000000,block_validity,i_version,errors=remount-ro,min_batch_time=0x000000000000000b,max_batch_time=0x0000000000000006,noquota,stripe=0x000. Quota mode: none.
[   62.101804][ T3707] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[   62.116063][ T4247] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0
[   62.127467][ T4247] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0
[   62.136502][ T4247] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0
[   62.145811][ T4247] device geneve3 entered promiscuous mode
[   62.301919][ T3608] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   62.403819][ T3707] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[   62.443408][ T3707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.451422][ T3707] usb 1-1: Product: syz
[   62.470136][ T3707] usb 1-1: Manufacturer: syz
[   62.487874][ T3707] usb 1-1: SerialNumber: syz
[   62.505914][ T3707] usb 1-1: config 0 descriptor??
[   62.551963][ T3608] usb 4-1: Using ep0 maxpacket: 16
[   62.565136][ T3707] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[   62.672170][ T3608] usb 4-1: config 7 has an invalid interface number: 247 but max is 0
[   62.685598][ T3608] usb 4-1: config 7 has no interface number 0
[   62.711853][ T3608] usb 4-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   62.769733][ T2147] pvrusb2: Invalid read control endpoint
[   62.771615][ T3707] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[   62.784232][ T2147] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[   62.822584][ T2147] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[   62.881105][ T3707] usb 1-1: USB disconnect, device number 4
[   62.882107][ T3608] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22
[   62.926470][ T3608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.965103][ T3608] usb 4-1: Product: syz
[   62.979157][ T3608] usb 4-1: Manufacturer: syz
[   62.990836][ T3608] usb 4-1: SerialNumber: syz
[   63.047568][ T4260] loop4: detected capacity change from 0 to 32768
[   63.048745][ T3608] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device.
[   63.088896][ T4260] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.251 (4260)
[   63.181848][ T4260] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   63.190520][ T4260] BTRFS info (device loop4): using free space tree
[   63.223987][ T4260] BTRFS info (device loop4): has skinny extents
[   63.410000][ T2987] usb 4-1: USB disconnect, device number 3
[   63.497999][ T4325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'.
[   63.541863][ T4260] BTRFS info (device loop4): enabling ssd optimizations
[   63.542035][ T4325] netlink: 'syz.2.278': attribute type 1 has an invalid length.
[   63.601982][ T4325] netlink: 124 bytes leftover after parsing attributes in process `syz.2.278'.
[   63.698367][ T4301] loop1: detected capacity change from 0 to 32768
[   63.911469][ T4320] loop0: detected capacity change from 0 to 32768
[   63.913931][ T4301] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   63.969867][ T4338] netlink: 'syz.2.291': attribute type 21 has an invalid length.
[   64.072287][ T4338] netlink: 156 bytes leftover after parsing attributes in process `syz.2.291'.
[   64.087736][ T4301] OCFS2: ERROR (device loop1): int ocfs2_validate_xattr_block(struct super_block *, struct buffer_head *): Extended attribute block #2304 has bad signature 
[   64.126635][ T4301] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   64.138486][ T4301] OCFS2: File system is now read-only.
[   64.144419][ T4301] (syz.1.274,4301,0):ocfs2_xattr_block_find:2827 ERROR: status = -30
[   64.286645][ T3580] ocfs2: Unmounting device (7,1) on (node local)
[   64.532009][ T4360] openvswitch: netlink: Missing key (keys=100040, expected=200000)
[   64.701837][ T1075] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   65.022250][ T3835] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   65.023911][ T4390] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0
[   65.057538][ T4390] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0
[   65.067070][ T4392] netlink: 224 bytes leftover after parsing attributes in process `syz.1.308'.
[   65.089948][ T4390] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0
[   65.111980][ T1075] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   65.145690][ T1075] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[   65.161807][ T4390] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0
[   65.170824][ T4390] device geneve3 entered promiscuous mode
[   65.177245][ T1075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.210714][ T1075] usb 3-1: config 0 descriptor??
[   65.234815][ T4362] loop0: detected capacity change from 0 to 32768
[   65.290027][ T4400] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   65.330467][ T4362] jfs_rename: dtInsert returned -EIO
[   65.432150][ T3835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   65.468732][ T3835] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[   65.512120][ T3835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.532875][ T3835] usb 5-1: config 0 descriptor??
[   65.583446][ T3835] usb 5-1: bad CDC descriptors
[   65.655654][ T4418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'.
[   65.705251][ T4418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'.
[   65.720611][ T3835] usb 3-1: USB disconnect, device number 2
[   65.754807][ T4421] netlink: 'syz.1.323': attribute type 2 has an invalid length.
[   65.798240][ T3608] usb 5-1: USB disconnect, device number 4
[   65.871049][ T4428] loop1: detected capacity change from 0 to 1024
[   66.002662][ T4428] hfsplus: cannot replace xattr
[   66.095293][ T4424] loop0: detected capacity change from 0 to 32768
[   66.135709][ T4430] loop1: detected capacity change from 0 to 1764
[   66.161877][ T4330] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   66.189564][ T4424] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.325 (4424)
[   66.251996][ T4424] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   66.281471][ T4424] BTRFS info (device loop0): turning off barriers
[   66.301741][ T4424] BTRFS info (device loop0): setting nodatasum
[   66.310610][ T4424] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   66.429768][ T4424] BTRFS info (device loop0): force zstd compression, level 3
[   66.465345][ T4424] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[   66.498770][ T4424] BTRFS info (device loop0): force lzo compression, level 0
[   66.510610][ T4443] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   66.530031][ T4424] BTRFS info (device loop0): using free space tree
[   66.567523][ T4424] BTRFS info (device loop0): has skinny extents
[   66.702245][ T4330] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[   66.711513][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.712099][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'.
[   66.728315][ T4330] usb 4-1: Product: syz
[   66.738478][ T4330] usb 4-1: Manufacturer: syz
[   66.752081][ T4330] usb 4-1: SerialNumber: syz
[   66.762189][ T4330] r8152-cfgselector 4-1: config 0 descriptor??
[   66.879784][ T4424] BTRFS info (device loop0): checking UUID tree
[   67.025043][ T4445] loop1: detected capacity change from 0 to 32768
[   67.186701][ T4445] XFS (loop1): Mounting V5 Filesystem
[   67.250784][ T4445] XFS (loop1): Ending clean mount
[   67.252918][ T4506] netlink: 'syz.4.347': attribute type 3 has an invalid length.
[   67.256147][ T4330] r8152-cfgselector 4-1: Unknown version 0x0000
[   67.264070][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'.
[   67.292002][ T3835] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   67.339462][ T4330] r8152-cfgselector 4-1: USB disconnect, device number 4
[   67.423461][ T3580] XFS (loop1): Unmounting Filesystem
[   67.561956][ T3835] usb 3-1: Using ep0 maxpacket: 8
[   67.679491][ T4522] netlink: 494 bytes leftover after parsing attributes in process `syz.0.356'.
[   67.702176][ T3835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.799650][ T3835] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[   67.801846][ T4496] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   67.828977][ T3835] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   67.832505][ T4528] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   67.847078][ T3835] usb 3-1: Manufacturer: syz
[   67.869412][ T3835] usb 3-1: config 0 descriptor??
[   67.943473][ T3835] appledisplay 3-1:0.0: Could not find int-in endpoint
[   67.964822][ T3835] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   68.017065][ T4540] loop0: detected capacity change from 0 to 2048
[   68.112725][ T4496] usb 5-1: Using ep0 maxpacket: 16
[   68.161460][ T4549] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.166484][ T4499] usb 3-1: USB disconnect, device number 3
[   68.246500][ T4496] usb 5-1: config 0 has no interfaces?
[   68.256719][ T4540] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   68.274154][ T4556] netlink: 'syz.3.371': attribute type 21 has an invalid length.
[   68.282137][ T4556] netlink: 156 bytes leftover after parsing attributes in process `syz.3.371'.
[   68.301841][ T4540] Remounting filesystem read-only
[   68.314705][ T4540] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16)
[   68.339445][ T4540] NILFS (loop0): error -5 truncating bmap (ino=16)
[   68.407379][ T3567] NILFS (loop0): discard dirty page: offset=4096, ino=6
[   68.415598][ T4496] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   68.424976][ T3567] NILFS (loop0): discard dirty block: blocknr=39, size=1024
[   68.432532][ T4496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.432558][ T4496] usb 5-1: Product: syz
[   68.432572][ T4496] usb 5-1: Manufacturer: syz
[   68.432586][ T4496] usb 5-1: SerialNumber: syz
[   68.433764][ T4496] r8152-cfgselector 5-1: config 0 descriptor??
[   68.457789][ T3567] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[   68.473565][ T3567] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[   68.483836][ T3567] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[   68.494188][ T3567] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[   68.571489][ T4569] loop1: detected capacity change from 0 to 256
[   68.662026][ T3835] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   68.704152][ T4578] netlink: 'syz.1.381': attribute type 4 has an invalid length.
[   68.743774][ T4496] r8152-cfgselector 5-1: Unknown version 0x6ce0
[   68.760401][ T4581] loop2: detected capacity change from 0 to 1024
[   68.832887][ T4581] EXT4-fs (loop2): Ignoring removed orlov option
[   68.839259][ T4581] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   68.900352][ T4581] EXT4-fs (loop2): first meta block group too large: 50331648 (group descriptor block count 1)
[   68.917529][ T4591] loop0: detected capacity change from 0 to 2048
[   68.987708][ T4330] r8152-cfgselector 5-1: USB disconnect, device number 5
[   69.000705][ T4591] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.033802][ T4581] loop2: detected capacity change from 0 to 256
[   69.040442][ T4581] exfat: Deprecated parameter 'debug'
[   69.053221][ T4581] exfat: Unknown parameter 'nodiscard'
[   69.102126][ T3835] usb 4-1: config index 0 descriptor too short (expected 3133, got 61)
[   69.110395][ T3835] usb 4-1: config 0 has an invalid interface number: 156 but max is 1
[   69.119026][ T3835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   69.140267][ T3835] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[   69.172004][ T3835] usb 4-1: config 0 has no interface number 0
[   69.178126][ T3835] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   69.190963][ T4599] loop2: detected capacity change from 0 to 256
[   69.211452][ T3835] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   69.222143][ T3835] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   69.236741][ T3835] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   69.247136][ T3835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.259042][ T3835] usb 4-1: config 0 descriptor??
[   69.303734][ T3835] gspca_main: spca561-2.14.0 probing abcd:cdee
[   69.329115][ T4605] netlink: 'syz.1.396': attribute type 1 has an invalid length.
[   69.582035][ T3835] spca561: probe of 4-1:0.156 failed with error -22
[   69.594386][ T3835] usb 4-1: MIDIStreaming interface descriptor not found
[   69.641169][ T3835] usb 4-1: USB disconnect, device number 5
[   69.689095][ T4627] udevd[4627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   69.740509][ T4631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.407'.
[   69.870673][ T4637] loop4: detected capacity change from 0 to 1024
[   69.875659][ T4636] loop2: detected capacity change from 0 to 1024
[   69.970247][ T4636] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[   69.994141][ T3674] hfsplus: b-tree write err: -5, ino 4
[   70.134821][ T4622] loop1: detected capacity change from 0 to 32768
[   70.210532][ T4649] tmpfs: Bad value for 'mpol'
[   70.214681][ T4622] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.404 (4622)
[   70.254560][ T4622] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   70.276596][ T4622] BTRFS info (device loop1): using free space tree
[   70.295990][ T4622] BTRFS info (device loop1): has skinny extents
[   70.356310][ T4658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.487707][ T4672] x_tables: ip_tables: icmp match: only valid for protocol 1
[   70.552030][   T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   70.628563][ T4675] loop2: detected capacity change from 0 to 4096
[   70.631130][ T4622] BTRFS info (device loop1): enabling ssd optimizations
[   70.635566][ T4688] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   70.654023][ T4688] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[   70.703930][ T4675] __ntfs_warning: 3429 callbacks suppressed
[   70.703945][ T4675] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   70.738382][ T4675] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   70.840379][ T4690] loop4: detected capacity change from 0 to 2048
[   70.876335][ T4675] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[   70.890876][ T4675] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   70.910955][ T4675] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[   70.929443][ T4675] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   70.948339][ T4675] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   70.987921][ T4675] ntfs: volume version 3.1.
[   71.002114][ T4695] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.021230][ T4675] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[   71.025992][ T4690] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   71.036009][ T4675] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   71.071497][ T4690] Remounting filesystem read-only
[   71.083654][ T4675] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[   71.092363][ T4690] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16)
[   71.134929][   T23] usb 4-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=c8.d3
[   71.136053][ T4690] NILFS (loop4): error -5 truncating bmap (ino=16)
[   71.149832][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.164971][ T1386] ieee802154 phy0 wpan0: encryption failed: -22
[   71.171562][ T1386] ieee802154 phy1 wpan1: encryption failed: -22
[   71.185819][   T23] usb 4-1: Product: syz
[   71.190914][   T23] usb 4-1: Manufacturer: syz
[   71.198017][   T23] usb 4-1: SerialNumber: syz
[   71.223777][   T23] usb 4-1: config 0 descriptor??
[   71.305187][ T3574] NILFS (loop4): discard dirty page: offset=4096, ino=6
[   71.330403][ T3574] NILFS (loop4): discard dirty block: blocknr=39, size=1024
[   71.358084][ T3574] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[   71.387426][ T3574] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[   71.424025][ T3574] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[   71.448398][ T3574] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[   71.483149][   T23] cdc_subset: probe of 4-1:0.0 failed with error -22
[   71.636290][ T4719] loop4: detected capacity change from 0 to 1024
[   71.693239][ T4719] hfsplus: unable to parse mount options
[   71.699539][ T3835] usb 4-1: USB disconnect, device number 6
[   71.771997][   T13] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   72.064454][ T4733] loop1: detected capacity change from 0 to 4096
[   72.118076][ T4733] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   72.182233][   T13] usb 3-1: config 0 has an invalid interface number: 213 but max is 0
[   72.196926][   T13] usb 3-1: config 0 has an invalid interface number: 229 but max is 0
[   72.234864][   T13] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[   72.254755][ T4733] ntfs3: loop1: failed to convert "c46c" to iso8859-9
[   72.275151][   T13] usb 3-1: config 0 has no interface number 0
[   72.281252][   T13] usb 3-1: config 0 has no interface number 1
[   72.314067][   T13] usb 3-1: config 0 interface 213 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   72.339775][   T13] usb 3-1: config 0 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   72.353575][   T13] usb 3-1: too many endpoints for config 0 interface 229 altsetting 129: 54, using maximum allowed: 30
[   72.386063][   T13] usb 3-1: config 0 interface 229 altsetting 129 endpoint 0xC has invalid maxpacket 512, setting to 64
[   72.407292][ T4754] loop0: detected capacity change from 0 to 512
[   72.426782][   T13] usb 3-1: config 0 interface 229 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 54
[   72.446127][   T13] usb 3-1: config 0 interface 229 has no altsetting 0
[   72.482366][ T4754] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   72.511870][ T3608] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   72.582798][ T4754] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.458: corrupted xattr block 33
[   72.636094][ T4767] capability: warning: `syz.1.463' uses deprecated v2 capabilities in a way that may be insecure
[   72.652296][   T13] usb 3-1: New USB device found, idVendor=0565, idProduct=0005, bcdDevice= 9.0b
[   72.671556][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.689544][   T13] usb 3-1: Product: syz
[   72.707695][   T13] usb 3-1: Manufacturer: syz
[   72.737548][   T13] usb 3-1: SerialNumber: syz
[   72.744700][   T13] usb 3-1: config 0 descriptor??
[   72.817389][ T4776] openvswitch: netlink: IP tunnel dst address not specified
[   72.840658][ T4777] i2c i2c-0: Invalid block write size 34
[   72.872192][ T3608] usb 5-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51
[   72.901542][ T3608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.934047][ T3608] usb 5-1: config 0 descriptor??
[   73.005751][ T3608] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4
[   73.015681][   T13] kaweth 3-1:0.213: Firmware present in device.
[   73.212881][   T13] kaweth 3-1:0.213: Error reading configuration (-71), no net device created
[   73.237899][   T13] kaweth: probe of 3-1:0.213 failed with error -5
[   73.370693][   T13] kaweth 3-1:0.229: Firmware present in device.
[   73.396204][ T4819] netlink: 64 bytes leftover after parsing attributes in process `syz.3.487'.
[   73.417771][   T13] kaweth 3-1:0.229: Error reading configuration (-71), no net device created
[   73.425578][ T4819] netlink: 64 bytes leftover after parsing attributes in process `syz.3.487'.
[   73.435664][ T3608] gspca_sn9c20x: Write register 1001 failed -71
[   73.440791][   T13] kaweth: probe of 3-1:0.229 failed with error -5
[   73.446420][ T3608] gspca_sn9c20x: Device initialization failed
[   73.472043][ T3608] gspca_sn9c20x: probe of 5-1:0.0 failed with error -71
[   73.496045][ T3608] usb 5-1: USB disconnect, device number 6
[   73.513546][   T13] usb 3-1: USB disconnect, device number 4
[   73.654750][ T4836] loop0: detected capacity change from 0 to 256
[   73.686014][ T4839] loop1: detected capacity change from 0 to 256
[   73.704006][ T4840] loop3: detected capacity change from 0 to 2048
[   73.732303][ T4836] FAT-fs (loop0): Directory bread(block 64) failed
[   73.739235][ T4836] FAT-fs (loop0): Directory bread(block 65) failed
[   73.750455][ T4836] FAT-fs (loop0): Directory bread(block 66) failed
[   73.757046][ T4840] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.779186][ T4839] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[   73.801948][ T4836] FAT-fs (loop0): Directory bread(block 67) failed
[   73.832165][ T4836] FAT-fs (loop0): Directory bread(block 68) failed
[   73.838718][ T4836] FAT-fs (loop0): Directory bread(block 69) failed
[   73.859936][ T4836] FAT-fs (loop0): Directory bread(block 70) failed
[   73.877564][ T4836] FAT-fs (loop0): Directory bread(block 71) failed
[   73.900893][ T4836] FAT-fs (loop0): Directory bread(block 72) failed
[   73.952341][ T4836] FAT-fs (loop0): Directory bread(block 73) failed
[   74.038956][ T4851] loop1: detected capacity change from 0 to 256
[   74.168440][ T4851] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[   74.169202][ T4860] loop3: detected capacity change from 0 to 16
[   74.305332][ T4870] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.511'.
[   74.321972][ T4860] erofs: (device loop3): mounted with root inode @ nid 36.
[   74.573951][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'.
[   74.627141][ T4885] loop2: detected capacity change from 0 to 1024
[   74.734466][ T4897] loop4: detected capacity change from 0 to 764
[   74.761557][ T4898] loop3: detected capacity change from 0 to 2048
[   74.807582][ T4897] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   74.840886][ T4905] netlink: 'syz.0.530': attribute type 10 has an invalid length.
[   74.847397][ T4907] loop2: detected capacity change from 0 to 16
[   74.864614][ T4897] Symlink component flag not implemented
[   74.879510][ T4898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.897207][ T4897] Symlink component flag not implemented
[   74.912142][ T4907] erofs: (device loop2): mounted with root inode @ nid 36.
[   74.919160][ T4905] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.927226][ T4897] Symlink component flag not implemented (128)
[   74.943036][ T4905] team0: Port device batadv0 added
[   74.944921][ T4907] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   74.962586][ T4897] Symlink component flag not implemented (122)
[   74.990086][ T4907] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -35 in[64, 4032] out[1851]
[   75.016521][ T4907] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[   75.036801][ T4905] syz.0.530 (4905) used greatest stack depth: 18488 bytes left
[   75.102648][ T4914] loop4: detected capacity change from 0 to 256
[   75.181956][ T4330] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   75.449837][ T4933] netlink: 'syz.2.543': attribute type 3 has an invalid length.
[   75.464024][ T4330] usb 4-1: Using ep0 maxpacket: 16
[   75.586669][ T4330] usb 4-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config
[   75.622672][ T4945] netlink: 'syz.4.549': attribute type 15 has an invalid length.
[   75.627546][ T4943] loop2: detected capacity change from 0 to 2048
[   75.632814][ T4330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   75.662841][ T4330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 105, changing to 7
[   75.693496][ T4330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24686, setting to 1024
[   75.712308][ T4330] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   75.760099][ T4943] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.836481][ T4330] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   75.881890][ T4330] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   75.908039][ T4330] usb 4-1: Manufacturer: syz
[   75.950550][ T4330] usb 4-1: config 0 descriptor??
[   75.958695][ T4964] loop4: detected capacity change from 0 to 128
[   76.054087][ T4964] FAT-fs (loop4): Directory bread(block 160) failed
[   76.060724][ T4964] FAT-fs (loop4): Directory bread(block 161) failed
[   76.073886][ T4964] FAT-fs (loop4): Directory bread(block 162) failed
[   76.081870][ T4964] FAT-fs (loop4): Directory bread(block 163) failed
[   76.091893][ T4964] FAT-fs (loop4): Directory bread(block 164) failed
[   76.098521][ T4964] FAT-fs (loop4): Directory bread(block 165) failed
[   76.109902][ T4964] FAT-fs (loop4): Directory bread(block 166) failed
[   76.117695][ T4964] FAT-fs (loop4): Directory bread(block 167) failed
[   76.162714][ T4964] FAT-fs (loop4): Directory bread(block 160) failed
[   76.169801][ T4964] FAT-fs (loop4): Directory bread(block 161) failed
[   76.172809][ T4969] loop2: detected capacity change from 0 to 1764
[   76.223719][ T4969] iso9660: Corrupted directory entry in block 2 of inode 1920
[   76.246676][ T3817] usb 4-1: USB disconnect, device number 7
[   76.277005][ T1291] cfg80211: failed to load regulatory.db
[   76.323503][ T4971] netlink: 252 bytes leftover after parsing attributes in process `syz.4.562'.
[   76.408677][ T4955] loop1: detected capacity change from 0 to 32768
[   76.472725][ T4955] XFS: attr2 mount option is deprecated.
[   76.602852][ T4955] XFS (loop1): Mounting V5 Filesystem
[   76.641430][ T4990] netlink: 136 bytes leftover after parsing attributes in process `syz.4.568'.
[   76.758738][ T4955] XFS (loop1): Ending clean mount
[   76.779478][ T4955] XFS (loop1): Quotacheck needed: Please wait.
[   76.818071][ T4973] loop2: detected capacity change from 0 to 40427
[   76.884420][ T4955] XFS (loop1): Quotacheck: Done.
[   76.888005][ T4973] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[   76.931811][ T4973] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   76.961460][ T4973] F2FS-fs (loop2): invalid crc value
[   76.970953][ T3580] XFS (loop1): Unmounting Filesystem
[   76.993910][ T4973] F2FS-fs (loop2): Found nat_bits in checkpoint
[   77.077870][ T5010] loop4: detected capacity change from 0 to 256
[   77.141113][ T4973] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   77.151106][ T4973] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   77.164251][ T5010] FAT-fs (loop4): Directory bread(block 64) failed
[   77.173103][ T5010] FAT-fs (loop4): Directory bread(block 65) failed
[   77.179701][ T5010] FAT-fs (loop4): Directory bread(block 66) failed
[   77.228167][ T5010] FAT-fs (loop4): Directory bread(block 67) failed
[   77.255457][ T5010] FAT-fs (loop4): Directory bread(block 68) failed
[   77.285084][ T5010] FAT-fs (loop4): Directory bread(block 69) failed
[   77.307397][ T5010] FAT-fs (loop4): Directory bread(block 70) failed
[   77.327940][ T5010] FAT-fs (loop4): Directory bread(block 71) failed
[   77.355681][ T5010] FAT-fs (loop4): Directory bread(block 72) failed
[   77.379425][ T5010] FAT-fs (loop4): Directory bread(block 73) failed
[   77.714836][ T5028] loop3: detected capacity change from 0 to 2048
[   77.787424][ T5028] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   77.839041][ T5039] loop2: detected capacity change from 0 to 164
[   77.856918][ T5040] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.079116][ T5049] loop3: detected capacity change from 0 to 512
[   78.090300][ T5045] loop4: detected capacity change from 0 to 2048
[   78.163380][ T5045] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[   78.233455][ T5049] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   78.275400][ T5049] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038 (0x7fffffff)
[   78.315129][ T5062] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.386476][ T5045] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[   78.415142][ T5045] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[   78.428023][ T5045] Remounting filesystem read-only
[   78.450642][ T5045] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[   78.512067][ T5045] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16)
[   78.549996][ T5045] NILFS (loop4): error -5 truncating bmap (ino=16)
[   78.652186][ T5078] xt_bpf: check failed: parse error
[   78.658629][ T3574] NILFS (loop4): discard dirty page: offset=4096, ino=6
[   78.697960][ T3574] NILFS (loop4): discard dirty block: blocknr=39, size=1024
[   78.710126][ T3574] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[   78.758990][ T3574] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[   78.824892][ T5083] loop3: detected capacity change from 0 to 1024
[   78.840058][ T3574] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[   78.851286][ T3574] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[   78.867570][ T5086] loop0: detected capacity change from 0 to 1024
[   78.967251][ T5083] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000086,resuid=0x0000000000000000,max_batch_time=0x0000000000000006,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[   79.027320][ T5095] netlink: 'syz.4.615': attribute type 10 has an invalid length.
[   79.050968][ T5068] loop2: detected capacity change from 0 to 32768
[   79.107021][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.115960][ T5095] team0: Port device batadv0 added
[   79.177802][ T5068] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   79.260117][ T5105] x_tables: duplicate entry at hook 2
[   79.319874][ T5068] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #3909091328
[   79.337432][    C1] vkms_vblank_simulate: vblank timer overrun
[   79.375333][ T5112] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1280)
[   79.432254][ T5068] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   79.432347][ T5112] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   79.475226][ T5068] OCFS2: File system is now read-only.
[   79.480761][ T5068] (syz.2.602,5068,0):ocfs2_search_chain:1761 ERROR: status = -30
[   79.497826][ T5068] (syz.2.602,5068,0):ocfs2_search_chain:1871 ERROR: status = -30
[   79.509346][ T5068] (syz.2.602,5068,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30
[   79.518112][ T5068] (syz.2.602,5068,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[   79.560797][ T5068] (syz.2.602,5068,0):__ocfs2_claim_clusters:2355 ERROR: status = -30
[   79.582280][ T5068] (syz.2.602,5068,0):__ocfs2_claim_clusters:2363 ERROR: status = -30
[   79.595886][ T5068] (syz.2.602,5068,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[   79.640486][ T5126] loop1: detected capacity change from 0 to 256
[   79.645401][ T5068] (syz.2.602,5068,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[   79.676562][ T5068] (syz.2.602,5068,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[   79.716981][ T5130] loop4: detected capacity change from 0 to 256
[   79.730167][ T5068] (syz.2.602,5068,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[   79.734560][ T5126] FAT-fs (loop1): Directory bread(block 64) failed
[   79.746284][ T5126] FAT-fs (loop1): Directory bread(block 65) failed
[   79.760566][ T5068] (syz.2.602,5068,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[   79.770989][ T5126] FAT-fs (loop1): Directory bread(block 66) failed
[   79.778389][ T5068] (syz.2.602,5068,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[   79.798481][ T5126] FAT-fs (loop1): Directory bread(block 67) failed
[   79.817264][ T5068] (syz.2.602,5068,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30
[   79.818868][ T5130] FAT-fs (loop4): Directory bread(block 64) failed
[   79.841926][ T5126] FAT-fs (loop1): Directory bread(block 68) failed
[   79.848900][ T5068] (syz.2.602,5068,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30
[   79.855216][ T5130] FAT-fs (loop4): Directory bread(block 65) failed
[   79.887308][ T5068] (syz.2.602,5068,0):ocfs2_symlink:1909 ERROR: status = -30
[   79.888797][ T5126] FAT-fs (loop1): Directory bread(block 69) failed
[   79.909492][ T5130] FAT-fs (loop4): Directory bread(block 66) failed
[   79.922856][ T5130] FAT-fs (loop4): Directory bread(block 67) failed
[   79.932038][ T5126] FAT-fs (loop1): Directory bread(block 70) failed
[   79.935042][ T5068] (syz.2.602,5068,0):ocfs2_symlink:2063 ERROR: status = -30
[   79.938628][ T5126] FAT-fs (loop1): Directory bread(block 71) failed
[   79.951912][ T5140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.636'.
[   79.968442][ T5130] FAT-fs (loop4): Directory bread(block 68) failed
[   80.009053][ T5126] FAT-fs (loop1): Directory bread(block 72) failed
[   80.015791][ T5130] FAT-fs (loop4): Directory bread(block 69) failed
[   80.047342][ T5126] FAT-fs (loop1): Directory bread(block 73) failed
[   80.057517][ T5130] FAT-fs (loop4): Directory bread(block 70) failed
[   80.064514][ T3566] ocfs2: Unmounting device (7,2) on (node local)
[   80.086058][ T5130] FAT-fs (loop4): Directory bread(block 71) failed
[   80.143007][ T5130] FAT-fs (loop4): Directory bread(block 72) failed
[   80.156997][ T5130] FAT-fs (loop4): Directory bread(block 73) failed
[   80.431357][ T5156] loop3: detected capacity change from 0 to 1024
[   80.490150][ T5164] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.649'.
[   80.543579][ T5164] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[   80.675871][  T154] hfsplus: b-tree write err: -5, ino 4
[   80.782900][ T5182] loop3: detected capacity change from 0 to 256
[   80.811194][ T5177] loop4: detected capacity change from 0 to 2048
[   80.818976][ T5185] loop0: detected capacity change from 0 to 256
[   80.894397][ T5182] FAT-fs (loop3): Directory bread(block 64) failed
[   80.896161][ T5177] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[   80.910300][ T5185] FAT-fs (loop0): Directory bread(block 64) failed
[   80.921934][ T5182] FAT-fs (loop3): Directory bread(block 65) failed
[   80.930680][ T5185] FAT-fs (loop0): Directory bread(block 65) failed
[   80.941964][ T5182] FAT-fs (loop3): Directory bread(block 66) failed
[   80.948515][ T5182] FAT-fs (loop3): Directory bread(block 67) failed
[   80.961987][ T5185] FAT-fs (loop0): Directory bread(block 66) failed
[   80.972005][ T5185] FAT-fs (loop0): Directory bread(block 67) failed
[   80.981983][ T5182] FAT-fs (loop3): Directory bread(block 68) failed
[   80.988555][ T5182] FAT-fs (loop3): Directory bread(block 69) failed
[   81.002038][ T5185] FAT-fs (loop0): Directory bread(block 68) failed
[   81.009018][ T5191] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.029994][ T5185] FAT-fs (loop0): Directory bread(block 69) failed
[   81.037748][ T5185] FAT-fs (loop0): Directory bread(block 70) failed
[   81.051902][ T5182] FAT-fs (loop3): Directory bread(block 70) failed
[   81.058587][ T5185] FAT-fs (loop0): Directory bread(block 71) failed
[   81.068700][ T5182] FAT-fs (loop3): Directory bread(block 71) failed
[   81.078919][ T5185] FAT-fs (loop0): Directory bread(block 72) failed
[   81.089058][ T5182] FAT-fs (loop3): Directory bread(block 72) failed
[   81.099155][ T5185] FAT-fs (loop0): Directory bread(block 73) failed
[   81.121834][ T5182] FAT-fs (loop3): Directory bread(block 73) failed
[   81.433599][ T5169] loop1: detected capacity change from 0 to 32768
[   81.504600][ T5169] XFS: attr2 mount option is deprecated.
[   81.526508][ T5169] XFS: ikeep mount option is deprecated.
[   81.563866][ T5169] XFS: noikeep mount option is deprecated.
[   81.678547][ T5169] XFS (loop1): Mounting V5 Filesystem
[   81.687484][ T5222] loop3: detected capacity change from 0 to 164
[   81.731378][ T5225] loop0: detected capacity change from 0 to 2048
[   81.771284][ T5169] XFS (loop1): Ending clean mount
[   81.788507][ T5169] XFS (loop1): Quotacheck needed: Please wait.
[   81.790053][ T5225] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   81.829594][ T5230] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.871467][ T5169] XFS (loop1): Quotacheck: Done.
[   81.930500][ T3580] XFS (loop1): Unmounting Filesystem
[   81.972694][ T5232] loop3: detected capacity change from 0 to 128
[   82.036743][ T5232] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   82.051962][ T3817] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   82.060472][ T5197] orangefs_mount: mount request failed with -4
[   82.178147][ T5239] loop4: detected capacity change from 0 to 128
[   82.343225][ T5239] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   82.355153][ T5239] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038 (0x7fffffff)
[   82.491593][ T5253] loop3: detected capacity change from 0 to 1024
[   82.498285][ T3817] usb 3-1: Using ep0 maxpacket: 8
[   82.627630][ T5259] loop1: detected capacity change from 0 to 8
[   82.662084][ T3817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   82.683292][ T5259] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   82.687730][ T3817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   82.764620][ T5259] process 'syz.1.678' launched './file2' with NULL argv: empty string added
[   82.822865][ T5259] cramfs: Error -3 while decompressing!
[   82.852106][ T5259] cramfs: ffffffff969912a8(26)->ffff8880720f5000(4096)
[   82.875866][ T5259] cramfs: Error -3 while decompressing!
[   82.896169][ T5259] cramfs: ffffffff969912c2(26)->ffff88805c808000(4096)
[   82.903783][ T3817] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[   82.923263][   T26] kauditd_printk_skb: 8 callbacks suppressed
[   82.923277][   T26] audit: type=1400 audit(1727781789.213:3439): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5268 comm="syz.0.694"
[   82.934826][ T3817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.959472][ T5259] cramfs: Error -3 while decompressing!
[   82.969609][ T5259] cramfs: ffffffff969912dc(16)->ffff88805c827000(4096)
[   83.001936][ T5259] cramfs: Error -3 while decompressing!
[   83.022165][ T3817] usb 3-1: Product: syz
[   83.026435][ T3817] usb 3-1: Manufacturer: syz
[   83.037850][ T3817] usb 3-1: SerialNumber: syz
[   83.051283][ T5259] cramfs: ffffffff969912a8(26)->ffff8880720f5000(4096)
[   83.056654][ T3817] usb 3-1: config 0 descriptor??
[   83.069889][ T5273] loop0: detected capacity change from 0 to 512
[   83.120146][ T5277] netlink: 132 bytes leftover after parsing attributes in process `syz.3.698'.
[   83.227579][ T5273] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   83.240568][ T5273] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038 (0x7fffffff)
[   83.244751][ T5285] ebt_among: dst integrity fail: 200
[   83.311668][ T5258] loop4: detected capacity change from 0 to 40427
[   83.366583][ T5258] F2FS-fs (loop4): invalid crc value
[   83.396991][ T5258] F2FS-fs (loop4): Found nat_bits in checkpoint
[   83.564718][ T1075] usb 3-1: USB disconnect, device number 5
[   83.590773][ T5258] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[   83.626622][ T5258] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   84.628150][ T5287] loop1: detected capacity change from 0 to 40427
[   84.689593][ T5287] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   84.715432][ T5287] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   84.755011][ T5287] F2FS-fs (loop1): invalid crc value
[   84.793886][ T5287] F2FS-fs (loop1): Found nat_bits in checkpoint
[   84.899384][ T5315] loop3: detected capacity change from 0 to 32768
[   84.948427][ T5287] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   84.967439][ T5287] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   85.030280][ T5315] 
[   85.030280][ T5315]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   85.030280][ T5315] 
[   85.040095][ T5376] netlink: 'syz.2.738': attribute type 21 has an invalid length.
[   85.068484][ T5376] netlink: 132 bytes leftover after parsing attributes in process `syz.2.738'.
[   85.122694][ T5315] ERROR: (device loop3): dbAlloc: the hint is outside the map
[   85.122694][ T5315] 
[   85.260168][  T144] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   85.283823][ T5391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.746'.
[   85.296073][  T154] read_mapping_page failed!
[   85.300912][  T154] ERROR: (device loop3): txCommit: 
[   85.300912][  T154] 
[   85.312017][  T144] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   85.332860][  T154] jfs_write_inode: jfs_commit_inode failed!
[   85.355935][ T3575] 
[   85.355935][ T3575]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   85.355935][ T3575] 
[   85.394034][ T3575] 
[   85.394034][ T3575]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   85.394034][ T3575] 
[   85.436234][ T5399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'.
[   85.579905][ T5407] loop2: detected capacity change from 0 to 64
[   85.927249][ T5419] ISOFS: Unable to identify CD-ROM format.
[   86.010904][ T5425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.081449][ T5432] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.744'.
[   86.154138][ T5432] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[   86.429147][ T5460] netlink: 'syz.3.778': attribute type 21 has an invalid length.
[   86.796688][ T5490] tmpfs: Bad value for 'mpol'
[   86.812161][   T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   86.897684][ T5498] loop2: detected capacity change from 0 to 256
[   86.901976][ T3817] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   86.983255][ T5498] FAT-fs (loop2): Directory bread(block 64) failed
[   86.989820][ T5498] FAT-fs (loop2): Directory bread(block 65) failed
[   87.081943][ T5498] FAT-fs (loop2): Directory bread(block 66) failed
[   87.088505][ T5498] FAT-fs (loop2): Directory bread(block 67) failed
[   87.095373][   T13] usb 5-1: Using ep0 maxpacket: 16
[   87.106537][ T5498] FAT-fs (loop2): Directory bread(block 68) failed
[   87.126961][ T5498] FAT-fs (loop2): Directory bread(block 69) failed
[   87.134585][ T5498] FAT-fs (loop2): Directory bread(block 70) failed
[   87.150953][ T5498] FAT-fs (loop2): Directory bread(block 71) failed
[   87.164362][ T5498] FAT-fs (loop2): Directory bread(block 72) failed
[   87.170906][ T5498] FAT-fs (loop2): Directory bread(block 73) failed
[   87.191372][ T5516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.806'.
[   87.292096][ T3817] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   87.314726][ T3817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.330288][ T3817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[   87.340085][ T3817] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   87.412912][   T13] usb 5-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73
[   87.441204][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.456130][   T13] usb 5-1: Product: syz
[   87.461020][   T13] usb 5-1: Manufacturer: syz
[   87.487538][   T13] usb 5-1: SerialNumber: syz
[   87.497878][   T13] usb 5-1: config 0 descriptor??
[   87.517792][ T3817] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   87.531357][ T3817] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   87.545888][ T3817] usb 4-1: Product: syz
[   87.550068][ T3817] usb 4-1: Manufacturer: syz
[   87.557115][   T13] gspca_main: spca501-2.14.0 probing 0497:c001
[   87.575955][ T5537] x_tables: unsorted entry at hook 2
[   87.612865][ T3817] cdc_wdm 4-1:1.0: skipping garbage
[   87.618911][ T3817] cdc_wdm 4-1:1.0: invalid descriptor buffer length
[   87.638440][ T3817] cdc_wdm: probe of 4-1:1.0 failed with error -22
[   87.719287][ T5547] netlink: 'syz.0.821': attribute type 1 has an invalid length.
[   87.737341][ T5547] netlink: 224 bytes leftover after parsing attributes in process `syz.0.821'.
[   87.761936][   T13] gspca_spca501: reg write: error -71
[   87.767333][   T13] spca501 5-1:0.0: Reg write failed for 0x02,0x07,0x05
[   87.784515][   T13] spca501: probe of 5-1:0.0 failed with error -22
[   87.828133][   T13] usb 5-1: USB disconnect, device number 7
[   87.854267][ T4495] usb 4-1: USB disconnect, device number 8
[   87.899962][ T5554] syz.1.824 uses obsolete (PF_INET,SOCK_PACKET)
[   88.018331][ T5559] loop1: detected capacity change from 0 to 1024
[   88.057745][ T5561] loop0: detected capacity change from 0 to 512
[   88.175211][ T5561] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback.
[   88.193203][ T5545] loop2: detected capacity change from 0 to 32768
[   88.200982][ T5561] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038 (0x7fffffff)
[   88.269589][ T5566] loop1: detected capacity change from 0 to 1764
[   88.316038][ T5545] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   88.495634][ T5545] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 7
[   88.544639][ T5545] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   88.558019][ T5545] OCFS2: File system is now read-only.
[   88.578286][ T5545] (syz.2.820,5545,1):ocfs2_search_chain:1761 ERROR: status = -30
[   88.598322][ T5545] (syz.2.820,5545,1):ocfs2_search_chain:1871 ERROR: status = -30
[   88.648993][ T5545] (syz.2.820,5545,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30
[   88.690781][ T5545] (syz.2.820,5545,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[   88.694734][ T5593] loop0: detected capacity change from 0 to 1024
[   88.741526][ T5545] (syz.2.820,5545,0):ocfs2_claim_new_inode:2216 ERROR: status = -30
[   88.765023][ T5545] (syz.2.820,5545,0):ocfs2_claim_new_inode:2231 ERROR: status = -30
[   88.775872][ T5545] (syz.2.820,5545,0):ocfs2_mknod_locked:637 ERROR: status = -30
[   88.784678][ T5545] (syz.2.820,5545,0):ocfs2_mknod:383 ERROR: status = -30
[   88.795546][ T5545] (syz.2.820,5545,0):ocfs2_mknod:500 ERROR: status = -30
[   88.803557][ T5545] (syz.2.820,5545,0):ocfs2_create:674 ERROR: status = -30
[   88.807838][ T5593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   88.825885][ T5601] loop4: detected capacity change from 0 to 1024
[   88.837738][ T3566] ocfs2: Unmounting device (7,2) on (node local)
[   88.893199][ T5593] EXT4-fs error (device loop0): ext4_get_first_dir_block:3617: inode #11: comm syz.0.841: directory missing '..'
[   88.925025][   T13] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[   88.959288][ T5601] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   89.189532][ T5617] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   89.216022][ T5621] sctp: [Deprecated]: syz.2.852 (pid 5621) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.216022][ T5621] Use struct sctp_sack_info instead
[   89.332906][ T5627] netlink: 'syz.1.856': attribute type 5 has an invalid length.
[   89.362559][   T13] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   89.388749][ T5630] loop2: detected capacity change from 0 to 1024
[   89.399833][   T13] usb 4-1: config 0 has no interface number 0
[   89.406305][ T5631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'.
[   89.459153][ T5633] 9pnet: p9_fd_create_tcp (5633): problem connecting socket to 127.0.0.1
[   89.490750][ T5630] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[   89.502238][ T5635] loop0: detected capacity change from 0 to 64
[   89.521000][ T5630] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback.
[   89.621963][   T13] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[   89.641435][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.659842][   T13] usb 4-1: Product: syz
[   89.664275][   T13] usb 4-1: Manufacturer: syz
[   89.668884][   T13] usb 4-1: SerialNumber: syz
[   89.675563][   T13] usb 4-1: config 0 descriptor??
[   89.737154][   T13] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[   89.758147][   T13] usb 4-1: selecting invalid altsetting 1
[   89.792630][   T13] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[   89.821501][   T13] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[   89.842743][ T5646] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   89.863847][ T5646] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   89.879653][ T5646] overlayfs: missing 'lowerdir'
[   89.973972][ T5625] loop4: detected capacity change from 0 to 32768
[   90.158285][   T13] usb 4-1: USB disconnect, device number 9
[   90.307642][ T5670] deleting an unspecified loop device is not supported.
[   90.318647][ T4330] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   90.527341][ T5686] loop0: detected capacity change from 0 to 4096
[   90.571947][ T4330] usb 3-1: Using ep0 maxpacket: 16
[   90.581492][ T5686] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[   90.593705][ T5686] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   90.608252][ T5686] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[   90.619758][ T5686] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   90.632868][ T5686] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   90.645745][ T5686] ntfs: volume version 3.1.
[   90.652724][ T5686] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[   90.665974][ T5686] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   90.671890][    T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   90.703237][ T5686] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[   90.716312][ T5686] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   90.728403][ T3817] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   90.738985][ T5690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'.
[   90.748018][ T5686] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[   90.749734][ T5690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.887'.
[   90.773600][ T5690] netlink: 14 bytes leftover after parsing attributes in process `syz.3.887'.
[   90.803215][ T5690] netlink: 14 bytes leftover after parsing attributes in process `syz.3.887'.
[   90.862504][ T4330] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[   90.873306][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.881327][ T4330] usb 3-1: Product: syz
[   90.891257][ T4330] usb 3-1: Manufacturer: syz
[   90.896438][ T4330] usb 3-1: SerialNumber: syz
[   90.909403][ T4330] usb 3-1: config 0 descriptor??
[   91.073275][    T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.099595][ T5708] loop3: detected capacity change from 0 to 1024
[   91.106358][    T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[   91.117572][    T7] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[   91.127204][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.137750][    T7] usb 5-1: config 0 descriptor??
[   91.176283][ T5708] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   91.181964][ T4330] speedtch 3-1:0.0: speedtch_bind: data interface not found!
[   91.188124][ T3817] usb 2-1: too many endpoints for config 0 interface 0 altsetting 241: 103, using maximum allowed: 30
[   91.205178][ T4330] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[   91.206764][ T3817] usb 2-1: config 0 interface 0 altsetting 241 endpoint 0x87 has invalid maxpacket 65535, setting to 64
[   91.226046][ T3817] usb 2-1: config 0 interface 0 altsetting 241 has 1 endpoint descriptor, different from the interface descriptor's value: 103
[   91.234769][ T5708] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback.
[   91.239545][ T3817] usb 2-1: config 0 interface 0 has no altsetting 0
[   91.411326][ T4495] usb 3-1: USB disconnect, device number 6
[   91.419869][ T5715] netlink: 'syz.3.899': attribute type 21 has an invalid length.
[   91.438510][ T5715] netlink: 132 bytes leftover after parsing attributes in process `syz.3.899'.
[   91.447804][ T3817] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20
[   91.457168][ T3817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.465344][ T3817] usb 2-1: Product: syz
[   91.469645][ T3817] usb 2-1: Manufacturer: syz
[   91.474299][ T3817] usb 2-1: SerialNumber: syz
[   91.481470][ T3817] usb 2-1: config 0 descriptor??
[   91.513282][ T5682] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   91.632254][    T7] Bluetooth: Can't get version to change to load ram patch err
[   91.639907][    T7] Bluetooth: Loading patch file failed
[   91.645509][    T7] ath3k: probe of 5-1:0.0 failed with error -71
[   91.653598][    T7] usb 5-1: USB disconnect, device number 8
[   91.782609][ T3820] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   91.792147][ T3817] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected
[   91.799647][ T3817] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[   91.808278][ T3817] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[   91.816137][ T3817] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[   91.824032][ T3817] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[   91.831607][ T3817] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[   91.839542][ T3817] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[   91.850063][ T3817] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[   91.864671][ T3817] usb 2-1: USB disconnect, device number 4
[   91.875215][ T3817] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[   91.886088][ T3817] keyspan 2-1:0.0: device disconnected
[   91.972442][ T5719] loop2: detected capacity change from 0 to 4096
[   92.039999][ T5719] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[   92.061950][ T3820] usb 4-1: Using ep0 maxpacket: 16
[   92.072951][ T5719] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   92.084265][ T5719] ntfs3: loop2: Failed to load root.
[   92.212082][ T3820] usb 4-1: config 0 has no interfaces?
[   92.238516][ T5721] loop4: detected capacity change from 0 to 1764
[   92.334372][ T3820] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   92.362789][ T3820] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   92.398419][ T3820] usb 4-1: Product: syz
[   92.409438][ T3820] usb 4-1: Manufacturer: syz
[   92.434535][ T3820] r8152-cfgselector 4-1: config 0 descriptor??
[   92.618330][ T5738] loop1: detected capacity change from 0 to 4096
[   92.678803][ T5738] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   92.733081][ T3820] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[   92.755758][ T5749] netlink: 32 bytes leftover after parsing attributes in process `syz.4.916'.
[   92.771188][ T5749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'.
[   92.789607][ T5738] ntfs3: loop1: failed to convert "c46c" to maccyrillic
[   92.796659][ T5749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.916'.
[   92.796699][ T5749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.916'.
[   92.920291][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'.
[   92.939957][ T3817] usb 4-1: USB disconnect, device number 10
[   93.139356][ T5741] loop2: detected capacity change from 0 to 32768
[   93.229977][ T5741] XFS (loop2): Mounting V5 Filesystem
[   93.270873][ T5769] loop1: detected capacity change from 0 to 4096
[   93.340434][ T5741] XFS (loop2): Ending clean mount
[   93.347893][ T5741] XFS (loop2): Quotacheck needed: Please wait.
[   93.371492][ T5769] ntfs: volume version 3.1.
[   93.417501][ T5787] loop4: detected capacity change from 0 to 256
[   93.424428][ T5741] XFS (loop2): Quotacheck: Done.
[   93.466306][ T3566] XFS (loop2): Unmounting Filesystem
[   93.803941][ T5804] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[   93.848635][ T5807] loop4: detected capacity change from 0 to 128
[   94.394136][ T5831] device  entered promiscuous mode
[   94.596425][ T5844] binfmt_misc: register: failed to install interpreter file ./bus/file0
[   94.798639][ T5811] loop3: detected capacity change from 0 to 32768
[   94.883519][ T5860] loop2: detected capacity change from 0 to 512
[   95.079708][ T5819] loop4: detected capacity change from 0 to 32768
[   95.120292][ T5860] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   95.120711][ T5811] XFS (loop3): Mounting V5 Filesystem
[   95.140300][ T5860] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038 (0x7fffffff)
[   95.197572][ T5819] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.945 (5819)
[   95.289621][ T5811] XFS (loop3): Ending clean mount
[   95.328012][ T5819] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   95.337271][ T5819] BTRFS info (device loop4): using free space tree
[   95.344351][ T5819] BTRFS info (device loop4): has skinny extents
[   95.372056][ T5811] XFS (loop3): Quotacheck needed: Please wait.
[   95.459387][ T5819] BTRFS info (device loop4): enabling ssd optimizations
[   95.459391][ T5811] XFS (loop3): Quotacheck: Done.
[   95.557622][ T3575] XFS (loop3): Unmounting Filesystem
[   95.957813][ T5931] loop1: detected capacity change from 0 to 4096
[   96.034795][ T5944] Invalid ELF header magic: != ELF
[   96.090946][ T5942] loop0: detected capacity change from 0 to 4096
[   96.178654][ T5931] ntfs3: loop1: mft corrupted
[   96.232728][ T5942] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[   96.328628][ T5942] ntfs3: loop0: Failed to load root.
[   96.628074][ T5968] __nla_validate_parse: 2 callbacks suppressed
[   96.628091][ T5968] netlink: 476 bytes leftover after parsing attributes in process `syz.4.1005'.
[   96.665394][ T5971] loop0: detected capacity change from 0 to 8
[   96.807147][ T5971] SQUASHFS error: Failed to read block 0x1ec: -5
[   96.837812][ T5971] SQUASHFS error: Unable to read metadata cache entry [1ea]
[   96.888954][ T5975] loop4: detected capacity change from 0 to 4096
[   97.112502][ T5978] loop3: detected capacity change from 0 to 4096
[   97.180385][ T5978] __ntfs_error: 23 callbacks suppressed
[   97.180401][ T5978] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[   97.250233][ T5978] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing.
[   97.269429][ T5982] netlink: 'syz.4.1012': attribute type 15 has an invalid length.
[   97.277547][ T5978] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[   97.300988][ T5982] netlink: 'syz.4.1012': attribute type 7 has an invalid length.
[   97.311117][ T5978] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   97.323487][ T5964] loop2: detected capacity change from 0 to 32768
[   97.329285][ T5958] loop1: detected capacity change from 0 to 40427
[   97.355646][ T5978] ntfs: volume version 3.1.
[   97.379363][ T5964] gfs2: fsid=[(: Trying to join cluster "lock_nolock", "[("
[   97.407522][ T5964] gfs2: fsid=[(: Now mounting FS (format 0)...
[   97.419751][ T5958] F2FS-fs (loop1): invalid crc value
[   97.427996][ T5958] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[   97.448495][ T5978] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[   97.489279][ T5964] gfs2: fsid=[(.0: journal 0 mapped with 20 extents in 0ms
[   97.497957][ T5958] F2FS-fs (loop1): Found nat_bits in checkpoint
[   97.522187][ T2987] gfs2: fsid=[(.0: jid=0, already locked for use
[   97.525694][ T5978] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[   97.528809][ T2987] gfs2: fsid=[(.0: jid=0: Looking at journal...
[   97.589812][ T5958] F2FS-fs (loop1): recover fsync data on readonly fs
[   97.610637][ T5958] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[   97.626601][ T5958] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[   97.647224][ T5958] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   97.655747][ T2987] gfs2: fsid=[(.0: jid=0: Journal head lookup took 126ms
[   97.673611][ T2987] gfs2: fsid=[(.0: jid=0: Done
[   97.679271][ T5964] gfs2: fsid=[(.0: first mount done, others may mount
[   97.907121][ T5984] loop4: detected capacity change from 0 to 32768
[   97.988086][ T5984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1013 (5984)
[   98.009040][ T5984] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   98.018371][ T5984] BTRFS info (device loop4): using free space tree
[   98.061946][ T5984] BTRFS info (device loop4): has skinny extents
[   98.372021][ T5984] BTRFS info (device loop4): enabling ssd optimizations
[   98.556121][ T6040] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   98.645872][ T6040] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   98.670991][  T263] block nbd3: Attempted send on invalid socket
[   98.678720][  T263] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.699587][  T263] block nbd3: Attempted send on invalid socket
[   98.705838][  T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.734474][  T263] block nbd3: Attempted send on invalid socket
[   98.740698][  T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.753997][  T150] block nbd3: Attempted send on invalid socket
[   98.760213][  T150] blk_update_request: I/O error, dev nbd3, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.772707][  T150] block nbd3: Attempted send on invalid socket
[   98.778917][  T150] blk_update_request: I/O error, dev nbd3, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.790239][  T150] block nbd3: Attempted send on invalid socket
[   98.796513][  T150] blk_update_request: I/O error, dev nbd3, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   98.807620][ T6043] VFS: unable to find oldfs superblock on device nbd3
[   99.027784][ T6060] tmpfs: Bad value for 'mpol'
[   99.178954][ T6065] netlink: 'syz.3.1043': attribute type 3 has an invalid length.
[   99.251621][ T6070] netlink: 'syz.4.1044': attribute type 10 has an invalid length.
[   99.315572][ T6050] loop1: detected capacity change from 0 to 32768
[   99.343280][ T6070] team0: Device veth1_macvtap failed to register rx_handler
[   99.841921][ T2987] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  100.101825][  T150] block nbd1: Attempted send on invalid socket
[  100.108053][  T150] blk_update_request: I/O error, dev nbd1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  100.120051][ T6113] VFS: could not find a valid V7 on nbd1.
[  100.150586][ T6086] loop4: detected capacity change from 0 to 32768
[  100.198325][ T6086] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1052 (6086)
[  100.215287][ T2987] usb 3-1: config 0 interface 0 has no altsetting 0
[  100.243097][ T2987] usb 3-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f
[  100.257698][ T6122] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  100.289836][ T2987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.317157][ T2987] usb 3-1: config 0 descriptor??
[  100.350506][ T6086] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  100.355046][ T6126] loop0: detected capacity change from 0 to 2048
[  100.387886][ T2987] usb 3-1: selecting invalid altsetting 0
[  100.391869][ T6086] BTRFS info (device loop4): turning off barriers
[  100.411942][ T6086] BTRFS info (device loop4): enabling all of the rescue options
[  100.419600][ T6086] BTRFS info (device loop4): ignoring data csums
[  100.435168][ T6131] netlink: 'syz.1.1073': attribute type 8 has an invalid length.
[  100.445721][ T6086] BTRFS info (device loop4): ignoring bad roots
[  100.461879][ T6086] BTRFS info (device loop4): disabling log replay at mount time
[  100.469592][ T6086] BTRFS info (device loop4): disabling tree log
[  100.498965][ T6126] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  100.528268][ T6086] BTRFS info (device loop4): turning on flush-on-commit
[  100.565780][ T6086] BTRFS info (device loop4): using free space tree
[  100.574222][ T6126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.598638][ T6086] BTRFS info (device loop4): has skinny extents
[  100.605787][ T3610] usb 3-1: USB disconnect, device number 7
[  100.841059][ T6128] loop3: detected capacity change from 0 to 32768
[  100.872397][ T6155] loop1: detected capacity change from 0 to 512
[  100.888632][ T6086] BTRFS info (device loop4): enabling ssd optimizations
[  100.904476][ T6155] EXT4-fs (loop1): invalid first ino: 0
[  100.941801][ T6128] JBD2: Ignoring recovery information on journal
[  100.958571][ T6086] BTRFS info (device loop4): enabling all of the rescue options
[  100.966977][ T6086] BTRFS info (device loop4): turning off flush-on-commit
[  100.974176][ T6086] BTRFS info (device loop4): turning on flush-on-commit
[  101.062536][ T6163] loop0: detected capacity change from 0 to 512
[  101.182726][ T6128] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  101.205070][ T6163] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  101.319294][ T6163] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  101.362163][ T6163] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  101.431880][ T6176] SET target dimension over the limit!
[  101.447579][ T6163] EXT4-fs (loop0): 1 truncate cleaned up
[  101.450329][ T3575] ocfs2: Unmounting device (7,3) on (node local)
[  101.484588][ T6163] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  101.577935][ T6163] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 4: comm syz.0.1080: lblock 0 mapped to illegal pblock 4 (length 1)
[  101.698039][ T6174] loop2: detected capacity change from 0 to 4096
[  101.720094][ T6163] EXT4-fs (loop0): Remounting filesystem read-only
[  101.776265][ T6174] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  101.837095][ T6174] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  101.925699][ T6189] dlm: no locking on control device
[  101.940385][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'.
[  102.065175][ T6168] loop4: detected capacity change from 0 to 32768
[  102.088521][ T3622] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22.
[  102.109919][ T3566] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  102.130075][ T6168] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1079 (6168)
[  102.241679][ T6168] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  102.263131][ T6208] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1094'.
[  102.281912][ T6168] BTRFS info (device loop4): using free space tree
[  102.299417][ T6168] BTRFS info (device loop4): has skinny extents
[  102.328022][ T6212] loop1: detected capacity change from 0 to 128
[  102.408691][ T6225] netlink: 'syz.2.1103': attribute type 10 has an invalid length.
[  102.463314][ T6225] team0: Device veth1_macvtap failed to register rx_handler
[  102.678482][ T6168] BTRFS info (device loop4): enabling ssd optimizations
[  102.775774][ T6168] BTRFS error (device loop4): balance: mixed groups data and metadata options must be the same
[  102.900380][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1117'.
[  102.987998][ T6265] netlink: 6204 bytes leftover after parsing attributes in process `syz.2.1117'.
[  103.599549][ T6283] loop2: detected capacity change from 0 to 2048
[  103.683459][ T6283] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  103.785274][ T6288] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.838062][ T6249] loop3: detected capacity change from 0 to 32768
[  103.920028][ T6249] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[  103.920028][ T6249] 
[  103.970729][ T6262] loop1: detected capacity change from 0 to 32768
[  103.993229][ T6249] xtLookup: xtSearch returned -5
[  104.001867][ T6249] read_mapping_page failed!
[  104.006435][ T6249] jfs_mount: diMount(ipaimap2) failed, rc = -5
[  104.037518][ T6249] Mount JFS Failure: -5
[  104.054866][ T6262] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1115 (6262)
[  104.061698][ T6249] jfs_mount failed w/return code = -5
[  104.106051][ T6262] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  104.142048][ T6262] BTRFS info (device loop1): turning off barriers
[  104.168882][ T6262] BTRFS info (device loop1): enabling all of the rescue options
[  104.181832][ T6262] BTRFS info (device loop1): ignoring data csums
[  104.194057][ T6262] BTRFS info (device loop1): ignoring bad roots
[  104.222673][ T6262] BTRFS info (device loop1): disabling log replay at mount time
[  104.240617][ T6262] BTRFS info (device loop1): disabling tree log
[  104.254503][ T6296] loop2: detected capacity change from 0 to 4096
[  104.280480][ T6262] BTRFS info (device loop1): turning on flush-on-commit
[  104.308307][ T6262] BTRFS info (device loop1): using free space tree
[  104.327930][ T6262] BTRFS info (device loop1): has skinny extents
[  104.363476][ T6296] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  104.434411][ T6296] ntfs3: loop2: Failed to load $MFT.
[  104.516571][ T6292] loop0: detected capacity change from 0 to 32768
[  104.552825][ T6273] loop4: detected capacity change from 0 to 32768
[  104.603261][ T6273] gfs2: fsid=[(: Trying to join cluster "lock_nolock", "[("
[  104.613504][ T6262] BTRFS info (device loop1): enabling ssd optimizations
[  104.626048][ T6273] gfs2: fsid=[(: Now mounting FS (format 0)...
[  104.710606][ T6262] BTRFS info (device loop1): enabling all of the rescue options
[  104.725935][ T6273] gfs2: fsid=[(.0: journal 0 mapped with 20 extents in 0ms
[  104.747611][ T4499] gfs2: fsid=[(.0: jid=0, already locked for use
[  104.752048][ T6262] BTRFS info (device loop1): turning off flush-on-commit
[  104.761022][ T6262] BTRFS info (device loop1): turning on flush-on-commit
[  104.768235][ T4499] gfs2: fsid=[(.0: jid=0: Looking at journal...
[  104.785972][ T6296] loop2: detected capacity change from 0 to 4096
[  104.786999][ T6320] [U] <
[  104.873954][ T6296] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  104.986230][ T4499] gfs2: fsid=[(.0: jid=0: Journal head lookup took 217ms
[  105.020009][ T4499] gfs2: fsid=[(.0: jid=0: Done
[  105.027693][ T6273] gfs2: fsid=[(.0: first mount done, others may mount
[  105.156437][ T4626] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (4626)
[  105.227207][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1142'.
[  105.248794][ T6336] loop0: detected capacity change from 0 to 64
[  105.267612][ T6334] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1142'.
[  105.283769][ T6334] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1142'.
[  105.387969][ T6334] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1142'.
[  105.786399][ T6364] netlink: 'syz.1.1155': attribute type 1 has an invalid length.
[  106.028620][ T6384] loop2: detected capacity change from 0 to 512
[  106.071245][ T6385] loop3: detected capacity change from 0 to 2048
[  106.106969][ T6384] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  106.130683][ T6385] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  106.184277][ T6385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.202772][ T6384] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  106.210790][ T6384] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  106.218306][ T6387] loop0: detected capacity change from 0 to 8192
[  106.302233][ T6387] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root.
[  106.307420][ T6384] EXT4-fs (loop2): 1 truncate cleaned up
[  106.328600][ T6404] sock: sock_timestamping_bind_phc: sock not bind to device
[  106.339886][ T6384] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  106.406767][ T6384] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 4: comm syz.2.1163: lblock 0 mapped to illegal pblock 4 (length 1)
[  106.431598][ T6396] loop1: detected capacity change from 0 to 4096
[  106.440504][ T6384] EXT4-fs (loop2): Remounting filesystem read-only
[  106.486324][ T6396] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  106.650171][ T6415] loop3: detected capacity change from 0 to 512
[  106.731959][ T6415] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  106.773651][ T6426] loop0: detected capacity change from 0 to 64
[  106.787732][ T6415] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038 (0x7fffffff)
[  106.805070][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1184'.
[  106.814194][ T6425] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1184'.
[  106.932440][ T6426] MINIX-fs: mounting file system with errors, running fsck is recommended
[  107.165283][ T6436] loop2: detected capacity change from 0 to 4096
[  107.182229][ T6436] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  107.518982][ T6467] loop3: detected capacity change from 0 to 256
[  107.555609][ T6416] loop4: detected capacity change from 0 to 32768
[  107.707297][ T6416] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  107.961525][ T3574] ocfs2: Unmounting device (7,4) on (node local)
[  107.989430][ T6499] netlink: 'syz.3.1216': attribute type 8 has an invalid length.
[  108.216422][ T6521] netlink: 'syz.1.1227': attribute type 10 has an invalid length.
[  108.298501][ T6521] team0: Device veth1_macvtap failed to register rx_handler
[  108.492584][ T3835] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  108.675858][ T6542] loop4: detected capacity change from 0 to 256
[  108.762125][ T3835] usb 3-1: Using ep0 maxpacket: 16
[  108.810287][ T6551] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  108.902200][ T3835] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  108.934283][ T3835] usb 3-1: config 0 has no interface number 0
[  108.940414][ T3835] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  108.982671][ T3835] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  109.072776][ T6573] loop0: detected capacity change from 0 to 16
[  109.122956][ T6573] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  109.182244][ T6573] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel version
[  109.202104][ T3835] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  109.228823][ T3835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.247850][ T3835] usb 3-1: Product: syz
[  109.247871][ T3835] usb 3-1: Manufacturer: syz
[  109.247886][ T3835] usb 3-1: SerialNumber: syz
[  109.250082][ T3835] usb 3-1: config 0 descriptor??
[  109.272929][ T6520] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  109.273046][ T6520] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  109.414342][ T6599] loop4: detected capacity change from 0 to 128
[  109.455786][ T6599] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  109.476170][ T6599] EXT4-fs (loop4): Ignoring removed bh option
[  109.522620][ T3835] asix: probe of 3-1:0.251 failed with error -71
[  109.532815][ T6599] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000040,mblk_io_submit,bh,nombcache,,errors=continue. Quota mode: none.
[  109.545210][ T3835] usb 3-1: USB disconnect, device number 8
[  109.561926][ T6599] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038 (0x7fffffff)
[  109.845849][ T6632] loop4: detected capacity change from 0 to 1024
[  109.856868][ T6635] __nla_validate_parse: 3 callbacks suppressed
[  109.856884][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1281'.
[  109.884662][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1281'.
[  109.908828][ T6632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.954537][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'.
[  110.279996][ T6655] loop4: detected capacity change from 0 to 1764
[  110.346935][ T6664] loop2: detected capacity change from 0 to 164
[  110.561988][ T3825] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  110.616118][ T6677] device ip6tnl2 entered promiscuous mode
[  110.662197][ T6679] tmpfs: Bad value for 'nr_blocks'
[  110.851646][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'.
[  110.867274][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1309'.
[  110.979929][ T6697] loop4: detected capacity change from 0 to 512
[  110.998127][ T3825] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97
[  111.005326][ T6671] loop2: detected capacity change from 0 to 32768
[  111.008300][ T3825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.023661][ T3825] usb 2-1: config 0 descriptor??
[  111.054905][ T6671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1298 (6671)
[  111.076828][ T6697] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  111.094457][ T3825] sisusb 2-1:0.0: Invalid USB2VGA device
[  111.100149][ T3825] sisusb: probe of 2-1:0.0 failed with error -22
[  111.114908][ T6671] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  111.129659][ T6671] BTRFS info (device loop2): using free space tree
[  111.137559][ T6697] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.1312: corrupted inode contents
[  111.150261][ T6671] BTRFS info (device loop2): has skinny extents
[  111.170091][ T6697] EXT4-fs error (device loop4): ext4_dirty_inode:6007: inode #3: comm syz.4.1312: mark_inode_dirty error
[  111.181831][   T21] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  111.197245][ T6697] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.1312: corrupted inode contents
[  111.216371][ T6697] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.1312: mark_inode_dirty error
[  111.234504][ T6697] Quota error (device loop4): write_blk: dquota write failed
[  111.243874][ T6697] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  111.254444][ T6697] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.1312: Failed to acquire dquot type 0
[  111.286465][ T6697] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.1312: corrupted inode contents
[  111.291724][ T3825] usb 2-1: USB disconnect, device number 5
[  111.309163][ T6671] BTRFS info (device loop2): enabling ssd optimizations
[  111.316796][ T6697] EXT4-fs error (device loop4): ext4_dirty_inode:6007: inode #16: comm syz.4.1312: mark_inode_dirty error
[  111.358709][ T6697] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.1312: corrupted inode contents
[  111.405661][ T6697] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.1312: mark_inode_dirty error
[  111.421973][   T21] usb 4-1: Using ep0 maxpacket: 16
[  111.426976][ T6697] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.1312: corrupted inode contents
[  111.430066][ T6697] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  111.461574][ T6697] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.1312: corrupted inode contents
[  111.496436][ T6697] EXT4-fs error (device loop4): ext4_truncate:4272: inode #16: comm syz.4.1312: mark_inode_dirty error
[  111.517502][ T6697] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  111.543265][ T6697] EXT4-fs (loop4): 1 truncate cleaned up
[  111.549793][ T6697] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  111.563037][ T6697] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038 (0x7fffffff)
[  111.582024][   T21] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  111.604849][   T21] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  111.631193][   T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  111.678746][ T6697] EXT4-fs error (device loop4): ext4_empty_dir:3175: inode #12: block 13: comm syz.4.1312: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0
[  111.812694][   T21] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  111.821927][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.829928][   T21] usb 4-1: Product: syz
[  111.835386][   T21] usb 4-1: Manufacturer: syz
[  111.840619][   T21] usb 4-1: SerialNumber: syz
[  111.929839][ T6733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1317'.
[  112.014595][ T6739] netlink: 'syz.1.1321': attribute type 21 has an invalid length.
[  112.026938][ T6739] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1321'.
[  112.046838][ T6741] sctp: [Deprecated]: syz.4.1322 (pid 6741) Use of int in max_burst socket option.
[  112.046838][ T6741] Use struct sctp_assoc_value instead
[  112.148162][ T6749] dlm: Unknown command passed to DLM device : 0
[  112.148162][ T6749] 
[  112.187689][ T6751] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  112.353385][   T21] usb 4-1: 0:2 : does not exist
[  112.390755][   T21] usb 4-1: USB disconnect, device number 11
[  112.879780][ T6800] loop2: detected capacity change from 0 to 1024
[  112.987280][ T6800] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  113.234680][ T6826] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  113.446866][ T6845] loop1: detected capacity change from 0 to 512
[  113.500349][ T6840] loop0: detected capacity change from 0 to 4096
[  113.521988][ T6845] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  113.549727][ T6845] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  113.609822][ T6845] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[  113.624138][ T6840] ntfs: volume version 3.1.
[  113.632335][ T6845] System zones: 1-12
[  113.640409][ T6845] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1373: corrupted in-inode xattr
[  113.734886][ T6845] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1373: couldn't read orphan inode 15 (err -117)
[  113.771405][ T6845] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none.
[  113.915847][ T6870] unsupported nlmsg_type 40
[  114.182851][ T6892] xt_CT: You must specify a L4 protocol and not use inversions on it
[  114.365863][ T6908] loop1: detected capacity change from 0 to 256
[  114.420323][ T6912] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  114.467338][ T6912] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  114.521873][ T6912] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  114.811827][ T3570] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  115.008653][ T6904] loop4: detected capacity change from 0 to 32768
[  115.076099][ T6904] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1400 (6904)
[  115.141445][ T6904] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  115.149846][ T6924] loop0: detected capacity change from 0 to 32768
[  115.159240][ T6904] BTRFS info (device loop4): using free space tree
[  115.173964][ T6904] BTRFS info (device loop4): has skinny extents
[  115.213632][ T6922] loop1: detected capacity change from 0 to 32768
[  115.319370][ T6922] XFS (loop1): Mounting V5 Filesystem
[  115.326185][ T6904] BTRFS info (device loop4): enabling ssd optimizations
[  115.333689][ T6924] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  115.342052][ T3570] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  115.353187][ T3570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.362270][ T3570] usb 3-1: Product: syz
[  115.368245][ T3570] usb 3-1: Manufacturer: syz
[  115.373305][ T3570] usb 3-1: SerialNumber: syz
[  115.415703][ T6924] XFS (loop0): Quotacheck needed: Please wait.
[  115.418258][ T3570] usb 3-1: config 0 descriptor??
[  115.439889][    T9] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x2444 dinode
[  115.466818][    T9] XFS (loop0): Unmount and run xfs_repair
[  115.484190][    T9] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  115.491664][    T9] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  115.494017][ T6922] XFS (loop1): Ending clean mount
[  115.531044][    T9] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  115.560767][ T6965] tmpfs: Bad value for 'mpol'
[  115.590214][    T9] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d  4.Xh...=4.Xh...=
[  115.651864][    T9] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 04 1a  4.Xh...=........
[  115.660744][    T9] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  115.726993][    T9] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 16 72 6f a4  .............ro.
[  115.732115][ T3570] hso 3-1:0.0: Can't find BULK IN endpoint
[  115.761535][ T3570] usb-storage 3-1:0.0: USB Mass Storage device detected
[  115.764294][    T9] 00000060: ff ff ff ff b2 47 c7 b6 00 00 00 00 00 00 00 05  .....G..........
[  115.824378][    T9] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08  ................
[  115.936669][ T6924] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  115.939446][ T3570] usb 3-1: USB disconnect, device number 9
[  115.962327][ T3580] XFS (loop1): Unmounting Filesystem
[  116.029158][ T6981] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  116.059260][ T3567] XFS (loop0): Unmounting Filesystem
[  116.630204][ T6998] loop3: detected capacity change from 0 to 4096
[  116.747691][ T6998] ntfs: volume version 3.1.
[  116.860895][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'.
[  116.910767][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'.
[  116.968106][ T7025] batman_adv: Cannot find parent device
[  117.094205][ T7043] kernel read not supported for file /eth0 (pid: 7043 comm: syz.1.1448)
[  117.116143][ T7046] netlink: 'syz.2.1449': attribute type 21 has an invalid length.
[  117.161739][ T7046] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1449'.
[  117.179735][   T26] audit: type=1800 audit(1727781823.483:3441): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1448" name="eth0" dev="mqueue" ino=41349 res=0 errno=0
[  117.294684][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1455'.
[  117.310149][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'.
[  117.335932][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'.
[  117.397267][ T7060] loop0: detected capacity change from 0 to 2048
[  117.494520][ T7060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.730432][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.754217][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.085611][ T7035] loop3: detected capacity change from 0 to 32768
[  118.182889][ T7035] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1442 (7035)
[  118.275146][ T7035] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  118.292930][ T7105] loop2: detected capacity change from 0 to 4096
[  118.307115][ T7035] BTRFS info (device loop3): using free space tree
[  118.330335][ T7035] BTRFS info (device loop3): has skinny extents
[  118.365872][ T7105] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  118.484342][ T7105] ntfs3: loop2: failed to convert "c46c" to default
[  118.598055][ T7107] loop1: detected capacity change from 0 to 32768
[  118.599936][ T7035] BTRFS info (device loop3): enabling ssd optimizations
[  118.707300][ T7107] (syz.1.1481,7107,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len % 4 != 0 - offset=248, inode=75, rec_len=222, name_len=12
[  118.711940][ T3713] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  118.793429][ T7107] (syz.1.1481,7107,1):ocfs2_init_local_system_inodes:493 ERROR: status=-22, sysfile=10, slot=0
[  118.822545][ T7107] (syz.1.1481,7107,0):ocfs2_init_local_system_inodes:502 ERROR: status = -22
[  118.897175][ T7107] (syz.1.1481,7107,1):ocfs2_mount_volume:1818 ERROR: status = -22
[  118.953910][ T7107] (syz.1.1481,7107,0):ocfs2_fill_super:1177 ERROR: status = -22
[  118.981882][ T3713] usb 5-1: Using ep0 maxpacket: 8
[  119.023107][ T7134] loop2: detected capacity change from 0 to 32768
[  119.113430][ T7138] loop3: detected capacity change from 0 to 16
[  119.122156][ T3713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  119.151158][ T7138] erofs: (device loop3): erofs_read_inode: bogus i_mode (162700) @ nid 36
[  119.161543][ T7134] (syz.2.1485,7134,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  119.207538][ T7134] (syz.2.1485,7134,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  119.274899][ T7134] JBD2: Ignoring recovery information on journal
[  119.352143][ T3713] usb 5-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1
[  119.365723][ T7144] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on.
[  119.377779][ T3713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.390296][ T7134] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  119.402825][ T3713] usb 5-1: Product: syz
[  119.407059][ T3713] usb 5-1: Manufacturer: syz
[  119.414889][ T7144] overlayfs: overlapping lowerdir path
[  119.420671][ T7148] program syz.3.1490 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  119.421173][ T3713] usb 5-1: SerialNumber: syz
[  119.493447][ T3713] usb 5-1: config 0 descriptor??
[  119.564546][ T3713] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6
[  119.592567][ T3566] ocfs2: Unmounting device (7,2) on (node local)
[  119.684501][ T7162] binder: 7161:7162 ioctl 400c620e 0 returned -14
[  119.730306][ T7164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1499'.
[  119.876842][ T6055] usb 5-1: USB disconnect, device number 9
[  120.083994][ T7180] loop1: detected capacity change from 0 to 4096
[  120.131847][ T3816] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  120.136296][ T7180] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  120.231592][ T7180] ntfs3: loop1: failed to convert "c46c" to default
[  120.288991][ T7191] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1512'.
[  120.298488][ T7191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1512'.
[  120.308507][ T7191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1512'.
[  120.422069][ T3816] usb 4-1: Using ep0 maxpacket: 32
[  120.544768][ T3816] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  120.617442][ T7215] Sensor A: =================  START STATUS  =================
[  120.639788][ T7215] Sensor A: Test Pattern: 100% Green
[  120.663004][ T7215] Sensor A: Show Information: All
[  120.666621][    T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  120.668066][ T7215] Sensor A: Vertical Flip: false
[  120.681729][ T7215] Sensor A: Horizontal Flip: false
[  120.687663][ T7215] Sensor A: Brightness: 128
[  120.704794][ T7215] Sensor A: Contrast: 128
[  120.716018][ T7215] Sensor A: Hue: 0
[  120.717938][ T7221] loop4: detected capacity change from 0 to 1024
[  120.719908][ T7215] Sensor A: Saturation: 128
[  120.732578][ T7215] Sensor A: ==================  END STATUS  ==================
[  120.767981][ T3816] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  120.778814][ T3816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.786276][ T7225] netlink: 'syz.2.1528': attribute type 8 has an invalid length.
[  120.791072][ T3816] usb 4-1: Product: syz
[  120.798785][ T3816] usb 4-1: Manufacturer: syz
[  120.811944][ T3816] usb 4-1: SerialNumber: syz
[  120.848774][ T3816] usb 4-1: config 0 descriptor??
[  120.873286][ T7166] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  120.892654][ T3816] hub 4-1:0.0: bad descriptor, ignoring hub
[  120.898586][ T3816] hub: probe of 4-1:0.0 failed with error -5
[  120.931522][ T3816] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
[  120.951845][    T7] usb 2-1: Using ep0 maxpacket: 32
[  120.970934][ T7231] loop4: detected capacity change from 0 to 2048
[  121.030455][ T7231] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.085991][    T7] usb 2-1: config 251 has an invalid interface number: 19 but max is 1
[  121.127432][    T7] usb 2-1: config 251 has an invalid interface number: 217 but max is 1
[  121.151910][    T7] usb 2-1: config 251 has no interface number 0
[  121.167466][    T7] usb 2-1: config 251 has no interface number 1
[  121.177950][    T7] usb 2-1: config 251 interface 19 has no altsetting 0
[  121.185440][    T7] usb 2-1: config 251 interface 217 has no altsetting 0
[  121.215491][ T3608] usb 4-1: USB disconnect, device number 12
[  121.221805][    C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  121.234481][ T7243] loop2: detected capacity change from 0 to 1764
[  121.283490][ T7243] iso9660: Corrupted directory entry in block 2 of inode 1920
[  121.372093][    T7] usb 2-1: New USB device found, idVendor=12d1, idProduct=c4a9, bcdDevice=bd.40
[  121.401359][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.414848][    T7] usb 2-1: Product: syz
[  121.419473][    T7] usb 2-1: Manufacturer: syz
[  121.425309][    T7] usb 2-1: SerialNumber: syz
[  121.556116][ T7264] netlink: 'syz.2.1547': attribute type 1 has an invalid length.
[  121.693883][ T7268] loop4: detected capacity change from 0 to 4096
[  121.762938][    T7] option 2-1:251.19: GSM modem (1-port) converter detected
[  121.787430][ T7268] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  121.906103][    T7] usb 2-1: Found UVC 252.03 device syz (12d1:c4a9)
[  121.915274][    T7] usb 2-1: No valid video chain found.
[  121.948672][    T7] usb 2-1: USB disconnect, device number 6
[  121.955728][    T7] option 2-1:251.19: device disconnected
[  122.066181][ T7292] loop3: detected capacity change from 0 to 64
[  122.228554][ T7299] loop3: detected capacity change from 0 to 256
[  122.337113][ T7299] FAT-fs (loop3): Directory bread(block 64) failed
[  122.345905][ T7299] FAT-fs (loop3): Directory bread(block 65) failed
[  122.358251][ T7299] FAT-fs (loop3): Directory bread(block 66) failed
[  122.364953][ T7299] FAT-fs (loop3): Directory bread(block 67) failed
[  122.371569][ T7299] FAT-fs (loop3): Directory bread(block 68) failed
[  122.378354][ T7299] FAT-fs (loop3): Directory bread(block 69) failed
[  122.385005][ T7299] FAT-fs (loop3): Directory bread(block 70) failed
[  122.391555][ T7299] FAT-fs (loop3): Directory bread(block 71) failed
[  122.398197][ T7299] FAT-fs (loop3): Directory bread(block 72) failed
[  122.405441][ T7299] FAT-fs (loop3): Directory bread(block 73) failed
[  122.431891][ T3613] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  122.495930][ T7307] SET target dimension over the limit!
[  122.598791][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.680538][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.681866][ T3613] usb 5-1: Using ep0 maxpacket: 32
[  122.822250][ T3613] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.841894][ T3613] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  123.023806][ T7338] netlink: 'syz.2.1582': attribute type 1 has an invalid length.
[  123.028818][ T7337] loop1: detected capacity change from 0 to 128
[  123.038909][ T3613] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[  123.062902][ T3613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.070922][ T3613] usb 5-1: Product: syz
[  123.080708][ T3613] usb 5-1: Manufacturer: syz
[  123.086826][ T3613] usb 5-1: SerialNumber: syz
[  123.098019][ T7337] hpfs: bad mount options.
[  123.125062][ T3613] usb 5-1: config 0 descriptor??
[  123.176064][ T3613] qmi_wwan 5-1:0.0: bogus CDC Union: master=31, slave=0
[  123.230284][ T3613] qmi_wwan: probe of 5-1:0.0 failed with error -22
[  123.335987][ T7328] loop3: detected capacity change from 0 to 32768
[  123.432184][ T3713] usb 5-1: USB disconnect, device number 10
[  123.467717][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.474652][ T7328] XFS (loop3): Mounting V5 Filesystem
[  123.477997][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.575386][ T7328] XFS (loop3): Ending clean mount
[  123.664734][ T3575] XFS (loop3): Unmounting Filesystem
[  123.961953][    T7] Bluetooth: hci4: command 0x0405 tx timeout
[  124.180504][ T7391] loop2: detected capacity change from 0 to 16
[  124.198304][ T7391] erofs: (device loop2): mounted with root inode @ nid 36.
[  124.534110][ T7375] loop1: detected capacity change from 0 to 32768
[  124.596100][ T7413] __nla_validate_parse: 1 callbacks suppressed
[  124.596116][ T7413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1614'.
[  124.616182][ T7413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1614'.
[  124.675527][ T7375] JBD2: Ignoring recovery information on journal
[  124.698449][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1614'.
[  124.773748][ T7375] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  124.798771][ T7421] x_tables: unsorted underflow at hook 1
[  124.882856][ T7375] (syz.1.1594,7375,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=32, inode=17057, rec_len=5, name_len=0
[  124.944675][ T7375] (syz.1.1594,7375,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2
[  124.968935][ T7375] (syz.1.1594,7375,0):ocfs2_mknod:296 ERROR: status = -2
[  125.010303][ T7375] (syz.1.1594,7375,0):ocfs2_mknod:500 ERROR: status = -2
[  125.028938][ T7375] (syz.1.1594,7375,0):ocfs2_mkdir:657 ERROR: status = -2
[  125.036564][ T7399] loop4: detected capacity change from 0 to 32768
[  125.081455][ T3580] ocfs2: Unmounting device (7,1) on (node local)
[  125.201365][ T7399] XFS (loop4): Mounting V5 Filesystem
[  125.251736][ T7399] XFS (loop4): Ending clean mount
[  125.310259][ T7448] loop1: detected capacity change from 0 to 64
[  125.331596][ T3574] XFS (loop4): Unmounting Filesystem
[  125.361913][ T3613] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  125.612062][ T3613] usb 3-1: Using ep0 maxpacket: 16
[  125.732096][ T3613] usb 3-1: config 0 has no interfaces?
[  125.892166][ T3613] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  125.913254][ T3613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.921350][ T3613] usb 3-1: Product: syz
[  125.942028][ T3613] usb 3-1: Manufacturer: syz
[  125.946885][ T3613] usb 3-1: SerialNumber: syz
[  125.980647][ T3613] r8152-cfgselector 3-1: config 0 descriptor??
[  125.991687][ T7464] loop1: detected capacity change from 0 to 8192
[  126.064044][ T7464] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  126.112657][ T7464] REISERFS (device loop1): using ordered data mode
[  126.119189][ T7464] reiserfs: using flush barriers
[  126.134831][ T7464] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  126.155323][ T7464] REISERFS (device loop1): checking transaction log (loop1)
[  126.174342][ T7464] REISERFS (device loop1): Using r5 hash to sort names
[  126.182068][ T7464] REISERFS (device loop1): using 3.5.x disk format
[  126.194609][ T7464] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  126.252343][ T3613] usbip-host 3-1: 3-1 is not in match_busid table... skip!
[  126.362180][ T7496] tmpfs: Bad value for 'mpol'
[  126.428548][ T7500] loop4: detected capacity change from 0 to 164
[  126.440740][ T7499] misc userio: No port type given on /dev/userio
[  126.467818][ T3613] usb 3-1: USB disconnect, device number 10
[  126.514079][ T7500] rock: directory entry would overflow storage
[  126.542653][ T7500] rock: sig=0x66, size=4, remaining=3
[  126.559982][ T7500] rock: directory entry would overflow storage
[  126.578855][ T7500] rock: sig=0x66, size=4, remaining=3
[  126.591298][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1654'.
[  126.799825][ T7516] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1659'.
[  127.001892][ T3713] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  127.229697][ T7537] ALSA: mixer_oss: invalid OSS volume 'g¢ð½ñL²'
[  127.281854][ T3713] usb 5-1: Using ep0 maxpacket: 8
[  127.364612][ T7550] loop2: detected capacity change from 0 to 256
[  127.428029][ T3713] usb 5-1: config 0 has an invalid interface number: 191 but max is 0
[  127.449691][ T3713] usb 5-1: config 0 has no interface number 0
[  127.464138][ T3713] usb 5-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  127.473514][ T2147] pvrusb2: request_firmware fatal error with code=-110
[  127.501482][ T2147] pvrusb2: Failure uploading firmware1
[  127.510712][ T7550] FAT-fs (loop2): Directory bread(block 64) failed
[  127.531633][ T2147] pvrusb2: Device initialization was not successful.
[  127.534079][ T7550] FAT-fs (loop2): Directory bread(block 65) failed
[  127.545170][ T2147] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  127.579365][ T7550] FAT-fs (loop2): Directory bread(block 66) failed
[  127.585852][ T2147] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  127.611875][ T2147] pvrusb2: Failed to submit write-control URB status=-19
[  127.612221][ T3707] pvrusb2: Device being rendered inoperable
[  127.629663][ T2147] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  127.640539][ T7550] FAT-fs (loop2): Directory bread(block 67) failed
[  127.651959][ T3713] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36
[  127.661055][ T3713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.673679][ T2147] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  127.701890][ T7550] FAT-fs (loop2): Directory bread(block 68) failed
[  127.708503][ T7550] FAT-fs (loop2): Directory bread(block 69) failed
[  127.733152][ T3713] usb 5-1: Product: syz
[  127.737338][ T3713] usb 5-1: Manufacturer: syz
[  127.761896][ T7550] FAT-fs (loop2): Directory bread(block 70) failed
[  127.768729][ T3713] usb 5-1: SerialNumber: syz
[  127.796067][ T3713] usb 5-1: config 0 descriptor??
[  127.801214][ T7550] FAT-fs (loop2): Directory bread(block 71) failed
[  127.814427][ T7550] FAT-fs (loop2): Directory bread(block 72) failed
[  127.821023][ T7550] FAT-fs (loop2): Directory bread(block 73) failed
[  127.849875][ T3713] em28xx 5-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191)
[  127.867725][ T3713] em28xx 5-1:0.191: Video interface 191 found:
[  128.312051][ T3713] em28xx 5-1:0.191: unknown em28xx chip ID (0)
[  128.428262][ T3713] em28xx 5-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5)
[  128.449807][ T3713] em28xx 5-1:0.191: board has no eeprom
[  128.484463][ T7587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1693'.
[  128.493969][ T7587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1693'.
[  128.524537][ T7568] chnl_net:caif_netlink_parms(): no params data found
[  128.550778][ T7558] loop3: detected capacity change from 0 to 32768
[  128.595889][ T3713] em28xx 5-1:0.191: Identified as Leadtek Winfast USB II (card=7)
[  128.611907][ T4486] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  128.615635][ T7558] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1680 (7558)
[  128.643414][ T3713] em28xx 5-1:0.191: analog set to bulk mode.
[  128.692562][ T3816] em28xx 5-1:0.191: Registering V4L2 extension
[  128.708908][ T3713] usb 5-1: USB disconnect, device number 11
[  128.741022][ T3713] em28xx 5-1:0.191: Disconnecting em28xx
[  128.777702][ T7558] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  128.819865][ T7568] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.852140][ T4486] usb 3-1: Using ep0 maxpacket: 16
[  128.853249][ T7558] BTRFS info (device loop3): using free space tree
[  128.881994][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.892459][ T7558] BTRFS info (device loop3): has skinny extents
[  128.910445][ T7568] device bridge_slave_0 entered promiscuous mode
[  128.944630][ T3816] em28xx 5-1:0.191: Config register raw data: 0xffffffed
[  128.959904][ T7568] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.967555][ T3816] em28xx 5-1:0.191: AC97 chip type couldn't be determined
[  128.972164][ T4486] usb 3-1: config 0 has an invalid interface number: 206 but max is 1
[  129.001829][ T3816] em28xx 5-1:0.191: No AC97 audio processor
[  129.007985][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.023271][ T4486] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.032074][ T7568] device bridge_slave_1 entered promiscuous mode
[  129.044661][ T4486] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  129.062744][ T4486] usb 3-1: config 0 has no interface number 0
[  129.068869][ T4486] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  129.071333][ T3816] usb 5-1: Decoder not found
[  129.080372][ T4486] usb 3-1: config 0 interface 206 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 32
[  129.122172][ T4486] usb 3-1: config 0 interface 206 altsetting 2 bulk endpoint 0xD has invalid maxpacket 1023
[  129.156816][ T4486] usb 3-1: config 0 interface 206 altsetting 2 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  129.175809][ T4486] usb 3-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  129.186528][ T3816] em28xx 5-1:0.191: failed to create media graph
[  129.189483][ T4486] usb 3-1: config 0 interface 206 has no altsetting 0
[  129.216092][ T3816] em28xx 5-1:0.191: V4L2 device video71 deregistered
[  129.237941][ T7615] ==================================================================
[  129.246359][ T7615] BUG: KASAN: use-after-free in v4l2_fh_open+0xc7/0x430
[  129.253047][ T7558] BTRFS info (device loop3): enabling ssd optimizations
[  129.253305][ T7615] Read of size 8 at addr ffff88805b2c8900 by task v4l_id/7615
[  129.267666][ T7615] 
[  129.269988][ T7615] CPU: 0 PID: 7615 Comm: v4l_id Not tainted 5.15.167-syzkaller #0
[  129.277793][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  129.287863][ T7615] Call Trace:
[  129.291148][ T7615]  <TASK>
[  129.294077][ T7615]  dump_stack_lvl+0x1e3/0x2d0
[  129.298764][ T7615]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  129.304405][ T7615]  ? _printk+0xd1/0x120
[  129.308680][ T7615]  ? __wake_up_klogd+0xcc/0x100
[  129.313537][ T7615]  ? panic+0x860/0x860
[  129.317616][ T7615]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  129.323094][ T7615]  print_address_description+0x63/0x3b0
[  129.328653][ T7615]  ? v4l2_fh_open+0xc7/0x430
[  129.333257][ T7615]  kasan_report+0x16b/0x1c0
[  129.337769][ T7615]  ? v4l2_fh_open+0xc7/0x430
[  129.342374][ T7615]  v4l2_fh_open+0xc7/0x430
[  129.346805][ T7615]  em28xx_v4l2_open+0x15d/0xa10
[  129.351680][ T7615]  v4l2_open+0x228/0x360
[  129.355934][ T7615]  chrdev_open+0x54a/0x630
[  129.360351][ T7615]  ? cd_forget+0x160/0x160
[  129.364769][ T7615]  ? do_raw_spin_unlock+0x137/0x8b0
[  129.369971][ T7615]  ? fsnotify_perm+0x47b/0x590
[  129.374743][ T7615]  ? cd_forget+0x160/0x160
[  129.379352][ T7615]  do_dentry_open+0x807/0xfb0
[  129.384314][ T7615]  path_openat+0x2705/0x2f20
[  129.389027][ T7615]  ? do_filp_open+0x460/0x460
[  129.393733][ T7615]  do_filp_open+0x21c/0x460
[  129.398257][ T7615]  ? vfs_tmpfile+0x2e0/0x2e0
[  129.402869][ T7615]  ? _raw_spin_unlock+0x24/0x40
[  129.407723][ T7615]  ? alloc_fd+0x598/0x630
[  129.412073][ T7615]  do_sys_openat2+0x13b/0x4f0
[  129.416763][ T7615]  ? do_sys_open+0x220/0x220
[  129.421374][ T7615]  __x64_sys_openat+0x243/0x290
[  129.426340][ T7615]  ? __ia32_sys_open+0x270/0x270
[  129.431295][ T7615]  ? syscall_enter_from_user_mode+0x2e/0x240
[  129.437289][ T7615]  ? lockdep_hardirqs_on+0x94/0x130
[  129.442069][ T4486] usb 3-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f
[  129.442486][ T7615]  ? syscall_enter_from_user_mode+0x2e/0x240
[  129.451518][ T4486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.457473][ T7615]  do_syscall_64+0x3b/0xb0
[  129.457500][ T7615]  ? clear_bhb_loop+0x15/0x70
[  129.457515][ T7615]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  129.457532][ T7615] RIP: 0033:0x7f33d6e939a4
[  129.457551][ T7615] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[  129.457564][ T7615] RSP: 002b:00007ffeaab28460 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  129.457583][ T7615] RAX: ffffffffffffffda RBX: 00007ffeaab28678 RCX: 00007f33d6e939a4
[  129.457597][ T7615] RDX: 0000000000000000 RSI: 00007ffeaab28f1e RDI: 00000000ffffff9c
[  129.457609][ T7615] RBP: 00007ffeaab28f1e R08: 0000000000000000 R09: 0000000000000000
[  129.457620][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.457632][ T7615] R13: 00007ffeaab28690 R14: 000056374d779670 R15: 00007f33d72dca80
[  129.457659][ T7615]  </TASK>
[  129.457665][ T7615] 
[  129.457669][ T7615] The buggy address belongs to the page:
[  129.457686][ T7615] page:ffffea00016cb200 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b2c8
[  129.501952][ T4486] usb 3-1: Product: syz
[  129.504548][ T7615] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  129.547890][ T4486] usb 3-1: Manufacturer: syz
[  129.552915][ T7615] raw: 00fff00000000000 ffffea00016b5608 ffff8880b90409b0 0000000000000000
[  129.552932][ T7615] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  129.552940][ T7615] page dumped because: kasan: bad access detected
[  129.552957][ T7615] page_owner tracks the page as freed
[  129.552963][ T7615] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 3816, ts 128700782633, free_ts 129235639098
[  129.552987][ T7615]  get_page_from_freelist+0x322a/0x33c0
[  129.553008][ T7615]  __alloc_pages+0x272/0x700
[  129.553021][ T7615]  kmalloc_order+0x41/0x150
[  129.553035][ T7615]  kmalloc_order_trace+0x15/0xe0
[  129.553051][ T7615]  em28xx_v4l2_init+0xe2/0x2d50
[  129.553067][ T7615]  em28xx_init_extension+0x11b/0x1c0
[  129.553082][ T7615]  process_one_work+0x8a1/0x10c0
[  129.553099][ T7615]  worker_thread+0xaca/0x1280
[  129.553114][ T7615]  kthread+0x3f6/0x4f0
[  129.553128][ T7615]  ret_from_fork+0x1f/0x30
[  129.553145][ T7615] page last free stack trace:
[  129.553151][ T7615]  free_unref_page_prepare+0xc34/0xcf0
[  129.553165][ T7615]  free_unref_page+0x95/0x2d0
[  129.553179][ T7615]  free_nonslab_page+0xe4/0x150
[  129.553196][ T7615]  kfree+0x1cf/0x270
[  129.567807][ T4486] usb 3-1: SerialNumber: syz
[  129.574260][ T7615]  em28xx_v4l2_init+0x15d7/0x2d50
[  129.574283][ T7615]  em28xx_init_extension+0x11b/0x1c0
[  129.574297][ T7615]  process_one_work+0x8a1/0x10c0
[  129.574313][ T7615]  worker_thread+0xaca/0x1280
[  129.574327][ T7615]  kthread+0x3f6/0x4f0
[  129.574340][ T7615]  ret_from_fork+0x1f/0x30
[  129.574357][ T7615] 
[  129.574361][ T7615] Memory state around the buggy address:
[  129.574371][ T7615]  ffff88805b2c8800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  129.574382][ T7615]  ffff88805b2c8880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  129.574391][ T7615] >ffff88805b2c8900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  129.574399][ T7615]                    ^
[  129.574408][ T7615]  ffff88805b2c8980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  129.574418][ T7615]  ffff88805b2c8a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  129.574425][ T7615] ==================================================================
[  129.574431][ T7615] Disabling lock debugging due to kernel taint
[  129.574459][    C0] vkms_vblank_simulate: vblank timer overrun
[  129.582831][ T3816] em28xx 5-1:0.191: Remote control support is not available for this card.
[  129.594885][ T7615] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  129.600287][ T3713] em28xx 5-1:0.191: Closing input extension
[  129.607620][ T7615] CPU: 1 PID: 7615 Comm: v4l_id Tainted: G    B             5.15.167-syzkaller #0
[  129.607642][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  129.607650][ T7615] Call Trace:
[  129.607656][ T7615]  <TASK>
[  129.607662][ T7615]  dump_stack_lvl+0x1e3/0x2d0
[  129.607685][ T7615]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  129.868549][ T7615]  ? panic+0x860/0x860
[  129.872605][ T7615]  ? rcu_is_watching+0x11/0xa0
[  129.877348][ T7615]  ? preempt_schedule_common+0xa6/0xd0
[  129.882786][ T7615]  panic+0x318/0x860
[  129.886657][ T7615]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  129.892784][ T7615]  ? check_panic_on_warn+0x1d/0xa0
[  129.897871][ T7615]  ? fb_is_primary_device+0xd0/0xd0
[  129.903045][ T7615]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  129.908997][ T7615]  ? _raw_spin_unlock+0x40/0x40
[  129.913821][ T7615]  check_panic_on_warn+0x7e/0xa0
[  129.918730][ T7615]  ? v4l2_fh_open+0xc7/0x430
[  129.923290][ T7615]  end_report+0x6d/0xf0
[  129.927416][ T7615]  kasan_report+0x18e/0x1c0
[  129.931889][ T7615]  ? v4l2_fh_open+0xc7/0x430
[  129.936450][ T7615]  v4l2_fh_open+0xc7/0x430
[  129.940837][ T7615]  em28xx_v4l2_open+0x15d/0xa10
[  129.945664][ T7615]  v4l2_open+0x228/0x360
[  129.949881][ T7615]  chrdev_open+0x54a/0x630
[  129.954266][ T7615]  ? cd_forget+0x160/0x160
[  129.958653][ T7615]  ? do_raw_spin_unlock+0x137/0x8b0
[  129.963825][ T7615]  ? fsnotify_perm+0x47b/0x590
[  129.968562][ T7615]  ? cd_forget+0x160/0x160
[  129.972951][ T7615]  do_dentry_open+0x807/0xfb0
[  129.977604][ T7615]  path_openat+0x2705/0x2f20
[  129.982175][ T7615]  ? do_filp_open+0x460/0x460
[  129.986837][ T7615]  do_filp_open+0x21c/0x460
[  129.991351][ T7615]  ? vfs_tmpfile+0x2e0/0x2e0
[  129.995935][ T7615]  ? _raw_spin_unlock+0x24/0x40
[  130.000768][ T7615]  ? alloc_fd+0x598/0x630
[  130.005075][ T7615]  do_sys_openat2+0x13b/0x4f0
[  130.009730][ T7615]  ? do_sys_open+0x220/0x220
[  130.014305][ T7615]  __x64_sys_openat+0x243/0x290
[  130.019136][ T7615]  ? __ia32_sys_open+0x270/0x270
[  130.024050][ T7615]  ? syscall_enter_from_user_mode+0x2e/0x240
[  130.030003][ T7615]  ? lockdep_hardirqs_on+0x94/0x130
[  130.035177][ T7615]  ? syscall_enter_from_user_mode+0x2e/0x240
[  130.041133][ T7615]  do_syscall_64+0x3b/0xb0
[  130.045531][ T7615]  ? clear_bhb_loop+0x15/0x70
[  130.050190][ T7615]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  130.056062][ T7615] RIP: 0033:0x7f33d6e939a4
[  130.060451][ T7615] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[  130.080030][ T7615] RSP: 002b:00007ffeaab28460 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  130.088447][ T7615] RAX: ffffffffffffffda RBX: 00007ffeaab28678 RCX: 00007f33d6e939a4
[  130.096928][ T7615] RDX: 0000000000000000 RSI: 00007ffeaab28f1e RDI: 00000000ffffff9c
[  130.104878][ T7615] RBP: 00007ffeaab28f1e R08: 0000000000000000 R09: 0000000000000000
[  130.112824][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.120770][ T7615] R13: 00007ffeaab28690 R14: 000056374d779670 R15: 00007f33d72dca80
[  130.128723][ T7615]  </TASK>
[  130.131827][ T7615] Kernel Offset: disabled
[  130.136471][ T7615] Rebooting in 86400 seconds..