last executing test programs:

3.171919105s ago: executing program 3 (id=10771):
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
bpf$MAP_CREATE(0x141e000000000000, &(0x7f00000000c0)=@base={0x5, 0x3f, 0x6c03, 0xee, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

2.610731889s ago: executing program 3 (id=10781):
syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b"], 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000df713820f0031d58381f010203010902240001000010000904e50002ff0107fe090585"], 0x0)

2.377313806s ago: executing program 2 (id=10786):
r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0))

2.147823443s ago: executing program 2 (id=10791):
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f00000005c0)=ANY=[], 0x1, 0x5dc2, &(0x7f0000005d80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

2.144843563s ago: executing program 1 (id=10792):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x11e, 0x40, 0x0, &(0x7f00000003c0))

2.052075784s ago: executing program 4 (id=10794):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x19, &(0x7f0000000000)="03020000008002ff", 0x8)

2.033096906s ago: executing program 1 (id=10795):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c000b"], 0x12c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

1.917262969s ago: executing program 1 (id=10797):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x220)

1.916881539s ago: executing program 4 (id=10798):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
fallocate(r0, 0x1, 0xd, 0x7)

1.759297807s ago: executing program 1 (id=10800):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x609, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x9}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x4c}}, 0x0)

1.759222658s ago: executing program 4 (id=10801):
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x83, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x1000000000000}, &(0x7f00000000c0)=0x108)

1.677119077s ago: executing program 1 (id=10802):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000e00)={0x0, 0x1, 0xffffffffffffffff})

1.632452242s ago: executing program 4 (id=10803):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8895, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x100f, 0x0, 0x0, 0x0, 0x3}})

1.47568364s ago: executing program 4 (id=10805):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200200c100007006000000002000020d3"])

1.287921312s ago: executing program 4 (id=10807):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)

990.315946ms ago: executing program 0 (id=10810):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152)

827.163675ms ago: executing program 0 (id=10811):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000640)="b9ff03076944268cb89e14f088a847e0ffff00124000632177fbac141416e0e0020a94029f03032f87e589ca6aab840000008100", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

814.597826ms ago: executing program 2 (id=10812):
ioprio_set$pid(0x2, 0x0, 0x4004)
ioprio_get$pid(0x3, 0x0)

719.188857ms ago: executing program 0 (id=10813):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x280, 0x0, 0x19, 0x7a, 0x0, 0x0, 0x1e8, 0x1f0, 0x1f0, 0x1e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0xffffff00, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x11}, 0x0, 0xe0, 0x108, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@helper={{0x48}, {0x1, 'pptp\x00'}}, @common=@inet=@socket1={{0x28}, 0x3}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0)

660.100434ms ago: executing program 3 (id=10814):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000)

543.695887ms ago: executing program 3 (id=10815):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14)

503.485222ms ago: executing program 0 (id=10816):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x149a82, 0x104)
write$sysctl(r0, &(0x7f0000000100)='7\x00', 0x2)

356.706869ms ago: executing program 2 (id=10817):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x40}, 0x1, 0x0, 0x0, 0x20040844}, 0x0)

356.234369ms ago: executing program 0 (id=10818):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406618, 0x0)

243.998012ms ago: executing program 3 (id=10819):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

243.852452ms ago: executing program 2 (id=10820):
r0 = socket(0x1e, 0x1, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f0000000580), 0x4)

175.37305ms ago: executing program 0 (id=10821):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x24}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xfca3, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x61, 0x10, &(0x7f0000000000), 0xfffffffffffffe77, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

104.198418ms ago: executing program 1 (id=10822):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, [], [], [], [0x0, 0x7, 0x0, 0x3]})

81.57µs ago: executing program 3 (id=10823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000000)={0x2c, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x4, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @empty}, {0x0, 0x4, @mcast1}}}]}]}, 0x2c}}, 0x0)

0s ago: executing program 2 (id=10824):
r0 = socket(0x1d, 0x3, 0x1)
getsockopt$nfc_llcp(r0, 0x65, 0x8, 0x0, 0x20001008)

kernel console output (not intermixed with test programs):

] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  606.236998][ T3684] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  606.256217][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  606.296704][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  606.350342][ T5452] Bluetooth: Can't get state to change to load configuration err
[  606.365859][ T5452] Bluetooth: Loading sysconfig file failed
[  606.385753][ T5452] ath3k: probe of 5-1:0.0 failed with error -16
[  606.417397][ T5452] usb 5-1: USB disconnect, device number 31
[  606.590389][ T3684] usb 1-1: string descriptor 0 read error: -22
[  606.596653][ T3684] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  606.643807][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.654721][T24856] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551614)
[  606.666445][T24856] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  606.697456][ T3684] usb 1-1: config 0 descriptor??
[  606.743862][ T3684] hub 1-1:0.0: bad descriptor, ignoring hub
[  606.758425][ T3684] hub: probe of 1-1:0.0 failed with error -5
[  606.769427][ T3684] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33
[  606.819889][ T3684] input: failed to attach handler mousedev to device input33, error: -5
[  606.994578][ T5452] usb 1-1: USB disconnect, device number 42
[  607.307024][T24883] loop1: detected capacity change from 0 to 8
[  607.366270][T24883] SQUASHFS error: Unable to read inode 0x87
[  607.414026][T24889] loop4: detected capacity change from 0 to 64
[  607.552945][T24893] loop1: detected capacity change from 0 to 256
[  607.591805][T24893] exfat: Deprecated parameter 'namecase'
[  607.628701][T24897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9215'.
[  607.669235][T24893] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  607.695290][T24901] loop2: detected capacity change from 0 to 8
[  607.781565][T24901] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  608.184621][T24925] lo speed is unknown, defaulting to 1000
[  608.237928][T24927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9230'.
[  609.198042][T24921] loop1: detected capacity change from 0 to 32768
[  609.265799][T24921] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  609.308393][T24924] loop0: detected capacity change from 0 to 40427
[  609.315779][T24954] loop4: detected capacity change from 0 to 8192
[  609.324496][T24924] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  609.327098][ T4229] ocfs2: Unmounting device (7,1) on (node local)
[  609.380279][T24924] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  609.389661][T24954] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  609.436564][T24954] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  609.461077][T24946] loop3: detected capacity change from 0 to 32768
[  609.478273][T24924] F2FS-fs (loop0): Found nat_bits in checkpoint
[  609.479205][T24954] REISERFS (device loop4): using ordered data mode
[  609.498681][T24954] reiserfs: using flush barriers
[  609.507611][T24954] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  609.549295][T24954] REISERFS (device loop4): checking transaction log (loop4)
[  609.557987][T24946] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  609.587739][T24954] REISERFS (device loop4): Using rupasov hash to sort names
[  609.735489][T24954] REISERFS (device loop4): using 3.5.x disk format
[  609.735864][T24924] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  609.747531][T24954] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  609.779377][T24924] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  609.787634][T24976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9246'.
[  609.807608][T24954] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  609.824886][ T3637] ocfs2: Unmounting device (7,3) on (node local)
[  609.851758][T24954] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  609.910706][T24954] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  609.986176][T24980] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—�¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 24980 comm: syz.1.9253)
[  610.609245][T25003] openvswitch: netlink: Flow actions attr not present in new flow.
[  610.610737][T25004] netlink: 'syz.0.9251': attribute type 2 has an invalid length.
[  610.652174][T25004] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9251'.
[  610.726797][T25008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9265'.
[  610.803362][T25012] netlink: 'syz.1.9267': attribute type 3 has an invalid length.
[  610.923692][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  610.923707][   T26] audit: type=1400 audit(2000000483.029:3074): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=E1355F172F2F26 pid=25018 comm="syz.0.9270"
[  611.346537][T25042] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  611.458207][T25040] loop4: detected capacity change from 0 to 4096
[  611.627971][T25040] ntfs: volume version 3.1.
[  611.724080][T25046] loop2: detected capacity change from 0 to 4096
[  611.832969][    T9] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  611.943255][T25054] loop3: detected capacity change from 0 to 4096
[  611.964111][T25054] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  612.127696][T25061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9292'.
[  612.181576][T25062] loop4: detected capacity change from 0 to 2048
[  612.301758][T25062] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  612.442921][T25069] loop0: detected capacity change from 0 to 1764
[  612.444620][T21061] EXT4-fs (loop4): unmounting filesystem.
[  612.613347][T25080] loop2: detected capacity change from 0 to 128
[  612.678306][T25080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  612.782939][T25080] ext4 filesystem being mounted at /306/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  613.172822][T25112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9314'.
[  613.464069][T25127] xt_recent: Unsupported userspace flags (00000064)
[  613.472776][T25120] loop3: detected capacity change from 0 to 4096
[  613.474954][T25128] loop4: detected capacity change from 0 to 256
[  613.509282][T25120] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  613.594911][T25120] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  613.598695][T25131] loop1: detected capacity change from 0 to 64
[  613.620293][T25120] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  613.740387][   T61] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22.
[  613.774289][ T3637] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22.
[  613.871634][ T2008] pvrusb2: request_firmware fatal error with code=-110
[  613.891408][ T2008] pvrusb2: Failure uploading firmware1
[  613.896899][ T2008] pvrusb2: Device initialization was not successful.
[  613.944565][ T2008] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  613.988211][ T2008] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  614.020484][ T5774] pvrusb2: Device being rendered inoperable
[  614.252983][T25155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9333'.
[  614.298516][T25133] loop4: detected capacity change from 0 to 32768
[  614.310372][T24295] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  614.380315][ T5774] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  614.406714][T25133] XFS (loop4): Mounting V5 Filesystem
[  614.496919][T25172] loop1: detected capacity change from 0 to 64
[  614.618197][T25133] XFS (loop4): Ending clean mount
[  614.670736][T24295] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  614.687697][T24295] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  614.712602][T21061] XFS (loop4): Unmounting Filesystem
[  614.714220][T24295] usb 4-1: config 0 has no interface number 0
[  614.741406][ T5774] usb 3-1: config 0 has an invalid interface number: 106 but max is 0
[  614.749598][ T5774] usb 3-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config
[  614.766281][T25181] sctp: [Deprecated]: syz.1.9344 (pid 25181) Use of int in maxseg socket option.
[  614.766281][T25181] Use struct sctp_assoc_value instead
[  614.788009][T24295] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  614.816317][T24295] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  614.829457][ T5774] usb 3-1: config 0 has no interface number 0
[  614.836960][T25182] loop0: detected capacity change from 0 to 1764
[  614.841651][ T5774] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 218, changing to 7
[  614.859430][ T5774] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41584, setting to 1024
[  614.877672][ T5774] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  614.897793][ T5774] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  614.909355][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.935578][ T5774] usb 3-1: config 0 descriptor??
[  614.952716][T25182] iso9660: Corrupted directory entry in block 2 of inode 1920
[  615.020864][T24295] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  615.036871][T24295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.046068][ T5774] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  615.057705][T24295] usb 4-1: Product: syz
[  615.062281][T24295] usb 4-1: Manufacturer: syz
[  615.066959][T24295] usb 4-1: SerialNumber: syz
[  615.075309][T24295] usb 4-1: config 0 descriptor??
[  615.107256][T25193] cgroup: Invalid name
[  615.216084][T25197] netlink: 476 bytes leftover after parsing attributes in process `syz.0.9349'.
[  615.216619][ T3684] usb 3-1: USB disconnect, device number 41
[  615.231642][   T46] usb 3-1: Failed to submit usb control message: -71
[  615.234119][T25197] netlink: 'syz.0.9349': attribute type 5 has an invalid length.
[  615.239082][   T46] usb 3-1: unable to send the bmi data to the device: -71
[  615.297588][   T46] usb 3-1: unable to get target info from device
[  615.308766][   T46] usb 3-1: could not get target info (-71)
[  615.349091][   T46] usb 3-1: could not probe fw (-71)
[  615.447108][T25201] loop1: detected capacity change from 0 to 2048
[  615.498549][T25201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  615.545779][T24295] usb 4-1: USB disconnect, device number 47
[  615.608275][T25211] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  615.652122][ T4229] EXT4-fs (loop1): unmounting filesystem.
[  615.777676][T25219] loop0: detected capacity change from 0 to 128
[  615.835364][T25219] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  615.881795][T25219] ext4 filesystem being mounted at /1952/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  615.912620][T21054] EXT4-fs (loop2): unmounting filesystem.
[  616.104420][ T3638] EXT4-fs (loop0): unmounting filesystem.
[  616.499550][T25252] loop4: detected capacity change from 0 to 128
[  616.658857][T25258] loop2: detected capacity change from 0 to 256
[  616.841682][T25266] netlink: 300 bytes leftover after parsing attributes in process `syz.4.9382'.
[  616.944203][T25270] program syz.3.9383 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  617.033331][T25273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9385'.
[  617.042634][T25274] ieee802154 phy0 wpan0: encryption failed: -22
[  617.071570][T25276] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  617.192750][T25278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9388'.
[  617.246996][T25278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9388'.
[  617.269419][T25278] netlink: 'syz.3.9388': attribute type 4 has an invalid length.
[  617.435657][T25231] loop1: detected capacity change from 0 to 32768
[  617.474641][T25231] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  617.510745][T25231] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  617.572772][T25231] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  617.604791][   T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  617.620491][   T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  617.690097][T25300] Unknown options in mask 5
[  617.738038][   T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 117ms
[  617.754334][   T22] gfs2: fsid=syz:syz.0: jid=0: Done
[  617.759662][T25231] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  618.513954][T25340] netlink: 'syz.1.9419': attribute type 10 has an invalid length.
[  618.702697][T25349] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 35293 - 0
[  618.743286][T25354] loop0: detected capacity change from 0 to 512
[  618.744954][T25353] tmpfs: Bad value for 'nr_blocks'
[  618.751803][T25349] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 35293 - 0
[  618.784568][T25349] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 35293 - 0
[  618.815550][T25349] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 35293 - 0
[  618.829701][T25354] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  618.852243][T25354] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  618.909334][T25354] System zones: 0-1, 15-15, 18-18, 34-34
[  618.944261][T25354] EXT4-fs (loop0): orphan cleanup on readonly fs
[  618.980827][T25354] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  619.020328][T25354] EXT4-fs warning (device loop0): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  619.091194][T25354] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  619.107789][T25366] tmpfs: Bad value for 'mpol'
[  619.125947][T25354] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.9425: bad orphan inode 16
[  619.153855][T25354] ext4_test_bit(bit=15, block=18) = 1
[  619.179549][T25354] is_bad_inode(inode)=0
[  619.193099][T25354] NEXT_ORPHAN(inode)=0
[  619.199113][T25354] max_ino=32
[  619.209332][T25354] i_nlink=2
[  619.219521][T25354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  619.261438][T25354] fscrypt (loop0, inode 16): Error -61 getting encryption context
[  619.298826][T25364] loop3: detected capacity change from 0 to 4096
[  619.309900][T25356] loop4: detected capacity change from 0 to 32768
[  619.342543][T25364] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  619.351453][T25356] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.9427 (25356)
[  619.383613][T25356] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  619.407763][ T3638] EXT4-fs (loop0): unmounting filesystem.
[  619.485946][T25356] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  619.516121][T25356] BTRFS info (device loop4): force zlib compression, level 3
[  619.552437][T25356] BTRFS info (device loop4): force clearing of disk cache
[  619.559773][T25356] BTRFS info (device loop4): setting nodatasum
[  619.603400][T25356] BTRFS info (device loop4): allowing degraded mounts
[  619.630735][T25356] BTRFS info (device loop4): enabling disk space caching
[  619.637802][T25356] BTRFS info (device loop4): disk space caching is enabled
[  619.741390][T25385] loop3: detected capacity change from 0 to 256
[  619.794191][T25395] netlink: 'syz.0.9442': attribute type 11 has an invalid length.
[  619.922154][T25356] BTRFS info (device loop4): rebuilding free space tree
[  620.001661][T25416] 9pnet: Found fid 0 not clunked
[  620.032308][T25356] BTRFS info (device loop4): disabling free space tree
[  620.069302][T25356] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  620.133382][T25356] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  620.249829][T25356] BTRFS info (device loop4): setting incompat feature flag for DEFAULT_SUBVOL (0x2)
[  620.296730][T25432] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on.
[  620.356173][T25432] overlayfs: overlapping lowerdir path
[  620.377704][T25435] binfmt_misc: register: failed to install interpreter file ./file0
[  620.441657][T21061] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  621.173027][T25465] QAT: Stopping all acceleration devices.
[  621.439067][T25477] Unknown options in mask 5
[  621.974255][T25453] loop3: detected capacity change from 0 to 32768
[  622.099763][T25509] loop2: detected capacity change from 0 to 16
[  622.140730][T25509] erofs: (device loop2): mounted with root inode @ nid 36.
[  622.300673][ T5774] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  622.670708][ T5774] usb 1-1: config index 0 descriptor too short (expected 3133, got 61)
[  622.680403][ T5774] usb 1-1: config 0 has an invalid interface number: 156 but max is 1
[  622.688873][ T5774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  622.722725][ T5774] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  622.740240][ T5774] usb 1-1: config 0 has no interface number 0
[  622.760843][ T5774] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  622.798614][ T5774] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  622.830847][ T5774] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  622.854278][ T5774] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  622.878253][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.906309][T25537] loop1: detected capacity change from 0 to 1024
[  622.938819][ T5774] usb 1-1: config 0 descriptor??
[  622.960470][T25537] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  623.008089][T25537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  623.012078][ T5774] gspca_main: spca561-2.14.0 probing abcd:cdee
[  623.065983][T25543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9507'.
[  623.226377][ T4229] EXT4-fs (loop1): unmounting filesystem.
[  623.280379][ T5774] spca561: probe of 1-1:0.156 failed with error -22
[  623.287751][ T5774] usb 1-1: MIDIStreaming interface descriptor not found
[  623.364437][T25549] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9509'.
[  623.435027][ T5774] usb 1-1: USB disconnect, device number 43
[  623.474707][T25552] netlink: 26 bytes leftover after parsing attributes in process `syz.4.9511'.
[  623.529031][T25554] xt_connbytes: Forcing CT accounting to be enabled
[  623.573016][T25554] xt_NFQUEUE: number of total queues is 0
[  624.120900][ T1234] ieee802154 phy0 wpan0: encryption failed: -22
[  624.127249][ T1234] ieee802154 phy1 wpan1: encryption failed: -22
[  624.170445][T25583] loop2: detected capacity change from 0 to 1024
[  624.390255][ T4365] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  624.588555][T25597] loop3: detected capacity change from 0 to 128
[  624.647860][T25597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  624.689520][T25597] ext4 filesystem being mounted at /1977/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  624.920628][ T4365] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  624.956644][ T4365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.977326][ T4365] usb 1-1: Product: syz
[  624.989630][ T4365] usb 1-1: Manufacturer: syz
[  625.002902][ T4365] usb 1-1: SerialNumber: syz
[  625.020058][T25578] loop1: detected capacity change from 0 to 32768
[  625.030271][T24295] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  625.050504][T25578] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.9525 (25578)
[  625.052441][ T4365] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  625.147388][T25578] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  625.183924][T25609] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  625.190774][T25578] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  625.236272][T25578] BTRFS info (device loop1): using free space tree
[  625.392133][T25628] loop4: detected capacity change from 0 to 64
[  625.396003][T24295] usb 4-1: config 0 has an invalid interface number: 106 but max is 0
[  625.418626][T25578] BTRFS info (device loop1): enabling ssd optimizations
[  625.457402][T24295] usb 4-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config
[  625.485476][T24295] usb 4-1: config 0 has no interface number 0
[  625.491995][T24295] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 218, changing to 7
[  625.515535][T24295] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41584, setting to 1024
[  625.526928][T24295] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  625.547149][T24295] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  625.556951][T24295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.575148][T24295] usb 4-1: config 0 descriptor??
[  625.655360][T25635] fuse: Invalid rootmode
[  625.666682][T24295] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  625.688969][ T4229] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  625.746441][ T5447] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  625.890526][    T9] usb 4-1: Failed to submit usb control message: -71
[  625.924003][T25642] x_tables: duplicate underflow at hook 2
[  625.934606][    T9] usb 4-1: unable to send the bmi data to the device: -71
[  625.970030][    T9] usb 4-1: unable to get target info from device
[  626.006250][    T9] usb 4-1: could not get target info (-71)
[  626.016403][    T9] usb 4-1: could not probe fw (-71)
[  626.070197][    C0] usb 1-1: ath9k_htc: invalid pkt_len (ff59)
[  626.092292][T25646] netlink: 'syz.2.9549': attribute type 7 has an invalid length.
[  626.162432][ T5451] usb 4-1: USB disconnect, device number 48
[  626.261790][   T22] usb 1-1: USB disconnect, device number 44
[  626.695928][T25666] ceph: Path missing in source
[  626.713986][ T3637] EXT4-fs (loop3): unmounting filesystem.
[  626.830347][ T5447] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  626.837350][ T5447] ath9k_htc: Failed to initialize the device
[  626.870273][   T22] usb 1-1: ath9k_htc: USB layer deinitialized
[  626.935495][T25652] loop1: detected capacity change from 0 to 32768
[  626.960438][T25652] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.9544 (25652)
[  627.030611][T25652] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  627.040281][T25676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9562'.
[  627.060605][T25652] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  627.090275][T25652] BTRFS info (device loop1): using free space tree
[  627.288789][T25700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9570'.
[  627.298251][T25700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9570'.
[  627.307624][T25700] netlink: 'syz.2.9570': attribute type 6 has an invalid length.
[  627.510286][T25652] BTRFS info (device loop1): enabling ssd optimizations
[  627.546518][ T4229] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  627.761546][T25727] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9579'.
[  627.850341][T25727] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9579'.
[  628.099954][T25738] loop2: detected capacity change from 0 to 1024
[  628.124868][T25739] loop4: detected capacity change from 0 to 64
[  628.147800][T25738] hfsplus: unable to parse mount options
[  628.236666][ T3629] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  628.302808][T25738] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock
[  628.337891][T25746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9588'.
[  628.381692][T25746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9588'.
[  628.405240][T25749] tmpfs: Bad value for 'size'
[  628.765887][T25763] netlink: 'syz.2.9598': attribute type 4 has an invalid length.
[  628.781756][T25763] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.9598'.
[  629.008367][T25781] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  629.052198][T25776] loop0: detected capacity change from 0 to 2048
[  629.176871][T25786] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  629.212491][T25791] loop1: detected capacity change from 0 to 1024
[  629.252265][T25791] hfsplus: Filesystem is marked locked, mounting read-only.
[  629.255461][T25776] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  629.287400][T25791] hfsplus: invalid catalog entry type in lookup
[  629.385523][T25776] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16)
[  629.441314][T25776] Remounting filesystem read-only
[  629.469679][T25776] NILFS (loop0): error -5 truncating bmap (ino=16)
[  629.499768][T25803] netlink: 116 bytes leftover after parsing attributes in process `syz.3.9614'.
[  629.598480][ T3638] NILFS (loop0): discard dirty page: offset=4096, ino=6
[  629.643708][ T3638] NILFS (loop0): discard dirty block: blocknr=39, size=1024
[  629.666527][ T3638] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  629.692368][ T3638] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  629.712911][ T3638] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  629.749725][ T3638] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  629.791058][ T3638] NILFS (loop0): discard dirty page: offset=0, ino=3
[  629.797770][ T3638] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  629.850256][ T3638] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  629.886309][ T3638] NILFS (loop0): discard dirty block: blocknr=44, size=1024
[  629.914972][ T3638] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  629.929874][T25804] infiniband syz2: set active
[  629.935830][T25804] infiniband syz2: added veth0_vlan
[  630.162007][T25804] RDS/IB: syz2: added
[  630.166067][T25804] smc: adding ib device syz2 with port count 1
[  630.236702][T25804] smc:    ib device syz2 port 1 has pnetid 
[  631.053057][T25828] loop3: detected capacity change from 0 to 32768
[  631.543264][T25864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9644'.
[  631.590232][T25864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9644'.
[  631.666553][T25869] netlink: 'syz.0.9645': attribute type 2 has an invalid length.
[  631.709320][T25869] netlink: 'syz.0.9645': attribute type 1 has an invalid length.
[  631.740373][T25869] netlink: 'syz.0.9645': attribute type 1 has an invalid length.
[  631.843166][T25876] loop4: detected capacity change from 0 to 256
[  632.088508][T25888] loop4: detected capacity change from 0 to 64
[  632.116108][T25890] netlink: 'syz.0.9657': attribute type 1 has an invalid length.
[  632.580342][ T5770] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  632.660100][T25920] binfmt_misc: register: failed to install interpreter file ./file0/file0
[  632.830460][ T5770] usb 1-1: Using ep0 maxpacket: 8
[  632.910462][ T5227] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  632.942224][T25934] netlink: 'syz.1.9679': attribute type 10 has an invalid length.
[  632.951255][ T5770] usb 1-1: config 0 has an invalid interface number: 5 but max is 0
[  632.959279][ T5770] usb 1-1: config 0 has no interface number 0
[  633.120472][ T5770] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff
[  633.129829][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.147583][ T5451] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  633.158409][ T5770] usb 1-1: Product: syz
[  633.163727][ T5770] usb 1-1: Manufacturer: syz
[  633.168339][ T5770] usb 1-1: SerialNumber: syz
[  633.207660][ T5770] usb 1-1: config 0 descriptor??
[  633.225744][T25948] loop1: detected capacity change from 0 to 64
[  633.335568][T25952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9689'.
[  633.400312][ T5451] usb 5-1: Using ep0 maxpacket: 16
[  633.460379][ T5227] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d
[  633.479698][ T5227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.494151][ T5227] usb 3-1: Product: syz
[  633.499982][ T5227] usb 3-1: Manufacturer: syz
[  633.507534][ T5442] usb 1-1: USB disconnect, device number 45
[  633.522666][ T5227] usb 3-1: SerialNumber: syz
[  633.561331][ T5227] usb 3-1: config 0 descriptor??
[  633.700336][ T5451] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  633.718531][ T5451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.727300][ T5451] usb 5-1: Product: syz
[  633.742950][ T5451] usb 5-1: Manufacturer: syz
[  633.747571][ T5451] usb 5-1: SerialNumber: syz
[  633.776132][ T5451] usb 5-1: config 0 descriptor??
[  633.807777][ T5227] usb 3-1: USB disconnect, device number 42
[  633.825101][ T5451] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  633.868003][T25976] IPv6: Can't replace route, no match found
[  634.043741][ T5451] usb 5-1: clie_3_5_startup: get config number bad return length: 0
[  634.060349][ T5451] visor: probe of 5-1:0.0 failed with error -5
[  634.246716][ T5451] usb 5-1: USB disconnect, device number 32
[  634.258608][T25993] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9707'.
[  634.283582][T25993] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9707'.
[  634.550265][ T5447] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  634.790235][ T5447] usb 1-1: Using ep0 maxpacket: 8
[  634.935941][T26029] loop1: detected capacity change from 0 to 256
[  634.970528][ T5447] usb 1-1: unable to get BOS descriptor or descriptor too short
[  634.976311][T26029] FAT-fs (loop1): Directory bread(block 64) failed
[  635.017583][T26029] FAT-fs (loop1): Directory bread(block 65) failed
[  635.056423][T26029] FAT-fs (loop1): Directory bread(block 66) failed
[  635.063037][T26029] FAT-fs (loop1): Directory bread(block 67) failed
[  635.069682][T26029] FAT-fs (loop1): Directory bread(block 68) failed
[  635.070495][ T5447] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  635.116076][ T5447] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  635.121135][T26029] FAT-fs (loop1): Directory bread(block 69) failed
[  635.148290][T26029] FAT-fs (loop1): Directory bread(block 70) failed
[  635.152393][ T5447] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  635.158329][T26029] FAT-fs (loop1): Directory bread(block 71) failed
[  635.174255][ T5447] usb 1-1: config 1 has no interface number 1
[  635.190672][ T5447] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  635.199135][T26029] FAT-fs (loop1): Directory bread(block 72) failed
[  635.231119][T26029] FAT-fs (loop1): Directory bread(block 73) failed
[  635.270618][ T5447] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  635.361941][   T26] audit: type=1800 audit(2000000507.469:3075): pid=26029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9725" name="file1" dev="loop1" ino=1048774 res=0 errno=0
[  635.460384][ T5447] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  635.491042][ T5447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.511184][ T5447] usb 1-1: Product: syz
[  635.515375][ T5447] usb 1-1: Manufacturer: syz
[  635.550382][ T5447] usb 1-1: SerialNumber: syz
[  635.682722][T26062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9741'.
[  635.720035][T26064] loop1: detected capacity change from 0 to 512
[  635.737426][T26064] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  635.742918][T26062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9741'.
[  635.796516][T26064] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  635.836390][T26064] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  635.839279][T26071] loop4: detected capacity change from 0 to 2048
[  635.856374][T26064] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.9742: Failed to acquire dquot type 0
[  635.891003][T26074] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  635.935290][T26064] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  635.935549][T26074] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  635.964306][T26074] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  635.965693][ T5447] usb 1-1: USB disconnect, device number 46
[  635.985037][T26074] Remounting filesystem read-only
[  636.013155][T26064] EXT4-fs (loop1): 1 truncate cleaned up
[  636.018855][T26064] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  636.037254][T26077] qrtr: Invalid version 27
[  636.045816][T21061] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  636.057463][ T3629] udevd[3629]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  636.100341][T21061] NILFS (loop4): discard dirty page: offset=0, ino=2
[  636.128741][T21061] NILFS (loop4): discard dirty block: blocknr=18, size=1024
[  636.147604][T21061] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  636.184958][T21061] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  636.195630][ T4229] EXT4-fs (loop1): unmounting filesystem.
[  636.211639][T21061] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  636.223519][T21061] NILFS (loop4): discard dirty page: offset=0, ino=6
[  636.233173][T21061] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  636.242567][T21061] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  636.251897][T21061] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[  636.259833][T21061] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[  636.301592][T21061] NILFS (loop4): discard dirty page: offset=0, ino=5
[  636.310549][T21061] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  636.347402][T21061] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  636.371236][T26086] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9752'.
[  636.376955][T21061] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  636.410330][T21061] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  636.430311][ T3641] Bluetooth: hci3: command 0x0406 tx timeout
[  636.430382][T26000] Bluetooth: hci4: command 0x0406 tx timeout
[  636.460420][T21061] NILFS (loop4): discard dirty page: offset=0, ino=4
[  636.476916][T21061] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[  636.518197][T21061] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  636.528321][T26092] loop1: detected capacity change from 0 to 64
[  636.549091][T21061] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  636.588328][T26092] Trying to free block not in datazone
[  636.606868][T21061] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  636.616827][T26092] Trying to free block not in datazone
[  636.629604][T26092] Trying to free block not in datazone
[  636.635927][T21061] NILFS (loop4): discard dirty page: offset=0, ino=3
[  636.650272][T26092] Trying to free block not in datazone
[  636.655819][T21061] NILFS (loop4): discard dirty block: blocknr=42, size=1024
[  636.672778][T26092] Trying to free block not in datazone
[  636.678407][T21061] NILFS (loop4): discard dirty block: blocknr=43, size=1024
[  636.707612][T26092] minix_free_block (loop1:6): bit already cleared
[  636.721148][T21061] NILFS (loop4): discard dirty block: blocknr=44, size=1024
[  636.728454][T21061] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  636.745783][T26092] Trying to free block not in datazone
[  636.924091][T26109] netlink: 'syz.0.9763': attribute type 1 has an invalid length.
[  637.063166][T26106] loop3: detected capacity change from 0 to 4096
[  637.114433][T26106] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  637.213113][T26106] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  637.251283][T26106] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing.
[  637.270879][T26106] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  637.319513][T26106] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  637.398587][T26106] ntfs: volume version 3.1.
[  637.436990][T26106] ntfs: (device loop3): load_and_init_quota(): Failed to find inode number for $Quota.
[  637.452624][T26106] ntfs: (device loop3): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  637.796155][T26143] loop3: detected capacity change from 0 to 1764
[  637.880418][T26146] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  638.076763][T26122] loop4: detected capacity change from 0 to 32768
[  638.093089][T26152] loop3: detected capacity change from 0 to 64
[  638.138766][T26122] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9769 (26122)
[  638.200505][T26122] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  638.219965][T26122] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  638.270332][T26122] BTRFS info (device loop4): using free space tree
[  638.590582][T26122] BTRFS info (device loop4): enabling ssd optimizations
[  638.750472][T26154] loop1: detected capacity change from 0 to 32768
[  638.758033][T26136] loop2: detected capacity change from 0 to 32768
[  638.784793][T26136] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  638.806322][T26136] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  638.834848][T26136] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  638.851565][T26154] XFS (loop1): Mounting V5 Filesystem
[  638.885198][ T5442] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  638.900230][ T5442] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  638.935635][T26194] loop3: detected capacity change from 0 to 512
[  638.949073][T26194] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  638.958923][T26194] EXT4-fs (loop3): invalid journal inode
[  638.974140][T26194] EXT4-fs (loop3): can't get journal size
[  639.023063][T26154] XFS (loop1): Ending clean mount
[  639.031182][ T5442] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 130ms
[  639.044321][ T5442] gfs2: fsid=syz:syz.0: jid=0: Done
[  639.049878][T26136] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  639.052866][T26194] EXT4-fs (loop3): 1 truncate cleaned up
[  639.062947][T26194] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  639.072820][T21061] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  639.091375][T26154] XFS (loop1): Quotacheck needed: Please wait.
[  639.152136][T26154] XFS (loop1): Quotacheck: Done.
[  639.225377][ T3637] EXT4-fs (loop3): unmounting filesystem.
[  639.449214][ T4229] XFS (loop1): Unmounting Filesystem
[  640.244859][T26232] 8021q: adding VLAN 0 to HW filter on device bond1
[  640.545649][T26231] loop1: detected capacity change from 0 to 32768
[  640.555359][T26231] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.9795 (26231)
[  640.591517][T26231] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  640.628562][T26231] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  640.652692][T26231] BTRFS info (device loop1): doing ref verification
[  640.700074][T26231] BTRFS info (device loop1): max_inline at 0
[  640.730481][T26231] BTRFS info (device loop1): using free space tree
[  640.842791][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9815'.
[  641.108895][T26231] BTRFS info (device loop1): enabling ssd optimizations
[  641.261724][T26292] loop3: detected capacity change from 0 to 2048
[  641.269809][ T4229] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  641.314409][T26292] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  641.542714][T26303] program syz.4.9831 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  641.769842][T26313] loop4: detected capacity change from 0 to 1764
[  641.824768][T26313] iso9660: Corrupted directory entry in block 2 of inode 1920
[  642.014213][T26324] dlm: no locking on control device
[  642.426637][  T919] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  642.690414][  T919] usb 5-1: Using ep0 maxpacket: 8
[  642.704731][T26362] xt_TCPMSS: Only works on TCP SYN packets
[  642.810572][  T919] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  642.830846][  T919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.869044][  T919] usb 5-1: config 0 descriptor??
[  642.941949][  T919] gspca_main: spca501-2.14.0 probing 0000:0000
[  643.363695][  T919] gspca_spca501: reg write: error -71
[  643.373429][  T919] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00
[  643.398209][T26389] loop1: detected capacity change from 0 to 4096
[  643.403285][  T919] spca501: probe of 5-1:0.0 failed with error -22
[  643.423006][  T919] usb 5-1: USB disconnect, device number 33
[  643.495372][T26389] ntfs: volume version 3.1.
[  643.595788][T26394] loop3: detected capacity change from 0 to 8192
[  643.657439][T26394] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  643.707696][T26394] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  643.733158][T26409] loop0: detected capacity change from 0 to 256
[  643.740025][T26409] exfat: Deprecated parameter 'namecase'
[  643.763566][T26394] REISERFS (device loop3): using ordered data mode
[  643.770595][T26394] reiserfs: using flush barriers
[  643.784825][T26394] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  643.808576][T26394] REISERFS (device loop3): checking transaction log (loop3)
[  643.830412][T26409] exfat: Deprecated parameter 'utf8'
[  643.860362][T26409] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  643.999603][T26416] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9886'.
[  644.026575][T26394] REISERFS (device loop3): Using tea hash to sort names
[  644.061609][T26394] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  644.253820][T26426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  644.304418][T26426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  644.317990][T26426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  644.348313][T26426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  644.373314][T26426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  644.400229][T26426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  644.446222][T26426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  644.480200][T26426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  644.866475][T26446] tmpfs: Bad value for 'mpol'
[  645.107973][T26414] loop1: detected capacity change from 0 to 32768
[  645.125845][T26414] gfs2: fsid=[(: Trying to join cluster "lock_nolock", "[("
[  645.142215][T26414] gfs2: fsid=[(: Now mounting FS (format 0)...
[  645.178550][T26414] gfs2: fsid=[(.0: journal 0 mapped with 20 extents in 0ms
[  645.203032][ T6393] gfs2: fsid=[(.0: jid=0, already locked for use
[  645.220450][ T6393] gfs2: fsid=[(.0: jid=0: Looking at journal...
[  645.318685][T26468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9912'.
[  645.328669][ T6393] gfs2: fsid=[(.0: jid=0: Journal head lookup took 108ms
[  645.344031][ T6393] gfs2: fsid=[(.0: jid=0: Done
[  645.346228][  T919] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  645.348827][T26414] gfs2: fsid=[(.0: first mount done, others may mount
[  645.364504][T26468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9912'.
[  645.460455][ T5771] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[  645.610285][  T919] usb 4-1: Using ep0 maxpacket: 16
[  645.756463][  T919] usb 4-1: config index 0 descriptor too short (expected 25964, got 18)
[  645.756490][  T919] usb 4-1: config 115 has too many interfaces: 114, using maximum allowed: 32
[  645.756510][  T919] usb 4-1: config 115 descriptor has 1 excess byte, ignoring
[  645.756529][  T919] usb 4-1: config 115 has 0 interfaces, different from the descriptor's value: 114
[  645.872251][ T5771] usb 1-1: unable to get BOS descriptor or descriptor too short
[  645.920422][  T919] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  645.940509][ T5771] usb 1-1: not running at top speed; connect to a high speed hub
[  645.946132][  T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.975887][  T919] usb 4-1: Product: syz
[  645.990231][  T919] usb 4-1: Manufacturer: syz
[  646.000228][  T919] usb 4-1: SerialNumber: syz
[  646.044113][ T5771] usb 1-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config
[  646.062855][ T5771] usb 1-1: config 136 has 2 interfaces, different from the descriptor's value: 3
[  646.080335][ T5771] usb 1-1: config 136 has no interface number 1
[  646.086615][ T5771] usb 1-1: too many endpoints for config 136 interface 2 altsetting 12: 89, using maximum allowed: 30
[  646.140265][ T5771] usb 1-1: config 136 interface 2 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 89
[  646.190668][ T5771] usb 1-1: config 136 interface 2 has no altsetting 0
[  646.286782][  T919] r8152-cfgselector 4-1: Unknown version 0x0000
[  646.298452][  T919] r8152-cfgselector 4-1: USB disconnect, device number 49
[  646.350820][ T5771] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  646.359877][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.390419][ T5771] usb 1-1: Product: syz
[  646.402745][ T5771] usb 1-1: Manufacturer: syz
[  646.407393][ T5771] usb 1-1: SerialNumber: syz
[  646.513387][T26508] loop1: detected capacity change from 0 to 2048
[  646.561460][T26512] xt_TCPMSS: Only works on TCP SYN packets
[  646.579159][T26513] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  646.588875][T26490] loop2: detected capacity change from 0 to 32768
[  646.600073][T26508] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=255
[  646.631938][T26490] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.9923 (26490)
[  646.646473][T26508] Remounting filesystem read-only
[  646.708090][T26490] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  646.763381][T26490] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  646.774911][T26490] BTRFS info (device loop2): doing ref verification
[  646.784654][T26490] BTRFS info (device loop2): max_inline at 0
[  646.790911][T26490] BTRFS info (device loop2): using free space tree
[  646.800633][ T5771] usb 1-1: MIDIStreaming interface descriptor not found
[  646.830035][T26521] binder: 26518:26521 ioctl c0046209 100000000000000 returned -22
[  646.913620][ T5771] usb 1-1: USB disconnect, device number 47
[  647.188123][T26490] BTRFS info (device loop2): enabling ssd optimizations
[  647.335818][T21054] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  648.022653][T26575] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  648.145909][T26580] loop3: detected capacity change from 0 to 256
[  648.236560][T26580] FAT-fs (loop3): Directory bread(block 64) failed
[  648.246318][T26580] FAT-fs (loop3): Directory bread(block 65) failed
[  648.267866][T26580] FAT-fs (loop3): Directory bread(block 66) failed
[  648.310842][T26580] FAT-fs (loop3): Directory bread(block 67) failed
[  648.317459][T26580] FAT-fs (loop3): Directory bread(block 68) failed
[  648.344065][T26580] FAT-fs (loop3): Directory bread(block 69) failed
[  648.370527][T26580] FAT-fs (loop3): Directory bread(block 70) failed
[  648.377110][T26580] FAT-fs (loop3): Directory bread(block 71) failed
[  648.378576][T26559] loop4: detected capacity change from 0 to 32768
[  648.386844][T26590] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9962'.
[  648.406238][T26559] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  648.419752][T26580] FAT-fs (loop3): Directory bread(block 72) failed
[  648.461558][T26559] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  648.470262][T26580] FAT-fs (loop3): Directory bread(block 73) failed
[  648.497518][T26559] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  648.516362][T26594] loop2: detected capacity change from 0 to 512
[  648.526262][  T919] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  648.533328][  T919] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  648.535890][T26594] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  648.601080][  T919] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms
[  648.608595][  T919] gfs2: fsid=syz:syz.0: jid=0: Done
[  648.626993][T26559] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  648.678294][T26594] EXT4-fs (loop2): 1 truncate cleaned up
[  648.704384][T26594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  648.824054][T26604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9970'.
[  648.947660][T21054] EXT4-fs (loop2): unmounting filesystem.
[  649.148012][T26617] tmpfs: Bad value for 'mpol'
[  649.338817][T26625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9979'.
[  649.433044][T26631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9982'.
[  649.696486][T26639] xt_nfacct: accounting object `sy' does not exists
[  649.870497][T26652] ipt_CLUSTERIP: Please specify destination IP
[  649.896924][T26656] loop1: detected capacity change from 0 to 256
[  650.344583][T26677] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  650.541981][T26689] loop3: detected capacity change from 0 to 128
[  650.641856][T26694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10012'.
[  650.710189][T26694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10012'.
[  650.826144][T26703] xt_CT: You must specify a L4 protocol and not use inversions on it
[  651.060103][T26712] netlink: 'syz.3.10023': attribute type 10 has an invalid length.
[  651.125946][T26712] team0: Port device wlan1 removed
[  651.170762][T26712] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  651.340441][ T3728] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  651.590346][ T3728] usb 3-1: Using ep0 maxpacket: 16
[  651.710421][ T3728] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  651.718803][ T3728] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  651.766431][ T3728] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  651.788501][ T3728] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  651.809643][ T3728] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  651.837757][ T3728] usb 3-1: config 0 has no interface number 0
[  651.854396][ T3728] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  651.889564][ T3728] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  651.918509][ T3728] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  651.943785][ T3728] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  651.984376][ T3728] usb 3-1: config 0 interface 125 has no altsetting 0
[  651.998498][ T3728] usb 3-1: config 0 interface 125 has no altsetting 2
[  652.050244][  T919] usb 5-1: new low-speed USB device number 34 using dummy_hcd
[  652.190740][ T3728] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  652.199808][ T3728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.208075][ T3728] usb 3-1: Product: syz
[  652.212344][ T3728] usb 3-1: Manufacturer: syz
[  652.216938][ T3728] usb 3-1: SerialNumber: syz
[  652.228564][ T3728] usb 3-1: config 0 descriptor??
[  652.277413][ T3728] usb 3-1: selecting invalid altsetting 2
[  652.480193][    C1] usb 3-1: async_complete: urb error -71
[  652.485957][    C1] usb 3-1: async_complete: urb error -71
[  652.490360][  T919] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping
[  652.491619][    C1] usb 3-1: async_complete: urb error -71
[  652.506279][  T919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  652.506494][    C1] usb 3-1: async_complete: urb error -71
[  652.516790][  T919] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  652.524371][ T3728] get_1284_register: usb error -71
[  652.536156][ T3728] uss720: probe of 3-1:0.125 failed with error -71
[  652.537317][  T919] usb 5-1: config 1 has no interface number 1
[  652.549594][ T3728] usb 3-1: USB disconnect, device number 43
[  652.554819][  T919] usb 5-1: too many endpoints for config 1 interface 2 altsetting 116: 104, using maximum allowed: 30
[  652.566760][  T919] usb 5-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 104
[  652.584770][  T919] usb 5-1: config 1 interface 2 has no altsetting 1
[  652.840342][  T919] usb 5-1: string descriptor 0 read error: -22
[  652.846586][  T919] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  652.855798][  T919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.903408][  T919] usb 5-1: MIDIStreaming interface descriptor not found
[  653.125881][  T919] usb 5-1: USB disconnect, device number 34
[  653.732586][T26777] xt_hashlimit: max too large, truncated to 1048576
[  654.427778][T26812] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  654.452548][T26812] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  654.654851][T26823] vivid-000: disconnect
[  654.675682][T26822] vivid-000: reconnect
[  655.166288][T26846] loop4: detected capacity change from 0 to 512
[  655.167502][T26848] loop3: detected capacity change from 0 to 512
[  655.225779][T26848] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  655.236032][T26848] UDF-fs: Scanning with blocksize 512 failed
[  655.249680][T26846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  655.279996][T26846] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  655.303326][T26848] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  655.330271][T26848] UDF-fs: Scanning with blocksize 1024 failed
[  655.356720][T26848] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  655.385035][T26848] UDF-fs: Scanning with blocksize 2048 failed
[  655.394761][T21061] EXT4-fs (loop4): unmounting filesystem.
[  655.415755][T26848] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  655.469152][T26848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  655.510577][ T3728] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  655.766557][ T3728] usb 2-1: Using ep0 maxpacket: 32
[  655.778709][T26840] loop2: detected capacity change from 0 to 32768
[  655.863820][T26860] loop3: detected capacity change from 0 to 4096
[  655.879896][T26840] jfs_rename: dtInsert returned -EIO
[  655.894258][T26860] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  655.903654][ T3728] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  655.924935][ T3728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.927419][T26838] loop0: detected capacity change from 0 to 32768
[  655.958634][ T3728] usb 2-1: config 0 descriptor??
[  656.004354][T26860] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  656.013360][ T3728] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  656.054571][T26865] misc userio: Invalid payload size
[  656.230335][ T3728] gspca_vc032x: reg_r err -71
[  656.235071][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.257934][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.263541][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.290304][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.295612][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.321976][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.327291][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.343045][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.353153][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.368613][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.389616][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.410821][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.416126][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.447354][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.467450][T26878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10103'.
[  656.495579][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.502906][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.508211][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.520249][T26878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10103'.
[  656.535712][ T3728] gspca_vc032x: I2c Bus Busy Wait 00
[  656.541476][ T3728] gspca_vc032x: Unknown sensor...
[  656.546548][ T3728] vc032x: probe of 2-1:0.0 failed with error -22
[  656.579396][ T3728] usb 2-1: USB disconnect, device number 41
[  657.080368][T26907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10115'.
[  657.267329][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  657.267346][   T26] audit: type=1326 audit(2000000529.369:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26914 comm="syz.1.10120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a037dff9 code=0x7ffc0000
[  657.357078][   T26] audit: type=1326 audit(2000000529.369:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26914 comm="syz.1.10120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fb5a037dff9 code=0x7ffc0000
[  657.488555][   T26] audit: type=1326 audit(2000000529.589:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26914 comm="syz.1.10120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a037dff9 code=0x7ffc0000
[  657.600534][   T26] audit: type=1326 audit(2000000529.589:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26914 comm="syz.1.10120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a037dff9 code=0x7ffc0000
[  657.690496][T26937] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  657.765948][T26937] infiniband syz1: set active
[  657.791630][T26937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  657.811445][T26937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  657.839535][T26937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  657.858381][T26945] loop4: detected capacity change from 0 to 1024
[  657.906152][T26937] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre1: link becomes ready
[  657.952140][ T5775] lo speed is unknown, defaulting to 1000
[  658.353038][T26963] loop0: detected capacity change from 0 to 256
[  658.372528][T26927] loop2: detected capacity change from 0 to 32768
[  658.411107][T26927] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.10127 (26927)
[  658.421455][T26963] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[  658.481765][T26927] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  658.520499][T26927] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  658.570737][T26927] BTRFS info (device loop2): using free space tree
[  658.895665][T26927] BTRFS info (device loop2): enabling ssd optimizations
[  658.994228][T27006] xt_bpf: check failed: parse error
[  659.071443][T21054] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  659.120369][ T3728] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  659.364768][ T3728] usb 2-1: Using ep0 maxpacket: 16
[  659.480409][ T3728] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  659.490097][ T3728] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  659.519239][   T26] audit: type=1326 audit(2000000531.619:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27021 comm="syz.0.10165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  659.530156][ T3728] usb 2-1: config 0 interface 0 has no altsetting 0
[  659.595810][   T26] audit: type=1326 audit(2000000531.619:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27021 comm="syz.0.10165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  659.639945][   T26] audit: type=1326 audit(2000000531.669:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27021 comm="syz.0.10165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  659.707290][   T26] audit: type=1326 audit(2000000531.779:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27021 comm="syz.0.10165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  659.780490][ T3728] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  659.789582][ T3728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.809219][   T26] audit: type=1326 audit(2000000531.779:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27021 comm="syz.0.10165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  659.810597][T27033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10169'.
[  659.842334][ T3728] usb 2-1: Product: syz
[  659.846521][ T3728] usb 2-1: Manufacturer: syz
[  659.851982][T27035] loop2: detected capacity change from 0 to 256
[  659.869423][ T3728] usb 2-1: SerialNumber: syz
[  659.899479][ T3728] usb 2-1: config 0 descriptor??
[  659.928219][T27033] netlink: 'syz.3.10169': attribute type 1 has an invalid length.
[  660.296209][T27054] loop2: detected capacity change from 0 to 1024
[  660.461319][ T3683] usb 2-1: USB disconnect, device number 42
[  660.645114][T27071] dlm: no locking on control device
[  660.807506][T27081] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  660.844012][T27081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  661.135779][T27098] netlink: 'syz.1.10201': attribute type 21 has an invalid length.
[  661.160231][T27098] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10201'.
[  661.179701][T27098] netlink: 'syz.1.10201': attribute type 5 has an invalid length.
[  661.221319][T27098] netlink: 'syz.1.10201': attribute type 6 has an invalid length.
[  661.249564][T27098] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10201'.
[  661.448648][T27115] netlink: 'syz.0.10207': attribute type 7 has an invalid length.
[  661.460354][T27111] libceph: resolve '0..' (ret=-3): failed
[  661.487921][T27115] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10207'.
[  661.923797][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10221'.
[  662.134254][T27151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10225'.
[  662.145560][T27154] loop3: detected capacity change from 0 to 64
[  662.149663][T27152] loop1: detected capacity change from 0 to 256
[  662.390899][T27164] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10232'.
[  662.391428][T27165] netlink: 'syz.1.10233': attribute type 1 has an invalid length.
[  662.702136][ T3728] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  662.741382][T27181] loop1: detected capacity change from 0 to 164
[  663.090591][ T3728] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  663.119826][ T3728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.160769][ T3728] usb 1-1: config 0 descriptor??
[  663.201289][ T3728] ums-realtek 1-1:0.0: USB Mass Storage device detected
[  663.299431][T27161] loop4: detected capacity change from 0 to 32768
[  663.361258][T27161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.10231 (27161)
[  663.421199][ T3080] usb 1-1: USB disconnect, device number 48
[  663.462349][T27161] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  663.502488][T27161] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  663.542316][T27161] BTRFS info (device loop4): using free space tree
[  663.587024][T27220] binder: 27219:27220 ioctl c018620b 0 returned -14
[  663.730585][T27238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10261'.
[  663.812237][T27161] BTRFS info (device loop4): enabling ssd optimizations
[  663.953831][T21061] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  664.092905][T27253] netlink: zone id is out of range
[  664.098047][T27253] netlink: zone id is out of range
[  664.134969][T27253] netlink: zone id is out of range
[  664.150617][T27255] loop2: detected capacity change from 0 to 256
[  664.157576][T27253] netlink: zone id is out of range
[  664.181161][T27253] netlink: zone id is out of range
[  664.186363][T27253] netlink: zone id is out of range
[  664.248213][T27253] netlink: zone id is out of range
[  664.268430][T27253] netlink: zone id is out of range
[  664.308284][T27253] netlink: zone id is out of range
[  664.551536][T27263] x_tables: duplicate entry at hook 3
[  664.602155][T27267] netlink: 'syz.4.10273': attribute type 8 has an invalid length.
[  664.953878][T27281] x_tables: duplicate underflow at hook 3
[  664.959962][T27273] loop0: detected capacity change from 0 to 4096
[  665.129896][T27273] ntfs3: loop0: try to read out of volume at offset 0x3fffffc7000
[  665.275488][T27246] loop3: detected capacity change from 0 to 32768
[  665.281224][T27291] loop2: detected capacity change from 0 to 256
[  665.357838][T27246] jfs_rename: dtInsert returned -EIO
[  665.626382][T27308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10295'.
[  665.627305][T27306] netlink: 'syz.2.10292': attribute type 30 has an invalid length.
[  665.877865][T27318] loop0: detected capacity change from 0 to 512
[  665.968970][T27318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.10298: inode #1: comm syz.0.10298: iget: illegal inode #
[  666.046370][T27318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.10298: error while reading EA inode 1 err=-117
[  666.062840][T27332] loop4: detected capacity change from 0 to 256
[  666.069656][T27332] exfat: Deprecated parameter 'utf8'
[  666.075386][T27318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.10298: inode #1: comm syz.0.10298: iget: illegal inode #
[  666.088796][T27332] exfat: Deprecated parameter 'utf8'
[  666.101245][T27318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.10298: error while reading EA inode 1 err=-117
[  666.124626][T27332] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  666.171460][T27318] EXT4-fs (loop0): 1 orphan inode deleted
[  666.177222][T27318] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  666.327500][ T3638] EXT4-fs (loop0): unmounting filesystem.
[  666.692278][T27364] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004
[  666.730209][ T5447] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  666.773300][T27358] loop1: detected capacity change from 0 to 4096
[  666.801717][T27358] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  666.827840][T27368] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  666.856763][T27368] I/O error, dev loop2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  666.910937][T27368] Mount JFS Failure: -5
[  666.915120][T27368] jfs_mount failed w/return code = -5
[  666.980030][T27372] loop4: detected capacity change from 0 to 512
[  666.986483][ T5447] usb 1-1: Using ep0 maxpacket: 8
[  667.029273][T27372] EXT4-fs (loop4): 1 truncate cleaned up
[  667.040521][T27372] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  667.095786][T21061] EXT4-fs (loop4): unmounting filesystem.
[  667.120577][ T5447] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  667.133457][ T5447] usb 1-1: config 1 has no interface number 1
[  667.150927][ T5447] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  667.306297][   T26] audit: type=1326 audit(2000000539.409:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27386 comm="syz.3.10331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275337dff9 code=0x7ffc0000
[  667.350587][ T5447] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  667.374857][ T5447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.379309][   T26] audit: type=1326 audit(2000000539.449:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27386 comm="syz.3.10331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f275337dff9 code=0x7ffc0000
[  667.407856][ T5447] usb 1-1: Product: syz
[  667.447546][ T5447] usb 1-1: Manufacturer: syz
[  667.454765][T27393] netlink: 'syz.3.10335': attribute type 8 has an invalid length.
[  667.469003][   T26] audit: type=1326 audit(2000000539.449:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27386 comm="syz.3.10331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275337dff9 code=0x7ffc0000
[  667.473806][ T5447] usb 1-1: SerialNumber: syz
[  667.497064][T27395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10334'.
[  667.511697][T27395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10334'.
[  667.530771][   T26] audit: type=1326 audit(2000000539.449:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27386 comm="syz.3.10331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275337dff9 code=0x7ffc0000
[  667.644782][T27399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10337'.
[  667.668416][T27391] loop1: detected capacity change from 0 to 4096
[  667.870546][ T5447] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  667.878412][ T5447] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  668.050850][ T5447] usb 1-1: USB disconnect, device number 49
[  668.145828][ T3629] udevd[3629]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  668.388876][T27397] loop4: detected capacity change from 0 to 32768
[  668.413050][T27417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10346'.
[  668.432807][T27397] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.10336 (27397)
[  668.460428][T27417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10346'.
[  668.490073][T27397] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  668.504185][T27415] loop1: detected capacity change from 0 to 4096
[  668.512672][T27417] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10346'.
[  668.530429][T27397] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  668.539089][T27397] BTRFS info (device loop4): using free space tree
[  668.571114][T27415] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  668.643397][T27401] loop2: detected capacity change from 0 to 32768
[  668.661808][T27401] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.10338 (27401)
[  668.740375][ T5936] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (5936)
[  668.887144][T27397] BTRFS info (device loop4): enabling ssd optimizations
[  669.077693][T21061] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  669.090203][ T5447] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  669.237109][T27459] loop1: detected capacity change from 0 to 736
[  669.332303][ T5447] usb 4-1: Using ep0 maxpacket: 16
[  669.451517][ T5447] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  669.461902][ T5447] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  669.563776][ T3728] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  669.640349][ T5447] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  669.649401][ T5447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.687779][ T5447] usb 4-1: Product: syz
[  669.693432][ T5447] usb 4-1: Manufacturer: syz
[  669.703653][ T5447] usb 4-1: SerialNumber: syz
[  669.830403][ T3728] usb 3-1: Using ep0 maxpacket: 32
[  670.011584][ T3728] usb 3-1: unable to get BOS descriptor or descriptor too short
[  670.040521][ T5447] usb 4-1: 0:2 : does not exist
[  670.091542][ T5447] usb 4-1: USB disconnect, device number 50
[  670.120482][ T3728] usb 3-1: config 128 has an invalid interface number: 127 but max is 3
[  670.144454][ T3728] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  670.191559][ T3728] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4
[  670.225945][ T3728] usb 3-1: config 128 has no interface number 0
[  670.253959][ T3728] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  670.286615][ T3728] usb 3-1: config 128 interface 127 has no altsetting 0
[  670.383188][T27502] loop1: detected capacity change from 0 to 4096
[  670.416486][T27502] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  670.468372][T27510] overlayfs: missing 'lowerdir'
[  670.502358][ T3728] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  670.525081][ T3728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.560391][ T3728] usb 3-1: Product: syz
[  670.577767][ T3728] usb 3-1: Manufacturer: syz
[  670.590159][ T3728] usb 3-1: SerialNumber: syz
[  670.630433][T27463] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  670.945445][T27530] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10391'.
[  671.046454][ T3728] usb 3-1: USB disconnect, device number 44
[  671.072423][ T3629] udevd[3629]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  671.297501][   T26] audit: type=1326 audit(2000000543.394:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27546 comm="syz.0.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  671.403232][   T26] audit: type=1326 audit(2000000543.434:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27546 comm="syz.0.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  671.502173][   T26] audit: type=1326 audit(2000000543.434:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27546 comm="syz.0.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  671.590242][   T26] audit: type=1326 audit(2000000543.434:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27546 comm="syz.0.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  671.958575][T27571] loop4: detected capacity change from 0 to 512
[  671.980192][T11918] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  672.106977][T27571] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.10411: iget: bad extended attribute block 128
[  672.131527][T27571] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.10411: couldn't read orphan inode 16 (err -117)
[  672.156589][T27571] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  672.186242][T27571] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  672.213946][T27553] loop0: detected capacity change from 0 to 32768
[  672.232443][T27580] loop3: detected capacity change from 0 to 4096
[  672.250284][T11918] usb 3-1: Using ep0 maxpacket: 8
[  672.269376][T27571] Quota error (device loop4): do_check_range: Getting dqdh_entries 964 out of range 0-14
[  672.277654][T27580] ntfs: volume version 3.1.
[  672.293154][T27553] XFS (loop0): Mounting V5 Filesystem
[  672.311212][T27571] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  672.311992][T27580] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  672.321680][T27571] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.10411: Failed to acquire dquot type 1
[  672.357879][T27580] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  672.379298][T27580] ntfs: (device loop3): __ntfs_bitmap_set_bits_in_run(): Failed to map first page (error -5), aborting.
[  672.392323][T27580] ntfs: (device loop3): __ntfs_cluster_free(): Failed to clear first run (error -5), aborting.
[  672.403398][T27580] ntfs: (device loop3): ntfs_truncate(): Failed to release cluster(s) (error code -5).  Unmount and run chkdsk to recover the lost cluster(s).
[  672.435723][T11918] usb 3-1: unable to get BOS descriptor or descriptor too short
[  672.451595][T21061] EXT4-fs (loop4): unmounting filesystem.
[  672.473528][T27553] XFS (loop0): Ending clean mount
[  672.492866][T27553] XFS (loop0): Quotacheck needed: Please wait.
[  672.520621][T11918] usb 3-1: config 15 has an invalid interface number: 102 but max is 1
[  672.528898][T11918] usb 3-1: config 15 has an invalid interface number: 102 but max is 1
[  672.575786][ T3637] ntfs: (device loop3): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  672.588094][T11918] usb 3-1: config 15 contains an unexpected descriptor of type 0x1, skipping
[  672.612292][T27553] XFS (loop0): Quotacheck: Done.
[  672.617915][T11918] usb 3-1: config 15 has 1 interface, different from the descriptor's value: 2
[  672.673096][T11918] usb 3-1: config 15 has no interface number 0
[  672.701531][T11918] usb 3-1: config 15 interface 102 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[  672.703993][ T3638] XFS (loop0): Unmounting Filesystem
[  672.748904][T27598] loop1: detected capacity change from 0 to 256
[  672.767347][T11918] usb 3-1: config 15 interface 102 has no altsetting 0
[  672.805099][T27598] FAT-fs (loop1): Directory bread(block 64) failed
[  672.811837][T27598] FAT-fs (loop1): Directory bread(block 65) failed
[  672.818929][T27598] FAT-fs (loop1): Directory bread(block 66) failed
[  672.828291][T27592] loop4: detected capacity change from 0 to 4096
[  672.829998][T27598] FAT-fs (loop1): Directory bread(block 67) failed
[  672.847734][T27598] FAT-fs (loop1): Directory bread(block 68) failed
[  672.858193][T27592] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  672.878362][T27598] FAT-fs (loop1): Directory bread(block 69) failed
[  672.896297][T27598] FAT-fs (loop1): Directory bread(block 70) failed
[  672.930565][T27598] FAT-fs (loop1): Directory bread(block 71) failed
[  672.937284][T27598] FAT-fs (loop1): Directory bread(block 72) failed
[  672.963117][T27598] FAT-fs (loop1): Directory bread(block 73) failed
[  672.970407][T11918] usb 3-1: New USB device found, idVendor=1ae7, idProduct=0381, bcdDevice=d5.6c
[  672.982880][T11918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.991388][T11918] usb 3-1: Product: syz
[  672.995573][T11918] usb 3-1: Manufacturer: syz
[  673.008927][T11918] usb 3-1: SerialNumber: syz
[  673.070409][ T3728] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  673.210414][T27604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10422'.
[  673.334120][T11918] usb 3-1: USB disconnect, device number 45
[  673.523627][T27618] loop1: detected capacity change from 0 to 512
[  673.609747][T27622] netlink: 'syz.4.10430': attribute type 1 has an invalid length.
[  673.619987][T27618] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  673.628997][T27618] ext4 filesystem being mounted at /2054/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  673.640545][ T3728] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  673.645827][T27622] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10430'.
[  673.649579][ T3728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.686307][T27618] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  673.749406][T27626] wlan0 speed is unknown, defaulting to 1000
[  673.752571][T27618] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  673.765704][T27626] wlan0 speed is unknown, defaulting to 1000
[  673.772071][ T3728] usb 4-1: Product: syz
[  673.776440][T27618] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.10429: Failed to acquire dquot type 0
[  673.779244][T27626] wlan0 speed is unknown, defaulting to 1000
[  673.795667][ T3728] usb 4-1: Manufacturer: syz
[  673.805750][ T3728] usb 4-1: SerialNumber: syz
[  673.813336][T27626] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  673.840564][ T3728] r8152-cfgselector 4-1: config 0 descriptor??
[  673.888101][T27626] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  673.889837][ T4229] EXT4-fs (loop1): unmounting filesystem.
[  673.972047][T27626] wlan0 speed is unknown, defaulting to 1000
[  673.978748][T27611] loop0: detected capacity change from 0 to 32768
[  674.016352][T27611] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.10426 (27611)
[  674.033139][T27626] wlan0 speed is unknown, defaulting to 1000
[  674.041331][T27626] wlan0 speed is unknown, defaulting to 1000
[  674.048712][T27626] wlan0 speed is unknown, defaulting to 1000
[  674.056721][T27626] wlan0 speed is unknown, defaulting to 1000
[  674.078080][T27611] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  674.107444][T27611] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  674.127526][T27611] BTRFS info (device loop0): force clearing of disk cache
[  674.147741][T27611] BTRFS info (device loop0): setting nodatasum
[  674.167982][T27611] BTRFS info (device loop0): allowing degraded mounts
[  674.204865][T27611] BTRFS info (device loop0): enabling disk space caching
[  674.228013][T27611] BTRFS info (device loop0): disk space caching is enabled
[  674.270308][ T3080] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  674.330377][ T3728] r8152-cfgselector 4-1: Unknown version 0x0000
[  674.330843][T27647] loop4: detected capacity change from 0 to 128
[  674.345250][ T3728] r8152-cfgselector 4-1: USB disconnect, device number 51
[  674.362294][T27647] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  674.536915][T27611] BTRFS info (device loop0): rebuilding free space tree
[  674.581809][T27664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10442'.
[  674.598913][T27611] BTRFS info (device loop0): disabling free space tree
[  674.601036][T27664] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  674.615409][T27664] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  674.620035][T27611] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  674.624645][T27664] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  674.647039][T27664] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  674.656292][ T3080] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  674.660246][T27611] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  674.669361][ T3080] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  674.710483][ T3080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.796576][ T3080] gspca_main: stv0680-2.14.0 probing 041e:4007
[  674.889436][ T3638] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  675.228542][T27683] loop4: detected capacity change from 0 to 16
[  675.284825][T27683] erofs: (device loop4): mounted with root inode @ nid 36.
[  675.422701][T27681] loop2: detected capacity change from 0 to 4096
[  675.526320][T27690] netlink: 'syz.0.10455': attribute type 10 has an invalid length.
[  675.540456][T27690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10455'.
[  675.567278][T27690] batman_adv: batadv0: Adding interface: virt_wifi0
[  675.599369][T27690] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  675.655061][T27690] batman_adv: batadv0: Interface activated: virt_wifi0
[  675.910298][ T3080] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  676.120473][ T3080] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  676.128674][ T3080] stv0680 2-1:4.0: last error: 0,  command = 0x0
[  676.138945][T27720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10469'.
[  676.163201][ T3080] usb 2-1: USB disconnect, device number 43
[  676.345382][T27732] overlayfs: conflicting options: nfs_export=on,index=off
[  676.454185][T27736] netlink: 'syz.0.10477': attribute type 13 has an invalid length.
[  676.880253][T27755] loop1: detected capacity change from 0 to 1024
[  676.910980][T27755] EXT4-fs: Ignoring removed orlov option
[  676.934119][T27755] EXT4-fs (loop1): filesystem is read-only
[  676.965470][T27755] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 38698
[  677.011720][T27763] netlink: 'syz.0.10491': attribute type 26 has an invalid length.
[  677.140299][ T5449] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  677.250924][T27769] loop2: detected capacity change from 0 to 1024
[  677.354666][T27769] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  677.496298][T27747] loop3: detected capacity change from 0 to 40427
[  677.510412][ T5449] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  677.523196][T21054] EXT4-fs (loop2): unmounting filesystem.
[  677.530213][ T5449] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  677.550489][T27747] F2FS-fs (loop3): Invalid segment/section count (31 != 24 * 1)
[  677.557511][ T5449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.562692][T27747] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  677.607470][ T5449] usb 5-1: config 0 descriptor??
[  677.671268][T27747] F2FS-fs (loop3): invalid crc value
[  677.703873][T27747] F2FS-fs (loop3): Found nat_bits in checkpoint
[  677.814141][T27747] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  677.845986][T27747] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  677.899046][T27747] syz.3.10483: attempt to access beyond end of device
[  677.899046][T27747] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  678.094332][ T3637] syz-executor: attempt to access beyond end of device
[  678.094332][ T3637] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  678.119834][ T5447] usb 5-1: USB disconnect, device number 35
[  678.809482][T27831] loop1: detected capacity change from 0 to 256
[  679.004705][T27839] loop4: detected capacity change from 0 to 2048
[  679.100261][T11918] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  679.137655][T27825] loop0: detected capacity change from 0 to 32768
[  679.171585][T27825] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.10521 (27825)
[  679.190571][  T126] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  679.246138][T27848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10532'.
[  679.260883][T27825] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  679.287704][T27825] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  679.297827][T27825] BTRFS info (device loop0): using free space tree
[  679.460406][T11918] usb 4-1: config 0 has an invalid interface number: 100 but max is 0
[  679.470605][T11918] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  679.479679][T11918] usb 4-1: config 0 has no interface number 1
[  679.486625][T11918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  679.497302][T11918] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  679.499051][T27825] BTRFS info (device loop0): enabling ssd optimizations
[  679.512449][T11918] usb 4-1: too many endpoints for config 0 interface 100 altsetting 7: 237, using maximum allowed: 30
[  679.526620][T11918] usb 4-1: config 0 interface 100 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 237
[  679.540051][T11918] usb 4-1: config 0 interface 100 has no altsetting 0
[  679.546482][T27873] netlink: 'syz.1.10535': attribute type 11 has an invalid length.
[  679.546990][ T5447] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  679.615009][ T3638] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  679.626202][  T126] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  679.650008][  T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  679.690309][  T126] usb 3-1: config 0 has no interface number 0
[  679.700758][  T126] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  679.720490][T11918] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba
[  679.730217][  T126] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  679.744620][T11918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.776432][T11918] usb 4-1: Product: syz
[  679.783355][T11918] usb 4-1: Manufacturer: syz
[  679.788850][T11918] usb 4-1: SerialNumber: syz
[  679.809374][T11918] usb 4-1: config 0 descriptor??
[  679.934100][ T5447] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  679.940576][  T126] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  679.948407][ T5447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.962406][ T5447] usb 5-1: config 0 descriptor??
[  679.972731][  T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.002093][ T5447] gspca_main: spca508-2.14.0 probing 8086:0110
[  680.011731][  T126] usb 3-1: Product: syz
[  680.027612][  T126] usb 3-1: Manufacturer: syz
[  680.042676][  T126] usb 3-1: SerialNumber: syz
[  680.066072][  T126] usb 3-1: config 0 descriptor??
[  680.097283][T11918] kaweth 4-1:0.0: Firmware present in device.
[  680.145769][T27884] loop1: detected capacity change from 0 to 2048
[  680.203555][T27885] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  680.238919][T27884] NILFS (loop1): error -2 truncating bmap (ino=16)
[  680.280393][T11918] kaweth 4-1:0.0: Error reading configuration (-71), no net device created
[  680.298368][T11918] kaweth: probe of 4-1:0.0 failed with error -5
[  680.382991][T11918] kaweth 4-1:0.100: Firmware present in device.
[  680.420288][T11918] kaweth 4-1:0.100: Error reading configuration (-71), no net device created
[  680.437153][T11918] kaweth: probe of 4-1:0.100 failed with error -5
[  680.444096][ T5447] gspca_spca508: reg_read err -71
[  680.460315][ T5447] gspca_spca508: reg_read err -71
[  680.479391][T11918] usb 4-1: USB disconnect, device number 52
[  680.485598][ T5447] gspca_spca508: reg_read err -71
[  680.516513][ T5447] gspca_spca508: reg_read err -71
[  680.540438][ T5447] gspca_spca508: reg write: error -71
[  680.546602][ T5447] spca508: probe of 5-1:0.0 failed with error -71
[  680.559545][ T5447] usb 5-1: USB disconnect, device number 36
[  680.596853][T27901] loop1: detected capacity change from 0 to 512
[  680.604007][  T126] usbtouchscreen: probe of 3-1:0.117 failed with error -71
[  680.613985][T27901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  680.631918][  T126] usb 3-1: USB disconnect, device number 46
[  680.656001][T27901] EXT4-fs (loop1): orphan cleanup on readonly fs
[  680.667375][T27901] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10548: bg 0: block 248: padding at end of block bitmap is not set
[  680.700366][T27901] Quota error (device loop1): write_blk: dquota write failed
[  680.707944][T27901] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  680.718574][T27901] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.10548: Failed to acquire dquot type 1
[  680.733516][T27901] EXT4-fs (loop1): 1 truncate cleaned up
[  680.741332][T27901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  680.770543][T27901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  680.779083][T27901] EXT4-fs error (device loop1): __ext4_remount:6449: comm syz.1.10548: Abort forced by user
[  680.811020][ T4229] EXT4-fs (loop1): unmounting filesystem.
[  680.866529][T27904] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614)
[  680.880622][T27904] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  680.903574][T27906] netlink: 'syz.3.10550': attribute type 1 has an invalid length.
[  680.977908][T27908] loop3: detected capacity change from 0 to 512
[  680.989723][T27908] EXT4-fs: Ignoring removed nomblk_io_submit option
[  681.057289][T27908] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  681.091662][T27908] ext4 filesystem being mounted at /2168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  681.237163][T27923] netlink: 'syz.2.10557': attribute type 2 has an invalid length.
[  681.261032][T27923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10557'.
[  681.303902][ T3637] EXT4-fs (loop3): unmounting filesystem.
[  681.526587][T27936] netlink: 'syz.1.10562': attribute type 10 has an invalid length.
[  681.554941][T27936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10562'.
[  681.565063][T27938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10563'.
[  681.579837][ T5452] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  681.596856][T27936] batman_adv: batadv0: Adding interface: ÿÿÿ
[  681.604315][T27936] batman_adv: batadv0: The MTU of interface ÿÿÿ is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.639354][T27936] batman_adv: batadv0: Interface activated: ÿÿÿ
[  681.803471][T27950] netlink: 'syz.1.10570': attribute type 2 has an invalid length.
[  681.950411][ T5452] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  681.958532][ T5452] usb 5-1: config 0 has no interface number 0
[  681.962081][T27960] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10575'.
[  681.985754][T27958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10574'.
[  681.993178][ T5452] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  682.016695][T27962] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10576'.
[  682.029463][ T5452] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  682.057341][T27962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10576'.
[  682.076515][T27962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10576'.
[  682.241431][ T5452] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  682.269242][ T5452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.310201][ T5452] usb 5-1: Product: syz
[  682.314391][ T5452] usb 5-1: Manufacturer: syz
[  682.339288][ T5452] usb 5-1: SerialNumber: syz
[  682.374974][ T5452] usb 5-1: config 0 descriptor??
[  682.420516][T27927] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  682.441349][ T5452] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  682.462802][ T5452] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  682.700652][    C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  682.790424][ T5447] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  682.889422][T11918] usb 5-1: USB disconnect, device number 37
[  682.902741][T11918] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  682.936704][T11918] cyberjack 5-1:0.69: device disconnected
[  683.035671][T28009] loop3: detected capacity change from 0 to 2048
[  683.066577][T28009] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  683.161483][ T5447] usb 3-1: config 4 has an invalid interface number: 231 but max is 0
[  683.181000][ T5447] usb 3-1: config 4 has no interface number 0
[  683.189666][T28018] loop1: detected capacity change from 0 to 1024
[  683.277743][T28018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  683.340675][ T5447] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  683.342523][ T4229] EXT4-fs (loop1): unmounting filesystem.
[  683.349721][ T5447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.349745][ T5447] usb 3-1: Product: syz
[  683.368472][ T5447] usb 3-1: Manufacturer: syz
[  683.373602][ T5447] usb 3-1: SerialNumber: syz
[  683.417852][ T5447] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  683.507913][T28033] netlink: 'syz.0.10610': attribute type 8 has an invalid length.
[  683.530341][ T5452] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  683.762681][T28043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10615'.
[  683.790529][T28043] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  683.827895][T28043] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  683.850810][ T5447] vp7045: USB control message 'in' went wrong.
[  683.856988][ T5447] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  683.913356][ T5447] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  683.946762][ T5447] usb 3-1: USB disconnect, device number 47
[  684.060488][ T5452] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  684.081899][T28031] loop1: detected capacity change from 0 to 32768
[  684.086394][ T5452] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.108745][T28031] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.10608 (28031)
[  684.116946][ T5452] usb 4-1: Product: syz
[  684.146230][ T5452] usb 4-1: Manufacturer: syz
[  684.154429][T28031] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  684.163364][ T5452] usb 4-1: SerialNumber: syz
[  684.184660][ T5452] usb 4-1: config 0 descriptor??
[  684.210492][T28031] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  684.241116][T28031] BTRFS info (device loop1): turning off barriers
[  684.247610][T28031] BTRFS info (device loop1): enabling all of the rescue options
[  684.266101][T28031] BTRFS info (device loop1): ignoring data csums
[  684.295330][T28031] BTRFS info (device loop1): ignoring bad roots
[  684.313537][T28031] BTRFS info (device loop1): disabling log replay at mount time
[  684.330329][T28031] BTRFS info (device loop1): disabling tree log
[  684.336595][T28031] BTRFS info (device loop1): turning on flush-on-commit
[  684.370189][T28031] BTRFS info (device loop1): using free space tree
[  684.470677][ T5452] usb-storage 4-1:0.0: USB Mass Storage device detected
[  684.635680][T28031] BTRFS info (device loop1: state C): enabling ssd optimizations
[  684.726116][ T3080] usb 4-1: USB disconnect, device number 53
[  684.802822][ T4229] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  685.284171][T28116] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  685.490427][ T5447] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  685.538754][T28126] __nla_validate_parse: 1 callbacks suppressed
[  685.538771][T28126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10646'.
[  685.554868][ T1234] ieee802154 phy0 wpan0: encryption failed: -22
[  685.561208][ T1234] ieee802154 phy1 wpan1: encryption failed: -22
[  685.643544][T28130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10648'.
[  685.770435][T28132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10649'.
[  685.885482][ T5447] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e
[  685.914985][ T5447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.975968][ T5447] pwc: Logitech ViewPort AV 100 webcam detected.
[  686.149560][T28142] loop0: detected capacity change from 0 to 2048
[  686.203415][T28142] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  686.229848][T28142] syz.0.10654: attempt to access beyond end of device
[  686.229848][T28142] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  686.252886][T28147] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  686.400282][ T5447] pwc: send_video_command error -71
[  686.405527][ T5447] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  686.413240][ T5452] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  686.443654][ T5447] Philips webcam: probe of 5-1:127.0 failed with error -71
[  686.477491][ T5447] usb 5-1: USB disconnect, device number 38
[  686.566696][T28151] loop0: detected capacity change from 0 to 2048
[  686.625423][T28156] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  686.656306][T28151] NILFS (loop0): error -2 truncating bmap (ino=16)
[  686.670359][ T5452] usb 3-1: Using ep0 maxpacket: 8
[  686.930062][T28169] loop3: detected capacity change from 0 to 1024
[  686.950655][ T5452] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[  686.959909][ T5452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.982021][ T5452] usb 3-1: Product: syz
[  686.984205][T28169] EXT4-fs (loop3): orphan cleanup on readonly fs
[  687.008770][ T5452] usb 3-1: Manufacturer: syz
[  687.020865][ T5452] usb 3-1: SerialNumber: syz
[  687.036262][T28169] EXT4-fs (loop3): 1 truncate cleaned up
[  687.036844][ T5452] usb 3-1: config 0 descriptor??
[  687.092022][ T5452] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  687.105196][T28169] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  687.144602][T26000] Bluetooth: hci4: link tx timeout
[  687.150519][T26000] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  687.306420][ T3637] EXT4-fs (loop3): unmounting filesystem.
[  687.415063][T28192] xt_TCPMSS: Only works on TCP SYN packets
[  687.610265][  T126] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  687.680250][ T5452] gspca_m5602: Failed to find a sensor
[  687.685752][ T5452] ALi m5602 3-1:0.0: ALi m5602 webcam failed
[  687.694353][T28209] loop3: detected capacity change from 0 to 8
[  687.695638][T28207] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  687.714040][ T5452] usb 3-1: USB disconnect, device number 48
[  687.916402][T28215] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10688'.
[  687.945909][T28219] loop1: detected capacity change from 0 to 64
[  688.130330][  T126] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  688.139413][  T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.175502][T28227] loop4: detected capacity change from 0 to 256
[  688.191290][  T126] usb 1-1: Product: syz
[  688.195477][  T126] usb 1-1: Manufacturer: syz
[  688.225799][  T126] usb 1-1: SerialNumber: syz
[  688.235082][T28227] FAT-fs (loop4): Directory bread(block 64) failed
[  688.266242][T28227] FAT-fs (loop4): Directory bread(block 65) failed
[  688.274048][T28227] FAT-fs (loop4): Directory bread(block 66) failed
[  688.291138][  T126] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  688.302531][T28227] FAT-fs (loop4): Directory bread(block 67) failed
[  688.340766][T28227] FAT-fs (loop4): Directory bread(block 68) failed
[  688.347327][T28227] FAT-fs (loop4): Directory bread(block 69) failed
[  688.367903][T28233] loop1: detected capacity change from 0 to 1764
[  688.377672][T28227] FAT-fs (loop4): Directory bread(block 70) failed
[  688.385731][T28227] FAT-fs (loop4): Directory bread(block 71) failed
[  688.396053][T28227] FAT-fs (loop4): Directory bread(block 72) failed
[  688.415012][T28227] FAT-fs (loop4): Directory bread(block 73) failed
[  688.443616][T28237] loop2: detected capacity change from 0 to 512
[  688.477747][T28237] EXT4-fs (loop2): Test dummy encryption mode enabled
[  688.535977][T28237] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 1: comm syz.2.10700: invalid block
[  688.563774][T28242] netlink: 'syz.1.10702': attribute type 2 has an invalid length.
[  688.609173][T28237] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.10700: couldn't read orphan inode 11 (err -117)
[  688.709923][T28237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  688.831266][T21054] EXT4-fs (loop2): unmounting filesystem.
[  688.904486][T10506] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  689.189361][T28271] loop1: detected capacity change from 0 to 2048
[  689.204838][T28271] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  689.216040][T28271] UDF-fs: Scanning with blocksize 512 failed
[  689.240470][T26000] Bluetooth: hci4: command 0x0406 tx timeout
[  689.246959][ T5770] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  689.273654][T28271] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e
[  689.302313][T28271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  689.324570][ T3681] usb 1-1: USB disconnect, device number 50
[  689.479038][T28280] loop4: detected capacity change from 0 to 4096
[  689.490071][T28280] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  689.522809][T28284] netlink: 'syz.1.10722': attribute type 21 has an invalid length.
[  689.531197][ T5770] usb 3-1: Using ep0 maxpacket: 32
[  689.537019][T28284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10722'.
[  689.568041][T28280] ntfs3: loop4: failed to convert "c46c" to macceltic
[  689.670375][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  689.677652][   T26] audit: type=1326 audit(2000000013.679:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28287 comm="syz.4.10724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d457dff9 code=0x7ffc0000
[  689.693236][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  689.736593][   T26] audit: type=1326 audit(2000000013.719:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28287 comm="syz.4.10724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fe5d457dff9 code=0x7ffc0000
[  689.755701][ T5770] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  689.781574][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.785058][   T26] audit: type=1326 audit(2000000013.719:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28287 comm="syz.4.10724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d457dff9 code=0x7ffc0000
[  689.802003][T28286] loop1: detected capacity change from 0 to 8192
[  689.820219][ T5770] usb 3-1: config 0 descriptor??
[  689.852440][T28261] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  689.871457][ T5770] hub 3-1:0.0: USB hub found
[  689.876186][   T26] audit: type=1400 audit(2000000013.789:3097): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=28289 comm="syz.4.10725"
[  689.894537][T28286] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  689.945364][T28286] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  689.954833][T10506] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  689.967440][T10506] ath9k_htc: Failed to initialize the device
[  689.970519][T28286] REISERFS (device loop1): using ordered data mode
[  689.973985][ T3681] usb 1-1: ath9k_htc: USB layer deinitialized
[  689.980807][T28286] reiserfs: using flush barriers
[  689.997745][T28286] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  690.014927][T28286] REISERFS (device loop1): checking transaction log (loop1)
[  690.027770][T28286] REISERFS (device loop1): Using tea hash to sort names
[  690.035901][T28286] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  690.100481][ T5770] hub 3-1:0.0: 2 ports detected
[  690.259562][T28301] loop0: detected capacity change from 0 to 2048
[  690.320601][ T5770] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  690.327813][ T5770] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  690.337954][T28301] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.10731: bad orphan inode 8192
[  690.373197][T28301] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  690.460352][ T5770] usbhid 3-1:0.0: can't add hid device: -71
[  690.466360][ T5770] usbhid: probe of 3-1:0.0 failed with error -71
[  690.501553][ T5770] usb 3-1: USB disconnect, device number 49
[  690.560320][ T5447] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  690.620281][ T5452] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  690.810218][ T5447] usb 4-1: Using ep0 maxpacket: 32
[  690.909324][T28311] loop2: detected capacity change from 0 to 4096
[  690.919641][T28311] ntfs: (device loop2): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk.
[  690.934803][ T5447] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  690.944877][T28311] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  690.956293][T28311] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  690.969405][T28311] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  690.981528][T28311] ntfs: volume version 3.1.
[  690.989871][T28311] ntfs: (device loop2): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  691.001466][ T5452] usb 2-1: config 0 interface 0 has no altsetting 0
[  691.009208][ T5452] usb 2-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8
[  691.019174][ T5452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.028949][ T5452] usb 2-1: config 0 descriptor??
[  691.072719][ T5452] snd_usb_toneport 2-1:0.0: Line 6 POD Studio UX1 found
[  691.099114][ T3638] EXT4-fs (loop0): unmounting filesystem.
[  691.120477][ T5447] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  691.150525][ T5447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.158545][ T5447] usb 4-1: Product: syz
[  691.166976][T28313] netlink: 'syz.2.10736': attribute type 6 has an invalid length.
[  691.175220][T28313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10736'.
[  691.214578][ T5447] usb 4-1: Manufacturer: syz
[  691.219200][ T5447] usb 4-1: SerialNumber: syz
[  691.261928][ T5447] usb 4-1: config 0 descriptor??
[  691.280489][T28303] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  691.288689][ T5452] snd_usb_toneport 2-1:0.0: cannot get proper max packet size
[  691.309361][ T5452] snd_usb_toneport 2-1:0.0: Line 6 POD Studio UX1 now disconnected
[  691.311443][ T5452] snd_usb_toneport: probe of 2-1:0.0 failed with error -22
[  691.508163][ T5447] usb 2-1: USB disconnect, device number 44
[  691.568838][ T5770] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  691.573201][ T5442] usb 4-1: USB disconnect, device number 54
[  691.736116][T28331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10744'.
[  691.810392][ T5770] usb 3-1: Using ep0 maxpacket: 16
[  691.834767][T28336] netlink: 'syz.0.10747': attribute type 21 has an invalid length.
[  691.940484][ T5770] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  691.954399][ T5770] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  691.967927][ T5770] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  691.991621][ T5770] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  692.001582][ T5770] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  692.012112][ T5770] usb 3-1: config 1 interface 0 has no altsetting 0
[  692.018823][ T5770] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  692.028452][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.111471][ T5770] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  692.220228][ T5442] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  692.257058][T28359] loop4: detected capacity change from 0 to 1024
[  692.265384][T28359] EXT4-fs: Ignoring removed orlov option
[  692.276477][T28359] EXT4-fs: Ignoring removed nomblk_io_submit option
[  692.297073][T28358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10757'.
[  692.310306][T28359] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002]
[  692.332462][T28359] System zones: 0-1, 3-36
[  692.346229][ T5770] scsi host1: usb-storage 3-1:1.0
[  692.348808][T28359] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  692.527542][T21061] EXT4-fs (loop4): unmounting filesystem.
[  692.547027][ T5770] usb 3-1: USB disconnect, device number 50
[  692.580266][ T5442] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  692.609692][ T5442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.647454][ T5442] usb 1-1: config 0 descriptor??
[  692.662587][T28369] dlm: plock device version mismatch: kernel (1.2.0), user (1.768.0)
[  692.692506][ T5442] gspca_main: spca508-2.14.0 probing 8086:0110
[  692.743145][T28361] loop3: detected capacity change from 0 to 32768
[  692.772584][T28371] loop4: detected capacity change from 0 to 8
[  692.774701][T28361] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.10756 (28361)
[  692.853740][T28361] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  692.885846][T28361] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  692.911635][T28361] BTRFS info (device loop3): turning off barriers
[  692.918130][T28361] BTRFS info (device loop3): enabling all of the rescue options
[  692.946642][T28361] BTRFS info (device loop3): ignoring data csums
[  692.960312][T28361] BTRFS info (device loop3): ignoring bad roots
[  692.988593][T28361] BTRFS info (device loop3): disabling log replay at mount time
[  693.020045][T28361] BTRFS info (device loop3): disabling tree log
[  693.033357][T28361] BTRFS info (device loop3): turning on flush-on-commit
[  693.053168][T28361] BTRFS info (device loop3): using free space tree
[  693.120740][ T5442] gspca_spca508: reg_read err -71
[  693.141019][ T5442] gspca_spca508: reg_read err -71
[  693.170388][ T5442] gspca_spca508: reg_read err -71
[  693.190345][ T5442] gspca_spca508: reg_read err -71
[  693.210285][ T5442] gspca_spca508: reg write: error -71
[  693.215720][ T5442] spca508: probe of 1-1:0.0 failed with error -71
[  693.265216][ T5442] usb 1-1: USB disconnect, device number 51
[  693.275596][T28368] loop1: detected capacity change from 0 to 32768
[  693.284362][T28368] XFS (loop1): Invalid device [./file0/file0], error=-20
[  693.360286][ T3629] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  693.370294][T28361] BTRFS info (device loop3: state C): enabling ssd optimizations
[  693.543185][ T3637] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  694.224650][T28426] loop2: detected capacity change from 0 to 1764
[  694.470196][ T5442] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  694.594671][   T26] audit: type=1326 audit(2000000018.599:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28445 comm="syz.4.10790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5d457dff9 code=0x7ffc0000
[  694.853423][ T5442] usb 4-1: config 0 has an invalid interface number: 229 but max is 0
[  694.876583][ T5442] usb 4-1: config 0 has no interface number 0
[  694.900190][ T5442] usb 4-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  694.997671][T28466] loop0: detected capacity change from 0 to 256
[  695.100356][ T5442] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38
[  695.109427][ T5442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.143226][ T5442] usb 4-1: Product: syz
[  695.147415][ T5442] usb 4-1: Manufacturer: syz
[  695.180164][ T5442] usb 4-1: SerialNumber: syz
[  695.196194][ T5442] usb 4-1: config 0 descriptor??
[  695.289472][T28476] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  695.320376][T28476] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub
[  695.497560][ T5442] usb 4-1: USB disconnect, device number 55
[  695.581161][T28448] loop2: detected capacity change from 0 to 32768
[  695.644029][T28448] ERROR: (device loop2): diWrite: ixpxd invalid
[  695.644029][T28448] 
[  695.684833][T28448] ERROR: (device loop2): remounting filesystem as read-only
[  695.715344][T28448] ERROR: (device loop2): txCommit: 
[  695.715344][T28448] 
[  695.742060][T28448] imap: ffff8880654e0000: 07ffffff 00000000 00000000 00000000
[  695.776338][T28448] imap: ffff8880654e0010: 00000004 00000002 00000000 00000000
[  695.783967][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  695.783979][   T26] audit: type=1326 audit(2000000019.779:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28485 comm="syz.0.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  695.820324][T28448] ERROR: (device loop2): diFree: inum = 7, iagno = 0, nextiag = 0
[  695.820324][T28448] 
[  695.863665][   T26] audit: type=1326 audit(2000000019.779:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28485 comm="syz.0.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  695.928412][   T26] audit: type=1326 audit(2000000019.779:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28485 comm="syz.0.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  695.936131][T28471] loop1: detected capacity change from 0 to 32768
[  696.020278][   T26] audit: type=1326 audit(2000000019.789:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28485 comm="syz.0.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2769d7dff9 code=0x7ffc0000
[  696.050601][T28471] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.10802 (28471)
[  696.097593][T28490] xt_socket: unknown flags 0x2
[  696.130403][T28471] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  696.165680][T28471] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  696.229508][T28471] BTRFS info (device loop1): using free space tree
[  696.360256][T28480] loop4: detected capacity change from 0 to 32768
[  696.382372][T28511] loop0: detected capacity change from 0 to 128
[  696.439108][T28511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  696.459011][T28511] ext4 filesystem being mounted at /2233/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  696.499708][T28480] JBD2: Ignoring recovery information on journal
[  696.521491][T28471] BTRFS info (device loop1): enabling ssd optimizations
[  696.544219][ T3638] EXT4-fs (loop0): unmounting filesystem.
[  696.614582][ T4229] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  696.659338][T28480] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  696.764849][ T5936] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5936)
[  696.773617][T28533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10823'.
[  696.793228][T28480] 
[  696.795570][T28480] ======================================================
[  696.802591][T28480] WARNING: possible circular locking dependency detected
[  696.809606][T28480] 6.1.114-syzkaller #0 Not tainted
[  696.814718][T28480] ------------------------------------------------------
[  696.821736][T28480] syz.4.10807/28480 is trying to acquire lock:
[  696.827886][T28480] ffff888068344650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_setattr+0xd99/0x1f80
[  696.836875][T28480] 
[  696.836875][T28480] but task is already holding lock:
[  696.844239][T28480] ffff888059133f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xd87/0x1f80
[  696.854520][T28480] 
[  696.854520][T28480] which lock already depends on the new lock.
[  696.854520][T28480] 
[  696.864922][T28480] 
[  696.864922][T28480] the existing dependency chain (in reverse order) is:
[  696.873948][T28480] 
[  696.873948][T28480] -> #4 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  696.882740][T28480]        lock_acquire+0x1f8/0x5a0
[  696.887777][T28480]        down_write+0x36/0x60
[  696.892466][T28480]        ocfs2_try_remove_refcount_tree+0xb2/0x330
[  696.898974][T28480]        ocfs2_xattr_set+0xa4b/0x1930
[  696.904357][T28480]        ocfs2_set_acl+0x4cb/0x570
[  696.909481][T28480]        ocfs2_iop_set_acl+0x252/0x3c0
[  696.914951][T28480]        posix_acl_xattr_set+0x37b/0x3e0
[  696.920589][T28480]        __vfs_removexattr+0x3ce/0x410
[  696.926055][T28480]        __vfs_removexattr_locked+0x1fe/0x410
[  696.932127][T28480]        vfs_removexattr+0xff/0x2a0
[  696.937331][T28480]        path_removexattr+0x22a/0x320
[  696.942711][T28480]        __x64_sys_lremovexattr+0x59/0x70
[  696.948445][T28480]        do_syscall_64+0x3b/0xb0
[  696.953392][T28480]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  696.959823][T28480] 
[  696.959823][T28480] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}:
[  696.967655][T28480]        lock_acquire+0x1f8/0x5a0
[  696.972693][T28480]        down_read+0xad/0xa30
[  696.977373][T28480]        ocfs2_init_acl+0x398/0x930
[  696.982576][T28480]        ocfs2_mknod+0x1f75/0x2e20
[  696.987696][T28480]        vfs_mknod+0x444/0x4d0
[  696.992469][T28480]        do_mknodat+0x3f8/0x5a0
[  696.997330][T28480]        __x64_sys_mknodat+0xa5/0xc0
[  697.002628][T28480]        do_syscall_64+0x3b/0xb0
[  697.007571][T28480]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  697.013996][T28480] 
[  697.013996][T28480] -> #2 (jbd2_handle){++++}-{0:0}:
[  697.021290][T28480]        lock_acquire+0x1f8/0x5a0
[  697.026308][T28480]        start_this_handle+0x1f71/0x21b0
[  697.031927][T28480]        jbd2__journal_start+0x2d1/0x5c0
[  697.037549][T28480]        jbd2_journal_start+0x25/0x30
[  697.042905][T28480]        ocfs2_start_trans+0x3c0/0x6f0
[  697.048353][T28480]        ocfs2_modify_bh+0xe9/0x4c0
[  697.053537][T28480]        ocfs2_local_read_info+0x1587/0x19e0
[  697.059502][T28480]        dquot_load_quota_sb+0x754/0xb90
[  697.065122][T28480]        dquot_load_quota_inode+0x318/0x600
[  697.071004][T28480]        ocfs2_enable_quotas+0x165/0x440
[  697.076625][T28480]        ocfs2_fill_super+0x4c7a/0x5730
[  697.082156][T28480]        mount_bdev+0x2c9/0x3f0
[  697.086995][T28480]        legacy_get_tree+0xeb/0x180
[  697.092180][T28480]        vfs_get_tree+0x88/0x270
[  697.097113][T28480]        do_new_mount+0x2ba/0xb40
[  697.102121][T28480]        __se_sys_mount+0x2d5/0x3c0
[  697.107306][T28480]        do_syscall_64+0x3b/0xb0
[  697.112227][T28480]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  697.118627][T28480] 
[  697.118627][T28480] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  697.127123][T28480]        lock_acquire+0x1f8/0x5a0
[  697.132135][T28480]        down_read+0xad/0xa30
[  697.136805][T28480]        ocfs2_start_trans+0x3b5/0x6f0
[  697.142269][T28480]        ocfs2_modify_bh+0xe9/0x4c0
[  697.147460][T28480]        ocfs2_local_read_info+0x1587/0x19e0
[  697.153427][T28480]        dquot_load_quota_sb+0x754/0xb90
[  697.159046][T28480]        dquot_load_quota_inode+0x318/0x600
[  697.164939][T28480]        ocfs2_enable_quotas+0x165/0x440
[  697.170558][T28480]        ocfs2_fill_super+0x4c7a/0x5730
[  697.176086][T28480]        mount_bdev+0x2c9/0x3f0
[  697.180921][T28480]        legacy_get_tree+0xeb/0x180
[  697.186111][T28480]        vfs_get_tree+0x88/0x270
[  697.191032][T28480]        do_new_mount+0x2ba/0xb40
[  697.196039][T28480]        __se_sys_mount+0x2d5/0x3c0
[  697.201224][T28480]        do_syscall_64+0x3b/0xb0
[  697.206144][T28480]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  697.212548][T28480] 
[  697.212548][T28480] -> #0 (sb_internal#2){.+.+}-{0:0}:
[  697.220009][T28480]        validate_chain+0x1661/0x5950
[  697.225362][T28480]        __lock_acquire+0x125b/0x1f80
[  697.230719][T28480]        lock_acquire+0x1f8/0x5a0
[  697.235733][T28480]        ocfs2_start_trans+0x2b0/0x6f0
[  697.241177][T28480]        ocfs2_setattr+0xd99/0x1f80
[  697.246365][T28480]        notify_change+0xce3/0xfc0
[  697.251457][T28480]        chmod_common+0x2a7/0x4b0
[  697.256465][T28480]        __x64_sys_fchmodat+0x117/0x1a0
[  697.261999][T28480]        do_syscall_64+0x3b/0xb0
[  697.266917][T28480]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  697.273322][T28480] 
[  697.273322][T28480] other info that might help us debug this:
[  697.273322][T28480] 
[  697.283534][T28480] Chain exists of:
[  697.283534][T28480]   sb_internal#2 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key
[  697.283534][T28480] 
[  697.297682][T28480]  Possible unsafe locking scenario:
[  697.297682][T28480] 
[  697.305113][T28480]        CPU0                    CPU1
[  697.310459][T28480]        ----                    ----
[  697.315804][T28480]   lock(&ocfs2_file_ip_alloc_sem_key);
[  697.321331][T28480]                                lock(&oi->ip_xattr_sem);
[  697.328427][T28480]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  697.336480][T28480]   lock(sb_internal#2);
[  697.340713][T28480] 
[  697.340713][T28480]  *** DEADLOCK ***
[  697.340713][T28480] 
[  697.348838][T28480] 3 locks held by syz.4.10807/28480:
[  697.354103][T28480]  #0: ffff888068344460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  697.363316][T28480]  #1: ffff8880591342c8 (&type->i_mutex_dir_key#14){++++}-{3:3}, at: chmod_common+0x1b7/0x4b0
[  697.373572][T28480]  #2: ffff888059133f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xd87/0x1f80
[  697.384254][T28480] 
[  697.384254][T28480] stack backtrace:
[  697.390124][T28480] CPU: 0 PID: 28480 Comm: syz.4.10807 Not tainted 6.1.114-syzkaller #0
[  697.398343][T28480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  697.408385][T28480] Call Trace:
[  697.411650][T28480]  <TASK>
[  697.414566][T28480]  dump_stack_lvl+0x1e3/0x2cb
[  697.419227][T28480]  ? nf_tcp_handle_invalid+0x642/0x642
[  697.424671][T28480]  ? print_circular_bug+0x12b/0x1a0
[  697.429859][T28480]  check_noncircular+0x2fa/0x3b0
[  697.434784][T28480]  ? add_chain_block+0x850/0x850
[  697.439703][T28480]  ? lockdep_lock+0x11f/0x2a0
[  697.444370][T28480]  ? add_lock_to_list+0x1de/0x2e0
[  697.449377][T28480]  ? _find_first_zero_bit+0xd0/0x100
[  697.454654][T28480]  validate_chain+0x1661/0x5950
[  697.459495][T28480]  ? reacquire_held_locks+0x660/0x660
[  697.464852][T28480]  ? look_up_lock_class+0x77/0x140
[  697.469950][T28480]  ? register_lock_class+0x100/0x990
[  697.475225][T28480]  ? mark_lock+0x9a/0x340
[  697.479545][T28480]  ? is_dynamic_key+0x260/0x260
[  697.484383][T28480]  ? mark_lock+0x9a/0x340
[  697.488701][T28480]  __lock_acquire+0x125b/0x1f80
[  697.493548][T28480]  lock_acquire+0x1f8/0x5a0
[  697.498042][T28480]  ? ocfs2_setattr+0xd99/0x1f80
[  697.502881][T28480]  ? read_lock_is_recursive+0x10/0x10
[  697.508246][T28480]  ? __lock_acquire+0x1f80/0x1f80
[  697.513259][T28480]  ? __might_sleep+0xb0/0xb0
[  697.517835][T28480]  ? do_raw_spin_unlock+0x137/0x8a0
[  697.523021][T28480]  ocfs2_start_trans+0x2b0/0x6f0
[  697.527947][T28480]  ? ocfs2_setattr+0xd99/0x1f80
[  697.532787][T28480]  ? ocfs2_recovery_exit+0x280/0x280
[  697.538061][T28480]  ? setattr_prepare+0x1e0/0xc20
[  697.542989][T28480]  ocfs2_setattr+0xd99/0x1f80
[  697.547655][T28480]  ? ocfs2_extend_allocation+0x1d00/0x1d00
[  697.553448][T28480]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  697.559681][T28480]  ? ktime_get_coarse_real_ts64+0x107/0x120
[  697.565564][T28480]  ? current_time+0x1ba/0x300
[  697.570231][T28480]  ? atime_needs_update+0x7b0/0x7b0
[  697.575417][T28480]  ? common_perm_cond+0x31b/0x3f0
[  697.580435][T28480]  ? bpf_lsm_inode_setattr+0x5/0x10
[  697.585617][T28480]  ? ocfs2_extend_allocation+0x1d00/0x1d00
[  697.591413][T28480]  notify_change+0xce3/0xfc0
[  697.595993][T28480]  chmod_common+0x2a7/0x4b0
[  697.600489][T28480]  ? __ia32_sys_chroot+0x40/0x40
[  697.605413][T28480]  ? kasan_quarantine_put+0xd4/0x220
[  697.610683][T28480]  ? lockdep_hardirqs_on+0x94/0x130
[  697.615870][T28480]  ? user_path_at_empty+0x48/0x60
[  697.620884][T28480]  __x64_sys_fchmodat+0x117/0x1a0
[  697.625906][T28480]  ? __ia32_sys_fchmod+0x150/0x150
[  697.631007][T28480]  ? syscall_enter_from_user_mode+0x2e/0x230
[  697.636973][T28480]  ? lockdep_hardirqs_on+0x94/0x130
[  697.642158][T28480]  ? syscall_enter_from_user_mode+0x2e/0x230
[  697.648125][T28480]  do_syscall_64+0x3b/0xb0
[  697.652527][T28480]  ? clear_bhb_loop+0x45/0xa0
[  697.657186][T28480]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  697.663069][T28480] RIP: 0033:0x7fe5d457dff9
[  697.667468][T28480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  697.687060][T28480] RSP: 002b:00007fe5d52b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c
[  697.695459][T28480] RAX: ffffffffffffffda RBX: 00007fe5d4735f80 RCX: 00007fe5d457dff9
[  697.703419][T28480] RDX: 00000000fffffed3 RSI: 0000000020000000 RDI: ffffffffffffff9c
[  697.711376][T28480] RBP: 00007fe5d45f0296 R08: 0000000000000000 R09: 0000000000000000
[  697.719333][T28480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  697.727286][T28480] R13: 0000000000000000 R14: 00007fe5d4735f80 R15: 00007ffdfb3284a8
[  697.735246][T28480]  </TASK>
[  697.742824][T28539] loop2: detected capacity change from 0 to 256
[  697.805843][T28539] FAT-fs (loop2): Directory bread(block 257) failed
[  697.839494][T28539] FAT-fs (loop2): Directory bread(block 257) failed
[  697.856576][T28539] FAT-fs (loop2): Directory bread(block 257) failed
[  697.881922][T28539] FAT-fs (loop2): Directory bread(block 257) failed
[  697.939019][T21061] ocfs2: Unmounting device (7,4) on (node local)