last executing test programs:

2.881027239s ago: executing program 0 (id=2463):
r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x0, 0x400000000000257, 0x7, 0xfffbffff, &(0x7f0000001600)})

2.746843989s ago: executing program 0 (id=2467):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0)

2.473093118s ago: executing program 2 (id=2474):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="4f3bfde51b257f40", 0x8}], 0x1)

2.468230808s ago: executing program 3 (id=2475):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000010c0)=@rose={0xbb, 0x2, 0xbb, 0x1, 0x0})

2.358943688s ago: executing program 3 (id=2477):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x64}, [], {0x4, 0x12, 0x1, 0x1000000}}, 0x64}}, 0x0)

2.314246947s ago: executing program 2 (id=2478):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2023, 0x5000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x40}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x10000800)

2.239193037s ago: executing program 0 (id=2481):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r0)

2.130728947s ago: executing program 3 (id=2482):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x94, 0x5b, 0x40, 0x46d, 0x8b7, 0xca8e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xc5, 0x42}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

2.130590537s ago: executing program 2 (id=2483):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x2000000, 0x0, 0x24044836}, 0xc094)

2.091218557s ago: executing program 0 (id=2486):
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@compress}]}, 0x1, 0x50ed, &(0x7f0000005180)="$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")
llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)

2.009812796s ago: executing program 4 (id=2487):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x33424752, 0x0, 0x1000, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}})

2.009303206s ago: executing program 2 (id=2488):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18000}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MTU={0x8, 0x4, 0xa283}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x55b28742, 0x9}}]}]}]}, 0x50}}, 0x0)

1.933263336s ago: executing program 1 (id=2489):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.932954976s ago: executing program 4 (id=2490):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000180)={0x0, 0x0, 0x1})

1.778596886s ago: executing program 2 (id=2491):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x4703, &(0x7f0000004800)="$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")
chown(&(0x7f0000000280)='./file0\x00', 0xee01, 0xffffffffffffffff)

1.778362475s ago: executing program 4 (id=2492):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x34, 0x1, 0x4, 0x503, 0x0, 0x0, {0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8090}, 0x24008804)

1.640538785s ago: executing program 4 (id=2493):
r0 = syz_open_dev$sg(&(0x7f0000002d00), 0x0, 0x103802)
ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6)

1.478260745s ago: executing program 4 (id=2494):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x6216, &(0x7f000000cb40)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc)

893.199092ms ago: executing program 1 (id=2495):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0})

777.991622ms ago: executing program 1 (id=2496):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x320c81c, &(0x7f0000000800)=ANY=[@ANYRES64=0x0, @ANYBLOB="701f3adc5a5532a26ab6a523a9d8aec46437d4608dd792204cece11598548e8a9475583d1a305597c62ea5ed8ee920f510281e1779bd0119c02e60fae9f0a91c7c8367a590c6f716c6a5ae2b41b3e4a88ba27eb5499b2e9a9cfb01c75b80c4ff7c44256e03c50b59f2d48b94f51115fe8c741dca6ef6335003b4d4e946053490d28a6a04657b733827009c0ac7f67303e58fe1623590f8c283958c74e2b0e698da2c79c605336e656f7ae6e6eab7f834b2fb85effe8d99c125e6f4c8f69a40ef3eeb5f1eb0557d219351fd5ca83a6cb876f64e2fc754d037c10a18f6fdf55f283b", @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES64], 0x1, 0x545, &(0x7f0000000ac0)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00'], 0x0)

769.238832ms ago: executing program 0 (id=2497):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@delneigh={0x44, 0x1a, 0x401, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NDA_CACHEINFO={0x14, 0x3, {0x7}}]}, 0x44}}, 0x0)

373.653591ms ago: executing program 1 (id=2498):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9e0ae2e0726e0bd8}, 0x40)

337.838971ms ago: executing program 3 (id=2499):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @dev, [], [], 'batadv0\x00', 'wg1\x00'}, 0x0, 0xd0, 0x110, 0x0, {0x0, 0x4c00}, [@common=@inet=@dscp={{0x28}, {0x54}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "ea01dace53ca15d49302b6f9280e0081e08ab2cff0c119a466e514dcba71"}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)

239.6893ms ago: executing program 4 (id=2500):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$RTC_SET_TIME(r0, 0x40247007, &(0x7f0000000080)={0x300, 0xa00, 0x100000c, 0x1d, 0x40000000, 0x0, 0x0, 0x164})

173.85681ms ago: executing program 3 (id=2501):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002f80)=@allocspi={0x154, 0x16, 0x503, 0x0, 0x0, {{{@in=@multicast2, @in=@dev}, {@in6=@private2, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, 0x5b}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in, @in=@dev, @in=@private}]}, @lastused={0xc}]}, 0x154}}, 0x0)

173.31472ms ago: executing program 2 (id=2502):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f0000010012000000000000000000000000007fffffff000000ffffac14140000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff02040000000000000000000000000100000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0)

160.86643ms ago: executing program 1 (id=2503):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)

121.94348ms ago: executing program 0 (id=2504):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1bf, &(0x7f0000000200)="$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")
truncate(&(0x7f00000000c0)='./file1\x00', 0x1008008)

476.57µs ago: executing program 3 (id=2505):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, 0x12, 0x9c023d2d7e91de25, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, '\tESN'}]}, 0x54}}, 0x0)

0s ago: executing program 1 (id=2506):
r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0xc, @win={{0x0, 0x12, 0x7, 0x5}, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x7}})

kernel console output (not intermixed with test programs):

 sctp_sack_info instead
[  102.485885][ T4228] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22.
[  102.514975][ T4166] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  102.852393][ T5935] netlink: 'syz.2.769': attribute type 10 has an invalid length.
[  102.885618][ T5937] libceph: resolve '400' (ret=-3): failed
[  103.001237][ T5935] device veth0_vlan left promiscuous mode
[  103.059482][ T5935] device veth0_vlan entered promiscuous mode
[  103.086944][ T5935] team0: Device veth0_vlan failed to register rx_handler
[  103.111988][ T5908] loop0: detected capacity change from 0 to 32768
[  103.203846][ T5947] sctp: [Deprecated]: syz.1.775 (pid 5947) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.203846][ T5947] Use struct sctp_sack_info instead
[  103.329172][ T5935] syz.2.769 (5935) used greatest stack depth: 18104 bytes left
[  103.352850][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'.
[  103.631063][ T5970] loop1: detected capacity change from 0 to 512
[  103.699462][ T5976] netlink: 'syz.2.790': attribute type 44 has an invalid length.
[  103.710674][ T5975] loop4: detected capacity change from 0 to 256
[  103.768652][ T5970] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  103.779750][ T5979] trusted_key: encrypted_key: master key parameter 'u' is invalid
[  103.817213][ T5981] netlink: 'syz.0.792': attribute type 10 has an invalid length.
[  103.834436][ T5970] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,grpid,dioread_nolock,mblk_io_submit,nogrpid,usrjquota=,,errors=continue. Quota mode: none.
[  103.975277][ T5981] device veth0_vlan left promiscuous mode
[  104.045254][ T5981] device veth0_vlan entered promiscuous mode
[  104.109387][ T5981] team0: Device veth0_vlan failed to register rx_handler
[  104.674047][ T6011] netlink: 'syz.0.807': attribute type 5 has an invalid length.
[  104.690841][ T6004] loop3: detected capacity change from 0 to 4096
[  104.743143][   T26] audit: type=1800 audit(1738582304.077:3): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.787" name="file1" dev="loop1" ino=15 res=0 errno=0
[  104.774581][ T6004] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  104.869828][ T6018] loop2: detected capacity change from 0 to 128
[  104.919862][ T6004] ntfs: volume version 3.1.
[  105.062496][ T6024] netlink: 'syz.4.814': attribute type 10 has an invalid length.
[  105.185399][ T6024] device veth0_vlan left promiscuous mode
[  105.208913][ T6024] device veth0_vlan entered promiscuous mode
[  105.235292][ T6024] team0: Device veth0_vlan failed to register rx_handler
[  105.417289][ T6029] netlink: 'syz.2.825': attribute type 10 has an invalid length.
[  105.424171][ T5680] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  105.526958][ T6042] tmpfs: Bad value for 'mpol'
[  105.864486][ T5680] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  105.875038][ T5680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.906160][ T5680] usb 2-1: config 0 descriptor??
[  106.392061][ T5680] ath6kl: Failed to submit usb control message: -71
[  106.404154][ T5680] ath6kl: unable to send the bmi data to the device: -71
[  106.443906][ T5680] ath6kl: Unable to send get target info: -71
[  106.465793][ T5680] ath6kl: Failed to init ath6kl core: -71
[  106.523409][ T6097] loop3: detected capacity change from 0 to 4096
[  106.530514][ T5680] ath6kl_usb: probe of 2-1:0.0 failed with error -71
[  106.553777][ T5680] usb 2-1: USB disconnect, device number 4
[  106.621925][ T6097] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  106.688393][ T6097] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  106.726886][ T6097] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  106.727565][ T6111] loop4: detected capacity change from 0 to 512
[  106.770372][ T6097] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  106.795995][ T6097] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  106.840169][ T6097] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  106.858522][ T6097] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  106.884323][ T6111] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  106.970840][ T6097] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  106.989360][ T6119] dlm: no locking on control device
[  106.990610][ T6097] ntfs: volume version 3.1.
[  107.003984][ T6111] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,grpid,dioread_nolock,mblk_io_submit,nogrpid,usrjquota=,,errors=continue. Quota mode: none.
[  107.149326][ T6123] xt_bpf: check failed: parse error
[  107.196995][ T6094] loop2: detected capacity change from 0 to 32768
[  107.284902][ T6094] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.846 (6094)
[  107.351428][ T6094] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  107.397805][ T6094] BTRFS info (device loop2): force clearing of disk cache
[  107.444137][ T6094] BTRFS info (device loop2): setting nodatasum
[  107.450348][ T6094] BTRFS info (device loop2): use zlib compression, level 3
[  107.496017][ T6094] BTRFS info (device loop2): allowing degraded mounts
[  107.524373][ T6094] BTRFS info (device loop2): using free space tree
[  107.530958][ T6094] BTRFS info (device loop2): has skinny extents
[  107.942311][ T6094] BTRFS info (device loop2): clearing free space tree
[  107.950010][ T6094] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  107.962529][ T6094] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  108.004806][ T6094] BTRFS info (device loop2): creating free space tree
[  108.021152][ T6094] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  108.090241][ T6183] cgroup: noprefix used incorrectly
[  108.103546][ T6094] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  108.339386][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'.
[  108.379827][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'.
[  108.402322][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'.
[  108.931528][ T6223] TCP: TCP_TX_DELAY enabled
[  109.098513][ T6233] loop3: detected capacity change from 0 to 164
[  109.210739][ T6233] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  109.241485][ T6244] loop1: detected capacity change from 0 to 1024
[  109.419027][ T6251] loop0: detected capacity change from 0 to 1024
[  109.524309][ T5669] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  109.699429][ T6267] netlink: 'syz.3.920': attribute type 30 has an invalid length.
[  109.721191][ T6273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.797836][ T6277] netlink: 'syz.4.925': attribute type 39 has an invalid length.
[  109.826852][ T6277] device veth0_macvtap left promiscuous mode
[  109.948070][ T5669] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  109.963158][ T6285] loop0: detected capacity change from 0 to 256
[  109.967543][ T5669] usb 3-1: config 0 has no interface number 0
[  110.009945][ T5669] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  110.204690][ T5669] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  110.213980][ T5669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.291619][ T5669] usb 3-1: Product: syz
[  110.328145][ T5669] usb 3-1: Manufacturer: syz
[  110.332802][ T5669] usb 3-1: SerialNumber: syz
[  110.349154][ T6306] netlink: 300 bytes leftover after parsing attributes in process `syz.4.940'.
[  110.385403][ T5669] usb 3-1: config 0 descriptor??
[  110.404586][ T6245] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  110.426755][ T5669] usb-storage 3-1:0.20: USB Mass Storage device detected
[  110.471054][ T5669] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  110.554294][ T5667] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  110.670267][ T5669] scsi host1: usb-storage 3-1:0.20
[  110.824366][ T5667] usb 4-1: Using ep0 maxpacket: 32
[  110.894764][ T5669] usb 3-1: USB disconnect, device number 6
[  110.965764][ T5667] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.017919][ T6345] loop0: detected capacity change from 0 to 1764
[  111.103145][ T6345] iso9660: Corrupted directory entry in block 14 of inode 1920
[  111.195765][ T5667] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  111.212775][ T5667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.233722][ T5667] usb 4-1: Product: syz
[  111.238973][ T5667] usb 4-1: Manufacturer: syz
[  111.243978][ T5667] usb 4-1: SerialNumber: syz
[  111.252418][ T5667] usb 4-1: config 0 descriptor??
[  111.311222][ T5667] usb 4-1: bad CDC descriptors
[  111.320720][ T6360] loop4: detected capacity change from 0 to 64
[  111.327431][ T5667] usb 4-1: unsupported MDLM descriptors
[  111.539788][   T13] usb 4-1: USB disconnect, device number 7
[  111.584198][ T1110] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  111.716341][ T6382] xt_TPROXY: Can be used only with -p tcp or -p udp
[  111.825549][ T6374] loop4: detected capacity change from 0 to 8192
[  111.834350][ T1110] usb 2-1: Using ep0 maxpacket: 16
[  111.887512][ T6374] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  111.903693][ T6374] REISERFS (device loop4): using ordered data mode
[  111.914334][ T6374] reiserfs: using flush barriers
[  111.944272][ T6374] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  111.955425][  T150] block nbd2: Attempted send on invalid socket
[  111.961108][ T1110] usb 2-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=a9.3c
[  111.967174][  T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.976741][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.996277][ T6374] REISERFS (device loop4): checking transaction log (loop4)
[  111.997024][ T6393] FAT-fs (nbd2): unable to read boot sector
[  112.024618][ T1110] usb 2-1: config 0 descriptor??
[  112.039025][ T6390] loop0: detected capacity change from 0 to 4096
[  112.080127][ T6395] ieee802154 phy0 wpan0: encryption failed: -22
[  112.085838][ T1110] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  112.177136][ T6390] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  112.183725][ T6397] loop2: detected capacity change from 0 to 1024
[  112.231192][ T6390] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22.
[  112.244527][ T6374] REISERFS (device loop4): Using tea hash to sort names
[  112.255612][ T6374] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  112.273012][ T6390] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22.
[  112.278990][ T6374] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  112.299086][ T6397] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  112.314449][ T1110] usb 2-1: qt2_setup_urbs - submit read urb failed -8
[  112.315308][ T6397] EXT4-fs (loop2): orphan cleanup on readonly fs
[  112.321818][ T1110] quatech2: probe of 2-1:0.0 failed with error -8
[  112.339026][ T6397] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.983: Invalid inode table block 0 in block_group 0
[  112.389460][ T6402] netlink: 100 bytes leftover after parsing attributes in process `syz.3.985'.
[  112.390360][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  112.424387][ T6397] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem
[  112.434580][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  112.441807][ T6397] EXT4-fs error (device loop2): ext4_quota_write:6592: inode #3: comm syz.2.983: mark_inode_dirty error
[  112.467047][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  112.473594][ T6397] __quota_error: 14 callbacks suppressed
[  112.473610][ T6397] Quota error (device loop2): write_blk: dquota write failed
[  112.487922][ T6397] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  112.500178][ T6397] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.983: Failed to acquire dquot type 0
[  112.512160][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  112.532463][ T6397] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.983: Invalid inode table block 0 in block_group 0
[  112.610141][ T4779] usb 2-1: USB disconnect, device number 5
[  112.623326][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  112.640598][ T6397] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem
[  112.667675][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  112.731085][ T6397] EXT4-fs error (device loop2): ext4_ext_truncate:4454: inode #15: comm syz.2.983: mark_inode_dirty error
[  112.772003][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  112.786742][ T6397] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.983: Invalid inode table block 0 in block_group 0
[  112.830724][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  112.851817][ T6397] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem
[  112.901305][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  112.926785][ T6397] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  112.945048][ T6412] loop4: detected capacity change from 0 to 256
[  112.951632][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  112.964361][ T6397] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.983: Invalid inode table block 0 in block_group 0
[  112.977496][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  112.984025][ T6397] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem
[  112.994010][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  113.027265][ T6414] loop0: detected capacity change from 0 to 512
[  113.050231][ T6397] EXT4-fs error (device loop2): ext4_truncate:4272: inode #15: comm syz.2.983: mark_inode_dirty error
[  113.068600][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  113.082951][ T6397] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  113.092464][ T6397] EXT4-fs (loop2): Remounting filesystem read-only
[  113.106085][ T6414] EXT4-fs (loop0): inodes count not valid: 1 vs 32
[  113.141837][ T6397] EXT4-fs (loop2): 1 truncate cleaned up
[  113.149902][ T6397] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,usrquota,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback.
[  113.239501][ T6404] loop3: detected capacity change from 0 to 32768
[  113.242799][ T6418] netlink: set zone limit has 8 unknown bytes
[  113.375161][ T6397] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.983: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  113.412356][ T6426] loop1: detected capacity change from 0 to 128
[  113.438264][ T6426] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  113.449881][ T6404] XFS (loop3): Mounting V5 Filesystem
[  113.503851][ T6426] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  113.699404][ T6404] XFS (loop3): Ending clean mount
[  113.745999][ T6439] 9pnet: Insufficient options for proto=fd
[  113.777045][ T6416] loop4: detected capacity change from 0 to 32768
[  113.885060][ T4174] XFS (loop3): Unmounting Filesystem
[  113.949874][ T6416] XFS (loop4): Mounting V5 Filesystem
[  114.001808][ T6457] loop1: detected capacity change from 0 to 256
[  114.065503][ T6416] XFS (loop4): Ending clean mount
[  114.073038][ T6416] XFS (loop4): Quotacheck needed: Please wait.
[  114.196464][ T6416] XFS (loop4): Quotacheck: Done.
[  114.385365][ T4172] XFS (loop4): Unmounting Filesystem
[  114.613439][ T6481] loop3: detected capacity change from 0 to 256
[  114.699957][ T6481] FAT-fs (loop3): Directory bread(block 64) failed
[  114.728054][ T6481] FAT-fs (loop3): Directory bread(block 65) failed
[  114.742063][ T6481] FAT-fs (loop3): Directory bread(block 66) failed
[  114.771337][ T6481] FAT-fs (loop3): Directory bread(block 67) failed
[  114.786287][ T6481] FAT-fs (loop3): Directory bread(block 68) failed
[  114.792899][ T6481] FAT-fs (loop3): Directory bread(block 69) failed
[  114.804526][ T4779] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  114.844334][ T6481] FAT-fs (loop3): Directory bread(block 70) failed
[  114.850959][ T6481] FAT-fs (loop3): Directory bread(block 71) failed
[  114.870250][ T6481] FAT-fs (loop3): Directory bread(block 72) failed
[  114.884314][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'.
[  114.917271][ T6481] FAT-fs (loop3): Directory bread(block 73) failed
[  115.016834][ T6497] loop0: detected capacity change from 0 to 1024
[  115.064197][ T4779] usb 2-1: Using ep0 maxpacket: 8
[  115.092176][ T6497] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000000,nombcache,barrier,norecovery,norecovery,delalloc,nodelalloc,usrquota,max_batch_time=0x0000000000000006,nombcache,init_itable,,errors=continue. Quota mode: writeback.
[  115.146667][ T6503] loop2: detected capacity change from 0 to 1024
[  115.194571][ T4779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.303435][ T6503] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000088,errors=continue,lazytime,max_dir_size_kb=0x0000000000000009,noload,data_err=abort,,errors=continue. Quota mode: writeback.
[  115.328388][    C1] vkms_vblank_simulate: vblank timer overrun
[  115.334662][ T4779] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[  115.343805][ T4779] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  115.364188][ T4779] usb 2-1: Manufacturer: syz
[  115.370754][ T4779] usb 2-1: config 0 descriptor??
[  115.415754][ T4779] appledisplay 2-1:0.0: Could not find int-in endpoint
[  115.451329][ T4779] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  115.631695][ T6521] loop3: detected capacity change from 0 to 1024
[  115.684568][ T5669] usb 2-1: USB disconnect, device number 6
[  115.783223][ T6524] xt_CT: No such helper "syz0"
[  115.837678][  T144] hfsplus: b-tree write err: -5, ino 4
[  116.003506][ T6507] loop4: detected capacity change from 0 to 32768
[  116.106681][ T6538] loop2: detected capacity change from 0 to 2048
[  116.172225][ T6538] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.172438][ T6507] XFS (loop4): Mounting V5 Filesystem
[  116.186477][ T6549] x_tables: unsorted underflow at hook 2
[  116.307407][ T6507] XFS (loop4): Ending clean mount
[  116.374321][ T1110] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  116.441252][ T6559] delete_channel: no stack
[  116.463194][ T4172] XFS (loop4): Unmounting Filesystem
[  116.629449][ T1110] usb 4-1: Using ep0 maxpacket: 8
[  116.764395][ T1110] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  116.794204][ T1110] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.822052][ T1110] usb 4-1: config 0 has no interface number 0
[  116.855502][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1059'.
[  116.860104][ T1110] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  116.896174][ T1110] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  116.904272][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1059'.
[  116.918372][ T1110] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  116.990318][ T1110] usb 4-1: config 0 interface 52 has no altsetting 0
[  117.109923][ T1110] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  117.129041][ T1110] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  117.157735][ T1110] usb 4-1: Manufacturer: syz
[  117.186845][ T1110] usb 4-1: config 0 descriptor??
[  117.465325][ T1110] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  117.484630][ T1110] synaptics_usb: probe of 4-1:0.52 failed with error -5
[  117.742449][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'.
[  117.767209][ T1110] usb 4-1: USB disconnect, device number 8
[  117.912041][ T6642] loop0: detected capacity change from 0 to 256
[  117.934768][ T6645] netlink: 'syz.4.1091': attribute type 28 has an invalid length.
[  117.948954][ T6645] netlink: 'syz.4.1091': attribute type 29 has an invalid length.
[  117.974975][ T6642] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  118.003203][ T6645] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1091'.
[  118.060357][ T6650] loop1: detected capacity change from 0 to 512
[  118.140661][ T6642] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  118.164233][ T6642] exFAT-fs (loop0): Filesystem has been set read-only
[  118.186113][ T6650] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  118.204286][ T6650] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.438842][ T6669] IPv6: Can't replace route, no match found
[  118.960689][ T6667] infiniband syz0: set active
[  118.977586][ T6667] infiniband syz0: added bond0
[  119.019108][ T6694] QAT: Stopping all acceleration devices.
[  119.034672][ T1110] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  119.115880][ T6667] RDS/IB: syz0: added
[  119.181560][ T6667] smc: adding ib device syz0 with port count 1
[  119.190505][ T6667] smc:    ib device syz0 port 1 has pnetid 
[  119.365589][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  119.394555][ T1110] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  119.415170][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.435792][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  119.447931][ T1110] usb 1-1: config 0 descriptor??
[  119.498386][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  119.555250][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  119.596681][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  119.660565][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.669554][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.894348][ T6707] __nla_validate_parse: 10 callbacks suppressed
[  119.894390][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  119.912616][ T1110] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f
[  119.924257][ T1110] hackrf 1-1:0.0: Could not detect board
[  119.931988][ T1110] hackrf: probe of 1-1:0.0 failed with error -71
[  119.949569][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  119.952133][ T1110] usb 1-1: USB disconnect, device number 7
[  120.004049][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  120.035046][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  120.044206][ T6712] loop2: detected capacity change from 0 to 32768
[  120.064277][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  120.102141][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  120.126245][ T6712] XFS (loop2): Mounting V5 Filesystem
[  120.137336][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  120.191902][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  120.245191][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  120.266524][ T6712] XFS (loop2): Ending clean mount
[  120.278697][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  120.382842][ T4176] XFS (loop2): Unmounting Filesystem
[  120.698183][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.767277][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.165149][ T6707] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.174069][ T6707] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.183698][ T6707] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.193579][ T6707] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.720356][ T4205] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  121.924181][ T4779] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  122.162781][ T6766] loop2: detected capacity change from 0 to 2048
[  122.169380][ T4779] usb 1-1: Using ep0 maxpacket: 32
[  122.228102][ T6766] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.254637][ T4205] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  122.274022][ T4205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.310358][ T4205] usb 5-1: Product: syz
[  122.319544][ T4205] usb 5-1: Manufacturer: syz
[  122.334356][ T4779] usb 1-1: unable to get BOS descriptor or descriptor too short
[  122.343699][ T4205] usb 5-1: SerialNumber: syz
[  122.359908][ T4205] usb 5-1: config 0 descriptor??
[  122.442048][ T4779] usb 1-1: config 7 has an invalid interface number: 187 but max is 0
[  122.462817][ T4779] usb 1-1: config 7 has no interface number 0
[  122.484357][ T4779] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[  122.506232][ T4779] usb 1-1: config 7 interface 187 has no altsetting 0
[  122.635797][ T4205] hso 5-1:0.0: Failed to find BULK IN ep
[  122.655383][ T4205] usb-storage 5-1:0.0: USB Mass Storage device detected
[  122.664389][ T4779] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  122.683741][ T4779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.694967][ T6784] loop2: detected capacity change from 0 to 4096
[  122.702603][ T4779] usb 1-1: Product: syz
[  122.707005][ T4779] usb 1-1: Manufacturer: syz
[  122.711623][ T4779] usb 1-1: SerialNumber: syz
[  122.748950][ T6742] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  122.762861][ T6790] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  122.864976][   T13] usb 5-1: USB disconnect, device number 4
[  122.867741][ T6784] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  122.908611][ T6784] ntfs3: loop2: Failed to load $Bitmap.
[  122.941001][ T6795] loop1: detected capacity change from 0 to 164
[  122.994365][ T4779] usb 1-1: Limiting number of CPorts to U8_MAX
[  123.024471][ T4779] usb 1-1: Not enough endpoints found in device, aborting!
[  123.216048][ T4779] usb 1-1: USB disconnect, device number 8
[  123.254342][ T4206] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  123.270202][ T6806] loop2: detected capacity change from 0 to 512
[  123.338034][ T6806] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  123.356626][ T6806] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,grpid,dioread_nolock,mblk_io_submit,nogrpid,usrjquota=,,errors=continue. Quota mode: none.
[  123.384352][ T1110] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  123.635124][ T4206] usb 4-1: config 1 has an invalid interface number: 17 but max is 1
[  123.643252][ T4206] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.653839][ T1110] usb 2-1: Using ep0 maxpacket: 32
[  123.674221][ T4206] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  123.683223][ T4206] usb 4-1: config 1 has no interface number 2
[  123.704181][ T4206] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.724218][ T4206] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  123.754276][ T4206] usb 4-1: config 1 interface 1 has no altsetting 0
[  123.914743][ T4206] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  123.923955][ T4206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.934645][ T1110] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  123.948360][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.964136][ T4206] usb 4-1: Product: syz
[  123.969662][ T1110] usb 2-1: Product: syz
[  123.973850][ T1110] usb 2-1: Manufacturer: syz
[  123.984191][ T4206] usb 4-1: Manufacturer: syz
[  123.988844][ T4206] usb 4-1: SerialNumber: syz
[  123.998581][ T1110] usb 2-1: SerialNumber: syz
[  124.011783][ T1110] usb 2-1: config 0 descriptor??
[  124.084242][   T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  124.220931][   T26] audit: type=1800 audit(1738582323.547:5): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1163" name="file1" dev="loop2" ino=15 res=0 errno=0
[  124.254347][ T4206] usb 4-1: selecting invalid altsetting 0
[  124.260202][ T4206] usb 4-1: selecting invalid altsetting 0
[  124.277208][ T1110] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 007
[  124.291489][ T4206] cdc_ncm 4-1:1.0: bind() failure
[  124.323382][ T4206] cdc_ncm 4-1:1.17: CDC Union missing and no IAD found
[  124.350752][ T4206] cdc_ncm 4-1:1.17: bind() failure
[  124.365507][ T4206] usb 4-1: selecting invalid altsetting 0
[  124.371094][   T23] usb 5-1: Using ep0 maxpacket: 16
[  124.372119][ T4206] cdc_ncm: probe of 4-1:1.1 failed with error -22
[  124.383672][ T4206] usb 4-1: selecting invalid altsetting 0
[  124.389873][ T4206] cdc_mbim: probe of 4-1:1.1 failed with error -22
[  124.409007][ T4206] usb 4-1: selecting invalid altsetting 0
[  124.417904][ T4206] usbtest: probe of 4-1:1.1 failed with error -22
[  124.441269][ T4206] usb 4-1: USB disconnect, device number 9
[  124.494814][ T4209] usb 2-1: USB disconnect, device number 7
[  124.530132][   T23] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  124.545195][   T23] usb 5-1: config 0 has no interface number 0
[  124.569600][   T23] usb 5-1: config 0 interface 196 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  124.590717][   T23] usb 5-1: config 0 interface 196 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  124.602721][   T23] usb 5-1: config 0 interface 196 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  124.621323][   T23] usb 5-1: config 0 interface 196 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  124.672313][ T6838] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  124.757380][ T6841] [U] 
[  124.809406][   T23] usb 5-1: New USB device found, idVendor=02aa, idProduct=3efe, bcdDevice=25.d1
[  124.824829][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.843292][   T23] usb 5-1: Product: syz
[  124.852330][   T23] usb 5-1: Manufacturer: syz
[  124.860899][   T23] usb 5-1: SerialNumber: syz
[  124.888720][   T23] usb 5-1: config 0 descriptor??
[  124.941674][ T6852] loop2: detected capacity change from 0 to 1024
[  125.123600][ T4209] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  125.172786][ T6862] __nla_validate_parse: 50 callbacks suppressed
[  125.172805][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'.
[  125.219068][   T23] usb 5-1: USB disconnect, device number 5
[  125.263447][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'.
[  125.281130][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'.
[  125.303454][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  125.349001][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  125.395340][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  125.412271][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  125.428635][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  125.440437][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  125.473625][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  125.523203][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.530661][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.565308][ T6868] rdma_rxe: ignoring netdev event = 10 for bond0
[  125.579535][ T6868] infiniband syz0: set down
[  125.624410][ T4206] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  125.664395][ T4209] usb 1-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=e4.e6
[  125.673474][ T4209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.708141][ T4209] usb 1-1: Product: syz
[  125.712350][ T4209] usb 1-1: Manufacturer: syz
[  125.717250][ T4209] usb 1-1: SerialNumber: syz
[  125.723493][ T4209] usb 1-1: config 0 descriptor??
[  125.984340][ T4209] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  126.034370][ T4206] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  126.043444][ T4206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.060353][ T4206] usb 4-1: config 0 descriptor??
[  126.105551][ T4206] ums-realtek 4-1:0.0: USB Mass Storage device detected
[  126.194363][ T4209] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  126.216177][ T4209] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  126.226579][ T4209] asix: probe of 1-1:0.0 failed with error -71
[  126.235651][ T4209] usb 1-1: USB disconnect, device number 9
[  126.319899][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.329559][ T2359] usb 4-1: USB disconnect, device number 10
[  126.382401][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.973404][ T6896] loop0: detected capacity change from 0 to 512
[  126.980648][ T6868] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.989826][ T6868] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.006611][ T6868] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.014736][ T6896] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback.
[  127.020780][ T6868] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.030319][ T6896] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  127.241470][ T6868] device ip6gre1 left promiscuous mode
[  127.249116][ T6872] netlink: 'syz.2.1194': attribute type 1 has an invalid length.
[  127.265306][ T6879] bond0 speed is unknown, defaulting to 1000
[  127.293644][ T4779] bond0 speed is unknown, defaulting to 1000
[  127.706486][ T6931] loop4: detected capacity change from 0 to 256
[  127.755771][ T6935] device macvlan0 entered promiscuous mode
[  127.778813][ T6933] loop1: detected capacity change from 0 to 1764
[  127.852184][ T6931] FAT-fs (loop4): Directory bread(block 64) failed
[  127.866067][ T6939] loop3: detected capacity change from 0 to 16
[  127.872442][ T6931] FAT-fs (loop4): Directory bread(block 65) failed
[  127.882525][ T6931] FAT-fs (loop4): Directory bread(block 66) failed
[  127.891454][ T6931] FAT-fs (loop4): Directory bread(block 67) failed
[  127.898770][ T6931] FAT-fs (loop4): Directory bread(block 68) failed
[  127.906192][ T6931] FAT-fs (loop4): Directory bread(block 69) failed
[  127.933209][ T6933] overlayfs: filesystem on './file2' not supported
[  127.935497][ T6939] erofs: (device loop3): mounted with root inode @ nid 36.
[  127.957740][ T6931] FAT-fs (loop4): Directory bread(block 70) failed
[  127.977906][ T6931] FAT-fs (loop4): Directory bread(block 71) failed
[  128.006325][ T6931] FAT-fs (loop4): Directory bread(block 72) failed
[  128.018396][ T6939] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  128.039520][ T6931] FAT-fs (loop4): Directory bread(block 73) failed
[  128.078601][ T6939] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -27 in[61, 4035] out[1851]
[  128.143994][ T6939] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  128.203862][ T6953] loop2: detected capacity change from 0 to 256
[  128.303636][ T6953] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  128.441755][ T6965] netlink: 'syz.4.1232': attribute type 1 has an invalid length.
[  128.490519][ T6965] netlink: 'syz.4.1232': attribute type 1 has an invalid length.
[  128.612072][ T6978] device veth3 entered promiscuous mode
[  128.712832][ T6987] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004
[  128.818978][ T6993] loop4: detected capacity change from 0 to 764
[  128.827940][ T6995] sctp: [Deprecated]: syz.3.1249 (pid 6995) Use of int in max_burst socket option.
[  128.827940][ T6995] Use struct sctp_assoc_value instead
[  128.911270][ T7001] loop3: detected capacity change from 0 to 512
[  128.933593][ T6993] rock: directory entry would overflow storage
[  128.944184][ T6993] rock: sig=0x4654, size=5, remaining=4
[  128.976028][ T6999] loop2: detected capacity change from 0 to 4096
[  129.018038][ T7001] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  129.037379][ T6999] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  129.112835][ T7001] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,grpid,dioread_nolock,mblk_io_submit,nogrpid,usrjquota=,,errors=continue. Quota mode: none.
[  129.149678][ T6999] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  129.234513][ T6999] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  129.288672][ T6999] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  129.298121][ T6879] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  129.332355][ T6999] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  129.441039][ T6999] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  129.492995][ T6999] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  129.594638][ T6999] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  129.631205][ T6989] loop1: detected capacity change from 0 to 32768
[  129.677120][ T6999] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  129.697628][ T6879] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[  129.706321][ T6879] usb 1-1: config 0 has no interface number 0
[  129.712948][ T6879] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  129.739488][ T6999] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  129.782665][ T6989] jfs_rename did not expect dtDelete to return rc = -2
[  129.813222][ T6999] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  129.817572][ T6989] ERROR: (device loop1): jfs_rename: 
[  129.817572][ T6989] 
[  129.914395][ T6879] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  129.942715][ T6879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.944663][ T6989] ERROR: (device loop1): remounting filesystem as read-only
[  129.971917][ T6999] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  129.994755][ T6879] usb 1-1: Product: syz
[  130.009905][ T6879] usb 1-1: Manufacturer: syz
[  130.015324][ T6999] ntfs: volume version 3.1.
[  130.024582][ T6879] usb 1-1: SerialNumber: syz
[  130.050796][ T6879] usb 1-1: config 0 descriptor??
[  130.104455][ T7003] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  130.125206][ T6879] usb-storage 1-1:0.20: USB Mass Storage device detected
[  130.163856][ T6879] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  130.355763][ T6879] scsi host1: usb-storage 1-1:0.20
[  130.457144][ T7019] loop4: detected capacity change from 0 to 32768
[  130.485945][ T7026] loop2: detected capacity change from 0 to 1764
[  130.530134][ T7019] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  130.530134][ T7019] 
[  130.561165][ T6879] usb 1-1: USB disconnect, device number 10
[  130.589417][ T7030] netlink: 'syz.1.1265': attribute type 32 has an invalid length.
[  130.597538][ T7030] __nla_validate_parse: 70 callbacks suppressed
[  130.597556][ T7030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1265'.
[  130.622570][ T4187] read_mapping_page failed!
[  130.628174][ T4187] ERROR: (device loop4): txCommit: 
[  130.628174][ T4187] 
[  130.642140][ T4187] jfs_write_inode: jfs_commit_inode failed!
[  130.697634][ T7034] loop1: detected capacity change from 0 to 512
[  130.728781][ T7026] gfs2: Unexpected value for 'debug'
[  130.823654][ T7034] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback.
[  130.867438][ T7034] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.935758][ T7034] EXT4-fs error (device loop1): ext4_xattr_block_list:719: inode #15: comm syz.1.1267: corrupted xattr block 32
[  130.942038][ T7046] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1272'.
[  131.032353][ T7034] EXT4-fs (loop1): Remounting filesystem read-only
[  131.416558][ T7076] loop2: detected capacity change from 0 to 512
[  131.498398][ T7076] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  131.560714][ T7076] EXT4-fs (loop2): 1 truncate cleaned up
[  131.566678][ T7076] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,init_itable=0x0000000000008001,errors=remount-ro,data_err=ignore,. Quota mode: none.
[  131.696035][ T4251] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  131.944602][ T4251] usb 4-1: Using ep0 maxpacket: 16
[  131.989604][ T7101] netlink: 'syz.1.1297': attribute type 10 has an invalid length.
[  132.056000][ T7105] netlink: 'syz.4.1299': attribute type 1 has an invalid length.
[  132.064421][ T4251] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  132.094134][ T4251] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0
[  132.127908][ T4251] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  132.174298][ T4251] usb 4-1: config 0 interface 0 has no altsetting 0
[  132.253289][ T7111] device veth3 entered promiscuous mode
[  132.312262][ T7074] loop0: detected capacity change from 0 to 32768
[  132.344435][ T4251] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  132.355779][ T7117] loop2: detected capacity change from 0 to 512
[  132.362113][ T4251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.372581][ T4251] usb 4-1: Product: syz
[  132.379403][ T4251] usb 4-1: Manufacturer: syz
[  132.394233][ T4251] usb 4-1: SerialNumber: syz
[  132.410133][ T4251] usb 4-1: config 0 descriptor??
[  132.427551][ T7117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002]
[  132.446628][ T7117] System zones: 1-12
[  132.454580][ T7074] ERROR: (device loop0): dbAlloc: unable to allocate blocks
[  132.454580][ T7074] 
[  132.468017][ T4251] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11
[  132.480715][ T7074] ERROR: (device loop0): remounting filesystem as read-only
[  132.493433][ T7117] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1304: inode #1: comm syz.2.1304: iget: illegal inode #
[  132.534433][ T7074] jfs_mkdir: dtInsert returned -EIO
[  132.554790][ T7117] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1304: error while reading EA inode 1 err=-117
[  132.574671][ T7117] EXT4-fs (loop2): 1 orphan inode deleted
[  132.578089][ T7074] ERROR: (device loop0): jfs_mkdir: 
[  132.578089][ T7074] 
[  132.580588][ T7117] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,journal_dev=0x0000000000000002,debug,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback.
[  132.621160][ T7119] loop1: detected capacity change from 0 to 4096
[  132.677052][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.683390][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.717249][ T7117] EXT4-fs error (device loop2): ext4_lookup:1855: inode #2: comm syz.2.1304: 'file0' linked to parent dir
[  132.789675][ T7119] ntfs: volume version 3.1.
[  132.801711][ T4209] usb 4-1: USB disconnect, device number 11
[  133.283451][ T7121] loop4: detected capacity change from 0 to 32768
[  133.363550][ T7140] loop3: detected capacity change from 0 to 512
[  133.564012][ T7140] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,norecovery,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  133.638813][ T7158] ipt_CLUSTERIP: unknown mode 1850529072
[  133.679878][ T7140] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.072680][ T7187] loop2: detected capacity change from 0 to 512
[  134.133508][ T7192] loop4: detected capacity change from 0 to 512
[  134.236919][ T7192] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback.
[  134.258670][ T7192] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.269156][ T7187] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  134.301494][ T7187] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,grpid,dioread_nolock,mblk_io_submit,nogrpid,usrjquota=,,errors=continue. Quota mode: none.
[  134.345557][ T7192] EXT4-fs error (device loop4): ext4_xattr_block_list:719: inode #15: comm syz.4.1341: corrupted xattr block 32
[  134.376994][ T7192] EXT4-fs (loop4): Remounting filesystem read-only
[  134.773124][ T7222] loop0: detected capacity change from 0 to 64
[  134.823420][ T7176] loop1: detected capacity change from 0 to 32768
[  135.006330][ T7230] hsr0: VLAN not yet supported
[  135.040025][ T5670] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  135.109184][ T7235] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  135.144367][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  135.144383][   T26] audit: type=1800 audit(1738582334.487:7): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1339" name="file1" dev="loop2" ino=15 res=0 errno=0
[  135.314978][ T7244] UBIFS error (pid: 7244): cannot open "/dev/sr0", error -22
[  135.494366][ T5670] usb 5-1: config 1 has an invalid interface number: 17 but max is 1
[  135.547042][ T5670] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.584134][ T5670] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  135.600050][ T5670] usb 5-1: config 1 has no interface number 2
[  135.654905][ T5670] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.724429][ T5670] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  135.780638][ T5670] usb 5-1: config 1 interface 1 has no altsetting 0
[  135.807553][ T7265] loop1: detected capacity change from 0 to 512
[  135.837244][ T7269] netlink: 'syz.2.1377': attribute type 10 has an invalid length.
[  135.850075][ T7260] loop0: detected capacity change from 0 to 4096
[  135.903231][ T7265] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  135.914777][ T7273] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1380'.
[  135.941516][ T7260] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  135.970620][ T7260] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing.
[  135.974997][ T7265] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,grpid,dioread_nolock,mblk_io_submit,nogrpid,usrjquota=,,errors=continue. Quota mode: none.
[  135.979978][ T7260] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  136.009481][ T5670] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  136.018631][ T7260] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  136.018641][ T5670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.018666][ T5670] usb 5-1: Product: syz
[  136.044414][ T5670] usb 5-1: Manufacturer: syz
[  136.049059][ T5670] usb 5-1: SerialNumber: syz
[  136.118795][ T7279] netlink: 'syz.2.1382': attribute type 1 has an invalid length.
[  136.132029][ T7260] ntfs: volume version 3.1.
[  136.324462][ T5670] usb 5-1: selecting invalid altsetting 0
[  136.330368][ T5670] usb 5-1: selecting invalid altsetting 0
[  136.353832][ T5670] cdc_ncm 5-1:1.0: bind() failure
[  136.369141][ T5670] cdc_ncm 5-1:1.17: CDC Union missing and no IAD found
[  136.385328][ T5670] cdc_ncm 5-1:1.17: bind() failure
[  136.399454][ T5670] usb 5-1: selecting invalid altsetting 0
[  136.413264][ T5670] cdc_ncm: probe of 5-1:1.1 failed with error -22
[  136.428165][ T5670] usb 5-1: selecting invalid altsetting 0
[  136.448225][ T5670] cdc_mbim: probe of 5-1:1.1 failed with error -22
[  136.472695][ T5670] usb 5-1: selecting invalid altsetting 0
[  136.486570][ T5670] usbtest: probe of 5-1:1.1 failed with error -22
[  136.513682][ T5670] usb 5-1: USB disconnect, device number 6
[  136.831814][   T26] audit: type=1800 audit(1738582336.167:8): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1376" name="file1" dev="loop1" ino=15 res=0 errno=0
[  137.222275][ T7312] loop4: detected capacity change from 0 to 4096
[  137.236725][ T7292] loop2: detected capacity change from 0 to 32768
[  137.324332][ T4209] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  137.349519][ T7312] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  137.354807][ T7292] XFS: attr2 mount option is deprecated.
[  137.413680][ T7312] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[  137.458853][ T7312] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  137.479294][ T7292] XFS (loop2): Mounting V5 Filesystem
[  137.497555][ T7326] loop0: detected capacity change from 0 to 4096
[  137.503119][ T7312] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  137.574345][ T4209] usb 4-1: Using ep0 maxpacket: 8
[  137.634983][ T7312] ntfs: volume version 3.1.
[  137.652768][ T7292] XFS (loop2): Ending clean mount
[  137.704467][ T4209] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.721826][ T7292] XFS (loop2): Quotacheck needed: Please wait.
[  137.734946][ T4209] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  137.764629][ T7326] ntfs: volume version 3.1.
[  137.818293][ T7292] XFS (loop2): Quotacheck: Done.
[  137.924584][ T4209] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.940448][ T4209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.974712][ T4209] usb 4-1: Product: syz
[  137.979055][ T4209] usb 4-1: Manufacturer: syz
[  138.003705][ T4209] usb 4-1: SerialNumber: syz
[  138.108355][ T4176] XFS (loop2): Unmounting Filesystem
[  138.394323][ T4205] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  138.522071][ T7378] cifs: Unknown parameter '�[���b����IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  138.522071][ T7378] S�Ș�ȞZ�6��'
[  138.629050][ T4209] usb 4-1: USB disconnect, device number 12
[  138.650936][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'.
[  138.703040][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'.
[  138.772466][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'.
[  138.774521][ T4205] usb 2-1: config 0 has an invalid interface number: 20 but max is 0
[  138.810393][ T4205] usb 2-1: config 0 has no interface number 0
[  138.819926][ T4205] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  138.922390][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'.
[  138.938301][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'.
[  138.945567][ T4307] udevd[4307]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  138.951741][ T7394] No such timeout policy "syz0"
[  138.971332][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'.
[  138.999274][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'.
[  139.004470][ T4205] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  139.041776][ T4205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.062563][ T4205] usb 2-1: Product: syz
[  139.067224][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'.
[  139.068442][ T4205] usb 2-1: Manufacturer: syz
[  139.091281][ T4205] usb 2-1: SerialNumber: syz
[  139.109426][ T4205] usb 2-1: config 0 descriptor??
[  139.148172][ T7360] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  139.175475][ T4205] usb-storage 2-1:0.20: USB Mass Storage device detected
[  139.218261][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'.
[  139.228360][ T4205] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  139.404207][ T4205] scsi host1: usb-storage 2-1:0.20
[  139.513496][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.521043][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.703460][ T4208] usb 2-1: USB disconnect, device number 8
[  140.037414][ T7384] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.089825][ T7384] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.443729][ T7384] device macvlan0 left promiscuous mode
[  140.540126][ T7419] loop1: detected capacity change from 0 to 4096
[  140.631447][ T7420] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.652331][ T7419] NILFS error (device loop1): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  140.673017][ T7419] Remounting filesystem read-only
[  140.712837][ T7384] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.722145][ T7384] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.731111][ T7384] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.740342][ T7384] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.132576][ T7436] __nla_validate_parse: 64 callbacks suppressed
[  141.132595][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'.
[  141.174227][ T7436] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1453'.
[  141.501101][ T7463] loop2: detected capacity change from 0 to 1024
[  141.677414][ T7479] loop1: detected capacity change from 0 to 128
[  141.748763][ T4228] hfsplus: b-tree write err: -5, ino 4
[  141.766865][ T7488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1479'.
[  141.941498][ T7499] loop0: detected capacity change from 0 to 1024
[  142.016226][   T26] audit: type=1400 audit(1738582341.347:9): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=7505 comm="syz.3.1488"
[  142.120161][ T7513] netlink: 'syz.2.1491': attribute type 1 has an invalid length.
[  142.166641][ T7499] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,noquota,,errors=continue. Quota mode: none.
[  142.231653][ T7499] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.317473][ T7499] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1484: inode #458752: comm syz.0.1484: iget: illegal inode #
[  142.338446][ T7499] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1484: error while reading EA inode 458752 err=-117
[  142.347145][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'.
[  142.361429][ T7538] cifs: Unknown parameter 'no'�a��N�[G�zob,er��;%j��
[  142.361429][ T7538] ��z�,�@q�������J#�"��h/.�W1ȱ�nNC�"�C�׈�E)�8+����'
[  142.403538][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1502'.
[  142.643022][ T7554] loop3: detected capacity change from 0 to 128
[  142.756486][ T7563] loop4: detected capacity change from 0 to 1764
[  142.824249][ T7554] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  142.843883][ T7554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.974223][ T6874] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  143.171514][ T7541] loop2: detected capacity change from 0 to 32768
[  143.273222][ T7575] loop4: detected capacity change from 0 to 4096
[  143.282529][ T7583] xt_NFQUEUE: number of total queues is 0
[  143.359398][ T7585] loop3: detected capacity change from 0 to 1024
[  143.374449][ T6874] usb 2-1: unable to get BOS descriptor or descriptor too short
[  143.399329][ T7575] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  143.454477][ T6874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  143.463632][ T6874] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  143.477531][ T6874] usb 2-1: config 1 interface 0 has no altsetting 1
[  143.529777][ T7575] EXT4-fs error (device loop4): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.4.1516: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  143.626545][ T1277] hfsplus: b-tree write err: -5, ino 4
[  143.632739][ T7590] afs: Bad value for 'source'
[  143.642069][ T7575] EXT4-fs error (device loop4): ext4_get_first_dir_block:3619: inode #12: comm syz.4.1516: directory missing '..'
[  143.644727][ T6874] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  143.673552][ T6874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.709183][ T6874] usb 2-1: Product: syz
[  143.713396][ T6874] usb 2-1: Manufacturer: syz
[  143.775451][ T6874] usb 2-1: SerialNumber: syz
[  143.866306][ T6874] smsusb:smsusb_probe: board id=8, interface number 0
[  144.075711][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1529'.
[  144.090541][ T6874] smsusb:smsusb_probe: Device initialized with return code -19
[  144.337079][    T7] usb 2-1: USB disconnect, device number 9
[  144.425847][ T7614] loop4: detected capacity change from 0 to 1024
[  144.496294][ T7614] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,noquota,,errors=continue. Quota mode: none.
[  144.571278][ T7614] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.609165][ T7627] bond0 speed is unknown, defaulting to 1000
[  144.636755][ T7614] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1536: inode #458752: comm syz.4.1536: iget: illegal inode #
[  144.658966][ T7614] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1536: error while reading EA inode 458752 err=-117
[  144.844225][ T5670] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  145.123178][ T7641] loop4: detected capacity change from 0 to 128
[  145.166810][ T7641] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  145.177736][ T5670] usb 1-1: Using ep0 maxpacket: 32
[  145.271073][ T7641] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  145.335328][ T7641] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 1029 (only 1 groups)
[  145.348745][    T7] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  145.399303][ T5670] usb 1-1: unable to get BOS descriptor or descriptor too short
[  145.528222][ T5670] usb 1-1: config 7 has an invalid interface number: 187 but max is 0
[  145.529728][ T7664] loop2: detected capacity change from 0 to 512
[  145.547819][ T5670] usb 1-1: config 7 has no interface number 0
[  145.555339][ T5670] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[  145.576730][ T7664] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  145.584377][ T5670] usb 1-1: config 7 interface 187 has no altsetting 0
[  145.586530][  T263] block nbd1: Attempted send on invalid socket
[  145.597423][  T263] blk_update_request: I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  145.609703][ T7668] ADFS-fs (nbd1): error: unable to read block 3, try 0
[  145.684018][ T7664] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,grpid,dioread_nolock,mblk_io_submit,nogrpid,usrjquota=,,errors=continue. Quota mode: none.
[  145.724536][    T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.760163][    T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  145.794489][ T5670] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  145.809274][ T5670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.817591][ T5670] usb 1-1: Product: syz
[  145.821872][ T5670] usb 1-1: Manufacturer: syz
[  145.826874][ T5670] usb 1-1: SerialNumber: syz
[  145.856315][ T7625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  145.863484][ T7675] loop1: detected capacity change from 0 to 512
[  145.981705][ T7675] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  145.994392][    T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  146.003462][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.018018][ T7675] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.030016][    T7] usb 4-1: Product: syz
[  146.038799][    T7] usb 4-1: Manufacturer: syz
[  146.043512][    T7] usb 4-1: SerialNumber: syz
[  146.104426][ T5670] usb 1-1: Limiting number of CPorts to U8_MAX
[  146.111821][ T5670] usb 1-1: Unknown endpoint type found, address 0x07
[  146.139774][ T5670] usb 1-1: Not enough endpoints found in device, aborting!
[  146.176088][ T7685] overlayfs: unrecognized mount option "\%)#&" or missing value
[  146.368691][ T5670] usb 1-1: USB disconnect, device number 11
[  146.384407][    T7] usb 4-1: 0:2 : does not exist
[  146.443681][    T7] usb 4-1: USB disconnect, device number 13
[  146.506974][ T7695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1572'.
[  146.590994][   T26] audit: type=1800 audit(1738582345.927:10): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1558" name="file1" dev="loop2" ino=15 res=0 errno=0
[  146.608210][ T7697] rdma_rxe: ignoring netdev event = 32 for bond0
[  146.657983][ T7697] rdma_rxe: ignoring netdev event = 12 for bond0
[  146.703534][ T4307] udevd[4307]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  146.855552][ T7705] binder: 7704:7705 ioctl c018620c 0 returned -14
[  146.919224][ T7707] netlink: 'syz.4.1579': attribute type 10 has an invalid length.
[  146.947856][ T7707] device geneve0 entered promiscuous mode
[  146.974672][ T7707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.017957][ T7713] netlink: 'syz.1.1581': attribute type 1 has an invalid length.
[  147.034132][ T7707] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.073329][ T7707] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.114160][ T7707] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.186515][ T7707] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  147.382783][ T7729] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  147.424516][ T7729] blk_update_request: I/O error, dev loop4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  147.486703][ T7729] Mount JFS Failure: -5
[  147.506744][ T7729] jfs_mount failed w/return code = -5
[  147.682639][ T7743] loop4: detected capacity change from 0 to 256
[  147.845292][ T7745] bond0 speed is unknown, defaulting to 1000
[  148.020012][ T7743] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  148.058466][ T7743] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  148.099879][ T7743] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  148.123784][ T7743] UDF-fs: Scanning with blocksize 512 failed
[  148.155599][ T7755] [U] 
[  148.158719][ T7755] [U] 
[  148.161428][ T7755] [U] 
[  148.164131][ T7755] [U] 
[  148.180049][ T7743] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  148.228838][ T7743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.231234][ T7755] [U] 
[  148.240371][ T7755] [U] 
[  148.243091][ T7755] [U] 
[  148.245808][ T7755] [U] 
[  148.332581][ T7755] [U] 
[  148.335353][ T7755] [U] 
[  148.338074][ T7755] [U] 
[  148.431570][ T7751] [U] 
[  149.362842][ T7797] SET target dimension over the limit!
[  149.567964][ T7769] loop0: detected capacity change from 0 to 32768
[  149.641914][ T7769] jfs_rename: dtInsert returned -EIO
[  150.092128][ T7829] loop4: detected capacity change from 0 to 16
[  150.179369][ T7829] erofs: (device loop4): mounted with root inode @ nid 36.
[  150.221973][ T7829] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  150.281877][ T7829] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -57 in[61, 4035] out[1851]
[  150.346497][ T7829] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117]
[  150.443587][ T7847] loop3: detected capacity change from 0 to 64
[  150.614219][ T4208] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  150.680233][ T7857] damon: invalid nr_regions.  min (3) > max (0)
[  150.969141][ T4208] usb 2-1: not running at top speed; connect to a high speed hub
[  151.044213][ T4209] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  151.044430][   T21] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  151.064806][ T4208] usb 2-1: config 1 interface 0 altsetting 190 endpoint 0x3 has invalid wMaxPacketSize 0
[  151.075040][ T4208] usb 2-1: config 1 interface 0 altsetting 190 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  151.075087][ T4208] usb 2-1: config 1 interface 0 has no altsetting 0
[  151.177108][ T7879] loop3: detected capacity change from 0 to 1024
[  151.194184][ T5669] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  151.218569][ T7879] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000088,errors=continue,lazytime,max_dir_size_kb=0x0000000000000009,noload,data_err=abort,,errors=continue. Quota mode: writeback.
[  151.274449][ T4208] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40
[  151.283680][ T4208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.292113][ T4208] usb 2-1: Product: syz
[  151.294380][ T4209] usb 5-1: Using ep0 maxpacket: 8
[  151.296389][ T4208] usb 2-1: Manufacturer: syz
[  151.306409][ T4208] usb 2-1: SerialNumber: syz
[  151.424421][ T4209] usb 5-1: config 1 has an invalid interface number: 6 but max is 0
[  151.435028][ T4209] usb 5-1: config 1 has no interface number 0
[  151.479431][   T21] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  151.503292][   T21] usb 1-1: config 0 has no interface number 0
[  151.530128][   T21] usb 1-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023
[  151.536623][ T7891] mmap: syz.3.1668 (7891): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  151.551689][   T21] usb 1-1: config 0 interface 128 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64
[  151.581564][   T21] usb 1-1: config 0 interface 128 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  151.594759][   T21] usb 1-1: config 0 interface 128 has no altsetting 0
[  151.600745][ T4209] usb 5-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b
[  151.621106][ T4209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.629559][ T4209] usb 5-1: Product: syz
[  151.633838][ T4209] usb 5-1: Manufacturer: syz
[  151.638782][ T4209] usb 5-1: SerialNumber: syz
[  151.645626][ T5669] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  151.657495][ T5669] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  151.670220][ T4208] usb 2-1: bad CDC descriptors
[  151.688053][ T5669] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64
[  151.700392][ T5669] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  151.713930][ T4208] usbtest 2-1:1.0: couldn't get endpoints, -71
[  151.720583][ T4208] usbtest: probe of 2-1:1.0 failed with error -71
[  151.727315][ T5669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.745076][ T4208] usb 2-1: USB disconnect, device number 10
[  151.764489][ T7867] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  151.779018][ T7867] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  151.786436][   T21] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91
[  151.804137][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.840212][   T21] usb 1-1: Product: syz
[  151.844668][   T21] usb 1-1: Manufacturer: syz
[  151.858859][   T21] usb 1-1: SerialNumber: syz
[  151.877491][   T21] usb 1-1: config 0 descriptor??
[  151.947112][   T21] radio-si470x 1-1:0.128: could not find interrupt in endpoint
[  151.954371][ T4209] usb 5-1: palm_os_4_probe - error -71 getting connection info
[  151.962288][ T4209] visor 5-1:1.6: Handspring Visor / Palm OS converter detected
[  151.992160][   T21] radio-si470x: probe of 1-1:0.128 failed with error -5
[  152.004569][ T4209] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  152.035008][   T21] usbhid 1-1:0.128: couldn't find an input interrupt endpoint
[  152.043129][ T4209] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  152.100378][   T21] usb 3-1: USB disconnect, device number 7
[  152.114977][ T4209] usb 5-1: USB disconnect, device number 7
[  152.124921][ T7903] [U] 
[  152.127662][ T7903] [U] 
[  152.130380][ T7903] [U] 
[  152.133095][ T7903] [U] 
[  152.181786][ T7903] [U] 
[  152.184544][ T7903] [U] 
[  152.187263][ T7903] [U] 
[  152.189979][ T7903] [U] 
[  152.192993][ T4209] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  152.240470][ T4209] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  152.245563][ T4208] usb 1-1: USB disconnect, device number 12
[  152.280064][ T4209] visor 5-1:1.6: device disconnected
[  152.282310][ T7903] [U] 
[  152.288110][ T7903] [U] 
[  152.290830][ T7903] [U] 
[  152.341393][ T7902] [U] 
[  152.480086][ T7913] loop4: detected capacity change from 0 to 256
[  152.892444][ T7933] proc: Bad value for 'gid'
[  153.108870][ T7946] tc_dump_action: action bad kind
[  153.324253][ T7964] capability: warning: `syz.3.1703' uses 32-bit capabilities (legacy support in use)
[  153.646122][ T7976] loop0: detected capacity change from 0 to 4096
[  153.660446][ T7986] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1714'.
[  153.807912][ T7976] ntfs: (device loop0): parse_options(): NLS character set maccentHuro not found. Using previous one cp857.
[  153.846812][ T7976] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  153.850034][ T7999] loop2: detected capacity change from 0 to 256
[  153.950916][ T7976] ntfs: volume version 3.1.
[  153.975770][ T7999] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  153.991964][ T7976] ntfs: (device loop0): ntfs_index_lookup(): Corrupt index.  Aborting lookup.
[  154.018375][ T7976] ntfs: (device loop0): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed.
[  154.032748][  T150] block nbd1: Attempted send on invalid socket
[  154.038262][ T7999] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  154.040801][  T150] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  154.054350][ T7976] ntfs: (device loop0): load_system_files(): Failed to mark quotas out of date.  Mounting read-only.  Run chkdsk.
[  154.072392][ T8005] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32
[  154.136083][ T7976] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  154.146159][ T7976] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  154.156276][ T7976] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  154.378898][ T8018] loop3: detected capacity change from 0 to 256
[  154.969516][ T8060] loop0: detected capacity change from 0 to 512
[  155.110337][ T8060] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  155.124374][ T8060] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002]
[  155.132951][ T8060] System zones: 0-2, 18-18, 34-35
[  155.185354][ T8060] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback.
[  155.301740][ T8069] loop3: detected capacity change from 0 to 4096
[  155.383554][ T8079] loop4: detected capacity change from 0 to 2048
[  155.398442][ T8069] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  155.529089][ T8069] ntfs3: loop3: ino=1e, "file1" encrypted i/o not supported
[  155.546203][   T26] audit: type=1800 audit(1738582354.887:11): pid=8069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1755" name="file1" dev="loop3" ino=30 res=0 errno=0
[  155.573996][ T8079] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1759: bad orphan inode 8192
[  155.616124][ T8079] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  155.623608][ T8090] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.688330][ T8090] bond0: (slave rose0): Enslaving as an active interface with an up link
[  155.697403][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  156.017799][ T8119] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1773'.
[  156.285852][ T8143] loop1: detected capacity change from 0 to 1024
[  156.344646][ T8143] EXT4-fs (loop1): Ignoring removed nobh option
[  156.389107][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1789'.
[  156.430604][ T8143] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nobh,,errors=continue. Quota mode: writeback.
[  156.457581][ T8150] openvswitch: netlink: EtherType 0 is less than min 600
[  156.527772][ T8143] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present
[  156.580560][ T8143] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.1784: Failed to acquire dquot type 1
[  156.934796][ T8176] loop0: detected capacity change from 0 to 4096
[  157.063855][ T8176] ntfs: volume version 3.1.
[  157.101312][ T8198] loop3: detected capacity change from 0 to 2048
[  157.145080][ T8205] binder: 8204:8205 ioctl c018620c 20000040 returned -22
[  157.162216][ T8194] loop1: detected capacity change from 0 to 4096
[  157.172449][ T8198] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  157.233588][ T8198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.323966][ T8194] ntfs3: loop1: ino=5, "/" directory corrupted
[  157.376575][ T8215] loop2: detected capacity change from 0 to 512
[  157.448233][ T8215] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  157.576017][ T8215] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #17: comm syz.2.1813: iget: bad i_size value: -6917529027641081756
[  157.670264][ T8215] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1813: couldn't read orphan inode 17 (err -117)
[  157.683457][ T8215] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  157.860105][ T8215] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1813: bg 0: block 65: padding at end of block bitmap is not set
[  157.944645][ T8215] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.1813: Failed to acquire dquot type 0
[  157.970442][ T8239] loop3: detected capacity change from 0 to 2048
[  158.114673][ T8239] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.1822: bad orphan inode 8192
[  158.174631][ T8239] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  158.560423][ T8278] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 50506 - 0
[  158.766673][ T8287] loop4: detected capacity change from 0 to 256
[  158.794144][ T8278] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 50506 - 0
[  158.832597][ T8290] loop0: detected capacity change from 0 to 2048
[  158.839565][ T8278] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 50506 - 0
[  158.848723][ T8278] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 50506 - 0
[  158.857892][ T8278] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 42447 - 0
[  158.867848][ T8278] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 42447 - 0
[  158.876971][ T8278] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 42447 - 0
[  158.893097][ T8278] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 42447 - 0
[  158.902655][ T8278] device geneve2 entered promiscuous mode
[  158.928729][ T8282] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  158.933165][ T8290] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1841: bad orphan inode 8192
[  158.951543][ T8290] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  159.163801][ T8305] loop2: detected capacity change from 0 to 8
[  159.173110][ T8303] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1846'.
[  159.287459][ T8305] SQUASHFS error: zlib decompression failed, data probably corrupt
[  159.338542][ T8305] SQUASHFS error: Failed to read block 0x9b: -5
[  159.362641][ T8305] SQUASHFS error: Unable to read metadata cache entry [99]
[  159.380745][ T8305] SQUASHFS error: Unable to read inode 0x127
[  159.411381][ T8316] loop4: detected capacity change from 0 to 164
[  159.420063][ T8313] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[  159.526073][ T8323] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  160.061386][ T8351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1870'.
[  160.115710][ T8351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1870'.
[  160.126891][ T8346] loop2: detected capacity change from 0 to 4096
[  160.244208][ T8346] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  160.245011][ T8361] kAFS: unparsable volume name
[  160.371263][ T8346] ntfs3: loop2: ino=1e, "file1" encrypted i/o not supported
[  160.410141][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  160.410157][   T26] audit: type=1800 audit(1738582359.747:12): pid=8346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1867" name="file1" dev="loop2" ino=30 res=0 errno=0
[  160.519797][ T8331] loop3: detected capacity change from 0 to 32768
[  160.602851][ T8378] loop2: detected capacity change from 0 to 1024
[  160.604852][ T8331] XFS: noikeep mount option is deprecated.
[  160.653239][ T8378] EXT4-fs (loop2): Ignoring removed nobh option
[  160.716109][ T8378] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nobh,,errors=continue. Quota mode: writeback.
[  160.758850][ T8331] XFS (loop3): Mounting V5 Filesystem
[  160.781189][ T8378] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present
[  160.847582][ T8378] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  160.857308][ T8378] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.1879: Failed to acquire dquot type 1
[  160.870735][ T8393] xt_TCPMSS: Only works on TCP SYN packets
[  161.117002][ T8331] XFS (loop3): Ending clean mount
[  161.141326][ T8331] XFS (loop3): Quotacheck needed: Please wait.
[  161.217727][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'.
[  161.235411][ T8416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  161.267221][ T8331] XFS (loop3): Quotacheck: Done.
[  161.271247][ T8416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  161.299958][ T8416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  161.322565][ T8416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  161.394393][ T4174] XFS (loop3): Unmounting Filesystem
[  161.999165][ T8454] loop1: detected capacity change from 0 to 256
[  162.163331][ T8454] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  162.402435][ T8462] loop3: detected capacity change from 0 to 512
[  162.505649][ T8466] loop1: detected capacity change from 0 to 128
[  162.506322][ T8462] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  162.551527][ T8462] EXT4-fs (loop3): orphan cleanup on readonly fs
[  162.584222][ T8462] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5
[  162.586853][ T8446] loop0: detected capacity change from 0 to 32768
[  162.674363][ T8462] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  162.688786][ T8462] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.1920: Failed to acquire dquot type 1
[  162.694022][ T8446] 
[  162.694022][ T8446]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  162.694022][ T8446] 
[  162.700852][ T8451] loop4: detected capacity change from 0 to 32768
[  162.740150][ T8462] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1920: bg 0: block 40: padding at end of block bitmap is not set
[  162.753537][ T8452] loop2: detected capacity change from 0 to 32768
[  162.770832][ T8446] ERROR: (device loop0): ea_get: invalid ea.flag
[  162.770832][ T8446] 
[  162.774762][ T8462] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  162.785437][ T8446] ERROR: (device loop0): remounting filesystem as read-only
[  162.792212][ T8462] EXT4-fs (loop3): 1 truncate cleaned up
[  162.803093][ T8462] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback.
[  162.841181][ T8452] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1915 (8452)
[  162.866603][ T8451] 
[  162.866603][ T8451]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  162.866603][ T8451] 
[  162.897166][ T8452] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  162.922087][ T4172] 
[  162.922087][ T4172]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  162.922087][ T4172] 
[  162.957841][ T8452] BTRFS info (device loop2): force zlib compression, level 3
[  163.011119][ T4172] 
[  163.011119][ T4172]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.011119][ T4172] 
[  163.034594][ T8452] BTRFS info (device loop2): force clearing of disk cache
[  163.041766][ T8452] BTRFS info (device loop2): setting nodatasum
[  163.063328][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'.
[  163.125408][ T8452] BTRFS info (device loop2): allowing degraded mounts
[  163.152204][ T8473] loop3: detected capacity change from 0 to 256
[  163.155159][ T8452] BTRFS info (device loop2): enabling disk space caching
[  163.182166][ T8452] BTRFS info (device loop2): disk space caching is enabled
[  163.204275][ T8452] BTRFS info (device loop2): has skinny extents
[  163.512672][ T8452] BTRFS info (device loop2): clearing free space tree
[  163.543924][ T8452] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  163.548232][   T26] audit: type=1400 audit(1738582362.887:13): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=8505 comm="syz.3.1931"
[  163.613940][ T8452] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  163.723039][ T8452] BTRFS info (device loop2): balance: start -susage=0..15,drange=18446744073709551614..7,limit=9..0
[  163.756720][ T8452] BTRFS info (device loop2): balance: ended with status: 0
[  163.885293][ T6874] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  164.047559][ T8526] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  164.143643][ T6874] usb 4-1: Using ep0 maxpacket: 8
[  164.282674][ T8537] ip6t_srh: unknown srh match flags  5294
[  164.424519][ T6874] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  164.463022][ T6874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.495120][ T6874] usb 4-1: Product: syz
[  164.499728][ T6874] usb 4-1: Manufacturer: syz
[  164.543187][ T6874] usb 4-1: SerialNumber: syz
[  164.582650][ T6874] usb 4-1: config 0 descriptor??
[  164.854294][ T6874] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  164.855858][ T8566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1958'.
[  165.010934][ T8574] loop1: detected capacity change from 0 to 256
[  165.064442][ T6874] usb write operation failed. (-71)
[  165.083918][ T6874] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  165.124914][ T6874] dvbdev: DVB: registering new adapter (Terratec H7)
[  165.153784][ T6874] usb 4-1: media controller created
[  165.174209][ T6874] usb read operation failed. (-71)
[  165.194231][ T6874] usb write operation failed. (-71)
[  165.203817][ T6874] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5
[  165.246211][ T8539] loop0: detected capacity change from 0 to 32768
[  165.270779][ T6874] usb 4-1: USB disconnect, device number 14
[  165.685149][ T8576] loop4: detected capacity change from 0 to 32768
[  165.705609][ T8584] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1969'.
[  165.814439][ T8576] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1964 (8576)
[  165.844034][ T8572] loop2: detected capacity change from 0 to 32768
[  165.930056][ T8576] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  165.967744][ T8576] BTRFS info (device loop4): using free space tree
[  166.014575][ T8576] BTRFS info (device loop4): has skinny extents
[  166.124210][ T8572] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  166.170365][ T8572] (syz.2.1963,8572,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  166.183311][ T8572] ocfs2: Unmounting device (7,2) on (node local)
[  166.325650][ T8576] BTRFS info (device loop4): enabling ssd optimizations
[  166.421079][ T8582] loop1: detected capacity change from 0 to 32768
[  166.434384][ T6874] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  166.543373][ T8582] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1968 (8582)
[  166.804997][ T6874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  166.828717][ T6874] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  166.852636][ T8582] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  166.897357][ T8582] BTRFS info (device loop1): using free space tree
[  166.905999][ T6874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  166.933724][ T8582] BTRFS info (device loop1): has skinny extents
[  166.954426][ T6874] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  166.979426][ T6874] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  166.997835][ T6874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.088478][ T6874] usb 1-1: config 0 descriptor??
[  167.104572][ T8655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1988'.
[  167.134266][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1988'.
[  167.162991][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'.
[  167.179527][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'.
[  167.346372][ T8582] BTRFS info (device loop1): enabling ssd optimizations
[  167.356662][ T8674] ALSA: mixer_oss: invalid OSS volume 'u'
[  167.364475][ T6874] hdpvr 1-1:0.0: firmware version 0x8 dated �)��˟��=�J�+n�oKܐo5��f�o�ɠ����O��bL
[  167.392278][ T8681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1993'.
[  167.428856][ T8681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1993'.
[  167.472442][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1993'.
[  167.584321][ T6874] hdpvr 1-1:0.0: device init failed
[  167.589648][ T6874] hdpvr: probe of 1-1:0.0 failed with error -12
[  167.625000][ T6874] usb 1-1: USB disconnect, device number 13
[  167.832695][ T8686] loop4: detected capacity change from 0 to 8192
[  167.925920][ T8686] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  167.987799][ T8686] REISERFS (device loop4): using ordered data mode
[  167.999336][ T8686] reiserfs: using flush barriers
[  168.017773][ T8701] loop1: detected capacity change from 0 to 2048
[  168.024394][ T8686] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  168.041232][ T8686] REISERFS (device loop4): checking transaction log (loop4)
[  168.186907][ T8701] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  168.236691][ T8701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.298954][ T8686] REISERFS (device loop4): Using tea hash to sort names
[  168.314938][ T8717] loop3: detected capacity change from 0 to 512
[  168.337108][ T8686] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  168.628488][ T8730] device bond1 entered promiscuous mode
[  168.634686][ T8730] 8021q: adding VLAN 0 to HW filter on device bond1
[  168.693365][ T8730] bond1 (unregistering): Released all slaves
[  168.732849][ T8741] loop3: detected capacity change from 0 to 64
[  169.087853][ T8758] loop1: detected capacity change from 0 to 256
[  169.090325][ T8750] device bond1 entered promiscuous mode
[  169.122240][ T8750] 8021q: adding VLAN 0 to HW filter on device bond1
[  169.187654][ T8758] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x3eebdab2, utbl_chksum : 0xe619d30d)
[  169.204448][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2029'.
[  169.325699][ T8758] exFAT-fs (loop1): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5)
[  169.368922][ T8758] exFAT-fs (loop1): Filesystem has been set read-only
[  169.394755][ T8773] netlink: 'syz.0.2036': attribute type 3 has an invalid length.
[  169.513061][ T8775] netlink: 'syz.3.2039': attribute type 13 has an invalid length.
[  169.577714][ T8781] raw_sendmsg: syz.4.2041 forgot to set AF_INET. Fix it!
[  170.040031][ T8809] loop0: detected capacity change from 0 to 64
[  170.163170][ T8813] loop1: detected capacity change from 0 to 64
[  170.212468][ T8815] netlink: 'syz.4.2058': attribute type 3 has an invalid length.
[  170.240105][ T8815] __nla_validate_parse: 1 callbacks suppressed
[  170.240122][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2058'.
[  170.352260][ T8797] loop2: detected capacity change from 0 to 32768
[  170.648089][ T8797] XFS (loop2): Mounting V5 Filesystem
[  170.867366][ T8797] XFS (loop2): Ending clean mount
[  170.887299][ T8797] XFS (loop2): Quotacheck needed: Please wait.
[  170.997516][ T8797] XFS (loop2): Quotacheck: Done.
[  171.048814][ T4176] XFS (loop2): Unmounting Filesystem
[  171.512794][ T8873] xt_TCPMSS: Only works on TCP SYN packets
[  171.711630][ T8885] kernel read not supported for file /� lhOb��~�
�h����3��J��y�x����v�L�=Q�R�n��$h���f�ǹ���W�FGr���q�ςû~QV7��"qH���dNn9���D0�)g
[  171.711630][ T8885] .j``~��N@�ۀ� �W�ct��\x�|�b�E�VyS$��PAXg�8mRC�l�Et�T�TS_�m)ל- (pid: 8885 comm: syz.1.2085)
[  171.726157][ T8883] mkiss: ax0: crc mode is auto.
[  171.775213][ T8888] loop4: detected capacity change from 0 to 1024
[  171.806168][   T26] audit: type=1800 audit(1738582371.147:14): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2085" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B72468AECCDC668015C7B9949DF357A346477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E21197C9644E6E39B503831CDD4430AA29670A2E6A60601F7EE9E44E40BBDB80CF1E209E571302E26374E9F65C78957CEA62CE45EF5679532492B550415867A6386D5243936C864574F954ED9054535FF86D0729D79C2D dev="mqueue" ino=46019 res=0 errno=0
[  172.320884][ T8915] loop4: detected capacity change from 0 to 4096
[  172.426750][ T8915] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  172.547871][ T8915] ntfs3: loop4: failed to convert "c46c" to cp1250
[  172.664220][ T6879] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  172.731240][ T8944] loop1: detected capacity change from 0 to 64
[  173.029318][ T8957] loop1: detected capacity change from 0 to 512
[  173.044573][ T6879] usb 3-1: config 0 has an invalid interface number: 176 but max is 2
[  173.057732][ T6879] usb 3-1: config 0 has no interface number 1
[  173.088177][ T6879] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  173.134180][ T6879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.153619][ T8962] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2117'.
[  173.182943][ T6879] usb 3-1: config 0 descriptor??
[  173.351013][ T8957] EXT4-fs (loop1): Test dummy encryption mode enabled
[  173.365108][ T8957] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  173.430950][ T8957] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2115: bg 0: block 255: padding at end of block bitmap is not set
[  173.434887][ T8957] EXT4-fs (loop1): 1 truncate cleaned up
[  173.434916][ T8957] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,test_dummy_encryption,,errors=continue. Quota mode: none.
[  173.464344][ T6879] qcserial 3-1:0.2: Qualcomm USB modem converter detected
[  173.609629][ T8985] loop3: detected capacity change from 0 to 512
[  173.706346][ T8985] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  173.736810][ T8985] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2127: inode #13: comm syz.3.2127: iget: illegal inode #
[  173.740167][ T6879] usb 3-1: USB disconnect, device number 8
[  173.762567][ T8957] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  173.773085][ T8985] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2127: couldn't read orphan inode 13 (err -117)
[  173.802185][ T8985] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,i_version,noblock_validity,abort,mblk_io_submit,nogrpid,jqfmt=vfsv0,delalloc,nolazytime,,errors=continue. Quota mode: none.
[  173.825215][ T6879] qcserial 3-1:0.2: device disconnected
[  173.833081][ T8985] EXT4-fs error (device loop3): ext4_resize_begin:61: comm syz.3.2127: resize_inode disabled but reserved GDT blocks non-zero
[  173.857558][ T8998] mkiss: ax0: crc mode is auto.
[  173.871593][ T8993] loop0: detected capacity change from 0 to 4096
[  173.954433][ T8993] NILFS (loop0): mounting unchecked fs
[  173.960360][ T8993] NILFS (loop0): recovery required for readonly filesystem
[  173.994433][ T8993] NILFS (loop0): write access will be enabled during recovery
[  174.022900][ T8993] NILFS (loop0): invalid segment: Checksum error in segment payload
[  174.053593][ T8993] NILFS (loop0): trying rollback from an earlier position
[  174.105377][ T8993] NILFS (loop0): norecovery option specified, skipping roll-forward recovery
[  174.178647][ T8993] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state
[  174.444210][ T6879] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  174.486718][ T9028] mkiss: ax0: crc mode is auto.
[  174.654173][ T8540] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  174.660403][ T4207] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  174.715905][ T9037] netlink: 'syz.2.2149': attribute type 2 has an invalid length.
[  174.814332][ T6879] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  174.822656][ T6879] usb 5-1: config 0 has an invalid descriptor of length 224, skipping remainder of the config
[  174.845919][ T6879] usb 5-1: config 0 has no interface number 0
[  174.944186][ T4207] usb 1-1: Using ep0 maxpacket: 8
[  175.024311][ T6879] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  175.033674][ T8540] usb 4-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config
[  175.046555][ T6879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.073959][ T6879] usb 5-1: Product: syz
[  175.084496][ T6879] usb 5-1: Manufacturer: syz
[  175.098979][ T6879] usb 5-1: SerialNumber: syz
[  175.123379][ T6879] usb 5-1: config 0 descriptor??
[  175.192391][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'.
[  175.224460][ T8540] usb 4-1: New USB device found, idVendor=e20c, idProduct=11e1, bcdDevice=1d.c9
[  175.233551][ T8540] usb 4-1: New USB device strings: Mfr=47, Product=7, SerialNumber=3
[  175.254495][ T4207] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  175.260188][ T8540] usb 4-1: Product: syz
[  175.268322][ T8540] usb 4-1: Manufacturer: syz
[  175.270737][ T4207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.273018][ T8540] usb 4-1: SerialNumber: syz
[  175.286353][ T4207] usb 1-1: Product: syz
[  175.290953][ T4207] usb 1-1: Manufacturer: syz
[  175.294908][ T8540] usb 4-1: config 0 descriptor??
[  175.297063][ T4207] usb 1-1: SerialNumber: syz
[  175.309066][ T4207] usb 1-1: config 0 descriptor??
[  175.351823][ T8540] rndis_wlan: probe of 4-1:0.0 failed with error -22
[  175.369269][ T8540] rndis_host: probe of 4-1:0.0 failed with error -22
[  175.424333][ T6879] usb 5-1: Found Unit with invalid ID 0.
[  175.434508][ T6879] usb 5-1: USB disconnect, device number 8
[  175.551349][ T8540] usb 4-1: USB disconnect, device number 15
[  175.564633][ T4207] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  175.632975][ T9080] usb usb8: usbfs: process 9080 (syz.2.2170) did not claim interface 0 before use
[  175.683388][ T9082] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2171'.
[  175.694903][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2171'.
[  175.703913][ T9082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2171'.
[  175.713074][ T9082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2171'.
[  175.774401][ T4207] usb write operation failed. (-71)
[  175.783750][ T4207] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  175.794876][ T4207] dvbdev: DVB: registering new adapter (Terratec H7)
[  175.801762][ T4207] usb 1-1: media controller created
[  175.829581][ T4207] usb read operation failed. (-71)
[  175.864196][ T4207] usb write operation failed. (-71)
[  175.885790][ T4207] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5
[  175.904023][ T4207] usb 1-1: USB disconnect, device number 14
[  176.009802][ T9092] autofs4:pid:9092:autofs_fill_super: called with bogus options
[  176.102973][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2178'.
[  176.258056][ T9103] loop4: detected capacity change from 0 to 256
[  176.327394][ T9103] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x1782a9fb, utbl_chksum : 0xe619d30d)
[  176.864141][ T8540] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  177.016416][ T9105] loop2: detected capacity change from 0 to 32768
[  177.124645][ T8540] usb 1-1: Using ep0 maxpacket: 32
[  177.136981][ T9105] (syz.2.2182,9105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  177.185163][ T9105] (syz.2.2182,9105,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  177.197281][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2207'.
[  177.250476][ T8540] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  177.275760][ T8540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.289337][ T8540] usb 1-1: config 0 descriptor??
[  177.348605][ T9105] JBD2: Ignoring recovery information on journal
[  177.358681][ T8540] gspca_main: sunplus-2.14.0 probing 041e:400b
[  177.444686][ T9105] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  177.564791][ T9174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2216'.
[  177.783807][ T4176] ocfs2: Unmounting device (7,2) on (node local)
[  177.801159][ T8540] gspca_sunplus: reg_w_riv err -71
[  177.811626][ T8540] sunplus: probe of 1-1:0.0 failed with error -71
[  177.864337][ T8540] usb 1-1: USB disconnect, device number 15
[  177.938752][ T9186] loop4: detected capacity change from 0 to 256
[  178.067659][ T9186] FAT-fs (loop4): Directory bread(block 64) failed
[  178.104293][ T9186] FAT-fs (loop4): Directory bread(block 65) failed
[  178.123112][ T9186] FAT-fs (loop4): Directory bread(block 66) failed
[  178.151176][ T9186] FAT-fs (loop4): Directory bread(block 67) failed
[  178.168287][ T9186] FAT-fs (loop4): Directory bread(block 68) failed
[  178.188474][ T9186] FAT-fs (loop4): Directory bread(block 69) failed
[  178.213345][ T9186] FAT-fs (loop4): Directory bread(block 70) failed
[  178.226837][ T9194] netlink: 'syz.3.2226': attribute type 1 has an invalid length.
[  178.237994][ T9186] FAT-fs (loop4): Directory bread(block 71) failed
[  178.256619][ T9186] FAT-fs (loop4): Directory bread(block 72) failed
[  178.273537][ T9186] FAT-fs (loop4): Directory bread(block 73) failed
[  178.403376][ T9202] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  178.542884][ T9179] loop1: detected capacity change from 0 to 32768
[  178.813339][ T9179] XFS (loop1): Mounting V5 Filesystem
[  178.912495][ T9228] netlink: 'syz.2.2239': attribute type 2 has an invalid length.
[  178.944331][ T9228] netlink: 'syz.2.2239': attribute type 3 has an invalid length.
[  178.952465][ T9228] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2239'.
[  179.002854][ T9206] loop3: detected capacity change from 0 to 32768
[  179.032019][ T9179] XFS (loop1): Ending clean mount
[  179.064754][ T9206] (syz.3.2232,9206,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  179.066119][ T9179] XFS (loop1): Quotacheck needed: Please wait.
[  179.093409][ T9206] (syz.3.2232,9206,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  179.137624][ T9238] tmpfs: Bad value for 'mpol'
[  179.172802][ T9206] JBD2: Ignoring recovery information on journal
[  179.303716][ T9206] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  179.342156][ T9179] XFS (loop1): Quotacheck: Done.
[  179.452252][ T9248] loop2: detected capacity change from 0 to 4096
[  179.482585][ T4174] ocfs2: Unmounting device (7,3) on (node local)
[  179.534916][ T4166] XFS (loop1): Unmounting Filesystem
[  179.545727][ T9254] loop4: detected capacity change from 0 to 256
[  179.561880][ T9248] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  179.702219][ T9248] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  179.899058][ T9263] loop3: detected capacity change from 0 to 256
[  179.899061][ T9264] loop0: detected capacity change from 0 to 64
[  180.009642][ T9263] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x1782a9fb, utbl_chksum : 0xe619d30d)
[  180.028428][ T9268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2260'.
[  180.166009][ T9272] loop4: detected capacity change from 0 to 256
[  180.225990][ T9272] exfat: Deprecated parameter 'namecase'
[  180.286079][ T9272] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  180.423239][ T9282] loop1: detected capacity change from 0 to 4096
[  180.511409][ T9293] loop3: detected capacity change from 0 to 128
[  180.682322][ T9293] FAT-fs (loop3): Directory bread(block 3236) failed
[  180.719842][ T9293] FAT-fs (loop3): Directory bread(block 3237) failed
[  180.761646][ T9293] FAT-fs (loop3): Directory bread(block 3238) failed
[  180.801926][ T9293] FAT-fs (loop3): Directory bread(block 3239) failed
[  180.818891][ T9293] FAT-fs (loop3): Directory bread(block 3240) failed
[  180.834263][ T5673] Bluetooth: hci2: command 0x0406 tx timeout
[  180.834309][ T6879] Bluetooth: hci1: command 0x0406 tx timeout
[  180.854305][ T5673] Bluetooth: hci3: command 0x0406 tx timeout
[  180.854359][ T9293] FAT-fs (loop3): Directory bread(block 3241) failed
[  180.894401][ T9293] FAT-fs (loop3): Directory bread(block 3242) failed
[  180.921197][ T9293] FAT-fs (loop3): Directory bread(block 3243) failed
[  181.005359][ T9293] FAT-fs (loop3): Directory bread(block 3236) failed
[  181.044389][ T9293] FAT-fs (loop3): Directory bread(block 3237) failed
[  181.123222][ T9316] loop1: detected capacity change from 0 to 512
[  181.214208][ T9316] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  181.279326][ T9278] loop0: detected capacity change from 0 to 32768
[  181.338713][ T9316] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.2280: casefold flag without casefold feature
[  181.468965][ T9316] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2280: couldn't read orphan inode 15 (err -117)
[  181.509676][ T9278] XFS (loop0): Mounting V5 Filesystem
[  181.543545][ T9316] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  181.635676][ T9311] loop4: detected capacity change from 0 to 32768
[  181.686801][ T9316] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 4: comm syz.1.2280: lblock 0 mapped to illegal pblock 4 (length 1)
[  181.717428][ T9278] XFS (loop0): Ending clean mount
[  181.720846][ T9311] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2277 (9311)
[  181.749211][ T9338] loop2: detected capacity change from 0 to 256
[  181.783461][ T9278] XFS (loop0): Quotacheck needed: Please wait.
[  181.790269][ T9311] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  181.810055][ T9311] BTRFS info (device loop4): force zlib compression, level 3
[  181.819288][ T9338] exfat: Deprecated parameter 'utf8'
[  181.854366][ T9311] BTRFS info (device loop4): force clearing of disk cache
[  181.878062][ T9311] BTRFS info (device loop4): setting nodatasum
[  181.903311][ T9338] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  181.906471][ T9311] BTRFS info (device loop4): allowing degraded mounts
[  181.941900][ T9278] XFS (loop0): Quotacheck: Done.
[  181.949657][ T9311] BTRFS info (device loop4): enabling disk space caching
[  181.962979][ T9311] BTRFS info (device loop4): disk space caching is enabled
[  181.971645][ T9311] BTRFS info (device loop4): has skinny extents
[  182.051229][ T4170] XFS (loop0): Unmounting Filesystem
[  182.148876][ T9311] BTRFS info (device loop4): clearing free space tree
[  182.163125][ T9311] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  182.173877][ T9311] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  182.327914][ T9311] BTRFS info (device loop4): balance: start -susage=0..15,drange=18446744073709551614..7,limit=9..0
[  182.363836][ T9311] BTRFS info (device loop4): balance: ended with status: 0
[  182.524229][ T5667] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  182.794203][ T5667] usb 3-1: Using ep0 maxpacket: 16
[  182.954448][ T5667] usb 3-1: config index 0 descriptor too short (expected 54081, got 72)
[  182.974170][ T5667] usb 3-1: config 15 has too many interfaces: 202, using maximum allowed: 32
[  182.997256][ T5667] usb 3-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config
[  183.028193][ T5667] usb 3-1: config 15 has 0 interfaces, different from the descriptor's value: 202
[  183.157282][ T9405] tmpfs: Bad value for 'mpol'
[  183.224579][ T5667] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  183.270034][ T5667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.298548][ T5667] usb 3-1: Product: syz
[  183.307337][ T5667] usb 3-1: Manufacturer: syz
[  183.324110][ T5667] usb 3-1: SerialNumber: syz
[  183.630769][ T9421] xt_policy: too many policy elements
[  183.691009][ T5667] usb 3-1: USB disconnect, device number 9
[  183.723661][ T9401] loop3: detected capacity change from 0 to 32768
[  183.803848][ T9429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2321'.
[  183.863369][ T9401] XFS (loop3): Mounting V5 Filesystem
[  184.116501][ T9401] XFS (loop3): Ending clean mount
[  184.188671][ T9456] loop0: detected capacity change from 0 to 256
[  184.284282][ T4174] XFS (loop3): Unmounting Filesystem
[  184.345376][ T9456] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf8244977, utbl_chksum : 0xe619d30d)
[  184.725796][ T9478] loop4: detected capacity change from 0 to 64
[  184.770736][ T9452] loop1: detected capacity change from 0 to 32768
[  184.900256][ T9452] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  185.080400][ T9452] (syz.1.2328,9452,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1
[  185.099990][ T9452] (syz.1.2328,9452,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2
[  185.214302][ T9452] (syz.1.2328,9452,0):ocfs2_mknod:298 ERROR: status = -2
[  185.224474][ T9452] (syz.1.2328,9452,1):ocfs2_mknod:502 ERROR: status = -2
[  185.283328][ T9452] (syz.1.2328,9452,1):ocfs2_mkdir:659 ERROR: status = -2
[  185.428720][ T4166] ocfs2: Unmounting device (7,1) on (node local)
[  185.558188][ T9518] loop4: detected capacity change from 0 to 4096
[  185.615247][ T4205] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  185.658014][ T6879] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  185.713151][ T9528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2360'.
[  185.747197][ T9529] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.791845][ T9518] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  185.850397][ T9518] Remounting filesystem read-only
[  185.987913][ T4205] usb 4-1: config 0 has an invalid interface number: 239 but max is 0
[  186.014580][ T4205] usb 4-1: config 0 has no interface number 0
[  186.031636][ T4205] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  186.042249][ T6879] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.062824][ T4205] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 511
[  186.073179][ T6879] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  186.164326][ T6879] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  186.183641][ T6879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  186.192493][ T6879] usb 1-1: SerialNumber: syz
[  186.227272][ T9526] loop2: detected capacity change from 0 to 32768
[  186.236528][ T4205] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  186.240199][ T9545] openvswitch: netlink: Flow actions attr not present in new flow.
[  186.248860][ T6879] usb 1-1: 0:2 : does not exist
[  186.254492][ T5667] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  186.258790][ T4205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.277455][ T4205] usb 4-1: Product: syz
[  186.281650][ T4205] usb 4-1: Manufacturer: syz
[  186.286823][ T4205] usb 4-1: SerialNumber: syz
[  186.300315][ T4205] usb 4-1: config 0 descriptor??
[  186.324581][ T9510] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  186.331676][ T9510] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  186.343362][ T9526] (syz.2.2365,9526,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  186.363966][ T9526] (syz.2.2365,9526,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  186.385547][ T9526] JBD2: Ignoring recovery information on journal
[  186.419123][ T9526] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  186.445152][ T9526] ocfs2: Unmounting device (7,2) on (node local)
[  186.557133][ T5667] usb 2-1: Using ep0 maxpacket: 8
[  186.569460][ T9510] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  186.576958][ T6726] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  186.588454][ T9510] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  186.669588][ T4207] usb 1-1: USB disconnect, device number 16
[  186.694904][ T5667] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  186.703069][ T5667] usb 2-1: config 0 has no interface number 0
[  186.834290][ T4205] asix 4-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  186.855609][ T4205] asix: probe of 4-1:0.239 failed with error -71
[  186.897878][ T4205] usb 4-1: USB disconnect, device number 16
[  186.917118][ T5667] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  186.935158][ T5667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.953480][ T5667] usb 2-1: Product: syz
[  186.963617][ T5667] usb 2-1: Manufacturer: syz
[  186.964345][ T6726] usb 5-1: config 1 interface 0 altsetting 202 bulk endpoint 0x82 has invalid maxpacket 8
[  186.973747][ T5667] usb 2-1: SerialNumber: syz
[  186.981766][ T6726] usb 5-1: config 1 interface 0 altsetting 202 bulk endpoint 0x3 has invalid maxpacket 1024
[  186.994242][ T6726] usb 5-1: config 1 interface 0 altsetting 202 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  187.007932][ T6726] usb 5-1: config 1 interface 0 has no altsetting 0
[  187.008881][ T5667] usb 2-1: config 0 descriptor??
[  187.174355][ T6726] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  187.186362][ T6726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.194919][ T6726] usb 5-1: Product: syz
[  187.199116][ T6726] usb 5-1: Manufacturer: syz
[  187.203729][ T6726] usb 5-1: SerialNumber: syz
[  187.223099][ T9575] [U] 
[  187.225848][ T9575] [U] 
[  187.228570][ T9575] [U] 
[  187.231288][ T9575] [U] 
[  187.242030][ T9575] [U] 
[  187.244871][ T9575] [U] 
[  187.247595][ T9575] [U] 
[  187.250311][ T9575] [U] 
[  187.254427][ T9547] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  187.260377][ T9575] [U] 
[  187.261494][ T9547] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  187.264094][ T9575] [U] 
[  187.273694][ T9575] [U] 
[  187.276410][ T9575] [U] 
[  187.289453][ T9575] [U] 
[  187.292201][ T9575] [U] 
[  187.294926][ T9575] [U] 
[  187.297640][ T9575] [U] 
[  187.332402][ T9574] [U] 
[  187.364412][ T5667] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[  187.384277][ T5667] usb 2-1: No valid video chain found.
[  187.408854][ T5667] usb 2-1: USB disconnect, device number 11
[  187.587171][ T6726] usb 5-1: bad CDC descriptors
[  187.612938][ T6726] usb 5-1: USB disconnect, device number 9
[  187.903511][ T9608] loop1: detected capacity change from 0 to 256
[  187.992623][ T9610] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  188.192069][ T9618] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  188.352864][ T9626] loop3: detected capacity change from 0 to 1024
[  188.362736][ T9629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2414'.
[  188.392921][ T9629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2414'.
[  188.480293][ T9589] loop2: detected capacity change from 0 to 32768
[  188.554736][ T9589] XFS: ikeep mount option is deprecated.
[  188.692805][ T9589] XFS (loop2): Mounting V5 Filesystem
[  188.934556][ T9589] XFS (loop2): Ending clean mount
[  188.999114][ T9589] XFS (loop2): Quotacheck needed: Please wait.
[  189.059132][ T4205] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_cntbt block 0x8 
[  189.083944][ T4205] XFS (loop2): Unmount and run xfs_repair
[  189.109611][ T4205] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  189.159467][ T4205] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  189.206571][ T4205] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 80  ................
[  189.237659][ T4205] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  189.266718][ T4205] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[  189.286514][ T4205] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  189.314200][ T4205] 00000050: 00 00 00 00 00 f9 ff ff ff ff ff ff ff 00 00 00  ................
[  189.323538][ T4205] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  189.349872][ T4205] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  189.402339][  T430] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 4 error 74
[  189.481660][ T9589] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  189.661555][ T9709] loop3: detected capacity change from 0 to 1024
[  189.671158][ T4176] XFS (loop2): Unmounting Filesystem
[  189.874740][  T430] hfsplus: b-tree write err: -5, ino 4
[  190.026858][ T9726] device gretap0 entered promiscuous mode
[  190.463828][ T9741] loop4: detected capacity change from 0 to 4096
[  190.677121][ T9741] ntfs3: loop4: ino=5, "/" directory corrupted
[  190.856394][ T9778] netlink: 'syz.3.2477': attribute type 1 has an invalid length.
[  190.874156][ T9778] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2477'.
[  191.082839][ T9794] cgroup: none used incorrectly
[  191.155839][ T9798] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  191.274156][ T4205] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  191.514180][ T9808] program syz.4.2493 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  191.564695][ T9808] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  191.643610][ T4205] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e
[  191.663439][ T4205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.726604][ T4205] pwc: Logitech ViewPort AV 100 webcam detected.
[  191.745676][ T9792] loop0: detected capacity change from 0 to 32768
[  191.786561][ T9792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2486 (9792)
[  191.831036][ T9792] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  191.851288][ T9792] BTRFS info (device loop0): use zlib compression, level 3
[  191.881662][ T9792] BTRFS info (device loop0): using free space tree
[  191.898504][ T9792] BTRFS info (device loop0): has skinny extents
[  191.924024][ T9804] loop2: detected capacity change from 0 to 32768
[  192.134184][ T9804] (syz.2.2491,9804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  192.164293][ T4205] pwc: send_video_command error -71
[  192.170060][ T4205] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  192.188494][ T9792] BTRFS info (device loop0): enabling ssd optimizations
[  192.196955][ T9804] (syz.2.2491,9804,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  192.213091][ T4205] Philips webcam: probe of 4-1:127.0 failed with error -71
[  192.240534][ T4205] usb 4-1: USB disconnect, device number 17
[  192.265946][ T9810] loop4: detected capacity change from 0 to 32768
[  192.275551][ T9831] usb usb1: usbfs: process 9831 (syz.1.2495) did not claim interface 0 before use
[  192.282850][ T9804] JBD2: Ignoring recovery information on journal
[  192.367533][ T9810] 
[  192.367533][ T9810]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.367533][ T9810] 
[  192.440336][ T9835] loop1: detected capacity change from 0 to 164
[  192.457808][ T9804] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  192.532008][ T9810] 
[  192.532008][ T9810]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.532008][ T9810] 
[  192.674000][ T9810] 
[  192.674000][ T9810]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.674000][ T9810] 
[  192.805578][  T276] 
[  192.805578][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.805578][  T276] 
[  192.867668][ T9838] netlink: 'syz.0.2497': attribute type 3 has an invalid length.
[  192.886394][ T4187] 
[  192.886394][ T4187]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.886394][ T4187] 
[  192.909214][ T4187] 
[  192.909214][ T4187]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.909214][ T4187] 
[  192.954422][ T4172] 
[  192.954422][ T4172]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.954422][ T4172] 
[  192.996891][ T4172] 
[  192.996891][ T4172]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.996891][ T4172] 
[  193.018127][ T9848] loop0: detected capacity change from 0 to 64
[  193.027584][ T4176] ocfs2: Unmounting device (7,2) on (node local)
[  193.048433][  T276] 
[  193.048433][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  193.048433][  T276] 
[  193.102032][  T276] ==================================================================
[  193.110570][  T276] BUG: KASAN: use-after-free in txEnd+0x350/0x560
[  193.117020][  T276] Write of size 8 at addr ffff888075cac840 by task jfsCommit/276
[  193.124755][  T276] 
[  193.127103][  T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted 5.15.178-syzkaller #0
[  193.135112][  T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  193.145619][  T276] Call Trace:
[  193.148912][  T276]  <TASK>
[  193.151852][  T276]  dump_stack_lvl+0x1e3/0x2d0
[  193.156559][  T276]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  193.162214][  T276]  ? _printk+0xd1/0x120
[  193.166400][  T276]  ? __wake_up_klogd+0xcc/0x100
[  193.171281][  T276]  ? panic+0x860/0x860
[  193.175375][  T276]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  193.180859][  T276]  ? __mutex_unlock_slowpath+0x6f6/0x750
[  193.186528][  T276]  print_address_description+0x63/0x3b0
[  193.192106][  T276]  ? txEnd+0x350/0x560
[  193.196202][  T276]  kasan_report+0x16b/0x1c0
[  193.200732][  T276]  ? txEnd+0x350/0x560
[  193.204830][  T276]  kasan_check_range+0x27e/0x290
[  193.209788][  T276]  txEnd+0x350/0x560
[  193.213710][  T276]  jfs_lazycommit+0x60d/0xc30
[  193.218409][  T276]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  193.224329][  T276]  ? lockdep_hardirqs_on+0x94/0x130
[  193.229558][  T276]  ? txFreelock+0x580/0x580
[  193.234083][  T276]  ? sched_dynamic_update+0x240/0x240
[  193.239494][  T276]  kthread+0x3f6/0x4f0
[  193.243590][  T276]  ? txFreelock+0x580/0x580
[  193.248127][  T276]  ? kthread_blkcg+0xd0/0xd0
[  193.252744][  T276]  ret_from_fork+0x1f/0x30
[  193.257337][  T276]  </TASK>
[  193.260379][  T276] 
[  193.262713][  T276] Allocated by task 9810:
[  193.267047][  T276]  ____kasan_kmalloc+0xba/0xf0
[  193.271830][  T276]  kmem_cache_alloc_trace+0x143/0x290
[  193.277313][  T276]  lmLogOpen+0x314/0x1030
[  193.281662][  T276]  jfs_mount_rw+0xe3/0x640
[  193.286178][  T276]  jfs_fill_super+0x69f/0xc70
[  193.290867][  T276]  mount_bdev+0x2c9/0x3f0
[  193.295191][  T276]  legacy_get_tree+0xeb/0x180
[  193.299878][  T276]  vfs_get_tree+0x88/0x270
[  193.304288][  T276]  do_new_mount+0x2ba/0xb40
[  193.308829][  T276]  __se_sys_mount+0x2d5/0x3c0
[  193.313526][  T276]  do_syscall_64+0x3b/0xb0
[  193.317949][  T276]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  193.323854][  T276] 
[  193.326165][  T276] Freed by task 4172:
[  193.330131][  T276]  kasan_set_track+0x4b/0x80
[  193.334715][  T276]  kasan_set_free_info+0x1f/0x40
[  193.339643][  T276]  ____kasan_slab_free+0xd8/0x120
[  193.344676][  T276]  slab_free_freelist_hook+0xdd/0x160
[  193.350044][  T276]  kfree+0xf1/0x270
[  193.353846][  T276]  lmLogClose+0x29d/0x530
[  193.358186][  T276]  jfs_umount+0x298/0x370
[  193.362519][  T276]  jfs_put_super+0x86/0x180
[  193.367019][  T276]  generic_shutdown_super+0x130/0x310
[  193.372386][  T276]  kill_block_super+0x7a/0xe0
[  193.377052][  T276]  deactivate_locked_super+0xa0/0x110
[  193.382413][  T276]  cleanup_mnt+0x44e/0x500
[  193.386824][  T276]  task_work_run+0x129/0x1a0
[  193.391456][  T276]  exit_to_user_mode_loop+0x106/0x130
[  193.396826][  T276]  exit_to_user_mode_prepare+0xb1/0x140
[  193.402362][  T276]  syscall_exit_to_user_mode+0x5d/0x240
[  193.407910][  T276]  do_syscall_64+0x47/0xb0
[  193.412335][  T276]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  193.418245][  T276] 
[  193.420685][  T276] Last potentially related work creation:
[  193.426516][  T276]  kasan_save_stack+0x36/0x60
[  193.431190][  T276]  kasan_record_aux_stack+0xba/0x100
[  193.436467][  T276]  call_rcu+0x1c4/0xa70
[  193.440623][  T276]  process_one_work+0x8a1/0x10c0
[  193.445561][  T276]  worker_thread+0xaca/0x1280
[  193.450231][  T276]  kthread+0x3f6/0x4f0
[  193.454317][  T276]  ret_from_fork+0x1f/0x30
[  193.458755][  T276] 
[  193.461083][  T276] Second to last potentially related work creation:
[  193.467654][  T276]  kasan_save_stack+0x36/0x60
[  193.472342][  T276]  kasan_record_aux_stack+0xba/0x100
[  193.477646][  T276]  kvfree_call_rcu+0x118/0x8a0
[  193.482415][  T276]  neigh_periodic_work+0x3cb/0xc40
[  193.487530][  T276]  process_one_work+0x8a1/0x10c0
[  193.492467][  T276]  worker_thread+0xaca/0x1280
[  193.497142][  T276]  kthread+0x3f6/0x4f0
[  193.501297][  T276]  ret_from_fork+0x1f/0x30
[  193.505721][  T276] 
[  193.508057][  T276] The buggy address belongs to the object at ffff888075cac800
[  193.508057][  T276]  which belongs to the cache kmalloc-1k of size 1024
[  193.522281][  T276] The buggy address is located 64 bytes inside of
[  193.522281][  T276]  1024-byte region [ffff888075cac800, ffff888075cacc00)
[  193.535558][  T276] The buggy address belongs to the page:
[  193.541181][  T276] page:ffffea0001d72a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75ca8
[  193.551339][  T276] head:ffffea0001d72a00 order:3 compound_mapcount:0 compound_pincount:0
[  193.559677][  T276] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  193.567864][  T276] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0
[  193.576446][  T276] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  193.585033][  T276] page dumped because: kasan: bad access detected
[  193.591448][  T276] page_owner tracks the page as allocated
[  193.597157][  T276] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4208, ts 64120765963, free_ts 64051436079
[  193.615645][  T276]  get_page_from_freelist+0x3b78/0x3d40
[  193.621195][  T276]  __alloc_pages+0x272/0x700
[  193.625815][  T276]  new_slab+0xbb/0x4b0
[  193.629884][  T276]  ___slab_alloc+0x6f6/0xe10
[  193.634462][  T276]  __kmalloc_node_track_caller+0x1f6/0x390
[  193.640259][  T276]  __alloc_skb+0x12c/0x590
[  193.644714][  T276]  inet6_rt_notify+0xdc/0x280
[  193.649396][  T276]  fib6_add+0x1db2/0x3c80
[  193.653724][  T276]  ip6_ins_rt+0x102/0x170
[  193.658049][  T276]  __ipv6_ifa_notify+0x5b9/0x11d0
[  193.663067][  T276]  addrconf_dad_completed+0x18a/0xc40
[  193.668523][  T276]  addrconf_dad_work+0xdd0/0x1720
[  193.673556][  T276]  process_one_work+0x8a1/0x10c0
[  193.678503][  T276]  worker_thread+0xaca/0x1280
[  193.683175][  T276]  kthread+0x3f6/0x4f0
[  193.687281][  T276]  ret_from_fork+0x1f/0x30
[  193.691696][  T276] page last free stack trace:
[  193.696378][  T276]  free_unref_page_prepare+0xc34/0xcf0
[  193.701850][  T276]  free_unref_page+0x95/0x2d0
[  193.706529][  T276]  __unfreeze_partials+0x1b7/0x210
[  193.711653][  T276]  put_cpu_partial+0x132/0x1a0
[  193.716428][  T276]  ___cache_free+0xe3/0x100
[  193.720929][  T276]  qlist_free_all+0x36/0x90
[  193.725425][  T276]  kasan_quarantine_reduce+0x162/0x180
[  193.730879][  T276]  __kasan_slab_alloc+0x2f/0xc0
[  193.735723][  T276]  slab_post_alloc_hook+0x53/0x380
[  193.740827][  T276]  __kmalloc+0x120/0x300
[  193.745062][  T276]  fib_create_info+0xaab/0x2570
[  193.749921][  T276]  fib_table_insert+0x213/0x1f90
[  193.754853][  T276]  fib_add_ifaddr+0xf4c/0x1730
[  193.759630][  T276]  fib_netdev_event+0x61d/0x760
[  193.764565][  T276]  raw_notifier_call_chain+0xd0/0x170
[  193.769953][  T276]  __dev_notify_flags+0x304/0x610
[  193.774985][  T276] 
[  193.777314][  T276] Memory state around the buggy address:
[  193.782928][  T276]  ffff888075cac700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  193.790996][  T276]  ffff888075cac780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  193.799047][  T276] >ffff888075cac800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  193.807101][  T276]                                            ^
[  193.813262][  T276]  ffff888075cac880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  193.821346][  T276]  ffff888075cac900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  193.829396][  T276] ==================================================================
[  193.837468][  T276] Disabling lock debugging due to kernel taint
[  193.848755][  T276] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  193.855969][  T276] CPU: 0 PID: 276 Comm: jfsCommit Tainted: G    B             5.15.178-syzkaller #0
[  193.865346][  T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  193.875392][  T276] Call Trace:
[  193.878757][  T276]  <TASK>
[  193.881713][  T276]  dump_stack_lvl+0x1e3/0x2d0
[  193.886394][  T276]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  193.892047][  T276]  ? panic+0x860/0x860
[  193.896114][  T276]  ? preempt_schedule_common+0xa6/0xd0
[  193.901590][  T276]  ? preempt_schedule+0xd9/0xe0
[  193.906445][  T276]  panic+0x318/0x860
[  193.910357][  T276]  ? check_panic_on_warn+0x1d/0xa0
[  193.915464][  T276]  ? fb_is_primary_device+0xd0/0xd0
[  193.920660][  T276]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  193.926641][  T276]  ? _raw_spin_unlock+0x40/0x40
[  193.931490][  T276]  check_panic_on_warn+0x7e/0xa0
[  193.936428][  T276]  ? txEnd+0x350/0x560
[  193.940487][  T276]  end_report+0x6d/0xf0
[  193.944635][  T276]  kasan_report+0x18e/0x1c0
[  193.949130][  T276]  ? txEnd+0x350/0x560
[  193.953223][  T276]  kasan_check_range+0x27e/0x290
[  193.958343][  T276]  txEnd+0x350/0x560
[  193.962255][  T276]  jfs_lazycommit+0x60d/0xc30
[  193.966925][  T276]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  193.972813][  T276]  ? lockdep_hardirqs_on+0x94/0x130
[  193.978004][  T276]  ? txFreelock+0x580/0x580
[  193.982502][  T276]  ? sched_dynamic_update+0x240/0x240
[  193.987869][  T276]  kthread+0x3f6/0x4f0
[  193.991961][  T276]  ? txFreelock+0x580/0x580
[  193.996467][  T276]  ? kthread_blkcg+0xd0/0xd0
[  194.001058][  T276]  ret_from_fork+0x1f/0x30
[  194.005747][  T276]  </TASK>
[  194.009067][  T276] Kernel Offset: disabled
[  194.013412][  T276] Rebooting in 86400 seconds..