last executing test programs:

3m6.758128011s ago: executing program 2 (id=6520):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000000000000007, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x32315559}})

3m6.632503894s ago: executing program 2 (id=6523):
r0 = socket$pppoe(0x18, 0x1, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/215, 0xd7}], 0x1)

3m6.581521345s ago: executing program 2 (id=6524):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x1)

3m6.416288748s ago: executing program 2 (id=6528):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x8c48, &(0x7f00000016c0)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5a7, &(0x7f0000000f80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

3m6.071686035s ago: executing program 2 (id=6531):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)

3m5.473468787s ago: executing program 2 (id=6543):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000001280)={{0x1, 0x1, 0x61}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})

3m5.27610248s ago: executing program 32 (id=6543):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000001280)={{0x1, 0x1, 0x61}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})

3.10895037s ago: executing program 4 (id=10285):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

3.048538621s ago: executing program 4 (id=10288):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x46, 0x4, 0xfffffffc, 0xfffe, 0x0, 0x4, 0xfc, 0xfa, 0x3, 0x9, 0x7, 0x400, 0xfffe, 0x0, 0x0, 0x40000045, [0x2000]}})

2.975025073s ago: executing program 4 (id=10289):
r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x4)
process_madvise(r0, 0x0, 0x0, 0xe, 0x0)

2.907794104s ago: executing program 4 (id=10291):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94246}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x48000)

2.830897876s ago: executing program 4 (id=10294):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000193c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000001000)={0x9, 0xc, 0x10001})

2.726988707s ago: executing program 4 (id=10297):
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]})

2.480759122s ago: executing program 1 (id=10302):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32], 0xff, 0x5fc, &(0x7f0000000740)="$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")
mount$afs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)

2.124038469s ago: executing program 1 (id=10306):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r0, 0x29, 0x40, 0x0, 0xd0060)

2.008812051s ago: executing program 1 (id=10309):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2f}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x87}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.907596133s ago: executing program 1 (id=10310):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4000044}, 0x34000080)

1.808195555s ago: executing program 1 (id=10312):
personality(0x400000)
mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000001, 0x4001031, 0xffffffffffffffff, 0x0)

1.733591196s ago: executing program 1 (id=10314):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000140)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,iocharset=macgreek,iocharset=iso8859-1,integrity,nodiscard,noquota,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c0090793f96642dd4552fed5a0908b71b44dee2aaaf2ce1af850a149278a4c6fe280bdf64c053f758c0d26349d64dc37170d804072124056224a019f2bb9a6c2659bd07290d2190b53aec9f096f690de212d3e256adaea53e84eb84e6d611ecb166bb3c235a85c4b16eb97bba03481c8003ffffffffd998b18af1cc6fd1be71d2fffb7433710f91397d9d76ccc8d1fb"], 0x24, 0x61e3, &(0x7f000000d780)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

803.703194ms ago: executing program 3 (id=10325):
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8000, &(0x7f0000000300)={[{@redirect_dir_off}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}, {@userxattr}], [], 0x2c})

774.138505ms ago: executing program 0 (id=10326):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b3c, 0x0)

756.924735ms ago: executing program 5 (id=10327):
r0 = semget$private(0x0, 0x2, 0x0)
semctl$GETZCNT(r0, 0x1, 0xf, 0x0)

731.285375ms ago: executing program 3 (id=10328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

691.495846ms ago: executing program 5 (id=10329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a320000f3ff1400078005001500070000000800124000070000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)

659.001707ms ago: executing program 3 (id=10330):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000840)={[{@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@dmask}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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")
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)

476.278951ms ago: executing program 0 (id=10331):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x47c50f957e323418}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)

461.550531ms ago: executing program 3 (id=10332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001a00fbffffff000000000000020000000000ff000009"], 0x24}}, 0x0)

402.319902ms ago: executing program 0 (id=10333):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x2, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0xb}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

392.801762ms ago: executing program 5 (id=10334):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='personality\x00')
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9)

307.945294ms ago: executing program 0 (id=10335):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe)

300.186534ms ago: executing program 3 (id=10336):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffb, 0x60082)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000300)={0xa0000000, 0x1, "6ff6ad4d49bf769c2fe25720ed5009622e709195057af5b6837b0b5f886643fa", 0x1, 0x2, 0x10000001, 0x8, 0x1, 0x87, 0x7fffffff, 0x0, [0xfffffffa, 0x10000, 0x1, 0x8]})

286.060994ms ago: executing program 5 (id=10337):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r0, &(0x7f0000000080)=@other={'unlock', ' ', 'none'}, 0xc)

201.695906ms ago: executing program 0 (id=10338):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)

201.418896ms ago: executing program 3 (id=10339):
syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f00000006c0)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0xff, 0x654, &(0x7f0000000a40)="$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")
lgetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@random={'osx.', 'trusted.overlay.upper\x00'}, 0x0, 0x0)

189.699696ms ago: executing program 5 (id=10340):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081074e81f782db4cb904021d0800fe007c05e8fe55a10a0015000400142603600e12080005007f370401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

32.541569ms ago: executing program 0 (id=10341):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0)

0s ago: executing program 5 (id=10342):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101381)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0})

kernel console output (not intermixed with test programs):

92, ipg=32, mo=2802e12c, mo2=0002]
[  804.758127][T24842] System zones: 1-12
[  804.763054][T24842] EXT4-fs (loop3): orphan cleanup on readonly fs
[  804.826261][T24842] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.8760: invalid indirect mapped block 12 (level 1)
[  804.879864][T24856] loop0: detected capacity change from 0 to 64
[  804.946923][T24842] EXT4-fs (loop3): Remounting filesystem read-only
[  804.953892][T24842] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.8760: invalid indirect mapped block 2 (level 2)
[  804.998692][T24842] EXT4-fs (loop3): Remounting filesystem read-only
[  805.027333][T24842] EXT4-fs (loop3): 1 truncate cleaned up
[  805.033947][T24842] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,data_err=ignore. Quota mode: none.
[  805.235705][T24880] loop4: detected capacity change from 0 to 256
[  805.495224][ T4694] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  805.901611][ T4694] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  805.921346][ T4694] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  805.938540][ T4700] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  805.993549][T24890] loop1: detected capacity change from 0 to 32768
[  806.040411][ T4694] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  806.050184][ T4694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  806.066621][ T4694] usb 1-1: SerialNumber: syz
[  806.092913][T24890] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  806.159194][ T4182] ocfs2: Unmounting device (7,1) on (node local)
[  806.200740][ T4700] usb 4-1: Using ep0 maxpacket: 16
[  806.385492][ T4694] usb 1-1: 0:2 : does not exist
[  806.392508][ T4694] usb 1-1: unit 5: unexpected type 0x03
[  806.444135][ T4694] usb 1-1: USB disconnect, device number 48
[  806.604789][T24942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  806.688627][T24946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8809'.
[  806.702842][ T4700] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  806.718952][ T4700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.731222][ T4427] udevd[4427]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  806.734857][T24946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8809'.
[  806.757088][ T4700] usb 4-1: Product: syz
[  806.761276][ T4700] usb 4-1: Manufacturer: syz
[  806.765874][ T4700] usb 4-1: SerialNumber: syz
[  806.805918][ T4700] usb 4-1: config 0 descriptor??
[  806.863986][ T4700] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  807.025469][T24968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8819'.
[  807.091514][ T4700] pwc: Warning: more than 1 configuration available.
[  807.311830][ T4700] pwc: Failed to set LED on/off time (-71)
[  807.333573][ T4700] pwc: send_video_command error -71
[  807.339179][ T4700] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  807.340271][T24991] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8832'.
[  807.386391][ T4700] Philips webcam: probe of 4-1:0.0 failed with error -71
[  807.393773][T24991] netlink: 43 bytes leftover after parsing attributes in process `syz.5.8832'.
[  807.424109][T24991] netlink: 'syz.5.8832': attribute type 5 has an invalid length.
[  807.455412][ T4700] usb 4-1: USB disconnect, device number 42
[  807.463289][T24991] netlink: 43 bytes leftover after parsing attributes in process `syz.5.8832'.
[  807.478318][T25000] program syz.4.8836 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  807.558471][T25000] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  807.629411][T25002] loop1: detected capacity change from 0 to 4096
[  807.697238][T25002] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  807.802047][T25002] ntfs3: loop1: failed to convert "c46c" to iso8859-6
[  807.818200][T25018] loop4: detected capacity change from 0 to 16
[  807.819232][T25002] ntfs3: loop1: failed to convert "0030" to iso8859-6
[  807.865593][T25020] loop5: detected capacity change from 0 to 2048
[  807.889294][T25002] ntfs3: loop1: failed to convert "0031" to iso8859-6
[  807.896766][T25018] erofs: (device loop4): mounted with root inode @ nid 36.
[  807.905807][T25002] ntfs3: loop1: failed to convert "0032" to iso8859-6
[  807.937182][T25022] loop3: detected capacity change from 0 to 128
[  807.992108][T25020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  808.046637][T25020] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh
[  808.092132][ T4688] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  808.219831][T25038] loop5: detected capacity change from 0 to 16
[  808.235167][T25037] kAFS: unable to lookup cell '(/'
[  808.250674][T25040] netlink: 'syz.4.8856': attribute type 1 has an invalid length.
[  808.285389][T25042] overlayfs: missing 'lowerdir'
[  808.291776][T25038] erofs: (device loop5): mounted with root inode @ nid 36.
[  808.317007][T25044] device batadv0 entered promiscuous mode
[  808.320213][T25038] erofs: (device loop5): erofs_read_inode: bogus i_mode (0) @ nid 46
[  808.391160][T18602] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  808.649831][ T4688] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  808.674394][ T4688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.693044][ T4688] usb 1-1: Product: syz
[  808.708319][ T4688] usb 1-1: Manufacturer: syz
[  808.719150][ T4688] usb 1-1: SerialNumber: syz
[  808.740614][ T4688] usb 1-1: config 0 descriptor??
[  808.798930][ T4688] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  808.803651][T25064] 8021q: adding VLAN 0 to HW filter on device bond1
[  808.808595][ T4688] usb 1-1: setting power ON
[  808.829147][ T4688] dvb-usb: bulk message failed: -22 (2/0)
[  808.838107][ T4688] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  808.839925][T18602] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  808.851512][ T4688] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19)
[  808.866267][ T4688] dvb_usb_cxusb: probe of 1-1:0.0 failed with error -22
[  808.925397][T18602] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  808.953325][T25069] binder: 25068:25069 ioctl 400c620e 2000000000c0 returned -22
[  808.958222][T18602] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  808.985938][T18602] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  809.006873][T25071] binder: binder_mmap: 25070 200000001000-20000000b000 bad vm_flags failed -1
[  809.032666][T18602] usb 2-1: config 1 has no interface number 0
[  809.038806][T18602] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  809.102046][T18602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.147753][ T4251] usb 1-1: USB disconnect, device number 49
[  809.202389][T18602] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  809.254810][T25046] loop3: detected capacity change from 0 to 32768
[  809.332553][T25046] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.8859 (25046)
[  809.366092][T25046] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  809.382587][T25088] loop5: detected capacity change from 0 to 4096
[  809.416365][T25088] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  809.425620][T25046] BTRFS info (device loop3): using free space tree
[  809.443859][T18602] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[  809.455690][T18602] snd_usb_pod 2-1:1.1: invalid control EP
[  809.481186][T18602] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  809.490804][T25046] BTRFS info (device loop3): has skinny extents
[  809.499155][T18602] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  809.521116][T18602] snd_usb_pod: probe of 2-1:1.1 failed with error -22
[  809.588909][T25088] ntfs3: loop5: failed to convert "c46c" to iso8859-6
[  809.619462][T25088] ntfs3: loop5: failed to convert "0030" to iso8859-6
[  809.666036][T25088] ntfs3: loop5: failed to convert "0031" to iso8859-6
[  809.675420][T25088] ntfs3: loop5: failed to convert "0032" to iso8859-6
[  809.677501][T18602] usb 2-1: USB disconnect, device number 37
[  809.793269][T25116] device vlan0 entered promiscuous mode
[  809.848681][T25046] BTRFS info (device loop3): enabling ssd optimizations
[  809.922171][T25125] QAT: failed to copy from user cfg_data.
[  810.162342][ T4350] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4350)
[  810.226469][T25140] loop4: detected capacity change from 0 to 16
[  810.253080][T25140] erofs: (device loop4): mounted with root inode @ nid 36.
[  810.371988][T25145] loop1: detected capacity change from 0 to 16
[  810.427239][T25145] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  810.472122][T25149] netlink: 'syz.0.8901': attribute type 4 has an invalid length.
[  810.546992][T25149] __nla_validate_parse: 5 callbacks suppressed
[  810.547008][T25149] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8901'.
[  810.689437][T25154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8905'.
[  810.813826][T25168] loop0: detected capacity change from 0 to 764
[  810.819032][T25170] loop1: detected capacity change from 0 to 128
[  810.897397][T25168] rock: directory entry would overflow storage
[  810.947050][T25170] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  810.958573][T25168] rock: sig=0x5850, size=36, remaining=7
[  810.993259][T25170] ext4 filesystem being mounted at /1815/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  811.030481][ T4259] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  811.054522][T25170] binder: Bad value for 'stats'
[  811.447481][ T4259] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  811.469949][ T4259] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  811.504423][ T4259] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  811.529901][ T4259] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  811.573348][ T4259] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  811.631545][ T4259] usb 4-1: config 0 interface 0 has no altsetting 0
[  811.659051][T25214] loop0: detected capacity change from 0 to 4096
[  811.719611][T25214] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  811.853528][ T4259] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  811.875280][ T4259] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  811.884901][ T4259] usb 4-1: Product: syz
[  811.898830][ T4694] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  811.901903][ T4259] usb 4-1: Manufacturer: syz
[  811.912868][ T4259] usb 4-1: SerialNumber: syz
[  811.973385][ T4259] usb 4-1: config 0 descriptor??
[  811.992293][T25230] snd_dummy snd_dummy.0: control 0:0:1073741821:syz1:0 is already present
[  812.003710][T25163] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  812.027529][ T4259] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  812.049139][T25232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8939'.
[  812.058643][ T4259] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  812.117853][T25234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8940'.
[  812.144894][T25237] QAT: Stopping all acceleration devices.
[  812.173908][ T4694] usb 2-1: Using ep0 maxpacket: 8
[  812.329687][ T4700] usb 4-1: USB disconnect, device number 43
[  812.343526][ T4700] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  812.351058][ T4694] usb 2-1: unable to get BOS descriptor or descriptor too short
[  812.447049][T25255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8950'.
[  812.457254][ T4694] usb 2-1: config index 0 descriptor too short (expected 25, got 18)
[  812.472989][ T4694] usb 2-1: config 9 has an invalid interface number: 112 but max is 0
[  812.487809][ T4694] usb 2-1: config 9 has no interface number 0
[  812.504375][T25257] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8951'.
[  812.513738][T25259] QAT: failed to copy from user cfg_data.
[  812.534196][ T4694] usb 2-1: config 9 interface 112 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  812.549737][ T4694] usb 2-1: config 9 interface 112 has no altsetting 0
[  812.719174][ T4694] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3
[  812.739135][ T4694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.757028][ T4694] usb 2-1: Product: syz
[  812.762049][ T4694] usb 2-1: Manufacturer: syz
[  812.766662][ T4694] usb 2-1: SerialNumber: syz
[  812.890630][T25282] openvswitch: netlink: Actions may not be safe on all matching packets
[  813.135797][ T4694] r8152-cfgselector 2-1: Unknown version 0x0000
[  813.160848][T25306] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  813.167741][ T4694] r8152-cfgselector 2-1: Unknown version 0x0000
[  813.183825][ T4694] r8152-cfgselector 2-1: USB disconnect, device number 38
[  813.191002][T25308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8976'.
[  813.317483][ T4251] Bluetooth: hci0: command 0x0c20 tx timeout
[  813.349423][ T4259] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  813.373321][T25320] loop4: detected capacity change from 0 to 256
[  813.422323][T25320] FAT-fs (loop4): Directory bread(block 64) failed
[  813.450922][T25320] FAT-fs (loop4): Directory bread(block 65) failed
[  813.458548][T25320] FAT-fs (loop4): Directory bread(block 66) failed
[  813.465274][T25320] FAT-fs (loop4): Directory bread(block 67) failed
[  813.472364][T25320] FAT-fs (loop4): Directory bread(block 68) failed
[  813.479380][T25320] FAT-fs (loop4): Directory bread(block 69) failed
[  813.485998][T25320] FAT-fs (loop4): Directory bread(block 70) failed
[  813.500444][T25320] FAT-fs (loop4): Directory bread(block 71) failed
[  813.507074][T25320] FAT-fs (loop4): Directory bread(block 72) failed
[  813.518408][T25320] FAT-fs (loop4): Directory bread(block 73) failed
[  813.674503][T25333] loop5: detected capacity change from 0 to 256
[  813.715182][ T4251] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  813.786500][T25341] xt_l2tp: v2 doesn't support IP mode
[  813.789005][T25333] FAT-fs (loop5): Directory bread(block 64) failed
[  813.817945][T25333] FAT-fs (loop5): Directory bread(block 65) failed
[  813.830733][ T4259] usb 1-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config
[  813.849742][ T4259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  813.857293][T25333] FAT-fs (loop5): Directory bread(block 66) failed
[  813.872170][ T4259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  813.894292][ T4259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  813.895507][T25333] FAT-fs (loop5): Directory bread(block 67) failed
[  813.920274][T25333] FAT-fs (loop5): Directory bread(block 68) failed
[  813.928132][T25333] FAT-fs (loop5): Directory bread(block 69) failed
[  813.934920][T25333] FAT-fs (loop5): Directory bread(block 70) failed
[  813.950205][T25333] FAT-fs (loop5): Directory bread(block 71) failed
[  813.965425][T25333] FAT-fs (loop5): Directory bread(block 72) failed
[  814.006763][T25333] FAT-fs (loop5): Directory bread(block 73) failed
[  814.109524][ T4259] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  814.138209][ T4259] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  814.157453][ T4259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.167666][ T4251] usb 4-1: Using ep0 maxpacket: 32
[  814.177827][ T4259] usb 1-1: config 0 descriptor??
[  814.343355][ T4251] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  814.450355][ T4259] rc_core: IR keymap rc-hauppauge not found
[  814.452506][T25368] loop4: detected capacity change from 0 to 1764
[  814.456289][ T4259] Registered IR keymap rc-empty
[  814.489168][ T4259] mceusb 1-1:0.0: Error: mce write urb status = -71
[  814.535818][ T4251] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  814.544942][ T4251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.549401][T25368] iso9660: Corrupted directory entry in block 2 of inode 1920
[  814.567594][ T4259] mceusb 1-1:0.0: Error: mce write urb status = -71
[  814.578694][ T4251] usb 4-1: Product: syz
[  814.607577][ T4251] usb 4-1: Manufacturer: syz
[  814.613892][ T4259] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  814.629875][ T4251] usb 4-1: SerialNumber: syz
[  814.643168][ T4251] usb 4-1: config 0 descriptor??
[  814.651312][ T4259] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input73
[  814.685491][ T4259] mceusb 1-1:0.0: Error: mce write urb status = -71
[  814.693257][ T4251] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out.
[  814.759909][ T4259] mceusb 1-1:0.0: Error: mce write urb status = -71
[  814.781085][T25384] loop4: detected capacity change from 0 to 1764
[  814.824153][ T4259] mceusb 1-1:0.0: Error: mce write urb status = -71
[  814.900763][ T4259] mceusb 1-1:0.0: Error: mce write urb status = -71
[  814.938977][ T4694] usb 4-1: USB disconnect, device number 44
[  815.010627][ T4259] mceusb 1-1:0.0: Error: mce write urb status = -71
[  815.078904][T25401] netlink: 'syz.4.9017': attribute type 21 has an invalid length.
[  815.091229][ T4259] mceusb 1-1:0.0: Error: mce write urb status = -71
[  815.127372][T25401] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9017'.
[  815.166204][ T4259] mceusb 1-1:0.0: Error: mce write urb status = -71
[  815.258671][ T4259] mceusb 1-1:0.0: Error: mce write urb status = -71
[  815.336969][ T4259] mceusb 1-1:0.0: Error: mce write urb status = -71
[  815.345802][T25422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9029'.
[  815.378773][T25425] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9030'.
[  815.401314][ T4259] mceusb 1-1:0.0: Error: mce write urb status = -71
[  815.445379][ T4259] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  815.453463][ T4259] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  815.483936][ T4259] usb 1-1: USB disconnect, device number 50
[  815.499699][T25432] ipt_ECN: cannot use operation on non-tcp rule
[  815.839530][T25461] loop0: detected capacity change from 0 to 512
[  815.883710][T25461] EXT4-fs (loop0): Test dummy encryption mode enabled
[  815.905497][T25461] EXT4-fs (loop0): Ignoring removed oldalloc option
[  815.912258][T25461] EXT4-fs (loop0): Ignoring removed nobh option
[  815.923429][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  815.923445][   T26] audit: type=1400 audit(1756961081.571:42): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=25470 comm="syz.4.9054"
[  815.957667][T25461] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  816.029847][T25461] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  816.098220][T25461] EXT4-fs (loop0): Remounting filesystem read-only
[  816.116778][T25461] EXT4-fs (loop0): 1 truncate cleaned up
[  816.122769][ T4694] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  816.127744][T25461] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,quota,debug_want_extra_isize=0x000000000000002e,oldalloc,errors=remount-ro,nobh,. Quota mode: writeback.
[  816.195143][T25483] __nla_validate_parse: 3 callbacks suppressed
[  816.195160][T25483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9058'.
[  816.234738][    T7] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  816.242490][ T4259] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  816.282872][T25461] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 13: comm syz.0.9048: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0
[  816.352811][T25461] EXT4-fs (loop0): Remounting filesystem read-only
[  816.384624][ T4694] usb 2-1: Using ep0 maxpacket: 16
[  816.523467][ T4694] usb 2-1: config 0 has no interfaces?
[  816.694398][ T4694] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.e3
[  816.705571][ T4259] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  816.709903][ T4694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.722547][ T4694] usb 2-1: Product: syz
[  816.727938][ T4694] usb 2-1: Manufacturer: syz
[  816.729223][ T4259] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  816.732584][ T4694] usb 2-1: SerialNumber: syz
[  816.755201][ T4259] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  816.759927][ T4694] r8152-cfgselector 2-1: config 0 descriptor??
[  816.770534][ T4259] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  816.783958][ T4259] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  816.797741][ T4259] usb 6-1: config 0 interface 0 has no altsetting 0
[  816.808353][    T7] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4
[  816.815965][T25516] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9074'.
[  816.837971][    T7] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0
[  816.846579][    T7] usb 4-1: Manufacturer: syz
[  816.855044][    T7] usb 4-1: config 0 descriptor??
[  817.018126][ T4251] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  817.026074][ T4259] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  817.035127][ T4259] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  817.049233][ T4259] usb 6-1: Product: syz
[  817.058908][ T4694] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  817.059449][ T4259] usb 6-1: Manufacturer: syz
[  817.081651][ T4259] usb 6-1: SerialNumber: syz
[  817.089104][ T4259] usb 6-1: config 0 descriptor??
[  817.111556][T25474] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  817.144390][ T4259] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  817.155860][ T4259] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  817.187677][  T145] usb 2-1: config 0 descriptor??
[  817.287738][ T4700] usb 2-1: USB disconnect, device number 39
[  817.292716][  T145] usb 2-1: can't set config #0, error -71
[  817.344141][T25534] loop4: detected capacity change from 0 to 32768
[  817.374062][T25534] XFS (loop4): Mounting V5 Filesystem
[  817.399496][    T7] gs_usb 4-1:0.0: Couldn't get device config: (err=-71)
[  817.417035][    T7] gs_usb: probe of 4-1:0.0 failed with error -71
[  817.427656][    T7] usb 4-1: USB disconnect, device number 45
[  817.464887][ T4251] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  817.464987][ T4694] usb 6-1: USB disconnect, device number 8
[  817.486499][ T4251] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  817.497063][ T4251] usb 1-1: config 0 has no interface number 0
[  817.503340][ T4251] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  817.513559][ T4251] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  817.527035][ T4694] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  817.531701][T25534] XFS (loop4): Ending clean mount
[  817.580630][ T4195] XFS (loop4): Unmounting Filesystem
[  817.741648][ T4251] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  817.750921][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.759183][ T4251] usb 1-1: Product: syz
[  817.764321][ T4251] usb 1-1: Manufacturer: syz
[  817.768935][ T4251] usb 1-1: SerialNumber: syz
[  817.791985][ T4251] usb 1-1: config 0 descriptor??
[  817.990793][T25556] netlink: 'syz.3.9090': attribute type 1 has an invalid length.
[  818.030066][T25556] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9090'.
[  818.073239][T25556] nbd: couldn't find a device at index 1024
[  818.078290][T25562] netlink: 'syz.5.9093': attribute type 1 has an invalid length.
[  818.295743][T25578] netlink: 'syz.1.9100': attribute type 8 has an invalid length.
[  818.317234][ T4251] usb 1-1: USB disconnect, device number 51
[  818.369372][T25580] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9102'.
[  818.507095][T25592] No source specified
[  818.744202][T25611] loop3: detected capacity change from 0 to 256
[  819.097807][T25643] netlink: 'syz.3.9133': attribute type 1 has an invalid length.
[  819.152484][T25649] loop5: detected capacity change from 0 to 16
[  819.204053][T25641] loop1: detected capacity change from 0 to 4096
[  819.221653][T25649] erofs: (device loop5): mounted with root inode @ nid 36.
[  819.254109][T25649] erofs: (device loop5): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  819.284581][T25641] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  819.321056][T25657] device veth0_macvtap left promiscuous mode
[  819.363441][T25641] ntfs3: loop1: failed to convert "c46c" to cp1250
[  819.423472][T25653] loop4: detected capacity change from 0 to 8192
[  819.467252][T25663] netlink: 'syz.5.9142': attribute type 21 has an invalid length.
[  819.501822][T25663] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9142'.
[  819.747385][T25671] loop1: detected capacity change from 0 to 256
[  819.813628][T25675] loop0: detected capacity change from 0 to 4096
[  819.850939][T25683] loop4: detected capacity change from 0 to 256
[  819.910740][T25675] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  819.933099][T25671] FAT-fs (loop1): Directory bread(block 64) failed
[  819.939760][T25671] FAT-fs (loop1): Directory bread(block 65) failed
[  820.039310][T25683] FAT-fs (loop4): Directory bread(block 64) failed
[  820.044785][T25675] ntfs3: loop0: failed to convert "c46c" to iso8859-3
[  820.045877][T25683] FAT-fs (loop4): Directory bread(block 65) failed
[  820.071086][T25671] FAT-fs (loop1): Directory bread(block 66) failed
[  820.077670][T25671] FAT-fs (loop1): Directory bread(block 67) failed
[  820.094750][T25683] FAT-fs (loop4): Directory bread(block 66) failed
[  820.101320][T25683] FAT-fs (loop4): Directory bread(block 67) failed
[  820.149684][T25671] FAT-fs (loop1): Directory bread(block 68) failed
[  820.156292][T25671] FAT-fs (loop1): Directory bread(block 69) failed
[  820.173708][T25683] FAT-fs (loop4): Directory bread(block 68) failed
[  820.222328][T25683] FAT-fs (loop4): Directory bread(block 69) failed
[  820.229055][T25683] FAT-fs (loop4): Directory bread(block 70) failed
[  820.248960][T25671] FAT-fs (loop1): Directory bread(block 70) failed
[  820.266973][T25671] FAT-fs (loop1): Directory bread(block 71) failed
[  820.295382][T25683] FAT-fs (loop4): Directory bread(block 71) failed
[  820.306968][T25683] FAT-fs (loop4): Directory bread(block 72) failed
[  820.313530][T25683] FAT-fs (loop4): Directory bread(block 73) failed
[  820.331362][T25671] FAT-fs (loop1): Directory bread(block 72) failed
[  820.337993][T25671] FAT-fs (loop1): Directory bread(block 73) failed
[  820.660166][T25709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9166'.
[  820.735333][T25712] loop3: detected capacity change from 0 to 64
[  821.009945][T25724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9173'.
[  821.043098][T25713] loop0: detected capacity change from 0 to 4096
[  821.060532][T25727] tc_dump_action: action bad kind
[  821.143827][T25713] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  821.164396][T25737] loop4: detected capacity change from 0 to 256
[  821.211999][T25739] loop3: detected capacity change from 0 to 164
[  821.221035][T25713] ntfs3: loop0: failed to convert "c46c" to cp1250
[  821.252027][T25737] FAT-fs (loop4): Directory bread(block 64) failed
[  821.260240][T25737] FAT-fs (loop4): Directory bread(block 65) failed
[  821.266860][T25737] FAT-fs (loop4): Directory bread(block 66) failed
[  821.300016][T25737] FAT-fs (loop4): Directory bread(block 67) failed
[  821.310927][T25737] FAT-fs (loop4): Directory bread(block 68) failed
[  821.330181][T25737] FAT-fs (loop4): Directory bread(block 69) failed
[  821.347131][T25737] FAT-fs (loop4): Directory bread(block 70) failed
[  821.363485][T25737] FAT-fs (loop4): Directory bread(block 71) failed
[  821.402168][T25737] FAT-fs (loop4): Directory bread(block 72) failed
[  821.417824][T25739] iso9660: Corrupted directory entry in block 2 of inode 1920
[  821.445003][T25737] FAT-fs (loop4): Directory bread(block 73) failed
[  821.535684][T25755] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9189'.
[  821.620740][ T4688] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  821.817469][T25771] netlink: 'syz.4.9195': attribute type 4 has an invalid length.
[  821.838430][T25771] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.9195'.
[  822.005456][ T4688] usb 2-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51
[  822.033500][ T4688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.059102][T25787] netlink: 'syz.5.9205': attribute type 1 has an invalid length.
[  822.069948][ T4688] usb 2-1: config 0 descriptor??
[  822.135348][ T4688] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4
[  822.153968][T25793] loop3: detected capacity change from 0 to 256
[  822.237877][T25793] FAT-fs (loop3): Directory bread(block 64) failed
[  822.265304][T25793] FAT-fs (loop3): Directory bread(block 65) failed
[  822.289742][T25793] FAT-fs (loop3): Directory bread(block 66) failed
[  822.318186][T25793] FAT-fs (loop3): Directory bread(block 67) failed
[  822.324862][T25793] FAT-fs (loop3): Directory bread(block 68) failed
[  822.369330][T25793] FAT-fs (loop3): Directory bread(block 69) failed
[  822.385808][T25793] FAT-fs (loop3): Directory bread(block 70) failed
[  822.414348][T25793] FAT-fs (loop3): Directory bread(block 71) failed
[  822.420984][T25793] FAT-fs (loop3): Directory bread(block 72) failed
[  822.470475][T25793] FAT-fs (loop3): Directory bread(block 73) failed
[  822.588671][ T4688] gspca_sn9c20x: Write register 1001 failed -71
[  822.610421][ T4688] gspca_sn9c20x: Device initialization failed
[  822.629332][ T4688] gspca_sn9c20x: probe of 2-1:0.0 failed with error -71
[  822.657467][ T4688] usb 2-1: USB disconnect, device number 40
[  822.844075][T25822] loop5: detected capacity change from 0 to 8192
[  822.913261][T25840] netlink: 'syz.3.9231': attribute type 1 has an invalid length.
[  823.052721][ T4700] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  823.104631][T25853] netlink: 'syz.3.9239': attribute type 1 has an invalid length.
[  823.134012][T25853] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9239'.
[  823.159563][T25853] block nbd0: not configured, cannot reconfigure
[  823.309319][ T4700] usb 1-1: Using ep0 maxpacket: 8
[  823.394597][ T4251] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  823.438579][ T4700] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  823.468243][ T4700] usb 1-1: config 0 interface 0 has no altsetting 0
[  823.661992][ T4700] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  823.681483][ T4700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.691771][ T4700] usb 1-1: Product: syz
[  823.704306][ T4700] usb 1-1: Manufacturer: syz
[  823.705690][ T4251] usb 6-1: Using ep0 maxpacket: 8
[  823.714414][ T4700] usb 1-1: SerialNumber: syz
[  823.739841][ T4700] usb 1-1: config 0 descriptor??
[  823.781667][ T4700] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  823.784032][T25899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9261'.
[  823.798765][T25899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9261'.
[  823.843560][ T4251] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  823.851923][ T4251] usb 6-1: config 179 has no interface number 0
[  823.870945][ T4251] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  823.894074][T25905] loop1: detected capacity change from 0 to 16
[  823.913483][ T4251] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  823.933870][ T4251] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  823.951127][ T4251] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  823.969631][T25905] erofs: (device loop1): mounted with root inode @ nid 36.
[  823.992152][ T4251] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  824.005790][ T4700] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  824.037465][ T4700] snd_usb_toneport: probe of 1-1:0.0 failed with error -22
[  824.057123][ T4251] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  824.089393][ T4251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.109153][T25917] netlink: 'syz.4.9271': attribute type 5 has an invalid length.
[  824.121631][T25851] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  824.141309][T25919] loop3: detected capacity change from 0 to 256
[  824.153175][T25917] netlink: 'syz.4.9271': attribute type 11 has an invalid length.
[  824.176592][T25921] device gtp0 entered promiscuous mode
[  824.227548][ T4251] usb 1-1: USB disconnect, device number 52
[  824.297569][T25923] loop4: detected capacity change from 0 to 4096
[  824.352004][T25923] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  824.490723][T25939] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9281'.
[  824.604564][ T4251] usb 6-1: USB disconnect, device number 9
[  824.623483][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  824.653217][T25947] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9283'.
[  824.662955][T25947] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9283'.
[  824.715190][T25951] loop3: detected capacity change from 0 to 8
[  824.781055][T25951] SQUASHFS error: lzo decompression failed, data probably corrupt
[  824.791979][T25951] SQUASHFS error: Failed to read block 0x91: -5
[  824.825246][T25951] SQUASHFS error: Unable to read metadata cache entry [8f]
[  824.855693][T25951] SQUASHFS error: Unable to read inode 0x11f
[  825.128570][T25971] loop3: detected capacity change from 0 to 4096
[  825.201744][T25971] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  825.242086][T25971] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  825.283351][T25991] netlink: 'syz.4.9307': attribute type 1 has an invalid length.
[  825.298180][T25971] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  825.340235][T25971] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  825.406074][T25971] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr.
[  825.419068][T25999] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  825.435745][T25971] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  825.479014][T25971] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  825.512719][T25971] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  825.550512][T26006] loop1: detected capacity change from 0 to 2048
[  825.558489][T25971] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  825.569759][ T4700] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  825.612657][T26006] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  825.623656][T25971] ntfs: volume version 3.1.
[  825.667943][T25971] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  825.970414][ T4700] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  825.990380][ T4700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.019443][ T4700] usb 1-1: config 0 descriptor??
[  826.099511][ T4700] cp210x 1-1:0.0: cp210x converter detected
[  826.201593][T26041] loop5: detected capacity change from 0 to 65
[  826.317337][T26041] BFS-fs: bfs_iget(): Bad inode number loop5:00000002
[  826.325888][ T4700] usb 1-1: cp210x converter now attached to ttyUSB0
[  826.327245][T26053] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9338'.
[  826.376328][T26053] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9338'.
[  826.485054][T26059] loop4: detected capacity change from 0 to 2048
[  826.491674][T26063] netlink: 'syz.3.9343': attribute type 32 has an invalid length.
[  826.531574][T26066] overlayfs: unrecognized mount option "\{\" or missing value
[  826.541714][ T4244] usb 1-1: USB disconnect, device number 53
[  826.553043][ T4244] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  826.578643][ T4244] cp210x 1-1:0.0: device disconnected
[  826.591963][T26068] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  826.614626][T26059] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  826.641772][T26059] Remounting filesystem read-only
[  826.654012][ T4700] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  826.668287][T26059] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  826.791407][T26078] loop1: detected capacity change from 0 to 4096
[  826.860217][T26082] loop4: detected capacity change from 0 to 512
[  826.895452][T26078] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  826.910607][ T4700] usb 6-1: Using ep0 maxpacket: 16
[  826.932952][T26082] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.9352: bad orphan inode 15
[  826.985693][T26082] ext4_test_bit(bit=14, block=5) = 0
[  826.991011][T26082] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none.
[  827.038955][ T4700] usb 6-1: config 0 has an invalid interface number: 126 but max is 0
[  827.047158][ T4700] usb 6-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config
[  827.106381][ T4700] usb 6-1: config 0 has no interface number 0
[  827.125974][ T4700] usb 6-1: config 0 interface 126 altsetting 0 has an invalid endpoint with address 0xB7, skipping
[  827.178785][T26076] loop3: detected capacity change from 0 to 32768
[  827.187174][T26086] loop0: detected capacity change from 0 to 64
[  827.196932][ T4700] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  827.236969][ T4700] usb 6-1: config 0 interface 126 altsetting 0 has an invalid endpoint with address 0x1D, skipping
[  827.261724][ T4700] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  827.275411][ T4700] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  827.284870][ T4700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  827.350146][ T4700] usb 6-1: config 0 descriptor??
[  827.370414][T26041] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  827.513851][ T4700] snd-usb-audio: probe of 6-1:0.126 failed with error -2
[  827.604791][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  827.727179][ T4688] usb 6-1: USB disconnect, device number 10
[  827.752920][T26105] loop4: detected capacity change from 0 to 256
[  828.039361][T26120] loop4: detected capacity change from 0 to 256
[  828.060207][T26120] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  828.282732][T26133] loop0: detected capacity change from 0 to 1024
[  828.405153][T26133] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  828.449678][    T7] Bluetooth: hci3: command 0x0406 tx timeout
[  828.491577][T26133] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,resuid=0x0000000000000000,data=ordered,nodiscard,dioread_nolock,noblock_validity,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  828.594579][T26159] device geneve2 entered promiscuous mode
[  828.681451][T26164] netlink: 'syz.4.9392': attribute type 3 has an invalid length.
[  828.726992][T26133] EXT4-fs error (device loop0): __ext4_new_inode:1076: comm syz.0.9387: reserved inode found cleared - inode=1
[  828.934763][  T151] block nbd3: Attempted send on invalid socket
[  828.941141][  T151] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  828.965515][  T264] block nbd3: Attempted send on invalid socket
[  828.971758][  T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  828.978252][T26186] sctp: [Deprecated]: syz.0.9396 (pid 26186) Use of int in maxseg socket option.
[  828.978252][T26186] Use struct sctp_assoc_value instead
[  828.983041][  T264] block nbd3: Attempted send on invalid socket
[  829.004185][  T264] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  829.022598][  T151] block nbd3: Attempted send on invalid socket
[  829.029291][  T151] blk_update_request: I/O error, dev nbd3, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  829.040866][  T151] block nbd3: Attempted send on invalid socket
[  829.047088][  T151] blk_update_request: I/O error, dev nbd3, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  829.059381][  T151] block nbd3: Attempted send on invalid socket
[  829.065602][  T151] blk_update_request: I/O error, dev nbd3, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  829.080756][T26180] VFS: unable to find oldfs superblock on device nbd3
[  829.127176][T26191] loop1: detected capacity change from 0 to 512
[  829.210071][T26195] xt_TPROXY: Can be used only with -p tcp or -p udp
[  829.261014][T26199] loop3: detected capacity change from 0 to 1024
[  829.265178][T26191] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  829.296035][T26202] tmpfs: Bad value for 'mpol'
[  829.306374][T26205] loop5: detected capacity change from 0 to 1024
[  829.333787][T26199] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  829.362264][T26205] EXT4-fs (loop5): Ignoring removed nobh option
[  829.379543][T26191] EXT4-fs (loop1): 1 truncate cleaned up
[  829.385239][T26191] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nombcache,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,usrjquota=,. Quota mode: none.
[  829.414311][T26215] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9415'.
[  829.422217][T26205] EXT4-fs (loop5): Ignoring removed bh option
[  829.450386][T26199] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,resuid=0x0000000000000000,data=ordered,nodiscard,dioread_nolock,noblock_validity,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  829.552082][T26221] netlink: 192 bytes leftover after parsing attributes in process `syz.4.9418'.
[  829.593710][    T7] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  829.603479][T26205] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,grpquota,nobh,abort,lazytime,usrquota,resgid=0x0000000000000000,bh,,errors=continue. Quota mode: writeback.
[  829.625391][T26205] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  829.669344][T26199] EXT4-fs error (device loop3): __ext4_new_inode:1076: comm syz.3.9408: reserved inode found cleared - inode=1
[  829.775321][T26227] bridge0: port 4(netdevsim0) entered disabled state
[  830.018624][T26238] xt_connbytes: Forcing CT accounting to be enabled
[  830.031333][    T7] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  830.040407][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  830.069166][    T7] usb 1-1: config 0 descriptor??
[  830.150925][    T7] gspca_main: cpia1-2.14.0 probing 0813:0001
[  830.218108][ T4688] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  830.309721][T26263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9437'.
[  830.393654][T26269] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9440'.
[  830.490846][ T5082] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  830.619000][    T7] gspca_cpia1: usb_control_msg 03, error -71
[  830.633403][T26285] loop4: detected capacity change from 0 to 1024
[  830.646961][    T7] gspca_cpia1: usb_control_msg 01, error -71
[  830.653670][    T7] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  830.662945][ T4688] usb 4-1: unable to get BOS descriptor or descriptor too short
[  830.704532][ T4688] usb 4-1: not running at top speed; connect to a high speed hub
[  830.706855][    T7] usb 1-1: USB disconnect, device number 54
[  830.722814][T26285] hfsplus: filesystem is marked journaled, leaving read-only.
[  830.811496][ T4688] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  830.829744][ T4688] usb 4-1: config 1 interface 0 has no altsetting 0
[  830.838509][T26293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9452'.
[  830.875619][ T4688] usb 4-1: language id specifier not provided by device, defaulting to English
[  830.916135][T26297] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9454'.
[  830.939705][ T5082] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  830.957484][ T5082] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  830.968468][T26299] loop4: detected capacity change from 0 to 16
[  831.004137][ T4688] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  831.004556][T26299] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  831.013219][ T4688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.013245][ T4688] usb 4-1: Product: syz
[  831.013259][ T4688] usb 4-1: Manufacturer: 晹ⱴ䙜穈쉆ᓧ⇯䫼¬횒錅᦬蜼�ඨㇻ곌鵄ʀ嵩⋵걆ꪱ솃腢񈱋
[  831.013276][ T4688] usb 4-1: SerialNumber: syz
[  831.040870][T26236] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  831.057277][ T4251] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  831.164197][ T5082] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  831.173565][ T5082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.181685][ T5082] usb 6-1: Product: syz
[  831.195979][ T5082] usb 6-1: Manufacturer: syz
[  831.200795][ T5082] usb 6-1: SerialNumber: syz
[  831.381503][ T4688] usb 4-1: USB disconnect, device number 46
[  831.516730][ T4251] usb 2-1: config 2 has an invalid interface number: 163 but max is 0
[  831.525050][ T4251] usb 2-1: config 2 has no interface number 0
[  831.531394][ T4251] usb 2-1: config 2 interface 163 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  831.542450][ T4251] usb 2-1: config 2 interface 163 has no altsetting 0
[  831.580989][ T5082] usb 6-1: 0:2 : does not exist
[  831.634496][    T7] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  831.689538][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  831.695838][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  831.751723][ T4694] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  831.762857][ T4251] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=fe.b5
[  831.771995][ T4251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.780327][ T4251] usb 2-1: Product: syz
[  831.794352][ T5082] usb 6-1: USB disconnect, device number 11
[  831.804596][ T4251] usb 2-1: Manufacturer: syz
[  831.809339][ T4251] usb 2-1: SerialNumber: syz
[  831.823757][ T4427] udevd[4427]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  831.848349][T26289] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  831.883545][T26317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9464'.
[  832.051371][    T7] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e
[  832.060438][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.128813][    T7] pwc: Logitech ViewPort AV 100 webcam detected.
[  832.178351][ T4251] usb 2-1: USB disconnect, device number 41
[  832.283890][T26343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9477'.
[  832.308832][ T4694] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  832.330085][ T4694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.338194][ T4694] usb 1-1: Product: syz
[  832.350247][ T4694] usb 1-1: Manufacturer: syz
[  832.357951][ T4694] usb 1-1: SerialNumber: syz
[  832.378031][ T4694] usb 1-1: config 0 descriptor??
[  832.426304][ T4694] ch341 1-1:0.0: ch341-uart converter detected
[  832.568901][T26363] rdma_rxe: rxe creation allowed on top of a real device only
[  832.608100][    T7] pwc: send_video_command error -71
[  832.619494][    T7] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  832.627064][    T7] Philips webcam: probe of 5-1:127.0 failed with error -71
[  832.660344][ T4694] usb 1-1: failed to receive control message: -71
[  832.666903][ T4694] ch341-uart: probe of ttyUSB0 failed with error -71
[  832.687133][    T7] usb 5-1: USB disconnect, device number 45
[  832.709424][ T4694] usb 1-1: USB disconnect, device number 55
[  832.730937][ T4694] ch341 1-1:0.0: device disconnected
[  833.139974][T26401] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  833.161557][T26401] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  833.175706][T26401] overlayfs: missing 'lowerdir'
[  833.407698][T26414] loop0: detected capacity change from 0 to 4096
[  833.423103][T26422] device wireguard0 entered promiscuous mode
[  833.427227][T26428] loop5: detected capacity change from 0 to 512
[  833.468051][T26414] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  833.489205][T26428] EXT4-fs (loop5): Ignoring removed oldalloc option
[  833.499076][T26428] EXT4-fs (loop5): Ignoring removed bh option
[  833.547746][T26428] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b80ee02c, mo2=0002]
[  833.601706][T26428] System zones: 1-12
[  833.667778][T26428] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.9516: invalid indirect mapped block 1 (level 1)
[  833.699262][T26428] EXT4-fs (loop5): Remounting filesystem read-only
[  833.705815][T26428] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.9516: invalid indirect mapped block 7 (level 2)
[  833.798678][T26428] EXT4-fs (loop5): Remounting filesystem read-only
[  833.824062][T26428] EXT4-fs (loop5): 1 truncate cleaned up
[  833.845061][T26428] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,min_batch_time=0x0000000000000059,min_batch_time=0x0000000000000000,errors=remount-ro,jqfmt=vfsv0,inode_readahead_blks=0x0000000001000000,max_batch_time=0x0000000000000001,usrquota,data_err=abort,bh,journal_ioprio=0. Quota mode: writeback.
[  833.906757][ T4186] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22.
[  833.948699][ T4186] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22.
[  833.961629][ T4186] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  833.991889][T26446] loop4: detected capacity change from 0 to 1764
[  834.055739][T26450] xt_CT: You must specify a L4 protocol and not use inversions on it
[  834.297365][T26464] device lo entered promiscuous mode
[  834.335103][T26464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  834.338374][T26434] loop1: detected capacity change from 0 to 32768
[  834.616044][ T4244] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  834.904465][ T4244] usb 5-1: Using ep0 maxpacket: 16
[  834.923041][T26492] loop5: detected capacity change from 0 to 4096
[  834.978672][T26492] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  835.029308][T26508] netlink: 'syz.3.9556': attribute type 21 has an invalid length.
[  835.041670][ T4244] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[  835.078796][ T4244] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  835.078998][T26508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9556'.
[  835.111548][T26510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9558'.
[  835.115443][ T4244] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  835.185612][ T4244] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  835.216216][T19702] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22.
[  835.232081][T19702] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22.
[  835.241599][ T4244] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  835.271745][T19702] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  835.285577][ T4244] usb 5-1: config 0 has no interface number 0
[  835.310040][T26518] device ip6erspan0 entered promiscuous mode
[  835.321877][ T4244] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  835.368977][ T4244] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  835.401532][ T4244] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  835.435627][ T4244] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  835.479334][ T4244] usb 5-1: config 0 interface 125 has no altsetting 0
[  835.486610][ T4244] usb 5-1: config 0 interface 125 has no altsetting 2
[  835.663457][ T4244] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  835.672537][ T4244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.732928][ T4244] usb 5-1: Product: syz
[  835.737131][ T4244] usb 5-1: Manufacturer: syz
[  835.759098][ T4244] usb 5-1: SerialNumber: syz
[  835.787241][ T4244] usb 5-1: config 0 descriptor??
[  835.846500][ T4244] usb 5-1: selecting invalid altsetting 2
[  836.060822][T26563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9584'.
[  836.196873][T26528] loop0: detected capacity change from 0 to 32768
[  836.304506][    C1] usb 5-1: async_complete: urb error -71
[  836.310284][    C1] usb 5-1: async_complete: urb error -71
[  836.316011][    C1] usb 5-1: async_complete: urb error -71
[  836.324251][ T4244] get_1284_register: usb error -71
[  836.329758][ T4244] uss720: probe of 5-1:0.125 failed with error -71
[  836.340241][ T4244] usb 5-1: USB disconnect, device number 46
[  836.392588][T26528] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  836.520564][T26528] (syz.0.9565,26528,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=65, rec_len=64016, name_len=255
[  836.580304][T26528] (syz.0.9565,26528,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  836.614771][T26528] (syz.0.9565,26528,0):ocfs2_mknod:298 ERROR: status = -2
[  836.622123][T26528] (syz.0.9565,26528,0):ocfs2_mknod:502 ERROR: status = -2
[  836.625464][T26594] kcapi: manufacturer command 4294967295 unknown.
[  836.629538][T26528] (syz.0.9565,26528,0):ocfs2_create:676 ERROR: status = -2
[  836.667909][ T4688] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  836.762905][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[  836.924576][ T4688] usb 2-1: Using ep0 maxpacket: 32
[  837.053163][ T4688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  837.091431][T26616] loop5: detected capacity change from 0 to 512
[  837.160024][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  837.172561][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  837.184964][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  837.197380][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  837.209801][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  837.222345][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  837.234765][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  837.247173][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  837.259587][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  837.365526][ T4688] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  837.383901][ T4688] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  837.392110][ T4688] usb 2-1: Product: syz
[  837.426662][ T4688] usb 2-1: Manufacturer: syz
[  837.431299][ T4688] usb 2-1: SerialNumber: syz
[  837.436991][T26616] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  837.468066][ T4688] usb 2-1: config 0 descriptor??
[  837.730162][T26616] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,stripe=0x0000000000000002,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  837.792355][T26616] ext4 filesystem being mounted at /594/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  837.823141][ T4244] usb 2-1: USB disconnect, device number 42
[  837.990108][ T4694] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  838.391815][ T4694] usb 1-1: Using ep0 maxpacket: 8
[  838.477042][T26668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9633'.
[  838.554848][T26668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9633'.
[  838.601545][ T4694] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  838.608303][T26668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9633'.
[  838.624438][ T4694] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  838.632138][T26676] usb usb9: usbfs: process 26676 (syz.3.9637) did not claim interface 0 before use
[  838.650846][ T4694] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  838.693335][ T4694] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  838.734243][ T4694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  838.770504][ T4694] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  838.906945][T26690] xt_CT: No such helper "syz0"
[  839.116201][ T4694] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  839.125291][ T4694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.171302][ T4694] usb 1-1: Product: syz
[  839.175503][ T4694] usb 1-1: Manufacturer: syz
[  839.200783][ T4694] usb 1-1: SerialNumber: syz
[  839.244372][ T4694] usb 1-1: config 0 descriptor??
[  839.296768][ T4694] hub 1-1:0.0: bad descriptor, ignoring hub
[  839.318353][ T4694] hub: probe of 1-1:0.0 failed with error -5
[  839.405730][T26716] xt_hashlimit: max too large, truncated to 1048576
[  839.603501][T26728] bridge0: port 4(netdevsim0) entered disabled state
[  839.639239][ T4251] usb 1-1: USB disconnect, device number 56
[  839.694939][    C1] net_ratelimit: 4308 callbacks suppressed
[  839.694955][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  839.713131][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  839.725510][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  839.737861][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  839.750195][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  839.762992][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  839.775366][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  839.787826][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  839.800172][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  839.812542][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  839.969948][T26748] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9672'.
[  840.057159][    T7] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  840.106549][T26752] netlink: 'syz.4.9675': attribute type 1 has an invalid length.
[  840.385379][T26768] netlink: 'syz.0.9682': attribute type 10 has an invalid length.
[  840.446111][T26768] bridge0: port 4(macsec0) entered blocking state
[  840.531581][    T7] usb 4-1: config 0 has an invalid interface number: 11 but max is 0
[  840.543875][T26768] bridge0: port 4(macsec0) entered disabled state
[  840.565026][    T7] usb 4-1: config 0 has no interface number 0
[  840.566872][T26774] loop1: detected capacity change from 0 to 2048
[  840.593174][T26768] device macsec0 entered promiscuous mode
[  840.613914][    T7] usb 4-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[  840.624511][T26780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9688'.
[  840.651691][    T7] usb 4-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  840.689633][    T7] usb 4-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[  840.890013][    T7] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca
[  840.908767][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.978037][    T7] usb 4-1: Product: syz
[  841.014396][    T7] usb 4-1: Manufacturer: syz
[  841.037010][    T7] usb 4-1: SerialNumber: syz
[  841.086325][    T7] usb 4-1: config 0 descriptor??
[  841.119999][T26737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  841.159226][T26737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  841.220185][ T4700] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  841.252960][ T4259] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  841.434318][T26737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  841.466741][T26737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  841.483862][    T7] usb 4-1: No status endpoint found
[  841.545625][ T4259] usb 1-1: Using ep0 maxpacket: 16
[  841.680802][ T4259] usb 1-1: config 0 descriptor has 1 excess byte, ignoring
[  841.697723][ T4259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  841.729631][ T4259] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  841.754092][ T4694] usb 4-1: USB disconnect, device number 47
[  841.761731][ T4259] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024
[  841.769423][ T4700] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  841.797862][ T4700] usb 2-1: config 1 has an invalid descriptor of length 166, skipping remainder of the config
[  841.827123][ T4259] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  841.830563][ T4700] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  841.879790][ T4700] usb 2-1: config 1 has no interface number 0
[  841.917813][ T4700] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  841.965877][ T4700] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  842.042565][ T4259] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  842.082176][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.095874][ T4259] usb 1-1: Product: syz
[  842.100792][ T4259] usb 1-1: Manufacturer: syz
[  842.105653][ T4259] usb 1-1: SerialNumber: syz
[  842.149152][ T4259] usb 1-1: config 0 descriptor??
[  842.161554][T26834] ipt_rpfilter: unknown options
[  842.176368][T26786] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  842.213154][T26786] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  842.235909][ T4700] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  842.246147][ T4259] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected
[  842.256106][ T4700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.268772][    C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71)
[  842.272244][ T4700] usb 2-1: Product: syz
[  842.274953][    C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71)
[  842.340841][ T4700] usb 2-1: Manufacturer: syz
[  842.378746][ T4700] usb 2-1: SerialNumber: syz
[  842.447727][ T4700] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  842.454918][ T4700] cdc_ncm 2-1:1.1: bind() failure
[  842.513316][ T4259] usb 1-1: USB disconnect, device number 57
[  842.529573][ T4259] mcba_usb 1-1:0.0 can0: device disconnected
[  842.803110][    T7] usb 2-1: USB disconnect, device number 43
[  843.249599][T26840] loop4: detected capacity change from 0 to 32768
[  843.264028][T26840] XFS: attr2 mount option is deprecated.
[  843.539201][T26893] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  843.545778][T26840] XFS (loop4): Mounting V5 Filesystem
[  843.775506][T26913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9739'.
[  843.816986][T26913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9739'.
[  843.895304][T26913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9739'.
[  843.921293][T26926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9743'.
[  843.938824][T26925] loop5: detected capacity change from 0 to 164
[  843.945256][T26913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9739'.
[  844.018694][T26920] loop1: detected capacity change from 0 to 4096
[  844.088955][T26925] Unsupported NM flag settings (8)
[  844.200054][T26840] XFS (loop4): Ending clean mount
[  844.216789][T26840] XFS (loop4): Quotacheck needed: Please wait.
[  844.285762][T26840] XFS (loop4): Quotacheck: Done.
[  844.291386][T26940] xt_CT: You must specify a L4 protocol and not use inversions on it
[  844.376660][ T4195] XFS (loop4): Unmounting Filesystem
[  844.450473][T26948] netlink: 'syz.0.9754': attribute type 11 has an invalid length.
[  844.458344][T26948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9754'.
[  844.520527][T26945] loop3: detected capacity change from 0 to 4096
[  844.837691][T26920] __ntfs_warning: 10 callbacks suppressed
[  844.837709][T26920] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  844.972429][T26920] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  844.983598][T26920] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  844.992473][T26920] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  845.046950][    C1] net_ratelimit: 8554 callbacks suppressed
[  845.046965][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  845.066959][T26920] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  845.080752][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  845.093122][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  845.106019][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  845.118358][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  845.131436][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  845.143865][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  845.156794][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  845.163210][T26950] loop0: detected capacity change from 0 to 32768
[  845.169236][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  845.188400][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  845.353244][T26920] ntfs: volume version 3.1.
[  845.393956][T26920] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota.
[  845.407370][T26950] JBD2: Ignoring recovery information on journal
[  845.443307][T26920] ntfs: (device loop1): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  845.543750][T26974] loop4: detected capacity change from 0 to 2048
[  845.618987][T26950] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  845.750586][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[  845.758374][T26985] netlink: 'syz.5.9769': attribute type 1 has an invalid length.
[  845.815719][T26985] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9769'.
[  845.830601][T26974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  845.851312][T26985] NCSI netlink: No device for ifindex 0
[  845.880835][T26974] UDF-fs: unknown compression code (9)
[  845.932527][T26991] loop5: detected capacity change from 0 to 164
[  846.388333][T27011] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9782'.
[  846.654247][T27028] netlink: 22 bytes leftover after parsing attributes in process `syz.1.9789'.
[  846.725644][T27028] netlink: 22 bytes leftover after parsing attributes in process `syz.1.9789'.
[  846.749957][T27028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9789'.
[  846.840079][T27039] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9795'.
[  846.882902][T27040] loop0: detected capacity change from 0 to 256
[  846.907234][T26987] loop3: detected capacity change from 0 to 32768
[  847.010621][T27040] FAT-fs (loop0): Directory bread(block 64) failed
[  847.040203][T27040] FAT-fs (loop0): Directory bread(block 65) failed
[  847.062032][T27040] FAT-fs (loop0): Directory bread(block 66) failed
[  847.094109][T27040] FAT-fs (loop0): Directory bread(block 67) failed
[  847.115205][T27040] FAT-fs (loop0): Directory bread(block 68) failed
[  847.153720][T27040] FAT-fs (loop0): Directory bread(block 69) failed
[  847.160351][T27040] FAT-fs (loop0): Directory bread(block 70) failed
[  847.203711][T27040] FAT-fs (loop0): Directory bread(block 71) failed
[  847.222570][T27040] FAT-fs (loop0): Directory bread(block 72) failed
[  847.240465][T27040] FAT-fs (loop0): Directory bread(block 73) failed
[  847.531968][ T4259] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  847.635048][T27085] netlink: 'syz.4.9815': attribute type 10 has an invalid length.
[  847.660400][T27085] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9815'.
[  847.689462][T27085] batman_adv: batadv0: Adding interface: virt_wifi0
[  847.716983][T27085] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  847.805895][T27085] batman_adv: batadv0: Interface activated: virt_wifi0
[  847.963858][T27099] netlink: 'syz.4.9821': attribute type 3 has an invalid length.
[  847.979321][T27101] IPv6: NLM_F_CREATE should be specified when creating new route
[  848.006576][T27099] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9821'.
[  848.025135][T27100] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready
[  848.051025][ T4259] usb 6-1: unable to get BOS descriptor or descriptor too short
[  848.105960][ T4259] usb 6-1: not running at top speed; connect to a high speed hub
[  848.258868][ T4259] usb 6-1: config 12 has an invalid interface number: 184 but max is 0
[  848.279115][ T4259] usb 6-1: config 12 has no interface number 0
[  848.290003][T27114] netlink: 'syz.1.9829': attribute type 1 has an invalid length.
[  848.314904][T27114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9829'.
[  848.329910][ T4259] usb 6-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  848.528647][T27129] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  848.535292][T27129] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  848.579680][ T4259] usb 6-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2
[  848.584424][T27129] vhci_hcd vhci_hcd.0: Device attached
[  848.602255][ T4259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.637269][ T4259] usb 6-1: Product: syz
[  848.652627][ T4259] usb 6-1: Manufacturer: syz
[  848.657260][ T4259] usb 6-1: SerialNumber: syz
[  848.712406][T27138] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6)
[  848.718957][T27138] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  848.777316][T27138] vhci_hcd vhci_hcd.0: Device attached
[  848.794855][T27142] device bond0 left promiscuous mode
[  848.810987][T27142] device bond_slave_0 left promiscuous mode
[  848.811677][T27139] vhci_hcd: connection closed
[  848.817072][T27142] device bond_slave_1 left promiscuous mode
[  848.817397][T27130] vhci_hcd: connection closed
[  848.836603][T27142] device batadv0 left promiscuous mode
[  848.848107][    T9] vhci_hcd: stop threads
[  848.880521][    T9] vhci_hcd: release socket
[  848.932577][    T9] vhci_hcd: disconnect device
[  848.936700][ T4688] vhci_hcd: vhci_device speed not set
[  848.943793][T27142] device vxcan0 left promiscuous mode
[  848.967978][T27142] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.981996][    T9] vhci_hcd: stop threads
[  848.993067][T27142] bridge0: port 2(bridge_slave_1) entered disabled state
[  849.011463][    T9] vhci_hcd: release socket
[  849.060499][    T9] vhci_hcd: disconnect device
[  849.099189][ T4688] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[  849.107021][ T4688] usb 39-1: enqueue for inactive port 0
[  849.155671][ T4259] usb 6-1: USB disconnect, device number 12
[  849.164494][T27144] loop1: detected capacity change from 0 to 4096
[  849.242533][T27142] device netdevsim0 left promiscuous mode
[  849.251849][T27144] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  849.295580][ T4688] vhci_hcd: vhci_device speed not set
[  849.345158][T27142] device gretap1 left promiscuous mode
[  849.421886][T27142] device bridge2 left promiscuous mode
[  849.524386][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  849.765976][T27153] loop5: detected capacity change from 0 to 256
[  849.926610][T27135] loop0: detected capacity change from 0 to 32768
[  849.938056][T27159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9847'.
[  850.389533][T27177] xt_TPROXY: Can be used only with -p tcp or -p udp
[  850.420451][    C1] net_ratelimit: 5371 callbacks suppressed
[  850.420466][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  850.438726][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  850.451613][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  850.463951][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  850.476434][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  850.488748][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  850.501652][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  850.513999][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  850.526358][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  850.538730][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  850.760026][T27190] loop5: detected capacity change from 0 to 1024
[  850.760593][T27193] loop0: detected capacity change from 0 to 1024
[  850.950857][T27190] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  850.974935][T27190] attempt to access beyond end of device
[  850.974935][T27190] loop5: rw=0, want=917506, limit=1024
[  851.014472][T27190] Buffer I/O error on dev loop5, logical block 458752, async page read
[  851.032905][T27190] attempt to access beyond end of device
[  851.032905][T27190] loop5: rw=0, want=917506, limit=1024
[  851.067991][T27190] Buffer I/O error on dev loop5, logical block 458752, async page read
[  851.085100][T27211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9874'.
[  851.177115][T27214] loop4: detected capacity change from 0 to 736
[  851.183875][T27215] device netdevsim0 entered promiscuous mode
[  851.287178][T27219] loop5: detected capacity change from 0 to 64
[  851.393135][T27219] attempt to access beyond end of device
[  851.393135][T27219] loop5: rw=0, want=234881064, limit=64
[  851.403901][T27223] loop3: detected capacity change from 0 to 512
[  851.411601][T27219] Buffer I/O error on dev loop5, logical block 117440531, async page read
[  851.427477][T27219] attempt to access beyond end of device
[  851.427477][T27219] loop5: rw=0, want=8548515842, limit=64
[  851.447517][T27219] Buffer I/O error on dev loop5, logical block 4274257920, async page read
[  851.468395][T27219] attempt to access beyond end of device
[  851.468395][T27219] loop5: rw=0, want=301989890, limit=64
[  851.480162][T27219] Buffer I/O error on dev loop5, logical block 150994944, async page read
[  851.495493][T27219] attempt to access beyond end of device
[  851.495493][T27219] loop5: rw=0, want=234881064, limit=64
[  851.509435][T27219] Buffer I/O error on dev loop5, logical block 117440531, async page read
[  851.525789][   T26] audit: type=1800 audit(1756961114.882:43): pid=27219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9877" name="file2" dev="loop5" ino=6 res=0 errno=0
[  851.561324][T27219] Trying to free block not in datazone
[  851.567865][T27219] Trying to free block not in datazone
[  851.573431][T27219] Trying to free block not in datazone
[  851.592973][T27219] Trying to free block not in datazone
[  851.724258][T27225] ipt_CLUSTERIP: bad local_nodes[1] 0
[  852.057848][T27241] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9889'.
[  852.149783][T27245] loop5: detected capacity change from 0 to 512
[  852.210668][T27245] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  852.231675][T27245] ext4 filesystem being mounted at /667/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  852.369036][T27252] loop1: detected capacity change from 0 to 256
[  852.397922][T27254] loop5: detected capacity change from 0 to 256
[  852.418315][T27193] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,data_err=ignore,,errors=continue. Quota mode: writeback.
[  852.532592][T27223] EXT4-fs (loop3): Test dummy encryption mode enabled
[  852.614369][T27223] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  852.675382][T27223] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  852.701680][T27223] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,delalloc,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  853.046592][T27254] FAT-fs (loop5): Directory bread(block 64) failed
[  853.070013][T27254] FAT-fs (loop5): Directory bread(block 65) failed
[  853.105795][T27223] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  853.116461][T27254] FAT-fs (loop5): Directory bread(block 66) failed
[  853.159069][T27214] rock: directory entry would overflow storage
[  853.172166][T27254] FAT-fs (loop5): Directory bread(block 67) failed
[  853.201393][T27214] rock: sig=0x3b10, size=4, remaining=3
[  853.234023][T27254] FAT-fs (loop5): Directory bread(block 68) failed
[  853.257491][T27254] FAT-fs (loop5): Directory bread(block 69) failed
[  853.313915][T27254] FAT-fs (loop5): Directory bread(block 70) failed
[  853.368261][T27254] FAT-fs (loop5): Directory bread(block 71) failed
[  853.380519][T27284] netlink: 196 bytes leftover after parsing attributes in process `syz.0.9904'.
[  853.412495][T27254] FAT-fs (loop5): Directory bread(block 72) failed
[  853.426345][T27254] FAT-fs (loop5): Directory bread(block 73) failed
[  853.500754][T27285] loop3: detected capacity change from 0 to 4096
[  853.543719][T27284] netlink: 196 bytes leftover after parsing attributes in process `syz.0.9904'.
[  853.563237][T27284] netlink: 19 bytes leftover after parsing attributes in process `syz.0.9904'.
[  853.621519][T27285] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  853.706406][   T26] audit: type=1800 audit(1756961116.931:44): pid=27254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9894" name="file2" dev="loop5" ino=1048667 res=0 errno=0
[  854.078274][ T4259] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  854.091918][T27308] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9915'.
[  854.149065][T27310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9917'.
[  854.176552][T27310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9917'.
[  854.226402][T27310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9917'.
[  854.305473][T27310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9917'.
[  854.366657][T27310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9917'.
[  854.467195][T27319] netlink: 'syz.1.9921': attribute type 10 has an invalid length.
[  854.506250][ T4259] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10
[  854.516538][T27319] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  854.541781][ T4259] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024
[  854.585820][ T4259] usb 5-1: config 0 interface 0 has no altsetting 0
[  854.588902][T27319] infiniband syz2: set active
[  854.616086][ T4688] lo speed is unknown, defaulting to 1000
[  854.685615][T27325] x_tables: duplicate underflow at hook 1
[  854.794569][ T4259] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  854.807466][ T4259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.820016][T27295] loop0: detected capacity change from 0 to 32768
[  854.869370][ T4259] usb 5-1: Product: syz
[  854.872347][T27331] loop1: detected capacity change from 0 to 64
[  854.873616][ T4259] usb 5-1: Manufacturer: syz
[  854.892877][ T4259] usb 5-1: SerialNumber: syz
[  854.909969][ T4259] usb 5-1: config 0 descriptor??
[  854.956030][ T4259] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected
[  854.981408][ T4259] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7
[  855.012002][ T4259] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81
[  855.037415][T27341] loop3: detected capacity change from 0 to 512
[  855.061680][ T4259] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1
[  855.072807][T27295] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  855.116820][ T4259] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2
[  855.135975][T27295] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  855.173905][ T4259] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85
[  855.223106][T27295] (syz.0.9909,27295,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=64
[  855.250605][ T4259] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5
[  855.264633][T27295] (syz.0.9909,27295,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  855.273481][T27295] (syz.0.9909,27295,1):ocfs2_mknod:298 ERROR: status = -2
[  855.276081][T27341] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[  855.290968][T27295] (syz.0.9909,27295,1):ocfs2_mknod:502 ERROR: status = -2
[  855.309127][T27295] (syz.0.9909,27295,1):ocfs2_create:676 ERROR: status = -2
[  855.376116][ T4259] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  855.440342][ T4259] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83
[  855.448740][T27341] ext4 filesystem being mounted at /1969/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  855.507491][ T4259] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3
[  855.553636][ T4259] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4
[  855.586713][ T4259] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86
[  855.637773][ T4259] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6
[  855.689689][ T4259] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  855.756526][ T4259] usb 5-1: USB disconnect, device number 47
[  855.767107][    C1] net_ratelimit: 7771 callbacks suppressed
[  855.767122][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  855.785403][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  855.797875][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  855.810795][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  855.823146][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  855.835481][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  855.847835][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  855.860695][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  855.873035][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  855.885411][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  855.904682][ T4259] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  855.919144][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[  855.956755][ T4259] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  856.031782][ T4259] keyspan 5-1:0.0: device disconnected
[  856.425829][T27389] loop5: detected capacity change from 0 to 4096
[  856.544014][T27389] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  856.586216][T27405] loop4: detected capacity change from 0 to 64
[  856.630580][T27389] ntfs: volume version 3.1.
[  856.795096][ T4694] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  856.984463][T27427] loop4: detected capacity change from 0 to 164
[  857.010958][T27417] loop0: detected capacity change from 0 to 4096
[  857.037122][T27429] netlink: 'syz.5.9974': attribute type 21 has an invalid length.
[  857.100254][T27427] isofs: Unable to find the ".." directory for NFS.
[  857.157461][ T4694] usb 4-1: Using ep0 maxpacket: 32
[  857.325909][ T4694] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  857.336923][ T4694] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  857.400421][T27448] netlink: 'syz.1.9984': attribute type 1 has an invalid length.
[  857.425330][T27448] __nla_validate_parse: 21 callbacks suppressed
[  857.425345][T27448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9984'.
[  857.565232][ T4694] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  857.590062][ T4694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.598458][ T4694] usb 4-1: Product: syz
[  857.602708][ T4694] usb 4-1: Manufacturer: syz
[  857.615764][ T4694] usb 4-1: SerialNumber: syz
[  857.630597][ T4694] usb 4-1: config 0 descriptor??
[  857.826159][T27450] loop5: detected capacity change from 0 to 32768
[  857.842393][T27460] loop1: detected capacity change from 0 to 256
[  857.883446][T27450] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  857.936345][ T4694] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device:
[  857.945216][ T4694] f6 f2 2c 05 00 00 00 00 
[  857.949782][ T4694] snd-usb-6fire: probe of 4-1:0.0 failed with error -5
[  857.992357][T19702] ocfs2: Unmounting device (7,5) on (node local)
[  858.161561][    T7] usb 4-1: USB disconnect, device number 48
[  858.184482][T27460] FAT-fs (loop1): Directory bread(block 64) failed
[  858.191067][T27460] FAT-fs (loop1): Directory bread(block 65) failed
[  858.220220][T27460] FAT-fs (loop1): Directory bread(block 66) failed
[  858.229360][T27460] FAT-fs (loop1): Directory bread(block 67) failed
[  858.257464][T27460] FAT-fs (loop1): Directory bread(block 68) failed
[  858.264222][T27460] FAT-fs (loop1): Directory bread(block 69) failed
[  858.296765][T27460] FAT-fs (loop1): Directory bread(block 70) failed
[  858.311979][T27460] FAT-fs (loop1): Directory bread(block 71) failed
[  858.318601][T27460] FAT-fs (loop1): Directory bread(block 72) failed
[  858.374946][T27460] FAT-fs (loop1): Directory bread(block 73) failed
[  858.472646][T27474] mip6: mip6_rthdr_init_state: spi is not 0: 1
[  858.588749][ T4259] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  858.830461][T27486] netlink: 'syz.3.10003': attribute type 6 has an invalid length.
[  858.898906][ T4259] usb 5-1: Using ep0 maxpacket: 32
[  859.118619][ T4259] usb 5-1: unable to get BOS descriptor or descriptor too short
[  859.225716][ T4259] usb 5-1: config 2 has an invalid interface number: 172 but max is 0
[  859.234442][    T7] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  859.252935][ T4259] usb 5-1: config 2 has no interface number 0
[  859.270439][ T4259] usb 5-1: config 2 interface 172 has no altsetting 0
[  859.411424][T27502] loop5: detected capacity change from 0 to 4096
[  859.420141][T27496] loop3: detected capacity change from 0 to 32768
[  859.454733][ T4259] usb 5-1: New USB device found, idVendor=a168, idProduct=0610, bcdDevice= 3.8a
[  859.471465][T27496] (syz.3.10007,27496,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  859.497774][T27502] ntfs: (device loop5): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk.
[  859.514494][ T4259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.521085][T27496] (syz.3.10007,27496,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  859.532462][ T4259] usb 5-1: Product: syz
[  859.540432][    T7] usb 1-1: Using ep0 maxpacket: 8
[  859.545694][T27502] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  859.554892][ T4259] usb 5-1: Manufacturer: syz
[  859.559668][T27502] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  859.580588][ T4259] usb 5-1: SerialNumber: syz
[  859.589022][T27502] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  859.607309][T27502] ntfs: volume version 3.1.
[  859.614205][T27502] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array.
[  859.629051][T27502] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  859.655534][T27502] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array.
[  859.678425][T27496] JBD2: Ignoring recovery information on journal
[  859.764620][    T7] usb 1-1: unable to get BOS descriptor or descriptor too short
[  859.784944][T27505] netlink: 'syz.1.10001': attribute type 1 has an invalid length.
[  859.794128][T27502] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  859.856434][T27505] netlink: 'syz.1.10001': attribute type 2 has an invalid length.
[  859.902820][T27502] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5.
[  859.959028][T27502] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  859.972947][ T4259] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0610
[  859.980690][T27496] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  860.000048][ T4259] gspca_sn9c20x: Write register 1000 failed -71
[  860.007107][ T4259] gspca_sn9c20x: Device initialization failed
[  860.027032][ T4259] gspca_sn9c20x: probe of 5-1:2.172 failed with error -71
[  860.130833][ T4259] usb 5-1: USB disconnect, device number 48
[  860.246390][ T4183] ocfs2: Unmounting device (7,3) on (node local)
[  860.260733][    T7] usb 1-1: string descriptor 0 read error: -22
[  860.268512][    T7] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe
[  860.323513][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.339615][T27514] netlink: 736 bytes leftover after parsing attributes in process `syz.1.10015'.
[  860.477916][T27516] loop5: detected capacity change from 0 to 4096
[  860.517405][T27516] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  860.897640][    T7] asix 1-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  860.918767][    T7] asix 1-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  860.948290][    T7] asix: probe of 1-1:7.0 failed with error -71
[  860.976422][    T7] usb 1-1: USB disconnect, device number 58
[  861.122030][    C1] net_ratelimit: 6865 callbacks suppressed
[  861.122048][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  861.140882][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  861.167165][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  861.179639][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  861.192012][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  861.204945][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  861.212346][ T4251] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  861.217332][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  861.236852][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  861.248004][T27529] loop5: detected capacity change from 0 to 32768
[  861.249219][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:54:3e:68:d4:a2, vlan:0)
[  861.268112][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  861.433830][T27545] program syz.5.10030 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  861.508772][ T4251] usb 2-1: Using ep0 maxpacket: 8
[  861.864733][ T4251] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40
[  861.864765][ T4251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.864786][ T4251] usb 2-1: Product: syz
[  861.864800][ T4251] usb 2-1: Manufacturer: syz
[  861.864815][ T4251] usb 2-1: SerialNumber: syz
[  861.868214][ T4251] usb 2-1: config 0 descriptor??
[  861.909922][T27560] loop4: detected capacity change from 0 to 4096
[  861.955091][T27560] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  862.116263][T27570] comedi comedi2: pcl730: I/O port conflict (0x8b013,4)
[  862.195069][T27560] ntfs3: loop4: failed to convert "c46c" to maccroatian
[  862.273366][ T4251] usb 2-1: USB disconnect, device number 44
[  862.343327][ T4427] udevd[4427]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  862.491205][T27579] loop0: detected capacity change from 0 to 4096
[  862.526842][T27586] loop4: detected capacity change from 0 to 1024
[  862.581621][T27579] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  862.683584][T27579] ntfs3: loop0: Failed to load $Extend.
[  862.708935][T27588] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10052'.
[  862.821751][    T7] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  863.225727][T27610] netlink: 'syz.3.10062': attribute type 9 has an invalid length.
[  863.256073][T27610] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10062'.
[  863.270470][    T7] usb 6-1: config 0 has an invalid interface number: 168 but max is 0
[  863.285868][    T7] usb 6-1: config 0 has no interface number 0
[  863.297516][    T7] usb 6-1: config 0 interface 168 altsetting 163 has 0 endpoint descriptors, different from the interface descriptor's value: 20
[  863.333928][    T7] usb 6-1: config 0 interface 168 has no altsetting 0
[  863.374153][T27618] syz.3.10066 (27618): drop_caches: 0
[  863.476353][T27622] loop1: detected capacity change from 0 to 512
[  863.530999][    T7] usb 6-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7
[  863.555076][T27622] EXT4-fs (loop1): Ignoring removed nobh option
[  863.562067][    T7] usb 6-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  863.571027][    T7] usb 6-1: Product: syz
[  863.575958][    T7] usb 6-1: Manufacturer: syz
[  863.581416][    T7] usb 6-1: SerialNumber: syz
[  863.613600][    T7] usb 6-1: config 0 descriptor??
[  863.644442][ T4251] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  863.691620][T27628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10071'.
[  863.716817][T27622] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #3: comm syz.1.10067: corrupted inode contents
[  863.783295][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  863.799951][T27622] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #3: comm syz.1.10067: mark_inode_dirty error
[  863.814214][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  863.834494][T27622] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #3: comm syz.1.10067: corrupted inode contents
[  863.870878][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  863.888347][T27622] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.10067: mark_inode_dirty error
[  863.917581][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  863.935682][T27633] loop3: detected capacity change from 0 to 4096
[  863.946882][ T4251] usb 1-1: Using ep0 maxpacket: 8
[  863.961548][    T7] usb 6-1: USB disconnect, device number 13
[  863.973715][T27622] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.10067: Failed to acquire dquot type 0
[  863.992106][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  864.004658][T27622] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.10067: corrupted inode contents
[  864.036282][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  864.043336][T27622] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #16: comm syz.1.10067: mark_inode_dirty error
[  864.061373][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  864.067935][T27622] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.10067: corrupted inode contents
[  864.085908][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  864.092485][T27622] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.10067: mark_inode_dirty error
[  864.113238][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  864.120198][T27622] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.10067: corrupted inode contents
[  864.138262][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  864.144815][T27622] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  864.160322][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  864.167188][T27622] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.10067: corrupted inode contents
[  864.187015][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  864.193863][T27622] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.10067: mark_inode_dirty error
[  864.211207][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  864.217774][T27622] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  864.234614][T27622] EXT4-fs (loop1): Remounting filesystem read-only
[  864.242136][T27622] EXT4-fs (loop1): 1 truncate cleaned up
[  864.254784][T27622] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback.
[  864.271640][T27622] ext4 filesystem being mounted at /2049/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  864.312298][ T4251] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40
[  864.328354][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.359177][ T4251] usb 1-1: Product: syz
[  864.369435][ T4251] usb 1-1: Manufacturer: syz
[  864.389342][ T4251] usb 1-1: SerialNumber: syz
[  864.400051][ T4251] usb 1-1: config 0 descriptor??
[  864.439813][T27622] syz.1.10067 (27622) used greatest stack depth: 19936 bytes left
[  864.603339][T27639] device gtp1 entered promiscuous mode
[  864.705457][T27645] netlink: 'syz.5.10078': attribute type 21 has an invalid length.
[  864.719748][T27645] netlink: 128 bytes leftover after parsing attributes in process `syz.5.10078'.
[  864.729514][T27645] netlink: 'syz.5.10078': attribute type 6 has an invalid length.
[  864.759282][T27645] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10078'.
[  864.787585][T27649] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10080'.
[  864.851439][T27651] netlink: 'syz.1.10082': attribute type 1 has an invalid length.
[  864.866618][ T4251] usb 1-1: USB disconnect, device number 59
[  865.414238][T27633] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  865.574269][T27633] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22.
[  865.586580][T27703] x_tables: unsorted entry at hook 3
[  865.660579][T27709] loop4: detected capacity change from 0 to 1024
[  865.684895][ T4183] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22.
[  865.719471][ T4183] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  866.084561][T27735] loop5: detected capacity change from 0 to 16
[  866.180965][T27735] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  866.182727][T27740] tmpfs: Bad value for 'mpol'
[  866.477206][    C1] net_ratelimit: 8058 callbacks suppressed
[  866.477226][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  866.495443][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  866.508137][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  866.520614][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  866.533293][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  866.545632][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  866.559492][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  866.571824][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  866.584426][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  866.596761][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  866.604121][T27763] fuse: Bad value for 'fd'
[  866.616780][T27764] JFS: discard option not supported on device
[  866.645608][T27764] Mount JFS Failure: -22
[  866.660878][T27764] jfs_mount failed w/return code = -22
[  867.200039][T27786] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10141'.
[  867.552664][T27754] loop4: detected capacity change from 0 to 40427
[  867.600803][T27806] x_tables: duplicate entry at hook 3
[  867.706033][T27812] loop1: detected capacity change from 0 to 64
[  867.713322][T27769] loop5: detected capacity change from 0 to 32768
[  867.734888][T27754] F2FS-fs (loop4): Found nat_bits in checkpoint
[  867.852433][T27754] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  867.879978][T27754] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  867.913152][T27816] loop0: detected capacity change from 0 to 4096
[  868.013495][T27816] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  868.077886][T27816] ntfs3: loop0: Failed to load $Extend.
[  868.323267][T27807] loop3: detected capacity change from 0 to 32768
[  868.345671][T27822] lo speed is unknown, defaulting to 1000
[  868.351848][T27822] lo speed is unknown, defaulting to 1000
[  868.361164][T27822] lo speed is unknown, defaulting to 1000
[  868.383478][T27822] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  868.407438][T27822] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  868.439653][T27822] lo speed is unknown, defaulting to 1000
[  868.452575][T27822] lo speed is unknown, defaulting to 1000
[  868.462897][T27822] lo speed is unknown, defaulting to 1000
[  868.476927][T27822] lo speed is unknown, defaulting to 1000
[  868.483670][T27822] lo speed is unknown, defaulting to 1000
[  868.611980][T27812] MINIX-fs: file system does not have enough zmap blocks allocated.  Refusing to mount.
[  868.652266][T27769] JBD2: Ignoring recovery information on journal
[  868.661857][T27829] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10161'.
[  868.670956][T27812] MINIX-fs: bad superblock or unable to read bitmaps
[  868.786929][T27841] loop4: detected capacity change from 0 to 1024
[  868.825911][T27769] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  868.856759][T27807] XFS (loop3): Mounting V5 Filesystem
[  869.016435][T27850] loop1: detected capacity change from 0 to 64
[  869.023137][ T4251] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  869.083369][T27807] XFS (loop3): Ending clean mount
[  869.090799][T19702] ocfs2: Unmounting device (7,5) on (node local)
[  869.161824][ T4183] XFS (loop3): Unmounting Filesystem
[  869.326650][T27854] xt_time: invalid argument - start or stop time greater than 23:59:59
[  869.448647][ T4251] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  869.467861][ T4251] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  869.506959][ T4251] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  869.550099][ T4251] usb 1-1: config 220 has no interface number 2
[  869.567220][ T4251] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  869.623937][ T4251] usb 1-1: config 220 interface 0 has no altsetting 0
[  869.665464][ T4251] usb 1-1: config 220 interface 76 has no altsetting 0
[  869.686493][ T4251] usb 1-1: config 220 interface 1 has no altsetting 0
[  869.747930][T27870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10177'.
[  869.795742][T27870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10177'.
[  869.886767][ T4251] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  869.934614][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.966539][ T4251] usb 1-1: Product: syz
[  869.996867][ T4251] usb 1-1: Manufacturer: syz
[  869.998819][T27874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10179'.
[  870.025351][ T4251] usb 1-1: SerialNumber: syz
[  870.360698][T27883] loop5: detected capacity change from 0 to 1024
[  870.451294][T27888] loop3: detected capacity change from 0 to 1024
[  870.471733][T27890] xt_addrtype: ipv6 does not support BROADCAST matching
[  870.484245][ T4251] usb 1-1: selecting invalid altsetting 0
[  870.501611][ T4251] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  870.519415][ T4251] usb 1-1: No valid video chain found.
[  870.635882][ T4251] usb 1-1: selecting invalid altsetting 0
[  870.653583][T27892] loop4: detected capacity change from 0 to 4096
[  870.663608][ T4251] usbtest: probe of 1-1:220.1 failed with error -22
[  870.675289][ T4251] usb 1-1: USB disconnect, device number 60
[  870.691106][T27865] loop1: detected capacity change from 0 to 40427
[  870.738018][T27892] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  870.784866][T27892] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22.
[  870.842796][ T4195] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22.
[  870.857186][ T4195] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  870.937984][ T4427] udevd[4427]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  871.015983][T27898] usb usb8: usbfs: process 27898 (syz.0.10191) did not claim interface 32 before use
[  871.128668][T27906] damon: invalid nr_regions.  min (2047) > max (1)
[  871.251594][T27910] loop0: detected capacity change from 0 to 2048
[  871.286897][T27883] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  871.312890][T27912] loop4: detected capacity change from 0 to 4096
[  871.359059][T27865] F2FS-fs (loop1): build fault injection attr: rate: 4, type: 0x1ffff
[  871.387817][T27865] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4
[  871.449233][T27912] __ntfs_warning: 4 callbacks suppressed
[  871.449250][T27912] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  871.465780][T27865] F2FS-fs (loop1): invalid crc value
[  871.482550][T27916] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10199'.
[  871.503709][T27910] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  871.511439][T27916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10199'.
[  871.514474][T27919] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  871.532800][T27865] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14e/0x440
[  871.583279][T27865] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30
[  871.638719][T27910] Remounting filesystem read-only
[  871.747637][T27865] F2FS-fs (loop1): Found nat_bits in checkpoint
[  871.758893][T27910] NILFS (loop0): mounting fs with errors
[  871.843214][    C1] net_ratelimit: 7615 callbacks suppressed
[  871.843231][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  871.858145][T27912] ntfs: volume version 3.1.
[  871.861531][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  871.878124][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  871.890461][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  871.902992][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  871.915318][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  871.928012][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  871.940398][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  871.953020][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  871.965327][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  872.021781][T27865] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30
[  872.054254][T27865] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30
[  872.097764][T27865] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14e/0x440
[  872.111550][T27912] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  872.173457][T27934] loop3: detected capacity change from 0 to 256
[  872.184079][T27912] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x44, attribute type 0x80, because the allocation of clusters failed with error code -28.
[  872.241711][T27865] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  872.395560][T27865] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd6/0x560
[  872.575529][T27941] loop3: detected capacity change from 0 to 1024
[  872.621377][ T4182] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x66/0x1b0
[  872.764090][T27951] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request
[  872.874249][    T9] hfsplus: b-tree write err: -5, ino 4
[  873.686243][T27998] tmpfs: Bad value for 'nr_blocks'
[  873.974953][T28009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10246'.
[  874.313496][T28020] loop0: detected capacity change from 0 to 1024
[  874.348772][T28024] loop5: detected capacity change from 0 to 1024
[  874.395724][T27991] loop4: detected capacity change from 0 to 32768
[  874.445833][T28020] EXT4-fs (loop0): Test dummy encryption mode enabled
[  874.542297][T27991] (syz.4.10237,27991,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  874.592623][T27991] (syz.4.10237,27991,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  874.605944][ T4265] hfsplus: b-tree write err: -5, ino 4
[  874.713249][T28020] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=ordered,barrier=0x00000000000003ff,stripe=0x0000000000000007,nombcache,nogrpid,inode_readahead_blks=0x0000000000800000,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  874.739896][    C1] vkms_vblank_simulate: vblank timer overrun
[  874.778785][T27991] JBD2: Ignoring recovery information on journal
[  875.095891][T27991] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  875.330124][T28060] loop3: detected capacity change from 0 to 512
[  875.366558][T28057] loop1: detected capacity change from 0 to 4096
[  875.406673][T28057] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  875.455908][ T4195] ocfs2: Unmounting device (7,4) on (node local)
[  875.642209][T28066] siw: device registration error -23
[  875.690596][T18602] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  875.979051][T18602] usb 6-1: Using ep0 maxpacket: 32
[  876.107436][T18602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  876.132613][T18602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  876.149423][T18602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  876.378731][T18602] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  876.401661][T18602] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  876.416948][T18602] usb 6-1: Product: syz
[  876.422393][T18602] usb 6-1: Manufacturer: syz
[  876.427417][T18602] usb 6-1: SerialNumber: syz
[  876.444355][T18602] usb 6-1: config 0 descriptor??
[  876.609439][T28126] xt_bpf: check failed: parse error
[  876.688972][T28130] loop1: detected capacity change from 0 to 1024
[  876.715371][ T4251] usb 6-1: USB disconnect, device number 14
[  876.724685][T28060] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  876.766942][T28060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002]
[  876.779129][T28060] System zones: 1-12
[  876.792464][T28060] EXT4-fs (loop3): orphan cleanup on readonly fs
[  876.799068][T28060] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.10268: invalid indirect mapped block 12 (level 1)
[  876.820273][ T4688] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  876.820353][T28060] EXT4-fs (loop3): Remounting filesystem read-only
[  876.889080][T28060] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.10268: invalid indirect mapped block 2 (level 2)
[  876.924070][T28130] hfsplus: invalid catalog entry type in lookup
[  876.950727][T28060] EXT4-fs (loop3): Remounting filesystem read-only
[  876.980728][T28060] EXT4-fs (loop3): 1 truncate cleaned up
[  877.005246][T28060] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,i_version. Quota mode: none.
[  877.149950][ T4688] usb 5-1: Using ep0 maxpacket: 32
[  877.197649][    C1] net_ratelimit: 7606 callbacks suppressed
[  877.197668][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  877.216031][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  877.225812][T28146] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10310'.
[  877.228340][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  877.249631][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  877.259153][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10310'.
[  877.261964][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  877.283167][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  877.295673][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  877.308234][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  877.320557][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  877.333109][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  877.511524][   T26] audit: type=1400 audit(1756961139.198:45): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=28156 comm="syz.3.10308"
[  877.625450][ T4688] usb 5-1: unable to get BOS descriptor or descriptor too short
[  877.775644][ T4688] usb 5-1: config 128 has an invalid interface number: 127 but max is 3
[  877.784043][ T4688] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  877.820589][ T4688] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4
[  877.878209][ T4688] usb 5-1: config 128 has no interface number 0
[  877.917238][ T4688] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  877.994286][ T4688] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  878.056191][ T4688] usb 5-1: config 128 interface 127 has no altsetting 0
[  878.127235][T28147] loop0: detected capacity change from 0 to 32768
[  878.251697][T28147] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  878.328256][T28147] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  878.348278][T28153] loop1: detected capacity change from 0 to 32768
[  878.371018][T28180] overlayfs: conflicting options: userxattr,redirect_dir=off
[  878.474295][ T4688] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  878.490871][ T4688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.508882][T28188] loop3: detected capacity change from 0 to 256
[  878.532636][ T4688] usb 5-1: Product: syz
[  878.544579][ T4688] usb 5-1: Manufacturer: syz
[  878.546197][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[  878.549209][ T4688] usb 5-1: SerialNumber: syz
[  878.594744][T28188] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  879.016674][T28210] netlink: 'syz.5.10340': attribute type 21 has an invalid length.
[  879.028257][T28207] loop3: detected capacity change from 0 to 1024
[  879.045714][T28210] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10340'.
[  879.109860][T28207] ------------[ cut here ]------------
[  879.128237][T28207] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  879.128330][T28207] WARNING: CPU: 1 PID: 28207 at kernel/locking/mutex.c:575 __mutex_lock_common+0x18fa/0x2390
[  879.184392][T28207] Modules linked in:
[  879.188611][T28207] CPU: 0 PID: 28207 Comm: syz.3.10339 Not tainted syzkaller #0
[  879.198355][T28207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  879.210806][T28207] RIP: 0010:__mutex_lock_common+0x18fa/0x2390
[  879.217468][T28207] Code: 00 48 8d bc 24 e0 00 00 00 0f 85 47 e8 ff ff 48 c7 c7 20 05 0b 8a 48 c7 c6 60 05 0b 8a e8 0e ad ec ff 48 8d bc 24 e0 00 00 00 <0f> 0b e9 25 e8 ff ff e8 8a ff 4e f7 e9 df fb ff ff 0f 0b e9 2d f0
[  879.242045][ T4688] usb 5-1: USB disconnect, device number 49
[  879.263352][T28207] RSP: 0018:ffffc900030af680 EFLAGS: 00010246
[  879.272223][T28207] RAX: b34784cb2eabb500 RBX: ffffffff820009f5 RCX: 0000000000080000
[  879.280491][T28207] RDX: ffffc9000c421000 RSI: 00000000000037ef RDI: ffffc900030af760
[  879.290779][T28207] RBP: ffffc900030af810 R08: dffffc0000000000 R09: ffffed1017224f24
[  879.295472][T28212] loop0: detected capacity change from 0 to 8192
[  879.300943][T28207] R10: ffffed1017224f24 R11: 1ffff11017224f23 R12: 0000000000000000
[  879.314963][T28207] R13: 0000000000000000 R14: ffff888060fba828 R15: 0000000000000000
[  879.323358][T28207] FS:  00007fb35257c6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  879.358506][T28207] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  879.369253][T28207] CR2: 00007fe63ca35f98 CR3: 0000000019da1000 CR4: 00000000003506f0
[  879.377533][T28207] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  879.388290][T28207] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  879.396585][T28207] Call Trace:
[  879.401769][T28207]  <TASK>
[  879.404773][T28207]  ? do_syscall_64+0x4c/0xa0
[  879.409434][T28207]  ? mutex_lock_io_nested+0x60/0x60
[  879.415100][T28207]  ? mark_lock+0x94/0x320
[  879.419530][T28207]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  879.427669][T28207]  mutex_lock_nested+0x17/0x20
[  879.432704][T28207]  reiserfs_write_lock+0x75/0xd0
[  879.437707][T28207]  reiserfs_lookup+0x137/0x420
[  879.444497][T28207]  ? reiserfs_find_entry+0x18e0/0x18e0
[  879.450055][T28207]  ? __init_waitqueue_head+0xa5/0x150
[  879.455894][T28207]  __lookup_slow+0x27d/0x3d0
[  879.460569][T28207]  ? lookup_one_len+0x2c0/0x2c0
[  879.468123][T28207]  ? down_read+0x1aa/0x2e0
[  879.472628][T28207]  lookup_slow+0x53/0x70
[  879.477585][T28207]  walk_component+0x319/0x460
[  879.482669][T28207]  path_lookupat+0x169/0x440
[  879.489134][T28207]  filename_lookup+0x1e2/0x4f0
[  879.494102][T28207]  ? hashlen_string+0x110/0x110
[  879.505623][T28207]  ? strncpy_from_user+0x1fb/0x360
[  879.512571][T28207]  ? getname_flags+0x1fe/0x500
[  879.517696][T28207]  user_path_at_empty+0x40/0x190
[  879.522713][T28207]  path_getxattr+0xa5/0x1f0
[  879.527297][T28207]  ? setxattr+0x300/0x300
[  879.534420][T28207]  ? lockdep_hardirqs_on+0x94/0x140
[  879.539982][T28207]  do_syscall_64+0x4c/0xa0
[  879.544568][T28207]  ? clear_bhb_loop+0x30/0x80
[  879.551106][T28207]  ? clear_bhb_loop+0x30/0x80
[  879.555968][T28207]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  879.563061][ T4350] udevd[4350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  879.589808][T28207] RIP: 0033:0x7fb354314be9
[  879.599310][T28207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  879.665284][T28207] RSP: 002b:00007fb35257c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0
[  879.676497][T28207] RAX: ffffffffffffffda RBX: 00007fb35454bfa0 RCX: 00007fb354314be9
[  879.687708][T28207] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000200000000500
[  879.697913][T28207] RBP: 00007fb354397e19 R08: 0000000000000000 R09: 0000000000000000
[  879.706339][T28207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  879.725498][T28207] R13: 00007fb35454c038 R14: 00007fb35454bfa0 R15: 00007ffcd63f6b48
[  879.747953][T28207]  </TASK>
[  879.751070][T28207] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  879.758349][T28207] CPU: 0 PID: 28207 Comm: syz.3.10339 Not tainted syzkaller #0
[  879.765899][T28207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  879.775958][T28207] Call Trace:
[  879.779247][T28207]  <TASK>
[  879.782185][T28207]  dump_stack_lvl+0x168/0x230
[  879.786880][T28207]  ? show_regs_print_info+0x20/0x20
[  879.792090][T28207]  ? load_image+0x3b0/0x3b0
[  879.796613][T28207]  panic+0x2c9/0x7f0
[  879.800515][T28207]  ? bpf_jit_dump+0xd0/0xd0
[  879.805029][T28207]  ? __mutex_lock_common+0x18fa/0x2390
[  879.810511][T28207]  __warn+0x248/0x2b0
[  879.814506][T28207]  ? __mutex_lock_common+0x18fa/0x2390
[  879.819977][T28207]  report_bug+0x1b7/0x2e0
[  879.824318][T28207]  handle_bug+0x3a/0x70
[  879.828479][T28207]  exc_invalid_op+0x16/0x40
[  879.832986][T28207]  asm_exc_invalid_op+0x16/0x20
[  879.837838][T28207] RIP: 0010:__mutex_lock_common+0x18fa/0x2390
[  879.843914][T28207] Code: 00 48 8d bc 24 e0 00 00 00 0f 85 47 e8 ff ff 48 c7 c7 20 05 0b 8a 48 c7 c6 60 05 0b 8a e8 0e ad ec ff 48 8d bc 24 e0 00 00 00 <0f> 0b e9 25 e8 ff ff e8 8a ff 4e f7 e9 df fb ff ff 0f 0b e9 2d f0
[  879.863525][T28207] RSP: 0018:ffffc900030af680 EFLAGS: 00010246
[  879.869606][T28207] RAX: b34784cb2eabb500 RBX: ffffffff820009f5 RCX: 0000000000080000
[  879.877675][T28207] RDX: ffffc9000c421000 RSI: 00000000000037ef RDI: ffffc900030af760
[  879.885654][T28207] RBP: ffffc900030af810 R08: dffffc0000000000 R09: ffffed1017224f24
[  879.893659][T28207] R10: ffffed1017224f24 R11: 1ffff11017224f23 R12: 0000000000000000
[  879.901640][T28207] R13: 0000000000000000 R14: ffff888060fba828 R15: 0000000000000000
[  879.909633][T28207]  ? reiserfs_write_lock+0x75/0xd0
[  879.914761][T28207]  ? do_syscall_64+0x4c/0xa0
[  879.919375][T28207]  ? mutex_lock_io_nested+0x60/0x60
[  879.924583][T28207]  ? mark_lock+0x94/0x320
[  879.928930][T28207]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  879.934925][T28207]  mutex_lock_nested+0x17/0x20
[  879.939700][T28207]  reiserfs_write_lock+0x75/0xd0
[  879.944651][T28207]  reiserfs_lookup+0x137/0x420
[  879.949779][T28207]  ? reiserfs_find_entry+0x18e0/0x18e0
[  879.955264][T28207]  ? __init_waitqueue_head+0xa5/0x150
[  879.960648][T28207]  __lookup_slow+0x27d/0x3d0
[  879.965255][T28207]  ? lookup_one_len+0x2c0/0x2c0
[  879.970123][T28207]  ? down_read+0x1aa/0x2e0
[  879.974566][T28207]  lookup_slow+0x53/0x70
[  879.978905][T28207]  walk_component+0x319/0x460
[  879.983781][T28207]  path_lookupat+0x169/0x440
[  879.988387][T28207]  filename_lookup+0x1e2/0x4f0
[  879.993348][T28207]  ? hashlen_string+0x110/0x110
[  879.998222][T28207]  ? strncpy_from_user+0x1fb/0x360
[  880.003354][T28207]  ? getname_flags+0x1fe/0x500
[  880.008134][T28207]  user_path_at_empty+0x40/0x190
[  880.013092][T28207]  path_getxattr+0xa5/0x1f0
[  880.017722][T28207]  ? setxattr+0x300/0x300
[  880.022080][T28207]  ? lockdep_hardirqs_on+0x94/0x140
[  880.027298][T28207]  do_syscall_64+0x4c/0xa0
[  880.031742][T28207]  ? clear_bhb_loop+0x30/0x80
[  880.036534][T28207]  ? clear_bhb_loop+0x30/0x80
[  880.041234][T28207]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  880.047208][T28207] RIP: 0033:0x7fb354314be9
[  880.051635][T28207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  880.071247][T28207] RSP: 002b:00007fb35257c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0
[  880.079672][T28207] RAX: ffffffffffffffda RBX: 00007fb35454bfa0 RCX: 00007fb354314be9
[  880.087661][T28207] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000200000000500
[  880.095643][T28207] RBP: 00007fb354397e19 R08: 0000000000000000 R09: 0000000000000000
[  880.103706][T28207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  880.111695][T28207] R13: 00007fb35454c038 R14: 00007fb35454bfa0 R15: 00007ffcd63f6b48
[  880.119676][T28207]  </TASK>
[  880.122933][T28207] Kernel Offset: disabled
[  880.127334][T28207] Rebooting in 86400 seconds..