last executing test programs:

7m5.875674201s ago: executing program 2 (id=7819):
r0 = socket(0x2a, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)

7m5.753501447s ago: executing program 2 (id=7820):
r0 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)

7m5.491982578s ago: executing program 2 (id=7825):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)

7m5.327933755s ago: executing program 2 (id=7828):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)=ANY=[], 0x1, 0x54e, &(0x7f00000008c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

7m5.073781016s ago: executing program 2 (id=7833):
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000), 0x1)

7m4.548106878s ago: executing program 2 (id=7841):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r0, &(0x7f00000001c0)=@other={'lock', ' ', 'none'}, 0xa)

7m4.233943871s ago: executing program 32 (id=7841):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r0, &(0x7f00000001c0)=@other={'lock', ' ', 'none'}, 0xa)

3.202774764s ago: executing program 4 (id=13514):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044)

2.713580285s ago: executing program 0 (id=13519):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x120044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0xfec2, 0x1)

2.713464055s ago: executing program 4 (id=13520):
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="02", 0x1}], 0x20)

2.488819184s ago: executing program 4 (id=13524):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000280)={0x7, 0x6, 0x80007a, 0x5, 0x6, 0xb, 0x1000, 0x9, 0xf811})

2.375880309s ago: executing program 0 (id=13526):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2784}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x9d44}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xb9e, 0xe663}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800)

2.046730153s ago: executing program 0 (id=13531):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040))

1.724011616s ago: executing program 0 (id=13535):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007b, 0x0)
pread64(r0, &(0x7f0000001600)=""/4081, 0x7, 0x12)

1.526997395s ago: executing program 0 (id=13546):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0xfd, 0x6216, &(0x7f000000cb40)="$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")
lsetxattr$security_ima(&(0x7f0000000240)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x17}, 0x2, 0x0)

1.245083347s ago: executing program 3 (id=13541):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x800b, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x20, 0x0, 0x0, "244cb303"}, 0x0, 0x1, {0x0}})

1.17266285s ago: executing program 3 (id=13542):
r0 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r0, 0x0, 0x0)

992.867748ms ago: executing program 1 (id=13543):
mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x0)
execve(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0)

992.577528ms ago: executing program 3 (id=13544):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='-'], 0x28)

845.813544ms ago: executing program 1 (id=13545):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

793.889076ms ago: executing program 3 (id=13547):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x9020}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8000000000000001}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x48}}, 0x0)

780.324587ms ago: executing program 4 (id=13548):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f01e, 0x3})

653.701722ms ago: executing program 1 (id=13549):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005c00), 0x8a140, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa2)

542.139557ms ago: executing program 3 (id=13550):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000007c0)={0x8, [[0x7fff, 0x0, 0xfffffff9, 0x11, 0x0, 0xf9ef, 0xfffffff8, 0xfffffffc], [0x1, 0x0, 0x2, 0x0, 0xc000, 0x7, 0x4, 0x4], [0x4, 0x2000003, 0x0, 0x0, 0xfffffffe, 0x6, 0xfffffffe, 0x7f]], '\x00', [{0x5, 0x6}, {0xffffffff, 0x4}, {0xfffffff9, 0x1}, {0xfffffffa, 0x1}, {0xb07, 0x6}, {0xbffffffc, 0xa}, {0x80f}, {0x9}, {0x0, 0x200000}, {0x161, 0xffff}, {0x18, 0x1}], '\x00', 0x80000001, 0x0, 0x0, 0x2})

455.043281ms ago: executing program 1 (id=13552):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b900000000000000000700000006000480ffef0000060003"], 0x24}}, 0x0)

373.934965ms ago: executing program 3 (id=13553):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000140)=@generic={0x0, 0x2, 0x0, "9be7109b"})

215.809351ms ago: executing program 4 (id=13554):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x101}}}, 0x10)

214.965011ms ago: executing program 1 (id=13562):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

78.328407ms ago: executing program 4 (id=13555):
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x101c00, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000580)=ANY=[])

46.712068ms ago: executing program 1 (id=13556):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000029c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x209, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0x100, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0xb, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1f6, 0x3, 0x5, 0x9, 0x9, {0x4, 0x0, 0x6, 0x7fff, 0x4, 0x3}, {0x5, 0x1, 0x5, 0x40, 0x6, 0x3}, 0x2, 0xfffffff7, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)

0s ago: executing program 0 (id=13557):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000440)={0x2, 0xffffffff, 0x2000000000000000, 0x3, 0x4, 0x5, 0x7b, 0xb600, 0x8000})

kernel console output (not intermixed with test programs):

d capacity change from 0 to 32768
[  930.669061][ T8442] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.12072 (8442)
[  930.693087][ T8412] XFS (loop1): Quotacheck: Done.
[  930.719600][ T8442] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  930.735535][ T8442] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  930.744745][ T8442] BTRFS info (device loop3): turning on flush-on-commit
[  930.752023][ T8442] BTRFS info (device loop3): turning off barriers
[  930.758697][ T8442] BTRFS info (device loop3): turning on sync discard
[  930.766650][ T8442] BTRFS info (device loop3): using free space tree
[  930.801363][ T8478] loop0: detected capacity change from 0 to 16
[  930.845360][ T8478] erofs: (device loop0): mounted with root inode @ nid 36.
[  930.970445][ T8478] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  930.994330][ T8478] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  931.005160][ T5798] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  931.014917][ T8478] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  931.025010][ T8478] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  931.036765][ T8478] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36
[  931.270162][ T5796] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  931.745807][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  931.767481][ T8528] netlink: 'syz.4.12085': attribute type 1 has an invalid length.
[  932.011908][T16609] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  932.132668][ T8534] loop0: detected capacity change from 0 to 8192
[  932.166536][ T8534] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  932.233827][T16609] usb 2-1: config 0 has no interfaces?
[  932.248407][T16609] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  932.258683][ T8534] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1046)
[  932.280780][T16609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.299607][ T8534] FAT-fs (loop0): Filesystem has been set read-only
[  932.310553][T16609] usb 2-1: config 0 descriptor??
[  932.427870][ T5786] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1046)
[  932.597278][T16609] usb 2-1: USB disconnect, device number 58
[  932.873738][ T8538] loop4: detected capacity change from 0 to 32768
[  932.999318][ T8546] loop3: detected capacity change from 0 to 32768
[  933.043576][ T8546] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  933.106613][ T8546] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  933.151125][   T11] (kworker/u4:0,11,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  933.191756][ T8546] (syz.3.12091,8546,0):ocfs2_read_blocks:239 ERROR: status = -12
[  933.199666][ T8546] (syz.3.12091,8546,0):ocfs2_xattr_block_find:2831 ERROR: status = -12
[  933.304819][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12098'.
[  933.350264][ T5796] ocfs2: Unmounting device (7,3) on (node local)
[  933.402738][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12097'.
[  933.541675][ T8591] ÿ: renamed from bond_slave_0 (while UP)
[  934.061175][ T8603] loop4: detected capacity change from 0 to 4096
[  934.165467][ T8603] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  934.301705][    C1] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  935.080675][ T8663] loop1: detected capacity change from 0 to 4096
[  935.119878][ T8663] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  935.132626][ T8672] loop4: detected capacity change from 0 to 1024
[  935.180679][ T8672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  935.218831][ T8663] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  935.385884][T23752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  935.885461][   T27] kauditd_printk_skb: 14 callbacks suppressed
[  935.885478][   T27] audit: type=1326 audit(2000000105.200:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d33b8f749 code=0x7ffc0000
[  935.888916][ T8671] loop0: detected capacity change from 0 to 32768
[  935.901470][   T27] audit: type=1326 audit(2000000105.200:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d33b8f749 code=0x7ffc0000
[  936.022220][ T8671] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  936.031602][   T27] audit: type=1326 audit(2000000105.300:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f8d33b8f749 code=0x7ffc0000
[  936.054068][    C0] vkms_vblank_simulate: vblank timer overrun
[  936.138972][   T27] audit: type=1326 audit(2000000105.300:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d33b8f749 code=0x7ffc0000
[  936.162414][ T8717] ip6t_srh: unknown srh match flags  4001
[  936.185137][ T8671] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  936.212460][   T27] audit: type=1326 audit(2000000105.300:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.4.12133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d33b8f749 code=0x7ffc0000
[  936.537661][ T5786] ocfs2: Unmounting device (7,0) on (node local)
[  936.932104][ T8757] ax25_connect(): syz.0.12148 uses autobind, please contact jreuter@yaina.de
[  937.110703][ T8765] loop4: detected capacity change from 0 to 256
[  937.378050][ T8780] loop1: detected capacity change from 0 to 512
[  937.407760][ T8780] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  937.461261][ T8780] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  937.503130][ T8780] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.12155: bg 0: block 248: padding at end of block bitmap is not set
[  937.521635][ T8780] Quota error (device loop1): write_blk: dquota write failed
[  937.565775][ T8780] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  937.575949][ T8780] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.12155: Failed to acquire dquot type 1
[  937.632810][ T8780] EXT4-fs (loop1): 1 truncate cleaned up
[  937.654888][ T8780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  937.836260][   T11] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  937.846480][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  937.872774][   T11] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u4:0: Failed to release dquot type 1
[  937.967993][ T8798] loop4: detected capacity change from 0 to 4096
[  937.997634][ T8798] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  938.386919][ T8827] netlink: 'syz.1.12167': attribute type 5 has an invalid length.
[  938.654985][ T8842] loop0: detected capacity change from 0 to 256
[  938.660941][ T8833] loop3: detected capacity change from 0 to 4096
[  938.717191][ T8833] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing.
[  938.738260][ T8842] FAT-fs (loop0): Directory bread(block 64) failed
[  938.748634][ T8833] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  938.764264][ T8842] FAT-fs (loop0): Directory bread(block 65) failed
[  938.777972][ T8842] FAT-fs (loop0): Directory bread(block 66) failed
[  938.820350][ T8842] FAT-fs (loop0): Directory bread(block 67) failed
[  938.827487][ T8833] ntfs: volume version 3.1.
[  938.862047][ T8842] FAT-fs (loop0): Directory bread(block 68) failed
[  938.884619][ T8842] FAT-fs (loop0): Directory bread(block 69) failed
[  938.891316][ T8842] FAT-fs (loop0): Directory bread(block 70) failed
[  938.937174][ T8842] FAT-fs (loop0): Directory bread(block 71) failed
[  938.953749][ T8842] FAT-fs (loop0): Directory bread(block 72) failed
[  938.960441][ T8842] FAT-fs (loop0): Directory bread(block 73) failed
[  939.848767][ T8893] loop0: detected capacity change from 0 to 16
[  939.916769][ T8893] erofs: (device loop0): mounted with root inode @ nid 36.
[  940.195358][ T8864] loop3: detected capacity change from 0 to 32768
[  940.289408][ T8864] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  940.425219][ T8864] XFS (loop3): Ending clean mount
[  940.428646][ T8926] loop1: detected capacity change from 0 to 1764
[  940.459750][ T8864] XFS (loop3): Quotacheck needed: Please wait.
[  940.641071][ T8864] XFS (loop3): Quotacheck: Done.
[  940.724990][ T8915] loop0: detected capacity change from 0 to 32768
[  940.745000][ T8915] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.12191 (8915)
[  940.789413][ T8915] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  940.815336][ T8915] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  940.848022][ T8915] BTRFS info (device loop0): using free space tree
[  940.876702][ T5796] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  941.061765][ T8915] BTRFS info (device loop0): enabling ssd optimizations
[  941.108296][ T8915] BTRFS info (device loop0): auto enabling async discard
[  941.149242][ T8966] qrtr: Invalid version 195
[  941.678905][ T5786] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  941.959625][ T8996] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  941.996857][T16726] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 10 /dev/loop0 scanned by udevd (16726)
[  942.238330][ T9007] bridge0: port 2(veth0_to_bridge) entered blocking state
[  942.279599][ T9007] bridge0: port 2(veth0_to_bridge) entered disabled state
[  942.310375][ T9007] veth0_to_bridge: entered allmulticast mode
[  942.332146][ T9007] veth0_to_bridge: entered promiscuous mode
[  942.385687][ T9010] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3)
[  942.944867][ T9033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12218'.
[  942.961634][    T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  942.991849][ T9033] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  943.181682][    T9] usb 2-1: Using ep0 maxpacket: 16
[  943.211702][    T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  943.240330][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.271541][    T9] usb 2-1: Product: syz
[  943.275782][    T9] usb 2-1: Manufacturer: syz
[  943.280417][    T9] usb 2-1: SerialNumber: syz
[  943.313633][    T9] r8152-cfgselector 2-1: config 0 descriptor??
[  943.752883][T23756] Bluetooth: hci1: command 0x0406 tx timeout
[  943.761179][    T9] r8152-cfgselector 2-1: Unknown version 0x0000
[  943.781762][    T9] r8152-cfgselector 2-1: USB disconnect, device number 59
[  943.936720][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12233'.
[  944.216455][ T9097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12237'.
[  944.746488][ T9086] loop0: detected capacity change from 0 to 32768
[  944.827506][ T9086] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  944.979088][ T9086] XFS (loop0): Ending clean mount
[  945.029928][ T9086] XFS (loop0): Quotacheck needed: Please wait.
[  945.084074][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12249'.
[  945.184361][ T9086] XFS (loop0): Quotacheck: Done.
[  945.358149][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12251'.
[  945.431854][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  945.776492][   T27] kauditd_printk_skb: 7 callbacks suppressed
[  945.776510][   T27] audit: type=1326 audit(2000000115.090:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9174 comm="syz.3.12258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe71618f749 code=0x0
[  946.271876][ T5838] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  946.322000][ T9209] xt_limit: Overflow, try lower: 65536/2147483648
[  946.463826][ T5838] usb 4-1: Using ep0 maxpacket: 16
[  946.479736][ T5838] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  946.500045][ T5838] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  946.520265][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0
[  946.533649][ T5838] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  946.561651][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.572306][ T5838] usb 4-1: Product: syz
[  946.576525][ T5838] usb 4-1: Manufacturer: syz
[  946.594430][ T5838] usb 4-1: SerialNumber: syz
[  946.613004][ T5838] usb 4-1: config 0 descriptor??
[  947.109863][    T9] usb 4-1: USB disconnect, device number 52
[  947.153191][ T5838] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  947.196130][ T9252] loop1: detected capacity change from 0 to 2048
[  947.216282][ T9217] loop0: detected capacity change from 0 to 32768
[  947.222896][ T9254] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  947.274365][ T9252] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12
[  947.305637][ T9252] Remounting filesystem read-only
[  947.373000][ T5838] usb 5-1: Using ep0 maxpacket: 16
[  947.410581][ T5838] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  947.450095][ T5838] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  947.473346][ T5838] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  947.489601][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.512662][ T5838] usb 5-1: Product: syz
[  947.524384][ T5838] usb 5-1: Manufacturer: syz
[  947.539330][ T5838] usb 5-1: SerialNumber: syz
[  947.820338][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12282'.
[  947.983180][ T5838] usb 5-1: cannot find UAC_HEADER
[  948.018404][ T9290] usb usb8: usbfs: process 9290 (syz.3.12285) did not claim interface 0 before use
[  948.035040][ T5838] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  948.056659][ T5838] usb 5-1: USB disconnect, device number 20
[  948.179646][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  948.470763][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12292'.
[  948.482036][    T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  948.675991][ T9338] loop4: detected capacity change from 0 to 128
[  948.678476][    T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  948.719865][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.762699][    T9] usb 1-1: config 0 descriptor??
[  948.777491][ T9342] loop3: detected capacity change from 0 to 512
[  948.786409][    T9] cp210x 1-1:0.0: cp210x converter detected
[  948.802631][ T9342] EXT4-fs: Ignoring removed bh option
[  948.822541][ T9342] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  948.835164][ T9342] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  948.862505][ T9342] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  948.868900][ T9342] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006]
[  948.869052][ T9342] System zones: 0-2, 18-18, 34-35
[  948.881901][ T9342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  948.948978][ T9342] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #12: block 32: comm syz.3.12297: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0
[  948.984800][    T9] usb 1-1: cp210x converter now attached to ttyUSB0
[  949.014257][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  949.020327][ T9364] loop4: detected capacity change from 0 to 512
[  949.159988][ T9364] EXT4-fs: Ignoring removed i_version option
[  949.160787][ T9364] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  949.183669][ T9364] EXT4-fs (loop4): 1 truncate cleaned up
[  949.185116][ T9364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  949.209159][   T28] usb 1-1: USB disconnect, device number 53
[  949.233447][   T28] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  949.234111][   T28] cp210x 1-1:0.0: device disconnected
[  949.254761][ T9375] libceph: resolve '0..' (ret=-3): failed
[  949.355064][ T9364] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 1029 (only 1 groups)
[  949.478640][T23752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  949.886434][ T9413] ieee802154 phy1 wpan1: encryption failed: -90
[  950.301799][ T9437] syz.0.12319 (9437): /proc/9434/oom_adj is deprecated, please use /proc/9434/oom_score_adj instead.
[  950.402934][ T9442] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12321'.
[  950.421876][ T9442] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  950.793055][ T9464] netlink: 'syz.0.12327': attribute type 2 has an invalid length.
[  951.319743][ T9485] loop4: detected capacity change from 0 to 4096
[  951.371656][ T9485] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  951.461126][ T9485] ntfs3: loop4: Failed to initialize $Extend/$Reparse.
[  951.871843][ T9521] netlink: 'syz.3.12346': attribute type 58 has an invalid length.
[  951.890148][ T9521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12346'.
[  952.368706][ T9502] loop1: detected capacity change from 0 to 32768
[  952.378081][ T9544] loop0: detected capacity change from 0 to 64
[  952.430203][ T9502] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  952.600458][ T9567] loop4: detected capacity change from 0 to 65
[  952.650838][ T9567] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  952.668589][ T9567] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  952.773903][ T9502] XFS (loop1): Ending clean mount
[  952.938156][ T5798] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  953.177030][ T9587] netlink: 'syz.4.12362': attribute type 1 has an invalid length.
[  953.198604][ T9587] netlink: 216 bytes leftover after parsing attributes in process `syz.4.12362'.
[  953.238821][ T9587] NCSI netlink: No device for ifindex 0
[  953.254850][ T9597] loop3: detected capacity change from 0 to 64
[  953.450204][   T28] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  953.455269][ T9604] loop4: detected capacity change from 0 to 256
[  953.501671][    C1] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  953.589420][ T9604] FAT-fs (loop4): Directory bread(block 64) failed
[  953.601359][ T9604] FAT-fs (loop4): Directory bread(block 65) failed
[  953.611730][ T9604] FAT-fs (loop4): Directory bread(block 66) failed
[  953.629254][ T9604] FAT-fs (loop4): Directory bread(block 67) failed
[  953.649608][ T9604] FAT-fs (loop4): Directory bread(block 68) failed
[  953.659624][ T9604] FAT-fs (loop4): Directory bread(block 69) failed
[  953.661622][   T28] usb 2-1: Using ep0 maxpacket: 32
[  953.676969][ T9604] FAT-fs (loop4): Directory bread(block 70) failed
[  953.690928][ T9604] FAT-fs (loop4): Directory bread(block 71) failed
[  953.698178][ T9604] FAT-fs (loop4): Directory bread(block 72) failed
[  953.699824][   T28] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  953.715648][ T9604] FAT-fs (loop4): Directory bread(block 73) failed
[  953.733300][   T28] usb 2-1: config 0 has no interface number 0
[  953.751773][   T28] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  953.779037][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.801020][   T28] usb 2-1: Product: syz
[  953.817738][   T28] usb 2-1: Manufacturer: syz
[  953.827866][   T28] usb 2-1: SerialNumber: syz
[  953.865995][   T28] usb 2-1: config 0 descriptor??
[  954.122719][   T28] radio-si470x 2-1:0.35: this is not a si470x device.
[  954.317417][   T28] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  954.374984][   T28] usb 2-1: USB disconnect, device number 60
[  954.379591][ T9650] netlink: 'syz.0.12377': attribute type 4 has an invalid length.
[  954.409756][ T9650] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.12377'.
[  954.507817][ T9642] loop3: detected capacity change from 0 to 4096
[  954.542928][ T9642] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  955.980135][ T9728] loop3: detected capacity change from 0 to 4096
[  956.054465][ T9728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  956.190540][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  956.611623][ T9757] loop3: detected capacity change from 0 to 4096
[  956.640342][ T9757] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  956.714281][ T9757] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  956.762288][ T9760] loop1: detected capacity change from 0 to 4096
[  956.793275][ T9760] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  956.829030][ T9760] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  956.846651][ T9757] ntfs3: loop3: ino=0, attr_set_size
[  956.875932][ T9760] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  956.942401][ T9760] ntfs: volume version 3.1.
[  956.962191][ T9760] ntfs: (device loop1): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  957.187953][ T9785] affs: No valid root block on device nbd4
[  957.648463][ T9804] loop3: detected capacity change from 0 to 512
[  957.724659][ T9804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  957.776780][ T9810] loop1: detected capacity change from 0 to 4096
[  957.799672][ T9810] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  957.838993][ T9766] loop0: detected capacity change from 0 to 32768
[  957.889169][ T9766] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  957.922904][ T9810] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  957.968217][ T9810] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  958.041251][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  958.063656][ T9766] XFS (loop0): Ending clean mount
[  958.256845][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12427'.
[  958.301097][ T9837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12427'.
[  958.333743][ T5786] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  958.629849][T16852] kernel write not supported for file /2307/net/ip6_tables_matches (pid: 16852 comm: kworker/1:5)
[  959.764425][ T9867] loop3: detected capacity change from 0 to 32768
[  959.793959][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12449'.
[  960.654432][ T9942] netlink: 'syz.4.12462': attribute type 3 has an invalid length.
[  960.675272][ T9942] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12462'.
[  960.725599][ T9945] loop3: detected capacity change from 0 to 8192
[  960.744949][ T9947] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 50612 - 0
[  960.755797][ T9945] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  960.771618][ T9947] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 50612 - 0
[  960.776303][ T9945] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  960.790160][ T9945] REISERFS (device loop3): using ordered data mode
[  960.796808][ T9945] reiserfs: using flush barriers
[  960.803856][ T9947] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 50612 - 0
[  960.812967][ T9945] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  960.829344][ T9947] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 50612 - 0
[  960.838988][ T9945] REISERFS (device loop3): checking transaction log (loop3)
[  960.847011][ T9947] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 36569 - 0
[  960.857864][ T9947] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 36569 - 0
[  960.871094][ T9947] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 36569 - 0
[  960.888434][ T9947] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 36569 - 0
[  960.897915][ T9947] geneve4: entered promiscuous mode
[  960.911011][ T9947] geneve4: entered allmulticast mode
[  961.071710][ T9945] REISERFS (device loop3): Using tea hash to sort names
[  961.101993][ T9945] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  961.208958][ T9954] loop4: detected capacity change from 0 to 4096
[  961.252580][ T9954] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  961.337439][ T9954] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  961.642129][ T9935] loop0: detected capacity change from 0 to 32768
[  961.728897][ T9982] ieee802154 phy1 wpan1: encryption failed: -22
[  961.749504][ T9935] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  962.056201][ T9935] XFS (loop0): Ending clean mount
[  962.167377][ T9935] XFS (loop0): Quotacheck needed: Please wait.
[  962.269346][T20758] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x2446 dinode
[  962.296871][T20758] XFS (loop0): Unmount and run xfs_repair
[  962.303938][T20758] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  962.336195][T20758] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  962.353549][T20758] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  962.372230][T20758] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d  4.Xh...=4.Xh...=
[  962.381148][T20758] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 0a  4.Xh...=........
[  962.407551][T20758] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  962.414636][T10017] netlink: 'syz.4.12483': attribute type 46 has an invalid length.
[  962.449503][T20758] 00000050: 00 00 65 01 00 00 00 00 00 00 00 00 56 b3 a5 bd  ..e.........V...
[  962.491297][T20758] 00000060: ff ff ff ff 35 98 98 34 00 00 00 00 00 00 00 08  ....5..4........
[  962.501197][T20758] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08  ................
[  962.513510][T10023] loop3: detected capacity change from 0 to 8
[  962.525405][T10023] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  962.566259][ T9935] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  962.577152][ T5794] udevd[5794]: incorrect cramfs checksum on /dev/loop3
[  962.609848][T10023] cramfs: Error -5 while decompressing!
[  962.640713][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  962.651813][T10023] cramfs: ffffffff96fdd368(26)->ffff88804fd25000(4096)
[  962.658748][T10023] cramfs: Error -3 while decompressing!
[  962.735865][T10023] cramfs: ffffffff96fdd382(26)->ffff888053a0e000(4096)
[  962.768513][ T5794] udevd[5794]: incorrect cramfs checksum on /dev/loop3
[  962.777826][T10023] cramfs: Error -3 while decompressing!
[  962.803537][T10023] cramfs: ffffffff96fdd39c(16)->ffff88804f979000(4096)
[  962.835951][T10023] cramfs: Error -5 while decompressing!
[  962.863803][T10023] cramfs: ffffffff96fdd368(26)->ffff88804fd25000(4096)
[  962.886841][   T27] audit: type=1800 audit(2000000132.200:368): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12485" name="file2" dev="loop3" ino=348 res=0 errno=0
[  963.146225][T10047] netlink: 'syz.0.12487': attribute type 1 has an invalid length.
[  963.170249][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12487'.
[  963.439508][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12495'.
[  963.530886][T10058] loop3: detected capacity change from 0 to 4096
[  963.601593][T10058] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  963.679891][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12499'.
[  964.171894][T10099] netlink: 'syz.0.12506': attribute type 1 has an invalid length.
[  964.209498][T10102] nfs: Deprecated parameter 'nointr'
[  964.741019][T10131] ptrace attach of "./syz-executor exec"[23752] was attempted by "./syz-executor exec"[10131]
[  965.152101][   T27] audit: type=1326 audit(2000000134.460:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.12526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[  965.211650][   T27] audit: type=1326 audit(2000000134.460:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.12526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[  965.273289][   T27] audit: type=1326 audit(2000000134.490:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.12526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[  965.361585][   T27] audit: type=1326 audit(2000000134.490:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.12526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[  965.411864][T10171] tmpfs: Unknown parameter 'func'
[  965.433022][T10174] loop4: detected capacity change from 0 to 64
[  965.461548][   T27] audit: type=1326 audit(2000000134.490:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10154 comm="syz.1.12526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[  965.547984][T10174] syz.4.12531: attempt to access beyond end of device
[  965.547984][T10174] loop4: rw=0, sector=234881062, nr_sectors = 2 limit=64
[  965.576539][T10174] Buffer I/O error on dev loop4, logical block 117440531, async page read
[  965.600706][T10174] syz.4.12531: attempt to access beyond end of device
[  965.600706][T10174] loop4: rw=0, sector=8548515840, nr_sectors = 2 limit=64
[  965.670506][T10174] Buffer I/O error on dev loop4, logical block 4274257920, async page read
[  965.690864][T10174] syz.4.12531: attempt to access beyond end of device
[  965.690864][T10174] loop4: rw=0, sector=301989888, nr_sectors = 2 limit=64
[  965.725580][T10174] Buffer I/O error on dev loop4, logical block 150994944, async page read
[  965.736041][T10174] syz.4.12531: attempt to access beyond end of device
[  965.736041][T10174] loop4: rw=0, sector=234881062, nr_sectors = 2 limit=64
[  965.780460][T10174] Buffer I/O error on dev loop4, logical block 117440531, async page read
[  965.790419][   T27] audit: type=1800 audit(2000000135.100:374): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12531" name="file2" dev="loop4" ino=6 res=0 errno=0
[  965.878924][T10195] loop0: detected capacity change from 0 to 1024
[  965.931649][ T5838] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  966.141709][ T5838] usb 4-1: Using ep0 maxpacket: 32
[  966.153637][ T5838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  966.163567][T10216] trusted_key: encrypted_key: hex blob is missing
[  966.208992][ T5838] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  966.220507][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.231105][ T5838] usb 4-1: Product: syz
[  966.237148][ T5838] usb 4-1: Manufacturer: syz
[  966.243663][ T5838] usb 4-1: SerialNumber: syz
[  966.252802][ T5838] usb 4-1: config 0 descriptor??
[  966.259119][T10185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  966.282780][ T5838] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input50
[  966.411668][  T787] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  966.569694][T10185] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  966.576849][T10185] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  966.593369][T10185] vhci_hcd vhci_hcd.0: Device attached
[  966.618239][T10239] vhci_hcd: connection closed
[  966.621198][    T9] usb 4-1: USB disconnect, device number 53
[  966.626189][    C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  966.628372][  T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  966.657996][T20758] vhci_hcd: stop threads
[  966.689695][T20758] vhci_hcd: release socket
[  966.707390][T20758] vhci_hcd: disconnect device
[  966.726577][  T787] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  966.745574][  T787] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  966.771646][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.789974][  T787] usb 1-1: config 0 descriptor??
[  966.800980][T10256] netlink: 'syz.4.12547': attribute type 1 has an invalid length.
[  966.913742][T10264] netlink: 'syz.4.12549': attribute type 1 has an invalid length.
[  966.922288][T10264] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12549'.
[  966.941967][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12549'.
[  967.067914][T10215] loop0: detected capacity change from 0 to 1024
[  967.100720][  T787] usb 1-1: USB disconnect, device number 54
[  967.164950][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12552'.
[  967.261775][T16609] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  967.451820][T16609] usb 2-1: Using ep0 maxpacket: 32
[  967.469251][T16609] usb 2-1: config 0 has an invalid interface number: 119 but max is 0
[  967.488235][T16609] usb 2-1: config 0 has no interface number 0
[  967.504646][T16609] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19
[  967.520484][T16609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.549016][T16609] usb 2-1: Product: syz
[  967.561420][T16609] usb 2-1: Manufacturer: syz
[  967.566069][T16609] usb 2-1: SerialNumber: syz
[  967.587227][T16609] usb 2-1: config 0 descriptor??
[  967.598056][T16609] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  967.726540][ T2986] hfsplus: b-tree write err: -5, ino 4
[  968.016529][T16609] gspca_sn9c2028: read1 error -71
[  968.039183][T16609] gspca_sn9c2028: read1 error -71
[  968.051954][T10328] netlink: zone id is out of range
[  968.056816][T16609] sn9c2028: probe of 2-1:0.119 failed with error -71
[  968.081896][T16609] usb 2-1: USB disconnect, device number 61
[  968.478046][    C1] sd 0:0:1:0: [sda] tag#6194 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  968.488607][    C1] sd 0:0:1:0: [sda] tag#6194 CDB: Read(6) 08 00 00 00 03 44
[  968.510835][T10313] loop3: detected capacity change from 0 to 32768
[  968.963157][T10371] ieee802154 phy1 wpan1: encryption failed: -22
[  968.995239][T10378] loop0: detected capacity change from 0 to 256
[  969.033084][T10378] exfat: Deprecated parameter 'namecase'
[  969.061699][T10378] exfat: Deprecated parameter 'utf8'
[  969.126158][T10378] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  969.145990][T10383] loop3: detected capacity change from 0 to 256
[  969.242419][T10383] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  969.264388][T10383] FAT-fs (loop3): Filesystem has been set read-only
[  969.622188][T10408] loop4: detected capacity change from 0 to 8
[  969.704588][T10408] SQUASHFS error: Failed to read block 0x285: -5
[  969.729451][T10415] loop3: detected capacity change from 0 to 256
[  969.738383][T10408] SQUASHFS error: Unable to read metadata cache entry [283]
[  969.762392][T10418] ipt_REJECT: TCP_RESET invalid for non-tcp
[  969.769927][T10408] SQUASHFS error: Unable to read symlink [8f:60]
[  969.806787][T10415] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  969.950162][T10423] loop0: detected capacity change from 0 to 512
[  970.095560][T10423] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.12590: bg 0: block 393: padding at end of block bitmap is not set
[  970.186552][T10423] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  970.214747][T10423] EXT4-fs (loop0): 2 truncates cleaned up
[  970.239465][T10423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  970.447204][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  970.573248][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12598'.
[  970.610170][T10451] netlink: 440 bytes leftover after parsing attributes in process `syz.3.12598'.
[  970.690919][T10457] xt_cgroup: xt_cgroup: no path or classid specified
[  970.787858][T10432] loop4: detected capacity change from 0 to 32768
[  970.819664][T10463] vivid-006: disconnect
[  970.835067][T10461] vivid-006: reconnect
[  970.840466][T10432] ERROR: (device loop4): diAllocBit: iag inconsistent
[  970.840466][T10432] 
[  970.894355][T10432] ERROR: (device loop4): remounting filesystem as read-only
[  970.920081][T10432] ialloc: diAlloc returned -5!
[  971.124507][T10468] loop1: detected capacity change from 0 to 4096
[  971.168127][T10468] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  971.217171][T10468] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  971.260382][T10468] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  971.316863][T10468] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  971.352732][T10468] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  971.418313][T10468] ntfs: volume version 3.1.
[  971.425512][T10468] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  971.481814][T10468] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  971.516100][T10468] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  971.547850][T10468] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  971.580128][T10468] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  971.897286][T10507] loop3: detected capacity change from 0 to 512
[  971.900763][T10499] loop0: detected capacity change from 0 to 8192
[  971.969214][T10507] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.12614: iget: bad i_size value: 38620345925642
[  971.984251][T10499] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  972.030413][T10499] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  972.041759][T10499] REISERFS (device loop0): using journaled data mode
[  972.049279][T10499] reiserfs: using flush barriers
[  972.068009][T10507] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.12614: couldn't read orphan inode 15 (err -117)
[  972.075035][T10499] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  972.101315][T10499] REISERFS (device loop0): checking transaction log (loop0)
[  972.111531][T10507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  972.131477][T10499] REISERFS (device loop0): Using r5 hash to sort names
[  972.138788][T10499] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  972.183739][T10499] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  972.461747][    T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  972.489391][T10530] loop1: detected capacity change from 0 to 2048
[  972.577746][T10538] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  972.664498][    T9] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping
[  972.679415][T10530] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  972.693827][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 47025, setting to 1024
[  972.735099][T10530] Remounting filesystem read-only
[  972.749666][    T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  972.752123][T10530] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  972.795467][T10530] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  972.802420][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  972.827232][T10530] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  972.834842][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.843109][T10546] comedi: valid board names for 8255 driver are:
[  972.856225][T10546]  8255
[  972.859055][T10546] comedi: valid board names for vmk80xx driver are:
[  972.865935][T10530] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  972.869920][T10507] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  972.878316][T10546]  vmk80xx
[  972.892127][T10530] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  972.897628][    T9] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  972.906629][T10546] comedi: valid board names for usbduxsigma driver are:
[  972.916506][T10549] loop4: detected capacity change from 0 to 512
[  972.917485][T10530] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  972.924686][    T9] usb 4-1: invalid MIDI in EP 0
[  972.940255][T10549] EXT4-fs (loop4): Test dummy encryption mode enabled
[  972.950012][T10546]  usbduxsigma
[  972.957886][T10546] comedi: valid board names for usbduxfast driver are:
[  972.962704][T10549] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  972.971022][T10546]  usbduxfast
[  972.979024][T10530] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  972.989643][T10546] comedi: valid board names for usbdux driver are:
[  972.996836][T10546]  usbdux
[  973.006961][T10546] comedi: valid board names for ni6501 driver are:
[  973.026338][T10549] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.12623: bad orphan inode 131083
[  973.044962][T10546]  ni6501
[  973.068622][T10546] comedi: valid board names for dt9812 driver are:
[  973.070050][T10549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  973.079801][T10530] NILFS (loop1): error -2 truncating bmap (ino=16)
[  973.120502][T10546]  dt9812
[  973.124740][T10546] comedi: valid board names for ni_labpc_cs driver are:
[  973.132240][T10546]  ni_labpc_cs
[  973.136712][T10546] comedi: valid board names for ni_daq_700 driver are:
[  973.145376][T10546]  ni_daq_700
[  973.162173][T16726] udevd[16726]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  973.180231][    T9] snd-usb-audio: probe of 4-1:27.0 failed with error -22
[  973.188262][T10546] comedi: valid board names for labpc_pci driver are:
[  973.200291][    T9] usb 4-1: USB disconnect, device number 54
[  973.206405][T10546]  labpc_pci
[  973.214354][T10546] comedi: valid board names for adl_pci9118 driver are:
[  973.225887][T10546]  pci9118dg
[  973.230149][T10546]  pci9118hg
[  973.235477][T10546]  pci9118hr
[  973.238794][T10546] comedi: valid board names for 8255_pci driver are:
[  973.282246][T10546]  8255_pci
[  973.285434][T10546] comedi: valid board names for s526 driver are:
[  973.312614][ T5798] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  973.319652][ T5798] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  973.331540][T10546]  s526
[  973.334420][T10546] comedi: valid board names for multiq3 driver are:
[  973.347254][ T5798] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  973.368391][T10546]  multiq3
[  973.371462][ T5798] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  973.371490][ T5798] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  973.371852][ T5798] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  973.386417][T10546] comedi: valid board names for pcmuio driver are:
[  973.411225][T10546]  pcmuio48
[  973.412791][T23752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  973.428948][T10546]  pcmuio96
[  973.432123][ T5798] NILFS (loop1): discard dirty page: offset=0, ino=3
[  973.432151][ T5798] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  973.432169][ T5798] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  973.432186][ T5798] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  973.432203][ T5798] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  973.502503][T10546] comedi: valid board names for pcmmio driver are:
[  973.529581][T10546]  pcmmio
[  973.535673][T10546] comedi: valid board names for pcmda12 driver are:
[  973.562705][T10546]  pcmda12
[  973.568465][T10546] comedi: valid board names for pcmad driver are:
[  973.618489][T10546]  pcmad12
[  973.623182][T10546]  pcmad16
[  973.626333][T10546] comedi: valid board names for ni_labpc driver are:
[  973.637785][T10546]  lab-pc-1200
[  973.641797][T10546]  lab-pc-1200ai
[  973.645494][T10546]  lab-pc+
[  973.665353][T10546] comedi: valid board names for atmio16 driver are:
[  973.682491][T10546]  atmio16
[  973.698417][T10546]  atmio16d
[  973.702143][T10546] comedi: valid board names for ni_at_ao driver are:
[  973.748804][T10546]  at-ao-6
[  973.752193][T10546]  at-ao-10
[  973.755534][T10546] comedi: valid board names for ni_at_a2150 driver are:
[  973.762961][T10546]  ni_at_a2150
[  973.766526][T10546] comedi: valid board names for adq12b driver are:
[  973.777033][T10546]  adq12b
[  973.791459][T10546] comedi: valid board names for mpc624 driver are:
[  973.808404][T10546]  mpc624
[  973.811523][T10546] comedi: valid board names for c6xdigio driver are:
[  973.818285][T10546]  c6xdigio
[  973.821659][T10546] comedi: valid board names for aio_iiro_16 driver are:
[  973.828623][T10546]  aio_iiro_16
[  973.861655][T10546] comedi: valid board names for aio_aio12_8 driver are:
[  973.901639][T10546]  aio_aio12_8
[  973.905092][T10546]  aio_ai12_8
[  973.908406][T10546]  aio_ao12_4
[  973.934537][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  973.944996][T10546] comedi: valid board names for fl512 driver are:
[  973.955107][T10546]  fl512
[  973.958193][T10546] comedi: valid board names for dmm32at driver are:
[  973.969069][T10546]  dmm32at
[  973.972813][T10546] comedi: valid board names for dt282x driver are:
[  973.979658][T10546]  dt2821
[  973.986984][T10546]  dt2821-f
[  973.990147][T10546]  dt2821-g
[  973.993795][T10546]  dt2823
[  973.996769][T10546]  dt2824-pgh
[  974.000086][T10546]  dt2824-pgl
[  974.005622][T10546]  dt2825
[  974.008604][T10546]  dt2827
[  974.012455][T10546]  dt2828
[  974.015502][T10546]  dt2829
[  974.018477][T10546]  dt21-ez
[  974.022230][T10546]  dt23-ez
[  974.025309][T10546]  dt24-ez
[  974.028361][T10546]  dt24-ez-pgl
[  974.033053][T10546] comedi: valid board names for dt2817 driver are:
[  974.039857][T10546]  dt2817
[  974.043545][T10546] comedi: valid board names for dt2815 driver are:
[  974.050256][T10546]  dt2815
[  974.080477][T10546] comedi: valid board names for dt2814 driver are:
[  974.092414][T10546]  dt2814
[  974.095419][T10546] comedi: valid board names for dt2811 driver are:
[  974.121523][T10546]  dt2811-pgh
[  974.135094][T10546]  dt2811-pgl
[  974.138448][T10546] comedi: valid board names for dt2801 driver are:
[  974.145089][T10611] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2
[  974.185887][T10546]  dt2801
[  974.188925][T10546] comedi: valid board names for das6402 driver are:
[  974.211458][T10546]  das6402-12
[  974.214946][T10546]  das6402-16
[  974.218273][T10546] comedi: valid board names for das1800 driver are:
[  974.240338][T10546]  das-1701st
[  974.247495][T10546]  das-1701st-da
[  974.254674][T10546]  das-1702st
[  974.278147][T10546]  das-1702st-da
[  974.292442][T10546]  das-1702hr
[  974.295846][T10546]  das-1702hr-da
[  974.299776][T10546]  das-1701ao
[  974.312441][T10546]  das-1702ao
[  974.327099][T10546]  das-1801st
[  974.330445][T10546]  das-1801st-da
[  974.359191][T10546]  das-1802st
[  974.371735][T10546]  das-1802st-da
[  974.375357][T10546]  das-1802hr
[  974.378668][T10546]  das-1802hr-da
[  974.399930][T10546]  das-1801hc
[  974.417053][T10546]  das-1802hc
[  974.420489][T10546]  das-1801ao
[  974.445328][T10546]  das-1802ao
[  974.448985][T10546] comedi: valid board names for das800 driver are:
[  974.471487][T10546]  das-800
[  974.474648][T10546]  cio-das800
[  974.497182][T10546]  das-801
[  974.500283][T10546]  cio-das801
[  974.521484][T10546]  das-802
[  974.524594][T10546]  cio-das802
[  974.527931][T10546]  cio-das802/16
[  974.547869][T10546] comedi: valid board names for isa-das08 driver are:
[  974.566515][T10546]  isa-das08
[  974.569782][T10546]  das08-pgm
[  974.591501][T10546]  das08-pgh
[  974.594835][T10546]  das08-pgl
[  974.611646][T10546]  das08-aoh
[  974.614913][T10546]  das08-aol
[  974.618141][T10546]  das08-aom
[  974.626214][T10546]  das08/jr-ao
[  974.629649][T10546]  das08jr-16-ao
[  974.633928][T10546]  pc104-das08
[  974.637368][T10546]  das08jr/16
[  974.640745][T10546] comedi: valid board names for das16m1 driver are:
[  974.671670][T10546]  das16m1
[  974.674769][T10546] comedi: valid board names for dac02 driver are:
[  974.712172][T10546]  dac02
[  974.715096][T10546] comedi: valid board names for rti802 driver are:
[  974.731484][T10546]  rti802
[  974.734547][T10546] comedi: valid board names for rti800 driver are:
[  974.744278][T10546]  rti800
[  974.747274][T10546]  rti815
[  974.750320][T10546] comedi: valid board names for pcm3724 driver are:
[  974.759110][T10546]  pcm3724
[  974.777659][T10546] comedi: valid board names for pcl818 driver are:
[  974.796051][T10546]  pcl818l
[  974.799142][T10546]  pcl818h
[  974.810873][T10546]  pcl818hd
[  974.817882][T10546]  pcl818hg
[  974.833182][T10546]  pcl818
[  974.836179][T10546]  pcl718
[  974.839139][T10546]  pcm3718
[  974.888984][T10546] comedi: valid board names for pcl816 driver are:
[  974.897283][T10546]  pcl816
[  974.900271][T10546]  pcl814b
[  974.912679][T10546] comedi: valid board names for pcl812 driver are:
[  974.919640][T10546]  pcl812
[  974.945501][T10546]  pcl812pg
[  974.950709][T10546]  acl8112pg
[  974.969068][T10546]  acl8112dg
[  974.977773][T10546]  acl8112hg
[  974.981034][T10546]  a821pgl
[  974.988343][T10651] netlink: 'syz.4.12645': attribute type 64 has an invalid length.
[  974.991800][T10546]  a821pglnda
[  974.999598][T10546]  a821pgh
[  975.011725][T10546]  a822pgl
[  975.018337][T10546]  a822pgh
[  975.022950][T10546]  a823pgl
[  975.025078][T10651] netlink: 'syz.4.12645': attribute type 4 has an invalid length.
[  975.026074][T10546]  a823pgh
[  975.037102][T10546]  pcl813
[  975.040079][T10546]  pcl813b
[  975.049003][T10546]  acl8113
[  975.049195][T10651] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12645'.
[  975.053666][T10546]  iso813
[  975.072505][T10546]  acl8216
[  975.075585][T10546]  a826pg
[  975.088756][T10546] comedi: valid board names for pcl730 driver are:
[  975.098875][T10546]  pcl730
[  975.108372][T10546]  iso730
[  975.111783][T10546]  acl7130
[  975.117105][T10546]  pcm3730
[  975.120177][T10546]  pcl725
[  975.141500][T10546]  p8r8dio
[  975.151734][T10546]  acl7225b
[  975.154917][T10546]  p16r16dio
[  975.158143][T10546]  pcl733
[  975.161107][T10546]  pcl734
[  975.203366][T10546]  opmm-1616-xt
[  975.207324][T10546]  pearl-mm-p
[  975.210653][T10546]  ir104-pbf
[  975.219369][T10546] comedi: valid board names for pcl726 driver are:
[  975.231442][T10546]  pcl726
[  975.234433][T10546]  pcl727
[  975.258748][T10546]  pcl728
[  975.271539][T10546]  acl6126
[  975.274622][T10546]  acl6128
[  975.277675][T10546] comedi: valid board names for pcl724 driver are:
[  975.305364][T10546]  pcl724
[  975.308378][T10546]  pcl722
[  975.311345][T10546]  pcl731
[  975.330036][T10546]  acl7122
[  975.333613][T10546]  acl7124
[  975.336670][T10546]  pet48dio
[  975.339810][T10546]  pcmio48
[  975.353635][T10546]  onyx-mm-dio
[  975.357331][T10546] comedi: valid board names for pcl711 driver are:
[  975.399130][T10546]  pcl711
[  975.411778][T10546]  pcl711b
[  975.414860][T10546]  acl8112hg
[  975.418532][T10546]  acl8112dg
[  975.447046][T10546] comedi: valid board names for amplc_pc263 driver are:
[  975.460775][T10546]  pc263
[  975.471541][T10546] comedi: valid board names for amplc_pc236 driver are:
[  975.478811][T10546]  pc36at
[  975.492089][T10546] comedi: valid board names for amplc_dio200 driver are:
[  975.501627][T10546]  pc212e
[  975.504609][T10546]  pc214e
[  975.507580][T10546]  pc215e
[  975.520741][T10546]  pc218e
[  975.524120][T10546]  pc272e
[  975.527483][T10546] comedi: valid board names for comedi_parport driver are:
[  975.565920][T10546]  comedi_parport
[  975.582672][T10546] comedi: valid board names for comedi_test driver are:
[  975.589679][T10546]  comedi_test
[  975.619584][T10546] comedi: valid board names for comedi_bond driver are:
[  975.643592][T10546]  comedi_bond
[  975.797443][T10694] loop3: detected capacity change from 0 to 64
[  976.105785][T10701] loop4: detected capacity change from 0 to 4096
[  976.145681][T10701] ntfs: volume version 3.1.
[  976.176065][T10701] __ntfs_error: 17 callbacks suppressed
[  976.176084][T10701] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value.
[  976.251045][T10701] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[  976.302716][T10701] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index.
[  976.352239][T10701] ntfs: (device loop4): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  976.474472][T10701] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  976.542232][T10701] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5.
[  976.819839][T10698] loop1: detected capacity change from 0 to 32768
[  976.838157][T10731] loop0: detected capacity change from 0 to 16
[  976.868070][T10731] erofs: (device loop0): mounted with root inode @ nid 36.
[  976.985561][T10698] jfs_rename: dtInsert returned -EIO
[  977.318621][T10720] loop3: detected capacity change from 0 to 32768
[  977.338840][T10720] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.12664 (10720)
[  977.419126][T10720] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  977.443505][T10720] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  977.464676][T10720] BTRFS info (device loop3): using free space tree
[  977.601090][T10720] BTRFS info (device loop3): enabling ssd optimizations
[  977.641437][T10720] BTRFS info (device loop3): auto enabling async discard
[  977.889287][ T5796] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  978.967178][   T27] audit: type=1400 audit(2000000148.280:376): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=10820 comm="syz.1.12690"
[  978.988522][    C0] vkms_vblank_simulate: vblank timer overrun
[  979.219870][T10830] tmpfs: Bad value for 'mpol'
[  979.399745][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12695'.
[  979.417422][T10839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12695'.
[  979.441787][T10839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12695'.
[  979.913201][   T28] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  980.101518][   T28] usb 5-1: Using ep0 maxpacket: 16
[  980.119606][   T28] usb 5-1: config 0 has an invalid interface number: 216 but max is 0
[  980.136221][   T28] usb 5-1: config 0 has no interface number 0
[  980.152282][   T28] usb 5-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16
[  980.169776][   T28] usb 5-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[  980.218287][   T28] usb 5-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  980.252493][   T28] usb 5-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74
[  980.282333][   T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.301967][   T28] usb 5-1: Product: syz
[  980.306199][   T28] usb 5-1: Manufacturer: syz
[  980.310836][   T28] usb 5-1: SerialNumber: syz
[  980.334736][T10861] loop3: detected capacity change from 0 to 32768
[  980.359235][   T28] usb 5-1: config 0 descriptor??
[  980.372450][T10852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  980.379825][T10852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  980.411463][   T28] usb-storage 5-1:0.216: USB Mass Storage device detected
[  980.415749][T10861] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  980.421082][T10842] loop0: detected capacity change from 0 to 32768
[  980.442703][T10842] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.12696 (10842)
[  980.449646][T10873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12704'.
[  980.467403][   T28] scsi host1: usb-storage 5-1:0.216
[  980.483104][T10873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12704'.
[  980.497103][T10861] (syz.3.12701,10861,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64
[  980.514280][T10861] (syz.3.12701,10861,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2
[  980.523373][T10861] (syz.3.12701,10861,0):ocfs2_mknod:298 ERROR: status = -2
[  980.530708][T10861] (syz.3.12701,10861,0):ocfs2_mknod:502 ERROR: status = -2
[  980.538626][T10861] (syz.3.12701,10861,0):ocfs2_create:676 ERROR: status = -2
[  980.546443][T10873] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12704'.
[  980.589007][T10842] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  980.620891][ T5796] ocfs2: Unmounting device (7,3) on (node local)
[  980.671957][T10842] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  980.681252][T10842] BTRFS info (device loop0): using free space tree
[  980.825826][T10842] BTRFS info (device loop0): enabling ssd optimizations
[  980.844928][T10842] BTRFS info (device loop0): auto enabling async discard
[  981.083392][ T5786] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  981.847729][T10883] usb 5-1: reset high-speed USB device number 21 using dummy_hcd
[  981.859880][T10941] veth7: entered promiscuous mode
[  982.302762][T10992] netlink: 136 bytes leftover after parsing attributes in process `syz.3.12723'.
[  982.754488][    T9] usb 5-1: USB disconnect, device number 21
[  983.654488][T11082] loop3: detected capacity change from 0 to 256
[  983.730513][T11082] FAT-fs (loop3): Directory bread(block 64) failed
[  983.769032][T11082] FAT-fs (loop3): Directory bread(block 65) failed
[  983.796490][T11082] FAT-fs (loop3): Directory bread(block 66) failed
[  983.808905][T11082] FAT-fs (loop3): Directory bread(block 67) failed
[  983.841630][T11082] FAT-fs (loop3): Directory bread(block 68) failed
[  983.848228][T11082] FAT-fs (loop3): Directory bread(block 69) failed
[  983.882281][T11082] FAT-fs (loop3): Directory bread(block 70) failed
[  983.888964][T11082] FAT-fs (loop3): Directory bread(block 71) failed
[  983.911588][T11082] FAT-fs (loop3): Directory bread(block 72) failed
[  983.921684][T11082] FAT-fs (loop3): Directory bread(block 73) failed
[  984.531303][T11127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12764'.
[  984.550393][T11127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12764'.
[  984.564143][T11127] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12764'.
[  984.608721][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12765'.
[  985.193101][T11155] program syz.3.12774 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  985.205718][T11112] loop0: detected capacity change from 0 to 32768
[  985.638975][T11180] loop4: detected capacity change from 0 to 256
[  985.656231][T11180] exfat: Deprecated parameter 'namecase'
[  985.726371][T11180] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  986.219980][T11212] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  986.255916][T11204] loop3: detected capacity change from 0 to 8192
[  986.309501][T11204] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  986.360197][T11204] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  986.405350][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12792'.
[  986.418577][T11204] REISERFS (device loop3): using ordered data mode
[  986.446108][T11220] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12792'.
[  986.449121][T11204] reiserfs: using flush barriers
[  986.526319][T11204] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  986.578768][T11204] REISERFS (device loop3): checking transaction log (loop3)
[  986.591110][T11220] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12792'.
[  986.641468][T16852] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  986.825320][T11204] REISERFS (device loop3): Using tea hash to sort names
[  986.841546][T16852] usb 5-1: Using ep0 maxpacket: 8
[  986.842953][T11204] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  986.848796][T16852] usb 5-1: unable to get BOS descriptor or descriptor too short
[  986.871831][T16852] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  986.891695][T16852] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  986.907567][T16852] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  986.925292][T16852] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  986.941978][T16852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  986.954932][T16852] usb 5-1: Product: syz
[  986.960423][T16852] usb 5-1: Manufacturer: syz
[  986.970545][T16852] usb 5-1: SerialNumber: syz
[  987.035704][T11249] netlink: 'syz.0.12800': attribute type 1 has an invalid length.
[  987.047926][T11249] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12800'.
[  987.057355][   T28] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  987.212082][T16852] cdc_ncm 5-1:1.0: skipping garbage
[  987.217375][T16852] cdc_ncm 5-1:1.0: invalid descriptor buffer length
[  987.236109][T16852] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  987.243539][T16852] cdc_ncm 5-1:1.0: bind() failure
[  987.251725][   T28] usb 2-1: Using ep0 maxpacket: 8
[  987.263296][   T28] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  987.283418][   T28] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  987.292423][T16852] usb 5-1: USB disconnect, device number 22
[  987.340270][   T28] usb 2-1: Product: syz
[  987.353976][   T28] usb 2-1: Manufacturer: syz
[  987.358642][   T28] usb 2-1: SerialNumber: syz
[  987.382880][   T28] usb 2-1: config 0 descriptor??
[  987.423494][   T28] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  987.700748][   T27] audit: type=1326 audit(2000000157.010:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.0.12808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa23818f749 code=0x0
[  987.840301][   T28] gspca_zc3xx: reg_r err -71
[  987.849216][   T28] gspca_zc3xx: probe of 2-1:0.0 failed with error -71
[  987.884077][   T28] usb 2-1: USB disconnect, device number 62
[  988.124299][T11318] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12815'.
[  988.262031][T16609] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  988.444400][T11336] loop3: detected capacity change from 0 to 512
[  988.478039][T16609] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  988.505377][T16609] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  988.520723][T16609] usb 1-1: config 220 has no interface number 2
[  988.528920][T16609] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  988.546715][T16609] usb 1-1: config 220 interface 0 has no altsetting 0
[  988.557556][T11336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  988.570469][T11336] ext4 filesystem being mounted at /3346/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  988.581224][T16609] usb 1-1: config 220 interface 76 has no altsetting 0
[  988.588297][T16609] usb 1-1: config 220 interface 1 has no altsetting 0
[  988.604303][T16609] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  988.621862][T16609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  988.637574][T16609] usb 1-1: Product: syz
[  988.643761][T11336] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.12822: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  988.662636][T16609] usb 1-1: Manufacturer: syz
[  988.667284][T16609] usb 1-1: SerialNumber: syz
[  988.681891][T11336] EXT4-fs (loop3): Remounting filesystem read-only
[  988.743274][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  988.903047][T16609] usb 1-1: selecting invalid altsetting 0
[  988.929851][T16609] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  988.969819][T16609] usb 1-1: No valid video chain found.
[  988.998854][T16609] usb 1-1: selecting invalid altsetting 0
[  989.021679][T16609] usbtest: probe of 1-1:220.1 failed with error -22
[  989.045873][T11369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12828'.
[  989.073057][T16609] usb 1-1: USB disconnect, device number 55
[  989.085950][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12828'.
[  989.143228][T11369] ip6gretap4: entered allmulticast mode
[  989.699745][T11415] xt_CT: You must specify a L4 protocol and not use inversions on it
[  990.184132][T11440] netlink: 'syz.4.12848': attribute type 2 has an invalid length.
[  990.441324][T11463] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12854'.
[  990.671520][T16609] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  990.893739][T16609] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  990.911508][T16609] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  990.933154][T16609] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  990.953563][T16609] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  990.998368][T16609] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  991.027054][T16609] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  991.036927][T16609] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  991.046948][T16609] usb 4-1: Product: syz
[  991.051167][T16609] usb 4-1: Manufacturer: syz
[  991.103585][T16609] cdc_wdm 4-1:1.0: skipping garbage
[  991.113290][T16609] cdc_wdm 4-1:1.0: skipping garbage
[  991.146307][T16609] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  991.163529][T16609] cdc_wdm 4-1:1.0: Unknown control protocol
[  991.270807][T11500] netlink: 'syz.1.12865': attribute type 5 has an invalid length.
[  991.271857][T11474] loop4: detected capacity change from 0 to 32768
[  991.326898][T11474] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  991.567570][T11474] XFS (loop4): Ending clean mount
[  991.735629][T23752] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  991.864509][T16609] usb 4-1: USB disconnect, device number 55
[  992.212597][T11553] lo: left promiscuous mode
[  992.220033][T11553] lo: left allmulticast mode
[  992.288915][T11553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  992.310778][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12878'.
[  992.331632][T11559] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12878'.
[  992.809987][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12888'.
[  993.185788][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  993.403149][T11622] loop4: detected capacity change from 0 to 256
[  993.504869][T11622] FAT-fs (loop4): Directory bread(block 64) failed
[  993.546435][T11622] FAT-fs (loop4): Directory bread(block 65) failed
[  993.579962][T11622] FAT-fs (loop4): Directory bread(block 66) failed
[  993.603461][T11622] FAT-fs (loop4): Directory bread(block 67) failed
[  993.610880][T11622] FAT-fs (loop4): Directory bread(block 68) failed
[  993.622899][T11622] FAT-fs (loop4): Directory bread(block 69) failed
[  993.654191][T11622] FAT-fs (loop4): Directory bread(block 70) failed
[  993.672016][T11622] FAT-fs (loop4): Directory bread(block 71) failed
[  993.702406][T11622] FAT-fs (loop4): Directory bread(block 72) failed
[  993.709016][T11622] FAT-fs (loop4): Directory bread(block 73) failed
[  993.821711][    C1] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[  993.901917][ T5104] Bluetooth: hci1: command 0x0406 tx timeout
[  994.029232][T11658] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12908'.
[  994.232418][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12912'.
[  994.261766][T11669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12912'.
[  994.296890][T11671] loop4: detected capacity change from 0 to 512
[  994.320259][T11671] EXT4-fs: Ignoring removed mblk_io_submit option
[  994.341479][T11671] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  994.384995][T11671] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.12910: inode has both inline data and extents flags
[  994.478196][T11671] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.12910: couldn't read orphan inode 15 (err -117)
[  994.564733][T11671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  994.565682][T11689] loop3: detected capacity change from 0 to 512
[  994.621104][T11689] EXT4-fs: Ignoring removed nobh option
[  994.683474][T11689] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #3: comm syz.3.12915: corrupted inode contents
[  994.746557][T11689] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #3: comm syz.3.12915: mark_inode_dirty error
[  994.785444][T23752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  994.839819][   T27] audit: type=1326 audit(2000000164.120:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.1.12921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[  994.866947][T11689] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #3: comm syz.3.12915: corrupted inode contents
[  994.907933][T11689] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.12915: mark_inode_dirty error
[  994.950736][   T27] audit: type=1326 audit(2000000164.120:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.1.12921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[  994.962284][T11689] Quota error (device loop3): write_blk: dquota write failed
[  995.026358][   T27] audit: type=1326 audit(2000000164.130:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.1.12921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[  995.046921][T11689] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  995.067775][T11689] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.12915: Failed to acquire dquot type 0
[  995.100238][   T27] audit: type=1326 audit(2000000164.130:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.1.12921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[  995.143277][T11689] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #16: comm syz.3.12915: corrupted inode contents
[  995.168189][T11689] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #16: comm syz.3.12915: mark_inode_dirty error
[  995.195033][   T27] audit: type=1326 audit(2000000164.130:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11704 comm="syz.1.12921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[  995.225524][T11689] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #16: comm syz.3.12915: corrupted inode contents
[  995.248565][T11689] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.12915: mark_inode_dirty error
[  995.302454][T11689] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #16: comm syz.3.12915: corrupted inode contents
[  995.339646][T11689] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  995.357069][T11689] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #16: comm syz.3.12915: corrupted inode contents
[  995.371280][T11689] EXT4-fs error (device loop3): ext4_truncate:4294: inode #16: comm syz.3.12915: mark_inode_dirty error
[  995.388389][T11689] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  995.400584][T11689] EXT4-fs (loop3): 1 truncate cleaned up
[  995.444810][T11689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  995.466060][T11689] ext4 filesystem being mounted at /3370/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  995.576160][T11689] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 13: comm syz.3.12915: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0
[  995.632963][T11689] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[  995.708781][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12932'.
[  995.774253][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  995.809680][ T2986] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  995.842528][ T2986] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:8: Failed to release dquot type 1
[  996.175150][T11770] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (6)
[  996.228607][T11774] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  996.453927][T11789] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12945'.
[  996.662323][T11801] loop3: detected capacity change from 0 to 512
[  996.700945][T11801] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  996.748635][T11801] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  996.820101][T11801] EXT4-fs (loop3): 1 truncate cleaned up
[  996.852783][T11801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  996.918418][T11801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  997.084103][T11830] netlink: 'syz.4.12957': attribute type 21 has an invalid length.
[  997.101823][T11830] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12957'.
[  997.114567][T16852] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  997.323551][T16852] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  997.338454][T16852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.370037][T16852] usb 2-1: config 0 descriptor??
[  997.407995][T11852] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12963'.
[  997.511759][   T28] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  997.647528][T16852] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[  997.665023][T16852] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  997.714466][   T28] usb 5-1: Using ep0 maxpacket: 32
[  997.755659][   T28] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  997.783887][   T28] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  997.816109][   T28] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  997.841494][   T28] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  997.861539][T16852] [drm:udl_init] *ERROR* Selecting channel failed
[  997.881512][   T28] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  997.892328][T11873] 9pnet: Could not find request transport: x
[  997.923737][T16852] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  997.936507][   T28] usb 5-1: config 0 interface 0 has no altsetting 0
[  997.943780][T16852] [drm] Initialized udl on minor 2
[  997.953916][   T28] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  997.963534][   T28] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  997.972895][T16852] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  997.983794][   T28] usb 5-1: Product: syz
[  997.990727][T16852] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  997.997832][   T28] usb 5-1: Manufacturer: syz
[  998.013117][   T28] usb 5-1: SerialNumber: syz
[  998.023378][  T787] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  998.040678][T16852] usb 2-1: USB disconnect, device number 63
[  998.048788][   T28] usb 5-1: config 0 descriptor??
[  998.066595][  T787] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  998.084638][   T28] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  998.128953][   T28] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  998.317998][T11839] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90
[  998.336380][   T28] usb 5-1: USB disconnect, device number 23
[  998.355285][   T28] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  998.952208][   T28] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  999.152314][   T28] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  999.167098][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.167254][T11972] loop3: detected capacity change from 0 to 128
[  999.190400][   T28] usb 1-1: Product: syz
[  999.219055][   T28] usb 1-1: Manufacturer: syz
[  999.221331][T11972] FAT-fs (loop3): Directory bread(block 32) failed
[  999.224145][   T28] usb 1-1: SerialNumber: syz
[  999.257014][T11972] FAT-fs (loop3): Directory bread(block 33) failed
[  999.268798][   T28] usb 1-1: config 0 descriptor??
[  999.271572][T11972] FAT-fs (loop3): Directory bread(block 34) failed
[  999.294860][   T28] gspca_main: sunplus-2.14.0 probing 055f:c230
[  999.305971][T11972] FAT-fs (loop3): Directory bread(block 35) failed
[  999.328555][T11972] FAT-fs (loop3): Directory bread(block 36) failed
[  999.346778][T11972] FAT-fs (loop3): Directory bread(block 37) failed
[  999.361709][T11972] FAT-fs (loop3): Directory bread(block 38) failed
[  999.393406][T11972] FAT-fs (loop3): Directory bread(block 39) failed
[  999.408842][T11972] FAT-fs (loop3): Directory bread(block 40) failed
[  999.416485][T11972] FAT-fs (loop3): Directory bread(block 41) failed
[  999.588802][T11991] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  999.621899][T11972] syz.3.12989: attempt to access beyond end of device
[  999.621899][T11972] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128
[  999.645983][T11972] FAT-fs (loop3): Filesystem has been set read-only
[  999.674055][T11972] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  999.737517][  T787] usb 1-1: USB disconnect, device number 56
[ 1001.178281][T12071] loop1: detected capacity change from 0 to 512
[ 1001.199921][T12066] xt_CT: No such helper "netbios-ns"
[ 1001.206720][T12071] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1001.311615][T12071] EXT4-fs (loop1): 1 truncate cleaned up
[ 1001.365292][T12071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1001.544997][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1001.723724][T12098] loop4: detected capacity change from 0 to 512
[ 1001.727237][T12102] netlink: 'syz.3.13023': attribute type 17 has an invalid length.
[ 1001.751733][T12102] netlink: 148 bytes leftover after parsing attributes in process `syz.3.13023'.
[ 1001.805327][T12098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1001.885779][T12098] ext4 filesystem being mounted at /1293/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1002.043553][T12098] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz.4.13022: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[ 1002.076675][T12108] veth9: entered promiscuous mode
[ 1002.117726][T12098] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz.4.13022: directory missing '.'
[ 1002.268277][T23752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1002.428307][T12156] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[ 1002.572397][T12166] loop3: detected capacity change from 0 to 64
[ 1002.625688][T12166] syz.3.13035: attempt to access beyond end of device
[ 1002.625688][T12166] loop3: rw=0, sector=65534, nr_sectors = 2 limit=64
[ 1002.686175][T12166] Buffer I/O error on dev loop3, logical block 32767, async page read
[ 1002.703248][T12166] syz.3.13035: attempt to access beyond end of device
[ 1002.703248][T12166] loop3: rw=0, sector=65534, nr_sectors = 2 limit=64
[ 1002.731614][T12166] Buffer I/O error on dev loop3, logical block 32767, async page read
[ 1002.848619][T12176] loop1: detected capacity change from 0 to 256
[ 1003.008227][T12185] loop3: detected capacity change from 0 to 512
[ 1003.092541][T12185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1003.177669][T12185] ext4 filesystem being mounted at /3407/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1003.260021][T12185] Quota error (device loop3): do_check_range: Getting dqdh_next_free 2741 out of range 0-6
[ 1003.290568][T12185] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 1003.324891][T12185] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.13040: Failed to acquire dquot type 0
[ 1003.447136][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1003.615865][T12160] loop4: detected capacity change from 0 to 32768
[ 1003.674587][T12160] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.13030 (12160)
[ 1003.751504][T12160] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1003.778547][T12160] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1003.831666][T12160] BTRFS info (device loop4): using free space tree
[ 1004.106842][T12160] BTRFS info (device loop4): enabling ssd optimizations
[ 1004.152012][T12160] BTRFS info (device loop4): auto enabling async discard
[ 1004.184299][T12197] loop1: detected capacity change from 0 to 32768
[ 1004.266761][T12197] (syz.1.13042,12197,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1004.301269][T12197] (syz.1.13042,12197,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1004.320913][T23752] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1004.450444][T12197] JBD2: Ignoring recovery information on journal
[ 1004.631106][T12197] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1004.862038][T16609] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1005.099243][ T5798] ocfs2: Unmounting device (7,1) on (node local)
[ 1005.106386][T16609] usb 1-1: Using ep0 maxpacket: 8
[ 1005.117504][T16609] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1005.157142][T16609] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1005.192029][T16609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.222470][T16609] usb 1-1: config 0 descriptor??
[ 1005.233608][T16609] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1005.242065][    T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1005.461837][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1005.474696][    T9] usb 4-1: config 0 has no interfaces?
[ 1005.490056][    T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1005.510102][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.528319][    T9] usb 4-1: Product: syz
[ 1005.541432][    T9] usb 4-1: Manufacturer: syz
[ 1005.552091][    T9] usb 4-1: SerialNumber: syz
[ 1005.573929][    T9] r8152-cfgselector 4-1: config 0 descriptor??
[ 1005.644049][T16609] gspca_vc032x: reg_w err -71
[ 1005.648966][T16609] vc032x: probe of 1-1:0.0 failed with error -71
[ 1005.682453][T16609] usb 1-1: USB disconnect, device number 57
[ 1005.799753][    T9] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[ 1005.818066][T23895] usb 4-1: config 0 descriptor??
[ 1006.041863][T23895] usb 4-1: can't set config #0, error -71
[ 1006.046316][    T9] usb 4-1: USB disconnect, device number 56
[ 1006.148726][T12326] xt_l2tp: wrong L2TP version: 0
[ 1006.786322][T12360] ax25_connect(): syz.3.13079 uses autobind, please contact jreuter@yaina.de
[ 1007.172131][T12380] tmpfs: Bad value for 'mpol'
[ 1007.684771][T12368] loop4: detected capacity change from 0 to 32768
[ 1007.719701][T12368] jfs: Unrecognized mount option "ÿÿ18446744073709551615ÿ01777777777777777777777±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(
cŸoö—ÈêM ) Ç0177777777777777777777718446744073709551615ÿÿÿÿÿÿÿÿÿÿ" or missing value
[ 1007.851847][T12403] trusted_key: encrypted_key: master key parameter is missing
[ 1007.865610][T12363] loop0: detected capacity change from 0 to 32768
[ 1007.919340][T12363] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1008.167602][T12363] (syz.0.13080,12363,0):ocfs2_read_blocks:239 ERROR: status = -12
[ 1008.213928][T12363] (syz.0.13080,12363,0):ocfs2_search_one_group:1684 ERROR: status = -12
[ 1008.267449][T12363] (syz.0.13080,12363,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -12
[ 1008.302888][T12363] (syz.0.13080,12363,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -12
[ 1008.326022][T12363] (syz.0.13080,12363,0):ocfs2_claim_new_inode:2216 ERROR: status = -12
[ 1008.345171][T12432] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4.
[ 1008.353970][T12363] (syz.0.13080,12363,0):ocfs2_claim_new_inode:2231 ERROR: status = -12
[ 1008.376158][T12363] (syz.0.13080,12363,0):ocfs2_mknod_locked:639 ERROR: status = -12
[ 1008.402111][T12434] cgroup: noprefix used incorrectly
[ 1008.414769][T12363] (syz.0.13080,12363,0):ocfs2_symlink:1944 ERROR: status = -12
[ 1008.441845][T12363] (syz.0.13080,12363,0):ocfs2_symlink:2068 ERROR: status = -12
[ 1008.561552][T10985] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1008.582068][ T5786] ocfs2: Unmounting device (7,0) on (node local)
[ 1008.771920][T10985] usb 4-1: Using ep0 maxpacket: 32
[ 1008.783576][T10985] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1008.804318][T10985] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1008.834563][T10985] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1008.851517][T10985] usb 4-1: config 1 has no interface number 0
[ 1008.861479][T10985] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1008.884633][T10985] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1008.921626][T10985] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1008.940996][T10985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1008.945330][T12451] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13104'.
[ 1008.958993][T12451] netlink: 172 bytes leftover after parsing attributes in process `syz.0.13104'.
[ 1008.986593][T10985] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[ 1009.213649][T10985] snd_usb_pod 4-1:1.1: invalid control EP
[ 1009.219461][T10985] snd_usb_pod 4-1:1.1: cannot start listening: -22
[ 1009.237229][T10985] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[ 1009.245857][T10985] snd_usb_pod: probe of 4-1:1.1 failed with error -22
[ 1009.340187][T12440] loop1: detected capacity change from 0 to 32768
[ 1009.370754][T12440] (syz.1.13103,12440,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1009.399818][T12440] (syz.1.13103,12440,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1009.449563][T12471] netlink: 'syz.4.13111': attribute type 21 has an invalid length.
[ 1009.458053][T12471] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13111'.
[ 1009.468594][T12471] netlink: 'syz.4.13111': attribute type 4 has an invalid length.
[ 1009.477073][T12440] JBD2: Ignoring recovery information on journal
[ 1009.546830][T10985] usb 4-1: USB disconnect, device number 57
[ 1009.568515][T12475] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 1009.625346][T12440] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1009.632518][T12475] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1009.915406][T12494] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1009.983084][ T5798] ocfs2: Unmounting device (7,1) on (node local)
[ 1010.171752][T12505] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1010.179211][T12505] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1010.372076][T12516] comedi comedi0: Cannot bond this driver to itself!
[ 1010.420223][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13124'.
[ 1010.434330][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13124'.
[ 1010.445144][T12520] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13124'.
[ 1010.968702][T12550] netlink: 'syz.4.13133': attribute type 10 has an invalid length.
[ 1011.287827][T12555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13134'.
[ 1011.297508][T12555] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13134'.
[ 1011.492460][T12585] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1011.545456][T12589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13143'.
[ 1011.585222][T12589] netlink: 31 bytes leftover after parsing attributes in process `syz.4.13143'.
[ 1011.601986][T12591] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 1011.644675][T12589] netlink: 'syz.4.13143': attribute type 3 has an invalid length.
[ 1011.680987][T12589] netlink: 'syz.4.13143': attribute type 2 has an invalid length.
[ 1012.301606][   T27] audit: type=1326 audit(2000000181.610:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d33b8f749 code=0x7ffc0000
[ 1012.391854][   T27] audit: type=1326 audit(2000000181.610:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d33b8f749 code=0x7ffc0000
[ 1012.481559][   T27] audit: type=1326 audit(2000000181.640:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f8d33b8f749 code=0x7ffc0000
[ 1012.521939][   T27] audit: type=1326 audit(2000000181.640:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d33b8f749 code=0x7ffc0000
[ 1012.607219][   T27] audit: type=1326 audit(2000000181.640:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d33b8f749 code=0x7ffc0000
[ 1013.125242][T12623] loop1: detected capacity change from 0 to 32768
[ 1013.180193][T12623] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[ 1013.343811][T12632] loop3: detected capacity change from 0 to 32768
[ 1013.408425][T12632] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1013.559781][T12632] XFS (loop3): Ending clean mount
[ 1013.621153][T12632] XFS (loop3): Quotacheck needed: Please wait.
[ 1013.781824][T12632] XFS (loop3): Quotacheck: Done.
[ 1013.820002][T12632] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1013.837003][T12688] loop4: detected capacity change from 0 to 8192
[ 1013.915598][T12688] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1014.259067][T12700] loop0: detected capacity change from 0 to 8192
[ 1014.329471][T12700] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1014.329502][T12700] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 1014.329635][T12700] REISERFS (device loop0): using ordered data mode
[ 1014.329647][T12700] reiserfs: using flush barriers
[ 1014.349252][T12700] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1014.349858][T12700] REISERFS (device loop0): checking transaction log (loop0)
[ 1014.549462][T12700] REISERFS (device loop0): Using tea hash to sort names
[ 1014.549891][T12700] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 1014.861068][T12734] __nla_validate_parse: 2 callbacks suppressed
[ 1014.861086][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13180'.
[ 1014.861103][T12731] loop3: detected capacity change from 0 to 1024
[ 1014.880765][T12734] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13180'.
[ 1014.915076][T12731] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[ 1014.982543][T12738] loop4: detected capacity change from 0 to 8
[ 1014.993543][T12734] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13180'.
[ 1015.140200][T12738] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1015.205822][T12738] SQUASHFS error: Failed to read block 0xa8: -5
[ 1015.243407][T12738] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1015.277683][T12738] SQUASHFS error: Failed to read block 0xa8: -5
[ 1015.310821][   T27] audit: type=1800 audit(2000000184.620:388): pid=12738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13182" name="file0" dev="loop4" ino=3 res=0 errno=0
[ 1015.637924][T12770] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 1015.659274][T12770] overlayfs: conflicting options: metacopy=off,verity=require
[ 1015.661529][T12768] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13188'.
[ 1015.698418][T12774] netlink: 'syz.3.13189': attribute type 5 has an invalid length.
[ 1015.908292][T12786] bridge6: the hash_elasticity option has been deprecated and is always 16
[ 1016.152846][T12800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13198'.
[ 1016.451271][T12821] netlink: 'syz.4.13203': attribute type 6 has an invalid length.
[ 1016.549387][T12826] xt_hashlimit: overflow, try lower: 0/0
[ 1016.601846][T10985] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1016.792561][T10985] usb 4-1: Using ep0 maxpacket: 32
[ 1016.810729][T10985] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1016.840825][T10985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1016.863909][T10985] usb 4-1: config 0 descriptor??
[ 1016.892891][T10985] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1016.910489][T12851] loop4: detected capacity change from 0 to 8
[ 1016.965446][T12851] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 1017.013275][T12851] cramfs: Error -3 while decompressing!
[ 1017.019106][T12851] cramfs: ffffffff96fe1348(18)->ffff88804c782000(4096)
[ 1017.029671][T12851] cramfs: Error -3 while decompressing!
[ 1017.039666][T12851] cramfs: ffffffff96fe1348(18)->ffff88804c782000(4096)
[ 1017.053712][   T27] audit: type=1800 audit(2000000186.370:389): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13213" name="file1" dev="loop4" ino=324 res=0 errno=0
[ 1017.306244][T10985] gspca_vc032x: reg_w err -71
[ 1017.319369][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.334376][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.349962][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.360079][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.380292][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.386009][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.395942][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.401285][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.414605][T12873] loop1: detected capacity change from 0 to 4096
[ 1017.421096][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.433483][T12873] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1017.440370][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.450681][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.451491][T12873] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 1017.456814][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.465531][  T787] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1017.470663][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.483905][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.489231][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.494891][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.500212][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.507280][T10985] gspca_vc032x: I2c Bus Busy Wait 00
[ 1017.512817][T10985] gspca_vc032x: Unknown sensor...
[ 1017.518071][T10985] vc032x: probe of 4-1:0.0 failed with error -22
[ 1017.520431][T12873] System zones: 
[ 1017.528187][T10985] usb 4-1: USB disconnect, device number 58
[ 1017.541796][T12873] 0-5
[ 1017.583199][T12873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1017.692259][  T787] usb 1-1: Using ep0 maxpacket: 32
[ 1017.699728][  T787] usb 1-1: config 0 has an invalid interface number: 151 but max is 0
[ 1017.708762][  T787] usb 1-1: config 0 has no interface number 0
[ 1017.728576][  T787] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[ 1017.753091][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1017.759328][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.781031][  T787] usb 1-1: Product: syz
[ 1017.786593][  T787] usb 1-1: Manufacturer: syz
[ 1017.826238][  T787] usb 1-1: SerialNumber: syz
[ 1017.844942][  T787] usb 1-1: config 0 descriptor??
[ 1018.068672][  T787] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[ 1018.166656][  T787] usb 1-1: USB disconnect, device number 58
[ 1018.285947][T10573] udevd[10573]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1018.477466][T12952] netlink: 'syz.4.13230': attribute type 21 has an invalid length.
[ 1018.504360][T12952] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13230'.
[ 1018.621302][T12958] infiniband syz2: set active
[ 1018.637911][T12958] infiniband syz2: set active
[ 1018.787349][T12958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1018.831981][T10985] lo speed is unknown, defaulting to 1000
[ 1018.859914][T16609] lo speed is unknown, defaulting to 1000
[ 1019.337482][   T28] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1019.534412][   T28] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1019.549343][   T28] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1019.598900][   T28] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1019.618832][   T28] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1019.640186][   T28] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1019.673571][   T28] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1019.693689][   T28] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1019.727640][T13013] loop0: detected capacity change from 0 to 4096
[ 1019.734246][   T28] usb 5-1: Product: syz
[ 1019.738864][   T28] usb 5-1: Manufacturer: syz
[ 1019.750231][   T28] cdc_wdm 5-1:1.0: skipping garbage
[ 1019.769383][   T28] cdc_wdm 5-1:1.0: skipping garbage
[ 1019.778959][T13013] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[ 1019.802850][   T28] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1019.818791][   T28] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1019.826503][T13013] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing.
[ 1019.866191][T13013] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[ 1019.920467][T13013] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1020.135922][T13013] ntfs: volume version 3.1.
[ 1020.147612][T13042] loop1: detected capacity change from 0 to 256
[ 1020.200013][T13013] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[ 1020.230370][T13013] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[ 1020.301067][T13042] FAT-fs (loop1): Directory bread(block 64) failed
[ 1020.309748][T13042] FAT-fs (loop1): Directory bread(block 65) failed
[ 1020.331627][T13042] FAT-fs (loop1): Directory bread(block 66) failed
[ 1020.349069][T13042] FAT-fs (loop1): Directory bread(block 67) failed
[ 1020.379653][T13042] FAT-fs (loop1): Directory bread(block 68) failed
[ 1020.399196][T13042] FAT-fs (loop1): Directory bread(block 69) failed
[ 1020.415853][T13042] FAT-fs (loop1): Directory bread(block 70) failed
[ 1020.428864][T13042] FAT-fs (loop1): Directory bread(block 71) failed
[ 1020.437392][T13042] FAT-fs (loop1): Directory bread(block 72) failed
[ 1020.449019][T13042] FAT-fs (loop1): Directory bread(block 73) failed
[ 1020.572013][   T28] usb 5-1: USB disconnect, device number 24
[ 1021.572834][   T27] audit: type=1326 audit(2000000190.890:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13123 comm="syz.0.13279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23818f749 code=0x7ffc0000
[ 1021.653589][   T27] audit: type=1326 audit(2000000190.910:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13123 comm="syz.0.13279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23818f749 code=0x7ffc0000
[ 1021.698765][T13131] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.13282'.
[ 1021.711071][   T27] audit: type=1326 audit(2000000190.930:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13123 comm="syz.0.13279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fa23818f749 code=0x7ffc0000
[ 1021.778873][   T27] audit: type=1326 audit(2000000190.930:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13123 comm="syz.0.13279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23818f749 code=0x7ffc0000
[ 1021.846149][T13141] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[ 1022.219748][T13164] loop1: detected capacity change from 0 to 512
[ 1022.245065][T13164] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1022.259396][T13164] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1022.297912][T13164] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.13291: inode has both inline data and extents flags
[ 1022.316388][T13164] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.13291: couldn't read orphan inode 15 (err -117)
[ 1022.380031][T13164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1022.693390][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1022.924704][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13300'.
[ 1023.680473][T13244] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1023.741940][  T787] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 1023.931658][  T787] usb 1-1: Using ep0 maxpacket: 8
[ 1023.933404][T13257] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13316'.
[ 1023.953803][  T787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1023.976872][  T787] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1024.017046][  T787] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1024.058727][  T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1024.069469][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1024.091077][  T787] usb 1-1: Product: syz
[ 1024.106283][  T787] usb 1-1: Manufacturer: syz
[ 1024.119682][  T787] usb 1-1: SerialNumber: syz
[ 1024.142957][  T787] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[ 1024.170871][  T787] cdc_ncm 1-1:1.0: bind() failure
[ 1024.362101][  T787] cdc_mbim 1-1:1.1: CDC Union missing and no IAD found
[ 1024.369087][  T787] cdc_mbim 1-1:1.1: bind() failure
[ 1024.643365][    T9] usb 1-1: USB disconnect, device number 59
[ 1024.931793][   T23] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1025.124344][   T23] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1025.157953][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1025.185004][   T23] usb 5-1: config 0 descriptor??
[ 1025.432553][   T23] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[ 1025.460668][   T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1025.635634][   T23] [drm:udl_init] *ERROR* Selecting channel failed
[ 1025.689347][   T23] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[ 1025.720816][   T23] [drm] Initialized udl on minor 2
[ 1025.748415][   T23] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1025.770674][   T23] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1025.785682][  T787] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1025.819532][  T787] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1025.841769][   T23] usb 5-1: USB disconnect, device number 25
[ 1025.871954][  T787] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1026.159542][T13373] netlink: 'syz.0.13344': attribute type 1 has an invalid length.
[ 1026.392286][T13380] loop0: detected capacity change from 0 to 164
[ 1026.438676][T13380] Unable to read rock-ridge attributes
[ 1026.488383][T13390] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13349'.
[ 1026.507598][ T5794] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1027.011570][   T23] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1027.202443][   T23] usb 1-1: Using ep0 maxpacket: 16
[ 1027.220633][   T23] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[ 1027.238384][   T23] usb 1-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config
[ 1027.262460][   T23] usb 1-1: config 0 has no interface number 0
[ 1027.272446][   T23] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 1027.288436][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1027.310318][   T23] usb 1-1: Product: syz
[ 1027.322089][   T23] usb 1-1: Manufacturer: syz
[ 1027.326757][   T23] usb 1-1: SerialNumber: syz
[ 1027.349919][   T23] usb 1-1: config 0 descriptor??
[ 1027.581009][  T787] usb 1-1: USB disconnect, device number 60
[ 1027.829233][T13468] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1027.832295][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13368'.
[ 1027.980763][T13472] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13371'.
[ 1028.008883][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13371'.
[ 1028.037000][T13472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13371'.
[ 1028.489775][T13500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13379'.
[ 1028.931058][T13518] x_tables: unsorted underflow at hook 4
[ 1029.360654][T13537] usb usb5: usbfs: process 13537 (syz.4.13391) did not claim interface 0 before use
[ 1029.671981][   T28] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[ 1029.876203][   T28] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1029.894864][   T28] usb 2-1: config 179 has no interface number 0
[ 1029.915868][   T28] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[ 1029.937490][   T28] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[ 1029.982222][   T28] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1030.021566][   T28] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64
[ 1030.040942][T13493] loop3: detected capacity change from 0 to 32763
[ 1030.043703][   T28] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1030.116537][   T28] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1030.130090][T13493] syz.3.13377: attempt to access beyond end of device
[ 1030.130090][T13493] loop3: rw=4096, sector=32767, nr_sectors = 1 limit=32763
[ 1030.137635][   T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1030.172397][T13493] XFS (loop3): last sector read failed
[ 1030.212027][T13538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1030.219443][T13538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1030.518369][T16609] usb 2-1: USB disconnect, device number 64
[ 1030.518401][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1030.532882][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1031.060264][T13610] loop0: detected capacity change from 0 to 1024
[ 1031.139705][T13610] hfsplus: invalid extended attribute record
[ 1031.279454][  T135] hfsplus: b-tree write err: -5, ino 4
[ 1031.730005][T13644] veth9: entered promiscuous mode
[ 1031.760861][T13658] netlink: 'syz.0.13418': attribute type 17 has an invalid length.
[ 1031.792899][T13658] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13418'.
[ 1032.205920][T13699] loop3: detected capacity change from 0 to 256
[ 1032.312557][   T28] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1032.475281][T13711] loop3: detected capacity change from 0 to 1024
[ 1032.487783][T13711] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[ 1032.518200][T13711] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1032.525910][   T28] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1032.546363][T13711] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 1032.554959][T13711] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1032.559963][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.562875][T13711] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.13429: Inode bitmap for bg 0 marked uninitialized
[ 1032.594976][   T28] usb 1-1: Product: syz
[ 1032.595847][T13711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1032.599183][   T28] usb 1-1: Manufacturer: syz
[ 1032.599202][   T28] usb 1-1: SerialNumber: syz
[ 1032.642159][   T28] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1032.651909][T13711] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (32298!=35945)
[ 1032.705064][   T23] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1032.717333][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1032.969775][T13731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13433'.
[ 1032.990493][T13731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13433'.
[ 1033.157397][    T9] usb 1-1: USB disconnect, device number 61
[ 1033.825937][   T23] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 1033.847972][T13778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13446'.
[ 1033.849552][   T23] ath9k_htc: Failed to initialize the device
[ 1033.889398][    T9] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1034.381665][    T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1034.601747][    T9] usb 1-1: Using ep0 maxpacket: 32
[ 1034.613857][    T9] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[ 1034.635270][    T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1034.672621][    T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1034.702034][    T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1034.723160][    T9] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1034.756852][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1034.770248][    T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1034.785400][    T9] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1034.816903][    T9] usb 1-1: Product: syz
[ 1034.821142][    T9] usb 1-1: Manufacturer: syz
[ 1034.833520][    T9] usb 1-1: SerialNumber: syz
[ 1034.850847][    T9] usb 1-1: config 0 descriptor??
[ 1034.872160][    T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1034.896121][    T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1034.921651][T10985] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1034.941815][T11582] Bluetooth: hci1: command 0x0406 tx timeout
[ 1035.069688][T13860] xt_l2tp: wrong L2TP version: 0
[ 1035.115483][T10985] usb 5-1: Using ep0 maxpacket: 16
[ 1035.137479][T10985] usb 5-1: config 0 has no interfaces?
[ 1035.199097][T10985] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1035.235431][T10985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1035.261674][T10985] usb 5-1: Product: syz
[ 1035.265962][T10985] usb 5-1: Manufacturer: syz
[ 1035.270595][T10985] usb 5-1: SerialNumber: syz
[ 1035.302092][T13789] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90
[ 1035.322255][T10985] r8152-cfgselector 5-1: config 0 descriptor??
[ 1035.333396][   T28] usb 1-1: USB disconnect, device number 62
[ 1035.360919][   T28] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[ 1035.405914][T13883] tmpfs: Bad value for 'mpol'
[ 1035.551110][T10985] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[ 1035.696967][T13898] loop1: detected capacity change from 0 to 256
[ 1035.775838][   T28] usb 5-1: USB disconnect, device number 26
[ 1035.909527][T13914] loop3: detected capacity change from 0 to 512
[ 1035.926663][T13914] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1035.983309][T13914] EXT4-fs (loop3): 1 truncate cleaned up
[ 1035.990419][T13914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1036.111229][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1036.237264][T13931] ax25_connect(): syz.0.13487 uses autobind, please contact jreuter@yaina.de
[ 1036.503693][T13945] trusted_key: encrypted_key: master key parameter is missing
[ 1036.629861][T13952] loop1: detected capacity change from 0 to 1024
[ 1036.708411][T13952] hfsplus: invalid extended attribute record
[ 1036.852101][T23895] hfsplus: b-tree write err: -5, ino 4
[ 1037.235398][T13983] loop4: detected capacity change from 0 to 512
[ 1037.263293][T13983] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1037.307027][T13983] EXT4-fs (loop4): 1 truncate cleaned up
[ 1037.362537][T13983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1037.455461][T13996] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13503'.
[ 1037.491172][T13996] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13503'.
[ 1037.659637][T23752] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1037.660656][T14005] loop0: detected capacity change from 0 to 1024
[ 1037.768246][T14005] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[ 1037.798797][T14005] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1037.833374][T14005] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 1037.852313][T14005] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1037.859937][T14017] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1037.894134][T14005] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.13507: Inode bitmap for bg 0 marked uninitialized
[ 1037.939214][T14017] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1038.009059][T14005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1038.142436][T14005] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (32298!=35945)
[ 1038.216963][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1038.529218][T14054] loop0: detected capacity change from 0 to 512
[ 1038.587488][T14054] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1038.652173][T14054] EXT4-fs (loop0): 1 truncate cleaned up
[ 1038.659311][T14054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1038.780461][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1038.955307][T14075] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13527'.
[ 1038.969521][T14077] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1038.986376][T14075] netlink: 172 bytes leftover after parsing attributes in process `syz.3.13527'.
[ 1039.541157][T14102] cgroup: noprefix used incorrectly
[ 1039.570044][T14067] loop4: detected capacity change from 0 to 32768
[ 1039.620876][T14067] (syz.4.13524,14067,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1039.678530][T14067] (syz.4.13524,14067,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1039.688669][T14108] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1039.704663][T14108] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1039.787422][T14067] JBD2: Ignoring recovery information on journal
[ 1039.973211][T14067] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1040.399879][T23752] ocfs2: Unmounting device (7,4) on (node local)
[ 1040.469574][T14140] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1040.892338][T14112] loop0: detected capacity change from 0 to 32768
[ 1040.936707][T14112] 
[ 1040.936707][T14112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1040.936707][T14112] 
[ 1040.992492][T14112] __jfs_setxattr: xattr_size = 67, new_size = 161
[ 1040.994760][   T27] audit: type=1326 audit(2000000210.300:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.1.13562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[ 1041.061466][   T27] audit: type=1326 audit(2000000210.300:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.1.13562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[ 1041.096929][  T135] 
[ 1041.096929][  T135]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1041.096929][  T135] 
[ 1041.121596][    T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1041.142661][   T27] audit: type=1326 audit(2000000210.320:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.1.13562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[ 1041.148541][  T135] 
[ 1041.148541][  T135]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1041.148541][  T135] 
[ 1041.222189][ T5786] 
[ 1041.222189][ T5786]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1041.222189][ T5786] 
[ 1041.234958][   T27] audit: type=1326 audit(2000000210.320:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.1.13562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[ 1041.237101][ T5786] 
[ 1041.237101][ T5786]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1041.237101][ T5786] 
[ 1041.257573][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1041.285925][  T112] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN
[ 1041.290251][   T27] audit: type=1326 audit(2000000210.320:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.1.13562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01f58f749 code=0x7ffc0000
[ 1041.297676][  T112] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047]
[ 1041.297693][  T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted syzkaller #0
[ 1041.297720][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1041.297730][  T112] RIP: 0010:lmLogSync+0xfc/0x9c0
[ 1041.297755][  T112] Code: 86 85 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 42 e1 dc fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 26 e1 dc fe 49 8b 3f e8 9e f3 b2 fe
[ 1041.297772][  T112] RSP: 0018:ffffc90002d17c40 EFLAGS: 00010202
[ 1041.297790][  T112] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000
[ 1041.297804][  T112] RDX: ffff888019365a00 RSI: 0000000000000001 RDI: 0000000000000000
[ 1041.297817][  T112] RBP: ffffc90002d17d48 R08: 0000000000000003 R09: 0000000000000000
[ 1041.297830][  T112] R10: ffffc90002d17ca0 R11: fffff520005a2f98 R12: ffff88805c704800
[ 1041.297845][  T112] R13: dffffc0000000000 R14: ffff888078b17038 R15: 0000000000000040
[ 1041.297859][  T112] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1041.297875][  T112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1041.297889][  T112] CR2: 00007fb01f7b42f8 CR3: 00000000552b4000 CR4: 00000000003506e0
[ 1041.297908][  T112] Call Trace:
[ 1041.297915][  T112]  <TASK>
[ 1041.297926][  T112]  ? lmWriteRecord+0x1ac0/0x1ac0
[ 1041.297949][  T112]  ? __rwlock_init+0x150/0x150
[ 1041.297976][  T112]  jfs_syncpt+0x7b/0x90
[ 1041.297994][  T112]  txEnd+0x2e5/0x520
[ 1041.298014][  T112]  jfs_lazycommit+0x5a6/0xa60
[ 1041.298037][  T112]  ? txFreelock+0x5a0/0x5a0
[ 1041.403103][    T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1041.408951][  T112]  ? do_task_dead+0xd0/0xd0
[ 1041.424098][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.426027][  T112]  ? __kthread_parkme+0x7a/0x1c0
[ 1041.433085][    T9] usb 4-1: Product: syz
[ 1041.440584][  T112]  kthread+0x2fa/0x390
[ 1041.440615][  T112]  ? txFreelock+0x5a0/0x5a0
[ 1041.445128][    T9] usb 4-1: Manufacturer: syz
[ 1041.446856][  T112]  ? kthread_blkcg+0xd0/0xd0
[ 1041.452092][    T9] usb 4-1: SerialNumber: syz
[ 1041.456539][  T112]  ret_from_fork+0x48/0x80
[ 1041.456569][  T112]  ? kthread_blkcg+0xd0/0xd0
[ 1041.535946][  T112]  ret_from_fork_asm+0x11/0x20
[ 1041.540733][  T112]  </TASK>
[ 1041.543770][  T112] Modules linked in:
[ 1041.547713][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1041.559234][  T112] ---[ end trace 0000000000000000 ]---
[ 1041.564712][    T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1041.576844][  T112] RIP: 0010:lmLogSync+0xfc/0x9c0
[ 1041.584810][T14188] loop4: detected capacity change from 0 to 256
[ 1041.598140][T16609] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1041.617221][  T112] Code: 86 85 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 42 e1 dc fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 26 e1 dc fe 49 8b 3f e8 9e f3 b2 fe
[ 1041.636895][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1041.653878][  T112] RSP: 0018:ffffc90002d17c40 EFLAGS: 00010202
[ 1041.660391][  T112] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000
[ 1041.669026][  T112] RDX: ffff888019365a00 RSI: 0000000000000001 RDI: 0000000000000000
[ 1041.678032][  T112] RBP: ffffc90002d17d48 R08: 0000000000000003 R09: 0000000000000000
[ 1041.686644][  T112] R10: ffffc90002d17ca0 R11: fffff520005a2f98 R12: ffff88805c704800
[ 1041.694917][  T112] R13: dffffc0000000000 R14: ffff888078b17038 R15: 0000000000000040
[ 1041.705099][  T112] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1041.715646][  T112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1041.722419][  T112] CR2: 00007f8d33db42f8 CR3: 0000000064988000 CR4: 00000000003506f0
[ 1041.730512][  T112] Kernel panic - not syncing: Fatal exception
[ 1041.736834][  T112] Kernel Offset: disabled
[ 1041.741158][  T112] Rebooting in 86400 seconds..