last executing test programs:

7m37.365407344s ago: executing program 1 (id=4766):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0xffffffffffffffff)

7m37.161775659s ago: executing program 1 (id=4770):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000040000000850000006100000095"], &(0x7f0000001ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000580)="d2ff030760038d66b89e08f088a82b9486ddc722784070e9ce552773685db2982a3e3dfd281bed452ba39d96ae1dc41ae72d5ebdf5f1", 0x0, 0x7ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

7m36.928321045s ago: executing program 1 (id=4773):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x4, 0xf7, 0xfffff03c}, {0x6, 0x6, 0x0, 0x57c}]}, 0x10)

7m36.68379672s ago: executing program 1 (id=4787):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c67727071756f74612c6e6f646973636172642c696f636861727365743d6e6f6e652c6e6f646973636172642c696f636861727365743d63703835322c6e6f71756f74612c6e6f696e746567726974792c008283d279ba81174b20bb6aae5ea52f08eb98834c68ee88ba4a7465fd1dd3744c4dc490a46dd35125b04bc3a264a73f3262"], 0x45, 0x6188, &(0x7f0000004940)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

7m35.369494723s ago: executing program 1 (id=4796):
r0 = socket$inet(0xa, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x130, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x130, 0x1c8, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @private, 0x0, 0x0, 'pimreg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)

7m34.311791829s ago: executing program 1 (id=4809):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setfsgid(0x0)

7m34.034236305s ago: executing program 32 (id=4809):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setfsgid(0x0)

5m3.271274203s ago: executing program 0 (id=7163):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000100)={'wlan1\x00'})

5m3.038269258s ago: executing program 0 (id=7177):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xfffffffffffffced, 0x4, 0x0, 0x0, 0x1800000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

5m2.879161232s ago: executing program 0 (id=7170):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe35}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m2.723362306s ago: executing program 0 (id=7174):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

5m2.52486101s ago: executing program 0 (id=7179):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0x4018aee2, &(0x7f0000000080)={0x1, 0x0, [{0x312, 0x0, 0xfffffffffffffffe}]})

5m2.006505664s ago: executing program 0 (id=7182):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000020c0)=@newae={0x64, 0x1e, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@remote, 0x4d6, 0x2, 0x6c}, @in6=@mcast1, 0x1000, 0x3504}, [@lifetime_val={0x24, 0x9, {0x1000, 0x2, 0x1, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc5}, 0x24000004)

5m1.577288474s ago: executing program 33 (id=7182):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000020c0)=@newae={0x64, 0x1e, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@remote, 0x4d6, 0x2, 0x6c}, @in6=@mcast1, 0x1000, 0x3504}, [@lifetime_val={0x24, 0x9, {0x1000, 0x2, 0x1, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc5}, 0x24000004)

5m0.379707313s ago: executing program 4 (id=7201):
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0)

5m0.176802168s ago: executing program 4 (id=7205):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e1e, 0x0, @mcast1}}, 0x0, 0xa000}, 0x90)

4m59.849364616s ago: executing program 4 (id=7210):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

4m59.627967671s ago: executing program 4 (id=7214):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

4m59.540366314s ago: executing program 4 (id=7215):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

4m59.145330493s ago: executing program 4 (id=7220):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffff8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8044)

4m58.799040151s ago: executing program 34 (id=7220):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffff8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8044)

4.876892791s ago: executing program 7 (id=11881):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x88, 0x23, 0x100, 0x70bd2a, 0x25dfdbfd, 0x0, [@etimer_thresh={0x3, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd28, 0x70bd2b, 0x8, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x0]}}, @policy_type={0xa}, @coaddr={0x14, 0xe, @in6=@mcast1}, @srcaddr={0x14, 0xd, @in6=@ipv4={'\x00', '\xff\xff', @local}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)

4.397455273s ago: executing program 5 (id=11885):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x91, 0xc0000000}, 0xc)

4.341139224s ago: executing program 7 (id=11886):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x4})

4.191495368s ago: executing program 5 (id=11888):
unshare(0x26020480)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsmount(r0, 0x0, 0x0)

4.021415592s ago: executing program 7 (id=11890):
r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0x1, 0x1})

3.923337755s ago: executing program 5 (id=11893):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f00000001c0), 0x3, 0x786, &(0x7f0000000f80)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

3.769337729s ago: executing program 7 (id=11894):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4088}, 0x800)

3.328965669s ago: executing program 7 (id=11897):
add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_clone(0x8011, 0x0, 0x0, 0x0, 0x0, 0x0)

3.3217045s ago: executing program 5 (id=11898):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4)

3.312921489s ago: executing program 6 (id=11899):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x1, 0x40, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x8002, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0), &(0x7f00000024c0), 0x6, r0}, 0x38)

2.949733898s ago: executing program 2 (id=11900):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x2000c000)

2.949497098s ago: executing program 5 (id=11901):
syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')

2.948422998s ago: executing program 7 (id=11902):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000380)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@discard_async}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0)

2.614160816s ago: executing program 2 (id=11903):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0x8000000000005, 0x5, 0x80006, 0xfffffffe, 0x7})

2.284622865s ago: executing program 3 (id=11904):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32, @ANYBLOB="14000380"], 0x34}, 0x1, 0x0, 0x0, 0x4048044}, 0x404c094)

2.116345038s ago: executing program 2 (id=11905):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, 0x0, 0x0, 0x7fff)

2.04401859s ago: executing program 6 (id=11906):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r1}, 0xc)

1.975144902s ago: executing program 3 (id=11907):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8814}, 0x0)

1.789283686s ago: executing program 2 (id=11908):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f29405a620f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8"], 0xff, 0x2a0, &(0x7f00000001c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
ftruncate(r0, 0xc17a)

1.740685748s ago: executing program 6 (id=11909):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x820061, &(0x7f0000000040)={[{@mode}]})

1.721224428s ago: executing program 3 (id=11910):
set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0x0, 0x5802, 0x294, 0xf0, 0x294, 0xf0, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', {0x3}}}}, {{@ipv6={@private2, @local, [0x0, 0xffffff, 0xff, 0xff000000], [0x0, 0xffffff00, 0xff, 0xff000000], 'pimreg1\x00', 'wlan0\x00', {}, {0xff}, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x3, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)

1.527983413s ago: executing program 3 (id=11911):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x4000)

1.305602968s ago: executing program 6 (id=11912):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x478000)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000600)={0x9, 0x1, &(0x7f00000028c0)=[0x0], &(0x7f0000002880), &(0x7f0000001200), 0x0})

1.25610588s ago: executing program 3 (id=11913):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x1004001, &(0x7f0000000300)={[{@heartbeat_none}, {@heartbeat_none}, {@commit={'commit', 0x3d, 0x6}}, {@barrier={'barrier', 0x3d, 0x2}}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@intr}]}, 0x1, 0x4421, &(0x7f0000004500)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
fdatasync(r0)

1.126687253s ago: executing program 2 (id=11914):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000))

953.467867ms ago: executing program 6 (id=11915):
unshare(0x400)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
poll(&(0x7f00000001c0)=[{r0, 0x6465e38fd7d2b8f8}], 0x1, 0x404)

937.675007ms ago: executing program 5 (id=11916):
r0 = fanotify_init(0x0, 0x0)
r1 = dup(r0)
fanotify_mark(r0, 0x401, 0x1018, r1, 0x0)

759.273962ms ago: executing program 6 (id=11917):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$eJzs3dFrLFcZAPBvJtmb5N7UpOqDFqzFVm6qdpM03jb4UBXEt4JS8fW6JpsQssmWZNPehGJT/AMEES34ok++CP4BgvTFdxEK+i4qitRbfVBoOzK7sybZu5uk3N0dSH4/OHfnzMzO953duyfn7Aw7AVxbT0TEQkRMRMTTETFXrE+LEsedku/37v3X1vKSRJa99E4SSbGue6yp4vFW8bQonv/d5MG4+4dH27VGo75X1BdbO8l7WXb0zNZObbO+Wd9dWVl+bvX51TurS0Np53xEvPC1v/74B7/4+gu/+cKrf7r794Xv5Wn9N8tej552DFOn6ZWYPrVuMiL2RhGsJJPtFnbcKTkXAADOl4/3PxoRn2mP/+dioj2aAwAAAK6S7Muz8V4SkQEAAABXVhoRs5Gk1eJ639lI02q1cw3vx+Nm2mjutz6/0TzYXc+3RcxHJd3YatSXimsH5qOS5PXl4hrbbv3ZnvpKRDwaET+am2nXq2vNxnrZX34AAADANXGrZ/7/77nO/L/tuOTkAAAAgOGZLzsBAAAAYOTM/wEAAODqM/8HAACAK+0bL76Yl6x7/+v1Vw4PtpuvPLNe39+u7hysVdeaey9XN5vNzUa9uja9c9HxGs3my1+M3YN7i636fmtx//Do7k7zYLd1d+vMLbABAACAMXr002/9MYmI4y/NtEvuRrGtEpFNnN55sowMgVFJP8zOfxldHsD4nf77PlNiHsD4GdLD9VUpOwGgdMkF2zsX7/QZLfxuNPkAAADDd/uTg8//v7NRamrAiBXn/5OL5v/A1TNxmZ2mRp8HMH6d838fZB1lZwOMU+W8EYBJAVx56aXP//dxcv7/gksJEx0KAACUbLZdkrRazANmI02r1YhH2rcFqCQbW436UkR8JCL+MFeZyuvL7WcmRvMAAAAAAAAAAAAAAAAAAAAAAAAAcElZlkQGAAAAXGkR6d+6d+a6PffUbO/3AzeS/8y1HyPi1Z++9JN7tVZrbzlf/8//r2+9Wax/toxvMAAAAIBe3Xl6dx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMP07v3X1rplnHH/8dWImI+YOZVHZ2kyptuP01GJiJv/SmLy1POSiJgYQvzjNyLiE/3an+RpxXyRxZn4NyLSOMn5oeP3ff3PiR+d+LeGEB+us7fy/ucr/T5/aTzRfuz/+ZssysPq9n/94nf7v4kB/d8jgw5aOVt97O1fLQ6M/0bEY5P9+59u/CQ/Xp/4T16yjd/51tHRoG3ZzyNu9+v/krOxFrud7dZObbO+Wd9dWVl+bvX51TurS4sbW4168W/fGD/81K8/OKm9/0D7b57T/7bbP+D1f+qcNk+dWn7/7Xv3P9ZZ7HlnohI/y7KFJ/u//22fezB+92/fZ4u98nr+GqZvfrtvLo//8vePD8ozb//6gPZPX9D+hXPaf9rT3/z+ny+5KwAwBvuHR9u1RqO+Z6HkhaQY8T7McbrfiIw+53zcWfYrVk8iie1aYyrObKqVn1hn4fXi3ag1up+2IR35t8V/lVEmP+6OCAAAGLmTQX/vlpMTMM4zAwAAAAAAAAAAAAAAAAAAwGhd+DNggzalEXHJnxPrjXlcTlMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM71vwAAAP//7pvFXQ==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
readlinkat(r0, &(0x7f00000007c0)='./file2\x00', &(0x7f0000000800)=""/197, 0xc5)

101.123267ms ago: executing program 2 (id=11918):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00T'], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x10)

0s ago: executing program 3 (id=11919):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10, 0x3})
r0 = socket(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', 0x0})

kernel console output (not intermixed with test programs):

fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  705.981071][T27322] F2FS-fs (loop2): invalid crc_offset: 33558524
[  706.018503][T27322] F2FS-fs (loop2): Found nat_bits in checkpoint
[  706.238074][T27322] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  706.282453][T27322] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  706.405322][T27362] netlink: 'syz.7.10268': attribute type 16 has an invalid length.
[  706.463107][T27362] netlink: 'syz.7.10268': attribute type 17 has an invalid length.
[  706.495658][T27362] netlink: 'syz.7.10268': attribute type 27 has an invalid length.
[  706.510116][   T26] audit: type=1800 audit(1785291257.409:604): pid=27322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10250" name="bus" dev="loop2" ino=10 res=0 errno=0
[  706.585333][T27366] netlink: 'syz.5.10271': attribute type 7 has an invalid length.
[  706.666301][T27366] netlink: 148 bytes leftover after parsing attributes in process `syz.5.10271'.
[  707.209067][   T26] audit: type=1326 audit(1785291258.109:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.7.10282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2b99de99 code=0x7ffc0000
[  707.282704][   T26] audit: type=1326 audit(1785291258.139:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.7.10282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2b99de99 code=0x7ffc0000
[  707.405049][   T26] audit: type=1326 audit(1785291258.139:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.7.10282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2b99de99 code=0x7ffc0000
[  707.429264][    C0] vkms_vblank_simulate: vblank timer overrun
[  707.509414][   T26] audit: type=1326 audit(1785291258.139:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.7.10282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fbf2b99de99 code=0x7ffc0000
[  707.588971][   T26] audit: type=1326 audit(1785291258.139:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.7.10282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2b99de99 code=0x7ffc0000
[  707.613222][    C0] vkms_vblank_simulate: vblank timer overrun
[  707.629073][T27399] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10287'.
[  707.630354][   T26] audit: type=1326 audit(1785291258.139:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.7.10282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbf2b99de99 code=0x7ffc0000
[  707.662432][    C0] vkms_vblank_simulate: vblank timer overrun
[  707.700494][   T26] audit: type=1326 audit(1785291258.139:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.7.10282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbf2b99de99 code=0x7ffc0000
[  707.802142][ T4343] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[  708.022482][ T4343] usb 8-1: config 0 has an invalid interface number: 41 but max is 0
[  708.033170][ T4343] usb 8-1: config 0 has no interface number 0
[  708.039327][ T4343] usb 8-1: config 0 interface 41 has no altsetting 0
[  708.089833][ T4343] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  708.127094][ T4343] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.150083][ T4343] usb 8-1: Product: syz
[  708.157380][ T4343] usb 8-1: Manufacturer: syz
[  708.162323][ T4343] usb 8-1: SerialNumber: syz
[  708.187381][ T4343] usb 8-1: config 0 descriptor??
[  708.244112][T27384] syz.5.10281 (27384): drop_caches: 3
[  708.379596][T27418] ieee802154 phy1 wpan1: encryption failed: -22
[  708.510768][T27424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10300'.
[  708.520689][T27424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10300'.
[  708.639770][ T4343] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  708.663511][ T4343] CoreChips: probe of 8-1:0.41 failed with error -71
[  708.676610][ T4343] usb 8-1: USB disconnect, device number 13
[  709.376887][T27430] loop3: detected capacity change from 0 to 32768
[  709.421096][T27430] 
[  709.421096][T27430]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  709.421096][T27430] 
[  709.504141][T27430] jfs_lookup: dtSearch returned -5
[  709.715549][ T4282] 
[  709.715549][ T4282]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  709.715549][ T4282] 
[  709.751064][ T4282] 
[  709.751064][ T4282]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  709.751064][ T4282] 
[  710.327354][T27486] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  710.852081][T15961] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  711.055424][T15961] usb 8-1: Using ep0 maxpacket: 8
[  711.067167][T15961] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  711.104033][T15961] usb 8-1: config 179 has no interface number 0
[  711.125661][T15961] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  711.155937][T15961] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  711.198054][T15961] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  711.226095][T15961] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  711.257868][T15961] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  711.305795][T27532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10352'.
[  711.319034][T15961] usb 8-1: config 179 interface 65 has no altsetting 0
[  711.336807][T15961] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  711.346342][T27532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10352'.
[  711.359781][T15961] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.409705][T15961] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input35
[  711.525118][T27538] loop3: detected capacity change from 0 to 4096
[  711.689987][T15961] usb 8-1: USB disconnect, device number 14
[  711.696239][    C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  711.716013][T15961] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  712.177639][T27560] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10365'.
[  712.394593][T27570] netlink: 'syz.7.10369': attribute type 28 has an invalid length.
[  712.430199][T27570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10369'.
[  712.511085][T27576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10373'.
[  712.982520][T27596] loop6: detected capacity change from 0 to 128
[  713.047747][T27596] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  713.232069][ T4497] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  713.428851][ T4497] usb 3-1: Using ep0 maxpacket: 8
[  713.439038][ T4497] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  713.467375][ T4497] usb 3-1: config 179 has no interface number 0
[  713.479671][ T4497] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  713.522123][ T4497] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  713.552046][ T4497] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  713.583830][ T4497] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  713.614219][ T4497] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  713.661760][ T4497] usb 3-1: config 179 interface 65 has no altsetting 0
[  713.679212][ T4497] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  713.736198][ T4497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.781676][ T4497] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input36
[  714.014857][T27636] netlink: 'syz.5.10404': attribute type 2 has an invalid length.
[  714.079748][ T4497] usb 3-1: USB disconnect, device number 54
[  714.085797][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  714.132946][ T4497] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  714.461610][T27654] loop7: detected capacity change from 0 to 512
[  714.517510][T27654] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  714.602925][T27654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  714.611074][T27654] System zones: 1-12
[  714.624859][T27654] EXT4-fs (loop7): orphan cleanup on readonly fs
[  714.639169][T27654] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.10413: attempt to clear invalid blocks 1024 len 1
[  714.780896][T27654] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.10413: bg 0: block 361: padding at end of block bitmap is not set
[  714.833610][T27654] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  714.884222][T27677] xt_cgroup: invalid path, errno=-2
[  714.890589][T27654] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.10413: invalid indirect mapped block 1811939328 (level 0)
[  714.915987][T27654] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.10413: invalid indirect mapped block 2 (level 2)
[  714.958135][T27654] EXT4-fs (loop7): 1 truncate cleaned up
[  714.982348][T27654] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  715.226281][T20217] EXT4-fs (loop7): unmounting filesystem.
[  715.250299][T27687] loop3: detected capacity change from 0 to 4096
[  715.296829][T27689] netlink: 5 bytes leftover after parsing attributes in process `syz.6.10431'.
[  715.310924][T27687] ntfs3: loop3: Failed to load $MFT.
[  715.416280][T27696] loop5: detected capacity change from 0 to 512
[  715.431267][T27694] loop7: detected capacity change from 0 to 1024
[  715.450952][T27696] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  715.549230][T27694] hfsplus: keylen 65060 too large
[  715.568969][T27696] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  715.591049][T27694] hfsplus: xattr search failed
[  715.597820][T27698] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  716.288026][T27724] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10446'.
[  716.394046][T27721] loop3: detected capacity change from 0 to 4096
[  716.423804][T27721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  716.441576][T27721] EXT4-fs: Cannot change quota options when quota turned on
[  716.565535][T27739] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10453'.
[  716.599597][ T4282] EXT4-fs (loop3): unmounting filesystem.
[  716.765313][T27745] overlayfs: missing 'workdir'
[  716.847306][T27749] netlink: 'syz.7.10458': attribute type 6 has an invalid length.
[  716.979421][T27753] bond0: (slave sit0): refused to change device type
[  717.012146][ T4497] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  717.215504][ T4497] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  717.237499][ T4497] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  717.270592][ T4497] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  717.312596][ T4497] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  717.350908][ T4497] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  717.378231][ T4497] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.397754][T27774] xt_CT: You must specify a L4 protocol and not use inversions on it
[  717.415658][ T4497] usb 6-1: config 0 descriptor??
[  717.568200][T27782] netlink: 'syz.3.10473': attribute type 3 has an invalid length.
[  717.587424][T27782] netlink: 'syz.3.10473': attribute type 3 has an invalid length.
[  717.633416][ T4497] hdpvr 6-1:0.0: firmware version 0x8 dated 
[  717.698355][T27788] loop2: detected capacity change from 0 to 1024
[  717.829168][T27791] netlink: 'syz.6.10477': attribute type 2 has an invalid length.
[  717.840713][ T4497] hdpvr 6-1:0.0: device init failed
[  717.847443][ T4497] hdpvr: probe of 6-1:0.0 failed with error -12
[  717.857096][T27795] netlink: 'syz.7.10479': attribute type 2 has an invalid length.
[  717.866145][T27791] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10477'.
[  717.876336][T27795] netlink: 723 bytes leftover after parsing attributes in process `syz.7.10479'.
[  717.878682][ T4497] usb 6-1: USB disconnect, device number 26
[  718.273941][T27811] netlink: 'syz.7.10486': attribute type 7 has an invalid length.
[  718.485829][T27819] loop6: detected capacity change from 0 to 512
[  718.542620][T27819] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  718.587670][T27819] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  718.607463][T27819] System zones: 1-12
[  718.645802][T27819] EXT4-fs (loop6): orphan cleanup on readonly fs
[  718.753134][T27819] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.10490: attempt to clear invalid blocks 1024 len 1
[  718.789145][T27819] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10490: bg 0: block 361: padding at end of block bitmap is not set
[  718.868264][T27819] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  718.910194][T27819] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.10490: invalid indirect mapped block 1811939328 (level 0)
[  718.959366][T27819] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.10490: invalid indirect mapped block 2 (level 2)
[  718.988000][T27819] EXT4-fs (loop6): 1 truncate cleaned up
[  718.997578][T27819] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  719.009204][T27840] binder: Bad value for 'max'
[  719.192531][T20132] EXT4-fs (loop6): unmounting filesystem.
[  719.787382][ T8302] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[  719.973149][ T8302] usb 8-1: not running at top speed; connect to a high speed hub
[  719.992756][ T8302] usb 8-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  720.032242][ T8302] usb 8-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  720.048292][T27883] tmpfs: Bad value for 'mpol'
[  720.056378][ T8302] usb 8-1: config 1 interface 0 has no altsetting 0
[  720.075242][ T8302] usb 8-1: New USB device found, idVendor=1477, idProduct=1006, bcdDevice= 0.40
[  720.088064][T27862] loop2: detected capacity change from 0 to 32768
[  720.094620][ T8302] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.113258][ T8302] usb 8-1: Product: syz
[  720.117542][ T8302] usb 8-1: Manufacturer: syz
[  720.132115][ T8302] usb 8-1: SerialNumber: syz
[  720.153587][T27864] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  720.214374][T27862] XFS (loop2): Mounting V5 Filesystem
[  720.222218][ T4343] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  720.285431][T27862] XFS (loop2): Ending clean mount
[  720.328588][T27862] XFS (loop2): Quotacheck needed: Please wait.
[  720.396898][ T8302] usbhid 8-1:1.0: can't add hid device: -71
[  720.417131][ T8302] usbhid: probe of 8-1:1.0 failed with error -71
[  720.426099][ T4343] usb 4-1: unable to get BOS descriptor or descriptor too short
[  720.456213][ T8302] usb 8-1: USB disconnect, device number 15
[  720.464165][ T4343] usb 4-1: config 129 has an invalid interface number: 135 but max is 0
[  720.488901][ T4343] usb 4-1: config 129 has an invalid interface number: 5 but max is 0
[  720.502178][ T4343] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  720.511436][ T4343] usb 4-1: config 129 has no interface number 0
[  720.518572][ T4343] usb 4-1: config 129 has no interface number 1
[  720.526070][ T4343] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  720.540143][ T4343] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  720.561163][ T4343] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  720.572098][T15961] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  720.575069][ T4343] usb 4-1: config 129 interface 135 has no altsetting 0
[  720.589222][ T4343] usb 4-1: config 129 interface 5 has no altsetting 0
[  720.597783][T27862] XFS (loop2): Quotacheck: Done.
[  720.613339][ T4343] usb 4-1: string descriptor 0 read error: -22
[  720.632054][ T4343] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  720.651455][ T4343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.680523][ T4272] XFS (loop2): Unmounting Filesystem
[  720.694011][ T4343] usb 4-1: MIDIStreaming interface descriptor not found
[  720.762012][T15961] usb 6-1: Using ep0 maxpacket: 32
[  720.783093][T15961] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  720.810861][T15961] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  720.841325][T15961] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  720.853525][T15961] usb 6-1: config 1 has no interface number 0
[  720.859676][T15961] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  720.892302][T15961] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  720.920552][T15961] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  720.930549][ T4261] usb 4-1: USB disconnect, device number 60
[  720.958917][T15961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.017020][T15961] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  721.113388][T27911] wg1 speed is unknown, defaulting to 1000
[  721.219770][T15961] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  721.467503][T15975] usb 6-1: USB disconnect, device number 27
[  721.476704][T15975] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  721.515300][T27920] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  721.659958][T27927] netlink: 'syz.2.10539': attribute type 8 has an invalid length.
[  721.675286][T27927] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10539'.
[  721.941239][T27935] i2c i2c-0: Invalid block read size 255
[  722.395542][T27953] loop2: detected capacity change from 0 to 256
[  722.432315][T15961] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  722.473852][T27953] FAT-fs (loop2): Directory bread(block 64) failed
[  722.500271][T27953] FAT-fs (loop2): Directory bread(block 65) failed
[  722.538530][T27953] FAT-fs (loop2): Directory bread(block 66) failed
[  722.571281][T27953] FAT-fs (loop2): Directory bread(block 67) failed
[  722.588624][T27953] FAT-fs (loop2): Directory bread(block 68) failed
[  722.622301][T15961] usb 6-1: Using ep0 maxpacket: 32
[  722.627647][T27953] FAT-fs (loop2): Directory bread(block 69) failed
[  722.636178][T15961] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  722.657522][T15961] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  722.667207][T27953] FAT-fs (loop2): Directory bread(block 70) failed
[  722.682655][T15961] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  722.691833][T27953] FAT-fs (loop2): Directory bread(block 71) failed
[  722.698847][T27953] FAT-fs (loop2): Directory bread(block 72) failed
[  722.715732][T27953] FAT-fs (loop2): Directory bread(block 73) failed
[  722.722749][T15961] usb 6-1: config 1 has no interface number 0
[  722.739156][T15961] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  722.775497][T15961] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  722.792001][T15961] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  722.815312][T15961] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  722.850283][T15961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.916170][T27967] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10559'.
[  722.936607][T15961] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  722.962191][T27967] netlink: 112 bytes leftover after parsing attributes in process `syz.6.10559'.
[  723.118006][T15961] snd_usb_pod 6-1:1.1: cannot start listening: -90
[  723.137377][T15961] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  723.162337][T15961] snd_usb_pod: probe of 6-1:1.1 failed with error -90
[  723.171117][T27976] bridge0: port 3(hsr0) entered blocking state
[  723.208374][T27976] bridge0: port 3(hsr0) entered disabled state
[  723.266050][T27976] device hsr0 entered promiscuous mode
[  723.274259][T27976] bridge0: port 3(hsr0) entered blocking state
[  723.280529][T27976] bridge0: port 3(hsr0) entered forwarding state
[  723.335745][ T4343] usb 6-1: USB disconnect, device number 28
[  723.478860][T27988] loop6: detected capacity change from 0 to 16
[  723.516766][T27988] erofs: (device loop6): mounted with root inode @ nid 36.
[  723.692267][T27994] netdevsim netdevsim7: Direct firmware load for ..€ failed with error -2
[  723.732216][T27994] netdevsim netdevsim7: Falling back to sysfs fallback for: ..€
[  723.774611][T27998] loop3: detected capacity change from 0 to 2048
[  723.813892][T27998] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  723.829135][T28002] netlink: 755 bytes leftover after parsing attributes in process `syz.6.10576'.
[  723.853550][T27998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  724.040669][T28008] No such timeout policy "syz1"
[  724.217218][T28013] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10581'.
[  724.249963][T28013] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10581'.
[  724.445745][T28023] loop3: detected capacity change from 0 to 64
[  724.489071][T28023] syz.3.10586: attempt to access beyond end of device
[  724.489071][T28023] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64
[  724.540195][T28023] Buffer I/O error on dev loop3, logical block 512, async page read
[  724.576918][T28023] syz.3.10586: attempt to access beyond end of device
[  724.576918][T28023] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64
[  724.636216][T28023] Buffer I/O error on dev loop3, logical block 56576, async page read
[  724.868804][T28039] netlink: 'syz.3.10594': attribute type 6 has an invalid length.
[  725.675124][T28083] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  725.816147][T28088] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  725.823468][T28088] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  725.857335][T28088] vhci_hcd vhci_hcd.0: Device attached
[  725.875303][T28094] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6)
[  725.881877][T28094] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  725.921768][T28094] vhci_hcd vhci_hcd.0: Device attached
[  725.954738][T28095] vhci_hcd: connection closed
[  725.954818][T28091] vhci_hcd: connection closed
[  725.961645][T20456] vhci_hcd: stop threads
[  725.985568][T20456] vhci_hcd: release socket
[  726.029894][T20456] vhci_hcd: disconnect device
[  726.050250][T20456] vhci_hcd: stop threads
[  726.060779][T20456] vhci_hcd: release socket
[  726.070632][T20456] vhci_hcd: disconnect device
[  726.122036][ T4343] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  726.139999][ T4343] usb 45-1: enqueue for inactive port 0
[  726.242001][ T4343] vhci_hcd: vhci_device speed not set
[  726.289634][T28114] x_tables: unsorted underflow at hook 1
[  726.560671][T28124] AppArmor: change_hat: Invalid input 'hj'
[  726.738221][T28134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10638'.
[  726.913746][T28142] dlm: plock device version mismatch: kernel (1.2.0), user (1.3072.0)
[  726.921749][T28140] loop3: detected capacity change from 0 to 2048
[  726.988580][T28144] netlink: 'syz.2.10643': attribute type 5 has an invalid length.
[  726.991461][T28140] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  727.029716][T28144] device ip6erspan0 entered promiscuous mode
[  727.296403][T28148] xt_CT: No such helper "pptp"
[  727.655778][T28138] loop6: detected capacity change from 0 to 32768
[  727.702063][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout
[  727.728300][T28138] ea_get: invalid extended attribute
[  727.798255][T28138] ffff8880683e5670: 04 00 00 00                                      ....
[  728.038687][T28173] loop3: detected capacity change from 0 to 4096
[  728.096011][T28173] /dev/loop3: Can't open blockdev
[  728.155934][T28183] device geneve2 entered promiscuous mode
[  728.325397][T28189] netlink: 'syz.6.10665': attribute type 1 has an invalid length.
[  728.380794][T28189] netlink: 'syz.6.10665': attribute type 2 has an invalid length.
[  728.925633][T28215] tmpfs: Bad value for 'mpol'
[  729.248717][T28226] loop7: detected capacity change from 0 to 4096
[  730.057555][T28262] netlink: 'syz.5.10701': attribute type 27 has an invalid length.
[  730.086696][T28262] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  730.309482][T28274] loop7: detected capacity change from 0 to 64
[  730.443223][T28276] xt_ecn: cannot match TCP bits for non-tcp packets
[  731.147720][T28304] netlink: 'syz.2.10722': attribute type 10 has an invalid length.
[  731.234208][T28304] team0: Port device vlan0 added
[  731.292596][T15961] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  731.321606][T28312] loop3: detected capacity change from 0 to 4096
[  731.356654][T28312] /dev/loop3: Can't open blockdev
[  731.397003][ T4381] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  731.416479][ T4261] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  731.472175][T15961] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  731.622386][ T4261] usb 8-1: Using ep0 maxpacket: 8
[  731.630335][ T4261] usb 8-1: config 0 interface 0 has no altsetting 0
[  731.651806][ T4261] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  731.682249][T15961] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  731.685445][ T4261] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.726578][ T4261] usb 8-1: Product: syz
[  731.748837][ T4261] usb 8-1: Manufacturer: syz
[  731.759363][ T4261] usb 8-1: SerialNumber: syz
[  731.770252][ T4261] usb 8-1: config 0 descriptor??
[  731.790954][ T4261] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found
[  731.862205][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  731.999563][ T4261] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected
[  732.019247][ T4261] snd_usb_toneport: probe of 8-1:0.0 failed with error -22
[  732.232091][T15961] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[  732.245494][ T4261] usb 8-1: USB disconnect, device number 16
[  732.289446][T28348] loop2: detected capacity change from 0 to 4096
[  732.403539][T28352] loop5: detected capacity change from 0 to 4096
[  732.433813][T15961] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  732.462605][T15961] usb 7-1: config 1 interface 0 has no altsetting 0
[  732.471149][T28352] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  732.529578][T28352] EXT4-fs: Cannot change quota options when quota turned on
[  732.536712][T15961] usb 7-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40
[  732.572928][T28358] device vxcan5 entered promiscuous mode
[  732.580866][T15961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.609657][T15961] usb 7-1: Product: syz
[  732.616318][T15961] usb 7-1: Manufacturer: syz
[  732.621032][T15961] usb 7-1: SerialNumber: syz
[  732.668752][T28338] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  732.690688][T14665] EXT4-fs (loop5): unmounting filesystem.
[  732.795538][T19522] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  732.815520][T19522] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  733.000229][T28367] loop7: detected capacity change from 0 to 512
[  733.075744][T28367] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal
[  733.090476][T15961] usbhid 7-1:1.0: can't add hid device: -71
[  733.090570][T15961] usbhid: probe of 7-1:1.0 failed with error -71
[  733.093743][T15961] usb 7-1: USB disconnect, device number 20
[  733.287168][T28383] loop7: detected capacity change from 0 to 2048
[  733.356179][T28383] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  733.360926][T28385] loop2: detected capacity change from 0 to 1024
[  733.381491][   T26] audit: type=1800 audit(1785291284.280:612): pid=28383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10758" name="file1" dev="loop7" ino=1367 res=0 errno=0
[  733.394223][T28387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10761'.
[  733.476780][T28385] hfsplus: keylen 65060 too large
[  733.496383][T28385] hfsplus: xattr search failed
[  733.505098][T28389] openvswitch: netlink: Key type 316 is out of range max 32
[  733.512814][T15975] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  733.622372][T19522] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  733.718202][T15975] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  733.752074][T15975] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  733.761169][T15975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.814779][T15975] gspca_main: stv0680-2.14.0 probing 041e:4007
[  734.703509][T28434] loop6: detected capacity change from 0 to 1024
[  734.734807][T28434] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  734.778505][T28434] EXT4-fs (loop6): Errors on filesystem, clearing orphan list.
[  734.790738][T28434] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  734.865403][T20132] EXT4-fs (loop6): unmounting filesystem.
[  734.902920][T15975] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  734.981044][T28409] loop2: detected capacity change from 0 to 40427
[  735.048892][T28409] F2FS-fs (loop2): invalid crc value
[  735.048926][T28409] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  735.079532][T28409] F2FS-fs (loop2): Found nat_bits in checkpoint
[  735.105871][T15975] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  735.105896][T15975] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  735.107302][T15975] usb 4-1: USB disconnect, device number 61
[  735.238667][T28409] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  735.238831][T28409] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  735.278860][T28409] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  736.107983][T28481] loop2: detected capacity change from 0 to 512
[  736.213012][T28481] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  736.221209][T28481] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  736.305158][T28481] System zones: 0-1, 15-15, 18-18, 34-34
[  736.320309][T28481] EXT4-fs (loop2): orphan cleanup on readonly fs
[  736.342936][T28481] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  736.352822][T28481] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  736.416728][T28481] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  736.450218][T28481] EXT4-fs (loop2): 1 truncate cleaned up
[  736.456520][T28481] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  736.483202][T28481] fscrypt (loop2, inode 16): Error -61 getting encryption context
[  736.502005][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  736.544350][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  736.599148][T28500] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  736.682225][T28500] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  736.710995][T28500] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  737.320546][T28530] loop2: detected capacity change from 0 to 64
[  737.443625][ T4343] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  737.613289][T28538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10832'.
[  737.675819][ T4343] usb 8-1: unable to get BOS descriptor or descriptor too short
[  737.694223][ T4343] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024
[  737.719693][ T4343] usb 8-1: string descriptor 0 read error: -22
[  737.730152][ T4343] usb 8-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  737.742004][ T4343] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.848974][T28530] syz.2.10828: attempt to access beyond end of device
[  737.848974][T28530] loop2: rw=0, sector=45066, nr_sectors = 2 limit=64
[  737.912172][T28530] Buffer I/O error on dev loop2, logical block 22533, async page read
[  737.942532][T28530] syz.2.10828: attempt to access beyond end of device
[  737.942532][T28530] loop2: rw=0, sector=45066, nr_sectors = 2 limit=64
[  737.973370][ T4343] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  737.976028][T28530] Buffer I/O error on dev loop2, logical block 22533, async page read
[  738.190302][ T4343] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  738.245677][ T4343] usb 8-1: USB disconnect, device number 17
[  738.262500][T15973] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  738.384882][T28518] syz.6.10822 (28518): drop_caches: 3
[  738.459044][T15973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  738.480382][T15973] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  738.511469][T15973] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  738.520857][T15973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.554887][T15973] usb 4-1: Product: syz
[  738.566675][T15973] usb 4-1: Manufacturer: syz
[  738.581381][T15973] usb 4-1: SerialNumber: syz
[  738.608558][T15973] cdc_ncm 4-1:1.0: skipping garbage
[  738.616788][T15973] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing
[  738.628040][T15973] cdc_ncm 4-1:1.0: bind() failure
[  738.661456][T15973] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  738.678760][T15973] cdc_ncm 4-1:1.1: bind() failure
[  738.821239][T15973] usb 4-1: USB disconnect, device number 62
[  739.031047][T28573] loop7: detected capacity change from 0 to 64
[  739.055672][T28573] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  739.223665][ T4343] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[  739.276837][T28581] loop5: detected capacity change from 0 to 256
[  739.315772][T28583] loop7: detected capacity change from 0 to 512
[  739.337642][T28581] FAT-fs (loop5): Directory bread(block 64) failed
[  739.344506][T28581] FAT-fs (loop5): Directory bread(block 65) failed
[  739.396650][T28581] FAT-fs (loop5): Directory bread(block 66) failed
[  739.412072][T28581] FAT-fs (loop5): Directory bread(block 67) failed
[  739.435013][T28581] FAT-fs (loop5): Directory bread(block 68) failed
[  739.441675][T28581] FAT-fs (loop5): Directory bread(block 69) failed
[  739.459130][T28581] FAT-fs (loop5): Directory bread(block 70) failed
[  739.466163][T28581] FAT-fs (loop5): Directory bread(block 71) failed
[  739.468065][ T4343] usb 7-1: config 0 has an invalid interface number: 52 but max is 0
[  739.473340][T28581] FAT-fs (loop5): Directory bread(block 72) failed
[  739.481197][T28583] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  739.496684][T28581] FAT-fs (loop5): Directory bread(block 73) failed
[  739.542951][ T4343] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  739.550391][T28583] ext4 filesystem being mounted at /700/file3 supports timestamps until 2038-01-19 (0x7fffffff)
[  739.621914][ T4343] usb 7-1: config 0 has no interface number 0
[  739.642014][ T4343] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  739.685781][ T4343] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  739.706154][T28592] loop2: detected capacity change from 0 to 256
[  739.715638][ T4343] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  739.770484][ T4343] usb 7-1: config 0 interface 52 has no altsetting 0
[  739.784043][T20217] EXT4-fs (loop7): unmounting filesystem.
[  739.794469][ T4343] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  739.816221][ T4343] usb 7-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34
[  739.831486][ T4343] usb 7-1: Product: syz
[  739.835814][ T4343] usb 7-1: SerialNumber: syz
[  739.842704][ T4343] usb 7-1: config 0 descriptor??
[  739.995036][T28598] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10859'.
[  740.007662][T28598] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10859'.
[  740.021959][T15973] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  740.056212][ T4343] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  740.077258][ T4343] synaptics_usb: probe of 7-1:0.52 failed with error -5
[  740.213746][T15973] usb 4-1: config 0 has an invalid interface number: 158 but max is 0
[  740.227164][T15973] usb 4-1: config 0 has no interface number 0
[  740.239110][T15973] usb 4-1: too many endpoints for config 0 interface 158 altsetting 52: 72, using maximum allowed: 30
[  740.257021][T15973] usb 4-1: config 0 interface 158 altsetting 52 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  740.278795][T15973] usb 4-1: config 0 interface 158 has no altsetting 0
[  740.286454][T15975] usb 7-1: USB disconnect, device number 21
[  740.294977][T15973] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  740.305302][T15973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.314567][T15973] usb 4-1: Product: syz
[  740.318771][T15973] usb 4-1: Manufacturer: syz
[  740.323459][T15973] usb 4-1: SerialNumber: syz
[  740.329813][T15973] usb 4-1: config 0 descriptor??
[  740.541666][T15973] usb 4-1: USB disconnect, device number 63
[  740.858578][T28613] netlink: 200 bytes leftover after parsing attributes in process `syz.5.10864'.
[  741.765078][T28639] loop2: detected capacity change from 0 to 4096
[  741.786020][T28645] loop5: detected capacity change from 0 to 4096
[  741.799216][T28639] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  741.825845][   T53] block nbd7: Attempted send on invalid socket
[  741.826895][T28651] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.10887'.
[  741.832368][   T53] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  741.865927][T28645] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  741.882944][T28651] openvswitch: netlink: Key 17 has unexpected len 48122 expected 4
[  741.900459][T28653] loop6: detected capacity change from 0 to 512
[  742.000158][T28653] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  742.156762][T28653] EXT4-fs (loop6): 1 truncate cleaned up
[  742.202245][T28653] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  742.284867][T28653] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.10886: Logical block already allocated
[  742.392427][T28653] EXT4-fs (loop6): Remounting filesystem read-only
[  742.519044][T20132] EXT4-fs (loop6): unmounting filesystem.
[  742.898261][T28687] loop5: detected capacity change from 0 to 1024
[  742.919035][T28689] loop7: detected capacity change from 0 to 1764
[  742.956999][T28687] hfsplus: extend alloc file! (16384,256,150995124)
[  743.026355][T28689] iso9660: Corrupted directory entry in block 2 of inode 1920
[  743.138708][T28690] loop3: detected capacity change from 0 to 4096
[  743.187424][T28690] /dev/loop3: Can't open blockdev
[  743.228784][T28696] syz.2.10907[28696] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  743.344021][T28702] netlink: 'syz.6.10910': attribute type 21 has an invalid length.
[  743.466890][T28707] loop5: detected capacity change from 0 to 8
[  743.543359][T28707] SQUASHFS error: zlib decompression failed, data probably corrupt
[  743.579339][T28707] SQUASHFS error: Failed to read block 0x13e: -5
[  743.612135][T28707] SQUASHFS error: Unable to read metadata cache entry [13c]
[  743.642243][T28707] SQUASHFS error: Unable to read directory block [13c:26]
[  743.782033][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  743.900531][T28720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10918'.
[  744.300449][T28700] loop7: detected capacity change from 0 to 40427
[  744.348312][T28700] F2FS-fs (loop7): invalid crc value
[  744.356247][T28700] F2FS-fs (loop7): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  744.380858][T28733] loop3: detected capacity change from 0 to 4096
[  744.399035][T28700] F2FS-fs (loop7): Found nat_bits in checkpoint
[  744.416569][T28733] /dev/loop3: Can't open blockdev
[  744.426084][T15975] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  744.493664][T28739] SET target dimension over the limit!
[  744.594398][T28700] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0
[  744.601134][T28700] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1
[  744.634340][T28700] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  744.642445][T15975] usb 3-1: unable to get BOS descriptor or descriptor too short
[  744.652463][T15975] usb 3-1: not running at top speed; connect to a high speed hub
[  744.675447][T15975] usb 3-1: config 4 has an invalid interface number: 147 but max is 0
[  744.691953][T15975] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  744.711968][T15975] usb 3-1: config 4 has no interface number 0
[  744.738606][T15975] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  744.768732][T15975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.793308][T15975] usb 3-1: Product: syz
[  744.797543][T15975] usb 3-1: Manufacturer: syz
[  744.836676][T15975] usb 3-1: SerialNumber: syz
[  745.064355][T15975] usb 3-1: Found UVC 0.00 device syz (04f2:b746)
[  745.078994][T15975] usb 3-1: No valid video chain found.
[  745.131114][T15975] usb 3-1: USB disconnect, device number 55
[  745.270449][T28749] xt_CT: No such helper "snmp_trap"
[  746.146826][T28799] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  746.181078][T28803] loop7: detected capacity change from 0 to 128
[  746.246628][T28803] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  746.271188][T28803] ext4 filesystem being mounted at /718/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  746.370128][T20217] EXT4-fs (loop7): unmounting filesystem.
[  746.695913][T28825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10964'.
[  746.710105][T28830] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10965'.
[  746.736976][T28825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  746.984953][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  747.095982][T28833] set_capacity_and_notify: 1 callbacks suppressed
[  747.095998][T28833] loop3: detected capacity change from 0 to 4096
[  747.132697][T28833] /dev/loop3: Can't open blockdev
[  747.188842][ T4381] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  747.813534][T28874] loop2: detected capacity change from 0 to 1024
[  747.837163][T28876] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10990'.
[  747.857647][T28874] EXT4-fs: Ignoring removed orlov option
[  747.877126][T28874] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  747.917287][T28874] EXT4-fs (loop2): invalid journal inode
[  747.949424][T28874] EXT4-fs (loop2): can't get journal size
[  747.976520][T28874] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  748.143008][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  748.256792][   T26] audit: type=1326 audit(1785291299.160:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28893 comm="syz.2.10998" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5b9de99 code=0x7ffc0000
[  748.292117][T15973] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  748.310709][   T26] audit: type=1326 audit(1785291299.190:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28893 comm="syz.2.10998" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc2d5b9de99 code=0x7ffc0000
[  748.336312][   T26] audit: type=1326 audit(1785291299.190:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28893 comm="syz.2.10998" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5b9de99 code=0x7ffc0000
[  748.370870][   T26] audit: type=1326 audit(1785291299.190:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28893 comm="syz.2.10998" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5b9de99 code=0x7ffc0000
[  748.502106][T15973] usb 7-1: Using ep0 maxpacket: 32
[  748.520096][T15973] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  748.541983][T15973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.550069][T15973] usb 7-1: Product: syz
[  748.584220][T15973] usb 7-1: Manufacturer: syz
[  748.588884][T15973] usb 7-1: SerialNumber: syz
[  748.600328][T15973] usb 7-1: config 0 descriptor??
[  748.828821][T15973] snd-usb-6fire 7-1:0.0: unknown device firmware state received from device:
[  748.850179][T15973] ab 43 1e 80 9b f8 7a f0 
[  748.872201][T15973] snd-usb-6fire: probe of 7-1:0.0 failed with error -5
[  749.062285][ T4281] Bluetooth: hci4: command 0x0406 tx timeout
[  749.071711][T15975] usb 7-1: USB disconnect, device number 22
[  749.266048][T28929] loop7: detected capacity change from 0 to 4096
[  749.319281][T28929] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  749.363124][T28929] ntfs3: loop7: Failed to load $Extend.
[  749.368285][T28939] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11020'.
[  749.561993][ T4261] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  749.749331][T28951] netlink: 5427 bytes leftover after parsing attributes in process `syz.6.11025'.
[  749.762558][T28951] netlink: 52477 bytes leftover after parsing attributes in process `syz.6.11025'.
[  749.772848][T28951] netlink: 71676 bytes leftover after parsing attributes in process `syz.6.11025'.
[  749.788796][ T4261] usb 3-1: unable to get BOS descriptor or descriptor too short
[  749.810641][ T4261] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7
[  749.848991][ T4261] usb 3-1: string descriptor 0 read error: -22
[  749.880102][ T4261] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  749.910604][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.937436][ T4261] usb 3-1: selecting invalid altsetting 1
[  749.962764][ T4261] usb 3-1: unit 3 not found!
[  749.964749][T28957] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11029'.
[  750.007583][T28961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11030'.
[  750.139219][ T4261] usb 3-1: unit 84 not found!
[  750.152946][ T4261] usb 3-1: unit 89 not found!
[  750.163235][ T4261] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  750.189271][ T4261] usb 3-1: selecting invalid altsetting 1
[  750.232828][ T4261] usb 3-1: unit 3 not found!
[  750.344633][ T4261] usb 3-1: cannot request logical cluster ID: 35217 (err: -71)
[  750.363838][ T4261] usb 3-1: invalid MIXER UNIT descriptor 6
[  750.373400][ T4261] snd-usb-audio: probe of 3-1:1.1 failed with error -71
[  750.403883][ T4261] usb 3-1: selecting invalid altsetting 1
[  750.420275][ T4261] usb 3-1: unit 3 not found!
[  750.436740][ T4261] usb 3-1: cannot request logical cluster ID: 35217 (err: -71)
[  750.456646][ T4261] usb 3-1: invalid MIXER UNIT descriptor 6
[  750.515422][ T4261] snd-usb-audio: probe of 3-1:1.2 failed with error -71
[  750.563085][ T4261] usb 3-1: USB disconnect, device number 56
[  750.587279][T28953] loop3: detected capacity change from 0 to 32768
[  750.588997][ T6085] udevd[6085]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  750.663418][ T4381] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  750.866251][T28984] loop6: detected capacity change from 0 to 1024
[  750.884726][T28985] loop5: detected capacity change from 0 to 128
[  750.904178][T28984] EXT4-fs: Ignoring removed orlov option
[  750.930725][T28984] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  750.942803][T28984] EXT4-fs (loop6): invalid journal inode
[  750.948538][T28984] EXT4-fs (loop6): can't get journal size
[  750.994194][T28985] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  751.017864][T28985] ext4 filesystem being mounted at /1247/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  751.050097][T28984] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  751.127608][T28993] xt_addrtype: ipv6 does not support BROADCAST matching
[  751.255214][T14665] EXT4-fs (loop5): unmounting filesystem.
[  751.283256][T20132] EXT4-fs (loop6): unmounting filesystem.
[  751.295943][   T26] audit: type=1326 audit(1785291302.200:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.7.11049" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2b99de99 code=0x7ffc0000
[  751.446288][   T26] audit: type=1326 audit(1785291302.200:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.7.11049" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2b99de99 code=0x7ffc0000
[  751.521543][T29007] ipt_ECN: cannot use operation on non-tcp rule
[  751.558227][   T26] audit: type=1326 audit(1785291302.260:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.7.11049" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fbf2b99de99 code=0x7ffc0000
[  751.662139][   T26] audit: type=1326 audit(1785291302.260:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.7.11049" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2b99de99 code=0x7ffc0000
[  751.756941][   T26] audit: type=1326 audit(1785291302.260:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.7.11049" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2b99de99 code=0x7ffc0000
[  751.758854][T29015] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11055'.
[  751.837072][T29020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11056'.
[  751.870372][T29023] kAFS: Can only specify source 'none' with -o dyn
[  751.878307][T29020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11056'.
[  751.889032][T29020] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11056'.
[  752.065342][T29029] CIFS mount error: No usable UNC path provided in device string!
[  752.065342][T29029] 
[  752.115203][T29029] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  752.631980][T15973] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  752.842078][T15973] usb 3-1: Using ep0 maxpacket: 16
[  752.849765][T15973] usb 3-1: unable to get BOS descriptor or descriptor too short
[  752.876521][T15973] usb 3-1: string descriptor 0 read error: -22
[  752.896868][T15973] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  752.924063][T29069] loop3: detected capacity change from 0 to 2048
[  752.932592][T15973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.184572][T15973] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[  753.244668][T29079] comedi comedi1: dmm32at: I/O port conflict (0x2ff,16)
[  753.263164][ T4381] udevd[4381]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  753.287548][T29081] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11088'.
[  753.319931][T29081] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11088'.
[  753.417896][ T8302] usb 3-1: USB disconnect, device number 57
[  753.685506][T29099] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11097'.
[  754.212117][T29119] kAFS: unable to lookup cell '.,'
[  754.822660][T29107] loop7: detected capacity change from 0 to 32768
[  754.839048][T29107] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.11101 (29107)
[  754.916059][T29107] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  754.926815][T29112] loop5: detected capacity change from 0 to 32768
[  754.960616][T29107] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  754.992048][T29107] BTRFS info (device loop7): using free space tree
[  755.090203][T29112] XFS (loop5): Mounting V5 Filesystem
[  755.327592][T29112] XFS (loop5): Ending clean mount
[  755.410069][T29107] BTRFS info (device loop7): enabling ssd optimizations
[  755.605507][T14665] XFS (loop5): Unmounting Filesystem
[  755.837307][T20217] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  756.458232][T29209] loop7: detected capacity change from 0 to 64
[  757.567405][T29252] loop7: detected capacity change from 0 to 164
[  757.644728][T29252] rock: directory entry would overflow storage
[  757.667730][T29252] rock: sig=0x66, size=4, remaining=3
[  757.737916][T29252] rock: directory entry would overflow storage
[  757.754707][T29252] rock: sig=0x66, size=4, remaining=3
[  757.862013][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  758.651982][T15968] usb 6-1: new low-speed USB device number 29 using dummy_hcd
[  758.854802][T15968] usb 6-1: unable to get BOS descriptor or descriptor too short
[  758.873282][T15968] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  758.896503][T15968] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  758.966002][T15968] usb 6-1: string descriptor 0 read error: -22
[  758.983229][T15968] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40
[  759.001824][T15968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.454332][T29292] loop6: detected capacity change from 0 to 32768
[  759.489218][ T8302] usb 6-1: USB disconnect, device number 29
[  759.543131][T29292] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  759.617358][T29292] JBD2: Ignoring recovery information on journal
[  759.691660][T29292] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  759.808444][T29292] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1
[  759.882031][T29292] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  759.927216][T29292] OCFS2: File system is now read-only.
[  759.936814][T29292] (syz.6.11179,29292,1):ocfs2_search_chain:1783 ERROR: status = -30
[  759.959228][T29292] (syz.6.11179,29292,1):ocfs2_search_chain:1893 ERROR: status = -30
[  759.978570][T29292] (syz.6.11179,29292,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  759.997780][T29292] (syz.6.11179,29292,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  760.021947][T29292] (syz.6.11179,29292,1):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  760.041831][T29292] (syz.6.11179,29292,1):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  760.086695][T29292] (syz.6.11179,29292,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  760.120040][T29292] (syz.6.11179,29292,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  760.168402][T29292] (syz.6.11179,29292,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  760.211355][T29292] (syz.6.11179,29292,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  760.261836][T29292] (syz.6.11179,29292,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  760.321640][T29292] (syz.6.11179,29292,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  760.350395][T29342] loop7: detected capacity change from 0 to 2048
[  760.359695][T29292] (syz.6.11179,29292,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30
[  760.401367][T29292] (syz.6.11179,29292,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30
[  760.420042][T29292] (syz.6.11179,29292,1):ocfs2_mknod:357 ERROR: status = -30
[  760.439903][T29292] (syz.6.11179,29292,1):ocfs2_mknod:502 ERROR: status = -30
[  760.447617][T29345] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.11205' sets config #0
[  760.462590][T29292] (syz.6.11179,29292,1):ocfs2_mkdir:659 ERROR: status = -30
[  760.471548][T29348] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  760.491514][T29342] syz.7.11204: attempt to access beyond end of device
[  760.491514][T29342] loop7: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  760.511642][T29350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11207'.
[  760.571536][T29342] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15)
[  760.597990][T29342] syz.7.11204: attempt to access beyond end of device
[  760.597990][T29342] loop7: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  760.650572][T20132] ocfs2: Unmounting device (7,6) on (node local)
[  760.670026][T29342] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15)
[  760.727423][T29342] NILFS (loop7): error -5 truncating bmap (ino=16)
[  761.675470][T29386] can: request_module (can-proto-3) failed.
[  761.772872][T29400] loop5: detected capacity change from 0 to 24
[  762.111811][T29404] loop6: detected capacity change from 0 to 4096
[  762.125932][T29404] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  762.244872][T29414] loop2: detected capacity change from 0 to 4096
[  762.283935][T29414] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  762.385825][T29414] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  762.651320][ T4272] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[  762.683579][ T4272] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[  762.765436][T29431] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11245'.
[  762.823296][T29435] overlayfs: empty lowerdir
[  763.115021][T29446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11252'.
[  763.526748][T29468] loop2: detected capacity change from 0 to 512
[  763.590941][T29468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  763.601818][T29468] System zones: 1-12
[  763.658505][T29468] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.11264: invalid block
[  763.762038][T29468] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.11264: invalid indirect mapped block 1819239214 (level 1)
[  763.802170][T29468] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.11264: bg 0: block 361: padding at end of block bitmap is not set
[  763.818395][T29468] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  763.827984][T29468] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.11264: attempt to clear invalid blocks 33619980 len 1
[  763.843217][T29468] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.11264: invalid indirect mapped block 1819239214 (level 0)
[  763.908961][T29468] EXT4-fs (loop2): 1 truncate cleaned up
[  763.931016][T29468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  764.019572][T29468] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.11264: Directory hole found for htree index block 0
[  764.165295][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  764.216043][T29496] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11274'.
[  764.849376][T29487] loop3: detected capacity change from 0 to 32768
[  764.872519][T29487] /dev/loop3: Can't open blockdev
[  764.894290][T29520] netlink: 'syz.6.11287': attribute type 24 has an invalid length.
[  764.932861][ T4381] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  765.001645][ T8302] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  765.202711][ T8302] usb 3-1: Using ep0 maxpacket: 8
[  765.217066][ T8302] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  765.249789][ T8302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.277806][ T8302] usb 3-1: Product: syz
[  765.300876][ T8302] usb 3-1: Manufacturer: syz
[  765.321546][ T8302] usb 3-1: SerialNumber: syz
[  765.768429][ T8302] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[  765.782061][ T8302] mxuport: probe of 3-1:254.0 failed with error -5
[  765.801831][ T8302] usb 3-1: USB disconnect, device number 58
[  765.990886][T29555] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  766.047965][T29555] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[  766.113515][T29563] netlink: 'syz.5.11305': attribute type 10 has an invalid length.
[  766.157654][T29563] team0: Device vxcan1 is of different type
[  766.789157][T29592] netlink: 340 bytes leftover after parsing attributes in process `syz.7.11319'.
[  766.821045][T29592] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11319'.
[  767.135955][T29607] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11327'.
[  767.171548][ T4343] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  767.361555][ T4343] usb 3-1: Using ep0 maxpacket: 16
[  767.370077][ T4343] usb 3-1: unable to get BOS descriptor or descriptor too short
[  767.379267][ T4343] usb 3-1: config 251 has an invalid interface number: 33 but max is 0
[  767.392945][ T4343] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  767.404734][ T4343] usb 3-1: config 251 has no interface number 0
[  767.411799][ T4343] usb 3-1: config 251 interface 33 has no altsetting 0
[  767.424494][ T4343] usb 3-1: New USB device found, idVendor=12d1, idProduct=9634, bcdDevice=18.90
[  767.450632][ T4343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.459356][ T4343] usb 3-1: Product: syz
[  767.480750][ T4343] usb 3-1: Manufacturer: syz
[  767.501413][ T4343] usb 3-1: SerialNumber: syz
[  767.729697][ T4343] qmi_wwan: probe of 3-1:251.33 failed with error -22
[  767.756931][ T4343] usb 3-1: USB disconnect, device number 59
[  767.926816][T29636] x_tables: unsorted underflow at hook 2
[  768.219392][T29648] netlink: 'syz.7.11347': attribute type 3 has an invalid length.
[  768.708274][T29672] loop5: detected capacity change from 0 to 256
[  768.780279][T29672] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  768.867249][T29672] exFAT-fs (loop5): invalid start cluster (17)
[  769.288517][T29692] UBIFS error (pid: 29692): cannot open "ubi0", error -19
[  769.494090][T29702] UBIFS error (pid: 29702): cannot open "ubi:0", error -19
[  769.851334][ T4319] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  769.952823][T29718] loop3: detected capacity change from 0 to 8192
[  769.999081][ T4381] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  770.058454][ T4319] usb 8-1: Using ep0 maxpacket: 32
[  770.074600][ T4319] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  770.094280][ T4319] usb 8-1: config 0 has no interface number 0
[  770.100495][ T4319] usb 8-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  770.151266][ T4319] usb 8-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  770.194897][ T4319] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  770.212180][ T4319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.248830][ T4319] usb 8-1: Product: syz
[  770.258988][ T4319] usb 8-1: Manufacturer: syz
[  770.273557][ T4319] usb 8-1: SerialNumber: syz
[  770.289954][ T4319] usb 8-1: config 0 descriptor??
[  770.306122][ T4319] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  770.513204][ T4319] usb 8-1: qt2_setup_urbs - submit read urb failed -90
[  770.529104][ T4319] quatech2: probe of 8-1:0.51 failed with error -90
[  770.550200][T29743] Cannot find del_set index 4 as target
[  770.612294][T15974] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  770.727983][ T4261] usb 8-1: USB disconnect, device number 18
[  770.802782][T15974] usb 4-1: config 8 has an invalid interface number: 223 but max is 0
[  770.816581][T15974] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  770.866534][T15974] usb 4-1: config 8 has no interface number 0
[  770.879270][T15974] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  770.897091][T15974] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  770.918796][T15974] usb 4-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d
[  770.961304][T15974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.976123][T15974] usb 4-1: Product: syz
[  770.980558][T15974] usb 4-1: Manufacturer: syz
[  770.986225][T15974] usb 4-1: SerialNumber: syz
[  771.218761][T15974] usb 4-1: USB disconnect, device number 64
[  771.508888][T29778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11413'.
[  771.731302][T29788] loop2: detected capacity change from 0 to 256
[  771.890860][T29792] loop3: detected capacity change from 0 to 1024
[  772.756057][T29824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11435'.
[  772.811682][ T4343] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  772.930842][T29810] loop3: detected capacity change from 0 to 32768
[  773.011361][ T4381] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  773.013938][ T4343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  773.043425][ T4343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  773.062610][ T4343] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  773.104158][ T4343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.134666][ T4343] usb 3-1: config 0 descriptor??
[  773.559779][ T4343] hid-led 0003:27B8:01ED.0002: unbalanced collection at end of report description
[  773.571347][ T4343] hid-led: probe of 0003:27B8:01ED.0002 failed with error -22
[  773.776876][ T4343] usb 3-1: USB disconnect, device number 60
[  773.957098][T29861] loop5: detected capacity change from 0 to 256
[  773.982371][T29861] exfat: Deprecated parameter 'namecase'
[  774.039982][T29861] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d)
[  774.410545][T29870] loop6: detected capacity change from 0 to 8192
[  774.422076][T29874] loop5: detected capacity change from 0 to 4096
[  774.446875][T29878] sch_tbf: burst 0 is lower than device ip6gre0 mtu (65485) !
[  774.477004][T29870] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  774.494603][T29870] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  774.504065][T29870] REISERFS (device loop6): using ordered data mode
[  774.510467][T29874] NILFS (loop5): mounting unchecked fs
[  774.510624][T29870] reiserfs: using flush barriers
[  774.523276][T29870] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  774.541101][T29870] REISERFS (device loop6): checking transaction log (loop6)
[  774.568147][T29874] NILFS (loop5): recovery required for readonly filesystem
[  774.626781][T29870] REISERFS (device loop6): Using tea hash to sort names
[  774.626778][T29874] NILFS (loop5): write access will be enabled during recovery
[  774.638982][T29874] NILFS (loop5): invalid segment: Checksum error in segment payload
[  774.676812][T29870] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  774.701267][T29874] NILFS (loop5): trying rollback from an earlier position
[  774.793476][T29874] NILFS (loop5): norecovery option specified, skipping roll-forward recovery
[  775.235926][T29895] Bluetooth: MGMT ver 1.22
[  775.260062][T29897] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11466'.
[  775.281383][T29897] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11466'.
[  775.329110][T29901] sctp: [Deprecated]: syz.3.11471 (pid 29901) Use of int in max_burst socket option.
[  775.329110][T29901] Use struct sctp_assoc_value instead
[  775.329331][T29900] loop5: detected capacity change from 0 to 512
[  775.391937][T29900] EXT4-fs: Ignoring removed mblk_io_submit option
[  775.416875][T29903] loop2: detected capacity change from 0 to 512
[  775.587604][T29903] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  775.596823][T29900] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.11473: corrupted in-inode xattr
[  775.629642][T29903] ext4 filesystem being mounted at /2313/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  775.699874][T29900] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.11473: couldn't read orphan inode 15 (err -117)
[  775.743023][T29900] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  775.891927][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  775.908021][T14665] EXT4-fs (loop5): unmounting filesystem.
[  776.151910][T29924] CIFS: Attempting to mount \\127.0.0.1\share
[  776.172945][T29924] CIFS: VFS: No username specified
[  776.866235][T29958] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  776.914192][T29959] loop7: detected capacity change from 0 to 2048
[  776.950029][T29959] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  777.157820][T29947] loop6: detected capacity change from 0 to 32768
[  777.195154][T29947] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.11491 (29947)
[  777.225038][T29947] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  777.261131][T29947] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  777.290423][T29947] BTRFS info (device loop6): using free space tree
[  777.301058][ T4281] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  777.310619][ T4281] Bluetooth: hci2: command 0x0401 tx timeout
[  777.681115][T29947] BTRFS info (device loop6): enabling ssd optimizations
[  777.826247][T29995] loop2: detected capacity change from 0 to 256
[  777.926683][T20132] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  778.238474][T30007] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11512'.
[  778.903465][T30027] loop6: detected capacity change from 0 to 512
[  778.929209][T30027] EXT4-fs: Ignoring removed mblk_io_submit option
[  779.018453][T30027] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.11522: corrupted in-inode xattr
[  779.041600][T30027] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.11522: couldn't read orphan inode 15 (err -117)
[  779.057927][T30027] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  779.116684][T20132] EXT4-fs (loop6): unmounting filesystem.
[  779.600259][T30057] loop6: detected capacity change from 0 to 512
[  779.665386][T30057] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  779.725046][T30057] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.11534: corrupted in-inode xattr
[  779.761134][T30057] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.11534: couldn't read orphan inode 15 (err -117)
[  779.831189][T30057] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  779.963562][T30069] loop7: detected capacity change from 0 to 64
[  780.027755][T20132] EXT4-fs (loop6): unmounting filesystem.
[  780.240280][T30079] loop2: detected capacity change from 0 to 128
[  780.259934][T30079] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  780.295019][T30081] CIFS: Attempting to mount \\127.0.0.1\share
[  780.351425][T30081] CIFS: VFS: No username specified
[  780.499706][T30087] loop3: detected capacity change from 0 to 128
[  780.571648][T30087] /dev/loop3: Can't open blockdev
[  780.639650][ T4381] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  780.901017][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  780.912456][T26096] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  781.107787][T30106] team0: Port device vlan0 removed
[  781.110693][T26096] usb 6-1: Using ep0 maxpacket: 8
[  781.132252][T26096] usb 6-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  781.176964][T26096] usb 6-1: config 0 interface 0 has no altsetting 0
[  781.207449][T26096] usb 6-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00
[  781.241024][T26096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.272055][T26096] usb 6-1: config 0 descriptor??
[  781.298048][T30119] loop7: detected capacity change from 0 to 512
[  781.329504][T30119] EXT4-fs: Ignoring removed mblk_io_submit option
[  781.364554][T30119] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.11560: corrupted in-inode xattr
[  781.418896][T30122] CIFS: Attempting to mount \\127.0.0.1\share
[  781.434131][T30119] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.11560: couldn't read orphan inode 15 (err -117)
[  781.434640][T30124] loop6: detected capacity change from 0 to 1024
[  781.474589][T30122] CIFS: VFS: No username specified
[  781.490365][T30124] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 2: comm syz.6.11562: lblock 2 mapped to illegal pblock 2 (length 1)
[  781.526233][T30119] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  781.576230][T20217] EXT4-fs (loop7): unmounting filesystem.
[  781.582534][T30124] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  781.594337][T30124] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 48: comm syz.6.11562: lblock 0 mapped to illegal pblock 48 (length 1)
[  781.622351][T30124] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  781.666424][T30124] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.11562: Failed to acquire dquot type 0
[  781.715864][T30124] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  781.732659][T26096] wacom 0003:056A:0336.0003: unknown main item tag 0xd
[  781.732692][T26096] wacom 0003:056A:0336.0003: unknown main item tag 0x0
[  781.732716][T26096] wacom 0003:056A:0336.0003: unknown main item tag 0x1
[  781.732740][T26096] wacom 0003:056A:0336.0003: unknown main item tag 0x0
[  781.732763][T26096] wacom 0003:056A:0336.0003: unknown main item tag 0x0
[  781.732787][T26096] wacom 0003:056A:0336.0003: unknown main item tag 0x3
[  781.762480][T30127] loop3: detected capacity change from 0 to 4096
[  781.775806][T30124] EXT4-fs error (device loop6): ext4_evict_inode:281: inode #11: comm syz.6.11562: mark_inode_dirty error
[  781.793845][T26096] wacom 0003:056A:0336.0003: unknown main item tag 0x6
[  781.806414][T30124] EXT4-fs warning (device loop6): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  781.806501][T30124] EXT4-fs (loop6): 1 orphan inode deleted
[  781.806532][T30124] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  781.845817][T26096] wacom 0003:056A:0336.0003: hidraw0: USB HID v0.09 Device [HID 056a:0336] on usb-dummy_hcd.5-1/input0
[  781.885421][T30127] NILFS (loop3): mounting unchecked fs
[  781.891372][T30127] NILFS (loop3): recovery required for readonly filesystem
[  781.898617][T30127] NILFS (loop3): write access will be enabled during recovery
[  781.936435][ T7839] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1)
[  781.985375][ T7839] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  781.992316][T30127] NILFS (loop3): invalid segment: Checksum error in segment payload
[  782.009460][ T7839] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:12: Failed to release dquot type 0
[  782.034004][T30127] NILFS (loop3): trying rollback from an earlier position
[  782.040567][ T4281] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  782.042669][ T4289] Bluetooth: hci2: command 0x0401 tx timeout
[  782.059884][ T8302] usb 6-1: USB disconnect, device number 30
[  782.149161][T30127] NILFS (loop3): norecovery option specified, skipping roll-forward recovery
[  782.165426][T20132] EXT4-fs (loop6): unmounting filesystem.
[  782.181278][T20132] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  782.199900][T30132] loop7: detected capacity change from 0 to 512
[  782.227108][T20132] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  782.250215][T20132] EXT4-fs error (device loop6): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  782.254269][T30130] fido_id[30130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  782.281995][T30132] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  782.355737][T30132] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.11566: invalid indirect mapped block 4294967295 (level 1)
[  782.376247][T30132] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.11566: invalid indirect mapped block 4294967295 (level 1)
[  782.392429][T30132] EXT4-fs (loop7): 2 truncates cleaned up
[  782.423370][T30132] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  782.540219][T20217] EXT4-fs (loop7): unmounting filesystem.
[  782.676226][T30143] loop7: detected capacity change from 0 to 128
[  782.736540][T30143] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  782.776389][T30143] ext4 filesystem being mounted at /852/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  782.866310][T30150] loop6: detected capacity change from 0 to 512
[  782.934513][T30150] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  783.048768][T30160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11576'.
[  783.055845][T30150] ext4 filesystem being mounted at /821/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  783.058705][T30160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11576'.
[  783.100813][T30160] netlink: 'syz.3.11576': attribute type 11 has an invalid length.
[  783.110871][T30160] netlink: 'syz.3.11576': attribute type 14 has an invalid length.
[  783.115232][T20217] EXT4-fs (loop7): unmounting filesystem.
[  783.202448][T30150] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 3: comm syz.6.11572: lblock 8 mapped to illegal pblock 3 (length 26)
[  783.393265][T20132] EXT4-fs (loop6): unmounting filesystem.
[  783.420348][T30171] device macsec1 entered promiscuous mode
[  783.433575][T30171] device macvlan0 entered promiscuous mode
[  783.486832][T30171] device macvlan0 left promiscuous mode
[  783.904210][T30187] loop2: detected capacity change from 0 to 16
[  783.941510][T30187] erofs: (device loop2): mounted with root inode @ nid 36.
[  783.980779][   T26] audit: type=1800 audit(1785291334.891:622): pid=30187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11589" name="file1" dev="loop2" ino=86 res=0 errno=0
[  784.019014][T30187] syz.2.11589: attempt to access beyond end of device
[  784.019014][T30187] loop2: rw=0, sector=1342177272, nr_sectors = 2047 limit=16
[  784.233253][T30201] loop6: detected capacity change from 0 to 64
[  784.354595][ T8302] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  784.391138][T30204] [U] k
[  784.540549][ T8302] usb 4-1: Using ep0 maxpacket: 16
[  784.549758][ T8302] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  784.571016][ T8302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.579365][ T8302] usb 4-1: Product: syz
[  784.595749][ T8302] usb 4-1: Manufacturer: syz
[  784.606583][ T8302] usb 4-1: SerialNumber: syz
[  784.622064][ T8302] usb 4-1: config 0 descriptor??
[  784.636684][ T8302] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  784.660978][ T4276] Bluetooth: hci2: command 0x0401 tx timeout
[  784.667231][ T4281] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  784.736796][T30217] loop6: detected capacity change from 0 to 4096
[  784.760718][T30217] NILFS (loop6): mounting unchecked fs
[  784.766259][T30217] NILFS (loop6): recovery required for readonly filesystem
[  784.786361][T30217] NILFS (loop6): write access will be enabled during recovery
[  784.813887][T30217] NILFS (loop6): invalid segment: Checksum error in segment payload
[  784.870412][T30217] NILFS (loop6): trying rollback from an earlier position
[  784.910093][T30217] NILFS (loop6): norecovery option specified, skipping roll-forward recovery
[  784.933544][T30221] EXT4-fs: Ignoring removed bh option
[  784.997061][T30221] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  785.043072][ T8302] usb 4-1: clie_3_5_startup: get interface number bad return length: 0
[  785.060435][ T8302] visor: probe of 4-1:0.0 failed with error -5
[  785.217066][ T4381] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  785.245995][ T8302] usb 4-1: USB disconnect, device number 65
[  785.313436][T20217] EXT4-fs (loop7): unmounting filesystem.
[  785.597979][T30238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11613'.
[  785.787904][T30247] set_capacity_and_notify: 2 callbacks suppressed
[  785.787921][T30247] loop7: detected capacity change from 0 to 256
[  785.872320][ T8302] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  786.033445][T30257] netlink: 'syz.2.11622': attribute type 21 has an invalid length.
[  786.092353][ T8302] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  786.124987][ T8302] usb 6-1: config 0 has no interface number 0
[  786.144453][ T8302] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  786.169274][T30261] loop3: detected capacity change from 0 to 64
[  786.199873][ T8302] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  786.215813][ T8302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  786.224327][ T8302] usb 6-1: Product: syz
[  786.228665][ T8302] usb 6-1: Manufacturer: syz
[  786.234665][T30263] netlink: 'syz.2.11625': attribute type 2 has an invalid length.
[  786.244336][ T8302] usb 6-1: SerialNumber: syz
[  786.246528][T30266] loop7: detected capacity change from 0 to 256
[  786.256546][ T4381] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  786.268768][ T8302] usb 6-1: config 0 descriptor??
[  786.306459][ T8302] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[  786.517786][T30269] loop3: detected capacity change from 0 to 256
[  786.580098][ T8302] usb 6-1: USB disconnect, device number 31
[  786.608632][ T8302] yurex 6-1:0.50: USB YUREX #0 now disconnected
[  786.660437][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  786.769133][T30277] netlink: 'syz.3.11632': attribute type 4 has an invalid length.
[  786.794372][T30277] netlink: 'syz.3.11632': attribute type 1 has an invalid length.
[  786.814914][T30277] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.11632'.
[  787.170001][T30294] netdevsim netdevsim7: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component
[  787.274352][T30301] CIFS mount error: No usable UNC path provided in device string!
[  787.274352][T30301] 
[  787.310535][T30301] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  787.315132][T30298] loop2: detected capacity change from 0 to 4096
[  787.402351][T30304] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  787.470623][T30308] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11646'.
[  787.606880][T30311] loop5: detected capacity change from 0 to 512
[  787.638117][T30313] tipc: Started in network mode
[  787.670432][T30313] tipc: Node identity _, cluster identity 4711
[  787.676781][T30315] loop2: detected capacity change from 0 to 1024
[  787.687451][T30313] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  787.737703][T30311] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  787.761366][T30315] EXT4-fs: Ignoring removed bh option
[  787.862482][T30315] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  787.954179][T30311] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.11647: invalid indirect mapped block 4294967295 (level 1)
[  787.990830][T30311] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.11647: invalid indirect mapped block 4294967295 (level 1)
[  788.034158][T30311] EXT4-fs (loop5): 2 truncates cleaned up
[  788.050349][T30311] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  788.115393][T30329] netlink: 'syz.6.11655': attribute type 2 has an invalid length.
[  788.140003][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  788.145378][T30329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11655'.
[  788.259334][T14665] EXT4-fs (loop5): unmounting filesystem.
[  788.425915][T30341] loop5: detected capacity change from 0 to 512
[  788.438745][T30343] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11660'.
[  788.508985][T30341] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  788.658004][T30341] ext4 filesystem being mounted at /1372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  788.768287][T30341] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 3: comm syz.5.11658: lblock 8 mapped to illegal pblock 3 (length 26)
[  788.837661][T14665] EXT4-fs (loop5): unmounting filesystem.
[  788.944091][    T7] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  788.973352][T30364] loop2: detected capacity change from 0 to 164
[  789.052066][T30364] ISOFS: unable to read i-node block
[  789.057509][T30364] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  789.158162][    T7] usb 7-1: Using ep0 maxpacket: 16
[  789.167805][    T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  789.207977][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  789.237890][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  789.253693][    T7] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  789.296181][    T7] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  789.336459][    T7] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  789.362812][    T7] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  789.395414][    T7] usb 7-1: Manufacturer: syz
[  789.409612][    T7] usb 7-1: config 0 descriptor??
[  789.791430][    T7] rc_core: IR keymap rc-hauppauge not found
[  789.797804][    T7] Registered IR keymap rc-empty
[  789.813513][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  789.830351][ T8302] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  789.861662][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  789.911664][    T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  789.936728][    T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input43
[  789.972016][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  790.000209][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  790.034373][T30381] loop5: detected capacity change from 0 to 32768
[  790.040162][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  790.043329][ T8302] usb 8-1: config 32 has an invalid interface number: 255 but max is 0
[  790.077838][ T8302] usb 8-1: config 32 has no interface number 0
[  790.080393][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  790.087820][ T8302] usb 8-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30
[  790.103448][T30381] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.11677 (30381)
[  790.121927][ T8302] usb 8-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  790.138315][ T8302] usb 8-1: config 32 interface 255 has no altsetting 0
[  790.145473][ T8302] usb 8-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00
[  790.158902][ T8302] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.161246][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  790.173450][T30396] ntfs3: loop3: Failed to load $UpCase.
[  790.191018][T30381] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  790.213110][ T8302] usb-storage 8-1:32.255: USB Mass Storage device detected
[  790.221716][T30381] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  790.225969][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  790.240318][T30381] BTRFS info (device loop5): setting nodatasum
[  790.255136][T30381] BTRFS info (device loop5): force zlib compression, level 3
[  790.270336][ T8302] usb-storage 8-1:32.255: Quirks match for vid 057b pid 0000: 1
[  790.297637][T30381] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  790.320313][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  790.350224][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  790.380252][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  790.380982][T30381] BTRFS info (device loop5): use lzo compression, level 0
[  790.410603][    T7] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  790.426060][ T4261] usb 8-1: USB disconnect, device number 19
[  790.464838][T30381] BTRFS info (device loop5): turning on flush-on-commit
[  790.473763][    T7] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  790.496370][T30406] hfsplus: request for non-existent node 134217728 in B*Tree
[  790.513571][    T7] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  790.527296][T30406] hfsplus: request for non-existent node 134217728 in B*Tree
[  790.536538][T30381] BTRFS info (device loop5): enabling auto defrag
[  790.564002][    T7] usb 7-1: USB disconnect, device number 23
[  790.587240][T30381] BTRFS info (device loop5): max_inline at 4096
[  790.621299][T30381] BTRFS info (device loop5): using free space tree
[  790.744051][T30414] /dev/loop3: Can't open blockdev
[  790.930787][T30423] set_capacity_and_notify: 3 callbacks suppressed
[  790.930804][T30423] loop2: detected capacity change from 0 to 4096
[  791.168663][T30432] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  791.190446][T30381] BTRFS info (device loop5): enabling ssd optimizations
[  791.325046][   T26] audit: type=1800 audit(1785291342.232:623): pid=30381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11677" name="file1" dev="loop5" ino=260 res=0 errno=0
[  791.350784][T30440] futex_wake_op: syz.3.11694 tries to shift op by -1; fix this program
[  791.557890][T14665] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  791.785066][T30451] netlink: 165 bytes leftover after parsing attributes in process `syz.6.11700'.
[  792.533606][T30444] loop2: detected capacity change from 0 to 32768
[  792.975551][T30475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11709'.
[  793.021324][T30477] netlink: 256 bytes leftover after parsing attributes in process `syz.7.11710'.
[  793.327168][T30487] netlink: 'syz.3.11715': attribute type 29 has an invalid length.
[  793.370253][T30487] netlink: 'syz.3.11715': attribute type 29 has an invalid length.
[  793.426332][T30487] netlink: 'syz.3.11715': attribute type 29 has an invalid length.
[  793.435647][T30462] loop5: detected capacity change from 0 to 32768
[  793.451171][T30462] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.11698 (30462)
[  793.527946][T30462] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  793.570417][T30462] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  793.579400][T30462] BTRFS info (device loop5): force clearing of disk cache
[  793.638064][T30495] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11719'.
[  793.650640][T30462] BTRFS info (device loop5): force zlib compression, level 3
[  793.678376][T30462] BTRFS info (device loop5): disabling free space tree
[  793.690215][T30495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11719'.
[  793.719668][T30462] BTRFS info (device loop5): max_inline at 0
[  793.725946][T30462] BTRFS info (device loop5): enabling free space tree
[  793.759717][T30462] BTRFS info (device loop5): using free space tree
[  794.068684][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11725'.
[  794.159988][T30462] BTRFS info (device loop5): enabling ssd optimizations
[  794.333971][T30530] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11727'.
[  794.360913][T14665] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  794.607617][T30514] loop7: detected capacity change from 0 to 32768
[  794.655289][T30537] netlink: 'syz.6.11731': attribute type 29 has an invalid length.
[  794.674971][T30537] netlink: 'syz.6.11731': attribute type 29 has an invalid length.
[  794.709106][T30537] netlink: 'syz.6.11731': attribute type 29 has an invalid length.
[  794.766675][T30514] ERROR: (device loop7): dtReadFirst: btstack overrun
[  794.766675][T30514] 
[  794.806936][T30539] loop2: detected capacity change from 0 to 512
[  794.815161][T30514] ERROR: (device loop7): remounting filesystem as read-only
[  794.835524][T30514] btstack dump:
[  794.842538][T30514] bn = 0, index = 0
[  794.857956][T30514] bn = 0, index = 0
[  794.865277][T30539] EXT4-fs (loop2): orphan cleanup on readonly fs
[  794.890544][T30514] bn = 0, index = 0
[  794.894429][T30514] bn = 0, index = 0
[  794.898254][T30514] bn = 0, index = 0
[  794.902382][T30514] bn = 0, index = 0
[  794.906447][T30514] bn = 0, index = 0
[  794.910389][T30514] bn = 0, index = 0
[  794.914207][T30514] jfs_readdir: unexpected rc = -5 from dtReadNext
[  795.004656][T30539] EXT4-fs (loop2): 1 orphan inode deleted
[  795.060413][T30539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  795.239218][T30539] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  795.267564][T30539] ext4 filesystem being remounted at /2373/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  795.288801][T30546] loop7: detected capacity change from 0 to 4096
[  795.370624][T30554] input input44: cannot allocate more than FF_MAX_EFFECTS effects
[  795.374376][T30555] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  795.403929][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  795.427119][T30550] loop5: detected capacity change from 0 to 4096
[  795.611637][T30550] ntfs3: loop5: ino=5, "/" directory corrupted
[  795.741283][T30565] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11741'.
[  795.854036][T30567] loop2: detected capacity change from 0 to 256
[  795.908633][T30571] loop6: detected capacity change from 0 to 512
[  795.914427][T30570] netlink: 'syz.5.11743': attribute type 29 has an invalid length.
[  795.971461][T30570] netlink: 'syz.5.11743': attribute type 29 has an invalid length.
[  796.000352][T30572] netlink: 'syz.5.11743': attribute type 29 has an invalid length.
[  796.051384][T30571] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  796.121523][T30571] ext4 filesystem being mounted at /860/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  796.377475][T30581] loop5: detected capacity change from 0 to 4096
[  796.386431][T30586] loop3: detected capacity change from 0 to 16
[  796.410780][T30586] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  796.429880][T30581] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  796.439478][T30586] /dev/loop3: Can't open blockdev
[  796.474555][T20132] EXT4-fs (loop6): unmounting filesystem.
[  796.612172][T30581] ntfs3: loop5: failed to convert "c46c" to cp865
[  796.838421][T30594] loop6: detected capacity change from 0 to 4096
[  796.867366][T30598] netlink: 165 bytes leftover after parsing attributes in process `syz.5.11755'.
[  796.896901][T30594] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing.
[  796.929843][T30594] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  796.970757][T30594] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  797.015956][T30594] ntfs: volume version 3.1.
[  797.114156][T30600] vivid-007: =================  START STATUS  =================
[  797.149699][T30600] vivid-007: Enable Output Cropping: true
[  797.168354][T20132] ntfs: (device loop6): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  797.178993][T30600] vivid-007: Enable Output Composing: true
[  797.209307][T30600] vivid-007: Enable Output Scaler: true
[  797.225478][T30600] vivid-007: Tx RGB Quantization Range: Automatic
[  797.249789][T30600] vivid-007: Transmit Mode: HDMI
[  797.254967][T30600] vivid-007: Display Present: true inactive
[  797.283433][T30600] vivid-007: Hotplug Present: 0x00000001
[  797.300356][T30600] vivid-007: RxSense Present: 0x00000001
[  797.306843][T30600] vivid-007: EDID Present: 0x00000001
[  797.339385][T30600] vivid-007: ==================  END STATUS  ==================
[  797.505907][T30590] loop7: detected capacity change from 0 to 40427
[  797.508923][T30595] loop2: detected capacity change from 0 to 32768
[  797.531610][T30590] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  797.541240][T30590] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  797.574565][T30590] F2FS-fs (loop7): invalid crc value
[  797.606031][   T26] audit: type=1800 audit(1785291348.512:624): pid=30595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11753" name="file1" dev="loop2" ino=4 res=0 errno=0
[  797.637168][T30590] F2FS-fs (loop7): Found nat_bits in checkpoint
[  797.834202][T30590] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  797.860509][T30590] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  797.881175][T30614] netlink: 'syz.2.11758': attribute type 29 has an invalid length.
[  798.375177][T30628] loop3: detected capacity change from 0 to 512
[  798.388345][T30629] netlink: 165 bytes leftover after parsing attributes in process `syz.2.11766'.
[  798.398592][T30628] /dev/loop3: Can't open blockdev
[  798.615075][T30633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11773'.
[  798.946877][T30645] loop2: detected capacity change from 0 to 4096
[  799.129764][   T14] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  799.150768][ T8302] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  799.266700][T30653] loop5: detected capacity change from 0 to 512
[  799.300846][T30653] EXT4-fs: Ignoring removed bh option
[  799.339674][   T14] usb 4-1: Using ep0 maxpacket: 32
[  799.358052][   T14] usb 4-1: config 0 interface 0 has no altsetting 0
[  799.359712][ T8302] usb 7-1: Using ep0 maxpacket: 16
[  799.386661][ T8302] usb 7-1: config 0 interface 0 has no altsetting 0
[  799.392252][   T14] usb 4-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00
[  799.409692][ T8302] usb 7-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00
[  799.418969][T30653] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  799.419070][T30653] ext4 filesystem being mounted at /1385/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  799.438400][ T8302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.451259][ T8302] usb 7-1: config 0 descriptor??
[  799.467535][T30662] netlink: 165 bytes leftover after parsing attributes in process `syz.7.11782'.
[  799.479877][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.551809][   T14] usb 4-1: config 0 descriptor??
[  799.580698][T30653] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #2: comm syz.5.11780: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  799.610184][T30653] EXT4-fs (loop5): Remounting filesystem read-only
[  799.770749][T14665] EXT4-fs (loop5): unmounting filesystem.
[  799.815188][T30668] loop2: detected capacity change from 0 to 4096
[  799.858651][T30668] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  799.870238][ T8302] wacom 0003:056A:00B1.0004: unknown main item tag 0x6
[  799.877212][ T8302] wacom 0003:056A:00B1.0004: ignoring exceeding usage max
[  799.913498][ T8302] wacom 0003:056A:00B1.0004: Unknown device_type for 'HID 056a:00b1'. Assuming pen.
[  799.945508][ T8302] wacom 0003:056A:00B1.0004: hidraw0: USB HID v0.08 Device [HID 056a:00b1] on usb-dummy_hcd.6-1/input0
[  799.964124][ T8302] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00B1.0004/input/input45
[  799.995935][   T14] wacom 0003:056A:0318.0005: unknown main item tag 0x0
[  800.029216][T30668] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  800.045054][   T14] wacom 0003:056A:0318.0005: unknown main item tag 0x6
[  800.065248][   T14] wacom 0003:056A:0318.0005: ignoring exceeding usage max
[  800.082756][T30668] ntfs3: loop2: ino=1f, "file2" failed to open parent directory r=5 to update
[  800.103752][ T8302] usb 7-1: USB disconnect, device number 24
[  800.277604][ T7860] ntfs3: loop2: ino=1f, failed to open parent directory r=5 to update
[  800.294788][   T14] usb 4-1: USB disconnect, device number 66
[  800.378242][T30678] loop7: detected capacity change from 0 to 4096
[  800.478425][T30679] fido_id[30679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  801.045808][T30700] /dev/loop3: Can't open blockdev
[  801.461740][T30706] set_capacity_and_notify: 2 callbacks suppressed
[  801.461756][T30706] loop2: detected capacity change from 0 to 4096
[  801.536163][T30708] loop3: detected capacity change from 0 to 4096
[  801.590871][T30708] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  801.611616][T30706] ntfs3: loop2: ino=5, "/" directory corrupted
[  801.761470][T30708] ntfs3: loop3: failed to convert "c46c" to koi8-u
[  801.911547][T30724] loop7: detected capacity change from 0 to 512
[  801.997471][T30724] EXT4-fs (loop7): orphan cleanup on readonly fs
[  802.136525][T30724] EXT4-fs (loop7): 1 orphan inode deleted
[  802.197247][T30724] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  802.212788][T30718] loop6: detected capacity change from 0 to 32768
[  802.247640][T30718] (syz.6.11807,30718,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  802.317727][T30724] EXT4-fs (loop7): re-mounted. Quota mode: writeback.
[  802.339436][T30718] (syz.6.11807,30718,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  802.365513][T30724] ext4 filesystem being remounted at /906/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  802.410617][T30718] (syz.6.11807,30718,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC.
[  802.427610][T30732] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  802.474410][T20217] EXT4-fs (loop7): unmounting filesystem.
[  802.528175][T30739] loop7: detected capacity change from 0 to 128
[  802.536663][T30739] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  802.546416][T30718] JBD2: Ignoring recovery information on journal
[  802.556681][T30732] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  802.563796][T30732] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  802.584051][T30739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  802.669848][T30718] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  802.806673][T30744] loop5: detected capacity change from 0 to 1024
[  802.898312][T30718] (syz.6.11807,30718,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC.
[  802.979621][T30718] (syz.6.11807,30718,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c
[  803.109487][T30718] (syz.6.11807,30718,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  803.134749][T30718] (syz.6.11807,30718,1):ocfs2_quota_read:201 ERROR: status = -5
[  803.157478][T30718] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 1
[  803.205367][T30749] loop7: detected capacity change from 0 to 4096
[  803.212033][T30718] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  803.233196][T30718] (syz.6.11807,30718,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  803.235918][T30745] (syz.6.11807,30745,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC.
[  803.271319][T30745] (syz.6.11807,30745,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c
[  803.313204][T30718] (syz.6.11807,30718,1):ocfs2_mknod:314 ERROR: status = -5
[  803.347629][T30718] (syz.6.11807,30718,1):ocfs2_mknod:502 ERROR: status = -5
[  803.353298][    T7] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  803.364756][T30745] (syz.6.11807,30745,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  803.382792][T30718] (syz.6.11807,30718,1):ocfs2_mkdir:659 ERROR: status = -5
[  803.410916][T30749] ntfs3: loop7: ino=5, "/" directory corrupted
[  803.415548][T30745] (syz.6.11807,30745,0):ocfs2_quota_read:201 ERROR: status = -5
[  803.455573][T30745] Quota error (device loop6): find_next_id: Can't read quota tree block 1
[  803.500327][T30745] (syz.6.11807,30745,0):ocfs2_get_next_id:909 ERROR: status = -5
[  803.559396][    T7] usb 4-1: Using ep0 maxpacket: 16
[  803.566649][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  803.624440][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  803.635460][    T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  803.654275][    T7] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  803.664027][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.681106][    T7] usb 4-1: config 0 descriptor??
[  803.693520][T20132] ocfs2: Unmounting device (7,6) on (node local)
[  803.941298][T30753] loop2: detected capacity change from 0 to 32768
[  804.020531][T30753] XFS (loop2): Mounting V5 Filesystem
[  804.086457][T30753] XFS (loop2): Ending clean mount
[  804.097745][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.114761][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.129010][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.148388][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.167862][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.184490][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.204360][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.218238][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.237244][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.247238][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.258077][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.274552][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.284077][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.303270][ T4272] XFS (loop2): Unmounting Filesystem
[  804.303336][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.322160][    T7] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  804.348148][    T7] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input51
[  804.443550][    T7] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  804.494477][    T7] usb 4-1: USB disconnect, device number 67
[  804.659524][T15969] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  804.660955][T30781] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[14665] was attempted by " Àÿ      Ðÿ      ð¥      Àÿ      Àÿ      Ðÿ      àÿ              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ                                                                                                                                                                                                                                                                                        $   $ Ae
   ýÛß%          \x0b ÿÿÿÿòÿêÿ                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    
[  804.770058][T30779] fido_id[30779]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  804.856967][    C0] vkms_vblank_simulate: vblank timer overrun
[  804.919341][T15969] usb 7-1: Using ep0 maxpacket: 32
[  804.927413][T15969] usb 7-1: config 0 has an invalid interface number: 35 but max is 0
[  804.949201][T15969] usb 7-1: config 0 has no interface number 0
[  804.955361][T15969] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  805.009781][T15969] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  805.043343][T15969] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  805.076026][T15969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.100917][T30789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11830'.
[  805.129284][T15969] usb 7-1: Product: syz
[  805.137758][T15969] usb 7-1: Manufacturer: syz
[  805.155009][T15969] usb 7-1: SerialNumber: syz
[  805.194533][T15969] usb 7-1: config 0 descriptor??
[  805.636883][T15969] radio-si470x 7-1:0.35: DeviceID=0x9242 ChipID=0x0000
[  805.646273][T15969] radio-si470x 7-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  805.837744][T15969] radio-si470x 7-1:0.35: si470x_get_report: usb_control_msg returned -71
[  805.853389][T15969] radio-si470x 7-1:0.35: si470x_get_scratch: si470x_get_report returned -71
[  805.896223][T15969] radio-si470x: probe of 7-1:0.35 failed with error -5
[  805.949481][T15969] radio-raremono 7-1:0.35: this is not Thanko's Raremono.
[  805.974828][T15969] usb 7-1: USB disconnect, device number 25
[  806.441865][ T8302] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  806.659281][ T8302] usb 6-1: Using ep0 maxpacket: 32
[  806.666061][ T8302] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 130, changing to 11
[  806.680674][T30841] loop6: detected capacity change from 0 to 4096
[  806.690150][ T8302] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024
[  806.718513][T30841] EXT4-fs: inline encryption not supported
[  806.729194][ T8302] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  806.743882][ T8302] usb 6-1: config 0 interface 0 has no altsetting 0
[  806.776216][T30841] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  806.782052][T30847] loop3: detected capacity change from 0 to 2048
[  806.787827][ T8302] usb 6-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[  806.830853][T30841] EXT4-fs (loop6): Test dummy encryption mode enabled
[  806.838441][T30847] /dev/loop3: Can't open blockdev
[  806.861212][ T8302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.887274][T30841] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  806.947303][T30841] System zones: 0-5
[  806.956250][ T8302] usb 6-1: config 0 descriptor??
[  806.984991][T30841] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  807.145475][T20132] EXT4-fs (loop6): unmounting filesystem.
[  807.341070][T30861] loop2: detected capacity change from 0 to 4096
[  807.382890][T30861] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  807.399289][ T8302] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0935.0007/input/input52
[  807.437445][T30861] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  807.477228][T30866] netlink: 332 bytes leftover after parsing attributes in process `syz.7.11870'.
[  807.493134][T30861] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  807.504819][T30866] netlink: 196 bytes leftover after parsing attributes in process `syz.7.11870'.
[  807.515307][T30861] ntfs: volume version 3.1.
[  807.542885][ T8302] uclogic 0003:28BD:0935.0007: input,hidraw0: USB HID v1.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.5-1/input0
[  807.620422][T15969] usb 6-1: USB disconnect, device number 32
[  807.773987][ T4272] ntfs: (device loop2): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  807.929550][T30870] fido_id[30870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  808.303641][T30884] loop7: detected capacity change from 0 to 2048
[  808.362917][T30868] loop3: detected capacity change from 0 to 32768
[  808.406762][T30884] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  808.422195][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  808.702319][T20217] EXT4-fs (loop7): unmounting filesystem.
[  808.874520][T30900] loop6: detected capacity change from 0 to 4096
[  808.885089][T30902] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  808.895184][T30902] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  808.903980][T30902] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  808.912737][T30902] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  808.951978][T30906] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11883'.
[  808.985634][T30909] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  808.986091][T30900] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  809.119327][T30900] NILFS (loop6): mounting fs with errors
[  809.707245][T30923] loop2: detected capacity change from 0 to 4096
[  809.768690][T30923] EXT4-fs: Ignoring removed orlov option
[  809.842943][T30931] loop5: detected capacity change from 0 to 2048
[  809.857312][T30923] EXT4-fs (loop2): Test dummy encryption mode enabled
[  809.917720][T30923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  810.058767][T30931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  810.301430][T14665] EXT4-fs (loop5): unmounting filesystem.
[  810.430476][T30923] fscrypt (loop2): Error allocating 'cts(cbc(aes))' transform: -4
[  810.461545][T30947] fscrypt (loop2): Error allocating 'cts(cbc(aes))' transform: -4
[  810.645121][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  811.046770][T30928] loop3: detected capacity change from 0 to 40427
[  811.066890][T30974] loop2: detected capacity change from 0 to 128
[  811.161644][T30974] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  811.247470][T30974] System zones: 1-3, 19-19, 35-36
[  811.253869][T30974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  811.284793][T30974] ext4 filesystem being mounted at /2414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  811.338386][T30974] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full
[  811.470906][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  811.664562][   T26] audit: type=1326 audit(1785291362.563:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30983 comm="syz.2.11905" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5b9de99 code=0x7ffc0000
[  811.689090][T30966] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop5 scanned by syz.5.11901 (30966)
[  811.745926][T30966] BTRFS info (device loop5): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  811.779209][   T26] audit: type=1326 audit(1785291362.563:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30983 comm="syz.2.11905" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2d5b9de99 code=0x7ffc0000
[  811.810305][T30966] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  811.839331][T30966] BTRFS info (device loop5): using free space tree
[  811.885375][   T26] audit: type=1326 audit(1785291362.563:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30983 comm="syz.2.11905" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5b9de99 code=0x7ffc0000
[  811.947869][T30967] set_capacity_and_notify: 1 callbacks suppressed
[  811.947885][T30967] loop7: detected capacity change from 0 to 32768
[  812.011972][T30967] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.11902 (30967)
[  812.057300][T31000] loop2: detected capacity change from 0 to 256
[  812.109149][   T26] audit: type=1326 audit(1785291362.563:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30983 comm="syz.2.11905" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5b9de99 code=0x7ffc0000
[  812.133668][   T26] audit: type=1326 audit(1785291362.563:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30983 comm="syz.2.11905" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fc2d5b9de99 code=0x7ffc0000
[  812.165251][   T26] audit: type=1326 audit(1785291362.563:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30983 comm="syz.2.11905" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5b9de99 code=0x7ffc0000
[  812.190475][   T26] audit: type=1326 audit(1785291362.563:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30983 comm="syz.2.11905" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d5b9de99 code=0x7ffc0000
[  812.354758][T30967] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  812.374470][T30966] BTRFS info (device loop5): enabling ssd optimizations
[  812.427857][T30967] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  812.462715][T30967] BTRFS info (device loop7): setting nodatasum
[  812.501613][T30967] BTRFS info (device loop7): force zlib compression, level 3
[  812.548943][T30967] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8)
[  812.558237][T30967] BTRFS info (device loop7): use lzo compression, level 0
[  812.620899][T30967] BTRFS info (device loop7): turning on flush-on-commit
[  812.627950][T30967] BTRFS info (device loop7): enabling auto defrag
[  812.669232][T30967] BTRFS info (device loop7): max_inline at 4096
[  812.679391][T30967] BTRFS info (device loop7): turning on async discard
[  812.686251][T30967] BTRFS info (device loop7): using free space tree
[  812.695647][T14665] BTRFS info (device loop5): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  812.749553][T31020] loop2: detected capacity change from 0 to 4096
[  812.943981][T31035] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  812.949997][T31018] loop3: detected capacity change from 0 to 32768
[  812.984287][T31038] loop6: detected capacity change from 0 to 512
[  813.155807][T31018] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped.
[  813.169157][T31038] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  813.177101][T31038] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  813.215584][T31020] NILFS (loop2): unrecognized mount option "jqfmt=vfsv0"
[  813.263326][T31018] ocfs2: Mounting device (7,3) on (node local, slot 65535) with ordered data mode.
[  813.288926][T31038] System zones: 0-1, 15-15, 18-18, 34-34
[  813.295742][T31038] EXT4-fs (loop6): orphan cleanup on readonly fs
[  813.302576][T31038] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  813.312257][T31038] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  813.327165][T31038] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  813.340124][T31038] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.11917: bad orphan inode 16
[  813.409105][T31038] ext4_test_bit(bit=15, block=18) = 1
[  813.414552][T31038] is_bad_inode(inode)=0
[  813.446133][T31038] NEXT_ORPHAN(inode)=0
[  813.470842][T31038] max_ino=32
[  813.474113][T31038] i_nlink=2
[  813.477335][T31038] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  813.546624][ T6085] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 10 /dev/loop5 scanned by udevd (6085)
[  813.554751][T31038] fscrypt (loop6, inode 16): Error -61 getting encryption context
[  813.567566][ T4282] INFO: trying to register non-static key.
[  813.573402][ T4282] The code is fine but needs lockdep annotation, or maybe
[  813.580513][ T4282] you didn't initialize this object before use?
[  813.586760][ T4282] turning off the locking correctness validator.
[  813.593093][ T4282] CPU: 0 PID: 4282 Comm: syz-executor Not tainted syzkaller #0
[  813.600736][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  813.610793][ T4282] Call Trace:
[  813.614062][ T4282]  <TASK>
[  813.616995][ T4282]  dump_stack_lvl+0x188/0x24e
[  813.621686][ T4282]  ? show_regs_print_info+0x12/0x12
[  813.626915][ T4282]  ? load_image+0x410/0x410
[  813.631444][ T4282]  ? _find_next_bit+0x11e/0x130
[  813.636441][ T4282]  ? __is_module_percpu_address+0x279/0x3b0
[  813.642425][ T4282]  ? is_kernel_percpu_address+0x18f/0x1b0
[  813.648123][T30967] BTRFS info (device loop7): enabling ssd optimizations
[  813.648214][ T4282]  assign_lock_key+0x201/0x230
[  813.659941][ T4282]  ? SOFTIRQ_verbose+0x10/0x10
[  813.664732][ T4282]  register_lock_class+0x21d/0x870
[  813.669867][ T4282]  ? mark_lock+0x94/0x320
[  813.674222][ T4282]  ? is_dynamic_key+0x260/0x260
[  813.679099][ T4282]  ? __lock_acquire+0x1465/0x7c40
[  813.684150][ T4282]  __lock_acquire+0x172/0x7c40
[  813.688941][ T4282]  ? kernel_text_address+0x9c/0xd0
[  813.694201][ T4282]  ? __kernel_text_address+0x9/0x30
[  813.699427][ T4282]  ? verify_lock_unused+0x140/0x140
[  813.704693][ T4282]  ? verify_lock_unused+0x140/0x140
[  813.709918][ T4282]  ? stack_trace_save+0xa6/0xf0
[  813.714790][ T4282]  ? __stack_depot_save+0x35/0x480
[  813.719999][ T4282]  lock_acquire+0x1bb/0x4a0
[  813.724531][ T4282]  ? ocfs2_mark_lockres_freeing+0x14a/0x5a0
[  813.730535][ T4282]  ? memset+0x1e/0x40
[  813.734744][ T4282]  ? read_lock_is_recursive+0x10/0x10
[  813.740109][ T4282]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[  813.746375][ T4282]  ? lockdep_hardirqs_on+0x94/0x140
[  813.751567][ T4282]  _raw_spin_lock_irqsave+0xb0/0x100
[  813.756849][ T4282]  ? ocfs2_mark_lockres_freeing+0x14a/0x5a0
[  813.762735][ T4282]  ? _raw_spin_lock+0x40/0x40
[  813.767402][ T4282]  ? ktime_get+0x247/0x270
[  813.771808][ T4282]  ocfs2_mark_lockres_freeing+0x14a/0x5a0
[  813.777521][ T4282]  ? ocfs2_dlm_shutdown+0x230/0x230
[  813.782710][ T4282]  ? slab_free_freelist_hook+0x133/0x1b0
[  813.788336][ T4282]  ? ocfs2_journal_shutdown+0x68e/0xc40
[  813.793879][ T4282]  ? ocfs2_journal_init+0xd40/0xd40
[  813.799070][ T4282]  ocfs2_dlm_shutdown+0x33/0x230
[  813.804000][ T4282]  ocfs2_dismount_volume+0x479/0x940
[  813.809394][ T4282]  ? ocfs2_enable_quotas+0x4a0/0x4a0
[  813.814696][ T4282]  ? clear_inode+0x150/0x150
[  813.819283][ T4282]  ? dput+0x37/0x1d0
[  813.823179][ T4282]  ? ocfs2_free_inode+0x20/0x20
[  813.828021][ T4282]  generic_shutdown_super+0x130/0x340
[  813.833405][ T4282]  kill_block_super+0x7c/0xe0
[  813.838075][ T4282]  deactivate_locked_super+0x93/0xf0
[  813.843354][ T4282]  cleanup_mnt+0x471/0x4f0
[  813.847832][ T4282]  task_work_run+0x1d0/0x260
[  813.852417][ T4282]  ? task_work_cancel+0x220/0x220
[  813.857453][ T4282]  ? exit_to_user_mode_loop+0x3b/0x110
[  813.862955][ T4282]  exit_to_user_mode_loop+0xe6/0x110
[  813.868234][ T4282]  exit_to_user_mode_prepare+0xee/0x180
[  813.873773][ T4282]  syscall_exit_to_user_mode+0x16/0x40
[  813.879222][ T4282]  do_syscall_64+0x58/0xa0
[  813.883628][ T4282]  ? clear_bhb_loop+0x60/0xb0
[  813.888306][ T4282]  ? clear_bhb_loop+0x60/0xb0
[  813.892975][ T4282]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  813.898861][ T4282] RIP: 0033:0x7f2abd99f0d7
[  813.903266][ T4282] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  813.922872][ T4282] RSP: 002b:00007ffc3e7972a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  813.931276][ T4282] RAX: 0000000000000000 RBX: 00007f2abda3330a RCX: 00007f2abd99f0d7
[  813.939582][ T4282] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3e797360
[  813.947540][ T4282] RBP: 00007ffc3e797360 R08: 00007ffc3e798360 R09: 00000000ffffffff
[  813.955498][ T4282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3e7983f0
[  813.963457][ T4282] R13: 00007f2abda3330a R14: 00000000000c695e R15: 00007ffc3e798430
[  813.971443][ T4282]  </TASK>
[  814.013947][T20217] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  814.016446][ T4282] ocfs2: Unmounting device (7,3) on (node local)
[  814.121300][T20132] EXT4-fs (loop6): unmounting filesystem.