last executing test programs:

6.535508445s ago: executing program 2 (id=1006):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000003a"])

6.522891096s ago: executing program 0 (id=1008):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
openat$dir(0xffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x401)

5.97402398s ago: executing program 2 (id=1013):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b4b, &(0x7f0000000500)={0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0})

5.73714948s ago: executing program 2 (id=1015):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000950000400000000057"])

5.464988212s ago: executing program 2 (id=1016):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x19}, @val={0x0, 0x3, 0x1, 0x10, 0x2, 0x3}, @eth={@multicast, @multicast, @void, {@canfd={0xd, {{0x2}, 0x18, 0x2, 0x0, 0x0, "c81fcd17ec803cbb43e3d31bb41a0ec606d2c8b8ac7bdf836d4cf2cd00ddd73e7f5f83a48ad36e1b07d51d201687b1bbafb4d181091d1aeedd73a5d1de87ffc7"}}}}}, 0x64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

5.209694332s ago: executing program 0 (id=1021):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

4.385913468s ago: executing program 1 (id=1028):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.333708372s ago: executing program 1 (id=1030):
r0 = semget$private(0x0, 0x1, 0x0)
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x7, 0x800}, {0x3, 0x2, 0x1000}, {0x0, 0x7, 0x1000}, {0x1, 0x2, 0x3800}], 0x4, &(0x7f0000000080)={0x77359400})
semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0xffff, 0x1000}], 0x1, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0xfe])

4.286875706s ago: executing program 0 (id=1031):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffffffff}]}}]}, 0x40}}, 0x0)

4.157099526s ago: executing program 1 (id=1032):
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201000000090400000102060000052406000105240000000d240f013809926b000000800006241a0200150905810300023e0000090401"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

4.156664247s ago: executing program 0 (id=1034):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001c80)="798e17a462", 0x5}, {&(0x7f00000001c0)="f046930fa55abd012495a5cfd6dadd38aefd099ef2872c528fba3a7ae77cf3e61d6b48c5316b2b89011110419e", 0xfffffff2}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="68000000000000003a0000000400000012331f3a8113e5e07fb96a48595b3351314fb24bdf97abcfe84a530ffb7d8215e5cbbf5a5154b278e958ff8532d2fc4fff64e77cb0c8bcd7663b222f3e5626bdab8b1e91264e309ecbc2bf397a79573fba00000000000000f8"], 0x160}}], 0x2, 0x20004840)

3.36677286s ago: executing program 3 (id=1035):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001080)={0x90000009})

3.23830184s ago: executing program 0 (id=1036):
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8)
syz_usb_connect$printer(0x5, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x7, 0x1, 0x1, 0x70, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xb, 0xff, 0xc}}]}}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x1c, &(0x7f0000000a40)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "b3e534cf348fcf6b049c4a4afba0ba63"}]}})
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000001ec0))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001fc0)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@initdev}, 0x0, @in6}}, 0x0)

2.173964936s ago: executing program 1 (id=1037):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

2.173785096s ago: executing program 2 (id=1038):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], '%'}]}}, &(0x7f0000000000)=""/155, 0x2a, 0x9b, 0x1}, 0x28)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b000000a1"], 0x0}, 0x0)

2.021724658s ago: executing program 4 (id=1039):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
tkill(r0, 0x1b)

1.978670412s ago: executing program 4 (id=1040):
syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000240)='./file2\x00', 0x22200c8c, &(0x7f0000000000)=ANY=[], 0x1, 0x1526, &(0x7f000000a000)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x23)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

1.463540543s ago: executing program 4 (id=1041):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x2, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8, 0x14}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e23}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

1.385850969s ago: executing program 0 (id=1042):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1.25126121s ago: executing program 4 (id=1043):
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={'cmac-aes-neon\x00'}})
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}})

1.142927059s ago: executing program 3 (id=1044):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0)

1.066012915s ago: executing program 4 (id=1045):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@noquota}, {@debug}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184)
lseek(r0, 0x8, 0x1)
getdents(r0, 0x0, 0x40)

700.548244ms ago: executing program 4 (id=1046):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c6e6f61636c2c6572726f72733d636f6e74696e75652c00edc97523793b5022d016bb24c65ba594abbd38fd9c301bfa101e61d574eb5cc84215aa20846b6f33df6281eaedb4b4afaaacd321e4df0d16b4f5a8a992efe2554b52ec9c980e5544cd4b8df3e1ba594d07e0bfe3471c164430a36b7ebddc35caf2959224d8330f1807117fc520d8ff5660c5691afd66a8e397bb802ed69df198008fb799cc37"], 0x1, 0x470e, &(0x7f0000008f40)="$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")
syz_clone(0x8080000, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

698.404064ms ago: executing program 1 (id=1056):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xe, 0x3}, {0x3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x2c}}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800)

697.937085ms ago: executing program 3 (id=1047):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)

601.988982ms ago: executing program 3 (id=1048):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x6, 0x96f9, 0x7}}}}}}, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400005aa, 0x0)

601.718252ms ago: executing program 3 (id=1049):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c00, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f0000012d80)="$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")
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

601.599492ms ago: executing program 1 (id=1050):
r0 = socket(0x2, 0x3, 0x9)
getsockopt(r0, 0xff, 0x100000000000001, 0x0, 0x0)
r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xac, 0x9b, 0xcc, 0x20, 0x18d1, 0x1eaf, 0x5abb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x0, 0x80, 0xb, [{{0x9, 0x4, 0xbb, 0x6, 0x1, 0x3a, 0xe5, 0x4, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x10, 0x75, 0x1, 0x2}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB='@\r!'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

20.969319ms ago: executing program 2 (id=1051):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea61", 0x2}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

0s ago: executing program 3 (id=1052):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18}, 0x0)

kernel console output (not intermixed with test programs):

or, different from the interface descriptor's value: 144
[   71.029521][   T23] usb 4-1: config 0 interface 0 has no altsetting 0
[   71.050806][ T4785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.171'.
[   71.087015][ T4769] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[   71.106081][ T4769] usb 2-1: config 0 has no interface number 0
[   71.187507][ T4783] loop4: detected capacity change from 0 to 32768
[   71.226167][   T23] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   71.244506][   T23] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   71.257536][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.257584][   T23] usb 4-1: Product: syz
[   71.257601][   T23] usb 4-1: Manufacturer: syz
[   71.257616][   T23] usb 4-1: SerialNumber: syz
[   71.264107][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.279569][   T23] usb 4-1: config 0 descriptor??
[   71.284062][ T4769] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   71.298447][ T4769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.307777][ T4769] usb 2-1: Product: syz
[   71.312108][ T4769] usb 2-1: Manufacturer: syz
[   71.325998][ T4769] usb 2-1: SerialNumber: syz
[   71.332715][ T4769] usb 2-1: config 0 descriptor??
[   71.342810][ T4783] XFS (loop4): Mounting V5 Filesystem
[   71.349878][   T23] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   71.361439][   T23] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   71.377064][ T4769] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   71.425127][ T4783] XFS (loop4): Ending clean mount
[   71.438599][ T4783] XFS (loop4): Quotacheck needed: Please wait.
[   71.467056][ T4783] XFS (loop4): Quotacheck: Done.
[   71.530100][ T4184] XFS (loop4): Unmounting Filesystem
[   71.600400][ T4769] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   71.614396][    T7] usb 4-1: USB disconnect, device number 4
[   71.620532][    C0] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[   71.632741][ T4769] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   71.644494][    T7] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[   72.008487][   T23] usb 2-1: USB disconnect, device number 2
[   72.026049][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -108
[   72.035752][   T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   72.052544][   T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   72.065285][   T23] quatech2 2-1:0.51: device disconnected
[   72.651804][ T4803] loop3: detected capacity change from 0 to 1024
[   72.655309][ T4805] loop4: detected capacity change from 0 to 512
[   72.740682][ T4805] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,mb_optimize_scan=0x0000000000000001,barrier,,errors=continue. Quota mode: writeback.
[   72.766321][ T4805] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   73.062714][ T4799] loop2: detected capacity change from 0 to 32768
[   73.174062][ T4799] ERROR: (device loop2): dbDiscardAG: -EIO
[   73.174062][ T4799] 
[   73.200086][ T4799] ERROR: (device loop2): remounting filesystem as read-only
[   73.283402][ T4826] tap0: tun_chr_ioctl cmd 1074025678
[   73.301650][ T4826] tap0: group set to 0
[   73.550611][ T4837] loop1: detected capacity change from 0 to 128
[   73.664995][ T4815] loop0: detected capacity change from 0 to 40427
[   73.684397][ T4837] EXT4-fs (loop1): Ignoring removed nobh option
[   73.717547][ T4815] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   73.746749][ T4815] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   73.758627][ T4837] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[   73.771718][ T4837] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   73.829936][ T4815] F2FS-fs (loop0): Found nat_bits in checkpoint
[   73.988033][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'.
[   74.004254][ T4856] loop3: detected capacity change from 0 to 256
[   74.020624][ T4815] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   74.038641][ T4815] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   74.047336][ T4860] netlink: 104 bytes leftover after parsing attributes in process `syz.4.208'.
[   74.144369][ T4856] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[   74.286038][ T4866] loop4: detected capacity change from 0 to 512
[   74.348273][ T4856] exFAT-fs (loop3): error, invalid size(size(0) > aligned(9223372036854777344)
[   74.348273][ T4856] 
[   74.413865][ T4866] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,mb_optimize_scan=0x0000000000000001,barrier,,errors=continue. Quota mode: writeback.
[   74.421351][ T4856] exFAT-fs (loop3): Filesystem has been set read-only
[   74.456184][ T4866] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   74.701590][ T4873] loop0: detected capacity change from 0 to 1024
[   74.713732][ T4868] loop1: detected capacity change from 0 to 32768
[   74.788560][ T4868] XFS (loop1): Mounting V5 Filesystem
[   74.999966][ T4888] loop4: detected capacity change from 0 to 164
[   75.017016][ T4868] XFS (loop1): Ending clean mount
[   75.024900][ T4881] loop2: detected capacity change from 0 to 4096
[   75.041315][ T4868] XFS (loop1): Quotacheck needed: Please wait.
[   75.168330][ T4881] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   75.195837][ T4868] XFS (loop1): Quotacheck: Done.
[   75.268878][ T4897] loop0: detected capacity change from 0 to 256
[   75.388035][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'.
[   75.401860][ T4882] loop3: detected capacity change from 0 to 40427
[   75.426425][ T4881] EXT4-fs error (device loop2): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.2.205: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[   75.453831][ T4882] F2FS-fs (loop3): invalid crc value
[   75.455260][ T4183] XFS (loop1): Unmounting Filesystem
[   75.478617][ T4882] F2FS-fs (loop3): Found nat_bits in checkpoint
[   75.528952][ T4881] EXT4-fs error (device loop2): ext4_get_first_dir_block:3619: inode #12: comm syz.2.205: directory missing '..'
[   75.657848][   T26] audit: type=1800 audit(1756466100.167:6): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.205" name="file1" dev="loop2" ino=15 res=0 errno=0
[   75.662461][ T4882] F2FS-fs (loop3): Start checkpoint disabled!
[   75.727453][ T4882] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   75.744144][ T4902] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #15: comm syz.2.205: corrupted inode contents
[   75.802008][ T4910] loop4: detected capacity change from 0 to 1024
[   75.830970][ T4902] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #15: comm syz.2.205: mark_inode_dirty error
[   75.840860][ T4912] loop0: detected capacity change from 0 to 256
[   75.892869][ T4902] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #15: comm syz.2.205: corrupted inode contents
[   75.917789][  T144] attempt to access beyond end of device
[   75.917789][  T144] loop3: rw=2049, want=40976, limit=40427
[   75.960433][ T4902] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.205: mark_inode_dirty error
[   75.999702][ T4912] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[   76.073017][ T4902] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #15: comm syz.2.205: corrupted inode contents
[   76.129842][ T4902] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.205: mark_inode_dirty error
[   76.187405][ T4902] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #15: comm syz.2.205: corrupted inode contents
[   76.198012][ T4912] exFAT-fs (loop0): error, invalid size(size(0) > aligned(9223372036854777344)
[   76.198012][ T4912] 
[   76.247629][ T4902] EXT4-fs error (device loop2): ext4_truncate:4273: inode #15: comm syz.2.205: mark_inode_dirty error
[   76.260911][ T4912] exFAT-fs (loop0): Filesystem has been set read-only
[   76.370668][ T1109] cfg80211: failed to load regulatory.db
[   76.417376][ T1107] ath6kl: Failed to init ath6kl core: -71
[   76.481103][ T1107] ath6kl_usb: probe of 1-1:0.0 failed with error -71
[   76.547237][ T1107] usb 1-1: USB disconnect, device number 2
[   76.561710][ T4935] binder: 4934:4935 ioctl c0306201 200000000040 returned -14
[   76.931343][ T1109] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   77.130346][ T1107] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   77.158871][ T4961] loop2: detected capacity change from 0 to 256
[   77.199015][ T4961] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   77.245771][ T4961] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   77.284228][ T4961] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[   77.303312][ T1109] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[   77.321164][ T1109] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   77.360633][ T1109] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[   77.380085][ T4948] loop4: detected capacity change from 0 to 32768
[   77.406029][ T1107] usb 1-1: Using ep0 maxpacket: 8
[   77.414657][ T1109] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[   77.435287][ T4948] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.229 (4948)
[   77.452169][ T1109] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   77.478761][ T4950] loop3: detected capacity change from 0 to 40427
[   77.485350][ T1109] usb 2-1: config 0 interface 0 has no altsetting 0
[   77.512431][ T4948] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   77.533548][ T4948] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   77.554775][ T1107] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   77.569771][ T1107] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   77.581062][ T4948] BTRFS info (device loop4): use zstd compression, level 3
[   77.606498][ T1107] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   77.607640][ T4950] F2FS-fs (loop3): Found nat_bits in checkpoint
[   77.626235][ T4948] BTRFS info (device loop4): using free space tree
[   77.633088][ T1107] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   77.651466][ T4948] BTRFS info (device loop4): has skinny extents
[   77.659058][ T1109] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   77.659085][ T1109] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   77.659104][ T1109] usb 2-1: Product: syz
[   77.659116][ T1109] usb 2-1: Manufacturer: syz
[   77.659128][ T1109] usb 2-1: SerialNumber: syz
[   77.660786][ T1109] usb 2-1: config 0 descriptor??
[   77.679664][ T1107] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   77.709541][ T1107] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   77.729192][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.766447][ T4942] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   77.791542][ T1109] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   77.837702][ T1109] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   77.876079][ T4950] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   77.936499][ T4950] attempt to access beyond end of device
[   77.936499][ T4950] loop3: rw=2049, want=45104, limit=40427
[   78.053638][ T4966] loop2: detected capacity change from 0 to 32768
[   78.060434][ T1107] usb 1-1: GET_CAPABILITIES returned 0
[   78.069508][ T1107] usbtmc 1-1:16.0: can't read capabilities
[   78.092620][ T4948] BTRFS info (device loop4): enabling ssd optimizations
[   78.100270][ T4186] attempt to access beyond end of device
[   78.100270][ T4186] loop3: rw=2049, want=45112, limit=40427
[   78.159926][ T1107] usb 2-1: USB disconnect, device number 3
[   78.178190][ T1107] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[   78.253787][ T4966] JBD2: Ignoring recovery information on journal
[   78.311526][    T7] usb 1-1: USB disconnect, device number 3
[   78.404138][ T4966] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   78.952948][ T4185] ocfs2: Unmounting device (7,2) on (node local)
[   79.397904][ T5030] loop2: detected capacity change from 0 to 256
[   79.413917][ T5028] loop0: detected capacity change from 0 to 1024
[   79.454960][ T5034] loop4: detected capacity change from 0 to 2048
[   79.456783][ T5030] exfat: Deprecated parameter 'namecase'
[   79.524737][ T5030] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   79.593874][ T5034] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   79.606206][ T5034] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.622426][ T5028] hfsplus: xattr searching failed
[   79.631570][ T5034] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none.
[   79.705503][ T5038] hfsplus: catalog searching failed
[   79.706025][ T4248] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   79.724375][ T5034] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none.
[   79.735987][ T5034] EXT4-fs error (device loop4): __ext4_new_inode:1076: comm syz.4.249: reserved inode found cleared - inode=1
[   79.764656][ T5007] loop3: detected capacity change from 0 to 40427
[   79.782376][ T5007] F2FS-fs (loop3): invalid crc value
[   79.842945][ T4489] hfsplus: b-tree write err: -5, ino 3
[   79.965168][ T5007] F2FS-fs (loop3): Found nat_bits in checkpoint
[   79.966721][ T4248] usb 2-1: Using ep0 maxpacket: 8
[   79.993402][ T5053] capability: warning: `syz.2.256' uses deprecated v2 capabilities in a way that may be insecure
[   80.099131][ T5007] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[   80.132688][ T5007] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   80.148298][ T5060] loop2: detected capacity change from 0 to 64
[   80.296306][ T4248] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[   80.325828][ T4248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.334288][ T4186] attempt to access beyond end of device
[   80.334288][ T4186] loop3: rw=2049, want=45104, limit=40427
[   80.336741][ T4248] usb 2-1: Product: syz
[   80.369365][ T4248] usb 2-1: Manufacturer: syz
[   80.374370][ T4248] usb 2-1: SerialNumber: syz
[   80.393107][ T5068] loop0: detected capacity change from 0 to 256
[   80.403464][ T4248] usb 2-1: config 0 descriptor??
[   80.447879][ T4248] gspca_main: se401-2.14.0 probing 047d:5003
[   80.516048][ T5068] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   80.542334][ T5068] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   80.590742][ T5068] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xce89e5da, utbl_chksum : 0xe619d30d)
[   80.816711][ T5078] loop2: detected capacity change from 0 to 1024
[   80.886374][ T4248] gspca_se401: Too many frame sizes
[   80.909019][ T5078] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.913433][ T5080] loop0: detected capacity change from 0 to 4096
[   81.223162][    T7] usb 2-1: USB disconnect, device number 4
[   81.329553][ T4191] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[   81.344398][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   81.408317][ T5104] loop3: detected capacity change from 0 to 164
[   81.421067][ T5106] loop4: detected capacity change from 0 to 256
[   81.456115][ T4769] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   81.493600][ T5108] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   81.568094][ T5106] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   81.658587][   T26] audit: type=1800 audit(1756466106.167:7): pid=5106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.282" name="file1" dev="loop4" ino=1048612 res=0 errno=0
[   81.672375][ T5106] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   81.696052][ T5106] FAT-fs (loop4): Filesystem has been set read-only
[   81.756174][ T4769] usb 3-1: Using ep0 maxpacket: 16
[   81.881933][ T4769] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.901982][ T4769] usb 3-1: config 0 interface 0 has no altsetting 0
[   81.926210][ T4769] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[   81.966424][ T4769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.026651][ T4769] usb 3-1: config 0 descriptor??
[   82.296813][ T5111] loop0: detected capacity change from 0 to 40427
[   82.384475][ T5111] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[   82.415079][ T5111] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   82.452796][ T5114] loop3: detected capacity change from 0 to 32768
[   82.471648][ T5111] F2FS-fs (loop0): invalid crc value
[   82.506598][ T4769] cougar 0003:060B:500A.0003: unexpected long global item
[   82.525337][ T4769] cougar 0003:060B:500A.0003: parse failed
[   82.532166][ T5114] XFS (loop3): Mounting V5 Filesystem
[   82.545996][ T4769] cougar: probe of 0003:060B:500A.0003 failed with error -22
[   82.587977][ T5111] F2FS-fs (loop0): Found nat_bits in checkpoint
[   82.700188][ T4769] usb 3-1: USB disconnect, device number 4
[   82.714866][ T5114] XFS (loop3): Ending clean mount
[   82.741769][ T5111] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   82.748993][ T5111] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   82.827059][ T5165] loop1: detected capacity change from 0 to 512
[   82.836013][ T4191] attempt to access beyond end of device
[   82.836013][ T4191] loop0: rw=2049, want=45104, limit=40427
[   82.917662][ T4186] XFS (loop3): Unmounting Filesystem
[   83.057564][ T5141] loop4: detected capacity change from 0 to 32768
[   83.112898][ T5165] EXT4-fs (loop1): Test dummy encryption mode enabled
[   83.166015][ T5165] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   83.252623][ T5141] XFS (loop4): logbuf size must be greater than or equal to log stripe size
[   83.303013][ T5165] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.295: bad orphan inode 131083
[   83.336413][ T5165] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[   83.526245][ T5165] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   84.065601][ T5221] loop0: detected capacity change from 0 to 1024
[   84.165319][ T5228] loop3: detected capacity change from 0 to 1024
[   84.178638][ T5229] loop2: detected capacity change from 0 to 1024
[   84.191946][ T5221] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   84.234514][ T5221] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.235244][ T5234] loop1: detected capacity change from 0 to 2048
[   84.266826][   T26] audit: type=1800 audit(1756466108.777:8): pid=5228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.312" name="file1" dev="loop3" ino=20 res=0 errno=0
[   84.308996][ T5229] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   84.354437][ T5234] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   84.380521][ T4248] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   84.403025][   T26] audit: type=1800 audit(1756466108.907:9): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.310" name="file1" dev="loop0" ino=15 res=0 errno=0
[   84.408293][ T5229] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.2.313: bad entry in directory: inode out of bounds - offset=24, inode=983051, rec_len=20, size=1024 fake=0
[   84.460465][ T5229] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem
[   84.472132][ T5243] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.560737][ T5245] loop3: detected capacity change from 0 to 1024
[   84.587767][ T5229] EXT4-fs warning (device loop2): ext4_rename_delete:3792: inode #2: comm syz.2.313: Deleting old file: nlink 4, error=-117
[   84.636014][ T4248] usb 5-1: Using ep0 maxpacket: 32
[   84.761239][ T4248] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[   84.785137][ T4248] usb 5-1: config 0 has no interface number 0
[   84.810610][ T1220] hfsplus: b-tree write err: -5, ino 4
[   84.882278][ T5258] loop1: detected capacity change from 0 to 512
[   84.896163][ T1107] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   84.956237][ T4248] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   84.965411][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.988520][ T4248] usb 5-1: Product: syz
[   84.992727][ T4248] usb 5-1: Manufacturer: syz
[   84.993857][ T5258] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.320: iget: bad i_size value: 38620345925642
[   85.018458][ T4248] usb 5-1: SerialNumber: syz
[   85.034267][ T4248] usb 5-1: config 0 descriptor??
[   85.077302][ T4248] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   85.127415][ T5258] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.320: couldn't read orphan inode 15 (err -117)
[   85.140396][ T5265] loop3: detected capacity change from 0 to 2048
[   85.178161][ T5258] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   85.206093][ T1107] usb 1-1: Using ep0 maxpacket: 32
[   85.242941][ T5265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.288170][ T4248] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   85.318571][ T4248] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   85.371630][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.434938][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.466830][ T1107] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[   85.491721][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.520800][ T1107] usb 1-1: config 0 descriptor??
[   85.566058][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[   85.629651][ T5279] device bridge0 entered promiscuous mode
[   85.651314][ T5279] device macvlan2 entered promiscuous mode
[   85.682643][ T5279] bridge0: port 3(macvlan2) entered blocking state
[   85.719420][ T5279] bridge0: port 3(macvlan2) entered disabled state
[   85.736973][ T5279] device bridge0 left promiscuous mode
[   85.759323][ T4255] usb 5-1: USB disconnect, device number 3
[   85.766025][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[   85.792552][ T4255] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   85.812841][ T4255] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   85.814778][ T5285] loop2: detected capacity change from 0 to 512
[   85.830230][ T4255] quatech2 5-1:0.51: device disconnected
[   85.880570][ T5285] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24500!=4028)
[   85.902799][ T5285] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   85.910849][ T5287] loop1: detected capacity change from 0 to 2048
[   86.063848][ T1107] glorious 0003:258A:0033.0004: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.0-1/input0
[   86.070098][ T5291] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.109180][   T26] audit: type=1800 audit(1756466110.617:10): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.331" name="file2" dev="loop1" ino=16 res=0 errno=0
[   86.168697][ T5287] NILFS (loop1): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0
[   86.189286][ T5287] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16)
[   86.211565][ T5287] Remounting filesystem read-only
[   86.252486][    T7] usb 1-1: USB disconnect, device number 4
[   86.290830][ T4183] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[   86.403333][ T1107] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   86.554807][ T5308] loop1: detected capacity change from 0 to 4096
[   86.648693][ T5308] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   86.675954][ T1107] usb 3-1: Using ep0 maxpacket: 16
[   86.748316][ T4183] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[   86.806426][    T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   87.036253][ T1107] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[   87.039987][ T5331] loop0: detected capacity change from 0 to 1024
[   87.055571][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.064785][ T1107] usb 3-1: Product: syz
[   87.069332][ T1107] usb 3-1: Manufacturer: syz
[   87.073944][ T1107] usb 3-1: SerialNumber: syz
[   87.096045][    T7] usb 4-1: Using ep0 maxpacket: 8
[   87.110662][ T1107] usb 3-1: config 0 descriptor??
[   87.116120][ T4248] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   87.149457][ T5331] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none.
[   87.179257][ T1107] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[   87.210279][ T5327] loop4: detected capacity change from 0 to 32768
[   87.212172][ T5331] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   87.262188][    T7] usb 4-1: descriptor type invalid, skip
[   87.275373][ T5327] XFS (loop4): Mounting V5 Filesystem
[   87.355049][ T5327] XFS (loop4): Ending clean mount
[   87.360753][    T7] usb 4-1: config 0 has no interfaces?
[   87.375227][ T5343] loop0: detected capacity change from 0 to 1024
[   87.396396][ T1107] gp8psk: usb in 128 operation failed.
[   87.418965][ T4184] XFS (loop4): Unmounting Filesystem
[   87.452598][ T1107] gp8psk: usb in 137 operation failed.
[   87.458813][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   87.496426][ T1107] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[   87.502902][ T4248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   87.510273][ T1107] usb 3-1: media controller created
[   87.551042][ T4248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.554913][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   87.569701][    T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   87.574629][ T4248] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   87.585930][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.610787][    T7] usb 4-1: Product: syz
[   87.612406][ T4248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.626495][    T7] usb 4-1: Manufacturer: syz
[   87.631686][    T7] usb 4-1: SerialNumber: syz
[   87.636628][ T4248] usb 2-1: config 0 descriptor??
[   87.653757][ T1107] gp8psk_fe: Frontend revision 1 attached
[   87.662126][    T7] usb 4-1: config 0 descriptor??
[   87.667848][ T1107] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[   87.688363][ T1107] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[   87.885038][ T5355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.357'.
[   88.039724][    T7] usb 4-1: USB disconnect, device number 5
[   88.116272][ T1107] gp8psk: usb in 138 operation failed.
[   88.124040][ T1107] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[   88.155187][ T1107] gp8psk: found Genpix USB device pID = 201 (hex)
[   88.218212][ T1107] usb 3-1: USB disconnect, device number 5
[   88.418907][ T1107] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[   88.747366][ T5357] loop4: detected capacity change from 0 to 40427
[   88.770717][ T5359] loop0: detected capacity change from 0 to 131072
[   88.798584][ T4248] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[   88.802423][ T5357] F2FS-fs (loop4): invalid crc value
[   88.815252][ T4248] usb 2-1: USB disconnect, device number 5
[   88.862135][ T5357] F2FS-fs (loop4): Found nat_bits in checkpoint
[   88.883420][ T5359] F2FS-fs (loop0): Wrong CP boundary, start(512) end(198144) blocks(1024)
[   88.892141][ T5359] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   88.903430][ T5359] F2FS-fs (loop0): invalid crc value
[   88.924519][ T5359] F2FS-fs (loop0): Found nat_bits in checkpoint
[   88.965253][ T5359] F2FS-fs (loop0): recover fsync data on readonly fs
[   88.986244][ T5359] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30
[   88.993493][ T5359] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   89.081884][ T5359] fs-verity (loop0, inode 7): Error -61 getting verity descriptor size
[   89.090274][ T5368] fido_id[5368]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   89.142810][ T5357] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[   89.211942][ T5357] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   89.249622][ T5380] loop1: detected capacity change from 0 to 128
[   89.342905][ T5384] loop0: detected capacity change from 0 to 1024
[   89.404326][ T4184] attempt to access beyond end of device
[   89.404326][ T4184] loop4: rw=2049, want=45104, limit=40427
[   89.610087][ T5397] loop2: detected capacity change from 0 to 256
[   89.708644][ T5397] FAT-fs (loop2): Directory bread(block 64) failed
[   89.738699][ T5397] FAT-fs (loop2): Directory bread(block 65) failed
[   89.745349][ T5397] FAT-fs (loop2): Directory bread(block 66) failed
[   89.756433][ T5397] FAT-fs (loop2): Directory bread(block 67) failed
[   89.778544][ T5397] FAT-fs (loop2): Directory bread(block 68) failed
[   89.834342][ T5397] FAT-fs (loop2): Directory bread(block 69) failed
[   89.886371][ T5397] FAT-fs (loop2): Directory bread(block 70) failed
[   89.893082][ T5397] FAT-fs (loop2): Directory bread(block 71) failed
[   89.926052][ T4255] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   89.961580][ T5397] FAT-fs (loop2): Directory bread(block 72) failed
[   89.977001][ T5397] FAT-fs (loop2): Directory bread(block 73) failed
[   90.170088][ T4255] usb 4-1: Using ep0 maxpacket: 32
[   90.296071][ T4255] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.325867][ T4255] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   90.601296][ T1107] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   90.609686][ T5418] loop2: detected capacity change from 0 to 32768
[   90.620252][ T5421] loop1: detected capacity change from 0 to 8192
[   90.718982][ T5418] (syz.2.381,5418,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   90.732811][ T5418] (syz.2.381,5418,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   90.748888][ T4255] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[   90.763141][ T5421] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   90.769705][ T5418] JBD2: Ignoring recovery information on journal
[   90.802993][ T5421] REISERFS (device loop1): using ordered data mode
[   90.811495][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.821120][ T5421] reiserfs: using flush barriers
[   90.827370][ T4255] usb 4-1: Product: syz
[   90.831886][ T5421] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   90.849071][ T4255] usb 4-1: Manufacturer: syz
[   90.854052][ T5418] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   90.857165][ T5421] REISERFS (device loop1): checking transaction log (loop1)
[   90.866856][ T4255] usb 4-1: SerialNumber: syz
[   90.885609][ T5418] (syz.2.381,5418,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[   90.913527][ T5418] ocfs2: Unmounting device (7,2) on (node local)
[   90.922780][ T4255] usb 4-1: config 0 descriptor??
[   90.967875][ T4255] qmi_wwan: probe of 4-1:0.0 failed with error -22
[   91.036347][ T1107] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   91.050402][ T1107] usb 5-1: config 2 interface 0 has no altsetting 0
[   91.113951][ T4255] kernel write not supported for file /input/event2 (pid: 4255 comm: kworker/1:8)
[   91.126045][ T1325] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   91.135265][ T5421] REISERFS (device loop1): Using tea hash to sort names
[   91.157019][ T5421] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   91.236286][ T1107] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[   91.255576][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.268581][ T1107] usb 5-1: Product: syz
[   91.272763][ T1107] usb 5-1: Manufacturer: syz
[   91.278688][ T1107] usb 5-1: SerialNumber: syz
[   91.333648][ T1107] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[   91.346420][ T1107] usb 5-1: selecting invalid altsetting 0
[   91.368497][ T1107] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[   91.429952][ T5437] loop2: detected capacity change from 0 to 256
[   91.561422][ T1107] usb 5-1: USB disconnect, device number 4
[   91.611861][ T5445] loop1: detected capacity change from 0 to 128
[   91.663657][ T5445] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   91.678428][ T5445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.724115][ T4769] usb 4-1: USB disconnect, device number 6
[   91.746177][ T1325] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[   91.764988][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.776076][ T1325] usb 1-1: Product: syz
[   91.780626][ T1325] usb 1-1: Manufacturer: syz
[   91.782695][ T5450] loop3: detected capacity change from 0 to 256
[   91.791873][ T1325] usb 1-1: SerialNumber: syz
[   91.807421][ T1325] usb 1-1: config 0 descriptor??
[   91.902730][ T5450] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[   92.069697][ T5456] device erspan0 entered promiscuous mode
[   92.076292][ T1325] usb 1-1: ignoring: probably an ADSL modem
[   92.081936][ T5458] netlink: 56 bytes leftover after parsing attributes in process `syz.3.393'.
[   92.095313][ T5458] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'.
[   92.526571][ T1325] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[   92.528956][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'.
[   92.563547][ T5479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.593691][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'.
[   92.603259][ T5479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.619546][ T5479] Zero length message leads to an empty skb
[   92.672433][ T5463] loop1: detected capacity change from 0 to 32768
[   92.706058][ T4255] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   92.732809][ T1325] usb 1-1: USB disconnect, device number 5
[   92.956069][ T4255] usb 5-1: Using ep0 maxpacket: 16
[   93.088227][ T4255] usb 5-1: New USB device found, idVendor=056a, idProduct=0033, bcdDevice= 0.00
[   93.104176][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.106512][ T5486] loop2: detected capacity change from 0 to 65536
[   93.129213][ T4255] usb 5-1: config 0 descriptor??
[   93.208642][ T5486] XFS (loop2): Mounting V5 Filesystem
[   93.224811][ T5497] loop1: detected capacity change from 0 to 64
[   93.268025][ T5486] XFS (loop2): Ending clean mount
[   93.285043][ T5486] XFS (loop2): Quotacheck needed: Please wait.
[   93.392589][ T5486] XFS (loop2): Quotacheck: Done.
[   93.533042][ T4185] XFS (loop2): Unmounting Filesystem
[   93.614594][ T4199] Bluetooth: hci4: link tx timeout
[   93.620116][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[   93.635026][ T4255] wacom 0003:056A:0033.0006: hidraw0: USB HID v0.04 Device [HID 056a:0033] on usb-dummy_hcd.4-1/input0
[   93.678774][ T5511] loop3: detected capacity change from 0 to 512
[   93.795463][ T5511] Quota error (device loop3): v2_read_file_info: Can't read info structure
[   93.838418][ T4255] usb 5-1: USB disconnect, device number 5
[   93.846788][ T5511] EXT4-fs warning (device loop3): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   93.866011][ T5511] EXT4-fs (loop3): mount failed
[   93.957038][ T5514] fido_id[5514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   94.246115][ T1107] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   94.333203][ T5532] loop0: detected capacity change from 0 to 128
[   94.374409][ T5522] loop1: detected capacity change from 0 to 32768
[   94.520227][ T1107] usb 4-1: Using ep0 maxpacket: 32
[   94.533203][ T5522] XFS (loop1): Mounting V5 Filesystem
[   94.615376][ T5522] XFS (loop1): Ending clean mount
[   94.656471][ T1107] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.682795][ T1107] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.730854][ T4183] XFS (loop1): Unmounting Filesystem
[   94.767742][ T1325] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   94.863972][ T1107] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   94.871818][ T5556] loop2: detected capacity change from 0 to 4096
[   94.890749][ T1107] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   94.902118][ T1107] usb 4-1: Product: syz
[   94.906791][ T1107] usb 4-1: Manufacturer: syz
[   94.970058][ T1107] hub 4-1:4.0: USB hub found
[   95.026269][ T1325] usb 5-1: Using ep0 maxpacket: 32
[   95.181326][ T1107] hub 4-1:4.0: 2 ports detected
[   95.186406][ T1325] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   95.194403][ T1325] usb 5-1: config 0 has no interface number 0
[   95.215986][ T1325] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.244039][ T1325] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.259341][ T1325] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[   95.281377][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.311122][ T1325] usb 5-1: config 0 descriptor??
[   95.390500][ T1107] hub 4-1:4.0: hub_hub_status failed (err = -71)
[   95.392469][ T5560] loop0: detected capacity change from 0 to 32768
[   95.397564][ T1107] hub 4-1:4.0: config failed, can't get hub status (err -71)
[   95.430235][ T1107] usb 4-1: USB disconnect, device number 7
[   95.445170][ T5560] JBD2: Ignoring recovery information on journal
[   95.473666][ T5560] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   95.540772][ T4191] ocfs2: Unmounting device (7,0) on (node local)
[   95.617902][ T4199] Bluetooth: hci4: link tx timeout
[   95.623057][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[   95.645992][   T23] Bluetooth: hci4: command 0x0406 tx timeout
[   95.860382][ T4199] Bluetooth: hci4: link tx timeout
[   95.865568][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[   96.004594][ T1325] uclogic 0003:28BD:0094.0007: failed retrieving string descriptor #100: -71
[   96.051466][ T1325] uclogic 0003:28BD:0094.0007: failed retrieving pen parameters: -71
[   96.075275][ T1325] uclogic 0003:28BD:0094.0007: pen probing failed: -71
[   96.115626][ T1325] uclogic 0003:28BD:0094.0007: failed probing parameters: -71
[   96.178646][ T1325] uclogic: probe of 0003:28BD:0094.0007 failed with error -71
[   96.180973][ T5587] loop0: detected capacity change from 0 to 32768
[   96.212890][ T1325] usb 5-1: USB disconnect, device number 6
[   96.330781][ T5587] XFS (loop0): Mounting V5 Filesystem
[   96.465781][ T5587] XFS (loop0): Ending clean mount
[   96.711259][ T4191] XFS (loop0): Unmounting Filesystem
[   96.743437][ T5633] loop4: detected capacity change from 0 to 4096
[   96.793398][ T5643] netlink: 124 bytes leftover after parsing attributes in process `syz.3.458'.
[   96.809947][ T5634] loop1: detected capacity change from 0 to 4096
[   96.903985][ T5634] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[   97.434561][ T4199] Bluetooth: hci4: link tx timeout
[   97.439797][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[   97.467486][ T5675] loop1: detected capacity change from 0 to 128
[   97.617467][ T4199] Bluetooth: hci4: link tx timeout
[   97.623074][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[   97.667327][ T5675] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   97.693213][ T5663] loop2: detected capacity change from 0 to 40427
[   97.730209][ T5675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.746600][ T5663] F2FS-fs (loop2): invalid crc value
[   97.794195][ T5663] F2FS-fs (loop2): Found nat_bits in checkpoint
[   97.924897][ T5663] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[   97.953341][ T5663] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   97.979434][ T5657] loop4: detected capacity change from 0 to 32768
[   98.042159][ T5685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.474'.
[   98.111099][ T4185] attempt to access beyond end of device
[   98.111099][ T4185] loop2: rw=2049, want=45104, limit=40427
[   98.168018][ T5657] JBD2: Ignoring recovery information on journal
[   98.219244][ T5688] loop1: detected capacity change from 0 to 64
[   98.362521][ T5679] loop3: detected capacity change from 0 to 32768
[   98.372488][ T5657] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   98.393525][ T5679] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.473 (5679)
[   98.457238][ T5679] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   98.523539][ T5679] BTRFS info (device loop3): using free space tree
[   98.542229][ T5679] BTRFS info (device loop3): has skinny extents
[   98.611577][ T4184] ocfs2: Unmounting device (7,4) on (node local)
[   98.910030][ T5710] loop1: detected capacity change from 0 to 4096
[   98.936216][ T5679] BTRFS info (device loop3): enabling ssd optimizations
[   99.015317][ T5710] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[   99.078950][ T5725] loop4: detected capacity change from 0 to 8
[   99.205440][ T5725] SQUASHFS error: lzo decompression failed, data probably corrupt
[   99.230262][ T5725] SQUASHFS error: Failed to read block 0x91: -5
[   99.255281][ T5725] SQUASHFS error: Unable to read metadata cache entry [8f]
[   99.296423][ T5725] SQUASHFS error: Unable to read inode 0x11f
[   99.589968][ T5707] loop0: detected capacity change from 0 to 32768
[   99.873175][ T5750] loop4: detected capacity change from 0 to 4096
[   99.989020][ T5755] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.010795][ T5737] loop2: detected capacity change from 0 to 32768
[  100.035486][ T5750] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  100.062440][ T5750] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12)
[  100.106841][ T5759] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  100.133656][ T5737] XFS (loop2): Mounting V5 Filesystem
[  100.147802][ T5750] Remounting filesystem read-only
[  100.165058][ T5750] NILFS (loop4): error -5 truncating bmap (ino=12)
[  100.166075][ T5759] overlayfs: missing 'lowerdir'
[  100.212005][ T5737] XFS (loop2): Ending clean mount
[  100.240893][ T5737] XFS (loop2): Quotacheck needed: Please wait.
[  100.267755][ T4184] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  100.440955][ T5737] XFS (loop2): Quotacheck: Done.
[  100.568428][ T4185] XFS (loop2): Unmounting Filesystem
[  100.744123][ T5783] loop3: detected capacity change from 0 to 64
[  100.858332][ T5783] hfs: small file entry
[  101.114442][ T5778] loop1: detected capacity change from 0 to 32768
[  101.286158][ T5778] XFS (loop1): Mounting V5 Filesystem
[  101.399718][ T5806] loop3: detected capacity change from 0 to 4096
[  101.422446][ T5778] XFS (loop1): Ending clean mount
[  101.434255][ T5778] XFS (loop1): Quotacheck needed: Please wait.
[  101.483663][ T5778] XFS (loop1): Quotacheck: Done.
[  101.542226][ T5806] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  101.687906][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'.
[  101.705182][ T4183] XFS (loop1): Unmounting Filesystem
[  101.873167][ T5826] loop2: detected capacity change from 0 to 2048
[  101.958092][ T5826] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,grpid,abort,sb=0x0000000000000004,,errors=continue. Quota mode: none.
[  102.007362][ T5826] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.426995][ T5850] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  102.426995][ T5850] The task syz.0.519 (5850) triggered the difference, watch for misbehavior.
[  102.519254][ T5837] loop1: detected capacity change from 0 to 32768
[  102.591633][ T5837] JBD2: Ignoring recovery information on journal
[  102.635861][ T5837] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  102.656169][ T4248] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  102.740899][ T5856] loop4: detected capacity change from 0 to 128
[  102.754269][ T4183] ocfs2: Unmounting device (7,1) on (node local)
[  102.872426][ T5849] loop2: detected capacity change from 0 to 32768
[  103.010045][ T5849] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt
[  103.010045][ T5849] 
[  103.026114][ T4248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  103.048727][ T5849] ERROR: (device loop2): remounting filesystem as read-only
[  103.067637][ T4248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.070832][ T5849] jfs_lookup: dtSearch returned -5
[  103.097796][ T4248] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  103.118004][ T4248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.157976][ T4248] usb 4-1: config 0 descriptor??
[  103.231416][  T276] blkno = 8ed2c, nblocks = 1
[  103.255761][  T276] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  103.255761][  T276] 
[  103.283875][  T276] JFS: metapage_get_blocks failed
[  103.303617][  T276] ERROR: (device loop2): release_metapage: write_one_page() failed
[  103.303617][  T276] 
[  103.308048][ T5870] tap0: tun_chr_ioctl cmd 1074025677
[  103.315331][  T276] blkno = 8ed2c, nblocks = 1
[  103.324675][ T5870] tap0: linktype set to 270
[  103.329186][  T276] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  103.329186][  T276] 
[  103.675860][ T4248] isku 0003:1E7D:319C.0008: unknown main item tag 0x0
[  103.682862][ T4248] isku 0003:1E7D:319C.0008: unknown main item tag 0x0
[  103.785729][ T4248] isku 0003:1E7D:319C.0008: unknown main item tag 0x0
[  103.822166][ T5886] netlink: 'syz.0.538': attribute type 11 has an invalid length.
[  103.832163][ T4248] isku 0003:1E7D:319C.0008: item fetching failed at offset 3/7
[  103.874620][ T4248] isku 0003:1E7D:319C.0008: parse failed
[  103.887292][ T4248] isku: probe of 0003:1E7D:319C.0008 failed with error -22
[  103.915109][ T4248] usb 4-1: USB disconnect, device number 8
[  104.187415][ T5888] loop2: detected capacity change from 0 to 32768
[  104.250255][ T5888] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.528 (5888)
[  104.334751][ T5884] loop1: detected capacity change from 0 to 32768
[  104.348938][ T5888] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  104.373288][ T5888] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  104.396029][ T5888] BTRFS info (device loop2): use zstd compression, level 3
[  104.409489][ T5888] BTRFS info (device loop2): using free space tree
[  104.418092][ T5888] BTRFS info (device loop2): has skinny extents
[  104.643075][ T5888] BTRFS info (device loop2): enabling ssd optimizations
[  104.749014][ T5890] loop0: detected capacity change from 0 to 40427
[  104.825135][ T5890] F2FS-fs (loop0): invalid crc value
[  104.880809][ T5890] F2FS-fs (loop0): Found nat_bits in checkpoint
[  104.939903][ T5890] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  104.954050][ T5890] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  105.176193][ T4487] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (4487)
[  105.404355][ T4191] attempt to access beyond end of device
[  105.404355][ T4191] loop0: rw=2049, want=45104, limit=40427
[  105.554507][ T5912] loop3: detected capacity change from 0 to 32768
[  105.649243][ T5912] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.554 (5912)
[  105.724589][ T5912] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  105.791014][ T5912] BTRFS info (device loop3): turning on sync discard
[  105.818233][ T5912] BTRFS info (device loop3): enabling auto defrag
[  105.824689][ T5912] BTRFS info (device loop3): enabling ssd optimizations
[  105.878447][ T5912] BTRFS info (device loop3): force clearing of disk cache
[  105.885643][ T5912] BTRFS info (device loop3): not using ssd optimizations
[  105.930934][ T5912] BTRFS info (device loop3): disabling free space tree
[  105.951867][ T5912] BTRFS info (device loop3): has skinny extents
[  106.178706][ T5912] BTRFS info (device loop3): clearing free space tree
[  106.215831][ T5912] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  106.228166][ T5912] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  106.381597][   T26] audit: type=1800 audit(1756466130.887:11): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.554" name="bus" dev="loop3" ino=263 res=0 errno=0
[  106.418463][ T5944] loop4: detected capacity change from 0 to 32768
[  106.491095][ T5944] XFS (loop4): Mounting V5 Filesystem
[  106.596001][ T5944] XFS (loop4): Ending clean mount
[  106.619669][ T5944] XFS (loop4): Quotacheck needed: Please wait.
[  106.869649][ T5944] XFS (loop4): Quotacheck: Done.
[  106.964978][ T5989] netlink: 'syz.2.556': attribute type 11 has an invalid length.
[  106.983580][ T4184] XFS (loop4): Unmounting Filesystem
[  107.538884][ T6012] loop4: detected capacity change from 0 to 1764
[  107.596022][ T5751] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  107.629907][ T6000] loop1: detected capacity change from 0 to 32768
[  107.700479][ T6000] (syz.1.577,6000,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  107.723006][ T6000] (syz.1.577,6000,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  107.780338][ T6000] (syz.1.577,6000,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  107.823307][ T6000] JBD2: Ignoring recovery information on journal
[  107.874844][ T6000] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  107.956249][ T5751] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.996021][ T5751] usb 3-1: config 0 interface 0 has no altsetting 0
[  108.010215][ T5751] usb 3-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00
[  108.029775][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.056984][ T5751] usb 3-1: config 0 descriptor??
[  108.083098][ T6000] (syz.1.577,6000,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  108.115789][ T6000] (syz.1.577,6000,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  108.139117][ T6000] (syz.1.577,6000,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  108.186726][ T6000] (syz.1.577,6000,0):ocfs2_quota_read:201 ERROR: status = -5
[  108.207946][ T6000] Quota error (device loop1): find_next_id: Can't read quota tree block 5
[  108.274228][ T6000] (syz.1.577,6000,1):ocfs2_get_next_id:909 ERROR: status = -5
[  108.295673][ T6025] (syz.1.577,6025,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  108.406083][ T6025] (syz.1.577,6025,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  108.460489][ T6025] (syz.1.577,6025,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  108.505715][ T6025] (syz.1.577,6025,1):ocfs2_quota_read:201 ERROR: status = -5
[  108.535915][ T6025] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5
[  108.591366][ T6025] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  108.626001][ T6025] (syz.1.577,6025,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  108.663173][ T6025] (syz.1.577,6025,1):ocfs2_mknod:314 ERROR: status = -5
[  108.676158][ T6025] (syz.1.577,6025,1):ocfs2_mknod:502 ERROR: status = -5
[  108.713792][ T6025] (syz.1.577,6025,1):ocfs2_create:676 ERROR: status = -5
[  108.805396][ T4183] (syz-executor,4183,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  108.850235][ T4183] (syz-executor,4183,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  108.883890][ T4183] (syz-executor,4183,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  108.909458][ T4183] (syz-executor,4183,1):ocfs2_quota_read:201 ERROR: status = -5
[  108.929552][ T4183] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5
[  108.956349][ T4183] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  108.983031][ T4183] (syz-executor,4183,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  109.050288][ T4183] ocfs2: Unmounting device (7,1) on (node local)
[  109.074131][ T6030] loop0: detected capacity change from 0 to 32768
[  109.185890][    C0] sched: RT throttling activated
[  109.198947][ T6030] XFS (loop0): Mounting V5 Filesystem
[  109.473878][ T6030] XFS (loop0): Ending clean mount
[  109.487241][ T6030] XFS (loop0): Quotacheck needed: Please wait.
[  109.551877][ T6030] XFS (loop0): Quotacheck: Done.
[  109.693433][ T4191] XFS (loop0): Unmounting Filesystem
[  109.762333][ T6031] loop4: detected capacity change from 0 to 262144
[  109.781410][ T5751] smartjoyplus 0003:6666:8802.0009: hidraw0: USB HID v0.f9 Device [HID 6666:8802] on usb-dummy_hcd.2-1/input0
[  109.793844][ T5751] smartjoyplus 0003:6666:8802.0009: no output reports found
[  109.804697][ T5751] usb 3-1: USB disconnect, device number 6
[  109.869286][ T6031] F2FS-fs (loop4): invalid crc value
[  109.909515][ T6031] F2FS-fs (loop4): Found nat_bits in checkpoint
[  109.946111][ T6031] F2FS-fs (loop4): Start checkpoint disabled!
[  109.965690][ T6031] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  110.088419][ T6047] fido_id[6047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  110.501443][ T6052] loop3: detected capacity change from 0 to 32768
[  110.921210][ T6068] netlink: 'syz.3.584': attribute type 11 has an invalid length.
[  111.142774][ T6070] loop0: detected capacity change from 0 to 4096
[  111.184537][ T6080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.598'.
[  111.221542][ T6080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.598'.
[  111.233408][ T6070] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  111.444356][ T4191] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22.
[  111.463571][ T4191] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22.
[  111.486051][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  111.585649][ T6060] loop2: detected capacity change from 0 to 32768
[  111.746753][ T4199] Bluetooth: hci4: link tx timeout
[  111.751970][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  111.775076][ T6087] loop1: detected capacity change from 0 to 8192
[  111.928698][ T6087] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  111.962194][ T6107] loop0: detected capacity change from 0 to 1024
[  111.969517][ T6087] REISERFS (device loop1): using ordered data mode
[  112.006097][ T6087] reiserfs: using flush barriers
[  112.051147][ T6087] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  112.069048][ T6091] loop4: detected capacity change from 0 to 32768
[  112.099935][ T6111] loop3: detected capacity change from 0 to 512
[  112.109785][ T6091] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.582 (6091)
[  112.133919][ T6087] REISERFS (device loop1): checking transaction log (loop1)
[  112.175846][ T6111] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  112.178734][ T6091] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  112.232092][ T6091] BTRFS info (device loop4): turning on sync discard
[  112.268736][ T6091] BTRFS info (device loop4): enabling auto defrag
[  112.280195][ T6111] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.612: casefold flag without casefold feature
[  112.296631][ T6091] BTRFS info (device loop4): enabling ssd optimizations
[  112.303628][ T6091] BTRFS info (device loop4): force clearing of disk cache
[  112.396096][ T6091] BTRFS info (device loop4): not using ssd optimizations
[  112.433473][ T6091] BTRFS info (device loop4): disabling free space tree
[  112.440990][ T6091] BTRFS info (device loop4): has skinny extents
[  112.455968][ T6111] EXT4-fs (loop3): Remounting filesystem read-only
[  112.468330][ T6111] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.612: couldn't read orphan inode 15 (err -117)
[  112.502384][ T6111] EXT4-fs (loop3): Remounting filesystem read-only
[  112.509709][ T6111] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,acl,. Quota mode: writeback.
[  112.537040][ T6111] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #2: comm syz.3.612: invalid size
[  112.557562][ T6111] EXT4-fs (loop3): Remounting filesystem read-only
[  112.581657][ T6087] REISERFS (device loop1): Using tea hash to sort names
[  112.659677][ T6087] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  112.695972][ T6087] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  112.962647][ T6091] BTRFS info (device loop4): clearing free space tree
[  112.996023][ T6091] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  113.044822][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'.
[  113.067334][ T6091] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  113.307926][   T26] audit: type=1800 audit(1756466137.817:12): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.582" name="bus" dev="loop4" ino=263 res=0 errno=0
[  113.428240][ T6170] loop1: detected capacity change from 0 to 256
[  113.529706][ T6170] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  113.578124][ T6170] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  113.594442][ T4487] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (4487)
[  113.604169][ T6156] loop3: detected capacity change from 0 to 32768
[  113.654011][ T6170] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  113.748764][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.626'.
[  113.849612][ T6156] XFS (loop3): Mounting V5 Filesystem
[  114.042851][ T6156] XFS (loop3): Ending clean mount
[  114.061483][ T6200] netlink: 60 bytes leftover after parsing attributes in process `syz.0.635'.
[  114.078247][ T6156] XFS (loop3): Quotacheck needed: Please wait.
[  114.168990][ T6156] XFS (loop3): Quotacheck: Done.
[  114.316213][ T4186] XFS (loop3): Unmounting Filesystem
[  114.412244][ T6209] loop0: detected capacity change from 0 to 4096
[  114.791198][ T6217] input: syz1 as /devices/virtual/input/input8
[  114.799497][ T6203] loop2: detected capacity change from 0 to 32768
[  114.929072][ T6203] XFS (loop2): Mounting V5 Filesystem
[  115.066267][ T6203] XFS (loop2): Ending clean mount
[  115.265511][ T6238] loop0: detected capacity change from 0 to 32768
[  115.349757][ T6238] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  115.358738][ T6238] gfs2: fsid=syz:syz: Now mounting FS (format 1802)...
[  115.391197][ T6238] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  115.391197][ T6238]   inode = 0 19
[  115.391197][ T6238]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[  115.411576][ T6238] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  115.426722][ T6238] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  115.431976][ T4185] XFS (loop2): Unmounting Filesystem
[  115.435511][ T6238] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  115.448217][ T6238] gfs2: fsid=syz:syz.0: File system withdrawn
[  115.454292][ T6238] CPU: 0 PID: 6238 Comm: syz.0.652 Not tainted syzkaller #0
[  115.461589][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  115.471671][ T6238] Call Trace:
[  115.474957][ T6238]  <TASK>
[  115.477969][ T6238]  dump_stack_lvl+0x168/0x230
[  115.482655][ T6238]  ? kobject_uevent_env+0x371/0x890
[  115.487856][ T6238]  ? show_regs_print_info+0x20/0x20
[  115.493044][ T6238]  ? load_image+0x3b0/0x3b0
[  115.497625][ T6238]  ? kobject_uevent_env+0x371/0x890
[  115.502815][ T6238]  ? lockref_put_or_lock+0x6e/0xb0
[  115.507924][ T6238]  gfs2_withdraw+0x111b/0x1460
[  115.512689][ T6238]  ? gfs2_lm+0x220/0x220
[  115.516912][ T6238]  ? __lock_acquire+0x13ad/0x7c60
[  115.521931][ T6238]  ? gfs2_consist_inode_i+0xc0/0xe0
[  115.527130][ T6238]  gfs2_inode_refresh+0xb5e/0xfe0
[  115.532149][ T6238]  ? do_promote+0x71a/0xab0
[  115.536639][ T6238]  ? gfs2_inode_metasync+0xf0/0xf0
[  115.541736][ T6238]  ? __lock_acquire+0x7c60/0x7c60
[  115.546760][ T6238]  inode_go_lock+0x127/0x470
[  115.551342][ T6238]  do_promote+0x741/0xab0
[  115.555692][ T6238]  finish_xmote+0x514/0xb70
[  115.560188][ T6238]  do_xmote+0x7b6/0x1120
[  115.564951][ T6238]  gfs2_glock_nq+0xc7a/0x1550
[  115.569643][ T6238]  init_journal+0xc42/0x2220
[  115.574230][ T6238]  ? end_bio_io_page+0x100/0x100
[  115.579151][ T6238]  ? vsnprintf+0x1905/0x1a00
[  115.583828][ T6238]  ? snprintf+0xd7/0x120
[  115.588059][ T6238]  ? init_journal+0x710/0x2220
[  115.592817][ T6238]  ? vscnprintf+0x80/0x80
[  115.597144][ T6238]  ? gfs2_glock_nq_num+0x17a/0x1b0
[  115.602244][ T6238]  init_inodes+0xdb/0x320
[  115.606563][ T6238]  gfs2_fill_super+0x1701/0x1f50
[  115.611496][ T6238]  ? gfs2_reconfigure+0xcd0/0xcd0
[  115.616508][ T6238]  ? gfs2_glock_nq_num+0x82/0x1b0
[  115.621516][ T6238]  ? preempt_count_add+0x8d/0x190
[  115.626535][ T6238]  ? sb_set_blocksize+0xa5/0xe0
[  115.631460][ T6238]  get_tree_bdev+0x3f1/0x610
[  115.636126][ T6238]  ? gfs2_reconfigure+0xcd0/0xcd0
[  115.641140][ T6238]  gfs2_get_tree+0x4d/0x1e0
[  115.645629][ T6238]  vfs_get_tree+0x88/0x270
[  115.650030][ T6238]  do_new_mount+0x24a/0xa40
[  115.654527][ T6238]  __se_sys_mount+0x2d6/0x3c0
[  115.659311][ T6238]  ? __x64_sys_mount+0xc0/0xc0
[  115.664061][ T6238]  ? lockdep_hardirqs_on+0x94/0x140
[  115.669251][ T6238]  ? __x64_sys_mount+0x1c/0xc0
[  115.674010][ T6238]  do_syscall_64+0x4c/0xa0
[  115.678412][ T6238]  ? clear_bhb_loop+0x30/0x80
[  115.683081][ T6238]  ? clear_bhb_loop+0x30/0x80
[  115.687745][ T6238]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  115.693717][ T6238] RIP: 0033:0x7fdbfefce38a
[  115.698119][ T6238] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.717806][ T6238] RSP: 002b:00007fdbfd233e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  115.726206][ T6238] RAX: ffffffffffffffda RBX: 00007fdbfd233ef0 RCX: 00007fdbfefce38a
[  115.734194][ T6238] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fdbfd233eb0
[  115.742168][ T6238] RBP: 0000200000000400 R08: 00007fdbfd233ef0 R09: 0000000001000004
[  115.750125][ T6238] R10: 0000000001000004 R11: 0000000000000246 R12: 0000200000012500
[  115.758082][ T6238] R13: 00007fdbfd233eb0 R14: 00000000000126ae R15: 0000200000000580
[  115.766052][ T6238]  </TASK>
[  115.771232][ T6238] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5
[  116.031995][ T6254] loop4: detected capacity change from 0 to 764
[  116.112909][ T6256] loop0: detected capacity change from 0 to 16
[  116.177836][ T6254] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  116.222621][ T6256] erofs: (device loop0): mounted with root inode @ nid 36.
[  116.316045][ T5751] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  116.415279][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.662'.
[  116.448143][ T6258] loop3: detected capacity change from 0 to 512
[  116.533651][ T6258] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  116.606150][ T5751] usb 2-1: Using ep0 maxpacket: 8
[  116.626824][ T6258] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.661: invalid indirect mapped block 4294967295 (level 1)
[  116.716133][ T6258] EXT4-fs (loop3): Remounting filesystem read-only
[  116.726401][ T5751] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23
[  116.735798][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.745112][ T6258] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.661: invalid indirect mapped block 4294967295 (level 1)
[  116.774180][ T5751] usb 2-1: config 0 descriptor??
[  116.810089][ T5751] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9
[  116.862209][ T6258] EXT4-fs (loop3): Remounting filesystem read-only
[  116.863003][ T6258] EXT4-fs (loop3): 2 truncates cleaned up
[  116.863026][ T6258] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000005,dioread_nolock,auto_da_alloc=0x000000007fffffff,. Quota mode: writeback.
[  116.883312][ T6258] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.661: bg 0: block 5: invalid block bitmap
[  116.893594][ T6258] EXT4-fs (loop3): Remounting filesystem read-only
[  117.030227][ T3547] bcm5974 2-1:0.0: could not read from device
[  117.052608][ T5751] usb 2-1: USB disconnect, device number 6
[  117.066082][ T3547] bcm5974 2-1:0.0: could not read from device
[  117.201398][ T6295] loop3: detected capacity change from 0 to 256
[  117.246583][ T6295] exfat: Deprecated parameter 'utf8'
[  117.260481][ T6295] exfat: Deprecated parameter 'utf8'
[  117.278880][ T6295] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  117.301242][ T4226] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  117.475369][ T6300] loop0: detected capacity change from 0 to 4096
[  117.534778][ T6300] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[  117.550737][ T4226] usb 3-1: Using ep0 maxpacket: 32
[  117.570244][ T6300] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[  117.598464][ T6300] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[  117.623790][ T6300] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[  117.632513][ T6300] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00
[  117.640989][ T6300] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00
[  117.649313][ T6300] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00
[  117.657945][ T6300] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00
[  117.666890][ T6300] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00
[  117.674905][ T6300] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00
[  117.696323][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.715316][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.744370][ T4226] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  117.763552][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.793991][ T4226] usb 3-1: config 0 descriptor??
[  117.847785][ T4226] hub 3-1:0.0: USB hub found
[  117.894825][ T6304] loop3: detected capacity change from 0 to 32768
[  117.978864][ T6304] XFS (loop3): Mounting V5 Filesystem
[  118.066151][ T4226] hub 3-1:0.0: 1 port detected
[  118.153391][ T6325] loop4: detected capacity change from 0 to 4096
[  118.166227][ T6325] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  118.185381][ T6304] XFS (loop3): Ending clean mount
[  118.194899][ T6304] XFS (loop3): Quotacheck needed: Please wait.
[  118.237591][ T6325] ntfs: volume version 3.1.
[  118.312290][ T6304] XFS (loop3): Quotacheck: Done.
[  118.397668][ T4186] XFS (loop3): Unmounting Filesystem
[  118.484103][ T4489] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  118.488065][ T4226] usb 3-1: USB disconnect, device number 7
[  118.769586][ T6339] loop4: detected capacity change from 0 to 4096
[  118.887139][ T6339] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  119.032196][   T26] audit: type=1800 audit(1756466144.535:13): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.691" name="file1" dev="loop4" ino=24 res=0 errno=0
[  119.137194][ T4184] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22.
[  119.167553][ T4184] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22.
[  119.182488][ T6349] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  119.190345][ T6349] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  119.194417][ T4184] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  119.498822][ T6359] loop3: detected capacity change from 0 to 256
[  119.506123][ T4234] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  119.527608][ T6343] loop0: detected capacity change from 0 to 32768
[  119.571232][ T6359] FAT-fs (loop3): Directory bread(block 64) failed
[  119.580448][ T6359] FAT-fs (loop3): Directory bread(block 65) failed
[  119.601524][ T6359] FAT-fs (loop3): Directory bread(block 66) failed
[  119.609493][ T6359] FAT-fs (loop3): Directory bread(block 67) failed
[  119.621046][ T6359] FAT-fs (loop3): Directory bread(block 68) failed
[  119.629427][ T6359] FAT-fs (loop3): Directory bread(block 69) failed
[  119.641805][ T6359] FAT-fs (loop3): Directory bread(block 70) failed
[  119.657819][ T6359] FAT-fs (loop3): Directory bread(block 71) failed
[  119.667955][ T6359] FAT-fs (loop3): Directory bread(block 72) failed
[  119.675730][ T6359] FAT-fs (loop3): Directory bread(block 73) failed
[  119.750704][ T4234] usb 5-1: Using ep0 maxpacket: 16
[  119.814405][ T6364] loop0: detected capacity change from 0 to 128
[  119.896239][ T4234] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  119.911825][ T4234] usb 5-1: config 0 has no interface number 0
[  119.938421][ T4234] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.972072][ T4234] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.001639][ T4234] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  120.014388][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.059840][ T4234] usb 5-1: config 0 descriptor??
[  120.119644][ T6375] loop2: detected capacity change from 0 to 64
[  120.603856][ T6405] loop1: detected capacity change from 0 to 1024
[  120.700960][ T6405] hfsplus: xattr searching failed
[  120.720153][ T6405] hfsplus: catalog searching failed
[  120.752151][ T4489] hfsplus: b-tree write err: -5, ino 3
[  120.771058][ T4234] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000A/input/input10
[  120.860106][ T4234] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000A/input/input11
[  120.900907][ T4234] uclogic 0003:28BD:0071.000A: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1
[  121.063119][ T5751] usb 5-1: USB disconnect, device number 7
[  121.537881][ T6424] loop0: detected capacity change from 0 to 4096
[  121.608303][ T6424] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  121.614046][ T6417] loop3: detected capacity change from 0 to 32768
[  121.725047][ T6417] XFS (loop3): Mounting V5 Filesystem
[  121.824911][ T6440] loop1: detected capacity change from 0 to 512
[  121.871724][ T6417] XFS (loop3): Ending clean mount
[  121.880168][ T6444] loop4: detected capacity change from 0 to 1024
[  121.891743][ T6417] XFS (loop3): Quotacheck needed: Please wait.
[  121.927124][ T6444] EXT4-fs (loop4): Ignoring removed nobh option
[  122.016410][ T6440] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  122.037321][ T6444] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.737: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  122.069108][ T6440] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  122.107169][ T6440] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #13: comm syz.1.736: iget: bad i_size value: 12154757448730
[  122.117608][ T6417] XFS (loop3): Quotacheck: Done.
[  122.167102][ T6444] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.737: couldn't read orphan inode 11 (err -117)
[  122.186261][ T6440] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.736: couldn't read orphan inode 13 (err -117)
[  122.207840][ T6444] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback.
[  122.227657][ T6440] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback.
[  122.357284][ T6440] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  122.417815][ T4186] XFS (loop3): Unmounting Filesystem
[  122.611073][ T4991] Bluetooth: hci4: command 0x0405 tx timeout
[  122.633493][ T6444] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.737: Invalid block bitmap block 0 in block_group 0
[  122.756125][ T6444] Quota error (device loop4): write_blk: dquota write failed
[  122.793756][ T6444] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  122.860927][ T6444] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.737: Failed to acquire dquot type 0
[  122.957136][ T6458] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.737: Invalid inode bitmap blk 137438953472 in block_group 0
[  123.039312][ T4489] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm kworker/u4:6: Invalid inode table block 8589934593 in block_group 0
[  123.602682][ T6478] loop4: detected capacity change from 0 to 16
[  123.688021][ T6478] erofs: (device loop4): mounted with root inode @ nid 36.
[  123.731833][ T6478] attempt to access beyond end of device
[  123.731833][ T6478] loop4: rw=0, want=24, limit=16
[  123.759690][ T6478] attempt to access beyond end of device
[  123.759690][ T6478] loop4: rw=524288, want=32, limit=16
[  123.775662][ T6478] attempt to access beyond end of device
[  123.775662][ T6478] loop4: rw=524288, want=24, limit=16
[  123.868243][ T6481] loop3: detected capacity change from 0 to 512
[  123.949466][ T6481] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  123.964446][ T6481] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  123.973287][ T6481] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #13: comm syz.3.753: iget: bad i_size value: 12154757448730
[  123.986839][ T6481] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.753: couldn't read orphan inode 13 (err -117)
[  124.026103][ T4991] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  124.085966][ T6481] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback.
[  124.152031][ T6481] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  124.183327][ T6475] loop1: detected capacity change from 0 to 32768
[  124.310826][ T4991] usb 3-1: Using ep0 maxpacket: 16
[  124.456307][ T4991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.477505][ T4991] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  124.510896][ T4991] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  124.530234][ T4991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.542431][ T4991] usb 3-1: config 0 descriptor??
[  124.644187][ T6486] loop4: detected capacity change from 0 to 32768
[  124.692454][ T6486] XFS (loop4): Mounting V5 Filesystem
[  124.738809][ T6486] XFS (loop4): Ending clean mount
[  124.756266][ T6486] XFS (loop4): Quotacheck needed: Please wait.
[  124.799942][ T6486] XFS (loop4): Quotacheck: Done.
[  124.898492][ T4184] XFS (loop4): Unmounting Filesystem
[  124.923557][ T6504] loop1: detected capacity change from 0 to 1024
[  124.930120][ T4991] usbhid 3-1:0.0: can't add hid device: -71
[  124.946006][ T4991] usbhid: probe of 3-1:0.0 failed with error -71
[  124.968471][ T4991] usb 3-1: USB disconnect, device number 8
[  125.123328][ T6504] EXT4-fs (loop1): Ignoring removed nobh option
[  125.205211][ T6504] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.756: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  125.311613][ T6504] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.756: couldn't read orphan inode 11 (err -117)
[  125.412976][ T6504] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback.
[  125.557901][ T6504] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.756: Invalid block bitmap block 0 in block_group 0
[  125.612165][ T6504] Quota error (device loop1): write_blk: dquota write failed
[  125.645640][ T6504] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  125.697216][ T6504] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.756: Failed to acquire dquot type 0
[  125.728294][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.775'.
[  125.830339][ T6523] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.756: Invalid inode bitmap blk 137438953472 in block_group 0
[  125.992386][  T154] EXT4-fs error (device loop1): __ext4_get_inode_loc:4321: comm kworker/u4:2: Invalid inode table block 8589934593 in block_group 0
[  126.198865][ T6540] loop1: detected capacity change from 0 to 512
[  126.329381][ T6540] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.764: iget: bad extended attribute block 1
[  126.357993][ T6517] loop2: detected capacity change from 0 to 32768
[  126.372887][ T6540] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.764: couldn't read orphan inode 15 (err -117)
[  126.389485][ T6540] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none.
[  126.420321][ T6517] (syz.2.760,6517,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  126.433806][   T26] audit: type=1800 audit(1756466151.925:14): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.764" name="file2" dev="loop1" ino=16 res=0 errno=0
[  126.487400][ T6517] (syz.2.760,6517,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  126.531441][ T6517] (syz.2.760,6517,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  126.554648][ T6517] JBD2: Ignoring recovery information on journal
[  126.583632][ T6517] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  126.665290][ T6547] (syz.2.760,6547,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  126.682610][ T6547] (syz.2.760,6547,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  126.695492][ T6547] (syz.2.760,6547,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  126.705000][ T6547] (syz.2.760,6547,1):ocfs2_quota_read:201 ERROR: status = -5
[  126.717344][ T6547] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5
[  126.731870][ T6547] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  126.745493][ T6517] (syz.2.760,6517,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  126.776177][ T6547] (syz.2.760,6547,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[  126.781052][ T6517] (syz.2.760,6517,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  126.784232][ T6547] (syz.2.760,6547,0):ocfs2_mknod:314 ERROR: status = -5
[  126.804310][ T6547] (syz.2.760,6547,0):ocfs2_mknod:502 ERROR: status = -5
[  126.811598][ T6517] (syz.2.760,6517,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  126.837339][ T6547] (syz.2.760,6547,0):ocfs2_create:676 ERROR: status = -5
[  126.853130][ T6517] (syz.2.760,6517,1):ocfs2_quota_read:201 ERROR: status = -5
[  126.862084][ T6517] Quota error (device loop2): find_next_id: Can't read quota tree block 5
[  126.871085][ T6517] (syz.2.760,6517,0):ocfs2_get_next_id:909 ERROR: status = -5
[  126.981829][ T4185] ocfs2: Unmounting device (7,2) on (node local)
[  127.098049][ T6565] loop3: detected capacity change from 0 to 64
[  127.340843][ T6571] loop4: detected capacity change from 0 to 1024
[  127.395064][ T6577] loop0: detected capacity change from 0 to 256
[  127.474129][ T6571] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,barrier,init_itable,,errors=continue. Quota mode: writeback.
[  127.573945][ T6577] FAT-fs (loop0): Directory bread(block 64) failed
[  127.661852][ T6577] FAT-fs (loop0): Directory bread(block 65) failed
[  127.712517][ T6577] FAT-fs (loop0): Directory bread(block 66) failed
[  127.776134][ T6577] FAT-fs (loop0): Directory bread(block 67) failed
[  127.797098][ T6577] FAT-fs (loop0): Directory bread(block 68) failed
[  127.861576][ T6577] FAT-fs (loop0): Directory bread(block 69) failed
[  127.894059][ T6577] FAT-fs (loop0): Directory bread(block 70) failed
[  127.925812][ T6577] FAT-fs (loop0): Directory bread(block 71) failed
[  127.937209][ T6577] FAT-fs (loop0): Directory bread(block 72) failed
[  127.944201][ T6577] FAT-fs (loop0): Directory bread(block 73) failed
[  127.975754][ T6562] loop1: detected capacity change from 0 to 32768
[  128.066417][ T6562] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.773 (6562)
[  128.114071][ T6562] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  128.126202][ T6562] BTRFS info (device loop1): setting nodatasum
[  128.132398][ T6562] BTRFS info (device loop1): force zlib compression, level 3
[  128.156384][ T6585] loop4: detected capacity change from 0 to 8192
[  128.179172][ T6562] BTRFS info (device loop1): enabling ssd optimizations
[  128.221166][ T6562] BTRFS info (device loop1): using free space tree
[  128.274336][ T6585] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  128.285828][ T6562] BTRFS info (device loop1): has skinny extents
[  128.290614][ T6575] loop2: detected capacity change from 0 to 32768
[  128.329579][ T6585] REISERFS (device loop4): using ordered data mode
[  128.336220][ T6585] reiserfs: using flush barriers
[  128.371914][ T6585] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  128.419845][ T6585] REISERFS (device loop4): checking transaction log (loop4)
[  128.445435][ T6585] REISERFS (device loop4): Using r5 hash to sort names
[  128.464802][ T6575] XFS (loop2): Mounting V5 Filesystem
[  128.532596][ T6585] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  128.629336][   T26] audit: type=1800 audit(1756466154.135:15): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.773" name="file1" dev="loop1" ino=260 res=0 errno=0
[  128.739126][ T6575] XFS (loop2): Ending clean mount
[  128.801752][ T6575] XFS (loop2): Quotacheck needed: Please wait.
[  128.949523][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.796'.
[  129.022758][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'.
[  129.271233][ T6638] device dummy0 entered promiscuous mode
[  129.282275][ T6575] XFS (loop2): Quotacheck: Done.
[  129.614946][ T4185] XFS (loop2): Unmounting Filesystem
[  129.736243][ T4991] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  130.097010][ T5751] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  130.146904][ T4991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  130.170457][ T4991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.186651][ T4991] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  130.200621][ T4991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.222345][ T4991] usb 1-1: config 0 descriptor??
[  130.340993][ T5751] usb 4-1: Using ep0 maxpacket: 8
[  130.352580][ T6675] loop4: detected capacity change from 0 to 2048
[  130.426509][ T6671] loop2: detected capacity change from 0 to 32768
[  130.452452][ T6675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.466325][ T5751] usb 4-1: config index 0 descriptor too short (expected 46935, got 18)
[  130.475068][ T5751] usb 4-1: config 0 has too many interfaces: 116, using maximum allowed: 32
[  130.494744][ T5751] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.526059][ T4996] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  130.532876][ T5751] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 116
[  130.706233][ T5751] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[  130.716404][ T4991] bigben 0003:146B:0902.000B: unexpected rdesc, please submit for review
[  130.725322][ T4991] bigben 0003:146B:0902.000B: item fetching failed at offset 2/5
[  130.725632][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.754437][ T4991] bigben 0003:146B:0902.000B: parse failed
[  130.760786][ T5751] usb 4-1: Product: syz
[  130.773394][ T5751] usb 4-1: Manufacturer: syz
[  130.778392][ T4991] bigben: probe of 0003:146B:0902.000B failed with error -22
[  130.786418][ T4996] usb 2-1: Using ep0 maxpacket: 32
[  130.786470][ T5751] usb 4-1: SerialNumber: syz
[  130.819187][ T6683] netlink: 1 bytes leftover after parsing attributes in process `syz.4.819'.
[  130.829415][ T5751] usb 4-1: config 0 descriptor??
[  130.916241][ T4996] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  130.928391][ T5751] usb 1-1: USB disconnect, device number 6
[  130.943257][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.980519][ T4996] usb 2-1: config 0 descriptor??
[  131.030977][ T4996] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  131.083772][ T4234] usb 4-1: USB disconnect, device number 9
[  131.180684][ T6693] loop2: detected capacity change from 0 to 512
[  131.226104][ T6693] EXT4-fs (loop2): Ignoring removed orlov option
[  131.237357][ T6693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  131.250700][ T6693] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.823: bad orphan inode 458763
[  131.268021][ T6693] EXT4-fs (loop2): Remounting filesystem read-only
[  131.274627][ T6693] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000004,grpid,acl,errors=remount-ro,orlov,. Quota mode: none.
[  131.324118][ T6693] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.823: bg 0: block 256: padding at end of block bitmap is not set
[  131.339804][ T6693] EXT4-fs (loop2): Remounting filesystem read-only
[  131.585212][ T6700] loop0: detected capacity change from 0 to 4096
[  131.696799][ T6700] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  131.809023][ T6700] ntfs3: Cannot use different iocharset when remounting!
[  131.833094][ T6700] ntfs3: loop0: failed to convert "076c" to cp932
[  131.936278][ T4996] gspca_vc032x: reg_w err -71
[  131.941122][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.003792][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.019769][ T6708] loop3: detected capacity change from 0 to 32768
[  132.057116][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.082910][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.121966][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.135922][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.141559][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.141959][ T6708] JBD2: Ignoring recovery information on journal
[  132.148445][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.158765][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.164054][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.169511][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.174804][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.180555][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.185973][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.191341][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.197267][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.202646][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.208306][ T4996] gspca_vc032x: I2c Bus Busy Wait 00
[  132.213690][ T4996] gspca_vc032x: Unknown sensor...
[  132.219745][ T4996] vc032x: probe of 2-1:0.0 failed with error -22
[  132.234359][ T4996] usb 2-1: USB disconnect, device number 7
[  132.241743][ T6708] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  132.258097][ T6708] ocfs2: Unmounting device (7,3) on (node local)
[  132.424869][ T6727] netlink: 'syz.0.837': attribute type 25 has an invalid length.
[  132.451087][ T6729] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  132.459479][ T6727] netlink: 'syz.0.837': attribute type 1 has an invalid length.
[  132.570025][ T6727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.837'.
[  132.612347][ T6727] bridge0: port 1(bridge_slave_0) entered learning state
[  132.698598][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.700298][ T6739] loop3: detected capacity change from 0 to 512
[  132.705092][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.906518][ T6739] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.843: inode #1: comm syz.3.843: iget: illegal inode #
[  133.045965][ T6739] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.843: error while reading EA inode 1 err=-117
[  133.136596][ T6739] EXT4-fs (loop3): 1 orphan inode deleted
[  133.142403][ T6739] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  133.389544][ T6767] loop2: detected capacity change from 0 to 512
[  133.470735][ T6767] EXT4-fs (loop2): Ignoring removed orlov option
[  133.508588][ T6767] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  133.600584][ T6767] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.855: corrupted in-inode xattr
[  133.618690][ T6736] loop1: detected capacity change from 0 to 32768
[  133.693071][ T6767] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.855: couldn't read orphan inode 15 (err -117)
[  133.708221][ T6745] loop0: detected capacity change from 0 to 32768
[  133.730996][ T6780] netlink: 'syz.4.859': attribute type 10 has an invalid length.
[  133.806143][ T6767] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,sysvgroups,noload,nombcache,noblock_validity,init_itable=0x0000000000000051,nogrpid,,errors=continue. Quota mode: none.
[  133.880069][ T6745] XFS (loop0): Mounting V5 Filesystem
[  133.892643][ T6793] loop4: detected capacity change from 0 to 1024
[  133.946832][ T6793] EXT4-fs (loop4): Ignoring removed nobh option
[  133.953119][ T6793] EXT4-fs (loop4): inline encryption not supported
[  134.046498][ T6793] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  134.116186][ T6745] XFS (loop0): Ending clean mount
[  134.157277][ T6793] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,nojournal_checksum,barrier=0x0000000000000002,init_itable=0x0000000000000001,data_err=ignore,lazytime,data_err=ignore,journal_dev=0x0000000000000800,nobh,inlinecrypt,data_err=ignore,dioread_nolock,,errors=continue. Quota mode: none.
[  134.258566][ T6745] XFS (loop0): Quotacheck needed: Please wait.
[  134.314598][ T6813] device bond0 entered promiscuous mode
[  134.357451][ T6745] XFS (loop0): Quotacheck: Done.
[  134.365977][ T6813] device bond_slave_0 entered promiscuous mode
[  134.395126][ T6813] device bond_slave_1 entered promiscuous mode
[  134.438015][ T6816] loop3: detected capacity change from 0 to 164
[  134.452025][ T6813] device bond0 left promiscuous mode
[  134.480892][ T6813] device bond_slave_0 left promiscuous mode
[  134.487472][ T6813] device bond_slave_1 left promiscuous mode
[  134.509184][ T4191] XFS (loop0): Unmounting Filesystem
[  134.597118][ T6818] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  134.974353][ T6831] netlink: 104 bytes leftover after parsing attributes in process `syz.0.874'.
[  135.020155][ T6834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.880'.
[  135.059692][ T6834] bond0: option ad_select: unable to set because the bond device is up
[  135.098264][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.881'.
[  135.399261][ T6814] loop1: detected capacity change from 0 to 40427
[  135.496019][ T5738] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  135.564883][ T6814] F2FS-fs (loop1): Found nat_bits in checkpoint
[  135.624028][ T6839] loop0: detected capacity change from 0 to 32768
[  135.660611][ T6814] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  135.681614][ T6839] ERROR: (device loop0): dbDiscardAG: -EIO
[  135.681614][ T6839] 
[  135.692577][ T6839] ERROR: (device loop0): remounting filesystem as read-only
[  135.732391][ T6814] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  135.736097][ T5738] usb 4-1: Using ep0 maxpacket: 16
[  135.812372][   T26] audit: type=1800 audit(1756466161.315:16): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.871" name="file1" dev="loop1" ino=10 res=0 errno=0
[  135.854022][ T4183] attempt to access beyond end of device
[  135.854022][ T4183] loop1: rw=2049, want=45104, limit=40427
[  135.866154][ T5738] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.876167][ T5738] usb 4-1: config 0 interface 0 has no altsetting 0
[  135.881102][ T6847] loop2: detected capacity change from 0 to 32768
[  135.902920][ T5738] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  135.932531][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.959894][ T5738] usb 4-1: config 0 descriptor??
[  135.997310][ T6847] XFS (loop2): Mounting V5 Filesystem
[  136.058142][ T6847] XFS (loop2): Ending clean mount
[  136.181907][ T4185] XFS (loop2): Unmounting Filesystem
[  136.279669][ T6868] loop1: detected capacity change from 0 to 512
[  136.343854][ T6868] EXT4-fs (loop1): orphan cleanup on readonly fs
[  136.352115][ T6868] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.891: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  136.387688][ T6868] EXT4-fs error (device loop1): ext4_quota_enable:6420: comm syz.1.891: Bad quota inode: 4, type: 1
[  136.403702][ T6868] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  136.420274][ T6868] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  136.427776][ T6868] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  136.464766][ T5738] cougar 0003:060B:500A.000C: unexpected long global item
[  136.508496][ T5738] cougar 0003:060B:500A.000C: parse failed
[  136.545974][ T5738] cougar: probe of 0003:060B:500A.000C failed with error -22
[  136.624396][ T6878] tipc: Started in network mode
[  136.672292][ T6878] tipc: Node identity ac14140f, cluster identity 4711
[  136.690651][ T6878] tipc: New replicast peer: 255.255.255.255
[  136.719733][ T5933] usb 4-1: USB disconnect, device number 10
[  136.734120][ T6878] tipc: Enabled bearer <udp:syz2>, priority 10
[  136.758996][ T6879] loop4: detected capacity change from 0 to 4096
[  136.900757][   T26] audit: type=1326 audit(1756466162.405:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.0.912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbfefccbe9 code=0x0
[  137.181669][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'.
[  137.309637][ T6890] loop2: detected capacity change from 0 to 32768
[  137.416147][ T6890] XFS (loop2): Mounting V5 Filesystem
[  137.475116][ T6916] loop3: detected capacity change from 0 to 1024
[  137.513966][ T6890] XFS (loop2): Ending clean mount
[  137.535822][ T6890] XFS (loop2): Quotacheck needed: Please wait.
[  137.563464][ T6916] EXT4-fs (loop3): inline encryption not supported
[  137.643975][ T6916] EXT4-fs (loop3): Ignoring removed bh option
[  137.695322][ T6890] XFS (loop2): Quotacheck: Done.
[  137.696256][ T6916] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  137.737898][ T5933] tipc: Node number set to 2886997007
[  137.846143][ T6916] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback.
[  137.883598][ T4185] XFS (loop2): Unmounting Filesystem
[  137.904149][ T6914] loop4: detected capacity change from 0 to 32768
[  137.977017][ T6914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.909 (6914)
[  138.027463][ T6939] loop1: detected capacity change from 0 to 128
[  138.040827][ T6914] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  138.072598][ T6914] BTRFS info (device loop4): using free space tree
[  138.081325][ T6914] BTRFS info (device loop4): has skinny extents
[  138.173887][ T6950] loop3: detected capacity change from 0 to 64
[  138.199986][ T6939] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  138.219062][ T6939] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  138.434872][ T6914] BTRFS info (device loop4): enabling ssd optimizations
[  138.476332][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'.
[  138.613677][   T26] audit: type=1326 audit(1756466164.115:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6968 comm="syz.1.923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3a0febbe9 code=0x0
[  138.802105][ T6975] netlink: 284 bytes leftover after parsing attributes in process `syz.0.925'.
[  139.772433][ T7021] loop3: detected capacity change from 0 to 256
[  139.835685][ T7026] process 'syz.4.945' launched './file0' with NULL argv: empty string added
[  139.874241][ T7021] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  139.916453][ T7021] FAT-fs (loop3): Filesystem has been set read-only
[  139.923232][ T7021] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  139.964101][ T7021] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  139.982076][   T26] audit: type=1800 audit(1756466165.485:19): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.943" name="file1" dev="loop3" ino=1048622 res=0 errno=0
[  140.027328][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'.
[  140.066474][ T5933] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  140.118834][ T7041] netlink: 128 bytes leftover after parsing attributes in process `syz.3.951'.
[  140.173376][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'.
[  140.226270][ T4991] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  140.346241][ T5933] usb 1-1: Using ep0 maxpacket: 16
[  140.430775][ T7061] loop1: detected capacity change from 0 to 1024
[  140.472969][ T7065] loop4: detected capacity change from 0 to 512
[  140.490011][ T5933] usb 1-1: config 0 interface 0 has no altsetting 0
[  140.497119][ T7061] EXT4-fs (loop1): Ignoring removed oldalloc option
[  140.507944][ T5933] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  140.530873][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.544295][ T7065] EXT4-fs (loop4): Ignoring removed oldalloc option
[  140.546365][ T5933] usb 1-1: config 0 descriptor??
[  140.562326][ T7061] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  140.586055][ T7065] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  140.636825][ T4991] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  140.646124][ T4991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.655738][ T4991] usb 3-1: config 0 descriptor??
[  140.664392][ T7065] EXT4-fs (loop4): 1 truncate cleaned up
[  140.682985][ T7065] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,bsdgroups,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000004000,bsdgroups,oldalloc,,errors=continue. Quota mode: none.
[  140.712080][ T4991] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  140.781161][ T7065] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.965: corrupted in-inode xattr
[  140.807783][ T7065] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1760: inode #15: comm syz.4.965: unable to update i_inline_off
[  140.871300][ T7074] EXT4-fs error (device loop4): ext4_xattr_ibody_get:603: inode #15: comm syz.4.965: corrupted in-inode xattr
[  141.060746][ T5933] hid (null): global environment stack underflow
[  141.088611][ T5933] hid (null): report_id 0 is invalid
[  141.113567][ T5933] hid (null): global environment stack underflow
[  141.147694][ T5933] hid (null): unknown global tag 0xc
[  141.159339][ T7086] loop3: detected capacity change from 0 to 128
[  141.166416][ T4991] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  141.183815][ T5933] hid (null): report_id 25068 is invalid
[  141.190062][ T4991] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  141.213055][ T5933] hid (null): report_id 0 is invalid
[  141.276561][ T5933] hid (null): global environment stack overflow
[  141.323481][ T5933] hid (null): unknown global tag 0xc
[  141.335912][ T5933] hid (null): unknown global tag 0x58
[  141.407773][ T5933] usb 1-1: USB disconnect, device number 7
[  141.479392][ T4996] usb 3-1: USB disconnect, device number 9
[  142.149208][ T7097] loop4: detected capacity change from 0 to 64
[  142.407486][ T7080] loop1: detected capacity change from 0 to 262144
[  142.456098][ T7107] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  142.480098][ T7080] F2FS-fs (loop1): invalid crc value
[  142.512752][ T7080] F2FS-fs (loop1): Found nat_bits in checkpoint
[  142.551385][ T7080] F2FS-fs (loop1): Start checkpoint disabled!
[  142.576204][ T7080] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  142.631130][ T7111] sctp: [Deprecated]: syz.4.984 (pid 7111) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.631130][ T7111] Use struct sctp_sack_info instead
[  142.745369][ T7115] loop2: detected capacity change from 0 to 1024
[  142.842752][ T7115] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none.
[  142.966641][ T7103] loop0: detected capacity change from 0 to 32768
[  142.981809][ T7103] XFS: attr2 mount option is deprecated.
[  143.050015][ T4199] Bluetooth: hci4: link tx timeout
[  143.056094][ T4199] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  143.065110][ T4199] Bluetooth: hci4: link tx timeout
[  143.070346][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.112263][ T7103] XFS (loop0): Mounting V5 Filesystem
[  143.291073][ T7103] XFS (loop0): Ending clean mount
[  143.310378][ T7103] XFS (loop0): Quotacheck needed: Please wait.
[  143.421409][ T7142] loop1: detected capacity change from 0 to 256
[  143.439328][ T7103] XFS (loop0): Quotacheck: Done.
[  143.515573][ T4191] XFS (loop0): Unmounting Filesystem
[  143.549120][ T7142] FAT-fs (loop1): Directory bread(block 64) failed
[  143.590210][ T7142] FAT-fs (loop1): Directory bread(block 65) failed
[  143.616226][ T7142] FAT-fs (loop1): Directory bread(block 66) failed
[  143.622842][ T7142] FAT-fs (loop1): Directory bread(block 67) failed
[  143.696464][ T7142] FAT-fs (loop1): Directory bread(block 68) failed
[  143.726285][ T7148] tap0: tun_chr_ioctl cmd 2147767519
[  143.747725][ T7142] FAT-fs (loop1): Directory bread(block 69) failed
[  143.754416][ T7142] FAT-fs (loop1): Directory bread(block 70) failed
[  143.764141][ T7151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.996'.
[  143.821858][ T7142] FAT-fs (loop1): Directory bread(block 71) failed
[  143.829592][ T7142] FAT-fs (loop1): Directory bread(block 72) failed
[  143.843123][ T7142] FAT-fs (loop1): Directory bread(block 73) failed
[  143.843137][ T7152] netlink: 356 bytes leftover after parsing attributes in process `syz.4.997'.
[  144.399780][ T7165] loop2: detected capacity change from 0 to 8192
[  144.472483][ T7169] loop0: detected capacity change from 0 to 4096
[  144.483646][ T7165] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  144.493430][ T7165] REISERFS (device loop2): using ordered data mode
[  144.501778][ T7165] reiserfs: using flush barriers
[  144.513187][ T7165] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  144.531522][ T7165] REISERFS (device loop2): checking transaction log (loop2)
[  144.551093][ T7165] REISERFS (device loop2): Using r5 hash to sort names
[  144.595269][ T7165] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  144.635660][ T7173] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.817816][ T4191] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 144115188075855872
[  144.876512][ T4191] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=14)
[  144.948854][ T4191] Remounting filesystem read-only
[  144.953917][ T4191] NILFS (loop0): error -5 truncating bmap (ino=14)
[  145.025733][ T4191] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  145.096344][ T4996] Bluetooth: hci4: command 0x0406 tx timeout
[  145.213378][ T7168] loop3: detected capacity change from 0 to 32768
[  145.275159][ T7186] loop4: detected capacity change from 0 to 4096
[  145.302447][ T7186] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  145.360783][ T7171] loop1: detected capacity change from 0 to 32768
[  145.363882][ T7168] XFS (loop3): Mounting V5 Filesystem
[  145.482964][ T7168] XFS (loop3): Ending clean mount
[  145.503796][ T7171] XFS (loop1): Mounting V5 Filesystem
[  145.552164][ T7168] XFS (loop3): Quotacheck needed: Please wait.
[  145.710875][ T7168] XFS (loop3): Quotacheck: Done.
[  145.718313][ T7171] XFS (loop1): Ending clean mount
[  145.736067][ T7171] XFS (loop1): Quotacheck needed: Please wait.
[  145.836442][ T7171] XFS (loop1): Quotacheck: Done.
[  145.893934][ T4186] XFS (loop3): Unmounting Filesystem
[  145.985134][ T4183] XFS (loop1): Unmounting Filesystem
[  146.185968][ T6977] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  146.248225][ T7223] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1017'.
[  146.257797][ T7223] device ip6gretap0 entered promiscuous mode
[  146.276548][ T7223] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1017'.
[  146.426039][ T6977] usb 3-1: Using ep0 maxpacket: 32
[  146.546225][ T6977] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  146.559952][ T6977] usb 3-1: config 0 has no interface number 0
[  146.736853][ T6977] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  146.756642][ T6977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.785952][ T6977] usb 3-1: Product: syz
[  146.790308][ T6977] usb 3-1: Manufacturer: syz
[  146.794912][ T6977] usb 3-1: SerialNumber: syz
[  146.822626][ T6977] usb 3-1: config 0 descriptor??
[  146.884808][ T6977] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  146.993458][ T7230] loop3: detected capacity change from 0 to 32768
[  147.052849][ T7230] find_entry called with index >= next_index
[  147.088143][ T6977] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  147.116238][ T6977] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  147.306360][ T5933] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  147.416035][ T4996] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  147.437087][ T7253] loop3: detected capacity change from 0 to 32768
[  147.496173][ T7253] (syz.3.1033,7253,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  147.510247][ T7253] (syz.3.1033,7253,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  147.527731][ T6977] usb 3-1: USB disconnect, device number 10
[  147.541083][ T7253] (syz.3.1033,7253,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  147.545930][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108
[  147.565691][ T6977] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  147.579741][ T6977] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  147.595962][ T5933] usb 5-1: Using ep0 maxpacket: 32
[  147.601493][ T7253] JBD2: Ignoring recovery information on journal
[  147.602708][ T6977] quatech2 3-1:0.51: device disconnected
[  147.637794][ T7253] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  147.698592][ T7258] (syz.3.1033,7258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  147.724167][ T7258] (syz.3.1033,7258,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  147.737212][ T7258] (syz.3.1033,7258,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  147.745654][ T7258] (syz.3.1033,7258,0):ocfs2_quota_read:201 ERROR: status = -5
[  147.746635][ T5933] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  147.755239][ T7258] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5
[  147.768033][ T5933] usb 5-1: config 0 has no interface number 0
[  147.771340][ T7258] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  147.787001][ T7258] (syz.3.1033,7258,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[  147.787344][ T7253] (syz.3.1033,7253,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  147.794924][ T7258] (syz.3.1033,7258,0):ocfs2_mknod:314 ERROR: status = -5
[  147.809144][ T4996] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.826784][ T7258] (syz.3.1033,7258,0):ocfs2_mknod:502 ERROR: status = -5
[  147.831583][ T4996] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9
[  147.833828][ T7258] (syz.3.1033,7258,0):ocfs2_create:676 ERROR: status = -5
[  147.853072][ T7253] (syz.3.1033,7253,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  147.875038][ T7253] (syz.3.1033,7253,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  147.883822][ T7253] (syz.3.1033,7253,0):ocfs2_quota_read:201 ERROR: status = -5
[  147.891472][ T7253] Quota error (device loop3): find_next_id: Can't read quota tree block 5
[  147.901098][ T7253] (syz.3.1033,7253,0):ocfs2_get_next_id:909 ERROR: status = -5
[  147.939396][ T4186] ocfs2: Unmounting device (7,3) on (node local)
[  147.966425][ T5933] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  147.975637][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.983973][ T5933] usb 5-1: Product: syz
[  147.988704][ T5933] usb 5-1: Manufacturer: syz
[  147.993318][ T5933] usb 5-1: SerialNumber: syz
[  148.012607][ T5933] usb 5-1: config 0 descriptor??
[  148.036690][ T4996] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  148.048480][ T4996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.084836][ T4996] usb 2-1: Product: syz
[  148.096025][ T4996] usb 2-1: Manufacturer: syz
[  148.103531][ T4996] usb 2-1: SerialNumber: syz
[  148.116021][ T5933] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  148.177260][ T4996] usb 2-1: bad CDC descriptors
[  148.327235][ T5933] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  148.338657][ T5933] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  148.363761][ T1325] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  148.415929][ T4240] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  148.490074][ T6977] usb 2-1: USB disconnect, device number 8
[  148.615920][ T1325] usb 1-1: Using ep0 maxpacket: 32
[  148.748884][ T5933] usb 5-1: USB disconnect, device number 8
[  148.756208][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108
[  148.765275][ T5933] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  148.781010][ T5933] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  148.792664][ T5933] quatech2 5-1:0.51: device disconnected
[  148.798599][ T4240] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  148.810760][ T4240] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  148.816314][ T1325] usb 1-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 8
[  148.823034][ T4240] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  148.833213][ T1325] usb 1-1: config 1 interface 0 has no altsetting 0
[  148.848264][ T4240] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  148.861364][ T4240] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  148.874585][ T4240] usb 4-1: config 0 interface 0 has no altsetting 0
[  149.006109][ T1325] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  149.015496][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.027700][ T1325] usb 1-1: Product: syz
[  149.031976][ T1325] usb 1-1: Manufacturer: syz
[  149.037147][ T1325] usb 1-1: SerialNumber: syz
[  149.056413][ T4240] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  149.070786][ T4240] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  149.086374][ T7260] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  149.092441][ T4240] usb 4-1: Product: syz
[  149.097950][ T4240] usb 4-1: Manufacturer: syz
[  149.102601][ T4240] usb 4-1: SerialNumber: syz
[  149.123341][ T4240] usb 4-1: config 0 descriptor??
[  149.147934][ T7262] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  149.171166][ T4240] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  149.199263][ T4240] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  149.350872][ T7272] loop4: detected capacity change from 0 to 256
[  149.361449][ T6977] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  149.425652][ T7272] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  149.439040][ T1325] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 8 if 0 alt 128 proto 1 vid 0x0525 pid 0xA4A8
[  149.500656][ T1325] usb 1-1: USB disconnect, device number 8
[  149.569020][ T1325] usblp1: removed
[  149.591264][ T7272] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  149.609979][ T4769] usb 4-1: USB disconnect, device number 11
[  149.637806][ T4769] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  149.656239][ T6977] usb 3-1: Using ep0 maxpacket: 8
[  149.796766][ T6977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.813564][ T6977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  149.870176][ T6977] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  149.919218][ T7274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1041'.
[  149.940520][ T6977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.010289][ T6977] usb 3-1: config 0 descriptor??
[  150.269808][ T7282] loop4: detected capacity change from 0 to 512
[  150.407301][    T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  150.464088][ T7282] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  150.479751][ T7282] System zones: 0-2, 18-18, 34-34
[  150.489155][ T6977] hid-rmi 0003:06CB:81A7.000E: unknown main item tag 0x7
[  150.495061][ T7282] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,debug,inode_readahead_blks=0x0000000000000040,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: writeback.
[  150.499953][ T6977] hid-rmi 0003:06CB:81A7.000E: unbalanced collection at end of report description
[  150.515120][ T7282] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.530052][ T6977] hid-rmi 0003:06CB:81A7.000E: parse failed
[  150.546805][ T6977] hid-rmi: probe of 0003:06CB:81A7.000E failed with error -22
[  150.615707][ T7287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1056'.
[  150.724523][ T4996] usb 3-1: USB disconnect, device number 11
[  150.841411][    T7] usb 1-1: config 0 interface 0 has no altsetting 0
[  150.858356][    T7] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  150.875985][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.896637][    T7] usb 1-1: config 0 descriptor??
[  151.014903][ T7293] loop4: detected capacity change from 0 to 32768
[  151.035683][ T7297] loop3: detected capacity change from 0 to 32768
[  151.046048][ T6977] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  151.060558][ T7293] (syz.4.1046,7293,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  151.076143][ T7293] (syz.4.1046,7293,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  151.099012][ T7297] 
[  151.099012][ T7297]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  151.099012][ T7297] 
[  151.122807][ T7293] (syz.4.1046,7293,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  151.145106][ T7293] JBD2: Ignoring recovery information on journal
[  151.188956][ T7297] jfs_rename did not expect dtDelete to return rc = -5
[  151.226535][ T7297] ERROR: (device loop3): jfs_rename: 
[  151.226535][ T7297] 
[  151.243684][ T7293] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  151.247478][ T7299] jfs: add_missing_indices: Invalid stbl[1] = -128 for inode 2, block = 0
[  151.296599][    T9] 
[  151.296599][    T9]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  151.296599][    T9] 
[  151.339096][ T6977] usb 2-1: Using ep0 maxpacket: 32
[  151.339196][    T9] 
[  151.339196][    T9]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  151.339196][    T9] 
[  151.389020][ T4186] 
[  151.389020][ T4186]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  151.389020][ T4186] 
[  151.409570][ T4186] 
[  151.409570][ T4186]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  151.409570][ T4186] 
[  151.424549][  T275] 
[  151.424549][  T275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  151.424549][  T275] 
[  151.451490][  T275] ==================================================================
[  151.459954][  T275] BUG: KASAN: use-after-free in txEnd+0x329/0x520
[  151.466390][  T275] Write of size 8 at addr ffff888077fca040 by task jfsCommit/275
[  151.466872][ T7303] (syz.4.1046,7303,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  151.474108][  T275] 
[  151.474156][  T275] CPU: 1 PID: 275 Comm: jfsCommit Not tainted syzkaller #0
[  151.496913][  T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  151.506978][  T275] Call Trace:
[  151.510261][  T275]  <TASK>
[  151.513195][  T275]  dump_stack_lvl+0x168/0x230
[  151.517974][  T275]  ? show_regs_print_info+0x20/0x20
[  151.521895][ T7303] (syz.4.1046,7303,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  151.523173][  T275]  ? load_image+0x3b0/0x3b0
[  151.523194][  T275]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  151.536418][ T7303] (syz.4.1046,7303,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  151.540175][  T275]  ? __mutex_unlock_slowpath+0x406/0x6a0
[  151.545547][ T7303] (syz.4.1046,7303,0):ocfs2_quota_read:201 ERROR: status = -5
[  151.553935][  T275]  print_address_description+0x60/0x2d0
[  151.553958][  T275]  ? txEnd+0x329/0x520
[  151.553975][  T275]  kasan_report+0xdf/0x130
[  151.553994][  T275]  ? txEnd+0x329/0x520
[  151.554014][  T275]  kasan_check_range+0x27b/0x290
[  151.565359][ T7303] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 5
[  151.567048][  T275]  txEnd+0x329/0x520
[  151.567074][  T275]  jfs_lazycommit+0x5ba/0xb20
[  151.572741][ T7303] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  151.576647][  T275]  ? txFreelock+0x5a0/0x5a0
[  151.576666][  T275]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  151.576688][  T275]  ? sched_dynamic_update+0x210/0x210
[  151.581715][ T7293] (syz.4.1046,7293,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  151.585150][  T275]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  151.585182][  T275]  ? __kthread_parkme+0x157/0x1b0
[  151.590975][ T7303] (syz.4.1046,7303,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[  151.599028][  T275]  kthread+0x436/0x520
[  151.599051][  T275]  ? txFreelock+0x5a0/0x5a0
[  151.599069][  T275]  ? kthread_blkcg+0xd0/0xd0
[  151.599086][  T275]  ret_from_fork+0x1f/0x30
[  151.603157][ T7293] (syz.4.1046,7293,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  151.607629][  T275]  </TASK>
[  151.607640][  T275] 
[  151.607644][  T275] Allocated by task 7297:
[  151.607654][  T275]  __kasan_kmalloc+0xb5/0xf0
[  151.607674][  T275]  lmLogOpen+0x2c0/0xf90
[  151.607688][  T275]  jfs_mount_rw+0xf2/0x5c0
[  151.607700][  T275]  jfs_fill_super+0x5bb/0xaf0
[  151.607711][  T275]  mount_bdev+0x287/0x3c0
[  151.607725][  T275]  legacy_get_tree+0xe6/0x180
[  151.607742][  T275]  vfs_get_tree+0x88/0x270
[  151.607753][  T275]  do_new_mount+0x24a/0xa40
[  151.607767][  T275]  __se_sys_mount+0x2d6/0x3c0
[  151.607780][  T275]  do_syscall_64+0x4c/0xa0
[  151.607793][  T275]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  151.607809][  T275] 
[  151.607814][  T275] Freed by task 4186:
[  151.607821][  T275]  kasan_set_track+0x4b/0x70
[  151.607844][  T275]  kasan_set_free_info+0x1f/0x40
[  151.607859][  T275]  ____kasan_slab_free+0xd5/0x110
[  151.607874][  T275]  slab_free_freelist_hook+0xea/0x170
[  151.607888][  T275]  kfree+0xef/0x2a0
[  151.607900][  T275]  lmLogClose+0x293/0x520
[  151.607915][  T275]  jfs_umount+0x28f/0x360
[  151.607927][  T275]  jfs_put_super+0x88/0x190
[  151.607938][  T275]  generic_shutdown_super+0x130/0x300
[  151.607952][  T275]  kill_block_super+0x7c/0xe0
[  151.607965][  T275]  deactivate_locked_super+0x93/0xf0
[  151.607978][  T275]  cleanup_mnt+0x418/0x4d0
[  151.607992][  T275]  task_work_run+0x125/0x1a0
[  151.608008][  T275]  exit_to_user_mode_loop+0x10f/0x130
[  151.640689][ T7303] (syz.4.1046,7303,0):ocfs2_mknod:314 ERROR: status = -5
[  151.646371][  T275]  exit_to_user_mode_prepare+0xb1/0x140
[  151.646398][  T275]  syscall_exit_to_user_mode+0x16/0x40
[  151.646414][  T275]  do_syscall_64+0x58/0xa0
[  151.646426][  T275]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  151.646441][  T275] 
[  151.646446][  T275] The buggy address belongs to the object at ffff888077fca000
[  151.646446][  T275]  which belongs to the cache kmalloc-1k of size 1024
[  151.653122][ T7293] (syz.4.1046,7293,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  151.657317][  T275] The buggy address is located 64 bytes inside of
[  151.657317][  T275]  1024-byte region [ffff888077fca000, ffff888077fca400)
[  151.657338][  T275] The buggy address belongs to the page:
[  151.657357][  T275] page:ffffea0001dff200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77fc8
[  151.657375][  T275] head:ffffea0001dff200 order:3 compound_mapcount:0 compound_pincount:0
[  151.657388][  T275] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  151.657410][  T275] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841dc0
[  151.657423][  T275] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  151.657431][  T275] page dumped because: kasan: bad access detected
[  151.657443][  T275] page_owner tracks the page as allocated
[  151.657448][  T275] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 0, ts 37320591917, free_ts 26616748319
[  151.657472][  T275]  get_page_from_freelist+0x1b77/0x1c60
[  151.657493][  T275]  __alloc_pages+0x1e1/0x470
[  151.657508][  T275]  new_slab+0xc0/0x4b0
[  151.657522][  T275]  ___slab_alloc+0x81e/0xdf0
[  151.657536][  T275]  __kmalloc_node_track_caller+0x1fc/0x3a0
[  151.657551][  T275]  __alloc_skb+0x22c/0x750
[  151.657567][  T275]  __tcp_send_ack+0x9d/0x5d0
[  151.657581][  T275]  tcp_rcv_established+0x12bb/0x1cb0
[  151.657594][  T275]  tcp_v4_do_rcv+0x44b/0x9b0
[  151.657609][  T275]  tcp_v4_rcv+0x268f/0x2cb0
[  151.657625][  T275]  ip_protocol_deliver_rcu+0x3ad/0x770
[  151.657641][  T275]  ip_local_deliver_finish+0x1d5/0x320
[  151.657657][  T275]  NF_HOOK+0x2d6/0x360
[  151.657673][  T275]  ip_sublist_rcv+0xa1f/0xce0
[  151.657691][  T275]  ip_list_rcv+0x3df/0x430
[  151.657706][  T275]  __netif_receive_skb_list_core+0x574/0x740
[  151.657724][  T275] page last free stack trace:
[  151.657730][  T275]  free_unref_page_prepare+0x637/0x6c0
[  151.657745][  T275]  free_unref_page+0x94/0x280
[  151.657759][  T275]  __unfreeze_partials+0x1a5/0x200
[  151.657773][  T275]  put_cpu_partial+0x12d/0x190
[  151.657786][  T275]  qlist_free_all+0x35/0x90
[  151.657800][  T275]  kasan_quarantine_reduce+0x150/0x160
[  151.667152][ T6977] usb 2-1: unable to get BOS descriptor or descriptor too short
[  151.669561][  T275]  __kasan_slab_alloc+0x2f/0xd0
[  151.685354][ T7303] (syz.4.1046,7303,0):ocfs2_mknod:502 ERROR: status = -5
[  151.695726][  T275]  slab_post_alloc_hook+0x4c/0x380
[  151.695753][  T275]  __kmalloc+0x127/0x330
[  151.695765][  T275]  tomoyo_supervisor+0xbf5/0x10d0
[  151.695780][  T275]  tomoyo_path_permission+0x25a/0x380
[  151.695795][  T275]  tomoyo_check_open_permission+0x216/0x360
[  151.695810][  T275]  security_file_open+0x5e/0xa0
[  151.695826][  T275]  do_dentry_open+0x322/0xf80
[  151.695843][  T275]  path_openat+0x2682/0x2f30
[  151.695858][  T275]  do_filp_open+0x1b3/0x3e0
[  151.695873][  T275] 
[  151.695877][  T275] Memory state around the buggy address:
[  151.695886][  T275]  ffff888077fc9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  151.695897][  T275]  ffff888077fc9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  151.695907][  T275] >ffff888077fca000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  151.695915][  T275]                                            ^
[  151.695923][  T275]  ffff888077fca080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  151.695932][  T275]  ffff888077fca100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  151.695940][  T275] ==================================================================
[  151.695947][  T275] Disabling lock debugging due to kernel taint
[  151.700894][ T7293] (syz.4.1046,7293,1):ocfs2_quota_read:201 ERROR: status = -5
[  151.702012][ T7303] (syz.4.1046,7303,0):ocfs2_create:676 ERROR: status = -5
[  151.711177][ T7293] Quota error (device loop4): find_next_id: Can't read quota tree block 5
[  151.721703][  T275] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  151.724903][ T7293] (syz.4.1046,7293,1):ocfs2_get_next_id:909 ERROR: status = -5
[  151.728428][  T275] CPU: 0 PID: 275 Comm: jfsCommit Tainted: G    B             syzkaller #0
[  151.728446][  T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  151.728455][  T275] Call Trace:
[  151.728460][  T275]  <TASK>
[  151.728466][  T275]  dump_stack_lvl+0x168/0x230
[  151.728488][  T275]  ? show_regs_print_info+0x20/0x20
[  151.728504][  T275]  ? load_image+0x3b0/0x3b0
[  151.728524][  T275]  panic+0x2c9/0x7f0
[  151.728541][  T275]  ? bpf_jit_dump+0xd0/0xd0
[  151.728557][  T275]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[  151.728575][  T275]  ? _raw_spin_unlock+0x40/0x40
[  151.728593][  T275]  ? txEnd+0x329/0x520
[  151.728609][  T275]  check_panic_on_warn+0x80/0xa0
[  151.728626][  T275]  ? txEnd+0x329/0x520
[  151.728642][  T275]  end_report+0x6d/0xf0
[  151.728658][  T275]  kasan_report+0x102/0x130
[  151.728674][  T275]  ? txEnd+0x329/0x520
[  151.728692][  T275]  kasan_check_range+0x27b/0x290
[  151.728709][  T275]  txEnd+0x329/0x520
[  151.728727][  T275]  jfs_lazycommit+0x5ba/0xb20
[  151.728746][  T275]  ? txFreelock+0x5a0/0x5a0
[  151.728762][  T275]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  151.728781][  T275]  ? sched_dynamic_update+0x210/0x210
[  151.728799][  T275]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  151.728816][  T275]  ? __kthread_parkme+0x157/0x1b0
[  151.728833][  T275]  kthread+0x436/0x520
[  151.728854][  T275]  ? txFreelock+0x5a0/0x5a0
[  151.728869][  T275]  ? kthread_blkcg+0xd0/0xd0
[  151.728884][  T275]  ret_from_fork+0x1f/0x30
[  151.728906][  T275]  </TASK>
[  151.729106][  T275] Kernel Offset: disabled
[  152.406069][  T275] Rebooting in 86400 seconds..