last executing test programs:

3.169938037s ago: executing program 3 (id=4372):
set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

3.067370088s ago: executing program 3 (id=4376):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x40, 0x7fff0000}]})
shmdt(0x0)

2.820328558s ago: executing program 3 (id=4380):
r0 = io_uring_setup(0x37b0, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x400022a})
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}]}, 0x3}, 0x1)

2.667130557s ago: executing program 3 (id=4384):
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)

2.494033404s ago: executing program 4 (id=4386):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000040)={[{@inode32}, {@swalloc}, {@prjquota}]}, 0x1, 0x97e9, &(0x7f000001c700)="$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")
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

2.09372631s ago: executing program 1 (id=4394):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000300), 0x5, 0x50f, &(0x7f0000001140)="$eJzs3c9vW0UeAPCxnbRJm25/7GrVdqVtpa7U/aHG+aFVk10kxAk4VEJU4gJSCYkbSpw6ip3SRJVI4dYDBwQCCXHgzl/AhZ6oKiHOIK6cUCsoQSqoSA/52a91EjtxS2LTvM9Hcj3P4/o74/Q7GY/f9AUgtY5X/8iEMBBC+DKEsL92uPoJx2t3K3euTFZvmRBFZ7/PxM+rHidPTf7e3hDCcgihL4Tw/NMhvJJZH7e8uDQzUSwW5uvH+crsXL68uHTqwuzEdGG6cHF47PT4+NjQ6Mj4lvX12tuvXTvz6bO7Prn71q0b73z+WbVZA/W6xn5spVrXe8PBhsd6QghPbEewLsjV+9Pf7YbwSKo/vz+HEE7E+b8/5OKfZnvubWvLgO0WRVH0a7S7VfVyBOxY2XgOnMkOhhBq5Wx2cLA2h/9L2JMtlsqV/5wvLVycqs2VD4Te7PkLxcJQ/bPCgdCbqR4Px+UHxyNrjkdDiOfA7+b64+PByVJxqrNDHbDG3jX5/1Oulv9ASrT/kR/YaeQ/pJf8h/SS/5Be8h/S69Hz38gBjztZDOkl/yG9kvxvsk8H2OEaf/8nG7n2daktQGdtNP/f1cF2AB313Jkz1VuU7H+furS4MFO6dGqqUJ4ZnF2YHJwszc8NTpdK0/GendnNXq9YKs0N/zcsXM5XCuVKvry4dG62tHCxci7e13+u0NuRXgHtOHjs+tfVj/3L/+uPb6HhV75chZ0tijKh23uQge7IdXsAArrGV/+QXg/xGb/lfxIGPN42OvWnb2/LqifD3LY0B+iA7EaV9252riFAx5084vs/SCvr/5Be1v8hvTaZ45seQApstvW370Fx9Y6gdtf/7z58m4DtteH6P7CjDTS5/lcURW/sa7h211AI4U8hhK9yvbuTa30BO0H2u0x9/n9y/z8G1tbuyvwcrwFUJ/2vf3j2/csTlcr8cPXxH+4/Xvmg/vhIN9oPtLZ6hS/J0ySPAYD0WrlzZTK5dTLu7adqJyGsj99TX5vsi2cwe1Yyq85VyGzRuQvLV0MIh5vFz9Svd1775mPPSm5d/EP1+0ztJeL29sTXTe9M/CMN8f/eEP/o735XIB2uV8efoWb5l41zOtzPv9Xjz8AWnR+djH/Jl6qN8ZPxL9di/DvWZoxXP3qz2de78cnet6+GcLTp+JvE64tjrY1fbdvJNuPfeumFv7aqiz6uvU6z+IlqKV+ZncuXF5dOXUhaMXZ6fHxsaHRkPB+vUeeTler1/n/4ixut4lf7X9ei/9+s639/vU3/arP/v/zt5ovHN4j/zxPN//0diu/XvP9RdL8N/24z/o8j377cqq4af6rF+59tFj8ktSGMthm//N4z9g4DwB9IeXFpZqJYLMw3KfS2rlJQUOh0oSd0MOhmI8dyZwYoYNs8SPputwQAAAAAAAAAAABoV6uzf69v4enE3e4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBO8FsAAAD//6C71FA=")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000540)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1.804159666s ago: executing program 1 (id=4396):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4)

1.609421525s ago: executing program 1 (id=4398):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680))
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.429504748s ago: executing program 1 (id=4401):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

1.405680545s ago: executing program 3 (id=4403):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8002, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6249, &(0x7f000000c6c0)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0x401)

1.197039365s ago: executing program 2 (id=4406):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000f80)={0xa, 0x0, 0x0, @loopback={0x9d}, 0xa7a}, 0x1c)

1.140229415s ago: executing program 1 (id=4408):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0xf}, {0x18}, 0x0, 0x7})

1.108691082s ago: executing program 4 (id=4409):
timer_create(0xb, &(0x7f00000028c0)={0x0, 0xf, 0x1}, &(0x7f0000002900)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000002940)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000002980))

1.06279224s ago: executing program 2 (id=4410):
syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x800, &(0x7f0000000380)={[{@namecase}, {@gid}, {@utf8}, {@gid}, {@dmask={'dmask', 0x3d, 0x2}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@time_offset={'time_offset', 0x3d, 0xc}}, {@utf8}, {@zero_size_dir}]}, 0x1, 0x152a, &(0x7f00000037c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x92)

957.822398ms ago: executing program 0 (id=4412):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="880100001000130429bd700000000000ac141412000000000000c9cb5fe4f86a630000000000007f000001000000000000000000000000000000004e2000000a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000320000000100000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000800000000000000000008000000000081000000000000000000000000000000000000000000000005000000000000000400000000000000060000040000000000000000f9ffffff0000080000000000000000000200048168000000000000004c001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000004c0014"], 0x188}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)

910.530418ms ago: executing program 1 (id=4413):
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)

752.641864ms ago: executing program 0 (id=4414):
setreuid(0x0, 0xee00)
keyctl$invalidate(0x15, 0x0)

605.900278ms ago: executing program 4 (id=4415):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045009, &(0x7f0000000040))

595.381454ms ago: executing program 2 (id=4416):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x141042)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x7f, 0xe0, 0x6, 0x0})

594.792814ms ago: executing program 0 (id=4417):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x1})

453.076718ms ago: executing program 2 (id=4418):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4008af25, 0x0)

421.284197ms ago: executing program 4 (id=4419):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @private=0xa010100}, 0x0, 0x1, 0x4, 0x3}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000080)="daea12e1", 0x4}], 0x1}, 0xc040080)

420.543646ms ago: executing program 0 (id=4420):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0)

279.384988ms ago: executing program 2 (id=4421):
unshare(0x2040400)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000bd"], 0x48)

227.112938ms ago: executing program 0 (id=4422):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="2f04040000000000fe880000416c7b0472ff5e000000000000000000000101fe80"], 0x28)

198.001472ms ago: executing program 4 (id=4423):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x7ffffffe, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x404, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x32)

96.772779ms ago: executing program 2 (id=4424):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000040)=0x645, 0x4)

84.165703ms ago: executing program 3 (id=4425):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x989}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80016}, 0x4)

598.007µs ago: executing program 4 (id=4426):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000280))

0s ago: executing program 0 (id=4427):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa1)

kernel console output (not intermixed with test programs):

city change from 0 to 2048
[  386.036636][T13787] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  386.053530][T13791] loop4: detected capacity change from 0 to 164
[  386.094539][T13791] rock: corrupted directory entry. extent=32, offset=0, size=65773
[  386.124465][ T5916] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  386.132951][T13791] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  386.290558][ T5916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  386.318132][ T5916] usb 3-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0
[  386.346714][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.365277][ T5916] usb 3-1: Product: syz
[  386.375132][ T5916] usb 3-1: Manufacturer: syz
[  386.383002][ T5916] usb 3-1: SerialNumber: syz
[  386.505029][T13777] loop3: detected capacity change from 0 to 32768
[  386.506470][ T5906] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  386.532192][T13777] gfs2: Invalid block size shift
[  386.667731][ T5916] qmi_wwan 3-1:1.0: skipping garbage
[  386.673524][ T5916] qmi_wwan 3-1:1.0: probe with driver qmi_wwan failed with error -22
[  386.682366][ T5906] usb 2-1: Using ep0 maxpacket: 16
[  386.698585][ T5906] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  386.708719][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.721561][ T5916] usb 3-1: USB disconnect, device number 102
[  386.747516][ T5906] usb 2-1: config 0 has no interface number 0
[  386.765274][ T5906] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  386.775359][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.785591][ T5906] usb 2-1: Product: syz
[  386.791635][ T5906] usb 2-1: Manufacturer: syz
[  386.797809][ T5906] usb 2-1: SerialNumber: syz
[  386.797875][T13811] loop3: detected capacity change from 0 to 4096
[  386.813352][T13811] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  386.818811][ T5906] usb 2-1: config 0 descriptor??
[  386.828531][  T980] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  386.852440][ T5906] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  386.858088][T13811] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  386.862301][ T5906] uvcvideo 2-1:0.105: No valid video chain found.
[  386.881261][T13811] ntfs3(loop3): Failed to load $Secure (-22).
[  386.888630][T13811] ntfs3(loop3): Failed to initialize $Secure (-22).
[  386.896533][ T5831] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  386.997724][  T980] usb 1-1: Using ep0 maxpacket: 16
[  387.007842][  T980] usb 1-1: unable to get BOS descriptor or descriptor too short
[  387.020162][  T980] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8
[  387.034546][  T980] usb 1-1: config 1 interface 0 has no altsetting 0
[  387.042696][  T980] usb 1-1: language id specifier not provided by device, defaulting to English
[  387.056353][ T5831] usb 5-1: Using ep0 maxpacket: 32
[  387.063380][ T5831] usb 5-1: config 250 has an invalid interface number: 8 but max is 0
[  387.073239][ T5944] usb 2-1: USB disconnect, device number 111
[  387.076389][ T5831] usb 5-1: config 250 has no interface number 0
[  387.087473][  T980] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  387.099007][  T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.108850][ T5831] usb 5-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9
[  387.118428][  T980] usb 1-1: Product: syz
[  387.122786][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.131676][  T980] usb 1-1: Manufacturer: 筋�⹀晦䰮良엚ᡊ멤ꦕ
[  387.138845][  T980] usb 1-1: SerialNumber: syz
[  387.155708][T13807] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  387.354142][ T5831] usb 5-1: string descriptor 0 read error: -71
[  387.375435][  T980] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[  387.391316][ T5831] uvcvideo 5-1:250.8: Found Unit with invalid ID 0
[  387.412935][ T5831] uvcvideo 5-1:250.8: probe with driver uvcvideo failed with error -22
[  387.426998][  T980] usb 1-1: USB disconnect, device number 94
[  387.439228][ T5831] usb 5-1: USB disconnect, device number 100
[  387.554836][T13831] loop3: detected capacity change from 0 to 512
[  387.563512][T13831] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  387.574724][T13831] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (4742!=33349)
[  387.588703][T13831] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102]
[  387.596875][T13831] EXT4-fs (loop3): orphan cleanup on readonly fs
[  387.604179][T13831] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3374: invalid indirect mapped block 2185560079 (level 1)
[  387.621235][T13831] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  387.621743][T13831] EXT4-fs (loop3): Remounting filesystem read-only
[  387.636431][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  387.637863][ T5877] usb 3-1: new full-speed USB device number 103 using dummy_hcd
[  387.644019][    C0] EXT4-fs (loop3): initial error at time 2016780463: ext4_free_branches:1023: inode 11
[  387.661357][    C0] EXT4-fs (loop3): last error at time 2016780463: ext4_free_branches:1023: inode 11
[  387.671947][T13831] EXT4-fs (loop3): 1 truncate cleaned up
[  387.685167][T13831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  387.725668][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  387.820225][ T5877] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  387.830776][ T5877] usb 3-1: config 0 has no interface number 0
[  387.845726][ T5877] usb 3-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96
[  387.865329][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.884825][ T5877] usb 3-1: Product: syz
[  387.898262][ T5877] usb 3-1: Manufacturer: syz
[  387.903242][ T5877] usb 3-1: SerialNumber: syz
[  387.911252][ T5877] usb 3-1: config 0 descriptor??
[  387.928890][ T5877] cx231xx 3-1:0.1: New device syz syz @ 12 Mbps (2013:0259) with 1 interfaces
[  387.969693][ T5877] cx231xx 3-1:0.1: Not found matching IAD interface
[  388.188579][T13834] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  388.226745][ T5831] usb 3-1: USB disconnect, device number 103
[  388.248372][T13834] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #72: signature = IN
[  388.288467][T13834] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  388.299325][T13834] (syz.1.3375,13834,1):ocfs2_read_locked_inode:599 ERROR: status = -30
[  388.308547][T13834] (syz.1.3375,13834,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  388.332493][T13834] (syz.1.3375,13834,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=7, slot=0
[  388.363573][T13834] (syz.1.3375,13834,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  388.388099][T13834] (syz.1.3375,13834,1):ocfs2_mount_volume:1758 ERROR: status = -30
[  388.416808][T13834] (syz.1.3375,13834,1):ocfs2_fill_super:1177 ERROR: status = -30
[  388.509809][T13857] set_capacity_and_notify: 2 callbacks suppressed
[  388.509829][T13857] loop4: detected capacity change from 0 to 512
[  388.568927][T13857] EXT4-fs (loop4): orphan cleanup on readonly fs
[  388.639894][T13857] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.3386: ea_inode with extended attributes
[  388.679175][T13857] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  388.683286][T13857] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3386: error while reading EA inode 11 err=-117
[  388.692572][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  388.692600][    C0] EXT4-fs (loop4): initial error at time 2016780464: ext4_xattr_inode_iget:441: inode 11
[  388.692635][    C0] EXT4-fs (loop4): last error at time 2016780464: ext4_xattr_inode_iget:441: inode 11
[  388.733973][T13857] loop4: lost filesystem error report for type 5 error -117
[  388.734455][T13857] EXT4-fs (loop4): 1 orphan inode deleted
[  388.798371][T13857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  388.856398][ T5831] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  388.940591][T13868] loop1: detected capacity change from 0 to 2048
[  388.970274][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.991448][T13868] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  389.006670][ T5831] usb 1-1: Using ep0 maxpacket: 16
[  389.013686][ T5831] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.038621][T13868] NILFS (loop1): too large filesystem blocksize: 2 ^ 347668480 KiB
[  389.052413][ T5831] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.059415][ T5837] udevd[5837]: incorrect nilfs2 checksum on /dev/loop1
[  389.103594][ T5831] usb 1-1: config 1 interface 0 has no altsetting 0
[  389.144240][ T5831] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40
[  389.166819][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.174883][ T5831] usb 1-1: Product: syz
[  389.209727][ T5831] usb 1-1: Manufacturer: syz
[  389.214417][ T5831] usb 1-1: SerialNumber: syz
[  389.261097][T13874] loop2: detected capacity change from 0 to 4096
[  389.264538][ T5831] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input36
[  389.320199][T13874] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  389.357682][T13874] ntfs3(loop2): ino=0, mi_enum_attr
[  389.373546][T13874] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  389.454654][T13874] ntfs3(loop2): Failed to load $MFT.
[  389.467531][ T5176] bcm5974 1-1:1.0: could not read from device
[  389.525113][ T5831] usb 1-1: USB disconnect, device number 95
[  389.547125][ T5176] bcm5974 1-1:1.0: could not read from device
[  389.576050][T13888] loop4: detected capacity change from 0 to 16
[  389.637320][T13888] erofs (device loop4): invalid checksum 0x49e874dc, 0x2a6de271 expected
[  390.105292][T13904] loop3: detected capacity change from 0 to 8192
[  390.127347][T13910] loop2: detected capacity change from 0 to 2048
[  390.161969][T13912] loop0: detected capacity change from 0 to 512
[  390.170891][ T5840]  loop3: AHDI p1 p3 p4
[  390.177239][ T5840] loop3: p3 start 3996538112 is beyond EOD, truncated
[  390.185875][ T5825] Alternate GPT is invalid, using primary GPT.
[  390.196471][ T5840] loop3: p4 start 4278231049 is beyond EOD, truncated
[  390.203707][ T5825]  loop2: p1 p2 p3
[  390.209274][T13904]  loop3: AHDI p1 p3 p4
[  390.219035][T13904] loop3: p3 start 3996538112 is beyond EOD, truncated
[  390.225860][T13904] loop3: p4 start 4278231049 is beyond EOD, truncated
[  390.235049][T13912] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  390.277309][T13912] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  390.353318][T13912] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  390.365422][T13910] Alternate GPT is invalid, using primary GPT.
[  390.396378][T13912] EXT4-fs (loop0): The Hurd can't support 64-bit file systems
[  390.396559][T13910]  loop2: p1 p2 p3
[  390.920678][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  390.935011][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  390.940350][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  391.088645][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  391.092566][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  391.132114][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  391.343747][T13920] loop1: detected capacity change from 0 to 32768
[  391.373670][T13920] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3416 (13920)
[  391.382202][T13950] loop4: detected capacity change from 0 to 4096
[  391.404640][T13948] loop0: detected capacity change from 0 to 8192
[  391.412786][T13950] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  391.433408][T13950] ntfs3(loop4): It is recommended to use chkdsk.
[  391.452321][T13920] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  391.504273][T13920] BTRFS info (device loop1): using blake2b checksum algorithm
[  391.550228][T13920] BTRFS error (device loop1): superblock checksum mismatch
[  391.565946][T13920] BTRFS error (device loop1): open_ctree failed: -22
[  391.579775][ T5831] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  391.591167][ T5825]  loop0: AHDI p1 p2 p3 p4
[  391.617329][ T5825] loop0: p1 start 9043968 is beyond EOD, truncated
[  391.623902][ T5825] loop0: p3 size 4294967040 extends beyond EOD, truncated
[  391.647399][ T5825] loop0: p4 size 101123072 extends beyond EOD, truncated
[  391.702014][T13948]  loop0: AHDI p1 p2 p3 p4
[  391.717126][T13948] loop0: p1 start 9043968 is beyond EOD, truncated
[  391.744907][T13948] loop0: p3 size 4294967040 extends beyond EOD, truncated
[  391.784687][T13948] loop0: p4 size 101123072 extends beyond EOD, truncated
[  391.810822][ T5831] usb 4-1: config index 0 descriptor too short (expected 7768, got 18)
[  391.853732][T13954] (syz.2.3434,13954,0):ocfs2_check_set_options:1265 ERROR: ACL support requested but extended attributes feature is not enabled
[  391.869770][ T5831] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  391.907449][T13954] (syz.2.3434,13954,1):ocfs2_fill_super:1177 ERROR: status = -22
[  391.946200][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.957182][T13959] kAFS: unparsable volume name
[  391.975549][ T5831] usb 4-1: config 0 descriptor??
[  392.218695][ T5828] udevd[5828]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  392.232814][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  392.273110][ T5831] usb 4-1: USB disconnect, device number 67
[  392.329718][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  392.941555][T13964] jfs_mount: Mount Failure: superblock is corrupt!
[  392.959002][T13967] F2FS-fs: heap/no_heap options were deprecated
[  392.966516][T13964] Mount JFS Failure: -22
[  392.972125][T13964] jfs_mount failed w/return code = -22
[  392.973342][T13967] F2FS-fs (loop0): build fault injection rate: 19
[  392.994605][T13967] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  393.015154][T13967] F2FS-fs (loop0): invalid crc value
[  393.070851][T13967] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  393.099598][T13971] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3442 (13971)
[  393.137311][ T5831] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  393.186358][T13971] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  393.236359][T13971] BTRFS info (device loop1): using xxhash64 checksum algorithm
[  393.263491][T13967] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[  393.294396][T13967] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  393.309867][ T5831] usb 4-1: unable to get BOS descriptor or descriptor too short
[  393.321990][T13967] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  393.332190][ T5831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  393.353491][T13973] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3443 (13973)
[  393.366522][ T5831] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  393.380433][ T5831] usb 4-1: config 1 interface 0 has no altsetting 1
[  393.389532][ T5831] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  393.398950][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.408892][T13973] BTRFS info (device loop2): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f
[  393.451620][T13971] BTRFS info (device loop1): enabling ssd optimizations
[  393.463826][ T5831] usb 4-1: Product: syz
[  393.474535][T13973] BTRFS info (device loop2): using blake2b checksum algorithm
[  393.487561][ T5831] usb 4-1: Manufacturer: syz
[  393.492206][ T5831] usb 4-1: SerialNumber: syz
[  393.526377][T13971] BTRFS info (device loop1): turning on async discard
[  393.539279][T13971] BTRFS info (device loop1): enabling free space tree
[  393.573817][ T5831] smsusb:smsusb_probe: board id=8, interface number 0
[  393.701752][ T5816] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  393.722722][T13973] BTRFS info (device loop2): enabling ssd optimizations
[  393.746358][T13973] BTRFS info (device loop2): turning on async discard
[  393.753330][T13973] BTRFS info (device loop2): enabling free space tree
[  393.815728][ T5831] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[  393.836439][ T5831] smsusb 4-1:1.0: probe with driver smsusb failed with error -71
[  393.850450][ T5831] usb 4-1: USB disconnect, device number 68
[  393.862657][ T5821] BTRFS info (device loop2): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f
[  394.168295][T13980] set_capacity_and_notify: 6 callbacks suppressed
[  394.168314][T13980] loop4: detected capacity change from 0 to 32768
[  394.233834][T13980] OCFS2: ERROR (device loop4): int ocfs2_validate_slot_map_block(struct super_block *, struct buffer_head *): Invalid Slot Map Buffer Head Block Number : 0, Should be >= 2
[  394.236053][T13980] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  394.356361][T13980] OCFS2: File system is now read-only.
[  394.361881][T13980] (syz.4.3445,13980,1):ocfs2_map_slot_buffers:411 ERROR: status = -30
[  394.425501][T13980] (syz.4.3445,13980,1):ocfs2_init_slot_info:449 ERROR: status = -30
[  394.487479][T13980] (syz.4.3445,13980,1):ocfs2_initialize_super:2222 ERROR: status = -30
[  394.496147][T13980] (syz.4.3445,13980,1):ocfs2_fill_super:1177 ERROR: status = -30
[  394.559435][T14024] loop1: detected capacity change from 0 to 16
[  394.639005][T14024] erofs (device loop1): mounted with root inode @ nid 36.
[  395.166343][  T980] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  395.341964][T14025] loop3: detected capacity change from 0 to 32768
[  395.359956][  T980] usb 5-1: Using ep0 maxpacket: 32
[  395.365782][T14025] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3452 (14025)
[  395.397146][  T980] usb 5-1: config 0 has an invalid interface number: 166 but max is 0
[  395.401042][T14025] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  395.425930][  T980] usb 5-1: config 0 has no interface number 0
[  395.436809][  T980] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice=fe.ce
[  395.457263][T14025] BTRFS info (device loop3): using xxhash64 checksum algorithm
[  395.469030][  T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.486384][  T980] usb 5-1: Product: syz
[  395.511333][  T980] usb 5-1: Manufacturer: syz
[  395.515982][  T980] usb 5-1: SerialNumber: syz
[  395.549687][  T980] usb 5-1: config 0 descriptor??
[  395.572971][  T980] cdc_subset 5-1:0.166: probe with driver cdc_subset failed with error -22
[  395.591446][T14031] loop2: detected capacity change from 0 to 32768
[  395.616737][T14037] loop1: detected capacity change from 0 to 32768
[  395.644077][T14037] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3457 (14037)
[  395.697793][T14025] BTRFS info (device loop3): enabling ssd optimizations
[  395.709359][T14031] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3454 (14031)
[  395.723491][T14025] BTRFS info (device loop3): turning on async discard
[  395.738526][T14025] BTRFS info (device loop3): enabling free space tree
[  395.753104][T14034] loop0: detected capacity change from 0 to 32768
[  395.773738][T14031] BTRFS info (device loop2): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f
[  395.812741][T14034] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3456 (14034)
[  395.829940][   T24] usb 5-1: USB disconnect, device number 101
[  395.833305][T14037] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  395.846750][T14031] BTRFS info (device loop2): using sha256 checksum algorithm
[  395.859878][T14037] BTRFS info (device loop1): using blake2b checksum algorithm
[  395.895414][T14034] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  395.953747][T14034] BTRFS info (device loop0): using sha256 checksum algorithm
[  395.954273][ T5818] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  395.999364][T14031] BTRFS info (device loop2): enabling ssd optimizations
[  396.028955][T14031] BTRFS info (device loop2): turning on async discard
[  396.035779][T14031] BTRFS info (device loop2): enabling free space tree
[  396.050025][T14037] BTRFS info (device loop1): enabling ssd optimizations
[  396.101134][T14037] BTRFS info (device loop1): turning on async discard
[  396.140602][T14037] BTRFS info (device loop1): enabling free space tree
[  396.169513][T14034] BTRFS info (device loop0): enabling ssd optimizations
[  396.198952][T14034] BTRFS info (device loop0): turning on async discard
[  396.205783][T14034] BTRFS info (device loop0): enabling free space tree
[  396.276864][ T5821] BTRFS info (device loop2): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f
[  396.341634][ T5816] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  396.406122][ T5823] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  396.566029][T14102] loop4: detected capacity change from 0 to 128
[  396.582344][T14102] zonefs (loop4) ERROR: Not a zoned block device
[  396.860309][T14109] loop2: detected capacity change from 0 to 512
[  397.026435][   T24] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  397.057293][T14109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.086588][T14117] loop0: detected capacity change from 0 to 2048
[  397.228138][T14117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.244781][   T24] usb 4-1: Using ep0 maxpacket: 8
[  397.280907][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  397.340183][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.351669][   T24] usb 4-1: config 8 has an invalid interface number: 8 but max is 0
[  397.368332][   T24] usb 4-1: config 8 has no interface number 0
[  397.374471][   T24] usb 4-1: config 8 interface 8 has no altsetting 0
[  397.398704][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.437499][   T24] usb 4-1: language id specifier not provided by device, defaulting to English
[  397.484363][   T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=31.8b
[  397.504754][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.549927][T14125] loop2: detected capacity change from 0 to 128
[  397.556364][   T24] usb 4-1: Product: syz
[  397.560546][   T24] usb 4-1: SerialNumber: syz
[  397.842015][   T24] sr9700 4-1:8.8: probe with driver sr9700 failed with error -22
[  397.899720][   T24] usb 4-1: USB disconnect, device number 69
[  397.978421][T14129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  398.188903][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.348383][T14123] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3468 (14123)
[  398.429127][T14123] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  398.460007][T14123] BTRFS info (device loop1): using blake2b checksum algorithm
[  398.650632][T14152] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  398.714183][T14123] BTRFS info (device loop1): enabling ssd optimizations
[  398.726680][T14123] BTRFS info (device loop1): turning on async discard
[  398.733599][T14123] BTRFS info (device loop1): enabling free space tree
[  398.827763][ T5906] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  398.939825][ T5816] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  399.029331][ T5906] usb 4-1: Using ep0 maxpacket: 16
[  399.038065][ T5906] usb 4-1: config 0 has an invalid interface number: 206 but max is 0
[  399.070104][ T5906] usb 4-1: config 0 has no interface number 0
[  399.088219][ T5906] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  399.113205][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.154830][ T5906] usb 4-1: Product: syz
[  399.164940][ T5906] usb 4-1: Manufacturer: syz
[  399.182119][T14160] set_capacity_and_notify: 7 callbacks suppressed
[  399.182140][T14160] loop1: detected capacity change from 0 to 64
[  399.199964][ T5906] usb 4-1: SerialNumber: syz
[  399.217491][ T5906] usb 4-1: config 0 descriptor??
[  399.231889][ T5906] radioshark2 4-1:0.206: Invalid radioSHARK2 device
[  399.261319][ T5906] radioshark2 4-1:0.206: probe with driver radioshark2 failed with error -22
[  399.272476][ T5906] usbhid 4-1:0.206: couldn't find an input interrupt endpoint
[  399.401058][T14133] loop0: detected capacity change from 0 to 32768
[  399.469878][T14133] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[  399.495248][T14133] dlm: no local IP address has been set
[  399.504753][ T5877] usb 4-1: USB disconnect, device number 70
[  399.536469][T14133] dlm: cannot start dlm midcomms -107
[  399.541897][T14133] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[  399.816364][T14168] loop0: detected capacity change from 0 to 512
[  399.863706][T14168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.970925][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.669933][T14166] loop1: detected capacity change from 0 to 32768
[  400.701101][T14166] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[  400.716360][T14166] dlm: no local IP address has been set
[  400.731307][T14166] dlm: cannot start dlm midcomms -107
[  400.746768][T14166] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[  401.110425][T14183] loop1: detected capacity change from 0 to 512
[  401.353350][T14185] loop1: detected capacity change from 0 to 16
[  401.380485][T14185] erofs (device loop1): mounted with root inode @ nid 36.
[  402.450084][T14187] loop1: detected capacity change from 0 to 32768
[  402.503476][T14187] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  402.535405][T14187] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  402.631243][T14187] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  402.667981][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  402.674804][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  402.816171][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 141ms
[  402.849411][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done
[  402.856742][T14187] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  403.555201][T14195] loop1: detected capacity change from 0 to 128
[  404.094713][T14193] loop2: detected capacity change from 0 to 32768
[  404.213388][T14199] loop3: detected capacity change from 0 to 256
[  404.255520][T14201] loop0: detected capacity change from 0 to 128
[  404.339882][T14203] loop2: detected capacity change from 0 to 128
[  404.537644][T14205] loop0: detected capacity change from 0 to 512
[  405.223441][T14207] loop3: detected capacity change from 0 to 32768
[  405.248219][T14207] (syz.3.3495,14207,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xf0cfb17f. Applying ECC.
[  405.279891][T14211] loop4: detected capacity change from 0 to 32768
[  405.297034][T14207] (syz.3.3495,14207,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xfaa975d8, computed 0xd02a072f
[  405.320960][T14211] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3497 (14211)
[  405.335726][T14207] (syz.3.3495,14207,1):ocfs2_verify_volume:2331 ERROR: status = -5
[  405.354023][T14207] (syz.3.3495,14207,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  405.374485][T14207] (syz.3.3495,14207,1):ocfs2_fill_super:1177 ERROR: status = -5
[  405.395333][T14211] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  405.409760][T14211] BTRFS info (device loop4): using crc32c checksum algorithm
[  405.508729][T14213] loop0: detected capacity change from 0 to 32768
[  405.541510][T14213] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3498 (14213)
[  405.640975][T14213] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  405.652429][T14211] BTRFS info (device loop4): enabling ssd optimizations
[  405.689041][T14211] BTRFS info (device loop4): turning on async discard
[  405.695865][T14211] BTRFS info (device loop4): enabling free space tree
[  405.703062][T14213] BTRFS info (device loop0): using sha256 checksum algorithm
[  405.864550][T14213] BTRFS info (device loop0): enabling ssd optimizations
[  405.873265][T14213] BTRFS info (device loop0): turning on async discard
[  405.880494][T14213] BTRFS info (device loop0): enabling free space tree
[  405.937166][ T5817] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  406.118729][ T5823] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  406.337446][T14230] loop3: detected capacity change from 0 to 32768
[  406.398231][T14230] (syz.3.3499,14230,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  406.478004][T14230] (syz.3.3499,14230,1):ocfs2_fill_super:1177 ERROR: status = -22
[  407.375202][T14250] loop0: detected capacity change from 0 to 32768
[  407.393478][T14253] loop4: detected capacity change from 0 to 32768
[  407.429483][T14250] (syz.0.3501,14250,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  407.460426][T14253] (syz.4.3502,14253,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  407.470956][T14250] (syz.0.3501,14250,1):ocfs2_fill_super:1177 ERROR: status = -22
[  407.497871][T14253] (syz.4.3502,14253,0):ocfs2_fill_super:1177 ERROR: status = -22
[  408.026378][ T5877] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  408.216442][ T5877] usb 5-1: Using ep0 maxpacket: 8
[  408.240488][ T5877] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[  408.259875][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.281203][ T5877] usb 5-1: Product: syz
[  408.285414][ T5877] usb 5-1: Manufacturer: syz
[  408.316321][ T5877] usb 5-1: SerialNumber: syz
[  408.329060][ T5877] usb 5-1: config 0 descriptor??
[  408.338454][T14255] (syz.3.3503,14255,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  408.359357][T14255] (syz.3.3503,14255,1):ocfs2_fill_super:1177 ERROR: status = -22
[  408.386681][ T5877] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  408.484371][T14262] (syz.0.3505,14262,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  408.537995][T14262] (syz.0.3505,14262,0):ocfs2_fill_super:1177 ERROR: status = -22
[  408.582462][ T5877] gspca_m5602: Failed to find a sensor
[  408.599683][ T5877] ALi m5602 5-1:0.0: ALi m5602 webcam failed
[  408.638580][ T5877] usb 5-1: USB disconnect, device number 102
[  409.636455][T14265] set_capacity_and_notify: 3 callbacks suppressed
[  409.636477][T14265] loop2: detected capacity change from 0 to 65536
[  409.714885][T14265] (syz.2.3507,14265,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  409.747359][T14265] (syz.2.3507,14265,0):ocfs2_fill_super:1177 ERROR: status = -22
[  410.001823][T14282] loop2: detected capacity change from 0 to 128
[  410.061117][T14282] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  410.096995][T14282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  410.308999][T14284] loop2: detected capacity change from 0 to 512
[  410.365741][T14284] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  410.393780][T14284] UDF-fs: Scanning with blocksize 512 failed
[  410.417301][T14284] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  410.455203][T14284] UDF-fs: Scanning with blocksize 1024 failed
[  410.505636][T14284] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  410.523506][T14284] UDF-fs: Scanning with blocksize 2048 failed
[  410.555036][T14284] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  410.592808][T14284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  410.854787][T14286] loop2: detected capacity change from 0 to 128
[  410.913716][T14286] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  410.959760][T14286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  411.316763][T14288] loop2: detected capacity change from 0 to 8192
[  411.364815][T14288] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  411.384420][T14288] UDF-fs: Scanning with blocksize 512 failed
[  411.427733][T14288] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  411.455484][T14288] UDF-fs: Scanning with blocksize 1024 failed
[  411.496334][T14288] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  411.503759][T14288] UDF-fs: Scanning with blocksize 2048 failed
[  411.570387][T14288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  411.862361][T14290] loop2: detected capacity change from 0 to 512
[  412.380340][T14296] loop3: detected capacity change from 0 to 256
[  412.645325][T14298] loop3: detected capacity change from 0 to 128
[  413.360292][T14304] loop0: detected capacity change from 0 to 256
[  413.373696][T14292] loop2: detected capacity change from 0 to 65536
[  413.407029][T14304] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  413.440492][T14304] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  413.481861][T14304] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  413.522710][T14304] UDF-fs: Scanning with blocksize 512 failed
[  413.559697][T14304] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  413.612562][T14305] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  413.654254][T14304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  415.082120][T14309] loop2: detected capacity change from 0 to 32768
[  415.115106][T14307] loop0: detected capacity change from 0 to 65536
[  415.162479][T14309] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  415.182804][T14307] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel.
[  415.344127][T14309] XFS (loop2): Ending clean mount
[  415.431022][ T5821] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  415.991361][T14324] loop0: detected capacity change from 0 to 16384
[  416.057357][T14327] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  416.077203][T14326] loop2: detected capacity change from 0 to 8192
[  416.136540][T14328] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  416.875684][T14344] loop0: detected capacity change from 0 to 256
[  417.463593][T14332] loop2: detected capacity change from 0 to 32768
[  417.517128][T14332] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[  417.525177][T14332] dlm: no local IP address has been set
[  417.636304][T14332] dlm: cannot start dlm midcomms -107
[  417.641741][T14332] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[  417.700817][T14379] loop4: detected capacity change from 0 to 256
[  417.799429][T14379] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  418.446629][ T5831] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  418.577224][T14414] loop1: detected capacity change from 0 to 2048
[  418.621070][T14414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  418.681370][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  418.711953][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0
[  418.712412][T14420] loop2: detected capacity change from 0 to 64
[  418.737010][ T5831] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  418.777788][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.806760][ T5831] usb 1-1: Product: syz
[  418.824397][ T5831] usb 1-1: Manufacturer: syz
[  418.846694][ T5831] usb 1-1: SerialNumber: syz
[  418.885622][ T5831] usb 1-1: config 0 descriptor??
[  418.915266][ T5831] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  418.945912][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  418.997901][ T5831] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  419.008970][ T5831] usb 1-1: media controller created
[  419.087123][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  419.193721][ T5831] DVB: Unable to find symbol tda10046_attach()
[  419.222838][ T5831] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  419.256512][ T5831] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  419.419870][T14443] netlink: 'syz.4.3584': attribute type 8 has an invalid length.
[  419.475740][ T5831] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  419.490397][T14404] loop3: detected capacity change from 0 to 32768
[  419.510071][ T5831] usb 1-1: USB disconnect, device number 96
[  419.551537][T14404] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  419.580011][T14404] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  419.641385][T14404] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  419.668931][ T5877] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  419.675749][ T5877] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  419.883872][ T5877] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 208ms
[  419.892141][ T5877] gfs2: fsid=syz:syz.0: jid=0: Done
[  419.897774][T14404] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  419.938360][ T5944] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  420.096358][ T5906] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  420.108628][ T5944] usb 5-1: Using ep0 maxpacket: 32
[  420.131779][ T5944] usb 5-1: config 0 has an invalid interface number: 146 but max is 0
[  420.166698][ T5944] usb 5-1: config 0 has no interface number 0
[  420.175656][ T5944] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  420.207040][ T5944] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  420.223707][ T5944] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  420.261003][ T5944] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  420.272616][ T5944] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  420.287993][ T5944] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  420.288675][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  420.298765][ T5944] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  420.319814][ T5944] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29557, setting to 1024
[  420.346383][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[  420.355622][ T5944] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  420.364131][ T5906] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  420.400637][ T5944] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  420.409776][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.434779][ T5944] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  420.444692][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.445460][ T5906] usb 3-1: config 0 descriptor??
[  420.461698][ T5944] usb 5-1: Product: syz
[  420.465894][ T5944] usb 5-1: Manufacturer: syz
[  420.495968][ T5944] usb 5-1: SerialNumber: syz
[  420.511634][ T5944] usb 5-1: config 0 descriptor??
[  420.513041][ T5906] gspca_main: spca501-2.14.0 probing 0000:0000
[  420.531580][T14453] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  420.551313][T14453] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  420.572849][ T5944] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[  420.590536][ T5944] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[  420.623218][ T5944] scsi host1: microtekX6
[  420.902390][ T5944] usb 5-1: USB disconnect, device number 103
[  420.924714][T14493] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  420.927305][ T5906] gspca_spca501: reg write: error -71
[  420.975243][ T5906] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00
[  420.984054][ T5906] spca501 3-1:0.0: probe with driver spca501 failed with error -22
[  421.046483][ T5906] usb 3-1: USB disconnect, device number 104
[  421.275054][T14502] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3611'.
[  421.527621][T14511] xt_ecn: cannot match TCP bits for non-tcp packets
[  421.613060][T14514] loop3: detected capacity change from 0 to 512
[  421.647273][T14514] EXT4-fs: Ignoring removed bh option
[  421.651507][T14517] netlink: 328 bytes leftover after parsing attributes in process `syz.1.3618'.
[  421.673950][T14514] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  421.707987][T14514] EXT4-fs (loop3): 1 truncate cleaned up
[  421.737099][T14514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  421.920784][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.050987][T14537] loop4: detected capacity change from 0 to 256
[  422.061775][T14537] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  422.134965][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3625'.
[  422.312674][T14550] autofs4:pid:14550:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2147483646), cmd(0xc0189375)
[  422.372975][T14550] autofs4:pid:14550:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[  422.525355][T14559] loop3: detected capacity change from 0 to 2048
[  422.571023][T14559] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  422.591046][T14563] netlink: 'syz.0.3638': attribute type 21 has an invalid length.
[  422.613876][T14565] loop2: detected capacity change from 0 to 256
[  422.626770][T14563] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3638'.
[  422.657774][T14563] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3638'.
[  422.669912][T14568] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  423.324590][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3655'.
[  423.522447][T14611] loop4: detected capacity change from 0 to 8
[  423.994506][T14633] loop1: detected capacity change from 0 to 764
[  424.012486][T14625] loop0: detected capacity change from 0 to 8192
[  424.041729][T14633] Symlink component flag not implemented
[  424.073819][T14633] Symlink component flag not implemented
[  424.082140][T14633] Symlink component flag not implemented (129)
[  424.093861][T14633] Symlink component flag not implemented (6)
[  424.101477][T14625] syz.0.3667: attempt to access beyond end of device
[  424.101477][T14625] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  424.189403][T14625] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[  424.216392][T14625] FAT-fs (loop0): Filesystem has been set read-only
[  424.258587][T14625] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[  424.275489][T14625] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[  424.469707][T14641] loop1: detected capacity change from 0 to 2048
[  424.551128][T14641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  424.591750][T14620] loop4: detected capacity change from 0 to 32768
[  424.623987][T14620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3666 (14620)
[  424.680248][T14651] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3681'.
[  424.719138][T14620] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  424.776754][T14620] BTRFS info (device loop4): using sha256 checksum algorithm
[  424.841079][T14658] loop0: detected capacity change from 0 to 256
[  424.867659][T14658] exfat: Deprecated parameter 'utf8'
[  424.923211][T14658] exfat: Deprecated parameter 'namecase'
[  424.969050][T14658] exfat: Deprecated parameter 'namecase'
[  424.993375][T14658] exfat: Deprecated parameter 'utf8'
[  425.043498][T14620] BTRFS info (device loop4): enabling ssd optimizations
[  425.080061][T14658] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  425.109939][T14620] BTRFS info (device loop4): turning on async discard
[  425.120000][T14620] BTRFS info (device loop4): enabling free space tree
[  425.148741][T14658] exFAT-fs (loop0): failed to test first cluster bit of root dir(5)
[  425.241818][   T29] audit: type=1800 audit(2016780500.695:14): pid=14658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3683" name="file2" dev="loop0" ino=1048610 res=0 errno=0
[  425.292539][ T5817] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  425.613209][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3694'.
[  425.738880][ T5831] kernel write not supported for file /input/mice (pid: 5831 comm: kworker/0:4)
[  425.827264][T14702] tmpfs: Bad value for 'nr_blocks'
[  426.161375][T14720] netlink: 'syz.1.3706': attribute type 5 has an invalid length.
[  426.560089][T14743] rock: directory entry would overflow storage
[  426.581225][T14743] rock: sig=0x4654, size=5, remaining=4
[  426.591683][T14743] isofs: Unable to find the ".." directory for NFS.
[  426.625660][T14748] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  426.703686][T14745] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  426.773603][T14745] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16)
[  426.835033][T14745] Remounting filesystem read-only
[  426.875605][T14745] NILFS (loop2): error -5 truncating bmap (ino=16)
[  427.046167][ T5821] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  427.622919][T14788] set_capacity_and_notify: 2 callbacks suppressed
[  427.622938][T14788] loop1: detected capacity change from 0 to 2048
[  427.680576][T14791] x_tables: ip6_tables: mh match: only valid for protocol 135
[  427.745719][ T5837] Alternate GPT is invalid, using primary GPT.
[  427.776379][ T5837]  loop1: p1 p2 p3
[  427.806225][T14798] loop4: detected capacity change from 0 to 1024
[  427.826997][T14798] EXT4-fs: Ignoring removed nomblk_io_submit option
[  427.855553][T14798] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  427.895043][T14788] Alternate GPT is invalid, using primary GPT.
[  427.907553][T14798] System zones: 0-1, 3-36
[  427.919615][T14788]  loop1: p1 p2 p3
[  427.985892][T14798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.144749][T14814] netlink: 'syz.3.3750': attribute type 1 has an invalid length.
[  428.158956][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  428.170107][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  428.170825][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  428.215106][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.260341][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  428.270041][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  428.274689][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  428.376358][ T5831] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  428.438753][T14822] loop4: detected capacity change from 0 to 4096
[  428.463162][T14827] loop0: detected capacity change from 0 to 16
[  428.507293][T14829] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  428.526148][T14827] erofs (device loop0): mounted with root inode @ nid 36.
[  428.536623][ T5831] usb 3-1: Using ep0 maxpacket: 16
[  428.567857][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  428.609116][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  428.614626][T14827] syz.0.3757: attempt to access beyond end of device
[  428.614626][T14827] loop0: rw=524288, sector=4718600, nr_sectors = 8 limit=16
[  428.646313][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  428.663756][T14827] syz.0.3757: attempt to access beyond end of device
[  428.663756][T14827] loop0: rw=0, sector=4718600, nr_sectors = 8 limit=16
[  428.690493][T14827] erofs (device loop0): read error -5 @ 0 of nid 89
[  428.692016][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  428.733575][   T29] audit: type=1800 audit(2016780504.175:15): pid=14827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3757" name="file3" dev="loop0" ino=89 res=0 errno=0
[  428.764342][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  428.801060][ T5831] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  428.816477][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.849695][ T5831] usb 3-1: Product: syz
[  428.853906][ T5831] usb 3-1: Manufacturer: syz
[  428.875572][ T5831] usb 3-1: SerialNumber: syz
[  428.895412][ T5831] usb 3-1: config 0 descriptor??
[  428.956342][   T24] usb 4-1: new full-speed USB device number 71 using dummy_hcd
[  429.029440][T14841] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3763'.
[  429.127796][   T24] usb 4-1: config 8 has an invalid interface number: 223 but max is 0
[  429.169191][   T24] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  429.181810][ T5831] appledisplay: Apple Cinema Display connected
[  429.190039][   T24] usb 4-1: config 8 has no interface number 0
[  429.196177][   T24] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  429.236361][   T24] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  429.250357][T14848] ubi31: attaching mtd0
[  429.267674][T14848] ubi31: scanning is finished
[  429.274952][T14848] ubi31: empty MTD device detected
[  429.293399][   T24] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  429.306700][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.332657][   T24] usb 4-1: Product: syz
[  429.341494][   T24] usb 4-1: Manufacturer: syz
[  429.348675][   T24] usb 4-1: SerialNumber: syz
[  429.450293][ T5944] usb 3-1: USB disconnect, device number 105
[  429.450484][    C0] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -19
[  429.467425][ T5944] appledisplay: Apple Cinema Display disconnected
[  429.584738][   T24] usb 4-1: USB disconnect, device number 71
[  429.585509][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3772'.
[  429.620612][T14848] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  429.630800][T14848] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  429.638639][T14848] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  429.645847][T14848] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  429.654427][T14848] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  429.661722][T14848] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  429.670190][T14848] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3662147247
[  429.681977][T14848] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  429.706027][T14861] ubi31: background thread "ubi_bgt31d" started, PID 14861
[  429.787238][  T796] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  429.877381][T14869] autofs4:pid:14869:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(32.1), cmd(0xc0189379)
[  429.891223][T14869] autofs4:pid:14869:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379)
[  429.963778][  T796] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  430.004413][  T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.017062][  T796] usb 5-1: Product: syz
[  430.022691][  T796] usb 5-1: Manufacturer: syz
[  430.038965][  T796] usb 5-1: SerialNumber: syz
[  430.082650][  T796] usb 5-1: config 0 descriptor??
[  430.316802][  T796] hso 5-1:0.0: Failed to find BULK IN ep
[  430.339199][  T796] usb-storage 5-1:0.0: USB Mass Storage device detected
[  430.473353][T14891] program syz.2.3784 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  430.494940][T14891] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  430.544837][  T796] usb 5-1: USB disconnect, device number 104
[  430.685583][T14897] xt_socket: unknown flags 0x4
[  430.829820][T14877] loop1: detected capacity change from 0 to 32768
[  430.849451][T14877] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3777 (14877)
[  430.902837][T14877] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  430.936483][T14877] BTRFS info (device loop1): using sha256 checksum algorithm
[  431.106702][T14877] BTRFS info (device loop1): enabling ssd optimizations
[  431.113730][T14877] BTRFS info (device loop1): turning on async discard
[  431.186060][T14877] BTRFS info (device loop1): enabling free space tree
[  431.361231][ T5816] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  431.502000][T14903] loop2: detected capacity change from 0 to 32768
[  431.566477][T14903] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3789 (14903)
[  431.627687][T14903] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  431.688977][T14903] BTRFS info (device loop2): using sha256 checksum algorithm
[  431.927457][T14903] BTRFS info (device loop2): enabling ssd optimizations
[  431.934462][T14903] BTRFS info (device loop2): turning on async discard
[  432.014272][T14903] BTRFS info (device loop2): enabling free space tree
[  432.176617][ T5821] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  433.003976][T14944] loop4: detected capacity change from 0 to 40427
[  433.060403][T14944] F2FS-fs (loop4): build fault injection rate: 690
[  433.086172][T14944] F2FS-fs (loop4): invalid crc value
[  433.347805][ T5906] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  433.367177][T14944] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  433.391010][T14944] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  433.516818][ T5906] usb 3-1: Using ep0 maxpacket: 8
[  433.542896][T15028] loop0: detected capacity change from 0 to 256
[  433.545626][ T5906] usb 3-1: unable to get BOS descriptor or descriptor too short
[  433.570482][T15028] exfat: Deprecated parameter 'namecase'
[  433.594890][ T5906] usb 3-1: config 1 has an invalid interface number: 6 but max is 2
[  433.620574][T15028] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  433.627203][ T5906] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  433.665602][ T5906] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[  433.685448][T15028] fuse: Unknown parameter '¿ß


[  433.685448][T15028] T¨0c0c1æÂܘó`Œ`ã0óa>Ì�ù± ÄxŒÇ"X$$'
[  433.700913][ T5906] usb 3-1: config 1 has no interface number 3
[  433.746366][ T5906] usb 3-1: too many endpoints for config 1 interface 6 altsetting 29: 147, using maximum allowed: 30
[  433.770178][ T5906] usb 3-1: config 1 interface 6 altsetting 29 has an invalid endpoint descriptor of length 4, skipping
[  433.814364][ T5906] usb 3-1: config 1 interface 6 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 147
[  433.855146][ T5906] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 202, changing to 7
[  433.902260][ T5906] usb 3-1: config 1 interface 6 has no altsetting 0
[  433.936469][ T5906] usb 3-1: config 1 interface 1 has no altsetting 0
[  433.952713][ T5906] usb 3-1: string descriptor 0 read error: -22
[  433.961201][T15034] xt_cgroup: invalid path, errno=-2
[  433.966450][ T5906] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  433.966486][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.982343][ T5906] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  434.013472][T15036] loop3: detected capacity change from 0 to 512
[  434.014863][ T5906] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  434.040306][T15036] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  434.048809][ T5906] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  434.149015][T15036] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3839: bg 0: block 104: invalid block bitmap
[  434.227148][T15036] loop3: lost filesystem error report for type 5 error -117
[  434.236302][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  434.250136][    C1] EXT4-fs (loop3): initial error at time 2016780509: ext4_validate_block_bitmap:432
[  434.259588][    C1] EXT4-fs (loop3): last error at time 2016780509: ext4_validate_block_bitmap:432
[  434.260508][T15042] loop0: detected capacity change from 0 to 1764
[  434.273926][T15036] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem
[  434.287777][T15027] loop1: detected capacity change from 0 to 32768
[  434.323172][T15042] iso9660: Corrupted directory entry in block 2 of inode 1920
[  434.329395][T15036] loop3: lost filesystem error report for type 5 error -117
[  434.339397][T15036] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3839: invalid indirect mapped block 1 (level 1)
[  434.360713][T15036] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  434.363947][T15036] EXT4-fs (loop3): 1 truncate cleaned up
[  434.379880][T15027] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  434.393087][T15036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  434.455570][   T29] audit: type=1800 audit(2016780509.905:16): pid=15036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3839" name="file1" dev="loop3" ino=18 res=0 errno=0
[  434.531575][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.546221][T15027] XFS (loop1): Ending clean mount
[  434.618915][T15027] XFS (loop1): Quotacheck needed: Please wait.
[  434.644387][  T796] usb 3-1: USB disconnect, device number 106
[  434.701150][T15027] XFS (loop1): Quotacheck: Done.
[  434.800205][T15060] loop0: detected capacity change from 0 to 4096
[  434.829777][ T5816] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  434.863173][T15060] ntfs3(loop0): ino=0, mi_enum_attr
[  434.918562][T15060] ntfs3(loop0): ino=0, mi_enum_attr
[  434.946458][T15060] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  435.076584][T15068] netlink: 'syz.3.3850': attribute type 1 has an invalid length.
[  435.084717][T15068] netlink: 'syz.3.3850': attribute type 2 has an invalid length.
[  435.112506][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3850'.
[  435.493240][T15081] loop1: detected capacity change from 0 to 512
[  435.529071][T15085] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3857'.
[  435.566893][T15081] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.3848: inode has both inline data and extents flags
[  435.605515][T15081] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  435.605869][T15081] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3848: couldn't read orphan inode 15 (err -117)
[  435.615106][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  435.615136][    C1] EXT4-fs (loop1): initial error at time 2016780511: ext4_orphan_get:1391: inode 15
[  435.615172][    C1] EXT4-fs (loop1): last error at time 2016780511: ext4_orphan_get:1391: inode 15
[  435.716378][T15081] loop1: lost filesystem error report for type 5 error -117
[  435.728986][T15081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.767313][T15092] x_tables: ip6_tables: mh match: only valid for protocol 135
[  435.855644][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3860'.
[  435.979339][T15102] loop0: detected capacity change from 0 to 256
[  436.084413][T15102] FAT-fs (loop0): Directory bread(block 64) failed
[  436.086776][  T796] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  436.109110][T15102] FAT-fs (loop0): Directory bread(block 65) failed
[  436.126069][T15102] FAT-fs (loop0): Directory bread(block 66) failed
[  436.155721][T15102] FAT-fs (loop0): Directory bread(block 67) failed
[  436.182988][T15102] FAT-fs (loop0): Directory bread(block 68) failed
[  436.222462][T15102] FAT-fs (loop0): Directory bread(block 69) failed
[  436.229852][T15102] FAT-fs (loop0): Directory bread(block 70) failed
[  436.237196][T15102] FAT-fs (loop0): Directory bread(block 71) failed
[  436.251171][T15102] FAT-fs (loop0): Directory bread(block 72) failed
[  436.276736][T15102] FAT-fs (loop0): Directory bread(block 73) failed
[  436.278929][  T796] usb 2-1: Using ep0 maxpacket: 16
[  436.362815][  T796] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  436.375493][  T796] usb 2-1: config 0 has no interface number 0
[  436.402055][  T796] usb 2-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  436.433213][  T796] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x8D has invalid maxpacket 26389, setting to 1024
[  436.468488][  T796] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  436.497856][  T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.517558][  T796] usb 2-1: Product: syz
[  436.521918][  T796] usb 2-1: Manufacturer: syz
[  436.537795][  T796] usb 2-1: SerialNumber: syz
[  436.550505][  T796] usb 2-1: config 0 descriptor??
[  436.556134][T15081] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  436.627492][   T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  436.696418][ T5906] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  436.783144][  T796] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71
[  436.788680][T15112] loop4: detected capacity change from 0 to 32768
[  436.816532][   T24] usb 4-1: Using ep0 maxpacket: 32
[  436.826744][  T796] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71
[  436.848447][   T24] usb 4-1: config 0 has an invalid interface number: 116 but max is 0
[  436.871544][ T5906] usb 3-1: config 0 has an invalid interface number: 175 but max is 0
[  436.872983][   T24] usb 4-1: config 0 has no interface number 0
[  436.891805][ T5906] usb 3-1: config 0 has no interface number 0
[  436.899129][  T796] usb 2-1: USB disconnect, device number 112
[  436.916175][ T5906] usb 3-1: config 0 interface 175 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  436.916344][   T24] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  436.976340][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.994080][ T5906] usb 3-1: config 0 interface 175 has no altsetting 0
[  437.028899][ T5906] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[  437.029154][   T24] usb 4-1: config 0 descriptor??
[  437.056497][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.077676][ T5906] usb 3-1: Product: syz
[  437.081893][ T5906] usb 3-1: Manufacturer: syz
[  437.112903][ T5906] usb 3-1: SerialNumber: syz
[  437.144303][ T5906] usb 3-1: config 0 descriptor??
[  437.344611][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.398721][ T5906] hub 3-1:0.175: bad descriptor, ignoring hub
[  437.404862][ T5906] hub 3-1:0.175: probe with driver hub failed with error -5
[  437.430609][ T5831] usb 4-1: USB disconnect, device number 72
[  437.450974][ T5906] usbsevseg 3-1:0.175: USB 7 Segment device now attached
[  437.507179][ T5906] usb 3-1: USB disconnect, device number 107
[  437.538597][ T5906] usbsevseg 3-1:0.175: USB 7 Segment now disconnected
[  437.832602][T15156] warning: `syz.1.3880' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  437.860656][T15137] loop0: detected capacity change from 0 to 32768
[  438.145519][T15145] loop4: detected capacity change from 0 to 32768
[  438.221660][T15145] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  438.245530][   T29] audit: type=1326 audit(2016780513.695:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cf79bf79 code=0x7ffc0000
[  438.276702][  T796] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  438.345786][T15145] XFS (loop4): Ending clean mount
[  438.366532][   T29] audit: type=1326 audit(2016780513.725:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f95cf79bf79 code=0x7ffc0000
[  438.456357][  T796] usb 2-1: Using ep0 maxpacket: 16
[  438.463860][  T796] usb 2-1: config 254 has an invalid interface number: 235 but max is 0
[  438.501518][  T796] usb 2-1: config 254 has no interface number 0
[  438.507176][   T29] audit: type=1326 audit(2016780513.725:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cf79bf79 code=0x7ffc0000
[  438.523472][  T796] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  438.577798][ T5817] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  438.579248][   T29] audit: type=1326 audit(2016780513.725:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15174 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cf79bf79 code=0x7ffc0000
[  438.615447][  T796] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  438.639649][  T796] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  438.656993][  T796] usb 2-1: config 254 interface 235 has no altsetting 0
[  438.691412][  T796] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  438.771003][  T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5
[  438.803323][  T796] usb 2-1: Product: syz
[  438.828349][  T796] usb 2-1: Manufacturer: syz
[  438.836572][  T796] usb 2-1: SerialNumber: syz
[  438.856950][T15161] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  439.110692][T15161] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  439.146740][  T796] usbtest 2-1:254.235: Linux gadget zero
[  439.152434][  T796] usbtest 2-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt)
[  439.247418][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'.
[  439.358299][ T5831] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  439.384895][  T796] usb 2-1: USB disconnect, device number 113
[  439.414901][T15214] loop0: detected capacity change from 0 to 4096
[  439.442186][T15214] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  439.495830][T15214] ntfs3(loop0): ino=19, mi_enum_attr
[  439.509951][T15214] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  439.526387][ T5831] usb 4-1: Using ep0 maxpacket: 16
[  439.552561][ T5831] usb 4-1: config index 0 descriptor too short (expected 65, got 36)
[  439.571518][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  439.590754][T15214] ntfs3(loop0): failed to convert "c46c" to cp437
[  439.609954][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  439.635184][T15214] ntfs3(loop0): ino=20, mi_enum_attr
[  439.666333][ T5831] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  439.695985][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.775339][ T5831] usb 4-1: config 0 descriptor??
[  439.823224][ T5831] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input38
[  440.013743][T15238] loop2: detected capacity change from 0 to 256
[  440.045228][ T5877] usb 4-1: USB disconnect, device number 73
[  440.045544][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  440.055583][ T5176] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[  440.057652][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  440.087500][T15238] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  440.202194][T15244] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  440.321156][ T5831] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[  440.423289][T15256] netlink: 'syz.4.3923': attribute type 2 has an invalid length.
[  440.497846][ T5831] usb 2-1: unable to get BOS descriptor or descriptor too short
[  440.510275][ T5831] usb 2-1: not running at top speed; connect to a high speed hub
[  440.530916][ T5831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  440.543918][ T5831] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  440.565333][ T5831] usb 2-1: string descriptor 0 read error: -22
[  440.578834][ T5831] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  440.596496][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.617694][ T5831] usb 2-1: 0:2 : does not exist
[  440.837168][ T5831] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  440.902815][ T5831] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  440.917285][T15273] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  440.939624][ T5831] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  440.960471][T15273] bond1 (unregistering): Released all slaves
[  440.981165][ T5831] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  441.071937][ T5831] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  441.106033][ T5831] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  441.165943][T15278] ip6gre1: entered allmulticast mode
[  441.192495][ T5831] usb 2-1: USB disconnect, device number 114
[  441.361830][T15290] loop2: detected capacity change from 0 to 2048
[  441.402146][T15290] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26504, location=26504
[  441.488247][T15290] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  441.836004][T15311] overlayfs: overlapping lowerdir path
[  441.972190][T15315] loop4: detected capacity change from 0 to 512
[  442.001851][T15318] loop1: detected capacity change from 0 to 512
[  442.030936][T15318] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.3954: ea_inode with extended attributes
[  442.069012][T15318] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  442.069516][T15318] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3954: error while reading EA inode 11 err=-117
[  442.078776][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  442.078801][    C0] EXT4-fs (loop1): initial error at time 2016780517: ext4_xattr_inode_iget:441: inode 11
[  442.078834][    C0] EXT4-fs (loop1): last error at time 2016780517: ext4_xattr_inode_iget:441: inode 11
[  442.113448][T15315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.191010][ T5834] Bluetooth: hci4: command 0x0405 tx timeout
[  442.218188][T15318] loop1: lost filesystem error report for type 5 error -117
[  442.223101][T15318] EXT4-fs (loop1): 1 orphan inode deleted
[  442.254328][T15318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.281301][T15287] loop0: detected capacity change from 0 to 32768
[  442.301027][T15315] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.3952: bg 0: bad block bitmap checksum
[  442.337998][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.351442][T15287] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  442.367023][T15287] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  442.382916][T15315] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6687: Filesystem failed CRC
[  442.472574][T15287] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  442.494242][ T5831] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  442.506590][ T5831] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  442.546340][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.754697][ T5831] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 248ms
[  442.791671][ T5831] gfs2: fsid=syz:syz.0: jid=0: Done
[  442.816692][T15287] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  442.971124][T15287] gfs2: fsid=syz:syz.0: found 1 quota changes
[  443.160237][T15329] loop2: detected capacity change from 0 to 40427
[  443.206515][T15329] F2FS-fs (loop2): build fault injection rate: 25
[  443.224327][T15329] F2FS-fs (loop2): build fault injection type: 0x7698c
[  443.256133][ T5823] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  443.269124][T15329] F2FS-fs (loop2): invalid crc value
[  443.300973][T15329] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21c/0xd60
[  443.313288][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  443.313315][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  443.313336][ T5823] Call Trace:
[  443.313344][ T5823]  <TASK>
[  443.313352][ T5823]  dump_stack_lvl+0xe8/0x150
[  443.313383][ T5823]  gfs2_assert_warn_i+0x194/0x2c0
[  443.313416][ T5823]  gfs2_qd_dispose+0x466/0x570
[  443.313445][ T5823]  gfs2_quota_cleanup+0x434/0x760
[  443.313470][ T5823]  ? __pfx_gfs2_quota_cleanup+0x10/0x10
[  443.313514][ T5823]  gfs2_make_fs_ro+0x2a0/0x320
[  443.313536][ T5823]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  443.313552][ T5823]  ? do_raw_spin_lock+0x12b/0x2f0
[  443.313591][ T5823]  ? do_raw_spin_unlock+0xf5/0x210
[  443.313615][ T5823]  gfs2_put_super+0x220/0x860
[  443.313641][ T5823]  ? __pfx_gfs2_put_super+0x10/0x10
[  443.313659][ T5823]  generic_shutdown_super+0x13d/0x2d0
[  443.313691][ T5823]  kill_block_super+0x44/0x90
[  443.313713][ T5823]  deactivate_locked_super+0xbc/0x130
[  443.313741][ T5823]  cleanup_mnt+0x437/0x4d0
[  443.313761][ T5823]  ? _raw_spin_unlock_irq+0x23/0x50
[  443.313791][ T5823]  task_work_run+0x1d9/0x270
[  443.313816][ T5823]  ? __pfx_task_work_run+0x10/0x10
[  443.313845][ T5823]  exit_to_user_mode_loop+0xed/0x480
[  443.313866][ T5823]  ? rcu_is_watching+0x15/0xb0
[  443.313895][ T5823]  do_syscall_64+0x32d/0xf80
[  443.313913][ T5823]  ? trace_irq_disable+0x3b/0x150
[  443.313939][ T5823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.313958][ T5823]  ? clear_bhb_loop+0x40/0x90
[  443.313982][ T5823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.314005][ T5823] RIP: 0033:0x7f95cf79d1d7
[  443.314024][ T5823] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  443.314041][ T5823] RSP: 002b:00007ffe60d8b578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  443.314061][ T5823] RAX: 0000000000000000 RBX: 00007f95cf831c3b RCX: 00007f95cf79d1d7
[  443.314075][ T5823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe60d8b630
[  443.314088][ T5823] RBP: 00007ffe60d8b630 R08: 00007ffe60d8c630 R09: 00000000ffffffff
[  443.314101][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe60d8c6c0
[  443.314114][ T5823] R13: 00007f95cf831c3b R14: 000000000006c2c9 R15: 00007ffe60d8c700
[  443.314146][ T5823]  </TASK>
[  443.352025][T15329] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  443.810947][T15329] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  443.874490][T15329] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  443.921570][T15329] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of write_normal_summaries+0x120/0x3f0
[  444.007674][T15329] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5d2/0x23e0
[  444.037860][T15329] F2FS-fs (loop2): invalid blkaddr: 516, type: 10, run fsck to fix.
[  444.117335][   T86] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  444.164091][T15381] loop4: detected capacity change from 0 to 164
[  444.213293][T15381] Unable to read rock-ridge attributes
[  444.257701][T15381] Unable to read rock-ridge attributes
[  444.263628][T15381] iso9660: Corrupted directory entry in block 4 of inode 1792
[  444.354448][T15387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3982'.
[  444.778908][T15405] nftables ruleset with unbound chain
[  445.135408][T15423] loop0: detected capacity change from 0 to 256
[  445.147749][ T5831] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  445.319104][ T5831] usb 3-1: Using ep0 maxpacket: 32
[  445.338706][ T5831] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  445.350788][ T5831] usb 3-1: config 0 has no interface number 0
[  445.376372][ T5831] usb 3-1: config 0 interface 12 has no altsetting 0
[  445.400211][ T5831] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  445.421878][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.447371][ T5831] usb 3-1: Product: syz
[  445.451588][ T5831] usb 3-1: Manufacturer: syz
[  445.468042][ T5831] usb 3-1: SerialNumber: syz
[  445.489854][ T5831] usb 3-1: config 0 descriptor??
[  445.532409][T15440] loop3: detected capacity change from 0 to 64
[  445.602113][T15437] loop0: detected capacity change from 0 to 4096
[  445.661626][   T29] audit: type=1800 audit(2016780521.105:21): pid=15440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4009" name="file1" dev="loop3" ino=5 res=0 errno=0
[  445.676456][T15437] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  445.730431][T15437] ntfs3(loop0): Failed to load $Extend (-22).
[  445.746922][T15437] ntfs3(loop0): Failed to initialize $Extend.
[  445.795228][T15445] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4011'.
[  445.847157][T15447] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.881559][T15449] loop3: detected capacity change from 0 to 64
[  445.930120][ T5831] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  445.938714][ T5823] ntfs3(loop0): ino=9, ntfs_sync_fs failed, -22.
[  445.955921][ T5831] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  445.988072][ T5831] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  445.995789][ T5831] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  446.065964][ T5831] usb 3-1: USB disconnect, device number 108
[  446.389448][   T24] usb 5-1: new full-speed USB device number 105 using dummy_hcd
[  446.558132][   T24] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  446.576313][   T24] usb 5-1: config 5 has no interface number 0
[  446.596888][   T24] usb 5-1: config 5 interface 123 has no altsetting 0
[  446.616101][   T24] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  446.626216][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.634284][   T24] usb 5-1: Product: syz
[  446.641648][   T24] usb 5-1: Manufacturer: syz
[  446.651611][   T24] usb 5-1: SerialNumber: syz
[  446.779936][  T796] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  446.857796][ T5944] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  446.889203][   T24] comedi comedi4: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  446.919146][   T24] usb 5-1: USB disconnect, device number 105
[  446.947994][  T796] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[  446.962472][  T796] usb 1-1: config 0 has no interface number 0
[  446.980044][  T796] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  447.009272][T15474] loop1: detected capacity change from 0 to 32768
[  447.019326][  T796] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  447.032494][T15474] xfs: Deprecated parameter 'attr2'
[  447.038060][ T5944] usb 4-1: Using ep0 maxpacket: 32
[  447.043287][  T796] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  447.053544][T15474] XFS: attr2 mount option is deprecated.
[  447.061272][ T5944] usb 4-1: config 0 has an invalid interface number: 239 but max is 0
[  447.069829][  T796] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  447.078979][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  447.091042][  T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.099979][ T5944] usb 4-1: config 0 has no interface number 0
[  447.106106][ T5944] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  447.134977][T15474] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  447.144765][  T796] usb 1-1: config 0 descriptor??
[  447.168066][ T5944] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  447.182704][  T796] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input39
[  447.235130][T15474] XFS (loop1): Ending clean mount
[  447.245051][ T5944] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  447.277603][T15474] XFS (loop1): Quotacheck needed: Please wait.
[  447.317355][ T5944] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  447.355932][T15474] XFS (loop1): Quotacheck: Done.
[  447.367062][ T5944] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  447.388696][  T796] usb 1-1: USB disconnect, device number 97
[  447.398837][ T5944] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  447.471621][ T5944] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  447.476751][T15506] netlink: 'syz.2.4037': attribute type 21 has an invalid length.
[  447.509166][ T5816] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  447.529230][ T5944] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[  447.571883][ T5944] usb 4-1: config 0 interface 239 has no altsetting 0
[  447.591532][ T5944] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  447.614470][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.634173][ T5944] usb 4-1: Product: syz
[  447.644993][ T5944] usb 4-1: Manufacturer: syz
[  447.650352][ T5944] usb 4-1: SerialNumber: syz
[  447.697466][ T5944] usb 4-1: config 0 descriptor??
[  447.703178][T15480] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  447.733025][T15480] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  447.767568][ T5141] Bluetooth: hci5: urb ffff88801eab7100 submission failed (90)
[  448.018388][ T5906] usb 4-1: USB disconnect, device number 74
[  448.288729][T15536] netlink: 'syz.0.4050': attribute type 2 has an invalid length.
[  448.550864][T15553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.745551][T15562] loop1: detected capacity change from 0 to 1024
[  448.821977][T15562] hfsplus: extend alloc file! (8192,512,17039360)
[  449.235657][T15581] IPv6: NLM_F_CREATE should be specified when creating new route
[  449.503898][T15565] loop0: detected capacity change from 0 to 32768
[  449.805199][   T29] audit: type=1326 audit(2016780525.255:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.4.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c1b9bf79 code=0x7ffc0000
[  449.898467][   T29] audit: type=1326 audit(2016780525.255:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.4.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c1b9bf79 code=0x7ffc0000
[  449.979706][   T29] audit: type=1326 audit(2016780525.255:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.4.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f54c1b9bf79 code=0x7ffc0000
[  450.048182][   T29] audit: type=1326 audit(2016780525.255:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.4.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c1b9bf79 code=0x7ffc0000
[  450.072346][   T29] audit: type=1326 audit(2016780525.255:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.4.4086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c1b9bf79 code=0x7ffc0000
[  450.110322][T15614] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  450.128703][T15614] bond1 (unregistering): Released all slaves
[  450.256599][T15612] loop2: detected capacity change from 0 to 4096
[  450.269297][T15612] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  450.334443][T15623] loop4: detected capacity change from 0 to 256
[  450.357239][T15623] exfat: Deprecated parameter 'namecase'
[  450.363008][T15623] exfat: Deprecated parameter 'utf8'
[  450.429614][T15623] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  450.515632][T15623] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d)
[  450.583017][T15629] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4097'.
[  451.353617][T15664] loop1: detected capacity change from 0 to 256
[  451.355517][T15651] bond1: option ad_select: invalid value (7)
[  451.363318][T15664] exfat: Deprecated parameter 'namecase'
[  451.418448][T15651] bond1 (unregistering): Released all slaves
[  451.419572][T15664] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d)
[  451.444995][T15667] loop4: detected capacity change from 0 to 512
[  451.514087][T15667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.596613][T15667] ext4 filesystem being mounted at /890/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.694028][T15674] loop1: detected capacity change from 0 to 512
[  451.781848][T15674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.862242][T15674] ext4 filesystem being mounted at /853/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.886015][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.939517][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.507906][T15713] netlink: 844 bytes leftover after parsing attributes in process `syz.1.4137'.
[  452.596381][T15715] netlink: 'syz.3.4136': attribute type 9 has an invalid length.
[  452.653446][T15721] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4139'.
[  452.850513][   T29] audit: type=1326 audit(2016780528.295:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15731 comm="syz.1.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c179bf79 code=0x7ffc0000
[  452.909512][   T29] audit: type=1326 audit(2016780528.295:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15731 comm="syz.1.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c179bf79 code=0x7ffc0000
[  453.017423][T15734] loop3: detected capacity change from 0 to 1024
[  453.023058][   T29] audit: type=1326 audit(2016780528.325:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15731 comm="syz.1.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f92c179bf79 code=0x7ffc0000
[  453.055577][T15734] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  453.101874][   T29] audit: type=1326 audit(2016780528.325:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15731 comm="syz.1.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c179bf79 code=0x7ffc0000
[  453.124249][T15734] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  453.129839][T15741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  453.156229][T15734] EXT4-fs (loop3): orphan cleanup on readonly fs
[  453.195573][T15734] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.4146: lblock 2 mapped to illegal pblock 2 (length 1)
[  453.228602][T15734] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  453.236315][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  453.251887][    C1] EXT4-fs (loop3): initial error at time 2016780528: ext4_map_blocks:776: inode 3: block 2
[  453.261946][    C1] EXT4-fs (loop3): last error at time 2016780528: ext4_map_blocks:776: inode 3: block 2
[  453.282756][T15734] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  453.301542][T15734] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.4146: lblock 0 mapped to illegal pblock 48 (length 1)
[  453.325535][T15734] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  453.353900][T15734] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  453.439134][T15734] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.4146: Failed to acquire dquot type 0
[  453.477327][T15734] loop3: lost filesystem error report for type 5 error -117
[  453.477659][T15734] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  453.516535][T15734] loop3: lost filesystem error report for type 5 error -117
[  453.517825][T15734] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.4146: mark_inode_dirty error
[  453.536590][T15734] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  453.547682][T15734] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[  453.569478][T15734] EXT4-fs (loop3): 1 orphan inode deleted
[  453.577093][   T86] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  453.630642][   T86] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  453.646326][   T86] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  453.694226][   T86] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:5: Failed to release dquot type 0
[  453.697699][T15761] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  453.731318][   T86] loop3: lost filesystem error report for type 5 error -117
[  453.733101][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4161'.
[  453.753360][T15765] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4161'.
[  453.754942][T15734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  453.763452][T15761] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  453.900070][T15734] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  453.910496][T15734] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  453.957951][T15753] loop2: detected capacity change from 0 to 32768
[  453.980554][T15767] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[  453.991975][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.001489][T15753] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4155 (15753)
[  454.049276][T15767] bond1 (unregistering): Released all slaves
[  454.082932][T15753] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  454.135258][T15753] BTRFS info (device loop2): using sha256 checksum algorithm
[  454.179859][T15778] loop3: detected capacity change from 0 to 256
[  454.238951][T15778] exfat: Deprecated parameter 'namecase'
[  454.282936][T15778] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  454.314344][T15753] BTRFS info (device loop2): enabling ssd optimizations
[  454.356482][T15753] BTRFS info (device loop2): turning on async discard
[  454.363319][T15753] BTRFS info (device loop2): enabling free space tree
[  454.414799][T15778] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  454.517664][T15778] exfat: Deprecated parameter 'namecase'
[  454.628302][ T5821] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  454.673212][T15803] loop1: detected capacity change from 0 to 164
[  455.208850][T15795] loop0: detected capacity change from 0 to 32768
[  455.263623][T15795] 
[  455.263623][T15795]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  455.263623][T15795] 
[  455.335997][T15795] read_mapping_page failed!
[  455.344408][   T29] audit: type=1400 audit(2016780530.795:31): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=15820 comm="syz.4.4181"
[  455.364383][T15795] ERROR: (device loop0): txCommit: 
[  455.364383][T15795] 
[  455.486714][ T5823] 
[  455.486714][ T5823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  455.486714][ T5823] 
[  455.504334][T15823] loop1: detected capacity change from 0 to 4096
[  455.524704][T15823] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  455.528500][ T5823] 
[  455.528500][ T5823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  455.528500][ T5823] 
[  455.749531][T15823] ntfs3(loop1): ino=19, mi_enum_attr
[  455.754890][T15823] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  455.755950][T15807] loop3: detected capacity change from 0 to 40427
[  455.818545][T15807] F2FS-fs (loop3): Image doesn't support compression
[  455.841734][T15807] F2FS-fs (loop3): build fault injection rate: 690
[  455.849182][T15823] ntfs3(loop1): failed to convert "c46c" to iso8859-6
[  455.858445][T15807] F2FS-fs (loop3): invalid crc value
[  455.886862][T15823] ntfs3(loop1): ino=20, mi_enum_attr
[  455.901082][T15823] ntfs3(loop1): failed to convert "0030" to iso8859-6
[  455.946510][T15823] ntfs3(loop1): failed to convert "0031" to iso8859-6
[  455.965502][T15823] ntfs3(loop1): failed to convert "0032" to iso8859-6
[  456.016095][ T5831] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  456.052106][T15807] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  456.080292][T15807] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  456.177799][T15807] F2FS-fs (loop3): Image doesn't support compression
[  456.184950][T15807] F2FS-fs (loop3): build fault injection rate: 690
[  456.206805][ T5831] usb 5-1: Using ep0 maxpacket: 16
[  456.214924][ T5831] usb 5-1: config 8 has an invalid interface number: 223 but max is 0
[  456.237186][ T5831] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  456.276501][ T5831] usb 5-1: config 8 has no interface number 0
[  456.282700][ T5831] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  456.306599][ T5831] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  456.351450][ T5831] usb 5-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d
[  456.365403][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.411473][ T5831] usb 5-1: Product: syz
[  456.415694][ T5831] usb 5-1: Manufacturer: syz
[  456.431017][ T5831] usb 5-1: SerialNumber: syz
[  456.678394][ T5831] usb 5-1: USB disconnect, device number 106
[  457.221869][T15884] loop3: detected capacity change from 0 to 256
[  457.257887][T15884] exfat: Deprecated parameter 'namecase'
[  457.356770][T15884] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[  457.356920][T15865] loop2: detected capacity change from 0 to 32768
[  457.373599][T15890] netlink: 'syz.1.4215': attribute type 1 has an invalid length.
[  457.394227][T15890] netlink: 16949 bytes leftover after parsing attributes in process `syz.1.4215'.
[  457.458299][T15892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.606344][   T24] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[  457.686793][T15898] loop1: detected capacity change from 0 to 256
[  457.787221][T15898] FAT-fs (loop1): Directory bread(block 64) failed
[  457.794833][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  457.835374][T15898] FAT-fs (loop1): Directory bread(block 65) failed
[  457.838326][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  457.854010][T15898] FAT-fs (loop1): Directory bread(block 66) failed
[  457.864597][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  457.892050][T15898] FAT-fs (loop1): Directory bread(block 67) failed
[  457.909191][   T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  457.918955][T15898] FAT-fs (loop1): Directory bread(block 68) failed
[  457.932611][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.950718][T15898] FAT-fs (loop1): Directory bread(block 69) failed
[  457.966366][   T24] usb 1-1: Product: syz
[  457.967089][T15898] FAT-fs (loop1): Directory bread(block 70) failed
[  457.976694][   T24] usb 1-1: Manufacturer: syz
[  457.992899][T15898] FAT-fs (loop1): Directory bread(block 71) failed
[  457.993960][   T24] usb 1-1: SerialNumber: syz
[  458.038031][T15898] FAT-fs (loop1): Directory bread(block 72) failed
[  458.044665][T15898] FAT-fs (loop1): Directory bread(block 73) failed
[  458.051608][   T24] usb 1-1: config 0 descriptor??
[  458.272993][   T24] uvcvideo 1-1:0.0: Found UVC 34.00 device syz (8086:0b5b)
[  458.297099][   T24] uvcvideo 1-1:0.0: No valid video chain found.
[  458.475708][ T5906] usb 1-1: USB disconnect, device number 98
[  458.874490][T15943] xt_nfacct: accounting object `syz1' does not exist
[  458.949978][T15924] loop3: detected capacity change from 0 to 32768
[  459.008121][T15924] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  459.119573][T15924] XFS (loop3): Ending clean mount
[  459.127554][T15924] XFS (loop3): Quotacheck needed: Please wait.
[  459.250624][T15924] XFS (loop3): Quotacheck: Done.
[  459.343489][ T5906] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  459.401844][T15968] loop4: detected capacity change from 0 to 22
[  459.435971][T15968] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  459.438028][ T5818] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  459.453448][T15968] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  459.536614][ T5906] usb 3-1: Using ep0 maxpacket: 8
[  459.551469][ T5906] usb 3-1: unable to get BOS descriptor or descriptor too short
[  459.590952][ T5906] usb 3-1: config 4 has an invalid interface number: 147 but max is 0
[  459.623126][ T5906] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  459.678905][ T5906] usb 3-1: config 4 has no interface number 0
[  459.698700][ T5906] usb 3-1: string descriptor 0 read error: -22
[  459.712956][ T5906] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  459.749148][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.782435][ T5906] uvcvideo 3-1:4.147: Found multiple Units with ID 6
[  459.801604][ T5906] uvcvideo 3-1:4.147: Found UVC 0.02 device <unnamed> (04f2:b746)
[  459.846598][ T5906] uvcvideo 3-1:4.147: No valid video chain found.
[  460.004008][ T5906] usb 3-1: USB disconnect, device number 109
[  460.046007][   T29] audit: type=1326 audit(2016780535.495:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.0.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cf79bf79 code=0x7ffc0000
[  460.050266][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4251'.
[  460.109146][   T29] audit: type=1326 audit(2016780535.525:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.0.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cf79bf79 code=0x7ffc0000
[  460.184231][   T29] audit: type=1326 audit(2016780535.525:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.0.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f95cf79bf79 code=0x7ffc0000
[  460.217992][  T980] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  460.248256][   T29] audit: type=1326 audit(2016780535.525:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.0.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cf79bf79 code=0x7ffc0000
[  460.270964][T15996] netlink: 640 bytes leftover after parsing attributes in process `syz.3.4262'.
[  460.296498][T15996] netlink: 640 bytes leftover after parsing attributes in process `syz.3.4262'.
[  460.312523][   T29] audit: type=1326 audit(2016780535.525:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.0.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cf79bf79 code=0x7ffc0000
[  460.341898][T16000] loop1: detected capacity change from 0 to 2048
[  460.386400][  T980] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  460.414147][  T980] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  460.429483][T16000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  460.448741][  T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.465059][  T980] gspca_main: stv0680-2.14.0 probing 041e:4007
[  460.623268][T16009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4269'.
[  461.023699][T16027] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  461.089352][T16010] loop1: detected capacity change from 0 to 32768
[  461.131372][T16010] 9p: Unknown access argument 18446744073709551615: -34
[  461.147913][T16030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4280'.
[  461.197647][T16030] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4280'.
[  461.231545][T16034] loop0: detected capacity change from 0 to 256
[  461.265623][T16034] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  461.279889][T16036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.354929][T16034] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d)
[  461.457258][T16041] comedi: valid board names for 8255 driver are:
[  461.464020][T16041]  8255
[  461.479046][T16041] comedi: valid board names for vmk80xx driver are:
[  461.488654][T16041]  vmk80xx
[  461.494806][T16041] comedi: valid board names for usbduxsigma driver are:
[  461.518583][T16041]  usbduxsigma
[  461.534720][T16041] comedi: valid board names for usbduxfast driver are:
[  461.562133][T16041]  usbduxfast
[  461.569481][  T980] stv0680 5-1:4.0: STV(e): camera ping failed!!
[  461.571099][T16041] comedi: valid board names for usbdux driver are:
[  461.618595][T16041]  usbdux
[  461.625050][T16041] comedi: valid board names for ni6501 driver are:
[  461.641268][T16041]  ni6501
[  461.656790][T16041] comedi: valid board names for dt9812 driver are:
[  461.677875][T16041]  dt9812
[  461.684269][T16041] comedi: valid board names for ni_labpc_cs driver are:
[  461.700574][T16041]  ni_labpc_cs
[  461.709909][T16041] comedi: valid board names for ni_daq_700 driver are:
[  461.726132][T16041]  ni_daq_700
[  461.735508][T16049] loop0: detected capacity change from 0 to 2048
[  461.764703][T16041] comedi: valid board names for labpc_pci driver are:
[  461.783819][  T980] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  461.795741][T16041]  labpc_pci
[  461.804733][T16049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  461.816568][  T980] stv0680 5-1:4.0: last error: 86,  command = 0x17
[  461.834035][T16041] comedi: valid board names for adl_pci9118 driver are:
[  461.840136][  T980] usb 5-1: USB disconnect, device number 107
[  461.854704][T16041]  pci9118dg
[  461.864868][T16041]  pci9118hg
[  461.875051][T16041]  pci9118hr
[  461.901775][T16041] comedi: valid board names for 8255_pci driver are:
[  461.923119][T16041]  8255_pci
[  461.933231][T16041] comedi: valid board names for s526 driver are:
[  461.961707][T16041]  s526
[  461.977321][T16041] comedi: valid board names for multiq3 driver are:
[  461.996970][T16041]  multiq3
[  462.008007][T16041] comedi: valid board names for pcmuio driver are:
[  462.034703][T16041]  pcmuio48
[  462.039398][T16041]  pcmuio96
[  462.042656][T16041] comedi: valid board names for pcmmio driver are:
[  462.057017][T16041]  pcmmio
[  462.063880][T16041] comedi: valid board names for pcmda12 driver are:
[  462.091031][T16041]  pcmda12
[  462.097320][T16041] comedi: valid board names for pcmad driver are:
[  462.121601][T16041]  pcmad12
[  462.124791][T16041]  pcmad16
[  462.131698][T16041] comedi: valid board names for ni_labpc driver are:
[  462.149026][T16041]  lab-pc-1200
[  462.155909][T16041]  lab-pc-1200ai
[  462.166355][T16041]  lab-pc+
[  462.175224][T16041] comedi: valid board names for atmio16 driver are:
[  462.195721][T16041]  atmio16
[  462.220526][T16041]  atmio16d
[  462.230597][T16041] comedi: valid board names for ni_at_ao driver are:
[  462.281858][T16041]  at-ao-6
[  462.291930][T16041]  at-ao-10
[  462.295174][T16041] comedi: valid board names for ni_at_a2150 driver are:
[  462.310409][T16041]  ni_at_a2150
[  462.314789][T16041] comedi: valid board names for adq12b driver are:
[  462.341382][T16041]  adq12b
[  462.357298][T16041] comedi: valid board names for mpc624 driver are:
[  462.363850][T16041]  mpc624
[  462.386192][T16068] loop0: detected capacity change from 0 to 4096
[  462.387572][T16073] loop3: detected capacity change from 0 to 512
[  462.399328][T16041] comedi: valid board names for c6xdigio driver are:
[  462.406024][T16041]  c6xdigio
[  462.416203][T16073] EXT4-fs: Ignoring removed orlov option
[  462.424663][T16041] comedi: valid board names for aio_iiro_16 driver are:
[  462.448341][T16073] EXT4-fs: Ignoring removed i_version option
[  462.454599][T16073] EXT4-fs: Ignoring removed nomblk_io_submit option
[  462.462156][T16068] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  462.462587][T16041]  aio_iiro_16
[  462.487054][T16041] comedi: valid board names for aio_aio12_8 driver are:
[  462.496926][T16041]  aio_aio12_8
[  462.502917][T16041]  aio_ai12_8
[  462.516427][T16041]  aio_ao12_4
[  462.524203][T16073] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  462.532544][T16073] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  462.538267][T16068] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  462.540883][T16041] comedi: valid board names for fl512 driver are:
[  462.556501][T16041]  fl512
[  462.559386][T16041] comedi: valid board names for dmm32at driver are:
[  462.565976][T16041]  dmm32at
[  462.569351][T16073] EXT4-fs (loop3): orphan cleanup on readonly fs
[  462.617894][T16068] ntfs3(loop0): ino=19, mi_enum_attr
[  462.620380][T16041] comedi: valid board names for dt282x driver are:
[  462.623868][T16073] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  462.641249][T16041]  dt2821
[  462.644224][T16041]  dt2821-f
[  462.647721][T16041]  dt2821-g
[  462.651020][T16041]  dt2823
[  462.653964][T16041]  dt2824-pgh
[  462.660611][T16041]  dt2824-pgl
[  462.664070][T16041]  dt2825
[  462.664580][T16082] loop1: detected capacity change from 0 to 64
[  462.668320][T16041]  dt2827
[  462.697197][T16041]  dt2828
[  462.700308][T16041]  dt2829
[  462.703253][T16041]  dt21-ez
[  462.706461][T16073] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  462.746419][T16041]  dt23-ez
[  462.749496][T16041]  dt24-ez
[  462.756552][T16073] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  462.771769][T16068] ntfs3(loop0): failed to convert "c46c" to default
[  462.781529][T16041]  dt24-ez-pgl
[  462.790266][T16073] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4301: bg 0: block 40: padding at end of block bitmap is not set
[  462.799202][T16068] ntfs3(loop0): ino=20, mi_enum_attr
[  462.807865][T16041] comedi: valid board names for dt2817 driver are:
[  462.842849][T16041]  dt2817
[  462.845857][T16041] comedi: valid board names for dt2815 driver are:
[  462.852466][T16073] loop3: lost filesystem error report for type 5 error -117
[  462.852865][T16073] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem
[  462.860215][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  462.860242][    C0] EXT4-fs (loop3): initial error at time 2016780538: ext4_validate_block_bitmap:441
[  462.860267][    C0] EXT4-fs (loop3): last error at time 2016780538: ext4_validate_block_bitmap:441
[  462.903311][T16041]  dt2815
[  462.916549][T16041] comedi: valid board names for dt2814 driver are:
[  462.923092][T16041]  dt2814
[  462.926034][T16041] comedi: valid board names for dt2811 driver are:
[  462.953483][T16073] loop3: lost filesystem error report for type 5 error -117
[  462.956509][T16073] EXT4-fs (loop3): 1 truncate cleaned up
[  462.977940][T16041]  dt2811-pgh
[  462.988188][T16041]  dt2811-pgl
[  462.991514][T16041] comedi: valid board names for dt2801 driver are:
[  463.026122][T16073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  463.046312][T16041]  dt2801
[  463.049297][T16041] comedi: valid board names for das6402 driver are:
[  463.055890][T16041]  das6402-12
[  463.098895][T16041]  das6402-16
[  463.103234][T16041] comedi: valid board names for das1800 driver are:
[  463.115862][T16073] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.4301: bad symlink.
[  463.131580][T16041]  das-1701st
[  463.134916][T16041]  das-1701st-da
[  463.158850][T16041]  das-1702st
[  463.162189][T16041]  das-1702st-da
[  463.165737][T16041]  das-1702hr
[  463.189681][T16041]  das-1702hr-da
[  463.193276][T16041]  das-1701ao
[  463.209943][T16041]  das-1702ao
[  463.213280][T16041]  das-1801st
[  463.233489][T16097] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  463.260595][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.268278][T16041]  das-1801st-da
[  463.292808][T16041]  das-1802st
[  463.296390][T16041]  das-1802st-da
[  463.299961][T16041]  das-1802hr
[  463.311595][T16041]  das-1802hr-da
[  463.339114][T16041]  das-1801hc
[  463.354926][T16041]  das-1802hc
[  463.361369][T16041]  das-1801ao
[  463.364907][T16041]  das-1802ao
[  463.394083][T16041] comedi: valid board names for das800 driver are:
[  463.401221][T16041]  das-800
[  463.416379][T16041]  cio-das800
[  463.419739][T16041]  das-801
[  463.425525][T16041]  cio-das801
[  463.430030][T16041]  das-802
[  463.449522][T16041]  cio-das802
[  463.452939][T16041]  cio-das802/16
[  463.465885][T16041] comedi: valid board names for isa-das08 driver are:
[  463.473884][T16041]  isa-das08
[  463.477457][T16041]  das08-pgm
[  463.480667][T16041]  das08-pgh
[  463.484050][T16041]  das08-pgl
[  463.488940][T16041]  das08-aoh
[  463.493157][T16041]  das08-aol
[  463.496918][T16041]  das08-aom
[  463.500190][T16041]  das08/jr-ao
[  463.504085][T16041]  das08jr-16-ao
[  463.535189][T16041]  pc104-das08
[  463.553117][T16041]  das08jr/16
[  463.566371][T16041] comedi: valid board names for das16m1 driver are:
[  463.580487][T16041]  das16m1
[  463.588908][T16041] comedi: valid board names for dac02 driver are:
[  463.611457][T16041]  dac02
[  463.614357][T16041] comedi: valid board names for rti802 driver are:
[  463.654889][T16041]  rti802
[  463.658957][T16041] comedi: valid board names for rti800 driver are:
[  463.684157][T16041]  rti800
[  463.687586][T16041]  rti815
[  463.690537][T16041] comedi: valid board names for pcm3724 driver are:
[  463.700192][T16041]  pcm3724
[  463.703277][T16041] comedi: valid board names for pcl818 driver are:
[  463.705205][T16114] tmpfs: Bad value for 'mpol'
[  463.726972][T16041]  pcl818l
[  463.748642][T16041]  pcl818h
[  463.751730][T16041]  pcl818hd
[  463.754844][T16041]  pcl818hg
[  463.820180][T16041]  pcl818
[  463.823171][T16041]  pcl718
[  463.826111][T16041]  pcm3718
[  463.849654][T16041] comedi: valid board names for pcl816 driver are:
[  463.856208][T16041]  pcl816
[  463.881818][T16041]  pcl814b
[  463.884885][T16041] comedi: valid board names for pcl812 driver are:
[  463.913537][T16041]  pcl812
[  463.930134][T16041]  pcl812pg
[  463.933290][T16041]  acl8112pg
[  463.962721][T16041]  acl8112dg
[  463.965968][T16041]  acl8112hg
[  463.982699][T16041]  a821pgl
[  463.985762][T16041]  a821pglnda
[  464.008553][T16041]  a821pgh
[  464.015723][T16041]  a822pgl
[  464.025344][T16041]  a822pgh
[  464.034474][T16041]  a823pgl
[  464.039024][T16041]  a823pgh
[  464.042450][T16041]  pcl813
[  464.045565][T16041]  pcl813b
[  464.048702][T16041]  acl8113
[  464.051860][T16041]  iso813
[  464.054807][T16041]  acl8216
[  464.062951][T16041]  a826pg
[  464.065921][T16041] comedi: valid board names for pcl730 driver are:
[  464.095902][T16041]  pcl730
[  464.115286][T16041]  iso730
[  464.123863][T16041]  acl7130
[  464.138681][   T10] usb 4-1: new full-speed USB device number 75 using dummy_hcd
[  464.150578][T16041]  pcm3730
[  464.153671][T16041]  pcl725
[  464.160281][T16041]  p8r8dio
[  464.163423][T16041]  acl7225b
[  464.177040][T16041]  p16r16dio
[  464.184686][T16041]  pcl733
[  464.194071][T16041]  pcl734
[  464.206314][T16041]  opmm-1616-xt
[  464.216543][T16041]  pearl-mm-p
[  464.220155][T16041]  ir104-pbf
[  464.225836][T16041] comedi: valid board names for pcl726 driver are:
[  464.257775][T16041]  pcl726
[  464.260769][T16041]  pcl727
[  464.263710][T16041]  pcl728
[  464.286084][T16041]  acl6126
[  464.301509][T16041]  acl6128
[  464.313705][T16041] comedi: valid board names for pcl724 driver are:
[  464.328360][T16041]  pcl724
[  464.330550][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[  464.331341][T16041]  pcl722
[  464.348078][   T10] usb 4-1: config 95 has an invalid interface number: 1 but max is 0
[  464.350679][T16041]  pcl731
[  464.367995][T16041]  acl7122
[  464.369814][   T10] usb 4-1: config 95 has no interface number 0
[  464.371051][T16041]  acl7124
[  464.371062][T16041]  pet48dio
[  464.392761][   T10] usb 4-1: config 95 interface 1 has no altsetting 0
[  464.421201][   T10] usb 4-1: string descriptor 0 read error: -22
[  464.426398][T16041]  pcmio48
[  464.431039][T16041]  onyx-mm-dio
[  464.436536][T16041] comedi: valid board names for pcl711 driver are:
[  464.439236][   T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[  464.446323][T16041]  pcl711
[  464.471548][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.474732][T16041]  pcl711b
[  464.496469][T16041]  acl8112hg
[  464.510562][T16041]  acl8112dg
[  464.516944][T16041] comedi: valid board names for amplc_pc263 driver are:
[  464.532764][T16041]  pc263
[  464.535700][T16041] comedi: valid board names for amplc_pc236 driver are:
[  464.575045][T16041]  pc36at
[  464.597074][T16041] comedi: valid board names for amplc_dio200 driver are:
[  464.604234][T16041]  pc212e
[  464.657190][T16041]  pc214e
[  464.669153][T16041]  pc215e
[  464.672140][T16041]  pc218e
[  464.675081][T16041]  pc272e
[  464.687144][T16041] comedi: valid board names for comedi_parport driver are:
[  464.715505][T16041]  comedi_parport
[  464.735730][T16041] comedi: valid board names for comedi_test driver are:
[  464.755234][T16041]  comedi_test
[  464.762316][T16041] comedi: valid board names for comedi_bond driver are:
[  464.777527][T16041]  comedi_bond
[  464.797468][   T29] audit: type=1326 audit(2016780540.245:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16153 comm="syz.4.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c1b9bf79 code=0x7ffc0000
[  464.887591][   T29] audit: type=1326 audit(2016780540.285:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16153 comm="syz.4.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c1b9bf79 code=0x7ffc0000
[  464.945874][   T29] audit: type=1326 audit(2016780540.295:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16153 comm="syz.4.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f54c1b9bf79 code=0x7ffc0000
[  465.045776][  T980] usb 4-1: USB disconnect, device number 75
[  465.053663][T16166] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  465.063539][   T29] audit: type=1326 audit(2016780540.295:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16153 comm="syz.4.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c1b9bf79 code=0x7ffc0000
[  465.112065][   T29] audit: type=1326 audit(2016780540.295:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16153 comm="syz.4.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c1b9bf79 code=0x7ffc0000
[  465.314699][T16177] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4350'.
[  465.324312][T16173] loop0: detected capacity change from 0 to 4096
[  465.346355][T16177] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8
[  465.826101][T16199] loop1: detected capacity change from 0 to 512
[  465.914007][T16199] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  466.019946][T16199] EXT4-fs (loop1): re-mounted 00800000-0000-0000-0000-000000000000.
[  466.082119][ T5816] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  466.271402][T16214] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  466.358675][T16192] loop2: detected capacity change from 0 to 32768
[  466.387428][T16192] JBD2: Ignoring recovery information on journal
[  466.483557][T16192] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  466.596662][T16228] loop0: detected capacity change from 0 to 64
[  466.719833][ T5821] ocfs2: Unmounting device (7,2) on (node local)
[  466.908646][T16240] netlink: 'syz.0.4382': attribute type 1 has an invalid length.
[  467.266224][T16257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4390'.
[  467.400280][T16263] infiniband: Added to hash: ib_dev=ffff888056200000 (0)() ndev=ffff888068ffa000 (25)(hsr0)
[  467.439525][T16263] hsr0 speed is unknown, defaulting to 1000
[  467.455327][T16263] hsr0 speed is unknown, defaulting to 1000
[  467.479940][T16263] hsr0 speed is unknown, defaulting to 1000
[  467.497352][T16267] loop1: detected capacity change from 0 to 512
[  467.521151][T16263] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  467.571736][T16263] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  467.586644][T16267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  467.618892][T16267] ext4 filesystem being mounted at /924/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  467.684586][T16263] hsr0 speed is unknown, defaulting to 1000
[  467.709511][T16263] hsr0 speed is unknown, defaulting to 1000
[  467.711007][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.721098][T16263] hsr0 speed is unknown, defaulting to 1000
[  467.745026][T16263] hsr0 speed is unknown, defaulting to 1000
[  467.787460][T16263] hsr0 speed is unknown, defaulting to 1000
[  467.944313][T16252] loop4: detected capacity change from 0 to 32768
[  468.012195][T16252] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  468.145130][T16252] XFS (loop4): Ending clean mount
[  468.192102][T16252] XFS (loop4): Quotacheck needed: Please wait.
[  468.277062][T16252] XFS (loop4): Quotacheck: Done.
[  468.368834][T16302] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma?
[  468.436517][ T5817] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  468.588841][T16310] loop2: detected capacity change from 0 to 256
[  468.675322][T16310] exfat: Deprecated parameter 'namecase'
[  468.706796][T16310] exfat: Deprecated parameter 'utf8'
[  468.722885][T16310] exfat: Deprecated parameter 'utf8'
[  468.825562][T16310] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d)
[  469.107031][T16300] loop3: detected capacity change from 0 to 32768
[  469.148096][T16300] 
[  469.148096][T16300]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  469.148096][T16300] 
[  469.222859][T16300] 
[  469.222859][T16300]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  469.222859][T16300] 
[  469.283777][T16300] 
[  469.283777][T16300]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  469.283777][T16300] 
[  469.389224][  T111] 
[  469.389224][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  469.389224][  T111] 
[  469.477570][   T86] 
[  469.477570][   T86]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  469.477570][   T86] 
[  469.504429][   T86] 
[  469.504429][   T86]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  469.504429][   T86] 
[  469.534525][ T5818] 
[  469.534525][ T5818]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  469.534525][ T5818] 
[  469.545884][ T5818] 
[  469.545884][ T5818]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  469.545884][ T5818] 
[  469.566200][  T112] ==================================================================
[  469.574312][  T112] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60
[  469.582491][  T112] Read of size 1 at addr ffff88807987d8d8 by task jfsCommit/112
[  469.590133][  T112] 
[  469.592468][  T112] CPU: 1 UID: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  469.592492][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  469.592504][  T112] Call Trace:
[  469.592513][  T112]  <TASK>
[  469.592521][  T112]  dump_stack_lvl+0xe8/0x150
[  469.592551][  T112]  print_report+0xba/0x230
[  469.592573][  T112]  ? _raw_spin_lock_irqsave+0x40/0x60
[  469.592598][  T112]  kasan_report+0x117/0x150
[  469.592622][  T112]  ? _raw_spin_lock_irqsave+0x40/0x60
[  469.592650][  T112]  __kasan_check_byte+0x2a/0x40
[  469.592671][  T112]  lock_acquire+0x79/0x2e0
[  469.592695][  T112]  ? rcu_is_watching+0x15/0xb0
[  469.592721][  T112]  _raw_spin_lock_irqsave+0x40/0x60
[  469.592745][  T112]  ? __mutex_lock+0x3cb/0x1300
[  469.592762][  T112]  __mutex_lock+0x3cb/0x1300
[  469.592786][  T112]  ? jfs_syncpt+0x25/0x90
[  469.592809][  T112]  ? do_raw_spin_lock+0x12b/0x2f0
[  469.592830][  T112]  ? __pfx___mutex_lock+0x10/0x10
[  469.592855][  T112]  jfs_syncpt+0x25/0x90
[  469.592880][  T112]  txEnd+0x2e5/0x530
[  469.592906][  T112]  jfs_lazycommit+0x5b8/0xaa0
[  469.592927][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  469.592945][  T112]  ? __pfx_default_wake_function+0x10/0x10
[  469.592969][  T112]  ? __kthread_parkme+0x7a/0x1f0
[  469.592999][  T112]  kthread+0x388/0x470
[  469.593017][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  469.593033][  T112]  ? __pfx_kthread+0x10/0x10
[  469.593050][  T112]  ret_from_fork+0x51e/0xb90
[  469.593076][  T112]  ? __pfx_ret_from_fork+0x10/0x10
[  469.593098][  T112]  ? __switch_to+0xc7d/0x1450
[  469.593120][  T112]  ? __pfx_kthread+0x10/0x10
[  469.593138][  T112]  ret_from_fork_asm+0x1a/0x30
[  469.593172][  T112]  </TASK>
[  469.593179][  T112] 
[  469.756504][  T112] Allocated by task 16300:
[  469.760903][  T112]  kasan_save_track+0x3e/0x80
[  469.765568][  T112]  __kasan_kmalloc+0x93/0xb0
[  469.770143][  T112]  __kmalloc_cache_noprof+0x31c/0x660
[  469.775500][  T112]  lmLogOpen+0x2d1/0xfa0
[  469.779732][  T112]  jfs_mount_rw+0xee/0x670
[  469.784135][  T112]  jfs_fill_super+0x754/0xd80
[  469.788793][  T112]  get_tree_bdev_flags+0x431/0x4f0
[  469.793885][  T112]  vfs_get_tree+0x92/0x2a0
[  469.798287][  T112]  do_new_mount+0x341/0xd30
[  469.802776][  T112]  __se_sys_mount+0x31d/0x420
[  469.807437][  T112]  do_syscall_64+0x14d/0xf80
[  469.812009][  T112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.817882][  T112] 
[  469.820191][  T112] Freed by task 5818:
[  469.824148][  T112]  kasan_save_track+0x3e/0x80
[  469.828807][  T112]  kasan_save_free_info+0x46/0x50
[  469.833816][  T112]  __kasan_slab_free+0x5c/0x80
[  469.838564][  T112]  kfree+0x1c1/0x630
[  469.842447][  T112]  lmLogClose+0x297/0x520
[  469.846765][  T112]  jfs_umount+0x2ef/0x3c0
[  469.851082][  T112]  jfs_put_super+0x8c/0x190
[  469.855567][  T112]  generic_shutdown_super+0x13d/0x2d0
[  469.860927][  T112]  kill_block_super+0x44/0x90
[  469.865588][  T112]  deactivate_locked_super+0xbc/0x130
[  469.870949][  T112]  cleanup_mnt+0x437/0x4d0
[  469.875349][  T112]  task_work_run+0x1d9/0x270
[  469.879923][  T112]  exit_to_user_mode_loop+0xed/0x480
[  469.885193][  T112]  do_syscall_64+0x32d/0xf80
[  469.889763][  T112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.895641][  T112] 
[  469.897948][  T112] The buggy address belongs to the object at ffff88807987d800
[  469.897948][  T112]  which belongs to the cache kmalloc-1k of size 1024
[  469.911983][  T112] The buggy address is located 216 bytes inside of
[  469.911983][  T112]  freed 1024-byte region [ffff88807987d800, ffff88807987dc00)
[  469.925845][  T112] 
[  469.928152][  T112] The buggy address belongs to the physical page:
[  469.934553][  T112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807987d000 pfn:0x79878
[  469.944607][  T112] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  469.953088][  T112] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  469.961579][  T112] page_type: f5(slab)
[  469.965552][  T112] raw: 00fff00000000240 ffff88801b041dc0 ffffea0000cb7e10 ffffea0000aeae10
[  469.974118][  T112] raw: ffff88807987d000 000000000010000e 00000000f5000000 0000000000000000
[  469.982686][  T112] head: 00fff00000000240 ffff88801b041dc0 ffffea0000cb7e10 ffffea0000aeae10
[  469.991339][  T112] head: ffff88807987d000 000000000010000e 00000000f5000000 0000000000000000
[  469.999993][  T112] head: 00fff00000000003 ffffea0001e61e01 00000000ffffffff 00000000ffffffff
[  470.008645][  T112] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  470.017293][  T112] page dumped because: kasan: bad access detected
[  470.023685][  T112] page_owner tracks the page as allocated
[  470.029377][  T112] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5884, tgid 5884 (kworker/1:4), ts 73422301207, free_ts 73317839637
[  470.048549][  T112]  post_alloc_hook+0x231/0x280
[  470.053304][  T112]  get_page_from_freelist+0x24dc/0x2580
[  470.058837][  T112]  __alloc_frozen_pages_noprof+0x18d/0x380
[  470.064626][  T112]  alloc_pages_mpol+0x232/0x4a0
[  470.069462][  T112]  allocate_slab+0x83/0x660
[  470.073954][  T112]  ___slab_alloc+0x150/0x6b0
[  470.078533][  T112]  __kmalloc_noprof+0x18a/0x760
[  470.083365][  T112]  ___neigh_create+0x6d5/0x2290
[  470.088200][  T112]  ip6_finish_output2+0x729/0x13e0
[  470.093307][  T112]  ip6_output+0x340/0x550
[  470.097620][  T112]  NF_HOOK+0xa2/0x3a0
[  470.101590][  T112]  mld_sendpack+0x8b4/0xe40
[  470.106081][  T112]  mld_ifc_work+0x835/0xe70
[  470.110569][  T112]  process_one_work+0x949/0x1650
[  470.115492][  T112]  worker_thread+0xb46/0x1140
[  470.120155][  T112]  kthread+0x388/0x470
[  470.124209][  T112] page last free pid 5817 tgid 5817 stack trace:
[  470.130517][  T112]  __free_frozen_pages+0xc2b/0xdb0
[  470.135611][  T112]  __slab_free+0x263/0x2b0
[  470.140013][  T112]  qlist_free_all+0x97/0x100
[  470.144587][  T112]  kasan_quarantine_reduce+0x148/0x160
[  470.150027][  T112]  __kasan_slab_alloc+0x22/0x80
[  470.154864][  T112]  kmem_cache_alloc_node_noprof+0x384/0x690
[  470.160750][  T112]  __alloc_skb+0x1d0/0x7d0
[  470.165157][  T112]  netlink_ack+0x146/0xa50
[  470.169556][  T112]  netlink_rcv_skb+0x2b6/0x4b0
[  470.174307][  T112]  netlink_unicast+0x80f/0x9b0
[  470.179053][  T112]  netlink_sendmsg+0x813/0xb40
[  470.183804][  T112]  sock_sendmsg_nosec+0x18f/0x1d0
[  470.188811][  T112]  __sys_sendto+0x3ff/0x590
[  470.193299][  T112]  __x64_sys_sendto+0xde/0x100
[  470.198048][  T112]  do_syscall_64+0x14d/0xf80
[  470.202620][  T112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.208495][  T112] 
[  470.210800][  T112] Memory state around the buggy address:
[  470.216412][  T112]  ffff88807987d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  470.224456][  T112]  ffff88807987d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  470.232503][  T112] >ffff88807987d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  470.240540][  T112]                                                     ^
[  470.247451][  T112]  ffff88807987d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  470.255492][  T112]  ffff88807987d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  470.263534][  T112] ==================================================================
[  470.271593][  T112] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  470.278778][  T112] CPU: 1 UID: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  470.287869][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  470.297909][  T112] Call Trace:
[  470.301174][  T112]  <TASK>
[  470.304096][  T112]  vpanic+0x56c/0xa60
[  470.308075][  T112]  ? __pfx_vpanic+0x10/0x10
[  470.312569][  T112]  panic+0xc5/0xd0
[  470.316281][  T112]  ? __pfx_panic+0x10/0x10
[  470.320694][  T112]  ? _raw_spin_lock_irqsave+0x40/0x60
[  470.326058][  T112]  ? rcu_is_watching+0x15/0xb0
[  470.330813][  T112]  ? _raw_spin_lock_irqsave+0x40/0x60
[  470.336171][  T112]  ? _raw_spin_lock_irqsave+0x40/0x60
[  470.341533][  T112]  check_panic_on_warn+0x89/0xb0
[  470.346457][  T112]  ? _raw_spin_lock_irqsave+0x40/0x60
[  470.351816][  T112]  end_report+0x73/0x180
[  470.356049][  T112]  ? _raw_spin_lock_irqsave+0x40/0x60
[  470.361411][  T112]  kasan_report+0x128/0x150
[  470.365910][  T112]  ? _raw_spin_lock_irqsave+0x40/0x60
[  470.371278][  T112]  __kasan_check_byte+0x2a/0x40
[  470.376121][  T112]  lock_acquire+0x79/0x2e0
[  470.380527][  T112]  ? rcu_is_watching+0x15/0xb0
[  470.385284][  T112]  _raw_spin_lock_irqsave+0x40/0x60
[  470.390472][  T112]  ? __mutex_lock+0x3cb/0x1300
[  470.395222][  T112]  __mutex_lock+0x3cb/0x1300
[  470.399797][  T112]  ? jfs_syncpt+0x25/0x90
[  470.404116][  T112]  ? do_raw_spin_lock+0x12b/0x2f0
[  470.409143][  T112]  ? __pfx___mutex_lock+0x10/0x10
[  470.414156][  T112]  jfs_syncpt+0x25/0x90
[  470.418305][  T112]  txEnd+0x2e5/0x530
[  470.422196][  T112]  jfs_lazycommit+0x5b8/0xaa0
[  470.426858][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  470.432040][  T112]  ? __pfx_default_wake_function+0x10/0x10
[  470.437833][  T112]  ? __kthread_parkme+0x7a/0x1f0
[  470.442763][  T112]  kthread+0x388/0x470
[  470.446817][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  470.451999][  T112]  ? __pfx_kthread+0x10/0x10
[  470.456577][  T112]  ret_from_fork+0x51e/0xb90
[  470.461168][  T112]  ? __pfx_ret_from_fork+0x10/0x10
[  470.466273][  T112]  ? __switch_to+0xc7d/0x1450
[  470.470945][  T112]  ? __pfx_kthread+0x10/0x10
[  470.475522][  T112]  ret_from_fork_asm+0x1a/0x30
[  470.480284][  T112]  </TASK>
[  470.483644][  T112] Kernel Offset: disabled
[  470.487952][  T112] Rebooting in 86400 seconds..