last executing test programs:

3m32.048616411s ago: executing program 0 (id=7602):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x3000000}, 0x0)

3m31.851156489s ago: executing program 0 (id=7607):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@empty, @remote, [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c, 0x0, 0x1}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)

3m31.767418346s ago: executing program 0 (id=7609):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x5)

3m31.732814219s ago: executing program 0 (id=7610):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000003c0)={[{@barrier}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xf}}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@minixdf}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})

3m31.312463346s ago: executing program 0 (id=7622):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff6, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x200e, 0x2, 0x1d8, "3328efff7aca57dca252b53f0000e2000001470000002000", 0x51424752})

3m30.171999988s ago: executing program 0 (id=7655):
prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

3m30.058147398s ago: executing program 32 (id=7655):
prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

3m29.033846709s ago: executing program 1 (id=7673):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f00000088c0)="$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")
symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')

3m28.291503185s ago: executing program 1 (id=7683):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0)

3m28.024774358s ago: executing program 1 (id=7688):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x7})

3m27.8977215s ago: executing program 1 (id=7691):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000003c0)={[{@barrier}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xf}}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@minixdf}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})

3m27.66980008s ago: executing program 1 (id=7695):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21000, 0x20800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x10, 0xff}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000)

3m25.850243601s ago: executing program 1 (id=7726):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x8000000000000001})

3m25.760887849s ago: executing program 33 (id=7726):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x8000000000000001})

4.2866984s ago: executing program 4 (id=13757):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000007c0)={0x2, @pix_mp={0x7f, 0xffffffff, 0x32314d54, 0x6, 0x0, [{0x3de, 0xfffffffc}, {0x2059, 0x80}, {0x0, 0xd289}, {0xd769, 0x800}, {0x9, 0x1000}, {0x1, 0x3}, {0x6}, {0x10001, 0x73}], 0xc, 0x5, 0x6, 0x2, 0x2}})

4.201481157s ago: executing program 4 (id=13759):
creat(&(0x7f0000000ac0)='./file0\x00', 0x0)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300))

4.167954151s ago: executing program 4 (id=13761):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001040)={[{@fat=@umask={'umask', 0x3d, 0x4}}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@utf8}, {@utf8}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

4.090741557s ago: executing program 4 (id=13763):
r0 = socket$pptp(0x18, 0x1, 0x2)
recvfrom(r0, 0x0, 0x0, 0x40010102, 0x0, 0x0)

4.007726165s ago: executing program 4 (id=13767):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000)

1.338464362s ago: executing program 5 (id=13840):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
pwrite64(r0, 0x0, 0x0, 0x0)

1.277138857s ago: executing program 5 (id=13841):
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

971.392544ms ago: executing program 5 (id=13844):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2ea, &(0x7f0000000700)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)

862.221074ms ago: executing program 5 (id=13849):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
readv(0xffffffffffffffff, 0x0, 0x0)

803.830669ms ago: executing program 6 (id=13853):
syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x808441, &(0x7f00000000c0)=ANY=[], 0xfe, 0x20d, &(0x7f0000000680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

737.048775ms ago: executing program 5 (id=13855):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xb, 0x9, 0x10201, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f00000002c0), &(0x7f00000000c0)=""/157, 0x8}, 0x20)

677.67263ms ago: executing program 2 (id=13858):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004740)=@newsa={0xfc, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@empty, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb410, 0x2, 0x6, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x3fffe, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0xfc}}, 0x0)

665.776861ms ago: executing program 5 (id=13859):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x20108c0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES8, @ANYRES16, @ANYRES64], 0x1, 0x61f5, &(0x7f00000075c0)="$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")
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175)

573.82926ms ago: executing program 2 (id=13861):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x11, 0x0, 0x0)

573.62033ms ago: executing program 6 (id=13862):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x7, 0x7}, 0x10)

540.785173ms ago: executing program 4 (id=13864):
r0 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x48, &(0x7f0000000200)={[{0x3e, 0x4e00, "82f53689188b3648695136188f5e2614fa11a103011b7deb09a4c8c7c4c7e54891d9a68da1b802b5ba2c3efad30bbc233991fb621f1e261cda386a841981"}, {}]})

477.662118ms ago: executing program 2 (id=13866):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f00000000c0)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@sys_immutable}, {@rodir}, {@uni_xlate}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@fat=@check_strict}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_lower}, {@rodir}]}, 0x1, 0x27b, &(0x7f0000000640)="$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")
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00')

432.772702ms ago: executing program 6 (id=13867):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000020000001800000000000000000000000000000095000000000000008a138db907014317bdc86399003ef279bcf4438908fb119c3434377c5416c3cb37b84568575efdf19a281703ec0ebd66879d0d95516f52a13ea385c52fad4aff77dd304e6a8961cc72e8fb09"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000240)=""/4096}, 0x46)

415.147974ms ago: executing program 3 (id=13868):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)

379.658427ms ago: executing program 6 (id=13869):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "10ba2ca9dea5103f580b17a3473f94ae8873b0475ffa23a6b7fa578b8c3198b0", "2637084f4c720f9d1764077630303de0b484a3ea7dca9a693a0027da33103728", "1bc49f9c66127c6e89415e8df5ca73f44788523229ed9b1915b290ae082663c3", "3ef467b45dd9c61fda6ef01ac8ec37b45097c4a3052c1430c89f6171140c7af3", "98eaec215978891b6b7665c38dc3ffb7f93979e493aa6982c3a429d4d5dc9f80", "4e2de84ae20a46cbb9c33212"}})

328.732982ms ago: executing program 3 (id=13870):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000061c0)={0xa, 0x4e22, 0xb5, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@dstopts_2292={{0x14, 0x29, 0x4, {0x3a}}}], 0x14}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x5, @mcast1, 0x7fff}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@tclass={{0x10, 0x29, 0x43, 0x5}}], 0x10}}], 0x2, 0x4004800)

322.721312ms ago: executing program 2 (id=13871):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0xff, 0x3}, 0x2)

280.809326ms ago: executing program 3 (id=13872):
ioperm(0x0, 0x1, 0x1)
prctl$PR_SCHED_CORE(0x3d, 0x0, 0x0, 0x0, 0x0)

255.726548ms ago: executing program 2 (id=13873):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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")
open(&(0x7f00000003c0)='./file2\x00', 0x430dc882a8a7f17, 0xc)

234.73168ms ago: executing program 3 (id=13874):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x141042)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000380)={0x8fd7, "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"})

125.870339ms ago: executing program 3 (id=13875):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1)

86.977383ms ago: executing program 6 (id=13876):
r0 = eventfd2(0x8, 0x801)
write$eventfd(r0, &(0x7f0000000040)=0xfffffffffffffffd, 0x8)

49.612286ms ago: executing program 2 (id=13877):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x30313250, 0x0, [], [], [], [0x1e]})

23.232709ms ago: executing program 3 (id=13878):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x26}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x4004000)

0s ago: executing program 6 (id=13879):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
recvmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xbf, 0x0}}], 0x73d, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ead_tagged: read failed, block=27485, location=27485
[  688.283349][T30727] bond0: option min_links: invalid value (18446744073709551612)
[  688.291282][T30727] bond0: option min_links: allowed values 0 - 2147483647
[  688.303422][T30720] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  688.533793][ T7917] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  688.554420][ T7917] usb 4-1: config 0 has no interface number 0
[  688.575958][T30743] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11734'.
[  688.602531][T30743] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11734'.
[  688.710403][T30757] netlink: 755 bytes leftover after parsing attributes in process `syz.5.11742'.
[  688.727558][ T4327] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  688.751205][T30751] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  688.751434][ T7917] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6
[  688.818092][ T7917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.827197][ T7917] usb 4-1: Product: syz
[  688.831368][ T7917] usb 4-1: Manufacturer: syz
[  688.837398][ T7917] usb 4-1: SerialNumber: syz
[  688.843836][ T7917] usb 4-1: config 0 descriptor??
[  688.888890][ T7917] ftdi_sio 4-1:0.117: FTDI USB Serial Device converter detected
[  688.906684][T30762] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  688.924112][T30764] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  688.937915][ T7917] usb 4-1: Detected FT232H
[  688.944866][T30751] ntfs3: loop2: failed to convert "c46c" to cp869
[  688.952477][T30762] NILFS (loop5): mounting fs with errors
[  688.955357][T30766] No source specified
[  688.991625][T30762] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6
[  689.103858][T30768] FAT-fs (loop6): Directory bread(block 64) failed
[  689.110453][T30768] FAT-fs (loop6): Directory bread(block 65) failed
[  689.117238][T30768] FAT-fs (loop6): Directory bread(block 66) failed
[  689.131217][T30768] FAT-fs (loop6): Directory bread(block 67) failed
[  689.138989][T30768] FAT-fs (loop6): Directory bread(block 68) failed
[  689.145943][T30768] FAT-fs (loop6): Directory bread(block 69) failed
[  689.152496][T30768] FAT-fs (loop6): Directory bread(block 70) failed
[  689.159566][T30768] FAT-fs (loop6): Directory bread(block 71) failed
[  689.165949][ T4327] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[  689.166672][T30768] FAT-fs (loop6): Directory bread(block 72) failed
[  689.204271][ T4327] usb 5-1: config 0 has no interface number 0
[  689.209611][T30768] FAT-fs (loop6): Directory bread(block 73) failed
[  689.214147][ T4327] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  689.349835][ T7917] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  689.368976][ T7917] ftdi_sio 4-1:0.117: GPIO initialisation failed: -71
[  689.371285][ T7917] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  689.377423][ T7917] usb 4-1: USB disconnect, device number 48
[  689.383403][ T7917] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  689.383700][ T7917] ftdi_sio 4-1:0.117: device disconnected
[  689.476980][ T4327] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  689.477005][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.477020][ T4327] usb 5-1: Product: syz
[  689.477032][ T4327] usb 5-1: Manufacturer: syz
[  689.477043][ T4327] usb 5-1: SerialNumber: syz
[  689.487787][ T4327] usb 5-1: config 0 descriptor??
[  689.550745][T30733] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  689.576047][ T4327] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 06:d8:fd:c1:5f:cd
[  689.903737][T30827] binder: 30826:30827 ioctl c0046209 e0ffff00000000 returned -22
[  690.181406][T30862] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11796'.
[  690.190454][T30862] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11796'.
[  690.227807][T30865] netlink: 'syz.3.11799': attribute type 4 has an invalid length.
[  690.244942][T30865] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11799'.
[  690.569534][ T4327] usb 5-1: USB disconnect, device number 49
[  690.587858][ T4327] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  691.156242][T30948] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11801'.
[  691.160729][T30947] set_capacity_and_notify: 14 callbacks suppressed
[  691.160740][T30947] loop6: detected capacity change from 0 to 512
[  691.167392][T30940] loop4: detected capacity change from 0 to 1024
[  691.196729][T30948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11801'.
[  691.331161][T30947] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000000000200,,errors=continue. Quota mode: writeback.
[  691.479477][T30982] netlink: 'syz.2.11812': attribute type 3 has an invalid length.
[  691.487422][T30982] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  691.595188][T30990] loop3: detected capacity change from 0 to 1024
[  691.738895][T31012] netlink: 'syz.6.11824': attribute type 21 has an invalid length.
[  691.782546][T31012] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11824'.
[  691.852483][T31025] xt_CT: You must specify a L4 protocol and not use inversions on it
[  692.030684][T31050] loop6: detected capacity change from 0 to 256
[  692.087610][T31050] loop6: Can't mount, would change RO state
[  692.158243][T31064] tc_dump_action: action bad kind
[  692.239120][T31076] loop5: detected capacity change from 0 to 512
[  692.367777][T31076] fscrypt (loop5, inode 2): Error -61 getting encryption context
[  692.394118][T31076] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61
[  692.447738][T31076] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #13: comm syz.5.11858: iget: bad i_size value: 12154757448730
[  692.471677][T31076] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.11858: couldn't read orphan inode 13 (err -117)
[  692.569369][T31076] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nodelalloc,sysvgroups,jqfmt=vfsold,nombcache,grpjquota=.seclabel,,errors=continue. Quota mode: writeback.
[  692.612393][T31114] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  692.880453][T31104] loop4: detected capacity change from 0 to 32768
[  693.031700][T31110] loop2: detected capacity change from 0 to 32768
[  693.083073][T31141] loop6: detected capacity change from 0 to 512
[  693.083187][T31104] XFS (loop4): Mounting V5 Filesystem
[  693.136903][T31110] ERROR: (device loop2): diAllocAG: error reading iag
[  693.136903][T31110] 
[  693.203308][T31110] ialloc: diAlloc returned -5!
[  693.272881][T31141] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,i_version,,errors=continue. Quota mode: writeback.
[  693.324850][T31141] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz.6.11887: invalid size
[  693.344516][T31157] loop5: detected capacity change from 0 to 256
[  693.363279][T31157] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  693.385878][T31157] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  693.412463][T31104] XFS (loop4): Ending clean mount
[  693.444102][T31157] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  693.460028][T31104] XFS (loop4): Quotacheck needed: Please wait.
[  693.613277][T31104] XFS (loop4): Quotacheck: Done.
[  693.655611][ T7917] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  693.775572][ T4349] XFS (loop4): Unmounting Filesystem
[  693.846239][T31169] loop5: detected capacity change from 0 to 8192
[  693.919738][T31169] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  693.942263][T31169] REISERFS (device loop5): using ordered data mode
[  693.966879][T31169] reiserfs: using flush barriers
[  693.994345][T31169] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  694.014091][T31169] REISERFS (device loop5): checking transaction log (loop5)
[  694.027675][T31169] REISERFS (device loop5): Using r5 hash to sort names
[  694.063546][T31169] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  694.083847][ T7917] usb 4-1: config 1 has an invalid interface number: 188 but max is 0
[  694.092019][ T7917] usb 4-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config
[  694.102277][ T7162] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  694.138433][ T7917] usb 4-1: config 1 has no interface number 0
[  694.144533][ T7917] usb 4-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  694.166454][ T7917] usb 4-1: config 1 interface 188 has no altsetting 0
[  694.248253][T31180] ipt_CLUSTERIP: Please specify destination IP
[  694.360878][ T7917] usb 4-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b
[  694.387727][ T7917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.414554][ T7917] usb 4-1: Product: syz
[  694.418748][ T7917] usb 4-1: Manufacturer: syz
[  694.435118][ T7917] usb 4-1: SerialNumber: syz
[  694.499930][ T7162] usb 3-1: config 0 has an invalid interface number: 29 but max is 0
[  694.530712][ T7162] usb 3-1: config 0 has no interface number 0
[  694.541999][ T7162] usb 3-1: config 0 interface 29 has no altsetting 0
[  694.724595][ T7162] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  694.734422][ T7162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.743839][T31213] __nla_validate_parse: 5 callbacks suppressed
[  694.743851][T31213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11919'.
[  694.772351][ T7162] usb 3-1: Product: syz
[  694.776524][ T7162] usb 3-1: Manufacturer: syz
[  694.790317][T31213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11919'.
[  694.798943][ T7162] usb 3-1: SerialNumber: syz
[  694.811803][ T7917] usb 4-1: unknown interface protocol 0xc1, assuming v1
[  694.828507][ T7917] usb 4-1: 188:2 : does not exist
[  694.834554][ T7162] usb 3-1: config 0 descriptor??
[  694.867571][ T7917] usb 4-1: USB disconnect, device number 49
[  695.119709][ T7162] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v174 fw v146.0.0 (2 channels)
[  695.130261][ T9138] udevd[9138]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  695.164673][T31251] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.11937'.
[  695.345732][ T7162] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71
[  695.362267][ T7162] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71)
[  695.375471][T31261] printk: syz.4.11941 (31261): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated).
[  695.403299][T31265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11943'.
[  695.429764][ T4327] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  695.451435][ T7162] peak_usb: probe of 3-1:0.29 failed with error -71
[  695.470985][ T7162] usb 3-1: USB disconnect, device number 24
[  695.731251][ T4327] usb 6-1: Using ep0 maxpacket: 8
[  695.781702][T31307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  695.796107][T31307] device batadv_slave_0 entered promiscuous mode
[  695.821862][T31307] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  695.889642][ T4327] usb 6-1: config 7 has an invalid interface number: 143 but max is 1
[  695.921434][ T4327] usb 6-1: config 7 has an invalid interface number: 217 but max is 1
[  695.951893][ T4327] usb 6-1: config 7 has an invalid descriptor of length 121, skipping remainder of the config
[  695.983298][T31323] netlink: 'syz.2.11974': attribute type 8 has an invalid length.
[  695.996081][ T4327] usb 6-1: config 7 has no interface number 0
[  696.007106][T31323] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.11974'.
[  696.017601][ T4327] usb 6-1: config 7 has no interface number 1
[  696.031645][ T4327] usb 6-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30
[  696.057670][ T4327] usb 6-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  696.077309][ T4327] usb 6-1: config 7 interface 143 has no altsetting 0
[  696.291535][ T4327] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35
[  696.295437][ T7162] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  696.306071][ T4327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.316081][ T4327] usb 6-1: Product: syz
[  696.344168][ T4327] usb 6-1: Manufacturer: syz
[  696.348782][ T4327] usb 6-1: SerialNumber: syz
[  696.554007][   T25] audit: type=1400 audit(697.288:66): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=31386 comm="syz.4.12005"
[  696.664175][T31395] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  696.691761][ T4327] qmi_wwan: probe of 6-1:7.143 failed with error -22
[  696.733921][ T7162] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  696.776572][ T4322] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  696.784232][ T4327] usb 6-1: Could not set interface, error -71
[  696.799887][ T4327] usb 6-1: USB disconnect, device number 21
[  696.916506][ T7162] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  696.931383][ T7162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.952628][ T7162] usb 4-1: Product: syz
[  696.959533][ T7162] usb 4-1: Manufacturer: syz
[  696.964454][ T7162] usb 4-1: SerialNumber: syz
[  696.972824][ T7162] usb 4-1: config 0 descriptor??
[  697.012224][ T7162] hub 4-1:0.0: bad descriptor, ignoring hub
[  697.018154][ T7162] hub: probe of 4-1:0.0 failed with error -5
[  697.114497][T31431] netlink: 830 bytes leftover after parsing attributes in process `syz.4.12027'.
[  697.166737][T31423] set_capacity_and_notify: 4 callbacks suppressed
[  697.166750][T31423] loop2: detected capacity change from 0 to 32768
[  697.204285][ T4322] usb 7-1: config 0 has an invalid interface number: 64 but max is 0
[  697.212902][ T4322] usb 7-1: config 0 has no interface number 0
[  697.222237][T31423] (syz.2.12022,31423,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  697.252197][T31423] (syz.2.12022,31423,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  697.298694][T31423] JBD2: Ignoring recovery information on journal
[  697.349533][T31446] rtc_cmos 00:00: Alarms can be up to one day in the future
[  697.360138][T31423] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  697.369564][ T7162] usb 4-1: USB disconnect, device number 50
[  697.439418][ T4322] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  697.450356][T31423] (syz.2.12022,31423,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9. Applying ECC.
[  697.470191][ T4322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.476026][T31423] (syz.2.12022,31423,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9
[  697.491892][T31423] (syz.2.12022,31423,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  697.503382][ T4322] usb 7-1: Product: syz
[  697.506093][T31423] (syz.2.12022,31423,1):ocfs2_quota_read:201 ERROR: status = -5
[  697.507675][ T4322] usb 7-1: Manufacturer: syz
[  697.515274][T31423] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 2
[  697.523126][ T4322] usb 7-1: SerialNumber: syz
[  697.539579][T31423] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  697.550666][T31423] (syz.2.12022,31423,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  697.569872][ T4322] usb 7-1: config 0 descriptor??
[  697.613444][ T4348] ocfs2: Unmounting device (7,2) on (node local)
[  697.690092][T31465] netlink: 'syz.4.12044': attribute type 1 has an invalid length.
[  697.719043][T31465] netlink: 'syz.4.12044': attribute type 2 has an invalid length.
[  697.767095][T31473] netlink: 'syz.2.12041': attribute type 30 has an invalid length.
[  697.777268][T31473] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12041'.
[  697.777288][T31469] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  697.792762][T31469] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  697.844518][T31469] vhci_hcd vhci_hcd.0: Device attached
[  697.879786][T31475] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6)
[  697.886303][T31475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  697.894604][T31475] vhci_hcd vhci_hcd.0: Device attached
[  697.904832][T31484] vhci_hcd: connection closed
[  697.906738][T31470] vhci_hcd: connection closed
[  697.915167][  T144] vhci_hcd: stop threads
[  697.940174][  T144] vhci_hcd: release socket
[  697.964649][   T25] audit: type=1800 audit(698.598:67): pid=31493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12054" name="SYSV798dd81c" dev="hugetlbfs" ino=0 res=0 errno=0
[  697.979832][  T144] vhci_hcd: disconnect device
[  697.992740][  T144] vhci_hcd: stop threads
[  697.997933][  T144] vhci_hcd: release socket
[  698.004138][  T144] vhci_hcd: disconnect device
[  698.018288][ T4322] usb 7-1: Found UVC 0.08 device syz (046d:0823)
[  698.024678][ T4322] usb 7-1: No valid video chain found.
[  698.071615][ T4327] vhci_hcd: vhci_device speed not set
[  698.080741][ T4322] usb 7-1: USB disconnect, device number 24
[  698.442852][T31538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12075'.
[  698.634095][T31560] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  698.663691][T31560] FAT-fs (loop5): unable to read boot sector
[  698.734661][T31574] loop3: detected capacity change from 0 to 1024
[  698.753577][T31578] x_tables: duplicate entry at hook 2
[  698.804696][T31566] loop6: detected capacity change from 0 to 4096
[  698.849953][T31566] ntfs: (device loop6): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2.
[  698.887795][T31574] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  698.898863][T31566] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  698.911096][T31574] hfsplus: xattr searching failed
[  698.953057][T31574] attempt to access beyond end of device
[  698.953057][T31574] loop3: rw=0, want=917506, limit=1024
[  698.994849][T31574] Buffer I/O error on dev loop3, logical block 458752, async page read
[  699.018869][T31566] ntfs: volume version 3.1.
[  699.034351][T31566] ntfs: (device loop6): map_mft_record_page(): Mft record 0x2 is corrupt.  Run chkdsk.
[  699.048252][T31574] hfsplus: unable to mark blocks free: error -5
[  699.063564][T31574] hfsplus: can't free extent
[  699.080180][T31566] ntfs: (device loop6): map_mft_record(): Failed with error code 5.
[  699.119953][T31566] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  699.163804][T31566] ntfs: (device loop6): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  699.412857][T31635] No such timeout policy "syz1"
[  699.451558][T31637] IPv6: sit1: Disabled Multicast RS
[  699.521252][T31647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12127'.
[  699.617478][T31656] netlink: 'syz.5.12131': attribute type 3 has an invalid length.
[  699.739199][T31675] loop6: detected capacity change from 0 to 256
[  699.742886][T31678] loop5: detected capacity change from 0 to 256
[  699.822061][T31675] FAT-fs (loop6): Directory bread(block 64) failed
[  699.832561][T31675] FAT-fs (loop6): Directory bread(block 65) failed
[  699.849255][T31678] FAT-fs (loop5): Directory bread(block 64) failed
[  699.860366][T31675] FAT-fs (loop6): Directory bread(block 66) failed
[  699.882842][T31675] FAT-fs (loop6): Directory bread(block 67) failed
[  699.889930][T31678] FAT-fs (loop5): Directory bread(block 65) failed
[  699.896572][T31675] FAT-fs (loop6): Directory bread(block 68) failed
[  699.918951][T31678] FAT-fs (loop5): Directory bread(block 66) failed
[  699.934109][T31675] FAT-fs (loop6): Directory bread(block 69) failed
[  699.982545][T31678] FAT-fs (loop5): Directory bread(block 67) failed
[  699.996441][T31675] FAT-fs (loop6): Directory bread(block 70) failed
[  700.023871][T31678] FAT-fs (loop5): Directory bread(block 68) failed
[  700.031113][T31675] FAT-fs (loop6): Directory bread(block 71) failed
[  700.058104][T31675] FAT-fs (loop6): Directory bread(block 72) failed
[  700.064630][T31675] FAT-fs (loop6): Directory bread(block 73) failed
[  700.071196][T31678] FAT-fs (loop5): Directory bread(block 69) failed
[  700.078555][T31678] FAT-fs (loop5): Directory bread(block 70) failed
[  700.100928][T31678] FAT-fs (loop5): Directory bread(block 71) failed
[  700.111839][T31678] FAT-fs (loop5): Directory bread(block 72) failed
[  700.118593][T31678] FAT-fs (loop5): Directory bread(block 73) failed
[  700.270223][T31713] device wlan0 entered promiscuous mode
[  700.457130][T31733] netlink: 'syz.5.12165': attribute type 10 has an invalid length.
[  700.496712][T31733] bridge0: port 3(team0) entered disabled state
[  700.505443][T31733] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.512838][T31733] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.558943][T31742] netlink: 'syz.6.12180': attribute type 3 has an invalid length.
[  700.624948][T31733] bridge0: port 3(team0) entered blocking state
[  700.631278][T31733] bridge0: port 3(team0) entered forwarding state
[  700.637857][T31733] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.644937][T31733] bridge0: port 2(bridge_slave_1) entered forwarding state
[  700.652286][T31733] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.659381][T31733] bridge0: port 1(bridge_slave_0) entered forwarding state
[  700.697137][T31733] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  700.897077][T31771] loop2: detected capacity change from 0 to 2048
[  700.936753][T31771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  700.975989][T31785] netlink: 'syz.5.12193': attribute type 21 has an invalid length.
[  700.995366][T31785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12193'.
[  701.072964][T31797] netlink: 'syz.4.12198': attribute type 10 has an invalid length.
[  701.118959][T31797] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  701.143118][T31797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  701.201870][T18228] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  701.242889][T31809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12203'.
[  701.372431][T31825] dlm: non-version read from control device 8192
[  701.426310][ T7917] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  701.453661][T31832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12216'.
[  701.471017][T18228] usb 7-1: Using ep0 maxpacket: 8
[  701.477449][T31832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12216'.
[  701.486744][T31832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12216'.
[  701.513860][T31839] loop3: detected capacity change from 0 to 256
[  701.518552][T31838] netlink: 448 bytes leftover after parsing attributes in process `syz.2.12218'.
[  701.530023][T31838] unsupported nla_type 14345
[  701.588424][T31839] FAT-fs (loop3): Directory bread(block 64) failed
[  701.605966][T31839] FAT-fs (loop3): Directory bread(block 65) failed
[  701.627533][T31839] FAT-fs (loop3): Directory bread(block 66) failed
[  701.641977][T31839] FAT-fs (loop3): Directory bread(block 67) failed
[  701.648881][T31839] FAT-fs (loop3): Directory bread(block 68) failed
[  701.656692][T31839] FAT-fs (loop3): Directory bread(block 69) failed
[  701.663502][T31839] FAT-fs (loop3): Directory bread(block 70) failed
[  701.670070][T31839] FAT-fs (loop3): Directory bread(block 71) failed
[  701.677480][T31839] FAT-fs (loop3): Directory bread(block 72) failed
[  701.684249][T31839] FAT-fs (loop3): Directory bread(block 73) failed
[  701.743194][T31853] loop4: detected capacity change from 0 to 2048
[  701.761254][T31853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  701.768650][T18228] usb 7-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[  701.788696][T18228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.822787][T18228] usb 7-1: Product: syz
[  701.826957][T18228] usb 7-1: Manufacturer: syz
[  701.832590][ T7917] usb 6-1: config 1 has an invalid interface number: 188 but max is 0
[  701.840776][ T7917] usb 6-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config
[  701.852559][T18228] usb 7-1: SerialNumber: syz
[  701.867557][T18228] usb 7-1: config 0 descriptor??
[  701.875291][ T7917] usb 6-1: config 1 has no interface number 0
[  701.881567][T31861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12230'.
[  701.890935][ T7917] usb 6-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  701.904521][ T7917] usb 6-1: config 1 interface 188 has no altsetting 0
[  701.912405][T18228] cdc_ether 7-1:0.0: skipping garbage
[  701.918320][T18228] cdc_ether 7-1:0.0: skipping garbage
[  701.923994][T18228] usb 7-1: bad CDC descriptors
[  701.929345][T18228] usb 7-1: unsupported MDLM descriptors
[  701.935576][T18228] cdc_acm 7-1:0.0: skipping garbage
[  701.943259][T18228] cdc_acm 7-1:0.0: skipping garbage
[  701.950153][ T4322] usb 3-1: new low-speed USB device number 25 using dummy_hcd
[  702.030047][T31873] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12237'.
[  702.039955][T31873] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12237'.
[  702.054043][T31873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12237'.
[  702.101459][ T7917] usb 6-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b
[  702.119015][ T7917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.135268][ T7917] usb 6-1: Product: syz
[  702.140580][ T7917] usb 6-1: Manufacturer: syz
[  702.147240][ T7917] usb 6-1: SerialNumber: syz
[  702.155883][ T7162] usb 7-1: USB disconnect, device number 25
[  702.266130][T31897] xt_TCPMSS: Only works on TCP SYN packets
[  702.296644][T31901] set match dimension is over the limit!
[  702.383621][T31910] netlink: 'syz.4.12253': attribute type 10 has an invalid length.
[  702.394554][T31910] bridge0: port 3(team0) entered disabled state
[  702.402715][T31910] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.409798][ T4322] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  702.410063][T31910] bridge0: port 1(bridge_slave_0) entered disabled state
[  702.423800][ T4322] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  702.447985][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.461829][T31910] bridge0: port 3(team0) entered blocking state
[  702.468117][T31910] bridge0: port 3(team0) entered forwarding state
[  702.474662][T31910] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.481692][T31910] bridge0: port 2(bridge_slave_1) entered forwarding state
[  702.488987][T31910] bridge0: port 1(bridge_slave_0) entered blocking state
[  702.496063][T31910] bridge0: port 1(bridge_slave_0) entered forwarding state
[  702.511126][T31910] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  702.529522][ T7917] usb 6-1: unknown interface protocol 0xc1, assuming v1
[  702.536494][ T7917] usb 6-1: 188:2 : does not exist
[  702.576583][ T7917] usb 6-1: USB disconnect, device number 22
[  702.618447][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  702.681523][T31927] netlink: 'syz.4.12262': attribute type 3 has an invalid length.
[  702.805626][T31937] loop3: detected capacity change from 0 to 4096
[  702.816297][ T4322] usb 3-1: string descriptor 0 read error: -71
[  702.822708][ T4322] hub 3-1:32.0: bad descriptor, ignoring hub
[  702.832027][ T4322] hub: probe of 3-1:32.0 failed with error -5
[  702.914531][ T4322] usb 3-1: USB disconnect, device number 25
[  703.085584][T31953] netlink: 'syz.3.12272': attribute type 10 has an invalid length.
[  703.095358][T31953] bridge0: port 2(team0) entered disabled state
[  703.102711][T31953] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.110199][ T7162] usb 7-1: new full-speed USB device number 26 using dummy_hcd
[  703.143961][T31953] bridge0: port 2(team0) entered blocking state
[  703.150280][T31953] bridge0: port 2(team0) entered forwarding state
[  703.156860][T31953] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.163974][T31953] bridge0: port 1(bridge_slave_0) entered forwarding state
[  703.173907][T31953] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  703.175598][T31955] loop5: detected capacity change from 0 to 8192
[  703.191653][ T9138] udevd[9138]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  703.243621][ T7917] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  703.419844][T31972] netlink: 'syz.2.12283': attribute type 15 has an invalid length.
[  703.428508][T31974] netlink: 'syz.5.12285': attribute type 10 has an invalid length.
[  703.532570][ T7162] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[  703.554248][ T7162] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  703.619579][T31993] netlink: get zone limit has 8 unknown bytes
[  703.639151][ T7917] usb 5-1: config 0 has an invalid interface number: 229 but max is 0
[  703.660373][ T7917] usb 5-1: config 0 has no interface number 0
[  703.672425][ T7917] usb 5-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  703.735370][ T7162] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  703.762408][ T7162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.776922][ T7162] usb 7-1: Product: syz
[  703.793269][ T7162] usb 7-1: Manufacturer: syz
[  703.803448][ T7162] usb 7-1: SerialNumber: syz
[  703.826008][ T7162] usb 7-1: config 0 descriptor??
[  703.842237][T31940] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  703.852919][ T7917] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38
[  703.871296][ T7917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.877905][T32017] netlink: 'syz.2.12306': attribute type 10 has an invalid length.
[  703.884770][    C1] port100 7-1:0.0: NFC: The urb has been stopped (status -2)
[  703.894838][ T7162] port100 7-1:0.0: NFC: Could not get supported command types
[  703.894859][T32017] bridge0: port 3(team0) entered disabled state
[  703.908733][T32017] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.910579][ T7917] usb 5-1: Product: syz
[  703.915877][T32017] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.927546][ T7917] usb 5-1: Manufacturer: syz
[  703.946152][T32017] bridge0: port 3(team0) entered blocking state
[  703.947005][ T7917] usb 5-1: SerialNumber: syz
[  703.952480][T32017] bridge0: port 3(team0) entered forwarding state
[  703.952630][T32017] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.970594][T32017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  703.977896][T32017] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.978814][ T7917] usb 5-1: config 0 descriptor??
[  703.984968][T32017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  704.002390][T32017] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  704.088394][ T7162] usb 7-1: USB disconnect, device number 26
[  704.125537][T32023] loop2: detected capacity change from 0 to 256
[  704.164722][T32023] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  704.236119][T32025] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present
[  704.322046][ T7917] usb 5-1: USB disconnect, device number 50
[  704.336875][T32027] loop3: detected capacity change from 0 to 64
[  705.264621][T18228] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  705.358710][T32078] loop6: detected capacity change from 0 to 2048
[  705.438105][T32078] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  705.519423][T32070] loop5: detected capacity change from 0 to 32768
[  705.531160][T18228] usb 4-1: Using ep0 maxpacket: 8
[  705.547348][T32092] netlink: 'syz.4.12344': attribute type 1 has an invalid length.
[  705.560928][T32070] (syz.5.12331,32070,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  705.578304][T32094] netlink: 'syz.6.12340': attribute type 10 has an invalid length.
[  705.588616][T32094] bridge0: port 3(team0) entered disabled state
[  705.595312][T32094] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.602618][T32094] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.616465][T32070] (syz.5.12331,32070,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  705.647699][T32094] bridge0: port 3(team0) entered blocking state
[  705.654050][T32094] bridge0: port 3(team0) entered forwarding state
[  705.660618][T32094] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.667686][T32094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  705.675028][T32094] bridge0: port 1(bridge_slave_0) entered blocking state
[  705.682115][T32094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  705.699630][T32094] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  705.701808][T32098] loop4: detected capacity change from 0 to 1024
[  705.712650][T18228] usb 4-1: config 7 has an invalid interface number: 143 but max is 1
[  705.722820][T18228] usb 4-1: config 7 has an invalid interface number: 217 but max is 1
[  705.741856][T18228] usb 4-1: config 7 has an invalid descriptor of length 121, skipping remainder of the config
[  705.743461][T32070] JBD2: Ignoring recovery information on journal
[  705.759642][T18228] usb 4-1: config 7 has no interface number 0
[  705.765835][T18228] usb 4-1: config 7 has no interface number 1
[  705.772609][T18228] usb 4-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30
[  705.783867][T18228] usb 4-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  705.797226][T18228] usb 4-1: config 7 interface 143 has no altsetting 0
[  705.827285][T32098] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  705.865274][T32070] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  705.894584][ T4332] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  705.924572][T32070] (syz.5.12331,32070,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9. Applying ECC.
[  705.952392][T32070] (syz.5.12331,32070,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9
[  705.965731][T32070] (syz.5.12331,32070,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  705.974722][T18228] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35
[  705.984039][T32070] (syz.5.12331,32070,1):ocfs2_quota_read:201 ERROR: status = -5
[  706.000065][T32110] program syz.6.12351 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  706.002605][T18228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.013413][T32070] __quota_error: 2 callbacks suppressed
[  706.013424][T32070] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 2
[  706.018835][T18228] usb 4-1: Product: syz
[  706.050389][T18228] usb 4-1: Manufacturer: syz
[  706.058414][T32070] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  706.072245][T18228] usb 4-1: SerialNumber: syz
[  706.089115][T32070] (syz.5.12331,32070,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[  706.149309][T21252] ocfs2: Unmounting device (7,5) on (node local)
[  706.257034][T32120] loop4: detected capacity change from 0 to 1764
[  706.325003][T32114] loop6: detected capacity change from 0 to 32768
[  706.375861][ T4332] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  706.380719][T32124] netlink: 'syz.5.12358': attribute type 10 has an invalid length.
[  706.391317][ T4332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  706.395729][T18228] qmi_wwan: probe of 4-1:7.143 failed with error -22
[  706.412752][T32124] bridge0: port 3(team0) entered disabled state
[  706.419140][T32124] bridge0: port 2(bridge_slave_1) entered disabled state
[  706.426240][T32124] bridge0: port 1(bridge_slave_0) entered disabled state
[  706.493149][T18228] usb 4-1: Could not set interface, error -71
[  706.503967][ T4332] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  706.524499][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  706.536010][T18228] usb 4-1: USB disconnect, device number 51
[  706.571192][ T4332] usb 3-1: SerialNumber: syz
[  706.576375][T32135] loop4: detected capacity change from 0 to 128
[  706.880027][ T4332] usb 3-1: 0:2 : does not exist
[  706.898086][ T4332] usb 3-1: USB disconnect, device number 26
[  706.904163][ T4327] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  706.982413][T32152] exfat: Deprecated parameter 'utf8'
[  706.985927][T32142] (syz.6.12365,32142,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  707.005012][T32142] (syz.6.12365,32142,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  707.009976][T32152] exfat: Deprecated parameter 'utf8'
[  707.028226][T32142] JBD2: Ignoring recovery information on journal
[  707.072422][T32142] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  707.095934][T32152] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  707.111376][T32154] FAT-fs (loop3): Directory bread(block 64) failed
[  707.124418][T32154] FAT-fs (loop3): Directory bread(block 65) failed
[  707.130999][T32154] FAT-fs (loop3): Directory bread(block 66) failed
[  707.147447][ T9138] udevd[9138]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  707.164248][T32154] FAT-fs (loop3): Directory bread(block 67) failed
[  707.181111][T32154] FAT-fs (loop3): Directory bread(block 68) failed
[  707.196655][T32152] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  707.234347][T32154] FAT-fs (loop3): Directory bread(block 69) failed
[  707.240939][T32154] FAT-fs (loop3): Directory bread(block 70) failed
[  707.259110][T32154] FAT-fs (loop3): Directory bread(block 71) failed
[  707.266385][T32142] (syz.6.12365,32142,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9. Applying ECC.
[  707.279745][T32154] FAT-fs (loop3): Directory bread(block 72) failed
[  707.288188][T32154] FAT-fs (loop3): Directory bread(block 73) failed
[  707.289293][T32142] (syz.6.12365,32142,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x7dc2e7ff, computed 0xfdefcca9
[  707.310383][T32142] (syz.6.12365,32142,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  707.326979][T32142] (syz.6.12365,32142,0):ocfs2_quota_read:201 ERROR: status = -5
[  707.334821][T32142] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 2
[  707.344278][T32142] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  707.353931][T32142] (syz.6.12365,32142,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[  707.418922][T21488] ocfs2: Unmounting device (7,6) on (node local)
[  707.505325][T32165] device netdevsim0 entered promiscuous mode
[  707.523276][T32165] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  707.562388][ T4327] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[  707.580704][ T4327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.602819][ T4327] usb 6-1: Product: syz
[  707.610686][ T4327] usb 6-1: Manufacturer: syz
[  707.621459][ T4327] usb 6-1: SerialNumber: syz
[  707.638505][ T4327] usb 6-1: config 0 descriptor??
[  707.712255][ T4327] hub 6-1:0.0: bad descriptor, ignoring hub
[  707.729737][ T4327] hub: probe of 6-1:0.0 failed with error -5
[  707.753120][ T4327] usbsevseg 6-1:0.0: USB 7 Segment device now attached
[  707.766356][T32180] FAT-fs (loop4): Directory bread(block 64) failed
[  707.786787][T32180] FAT-fs (loop4): Directory bread(block 65) failed
[  707.793471][T32180] FAT-fs (loop4): Directory bread(block 66) failed
[  707.801635][T32190] __nla_validate_parse: 4 callbacks suppressed
[  707.801646][T32190] netlink: 236 bytes leftover after parsing attributes in process `syz.2.12389'.
[  707.816255][T32180] FAT-fs (loop4): Directory bread(block 67) failed
[  707.825419][T32194] netlink: 'syz.3.12390': attribute type 11 has an invalid length.
[  707.847750][T32180] FAT-fs (loop4): Directory bread(block 68) failed
[  707.863440][T32180] FAT-fs (loop4): Directory bread(block 69) failed
[  707.919636][T32180] FAT-fs (loop4): Directory bread(block 70) failed
[  707.952879][T32180] FAT-fs (loop4): Directory bread(block 71) failed
[  707.968925][T32180] FAT-fs (loop4): Directory bread(block 72) failed
[  707.980154][T32180] FAT-fs (loop4): Directory bread(block 73) failed
[  708.036036][T32204] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  708.075178][T18228] usb 6-1: USB disconnect, device number 23
[  708.085412][T18228] usbsevseg 6-1:0.0: USB 7 Segment now disconnected
[  708.216825][T32219] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.12404'.
[  708.239727][T32219] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.12404'.
[  708.524053][T32248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12418'.
[  708.585434][T32256] set_capacity_and_notify: 7 callbacks suppressed
[  708.585448][T32256] loop5: detected capacity change from 0 to 256
[  708.705810][T18228] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  708.712279][T32269] loop4: detected capacity change from 0 to 1764
[  708.798237][T32269] iso9660: Corrupted directory entry in block 14 of inode 1920
[  708.854992][T32278] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  708.861988][T32278] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  708.880825][T32278] vhci_hcd vhci_hcd.0: Device attached
[  709.101235][ T4327] vhci_hcd: vhci_device speed not set
[  709.102228][T18228] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  709.134774][T18228] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  709.159867][T18228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.186748][ T4327] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[  709.236708][T18228] gspca_main: stv0680-2.14.0 probing 041e:4007
[  709.384475][T32337] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2
[  709.447508][T32280] vhci_hcd: connection reset by peer
[  709.453033][ T6601] vhci_hcd: stop threads
[  709.468607][ T6601] vhci_hcd: release socket
[  709.473305][ T6601] vhci_hcd: disconnect device
[  709.743488][T32361] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12473'.
[  709.760832][T32333] loop2: detected capacity change from 0 to 32768
[  709.796292][T32333] (syz.2.12459,32333,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  709.832822][T32333] (syz.2.12459,32333,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  709.885974][T32333] JBD2: Ignoring recovery information on journal
[  709.979749][T32333] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  710.054294][T32357] loop6: detected capacity change from 0 to 32768
[  710.072959][T32357] (syz.6.12471,32357,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  710.097207][T32357] (syz.6.12471,32357,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  710.134478][T32357] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present!
[  710.162107][T32357] JBD2: Ignoring recovery information on journal
[  710.203066][T32357] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  710.206587][ T4348] ocfs2: Unmounting device (7,2) on (node local)
[  710.413938][T21488] ocfs2: Unmounting device (7,6) on (node local)
[  710.416181][T18228] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  710.662020][T18228] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  710.670237][T18228] stv0680 4-1:4.0: last error: 70,  command = 0x88
[  710.709696][T18228] usb 4-1: USB disconnect, device number 52
[  710.820948][T32409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12495'.
[  710.843573][T32409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12495'.
[  711.346704][T32468] loop4: detected capacity change from 0 to 1024
[  711.406302][T32468] EXT4-fs (loop4): Ignoring removed bh option
[  711.456367][T32468] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,init_itable,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,mb_optimize_scan=0x0000000000000001,user_xattr,bh,errors=remount-ro,. Quota mode: writeback.
[  711.627586][T32502] loop3: detected capacity change from 0 to 64
[  711.729228][T32494] loop6: detected capacity change from 0 to 32768
[  711.831481][T32494] (syz.6.12534,32494,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  711.861086][T32494] (syz.6.12534,32494,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  711.927754][T32494] JBD2: Ignoring recovery information on journal
[  712.026564][T32494] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  712.274900][T21488] ocfs2: Unmounting device (7,6) on (node local)
[  712.297160][T32558] gfs2: not a GFS2 filesystem
[  712.449534][T32568] loop6: detected capacity change from 0 to 256
[  712.471656][T32576] loop5: detected capacity change from 0 to 164
[  712.526819][T32568] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  712.651148][T32568] exFAT-fs (loop6): error, found bogus dentry(9) beyond unused empty group(8) (start_clu : 5, cur_clu : 5)
[  712.671718][T32588] loop5: detected capacity change from 0 to 256
[  712.680376][T32568] exFAT-fs (loop6): Filesystem has been set read-only
[  712.751279][T32596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12584'.
[  712.754770][T32588] FAT-fs (loop5): Directory bread(block 64) failed
[  712.769709][ T4322] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  712.774997][T32588] FAT-fs (loop5): Directory bread(block 65) failed
[  712.793761][T32592] FAT-fs (loop4): Directory bread(block 64) failed
[  712.821089][T32588] FAT-fs (loop5): Directory bread(block 66) failed
[  712.827610][T32588] FAT-fs (loop5): Directory bread(block 67) failed
[  712.840598][T32592] FAT-fs (loop4): Directory bread(block 65) failed
[  712.863888][T32592] FAT-fs (loop4): Directory bread(block 66) failed
[  712.870429][T32592] FAT-fs (loop4): Directory bread(block 67) failed
[  712.877053][T32588] FAT-fs (loop5): Directory bread(block 68) failed
[  712.883582][T32588] FAT-fs (loop5): Directory bread(block 69) failed
[  712.895045][T32600] netlink: 'syz.3.12586': attribute type 1 has an invalid length.
[  712.903044][T32592] FAT-fs (loop4): Directory bread(block 68) failed
[  712.903073][T32592] FAT-fs (loop4): Directory bread(block 69) failed
[  712.903122][T32592] FAT-fs (loop4): Directory bread(block 70) failed
[  712.903145][T32592] FAT-fs (loop4): Directory bread(block 71) failed
[  712.903192][T32592] FAT-fs (loop4): Directory bread(block 72) failed
[  712.936230][T32600] netlink: 232 bytes leftover after parsing attributes in process `syz.3.12586'.
[  712.956246][T32588] FAT-fs (loop5): Directory bread(block 70) failed
[  712.983055][T32588] FAT-fs (loop5): Directory bread(block 71) failed
[  712.989652][T32588] FAT-fs (loop5): Directory bread(block 72) failed
[  713.035923][T32588] FAT-fs (loop5): Directory bread(block 73) failed
[  713.045561][T32592] FAT-fs (loop4): Directory bread(block 73) failed
[  713.253368][ T4322] usb 3-1: config 0 has an invalid interface number: 49 but max is 0
[  713.277663][ T4322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  713.309797][ T4322] usb 3-1: config 0 has no interface number 0
[  713.336019][ T4322] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  713.355451][ T4322] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  713.374310][ T4322] usb 3-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  713.414729][ T4322] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad
[  713.434610][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.470975][ T4322] usb 3-1: config 0 descriptor??
[  713.483065][T32634] netlink: 'syz.5.12603': attribute type 1 has an invalid length.
[  713.512799][T32634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12603'.
[  713.527912][ T4322] xbox_remote_probe: Unexpected endpoint_in
[  713.654780][ T4332] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  713.759284][ T4322] usb 3-1: USB disconnect, device number 27
[  714.170288][ T4332] usb 4-1: unable to get BOS descriptor or descriptor too short
[  714.243620][ T4332] usb 4-1: not running at top speed; connect to a high speed hub
[  714.360355][ T4332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  714.392878][T32640] set_capacity_and_notify: 1 callbacks suppressed
[  714.392889][T32640] loop6: detected capacity change from 0 to 1024
[  714.405986][ T4332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  714.496850][T32640] EXT4-fs (loop6): Ignoring removed bh option
[  714.573149][T32640] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,init_itable,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,mb_optimize_scan=0x0000000000000001,user_xattr,bh,errors=remount-ro,. Quota mode: writeback.
[  714.581604][T32665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  714.600705][    C1] vkms_vblank_simulate: vblank timer overrun
[  714.659880][ T4327] vhci_hcd: vhci_device speed not set
[  714.682116][ T4332] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  714.691171][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.710675][ T4332] usb 4-1: Product: syz
[  714.716821][ T4332] usb 4-1: Manufacturer: syz
[  714.726386][ T4332] usb 4-1: SerialNumber: syz
[  714.947166][T32699] ieee802154 phy0 wpan0: encryption failed: -22
[  714.988554][T32703] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  715.206752][T32731] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  715.258344][ T4332] usb 4-1: cannot find UAC_HEADER
[  715.280245][ T4332] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  715.316498][ T4332] usb 4-1: USB disconnect, device number 53
[  715.328558][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  715.332058][T32745] loop2: detected capacity change from 0 to 64
[  715.453246][T32745] Trying to free block not in datazone
[  715.462643][T32745] Trying to free block not in datazone
[  715.476169][T32745] Trying to free block not in datazone
[  715.510029][T32745] Trying to free block not in datazone
[  715.528346][T32745] minix_free_block (loop2:6): bit already cleared
[  715.549117][T32745] Trying to free block not in datazone
[  715.564896][T32745] Trying to free block not in datazone
[  715.590349][  T300] cgroup: No subsys list or none specified
[  715.709666][  T310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12671'.
[  715.899731][  T337] CIFS mount error: No usable UNC path provided in device string!
[  715.899731][  T337] 
[  715.947483][  T337] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  716.131083][  T369] x_tables: ip6_tables: mh match: only valid for protocol 135
[  716.245534][  T374] loop3: detected capacity change from 0 to 4096
[  716.341456][  T392] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  716.373839][  T398] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12714'.
[  716.474713][  T406] loop2: detected capacity change from 0 to 512
[  716.592552][  T406] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  716.624758][  T406] EXT4-fs (loop2): Remounting filesystem read-only
[  716.655907][  T388] loop5: detected capacity change from 0 to 32768
[  716.659742][  T406] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.12717: invalid indirect mapped block 4278190080 (level 0)
[  716.700811][  T406] EXT4-fs (loop2): Remounting filesystem read-only
[  716.711617][  T406] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.12717: invalid indirect mapped block 1 (level 1)
[  716.729730][  T388] JBD2: Ignoring recovery information on journal
[  716.738373][  T406] EXT4-fs (loop2): Remounting filesystem read-only
[  716.754887][  T406] EXT4-fs (loop2): 1 truncate cleaned up
[  716.765609][  T406] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none.
[  716.799663][  T388] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  716.810636][  T406] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.12717: bad inode number: 1
[  716.825873][  T434] netlink: 'syz.6.12731': attribute type 9 has an invalid length.
[  716.829711][  T406] EXT4-fs (loop2): Remounting filesystem read-only
[  716.850502][  T388] OCFS2: ERROR (device loop5): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  716.850585][  T388] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  716.879449][  T434] netlink: 'syz.6.12731': attribute type 6 has an invalid length.
[  716.898524][  T388] OCFS2: File system is now read-only.
[  716.904164][  T388] (syz.5.12710,388,0):ocfs2_calc_xattr_init:642 ERROR: status = -117
[  716.904962][  T436] netlink: 'syz.4.12733': attribute type 2 has an invalid length.
[  716.914375][  T388] (syz.5.12710,388,0):ocfs2_mknod:334 ERROR: status = -117
[  716.941867][  T388] (syz.5.12710,388,0):ocfs2_mknod:502 ERROR: status = -117
[  716.949402][  T388] (syz.5.12710,388,0):ocfs2_mkdir:659 ERROR: status = -117
[  716.967524][  T436] netlink: 'syz.4.12733': attribute type 3 has an invalid length.
[  717.006370][T21252] ocfs2: Unmounting device (7,5) on (node local)
[  717.050141][  T445] loop6: detected capacity change from 0 to 1024
[  717.153976][  T445] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6)
[  717.193021][ T4322] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  717.223911][  T445] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  717.233686][  T445] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.12738: Failed to acquire dquot type 0
[  717.238588][  T454] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12742'.
[  717.262648][  T445] EXT4-fs error (device loop6): mb_free_blocks:1876: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  717.278449][ T4327] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  717.331004][  T445] EXT4-fs (loop6): 1 truncate cleaned up
[  717.341375][  T445] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  717.406120][  T460] loop5: detected capacity change from 0 to 256
[  717.413529][  T445] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6)
[  717.434829][  T445] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  717.444546][  T445] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.12738: Failed to acquire dquot type 0
[  717.610092][ T4322] usb 4-1: config 0 has an invalid interface number: 90 but max is 0
[  717.629396][ T4322] usb 4-1: config 0 has no interface number 0
[  717.640683][ T4322] usb 4-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64
[  717.731449][  T485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12755'.
[  717.747833][  T485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12755'.
[  717.757367][ T4327] usb 3-1: unable to get BOS descriptor or descriptor too short
[  717.856008][ T4322] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa
[  717.887915][ T4327] usb 3-1: config 14 has an invalid interface number: 85 but max is 0
[  717.896086][ T4327] usb 3-1: config 14 has no interface number 0
[  717.905635][  T499] netlink: 'syz.4.12762': attribute type 10 has an invalid length.
[  717.909138][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.913763][  T499] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  717.930469][ T4327] usb 3-1: config 14 interface 85 has no altsetting 0
[  717.943728][ T4322] usb 4-1: Product: syz
[  717.947888][ T4322] usb 4-1: Manufacturer: syz
[  717.967183][ T4322] usb 4-1: SerialNumber: syz
[  717.972003][  T501] netlink: 'syz.4.12763': attribute type 1 has an invalid length.
[  717.978634][ T4322] usb 4-1: config 0 descriptor??
[  718.005570][  T437] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  718.015047][  T479] loop6: detected capacity change from 0 to 32768
[  718.057254][  T479] JBD2: Ignoring recovery information on journal
[  718.125844][  T479] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  718.169727][ T4327] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=24.ae
[  718.176396][ T7559] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  718.184496][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.202829][ T4327] usb 3-1: Product: syz
[  718.207097][ T4327] usb 3-1: Manufacturer: syz
[  718.212011][ T4327] usb 3-1: SerialNumber: syz
[  718.227662][T21488] ocfs2: Unmounting device (7,6) on (node local)
[  718.272971][ T4322] powermate: Expected payload of 3--6 bytes, found 64 bytes!
[  718.289425][ T4322] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.90/input/input59
[  718.419551][  T527] loop6: detected capacity change from 0 to 2048
[  718.443648][ T7559] usb 6-1: Using ep0 maxpacket: 16
[  718.479141][  T527] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  718.518916][  T527] fscrypt (loop6, inode 14): Error -61 getting encryption context
[  718.519918][ T4327] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  718.527916][T18228] usb 4-1: USB disconnect, device number 54
[  718.550438][    C0] powermate: config urb returned -71
[  718.555724][    C0] powermate: usb_submit_urb(config) failed
[  718.555758][    C0] powermate 4-1:0.90: powermate_irq - usb_submit_urb failed with result: -19
[  718.570622][ T4327] gspca_sn9c2028: read1 error -71
[  718.593914][ T4327] gspca_sn9c2028: read1 error -71
[  718.614776][ T4327] gspca_sn9c2028: read1 error -71
[  718.619831][ T4327] sn9c2028: probe of 3-1:14.85 failed with error -71
[  718.664796][ T4327] usb 3-1: USB disconnect, device number 28
[  718.686889][  T548] tipc: Trying to set illegal importance in message
[  718.755427][ T7559] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  718.776871][ T7559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.785070][ T7559] usb 6-1: Product: syz
[  718.808242][ T7559] usb 6-1: Manufacturer: syz
[  718.813648][ T7559] usb 6-1: SerialNumber: syz
[  718.832429][ T7559] usb 6-1: config 0 descriptor??
[  718.938129][  T575] netlink: 'syz.6.12797': attribute type 1 has an invalid length.
[  718.952779][  T575] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.12797'.
[  719.103581][  T596] netlink: 100 bytes leftover after parsing attributes in process `syz.6.12807'.
[  719.106445][ T7559] speedtch 6-1:0.0: speedtch_bind: wrong device class 68
[  719.141580][ T7559] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  719.306958][  T622] loop3: detected capacity change from 0 to 256
[  719.325858][ T7559] usb 6-1: USB disconnect, device number 24
[  719.383073][  T622] FAT-fs (loop3): Directory bread(block 64) failed
[  719.414682][  T622] FAT-fs (loop3): Directory bread(block 65) failed
[  719.433443][  T622] FAT-fs (loop3): Directory bread(block 66) failed
[  719.445311][  T622] FAT-fs (loop3): Directory bread(block 67) failed
[  719.458138][  T622] FAT-fs (loop3): Directory bread(block 68) failed
[  719.483514][  T622] FAT-fs (loop3): Directory bread(block 69) failed
[  719.497903][  T622] FAT-fs (loop3): Directory bread(block 70) failed
[  719.525662][ T4322] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[  719.528820][  T622] FAT-fs (loop3): Directory bread(block 71) failed
[  719.550451][  T622] FAT-fs (loop3): Directory bread(block 72) failed
[  719.559633][  T622] FAT-fs (loop3): Directory bread(block 73) failed
[  719.774188][  T660] loop3: detected capacity change from 0 to 512
[  719.891980][  T660] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5
[  719.891980][  T660] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  719.891980][  T660] 
[  719.915992][  T660] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  719.926935][  T685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12846'.
[  719.958429][  T660] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000]
[  719.973170][ T4322] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  719.988396][  T660] EXT4-fs (loop3): 1 truncate cleaned up
[  719.993026][ T4322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.004294][  T660] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  720.039037][ T4322] usb 7-1: config 0 descriptor??
[  720.044954][T21424] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5)
[  720.092850][ T4322] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  720.125447][T21424] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:8: Failed to release dquot type 1
[  720.144612][  T701] loop2: detected capacity change from 0 to 64
[  720.160064][ T1466] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5)
[  720.174178][ T1466] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 1
[  720.250281][ T4327] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  720.320084][  T714] loop3: detected capacity change from 0 to 1764
[  720.510837][  T739] xt_TCPMSS: Only works on TCP SYN packets
[  720.572631][ T4322] gp8psk: usb in 137 operation failed.
[  720.578850][ T4322] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  720.596898][ T4322] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  720.620410][ T4322] usb 7-1: USB disconnect, device number 27
[  720.667014][ T4327] usb 5-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config
[  720.684385][ T4327] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x77, skipping
[  720.705809][ T4327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 61941, setting to 64
[  720.735400][ T4327] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  720.762478][  T761] loop3: detected capacity change from 0 to 24
[  720.779639][  T763] loop2: detected capacity change from 0 to 1024
[  720.803287][  T761] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  720.834197][    T9] hfsplus: b-tree write err: -5, ino 8
[  720.839991][ T4327] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  720.849884][ T4327] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  720.853829][  T761] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  720.857914][ T4327] usb 5-1: Manufacturer: syz
[  720.871670][ T4327] usb 5-1: config 0 descriptor??
[  720.889432][  T761] VFS: Lookup of 'file0' in romfs loop3 would have caused loop
[  721.071991][  T778] netlink: 'syz.3.12890': attribute type 1 has an invalid length.
[  721.086402][  T778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12890'.
[  721.107124][  T780] netlink: 'syz.2.12891': attribute type 1 has an invalid length.
[  721.127486][  T782] loop3: detected capacity change from 0 to 256
[  721.176638][ T7559] usb 5-1: USB disconnect, device number 51
[  721.206991][  T782] FAT-fs (loop3): Directory bread(block 64) failed
[  721.220648][  T782] FAT-fs (loop3): Directory bread(block 65) failed
[  721.237230][  T782] FAT-fs (loop3): Directory bread(block 66) failed
[  721.263922][  T782] FAT-fs (loop3): Directory bread(block 67) failed
[  721.279616][  T782] FAT-fs (loop3): Directory bread(block 68) failed
[  721.300658][  T782] FAT-fs (loop3): Directory bread(block 69) failed
[  721.307222][  T782] FAT-fs (loop3): Directory bread(block 70) failed
[  721.343659][  T782] FAT-fs (loop3): Directory bread(block 71) failed
[  721.376510][  T782] FAT-fs (loop3): Directory bread(block 72) failed
[  721.388439][  T782] FAT-fs (loop3): Directory bread(block 73) failed
[  721.474474][  T808] loop6: detected capacity change from 0 to 2048
[  721.590739][  T823] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  721.607999][  T808] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12
[  721.664038][  T808] Remounting filesystem read-only
[  721.725272][  T836] netlink: 'syz.6.12917': attribute type 3 has an invalid length.
[  721.785021][  T836] netlink: 224 bytes leftover after parsing attributes in process `syz.6.12917'.
[  721.798428][  T841] cgroup: Unknown subsys name 'noxattr'
[  721.811523][  T843] loop3: detected capacity change from 0 to 256
[  721.890461][  T843] FAT-fs (loop3): Directory bread(block 64) failed
[  721.923980][  T843] FAT-fs (loop3): Directory bread(block 65) failed
[  721.934807][  T843] FAT-fs (loop3): Directory bread(block 66) failed
[  721.959754][  T843] FAT-fs (loop3): Directory bread(block 67) failed
[  721.973783][  T843] FAT-fs (loop3): Directory bread(block 68) failed
[  722.019601][  T843] FAT-fs (loop3): Directory bread(block 69) failed
[  722.048126][  T843] FAT-fs (loop3): Directory bread(block 70) failed
[  722.054665][  T843] FAT-fs (loop3): Directory bread(block 71) failed
[  722.061182][ T4322] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  722.112837][  T843] FAT-fs (loop3): Directory bread(block 72) failed
[  722.126460][  T843] FAT-fs (loop3): Directory bread(block 73) failed
[  722.171586][  T829] loop5: detected capacity change from 0 to 32768
[  722.316361][  T829] (syz.5.12914,829,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  722.332822][  T876] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  722.346789][  T829] (syz.5.12914,829,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  722.401914][  T829] JBD2: Ignoring recovery information on journal
[  722.465576][  T829] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  722.485510][  T893] netlink: 'syz.3.12945': attribute type 21 has an invalid length.
[  722.505585][ T4322] usb 5-1: config 0 has an invalid interface number: 90 but max is 0
[  722.513682][ T4322] usb 5-1: config 0 has no interface number 0
[  722.547845][  T896] loop2: detected capacity change from 0 to 1024
[  722.556889][ T4322] usb 5-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=68.06
[  722.577985][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.614320][ T4322] usb 5-1: config 0 descriptor??
[  722.615095][  T896] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,nodiscard,user_xattr,,errors=continue. Quota mode: none.
[  722.647450][T21252] ocfs2: Unmounting device (7,5) on (node local)
[  722.656875][ T4322] gspca_main: STV06xx-2.14.0 probing 046d:0850
[  722.786164][  T896] EXT4-fs error (device loop2): ext4_get_first_dir_block:3619: inode #11: comm syz.2.12947: directory missing '..'
[  722.867385][  T917] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  722.905980][  T917] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  722.924686][  T919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12957'.
[  722.946168][  T917] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  722.964206][  T919] netlink: 'syz.3.12957': attribute type 1 has an invalid length.
[  722.966333][  T917] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  723.011952][  T917] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  723.066835][  T917] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  723.117816][  T934] xt_NFQUEUE: number of total queues is 0
[  723.128624][ T4322] gspca_stv06xx: I2C: Read error writing address: -71
[  723.203641][ T4322] usb 5-1: unknown interface protocol 0x66, assuming v1
[  723.210631][ T4322] usb 5-1: cannot find UAC_HEADER
[  723.229918][  T941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12966'.
[  723.253444][ T4322] snd-usb-audio: probe of 5-1:0.90 failed with error -22
[  723.286129][ T4322] usb 5-1: USB disconnect, device number 52
[  723.341903][  T956] netlink: 'syz.6.12973': attribute type 21 has an invalid length.
[  723.372987][  T956] netlink: 'syz.6.12973': attribute type 6 has an invalid length.
[  723.392960][  T956] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12973'.
[  723.458655][  T962] netlink: 'syz.3.12976': attribute type 1 has an invalid length.
[  723.598510][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.90/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  723.818285][ T1003] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12997'.
[  723.891494][ T1017] xt_bpf: check failed: parse error
[  724.258877][ T1090] ipt_CLUSTERIP: bad num_local_nodes 18
[  724.712356][ T1123] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  724.792441][ T1141] netlink: 'syz.2.13055': attribute type 12 has an invalid length.
[  724.843599][ T1132] hfsplus: keylen 65060 too large
[  725.067368][ T1153] netlink: 'syz.6.13061': attribute type 2 has an invalid length.
[  725.103726][ T1155] netdevsim netdevsim4: Direct firmware load for /
[  725.103726][ T1155]  failed with error -2
[  725.109932][ T1153] netlink: 'syz.6.13061': attribute type 3 has an invalid length.
[  725.213895][ T1155] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[  725.213895][ T1155] 
[  725.735151][ T1152] set_capacity_and_notify: 2 callbacks suppressed
[  725.735163][ T1152] loop2: detected capacity change from 0 to 32768
[  725.808130][ T1152] JBD2: Ignoring recovery information on journal
[  725.834977][ T1152] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  725.862502][ T1187] netlink: 'syz.3.13070': attribute type 1 has an invalid length.
[  725.883413][ T1187] netlink: 220 bytes leftover after parsing attributes in process `syz.3.13070'.
[  725.948241][ T4348] ocfs2: Unmounting device (7,2) on (node local)
[  726.476175][ T1233] loop6: detected capacity change from 0 to 1024
[  726.536611][ T1233] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,nodiscard,user_xattr,,errors=continue. Quota mode: none.
[  726.653281][ T1233] EXT4-fs error (device loop6): ext4_get_first_dir_block:3619: inode #11: comm syz.6.13091: directory missing '..'
[  726.864874][ T1228] loop3: detected capacity change from 0 to 32768
[  726.910264][ T1228] (syz.3.13088,1228,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  726.928180][ T1228] (syz.3.13088,1228,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  726.949496][ T1228] JBD2: Ignoring recovery information on journal
[  726.996053][ T1228] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  727.191785][ T4351] ocfs2: Unmounting device (7,3) on (node local)
[  727.298782][ T1257] kAFS: unparsable volume name
[  727.406762][ T1264] delete_channel: no stack
[  727.482007][ T1273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13110'.
[  727.643128][ T1283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13109'.
[  727.727406][ T1287] netlink: 'syz.4.13117': attribute type 21 has an invalid length.
[  727.762299][ T1287] IPv6: NLM_F_CREATE should be specified when creating new route
[  728.678026][ T1335] netlink: 'syz.6.13137': attribute type 22 has an invalid length.
[  728.698479][ T1335] (unnamed net_device) (uninitialized): option ad_select: invalid value (7)
[  728.808857][ T1349] loop4: detected capacity change from 0 to 1024
[  728.838835][ T1355] cgroup: noprefix used incorrectly
[  728.889172][ T1349] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.13144: Invalid block bitmap block 0 in block_group 0
[  728.910556][ T1349] Quota error (device loop4): write_blk: dquota write failed
[  728.917953][ T1349] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  728.940955][ T1349] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.13144: Failed to acquire dquot type 0
[  728.962232][ T1349] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.13144: Freeing blocks not in datazone - block = 0, count = 4096
[  728.986729][ T1349] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.13144: Invalid inode bitmap blk 0 in block_group 0
[  729.007278][ T1349] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[  729.009578][ T6601] Quota error (device loop4): remove_tree: Getting block too big (0 >= 8)
[  729.029410][ T1349] EXT4-fs (loop4): 1 orphan inode deleted
[  729.036910][ T1349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ��; ,errors=continue. Quota mode: writeback.
[  729.054797][ T6601] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:7: Failed to release dquot type 0
[  729.115588][ T7917] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  729.389411][ T7917] usb 7-1: Using ep0 maxpacket: 8
[  729.565618][ T7917] usb 7-1: unable to get BOS descriptor or descriptor too short
[  729.615265][ T1446] device wg1 entered promiscuous mode
[  729.654130][ T1451] loop2: detected capacity change from 0 to 1024
[  729.670158][ T1453] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  729.670894][ T7917] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  729.670914][ T7917] usb 7-1: config 1 has no interface number 1
[  729.670939][ T7917] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  729.670962][ T7917] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  729.758437][ T1466] hfsplus: b-tree write err: -5, ino 4
[  729.818018][ T4332] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  729.859857][ T7917] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  729.868897][ T7917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.892894][ T7917] usb 7-1: Product: syz
[  729.897929][ T1467] xt_CT: You must specify a L4 protocol and not use inversions on it
[  729.902389][ T7917] usb 7-1: Manufacturer: syz
[  729.922077][ T7917] usb 7-1: SerialNumber: syz
[  730.041759][ T1481] netlink: 300 bytes leftover after parsing attributes in process `syz.2.13201'.
[  730.080439][ T1485] device bridge3 entered promiscuous mode
[  730.226444][ T1501] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  730.255476][ T4332] usb 6-1: config 3 has an invalid interface number: 234 but max is 0
[  730.264045][ T4332] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  730.294428][ T4332] usb 6-1: config 3 has no interface number 0
[  730.311726][ T4332] usb 6-1: config 3 interface 234 altsetting 0 has an invalid endpoint with address 0x22, skipping
[  730.330009][ T4332] usb 6-1: config 3 interface 234 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  730.394267][ T7917] usb 7-1: 2:1: cannot set freq 15828157 to ep 0x82
[  730.445297][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13217'.
[  730.472194][ T1513] loop4: detected capacity change from 0 to 64
[  730.487795][ T7917] usb 7-1: USB disconnect, device number 28
[  730.558054][ T4332] usb 6-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=60.f5
[  730.579057][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.605960][ T4332] usb 6-1: Product: syz
[  730.623069][ T4332] usb 6-1: Manufacturer: syz
[  730.642334][ T4332] usb 6-1: SerialNumber: syz
[  730.718188][ T4332] usb 6-1: bad CDC descriptors
[  730.821039][ T1513] Trying to free block not in datazone
[  730.837236][ T1513] Trying to free block not in datazone
[  730.878262][ T1513] Trying to free block not in datazone
[  730.911425][ T1513] Trying to free block not in datazone
[  730.934609][   T13] usb 6-1: USB disconnect, device number 25
[  730.956955][ T1513] minix_free_block (loop4:6): bit already cleared
[  731.003554][ T1513] Trying to free block not in datazone
[  731.027335][ T1513] Trying to free block not in datazone
[  731.142967][ T1523] loop6: detected capacity change from 0 to 256
[  731.232355][ T1523] FAT-fs (loop6): Directory bread(block 64) failed
[  731.294623][ T1525] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13224'.
[  731.309156][ T1523] FAT-fs (loop6): Directory bread(block 65) failed
[  731.331190][ T1523] FAT-fs (loop6): Directory bread(block 66) failed
[  731.359606][ T1523] FAT-fs (loop6): Directory bread(block 67) failed
[  731.367267][ T1523] FAT-fs (loop6): Directory bread(block 68) failed
[  731.374834][ T1523] FAT-fs (loop6): Directory bread(block 69) failed
[  731.385991][ T1515] loop2: detected capacity change from 0 to 32768
[  731.400885][ T1523] FAT-fs (loop6): Directory bread(block 70) failed
[  731.407518][ T1523] FAT-fs (loop6): Directory bread(block 71) failed
[  731.417617][ T1523] FAT-fs (loop6): Directory bread(block 72) failed
[  731.424415][ T1523] FAT-fs (loop6): Directory bread(block 73) failed
[  731.436411][ T1523] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  731.473704][ T1515] JBD2: Ignoring recovery information on journal
[  731.537838][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  731.562707][ T1534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  731.605636][ T1536] loop4: detected capacity change from 0 to 4096
[  731.618291][ T1515] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  731.687298][ T1515] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  731.687321][ T1515] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  731.735706][ T1515] OCFS2: File system is now read-only.
[  731.741306][ T1547] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  731.754671][ T1515] (syz.2.13219,1515,0):ocfs2_calc_xattr_init:642 ERROR: status = -117
[  731.769387][ T1515] (syz.2.13219,1515,0):ocfs2_mknod:334 ERROR: status = -117
[  731.790751][ T1515] (syz.2.13219,1515,0):ocfs2_mknod:502 ERROR: status = -117
[  731.851458][ T1515] (syz.2.13219,1515,0):ocfs2_mkdir:659 ERROR: status = -117
[  731.998436][ T4348] ocfs2: Unmounting device (7,2) on (node local)
[  732.054966][ T1576] netlink: 'syz.4.13249': attribute type 4 has an invalid length.
[  732.071271][ T1578] netlink: 'syz.3.13251': attribute type 1 has an invalid length.
[  732.102420][ T1576] netlink: 'syz.4.13249': attribute type 3 has an invalid length.
[  732.121916][ T1576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13249'.
[  732.198730][ T1589] netlink: 'syz.5.13255': attribute type 27 has an invalid length.
[  732.342702][ T1606] overlayfs: missing 'lowerdir'
[  732.591238][ T1624] loop4: detected capacity change from 0 to 8
[  732.609576][ T1627] cgroup: name respecified
[  732.643235][ T1624] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  732.659649][ T1592] loop3: detected capacity change from 0 to 32768
[  732.691991][ T1624] cramfs: Error -3 while decompressing!
[  732.709112][ T1624] cramfs: ffffffff964010a8(26)->ffff88800ed44000(4096)
[  732.719467][ T1624] cramfs: Error -3 while decompressing!
[  732.729314][ T1592] JBD2: Ignoring recovery information on journal
[  732.730265][ T1624] cramfs: ffffffff964010c2(26)->ffff88804048e000(4096)
[  732.753723][ T1624] cramfs: Error -3 while decompressing!
[  732.764389][ T1624] cramfs: ffffffff964010a8(26)->ffff88800ed44000(4096)
[  732.771483][   T25] audit: type=1800 audit(731.226:70): pid=1624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13272" name="file2" dev="loop4" ino=348 res=0 errno=0
[  732.938414][ T1592] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  732.954230][ T1649] loop5: detected capacity change from 0 to 256
[  733.027414][ T1592] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  733.027437][ T1592] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  733.179344][ T1592] OCFS2: File system is now read-only.
[  733.194198][ T1592] (syz.3.13257,1592,1):ocfs2_calc_xattr_init:642 ERROR: status = -117
[  733.235744][ T1592] (syz.3.13257,1592,1):ocfs2_mknod:334 ERROR: status = -117
[  733.280388][ T1592] (syz.3.13257,1592,1):ocfs2_mknod:502 ERROR: status = -117
[  733.287815][ T1592] (syz.3.13257,1592,1):ocfs2_mkdir:659 ERROR: status = -117
[  733.307575][ T1671] tipc: Can't bind to reserved service type 0
[  733.321865][ T4351] ocfs2: Unmounting device (7,3) on (node local)
[  733.418209][ T1632] loop2: detected capacity change from 0 to 40427
[  733.499675][ T1632] F2FS-fs (loop2): build fault injection attr: rate: 73, type: 0x1ffff
[  733.518554][ T1632] F2FS-fs (loop2): invalid crc value
[  733.542022][ T1632] F2FS-fs (loop2): Found nat_bits in checkpoint
[  733.551221][ T1632] F2FS-fs (loop2) : inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x44b2/0x6de0
[  733.563938][ T1632] F2FS-fs (loop2): Failed to initialize F2FS node manager (-12)
[  733.719064][ T7162] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  733.828769][   T25] audit: type=1326 audit(732.208:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1720 comm="syz.3.13317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4118a7d629 code=0x0
[  733.889618][ T4332] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  734.087874][ T1752] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  734.114845][ T7162] usb 5-1: config 0 has an invalid interface number: 90 but max is 0
[  734.127910][ T7162] usb 5-1: config 0 has no interface number 0
[  734.150116][ T7162] usb 5-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64
[  734.163172][ T1758] tmpfs: Bad value for 'mpol'
[  734.178630][ T1760] loop2: detected capacity change from 0 to 1024
[  734.228708][ T1760] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nobarrier,errors=remount-ro,. Quota mode: writeback.
[  734.250195][ T1767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13338'.
[  734.263330][ T1760] EXT4-fs error (device loop2): ext4_get_first_dir_block:3608: inode #11: comm syz.2.13336: directory missing '.'
[  734.286881][ T1767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13338'.
[  734.296353][ T1760] EXT4-fs (loop2): Remounting filesystem read-only
[  734.339281][ T7162] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa
[  734.356365][ T7162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.371267][ T7162] usb 5-1: Product: syz
[  734.389196][ T7162] usb 5-1: Manufacturer: syz
[  734.396493][ T7162] usb 5-1: SerialNumber: syz
[  734.403057][ T4332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  734.415502][ T7162] usb 5-1: config 0 descriptor??
[  734.423611][ T4332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  734.433747][ T4332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  734.435047][ T1678] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  734.445598][ T4332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  734.515126][ T1781] loop5: detected capacity change from 0 to 4096
[  734.569844][ T1787] xt_socket: unknown flags 0x50
[  734.586428][ T1781] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  734.680830][ T4332] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  734.700038][ T4332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.708334][   T13] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  734.723053][ T4332] usb 7-1: Product: syz
[  734.727280][ T4332] usb 7-1: Manufacturer: syz
[  734.734247][ T4332] usb 7-1: SerialNumber: syz
[  734.754851][ T4332] usb 7-1: config 0 descriptor??
[  734.778527][ T7162] powermate: Expected payload of 3--6 bytes, found 64 bytes!
[  734.786736][ T7162] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.90/input/input61
[  734.820545][ T1804] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.13355'.
[  735.003522][   T13] usb 4-1: Using ep0 maxpacket: 32
[  735.007371][ T7162] usb 5-1: USB disconnect, device number 53
[  735.014653][    C1] powermate: config urb returned -71
[  735.014666][    C1] powermate: usb_submit_urb(config) failed
[  735.014740][    C1] powermate 5-1:0.90: powermate_irq - usb_submit_urb failed with result: -19
[  735.033533][ T4332] adutux 7-1:0.0: Could not retrieve serial number
[  735.042322][ T4332] adutux: probe of 7-1:0.0 failed with error -5
[  735.087737][ T1820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13364'.
[  735.111085][ T1824] loop5: detected capacity change from 0 to 1024
[  735.117516][ T1820] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13364'.
[  735.140350][   T13] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping
[  735.150985][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  735.162621][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  735.167366][ T1824] EXT4-fs (loop5): Ignoring removed orlov option
[  735.216067][ T1824] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,nodelalloc,noauto_da_alloc,stripe=0x0000000000000005,orlov,bsdgroups,,errors=continue. Quota mode: writeback.
[  735.291998][ T4332] usb 7-1: USB disconnect, device number 29
[  735.370592][ T1839] netlink: 'syz.2.13373': attribute type 4 has an invalid length.
[  735.396920][   T13] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  735.421878][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.453536][   T13] usb 4-1: Product: syz
[  735.457762][   T13] usb 4-1: Manufacturer: syz
[  735.470220][   T13] usb 4-1: SerialNumber: syz
[  735.487841][   T13] usb 4-1: config 0 descriptor??
[  735.556050][ T1854] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  735.581419][ T1853] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  735.631199][ T1853] Remounting filesystem read-only
[  735.746718][   T13] usb 4-1: USB disconnect, device number 55
[  735.749659][ T7162] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  735.849809][ T1880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13392'.
[  735.861270][ T1880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  735.989895][ T1895] netlink: 'syz.4.13399': attribute type 28 has an invalid length.
[  735.998633][ T1895] netlink: 'syz.4.13399': attribute type 29 has an invalid length.
[  736.007210][ T1895] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13399'.
[  736.016881][ T7162] usb 3-1: Using ep0 maxpacket: 16
[  736.284124][ T4327] usb 7-1: new full-speed USB device number 30 using dummy_hcd
[  736.316204][ T7162] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  736.336075][ T7162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.353256][ T7162] usb 3-1: Product: syz
[  736.357633][ T7162] usb 3-1: Manufacturer: syz
[  736.369291][ T7162] usb 3-1: SerialNumber: syz
[  736.377949][ T1937] netlink: 'syz.3.13420': attribute type 9 has an invalid length.
[  736.388143][ T7162] usb 3-1: config 0 descriptor??
[  736.396490][ T1937] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.13420'.
[  736.455505][ T4339] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  736.528311][ T1951] set_capacity_and_notify: 1 callbacks suppressed
[  736.528324][ T1951] loop3: detected capacity change from 0 to 8
[  736.592777][ T1951] SQUASHFS error: zlib decompression failed, data probably corrupt
[  736.599233][ T1957] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  736.608380][ T1951] SQUASHFS error: Failed to read block 0x9b: -5
[  736.618105][ T1951] SQUASHFS error: Unable to read metadata cache entry [99]
[  736.625537][ T1951] SQUASHFS error: Unable to read inode 0x127
[  736.670479][ T7162] usb 3-1: ignoring: not an USB2CAN converter
[  736.713225][ T4339] usb 5-1: Using ep0 maxpacket: 32
[  736.713792][ T4327] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  736.790269][ T1966] loop5: detected capacity change from 0 to 8192
[  736.803188][ T1970] loop3: detected capacity change from 0 to 164
[  736.838912][ T1966] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  736.840088][ T4339] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  736.861974][ T1966] REISERFS (device loop5): using ordered data mode
[  736.868474][ T1966] reiserfs: using flush barriers
[  736.880495][ T1970] iso9660: Corrupted directory entry in block 4 of inode 1792
[  736.904481][ T1966] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  736.904563][ T4332] usb 3-1: USB disconnect, device number 29
[  736.926712][ T4327] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  736.936068][ T1966] REISERFS (device loop5): checking transaction log (loop5)
[  736.947931][ T1966] REISERFS (device loop5): Using tea hash to sort names
[  736.958233][ T4327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.967087][ T4327] usb 7-1: Product: syz
[  736.971293][ T4327] usb 7-1: Manufacturer: syz
[  736.975926][ T4327] usb 7-1: SerialNumber: syz
[  736.982110][ T4327] usb 7-1: config 0 descriptor??
[  736.987419][ T1966] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  737.043431][ T4327] hub 7-1:0.0: bad descriptor, ignoring hub
[  737.049374][ T4327] hub: probe of 7-1:0.0 failed with error -5
[  737.073430][ T4327] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input62
[  737.096591][ T4339] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  737.113704][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.131058][ T4339] usb 5-1: Product: syz
[  737.135366][ T4339] usb 5-1: Manufacturer: syz
[  737.140371][ T4339] usb 5-1: SerialNumber: syz
[  737.172662][ T4339] usb 5-1: config 0 descriptor??
[  737.214973][ T4339] usb 5-1: bad CDC descriptors
[  737.220568][ T4339] usb 5-1: unsupported MDLM descriptors
[  737.305680][ T1989] loop3: detected capacity change from 0 to 2048
[  737.360723][ T1989] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  737.437626][ T4339] usb 5-1: USB disconnect, device number 54
[  737.671016][ T2024] comedi: No check for data length of config insn id 33554458 is implemented
[  737.685014][ T2024] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  737.696809][ T2024] comedi: Assuming n=15 is correct
[  737.736171][ T2028] loop3: detected capacity change from 0 to 128
[  737.789228][ T2038] xt_TCPMSS: Only works on TCP SYN packets
[  737.802596][ T2028] FAT-fs (loop3): bogus number of reserved sectors
[  737.809116][ T2028] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  737.846202][ T2028] FAT-fs (loop3): Can't find a valid FAT filesystem
[  737.958634][ T2048] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  737.958861][ T2050] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  738.085477][ T2056] loop3: detected capacity change from 0 to 8192
[  738.103381][ T2056] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  738.123851][ T2056] REISERFS (device loop3): using ordered data mode
[  738.130379][ T2056] reiserfs: using flush barriers
[  738.146718][ T2056] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  738.165510][   T13] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  738.174354][ T2056] REISERFS (device loop3): checking transaction log (loop3)
[  738.193850][ T2056] REISERFS (device loop3): Using r5 hash to sort names
[  738.347036][ T4339] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  738.463737][ T2085] loop6: detected capacity change from 0 to 4096
[  738.566460][ T2085] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  738.731915][ T4339] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  738.742024][ T4339] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  738.774916][   T13] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  738.794837][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.824003][   T13] usb 3-1: Product: syz
[  738.835255][   T13] usb 3-1: Manufacturer: syz
[  738.843917][   T13] usb 3-1: SerialNumber: syz
[  738.876833][ T2131] loop3: detected capacity change from 0 to 4096
[  738.892394][ T4339] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  738.902283][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  738.910973][ T4339] usb 5-1: SerialNumber: syz
[  738.915828][   T13] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  738.935456][ T2131] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  738.994723][ T2131] ntfs3: loop3: Failed to load $Extend.
[  739.031460][ T4332] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  739.180481][ T2139] loop6: detected capacity change from 0 to 32768
[  739.199415][ T2143] loop3: detected capacity change from 0 to 256
[  739.214083][ T4339] usb 5-1: skipping empty audio interface (v1)
[  739.225696][ T4339] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  739.236307][ T4339] usb 5-1: USB disconnect, device number 55
[  739.326131][ T2139] XFS (loop6): Mounting V5 Filesystem
[  739.439083][ T2139] XFS (loop6): Ending clean mount
[  739.449178][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  739.469631][ T4332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  739.471181][ T2155] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  739.480626][ T4332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  739.499239][ T4332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  739.511241][ T4332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  739.521299][T21488] XFS (loop6): Unmounting Filesystem
[  739.642488][ T4322] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  739.693964][ T4332] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  739.704569][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.718521][ T4332] usb 6-1: Product: syz
[  739.722684][ T4332] usb 6-1: Manufacturer: syz
[  739.731622][ T4332] usb 6-1: SerialNumber: syz
[  739.763704][ T4332] usb 6-1: config 0 descriptor??
[  740.037577][ T2171] QAT: Stopping all acceleration devices.
[  740.084864][ T2159] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist
[  740.084864][ T2159] 
[  740.098185][ T4332] adutux 6-1:0.0: Could not retrieve serial number
[  740.104804][ T4332] adutux: probe of 6-1:0.0 failed with error -5
[  740.125913][ T4332] usb 3-1: USB disconnect, device number 30
[  740.138882][ T2159] ERROR: (device loop3): remounting filesystem as read-only
[  740.150655][ T2159] ialloc: diAlloc returned -5!
[  740.176067][ T2165] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  740.232478][ T2165] OCFS2: ERROR (device loop6): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 73
[  740.254642][ T2165] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  740.271174][ T2165] OCFS2: File system is now read-only.
[  740.294445][ T2165] (syz.6.13523,2165,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30
[  740.349060][ T2165] (syz.6.13523,2165,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30
[  740.358735][ T2165] (syz.6.13523,2165,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30
[  740.371202][ T4339] usb 6-1: USB disconnect, device number 26
[  740.390795][ T2187] overlayfs: missing 'workdir'
[  740.420296][ T2165] (syz.6.13523,2165,0):ocfs2_mknod:350 ERROR: status = -30
[  740.429576][ T2165] (syz.6.13523,2165,0):ocfs2_mknod:502 ERROR: status = -30
[  740.450334][ T2165] (syz.6.13523,2165,0):ocfs2_create:676 ERROR: status = -30
[  740.499081][T21488] ocfs2: Unmounting device (7,6) on (node local)
[  740.655459][ T2203] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  740.672193][ T7559] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  740.687750][ T2203] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[  740.697915][ T2203] FAT-fs (loop6): Filesystem has been set read-only
[  740.730932][ T4322] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  740.737859][ T4322] ath9k_htc: Failed to initialize the device
[  740.756320][ T4332] usb 3-1: ath9k_htc: USB layer deinitialized
[  740.805795][ T4333] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  740.902022][ T4339] Bluetooth: hci1: command 0x0406 tx timeout
[  741.062184][ T7559] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  741.072307][ T7559] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  741.114218][ T7559] usb 5-1: config 1 interface 1 has no altsetting 1
[  741.286825][ T7559] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  741.295892][ T7559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.310487][ T7559] usb 5-1: Product: syz
[  741.314878][ T7559] usb 5-1: Manufacturer: syz
[  741.322277][ T7559] usb 5-1: SerialNumber: syz
[  741.347065][ T2258] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  741.373029][ T7559] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  741.391415][ T7559] cdc_ncm 5-1:1.0: bind() failure
[  741.418200][ T7559] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  741.426755][ T4333] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  741.437876][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.457619][ T7559] cdc_ncm 5-1:1.1: bind() failure
[  741.480943][ T4333] usb 4-1: Product: syz
[  741.485106][ T4333] usb 4-1: Manufacturer: syz
[  741.505935][ T4333] usb 4-1: SerialNumber: syz
[  741.528929][ T4333] usb 4-1: config 0 descriptor??
[  741.555560][ T2282] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3)
[  741.598449][ T4333] gspca_main: sunplus-2.14.0 probing 055f:c230
[  741.617609][ T7559] usb 5-1: USB disconnect, device number 56
[  741.827696][ T2314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13600'.
[  741.896448][ T2313] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.13597: Invalid inode bitmap blk 4 in block_group 0
[  741.946028][ T2313] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback.
[  742.071373][ T4333] usb 4-1: USB disconnect, device number 56
[  742.338948][ T2365] set_capacity_and_notify: 6 callbacks suppressed
[  742.338961][ T2365] loop6: detected capacity change from 0 to 512
[  742.366266][ T7559] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  742.382297][ T4327] usb 7-1: USB disconnect, device number 30
[  742.391428][ T2365] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.13624: iget: bad extra_isize 50264 (inode size 256)
[  742.418853][ T2365] EXT4-fs (loop6): Remounting filesystem read-only
[  742.441893][ T2365] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.13624: couldn't read orphan inode 15 (err -117)
[  742.457603][ T2365] EXT4-fs (loop6): Remounting filesystem read-only
[  742.471951][ T2365] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,journal_dev=0x0000000000000010,inode_readahead_blks=0x0000000000000000,noinit_itable,errors=continue,errors=continue,errors=remount-ro,inode_readahead_blks=0x0000000000000004,auto_da_alloc,norecovery,stripe=0x000000000. Quota mode: none.
[  742.569530][ T4339] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  742.647550][ T2387] loop5: detected capacity change from 0 to 164
[  742.675284][ T2387] iso9660: Corrupted directory entry in block 2 of inode 1920
[  742.723209][ T2394] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13637'.
[  742.910035][ T2416] netlink: 'syz.5.13649': attribute type 2 has an invalid length.
[  742.919570][ T2416] netlink: 'syz.5.13649': attribute type 8 has an invalid length.
[  742.928871][ T7559] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  742.938581][ T7559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.947122][ T2416] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13649'.
[  742.956634][ T4339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4
[  742.975503][ T7559] usb 3-1: Product: syz
[  742.986448][ T7559] usb 3-1: Manufacturer: syz
[  742.991050][ T7559] usb 3-1: SerialNumber: syz
[  742.996310][ T4339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023
[  743.010956][ T7559] usb 3-1: config 0 descriptor??
[  743.020199][ T2421] (unnamed net_device) (uninitialized): peer notification delay (315) is not a multiple of miimon (100), value rounded to 300 ms
[  743.073197][ T7559] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 031
[  743.190259][ T2437] netlink: 'syz.6.13659': attribute type 3 has an invalid length.
[  743.200180][ T4339] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  743.218485][ T2437] netlink: 232 bytes leftover after parsing attributes in process `syz.6.13659'.
[  743.220382][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.241760][ T4339] usb 5-1: Product: syz
[  743.253386][ T4339] usb 5-1: Manufacturer: syz
[  743.257977][ T4339] usb 5-1: SerialNumber: syz
[  743.275154][ T4339] usb 5-1: config 0 descriptor??
[  743.296455][ T7559]  (null): failure setting delay to 10us
[  743.302109][ T7559] i2c-tiny-usb: probe of 3-1:0.0 failed with error -5
[  743.318147][ T4339] hub 5-1:0.0: bad descriptor, ignoring hub
[  743.324343][ T4339] hub: probe of 5-1:0.0 failed with error -5
[  743.346595][ T7559] usb 3-1: USB disconnect, device number 31
[  743.353807][ T4339] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input63
[  743.479022][ T2448] loop5: detected capacity change from 0 to 4096
[  743.492396][ T2448] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  743.573287][ T2448] ntfs3: loop5: failed to convert "c46c" to cp860
[  743.576415][ T2438] loop3: detected capacity change from 0 to 32768
[  743.632267][ T2463] loop6: detected capacity change from 0 to 1764
[  743.685480][ T2438] jfs_create: dtInsert returned -EIO
[  743.692846][ T2438] ERROR: (device loop3): jfs_create: 
[  743.692846][ T2438] 
[  743.714660][ T2463] iso9660: Corrupted directory entry in block 14 of inode 1920
[  743.776212][ T2472] loop5: detected capacity change from 0 to 1764
[  743.806332][ T2472] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  743.867253][ T2472] iso9660: Corrupted directory entry in block 2 of inode 1920
[  743.939422][ T4327] usb 5-1: USB disconnect, device number 57
[  743.985480][ T2487] netlink: 7 bytes leftover after parsing attributes in process `syz.3.13681'.
[  744.014950][ T2487] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13681'.
[  744.138350][ T2493] loop2: detected capacity change from 0 to 4096
[  744.153840][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  744.160123][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  744.179520][ T2493] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  744.205136][ T2493] ntfs3: loop2: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only
[  744.246545][ T2493] ntfs3: loop2: failed to read volume at offset 0x201800
[  744.264730][ T2493] ntfs3: loop2: failed to read volume at offset 0x201800
[  744.291063][ T2493] ntfs3: loop2: failed to read volume at offset 0x201800
[  744.316650][ T2493] ntfs3: loop2: failed to read volume at offset 0x201800
[  744.338927][ T2493] ntfs3: loop2: failed to read volume at offset 0x202800
[  744.368405][ T2493] ntfs3: loop2: failed to read volume at offset 0x203800
[  744.390002][ T2493] ntfs3: loop2: failed to read volume at offset 0x205800
[  744.417667][ T2493] ntfs3: loop2: failed to read volume at offset 0x209800
[  744.437672][ T2534] device bridge5 entered promiscuous mode
[  744.500396][ T2542] loop6: detected capacity change from 0 to 512
[  744.596135][ T2542] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,noload,,errors=continue. Quota mode: writeback.
[  744.620482][ T2566] loop3: detected capacity change from 0 to 1024
[  744.674298][ T2566] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  744.689818][ T2566] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 32: comm syz.3.13708: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=255, rec_len=0, size=1024 fake=0
[  744.782007][ T4339] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  744.835060][ T2587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13714'.
[  744.861849][ T2586] loop6: detected capacity change from 0 to 128
[  744.878227][ T4327] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  744.908152][ T2586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  744.916930][ T2586] System zones: 1-3, 19-19, 35-36
[  744.922947][ T2586] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none.
[  745.007341][ T7162] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  745.158248][ T4327] usb 5-1: Using ep0 maxpacket: 32
[  745.168507][ T4339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  745.243678][ T2618] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13729'.
[  745.252911][ T2618] netlink: 84 bytes leftover after parsing attributes in process `syz.6.13729'.
[  745.359416][ T4339] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  745.370815][ T4339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.378966][ T4339] usb 6-1: Product: syz
[  745.384674][ T4339] usb 6-1: Manufacturer: syz
[  745.389452][ T4339] usb 6-1: SerialNumber: syz
[  745.391380][ T4327] usb 5-1: unable to get BOS descriptor or descriptor too short
[  745.397536][ T4339] usb 6-1: config 0 descriptor??
[  745.407744][ T7162] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  745.429226][ T7162] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  745.466664][ T4339] hub 6-1:0.0: bad descriptor, ignoring hub
[  745.472556][ T4339] hub: probe of 6-1:0.0 failed with error -5
[  745.481189][ T4339] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input64
[  745.487517][ T4333] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  745.498580][ T4327] usb 5-1: config 128 has an invalid interface number: 127 but max is 3
[  745.506928][ T4327] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  745.520105][ T4327] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4
[  745.529308][ T4327] usb 5-1: config 128 has no interface number 0
[  745.536493][ T4327] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 84, changing to 10
[  745.556922][ T4327] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  745.569297][ T4327] usb 5-1: config 128 interface 127 has no altsetting 0
[  745.615960][ T7162] usb 3-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00
[  745.625012][ T7162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.633091][ T7162] usb 3-1: Product: syz
[  745.639513][ T7162] usb 3-1: Manufacturer: syz
[  745.644090][ T7162] usb 3-1: SerialNumber: syz
[  745.701412][ T2644] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  745.711176][ T7162] cdc_mbim 3-1:1.0: MBIM functional descriptor missing
[  745.718530][ T7162] cdc_mbim 3-1:1.0: bind() failure
[  745.777711][ T4327] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  745.791619][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.795885][ T2646] sctp: [Deprecated]: syz.6.13740 (pid 2646) Use of int in maxseg socket option.
[  745.795885][ T2646] Use struct sctp_assoc_value instead
[  745.800129][ T4327] usb 5-1: Product: syz
[  745.820749][ T4327] usb 5-1: Manufacturer: syz
[  745.825407][ T4327] usb 5-1: SerialNumber: syz
[  745.918884][ T7162] usb 3-1: USB disconnect, device number 32
[  746.118247][ T4333] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  746.127400][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  746.135456][ T4333] usb 4-1: Product: syz
[  746.140047][ T4333] usb 4-1: Manufacturer: syz
[  746.144639][ T4333] usb 4-1: SerialNumber: syz
[  746.152274][ T4333] usb 4-1: config 0 descriptor??
[  746.205392][ T4333] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 057
[  746.214561][ T4322] usb 6-1: USB disconnect, device number 27
[  746.235669][   T13] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  746.275005][ T4327] usb 5-1: USB disconnect, device number 58
[  746.513681][   T13] usb 7-1: Using ep0 maxpacket: 32
[  746.516634][ T2661] netlink: 'syz.2.13746': attribute type 3 has an invalid length.
[  746.519564][ T9138] udevd[9138]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  746.527199][ T2661] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.13746'.
[  746.668099][ T4333]  (null): failure reading functionality
[  746.707832][ T4333] i2c i2c-1: failure reading functionality
[  746.723284][ T4333] i2c i2c-1: connected i2c-tiny-usb device
[  746.756227][ T4333] usb 4-1: USB disconnect, device number 57
[  746.868929][   T13] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  746.891650][   T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  746.908151][   T13] usb 7-1: Product: syz
[  746.912656][   T13] usb 7-1: Manufacturer: syz
[  746.917265][   T13] usb 7-1: SerialNumber: syz
[  746.939234][ T2686] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  746.950638][   T13] usb 7-1: config 0 descriptor??
[  747.206923][ T2720] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  747.223066][ T2720] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  747.236580][   T13] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 031
[  747.250224][ T2720] overlayfs: missing 'lowerdir'
[  747.391664][ T4327] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  747.452200][ T2733] minix_free_block (loop5:21): bit already cleared
[  747.486072][ T7162] usb 7-1: USB disconnect, device number 31
[  747.692856][ T2778] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  747.819518][ T4327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  747.855134][ T2795] set_capacity_and_notify: 7 callbacks suppressed
[  747.855146][ T2795] loop2: detected capacity change from 0 to 128
[  747.905929][ T2795] affs: No valid root block on device loop2
[  748.004815][ T2801] loop5: detected capacity change from 0 to 1024
[  748.042373][ T4327] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  748.051468][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.059577][ T4327] usb 5-1: Product: syz
[  748.063920][ T4327] usb 5-1: Manufacturer: syz
[  748.074380][ T4327] usb 5-1: SerialNumber: syz
[  748.074584][ T2801] EXT4-fs (loop5): Ignoring removed bh option
[  748.087925][ T4327] usb 5-1: config 0 descriptor??
[  748.100015][ T2801] EXT4-fs (loop5): inline encryption not supported
[  748.116145][ T2801] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  748.126478][ T2801] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 2: comm syz.5.13805: lblock 2 mapped to illegal pblock 2 (length 1)
[  748.140814][ T2801] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  748.149100][ T2801] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 48: comm syz.5.13805: lblock 0 mapped to illegal pblock 48 (length 1)
[  748.151671][ T4327] hub 5-1:0.0: bad descriptor, ignoring hub
[  748.165630][ T2801] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  748.169285][ T4327] hub: probe of 5-1:0.0 failed with error -5
[  748.171183][ T4327] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input65
[  748.180532][ T2801] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.13805: Failed to acquire dquot type 0
[  748.205117][ T7559] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  748.212951][ T2801] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  748.228337][ T2801] EXT4-fs error (device loop5): ext4_evict_inode:282: inode #11: comm syz.5.13805: mark_inode_dirty error
[  748.239800][ T2801] EXT4-fs warning (device loop5): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[  748.250275][ T2801] EXT4-fs (loop5): 1 orphan inode deleted
[  748.256665][ T2801] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback.
[  748.282864][ T6601] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  748.304836][ T6601] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  748.313488][ T6601] EXT4-fs error (device loop5): ext4_release_dquot:6270: comm kworker/u4:7: Failed to release dquot type 0
[  748.320107][   T13] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  748.330849][ T7162] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[  748.343086][ T6601] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 2: comm kworker/u4:7: lblock 2 mapped to illegal pblock 2 (length 1)
[  748.360221][ T6601] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  748.368468][ T6601] EXT4-fs error (device loop5): ext4_write_dquot:6214: comm kworker/u4:7: Failed to commit dquot type 0
[  748.383275][ T6601] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  748.402723][T21252] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0
[  748.418589][T21252] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  748.429396][T21252] EXT4-fs error (device loop5): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error
[  748.459131][ T7559] usb 4-1: Using ep0 maxpacket: 16
[  748.587611][ T7559] usb 4-1: config 0 has no interfaces?
[  748.598072][   T13] usb 3-1: Using ep0 maxpacket: 32
[  748.635216][ T2824] loop5: detected capacity change from 0 to 4096
[  748.672947][ T7559] usb 4-1: config 0 has no interfaces?
[  748.704475][ T2824] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  748.717784][ T2824] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  748.732688][ T2824] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  748.742495][ T2824] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  748.756392][ T2824] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  748.767652][ T7162] usb 7-1: unable to get BOS descriptor or descriptor too short
[  748.770695][   T13] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  748.775413][ T7559] usb 4-1: config 0 has no interfaces?
[  748.790289][ T2824] ntfs: volume version 3.1.
[  748.793133][   T13] usb 3-1: config 0 has no interface number 0
[  748.833349][ T7162] usb 7-1: not running at top speed; connect to a high speed hub
[  748.854672][ T7559] usb 4-1: string descriptor 0 read error: -71
[  748.860858][ T7559] usb 4-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba
[  748.872498][ T7559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.887597][ T7559] usb 4-1: rejected 3 configurations due to insufficient available bus power
[  748.896345][ T7559] usb 4-1: no configuration chosen from 3 choices
[  748.909779][ T7559] usb 4-1: USB disconnect, device number 58
[  748.919297][ T7162] usb 7-1: config 129 has an invalid interface number: 28 but max is 0
[  748.927550][ T7162] usb 7-1: config 129 has no interface number 0
[  748.940980][ T7162] usb 7-1: config 129 interface 28 altsetting 250 has an invalid endpoint with address 0xFD, skipping
[  748.966011][ T7162] usb 7-1: config 129 interface 28 altsetting 250 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  748.982499][ T7162] usb 7-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  749.006137][   T13] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  749.007626][ T7162] usb 7-1: config 129 interface 28 has no altsetting 0
[  749.017912][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.031743][   T13] usb 3-1: Product: syz
[  749.036094][   T13] usb 3-1: Manufacturer: syz
[  749.041154][   T13] usb 3-1: SerialNumber: syz
[  749.061348][   T13] usb 3-1: config 0 descriptor??
[  749.186059][ T7162] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57
[  749.195106][ T7162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.210873][ T7162] usb 7-1: Product: syz
[  749.219582][ T7162] usb 7-1: Manufacturer: syz
[  749.219838][ T2851] loop5: detected capacity change from 0 to 64
[  749.224229][ T7162] usb 7-1: SerialNumber: syz
[  749.250353][ T2810] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  749.277399][ T2851] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  749.346376][   T13] radio-si470x 3-1:0.35: this is not a si470x device.
[  749.491504][ T2872] loop5: detected capacity change from 0 to 64
[  749.522269][ T2876] loop3: detected capacity change from 0 to 512
[  749.561584][ T2876] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  749.561723][   T13] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  749.571900][ T7162] etas_es58x 7-1:129.28: Starting syz syz (Serial Number syz) driver version 1.00
[  749.608750][ T7162] usb 7-1: USB disconnect, device number 32
[  749.615035][ T2876] EXT4-fs (loop3): 1 truncate cleaned up
[  749.620724][ T2876] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  749.645147][   T13] usb 3-1: USB disconnect, device number 33
[  749.814697][ T2883] loop3: detected capacity change from 0 to 2048
[  749.857883][ T2883] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  749.886582][ T2883] UDF-fs: Scanning with blocksize 512 failed
[  749.909255][ T2883] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  750.111238][ T2891] loop5: detected capacity change from 0 to 64
[  750.207522][ T2899] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  750.323339][ T2917] loop6: detected capacity change from 0 to 256
[  750.388730][ T2917] MINIX-fs: mounting file system with errors, running fsck is recommended
[  750.596486][ T2948] loop2: detected capacity change from 0 to 256
[  750.860536][ T4339] usb 5-1: USB disconnect, device number 59
[  750.897934][ T2975] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  750.962750][ T2971] NILFS (loop2): error -2 truncating bmap (ino=16)
[  751.019212][ T2975] ------------[ cut here ]------------
[  751.025295][ T2975] WARNING: CPU: 1 PID: 2975 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0
[  751.034672][ T2975] Modules linked in:
[  751.038583][ T2975] CPU: 1 PID: 2975 Comm: segctord Not tainted syzkaller #0
[  751.045811][ T2975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  751.055861][ T2975] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0
[  751.061863][ T2975] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e8 53 03 00 e8 e3 64 6a fe e8 be bf f1 fd e9 b8 fc ff ff e8 d4 64 6a fe <0f> 0b e9 16 fc ff ff e8 c8 64 6a fe e8 a3 bf f1 fd e9 74 fe ff ff
[  751.081489][ T2975] RSP: 0018:ffffc9000365f390 EFLAGS: 00010293
[  751.087558][ T2975] RAX: ffffffff830ebd6c RBX: ffff8880613f01a0 RCX: ffff888028aa8000
[  751.093095][ T2984] netlink: 'syz.6.13880': attribute type 21 has an invalid length.
[  751.095560][ T2975] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002
[  751.107555][ T2984] IPv6: NLM_F_CREATE should be specified when creating new route
[  751.111374][ T2975] RBP: 0000000000000003 R08: ffff88805efb065f R09: 1ffff1100bdf60cb
[  751.127040][ T2975] R10: dffffc0000000000 R11: ffffed100bdf60cc R12: ffff888028aa9788
[  751.135047][ T2975] R13: ffff8880259a79e0 R14: 00000000003f0002 R15: ffff88801f9c3530
[  751.143036][ T2975] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  751.151956][ T2975] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  751.158560][ T2975] CR2: 000055558043da28 CR3: 0000000061964000 CR4: 00000000003506e0
[  751.166548][ T2975] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  751.174534][ T2975] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  751.182535][ T2975] Call Trace:
[  751.185828][ T2975]  <TASK>
[  751.188753][ T2975]  nilfs_dat_commit_update+0x24/0x40
[  751.194034][ T2975]  nilfs_btree_commit_update_v+0x93/0x410
[  751.199782][ T2975]  nilfs_btree_propagate+0x95a/0xcf0
[  751.205070][ T2975]  nilfs_bmap_propagate+0x70/0x120
[  751.210212][ T2975]  nilfs_segctor_apply_buffers+0x15d/0x320
[  751.216011][ T2975]  ? nilfs_collect_file_data+0xc0/0xc0
[  751.221503][ T2975]  nilfs_segctor_scan_file+0x7af/0x9d0
[  751.226957][ T2975]  ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0
[  751.234102][ T2975]  ? nilfs_segbuf_extend_segsum+0x25d/0x360
[  751.240013][ T2975]  ? rcu_is_watching+0x11/0xa0
[  751.244773][ T2975]  nilfs_segctor_do_construct+0x1c26/0x6ca0
[  751.250733][ T2975]  ? verify_lock_unused+0x140/0x140
[  751.255931][ T2975]  ? nilfs_transaction_unlock+0x220/0x220
[  751.261656][ T2975]  ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70
[  751.267806][ T2975]  ? clear_nonspinnable+0x60/0x60
[  751.272850][ T2975]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  751.278301][ T2975]  ? __lock_acquire+0x7d10/0x7d10
[  751.283351][ T2975]  ? __rwlock_init+0x140/0x140
[  751.288106][ T2975]  ? do_raw_spin_unlock+0x11d/0x230
[  751.293317][ T2975]  ? _raw_spin_unlock+0x24/0x40
[  751.298158][ T2975]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  751.303634][ T2975]  nilfs_segctor_construct+0x17b/0x690
[  751.309096][ T2975]  nilfs_segctor_thread+0x523/0x1180
[  751.314420][ T2975]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  751.320305][ T2975]  ? nilfs_iput_work_func+0x70/0x70
[  751.325516][ T2975]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  751.331399][ T2975]  ? _raw_spin_unlock+0x40/0x40
[  751.336263][ T2975]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  751.342147][ T2975]  ? init_wait_entry+0xd0/0xd0
[  751.346938][ T2975]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  751.352818][ T2975]  ? __kthread_parkme+0x157/0x1b0
[  751.357867][ T2975]  kthread+0x436/0x520
[  751.361924][ T2975]  ? nilfs_iput_work_func+0x70/0x70
[  751.367144][ T2975]  ? kthread_blkcg+0xd0/0xd0
[  751.371731][ T2975]  ret_from_fork+0x1f/0x30
[  751.376148][ T2975]  </TASK>
[  751.379203][ T2975] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  751.386465][ T2975] CPU: 1 PID: 2975 Comm: segctord Not tainted syzkaller #0
[  751.393645][ T2975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  751.403683][ T2975] Call Trace:
[  751.406948][ T2975]  <TASK>
[  751.409867][ T2975]  dump_stack_lvl+0x188/0x250
[  751.414540][ T2975]  ? show_regs_print_info+0x20/0x20
[  751.419729][ T2975]  ? load_image+0x400/0x400
[  751.424222][ T2975]  panic+0x2e5/0x810
[  751.428116][ T2975]  ? bpf_jit_dump+0xd0/0xd0
[  751.432616][ T2975]  ? ret_from_fork+0x1f/0x30
[  751.437198][ T2975]  ? nilfs_dat_commit_end+0x5ac/0x6b0
[  751.439402][ T3001] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13886'.
[  751.442556][ T2975]  __warn+0x248/0x2b0
[  751.442575][ T2975]  ? nilfs_dat_commit_end+0x5ac/0x6b0
[  751.442591][ T2975]  report_bug+0x1b7/0x2e0
[  751.442609][ T2975]  handle_bug+0x3a/0x70
[  751.442622][ T2975]  exc_invalid_op+0x16/0x40
[  751.442635][ T2975]  asm_exc_invalid_op+0x16/0x20
[  751.442649][ T2975] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0
[  751.442663][ T2975] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e8 53 03 00 e8 e3 64 6a fe e8 be bf f1 fd e9 b8 fc ff ff e8 d4 64 6a fe <0f> 0b e9 16 fc ff ff e8 c8 64 6a fe e8 a3 bf f1 fd e9 74 fe ff ff
[  751.442674][ T2975] RSP: 0018:ffffc9000365f390 EFLAGS: 00010293
[  751.442688][ T2975] RAX: ffffffff830ebd6c RBX: ffff8880613f01a0 RCX: ffff888028aa8000
[  751.442699][ T2975] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002
[  751.442707][ T2975] RBP: 0000000000000003 R08: ffff88805efb065f R09: 1ffff1100bdf60cb
[  751.442715][ T2975] R10: dffffc0000000000 R11: ffffed100bdf60cc R12: ffff888028aa9788
[  751.442725][ T2975] R13: ffff8880259a79e0 R14: 00000000003f0002 R15: ffff88801f9c3530
[  751.442739][ T2975]  ? nilfs_dat_commit_end+0x5ac/0x6b0
[  751.442762][ T2975]  nilfs_dat_commit_update+0x24/0x40
[  751.442776][ T2975]  nilfs_btree_commit_update_v+0x93/0x410
[  751.442793][ T2975]  nilfs_btree_propagate+0x95a/0xcf0
[  751.442812][ T2975]  nilfs_bmap_propagate+0x70/0x120
[  751.442828][ T2975]  nilfs_segctor_apply_buffers+0x15d/0x320
[  751.442844][ T2975]  ? nilfs_collect_file_data+0xc0/0xc0
[  751.442861][ T2975]  nilfs_segctor_scan_file+0x7af/0x9d0
[  751.442882][ T2975]  ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0
[  751.442911][ T2975]  ? nilfs_segbuf_extend_segsum+0x25d/0x360
[  751.442929][ T2975]  ? rcu_is_watching+0x11/0xa0
[  751.442946][ T2975]  nilfs_segctor_do_construct+0x1c26/0x6ca0
[  751.442992][ T2975]  ? verify_lock_unused+0x140/0x140
[  751.443017][ T2975]  ? nilfs_transaction_unlock+0x220/0x220
[  751.443032][ T2975]  ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70
[  751.443054][ T2975]  ? clear_nonspinnable+0x60/0x60
[  751.443068][ T2975]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  751.443084][ T2975]  ? __lock_acquire+0x7d10/0x7d10
[  751.649317][ T2975]  ? __rwlock_init+0x140/0x140
[  751.654055][ T2975]  ? do_raw_spin_unlock+0x11d/0x230
[  751.659223][ T2975]  ? _raw_spin_unlock+0x24/0x40
[  751.664059][ T2975]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  751.669489][ T2975]  nilfs_segctor_construct+0x17b/0x690
[  751.674920][ T2975]  nilfs_segctor_thread+0x523/0x1180
[  751.680182][ T2975]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  751.686040][ T2975]  ? nilfs_iput_work_func+0x70/0x70
[  751.691205][ T2975]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  751.697066][ T2975]  ? _raw_spin_unlock+0x40/0x40
[  751.701917][ T2975]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  751.707774][ T2975]  ? init_wait_entry+0xd0/0xd0
[  751.712507][ T2975]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  751.718368][ T2975]  ? __kthread_parkme+0x157/0x1b0
[  751.723362][ T2975]  kthread+0x436/0x520
[  751.727402][ T2975]  ? nilfs_iput_work_func+0x70/0x70
[  751.732568][ T2975]  ? kthread_blkcg+0xd0/0xd0
[  751.737126][ T2975]  ret_from_fork+0x1f/0x30
[  751.741515][ T2975]  </TASK>
[  751.744595][ T2975] Kernel Offset: disabled
[  751.749238][ T2975] Rebooting in 86400 seconds..