last executing test programs:

2.682958538s ago: executing program 1 (id=2496):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

2.601490672s ago: executing program 1 (id=2497):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e0007"], 0x1f4}}, 0x0)

2.357573814s ago: executing program 1 (id=2500):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000003ff8ff6943b80000000800003fecf20000000086070000", 0x4000, r0)

2.272393949s ago: executing program 3 (id=2502):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)

2.170281333s ago: executing program 1 (id=2505):
syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff"], 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

1.974771753s ago: executing program 3 (id=2507):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000680)={[{@nouuid}, {@gquota}, {@swalloc}, {@uquota}, {}, {@sysvgroups}, {@noquota}], [{@flag='nomand'}]}, 0x4, 0x96d2, &(0x7f0000009680)="$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")
umount2(&(0x7f0000000200)='./file0/file1\x00', 0xe)

1.858135639s ago: executing program 2 (id=2510):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x1, 0xffffff36}, 0xc)

1.734127805s ago: executing program 2 (id=2512):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_hsr\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x4b, 0x3a, "04000787b600eca6aa0870471829a00700e5cde91eb86df1497941f89ca551d1e71f00516683be000008005f19bf3852a3b32306f179db46aefd"}})

1.554880943s ago: executing program 2 (id=2514):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x160, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@time={{0x38}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@dscp={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hald_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488)

1.518144325s ago: executing program 2 (id=2515):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000080)=0xfffffffffffffdab)

1.346908634s ago: executing program 2 (id=2517):
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7ff, &(0x7f00000001c0)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)

1.062859498s ago: executing program 0 (id=2520):
r0 = syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x2e, &(0x7f0000000180)=[{0x9, '\x00', @st={0x4, [{0x0, @svalue=0x2}, {0x2, @svalue=0x7fff}, {}, {0x2, @svalue=0x8}]}, 0x9}]})

1.062709548s ago: executing program 2 (id=2521):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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")
mknod$loop(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1)

1.01260643s ago: executing program 0 (id=2522):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000140)="ba")

928.309595ms ago: executing program 3 (id=2523):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004b00000018010000756c090000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)

778.891031ms ago: executing program 0 (id=2524):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0xfffffffffffffffe, &(0x7f0000000040))

634.128719ms ago: executing program 0 (id=2525):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010)

634.021739ms ago: executing program 3 (id=2526):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
pwritev(r0, &(0x7f0000002cc0)=[{&(0x7f0000000a80)="df9d", 0x2}], 0x1, 0x80000001, 0x5)

548.308423ms ago: executing program 1 (id=2527):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001480), 0x40401, 0x0)
write$sequencer(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c0c80aa06e6f354920fc01a0d007307ff0c0407f3070205940fab527183a6ef920db0"], 0x28)

478.901096ms ago: executing program 3 (id=2528):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0xa8, 0x82)
ioctl$BLKFRAGET(r0, 0x1265, &(0x7f0000000080))

442.375228ms ago: executing program 0 (id=2529):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@barrier}, {@user_xattr}, {@jqfmt_vfsv0}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5b4, &(0x7f00000003c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)

374.422312ms ago: executing program 1 (id=2530):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8ca, &(0x7f00000000c0)=ANY=[@ANYBLOB='intr,heartbeat=none,dir_resv_level=000000000,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=00000000001613114240,\x00'], 0x3, 0x4439, &(0x7f0000004480)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)

129.78µs ago: executing program 0 (id=2531):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='children\x00')
lseek(r0, 0x2000, 0x0)

0s ago: executing program 3 (id=2532):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510)

kernel console output (not intermixed with test programs):

 from 0 to 32768
[  140.736174][  T967] usb 4-1: SerialNumber: syz
[  140.773843][  T967] usb 4-1: config 0 descriptor??
[  140.813959][ T9700] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.871480][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.892339][    T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  140.911647][    T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4
[  140.938591][    T8] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  140.958313][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.994283][    T8] hub 1-1:1.0: bad descriptor, ignoring hub
[  141.016145][  T967] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[  141.030191][    T8] hub: probe of 1-1:1.0 failed with error -5
[  141.041546][  T967] usb 4-1: No valid video chain found.
[  141.045116][ T9700] XFS (loop1): Ending clean mount
[  141.052522][    T8] cdc_wdm 1-1:1.0: skipping garbage
[  141.060463][    T8] cdc_wdm 1-1:1.0: skipping garbage
[  141.075479][    T8] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  141.079263][ T9700] XFS (loop1): Quotacheck needed: Please wait.
[  141.145925][ T9700] XFS (loop1): Quotacheck: Done.
[  141.204887][ T5767] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.218376][  T967] usb 4-1: USB disconnect, device number 8
[  141.311863][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  141.410294][ T5797] usb 1-1: USB disconnect, device number 6
[  141.480740][ T9751] netlink: 'syz.1.1110': attribute type 10 has an invalid length.
[  141.518549][    T9] usb 3-1: Using ep0 maxpacket: 8
[  141.532288][    T9] usb 3-1: config 1 has an invalid interface number: 128 but max is 1
[  141.541894][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.552419][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  141.561667][    T9] usb 3-1: config 1 has no interface number 0
[  141.568150][    T9] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  141.589455][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  141.599720][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.607750][    T9] usb 3-1: Product: syz
[  141.612308][    T9] usb 3-1: Manufacturer: syz
[  141.617009][    T9] usb 3-1: SerialNumber: syz
[  141.630326][    T9] cdc_wdm 3-1:1.128: skipping garbage
[  141.635990][    T9] cdc_wdm 3-1:1.128: invalid descriptor buffer length
[  141.647303][    T9] cdc_wdm: probe of 3-1:1.128 failed with error -22
[  141.840755][    T9] usb 3-1: USB disconnect, device number 5
[  142.202182][ T9791] loop1: detected capacity change from 0 to 512
[  142.223407][ T9791] EXT4-fs: Ignoring removed nobh option
[  142.236684][ T9791] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  142.272818][ T9798] __nla_validate_parse: 69 callbacks suppressed
[  142.272832][ T9798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1122'.
[  142.876360][ T9827] netlink: 'syz.0.1138': attribute type 13 has an invalid length.
[  143.098858][ T9791] loop1: detected capacity change from 0 to 40427
[  143.147908][ T9791] F2FS-fs (loop1): Unrecognized mount option "nogrpid" or missing value
[  143.354799][ T9854] loop3: detected capacity change from 0 to 64
[  143.721474][ T9874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1145'.
[  143.733144][ T9876] Cannot find del_set index 2 as target
[  144.016226][ T9891] ipt_rpfilter: unknown options
[  144.461822][ T9883] loop1: detected capacity change from 0 to 32768
[  144.466388][ T9911] loop2: detected capacity change from 0 to 4096
[  144.488549][    T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  144.509807][ T9883] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  144.511382][ T9911] ntfs: volume version 3.1.
[  144.537279][ T9914] loop3: detected capacity change from 0 to 4096
[  144.560648][ T9914] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  144.594189][ T9911] ntfs: (device loop2): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80.  Aborting truncate.
[  144.629103][ T9914] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  144.629734][ T9883] XFS (loop1): Ending clean mount
[  144.648701][ T9914] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  144.661402][ T9914] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  144.675945][ T9914] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  144.717796][ T9883] XFS (loop1): Quotacheck needed: Please wait.
[  144.719726][ T9914] ntfs: volume version 3.1.
[  144.727598][    T9] usb 1-1: config 0 has an invalid interface number: 107 but max is 0
[  144.736798][    T9] usb 1-1: config 0 has no interface number 0
[  144.764801][    T9] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  144.778770][ T9914] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  144.790107][ T9883] XFS (loop1): Quotacheck: Done.
[  144.817061][    T9] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  144.843183][ T9914] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  144.867386][    T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  144.896950][    T9] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  144.899324][ T9914] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  144.936211][    T9] usb 1-1: Product: syz
[  144.960386][    T9] usb 1-1: Manufacturer: syz
[  144.968913][ T9914] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  144.975255][    T9] usb 1-1: SerialNumber: syz
[  144.989741][ T5767] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  145.009936][    T9] usb 1-1: config 0 descriptor??
[  145.022249][    T9] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected
[  145.051384][    T9] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81
[  145.061420][    T9] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1
[  145.083990][    T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  145.099643][    T9] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2
[  145.118366][    T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  145.151040][    T9] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4
[  145.199128][    T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  145.236647][    T9] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6
[  145.263354][    T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  145.298965][    T9] usb 1-1: USB disconnect, device number 7
[  145.309005][  T967] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  145.365191][    T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  145.409876][    T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  145.461739][    T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  145.506524][    T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  145.516998][  T967] usb 3-1: Using ep0 maxpacket: 32
[  145.561656][  T967] usb 3-1: string descriptor 0 read error: -22
[  145.567980][  T967] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  145.579944][    T9] keyspan 1-1:0.107: device disconnected
[  145.599347][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.630665][  T967] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  145.638386][  T967] usb 3-1: MIDIStreaming interface descriptor not found
[  145.672854][ T9993] ipt_rpfilter: unknown options
[  145.822670][T10009] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[  145.833828][    T9] usb 3-1: USB disconnect, device number 6
[  145.841828][T10009] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6)
[  146.007959][T10031] ieee802154 phy0 wpan0: encryption failed: -22
[  146.472960][T10063] netlink: 'syz.3.1177': attribute type 4 has an invalid length.
[  146.541590][T10067] loop0: detected capacity change from 0 to 16
[  146.610874][T10067] erofs: (device loop0): mounted with root inode @ nid 36.
[  147.019352][T10098] tmpfs: Bad value for 'mpol'
[  147.187469][T10102] loop3: detected capacity change from 0 to 4096
[  147.210678][T10102] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  147.343232][T10102] ntfs3: loop3: Failed to initialize $Secure (-22).
[  147.359622][T10112] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1192'.
[  147.378287][T10079] loop2: detected capacity change from 0 to 32768
[  147.566339][   T49] read_mapping_page failed!
[  147.582450][   T49] ERROR: (device loop2): txCommit: 
[  147.582450][   T49] 
[  147.629431][   T49] jfs_write_inode: jfs_commit_inode failed!
[  147.793415][T10134] loop0: detected capacity change from 0 to 256
[  147.873696][T10134] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d)
[  148.020944][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1202'.
[  148.443733][T10166] loop1: detected capacity change from 0 to 4096
[  148.473770][T10166] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  148.656531][T10166] ntfs3: loop1: failed to convert "c46c" to ascii
[  148.821388][T10137] loop3: detected capacity change from 0 to 40427
[  148.900397][T10137] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  148.933268][T10137] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  149.007639][T10137] F2FS-fs (loop3): Found nat_bits in checkpoint
[  149.079864][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'.
[  149.198959][T10137] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  149.218648][T10137] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  149.843199][T10246] delete_channel: no stack
[  149.951629][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'.
[  150.768522][ T5752] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  150.810439][T10262] loop2: detected capacity change from 0 to 40427
[  150.827107][T10262] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  150.850379][T10262] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  150.877809][T10262] F2FS-fs (loop2): Found nat_bits in checkpoint
[  150.948541][ T5752] usb 4-1: Using ep0 maxpacket: 32
[  150.956508][ T5752] usb 4-1: config 4 has an invalid interface number: 128 but max is 0
[  150.974995][ T5752] usb 4-1: config 4 has no interface number 0
[  150.989046][ T5752] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.012467][T10304] netlink: 'syz.0.1248': attribute type 30 has an invalid length.
[  151.020992][ T5752] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.031745][T10262] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  151.041632][ T5752] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  151.069341][T10262] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  151.097208][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.133219][ T5752] hub 4-1:4.128: USB hub found
[  151.338263][ T5752] hub 4-1:4.128: 19 ports detected
[  151.356114][ T5752] hub 4-1:4.128: Using single TT (err -22)
[  151.379862][ T5752] hub 4-1:4.128: insufficient power available to use all downstream ports
[  151.540153][ T5752] hub 4-1:4.128: hub_hub_status failed (err = -71)
[  151.556283][ T5752] hub 4-1:4.128: config failed, can't get hub status (err -71)
[  151.656560][ T5752] usb 4-1: USB disconnect, device number 9
[  151.866823][T10375] loop1: detected capacity change from 0 to 4096
[  151.913467][T10375] ntfs: volume version 3.1.
[  151.988260][T10375] __ntfs_error: 12 callbacks suppressed
[  151.988276][T10375] ntfs: (device loop1): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80.  Aborting truncate.
[  152.096960][T10397] ieee802154 phy0 wpan0: encryption failed: -22
[  152.118534][ T5818] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  152.318805][ T5818] usb 1-1: Using ep0 maxpacket: 8
[  152.347814][ T5818] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  152.368770][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.387996][ T5818] usb 1-1: Product: syz
[  152.407367][ T5818] usb 1-1: Manufacturer: syz
[  152.417489][ T5818] usb 1-1: SerialNumber: syz
[  152.430047][ T5818] usb 1-1: config 0 descriptor??
[  152.458222][ T5818] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244)
[  152.874117][T10399] loop1: detected capacity change from 0 to 40427
[  152.889793][ T5818] radio-usb-si4713: probe of 1-1:0.0 failed with error -71
[  152.916426][ T5818] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  152.928687][T10399] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  152.941307][ T5818] usb 1-1: USB disconnect, device number 8
[  152.955491][T10399] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  153.018201][T10399] F2FS-fs (loop1): Found nat_bits in checkpoint
[  153.139046][T10399] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  153.146222][T10399] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  153.220662][ T5818] IPVS: starting estimator thread 0...
[  153.318656][T10462] IPVS: using max 25 ests per chain, 60000 per kthread
[  153.395019][T10469] loop3: detected capacity change from 0 to 512
[  153.480235][T10469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.526731][T10469] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  153.611834][T10469] EXT4-fs error (device loop3): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.3.1280: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  153.655087][T10469] EXT4-fs error (device loop3): ext4_get_first_dir_block:3595: inode #12: comm syz.3.1280: directory missing '.'
[  153.802660][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.778034][T10560] netlink: 'syz.0.1305': attribute type 21 has an invalid length.
[  154.786478][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'.
[  154.864127][T10563] cgroup: Name too long
[  154.868781][  T967] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  154.878655][ T5797] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  154.941225][T10566] comedi: No check for data length of config insn id 32784 is implemented
[  154.950111][T10566] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  154.960911][T10566] comedi: Assuming n=15 is correct
[  154.996765][T10552] loop2: detected capacity change from 0 to 32768
[  155.026973][T10552] JBD2: Ignoring recovery information on journal
[  155.056634][T10552] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  155.068753][  T967] usb 4-1: Using ep0 maxpacket: 32
[  155.076467][ T5797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.086882][ T5797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  155.098105][ T5797] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4
[  155.110387][ T5797] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  155.119645][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.131418][  T967] usb 4-1: string descriptor 0 read error: -22
[  155.137729][  T967] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  155.147961][  T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.158297][ T5797] hub 2-1:1.0: bad descriptor, ignoring hub
[  155.164518][ T5797] hub: probe of 2-1:1.0 failed with error -5
[  155.180418][ T5797] cdc_wdm 2-1:1.0: skipping garbage
[  155.192350][  T967] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  155.199545][ T5797] cdc_wdm 2-1:1.0: skipping garbage
[  155.204850][ T5797] cdc_wdm: probe of 2-1:1.0 failed with error -22
[  155.211877][  T967] usb 4-1: MIDIStreaming interface descriptor not found
[  155.285565][T10552] (syz.2.1303,10552,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=0, inode=65, rec_len=16, name_len=1
[  155.323861][T10552] (syz.2.1303,10552,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2
[  155.345372][T10552] (syz.2.1303,10552,0):ocfs2_mknod:298 ERROR: status = -2
[  155.359093][T10552] (syz.2.1303,10552,0):ocfs2_mknod:502 ERROR: status = -2
[  155.366347][T10552] (syz.2.1303,10552,0):ocfs2_create:676 ERROR: status = -2
[  155.505360][T10599] netlink: 'syz.0.1310': attribute type 3 has an invalid length.
[  155.534571][ T5764] ocfs2: Unmounting device (7,2) on (node local)
[  155.545482][ T5818] usb 4-1: USB disconnect, device number 10
[  155.564923][ T5752] usb 2-1: USB disconnect, device number 6
[  155.807169][T10628] loop2: detected capacity change from 0 to 256
[  156.786593][T10694] loop3: detected capacity change from 0 to 256
[  156.823141][T10694] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  157.794277][T10756] misc userio: No port type given on /dev/userio
[  158.024557][T10770] loop1: detected capacity change from 0 to 256
[  158.057964][T10770] FAT-fs (loop1): Directory bread(block 64) failed
[  158.078557][T10770] FAT-fs (loop1): Directory bread(block 65) failed
[  158.085316][T10770] FAT-fs (loop1): Directory bread(block 66) failed
[  158.128810][T10770] FAT-fs (loop1): Directory bread(block 67) failed
[  158.135502][T10770] FAT-fs (loop1): Directory bread(block 68) failed
[  158.162682][T10770] FAT-fs (loop1): Directory bread(block 69) failed
[  158.176157][T10770] FAT-fs (loop1): Directory bread(block 70) failed
[  158.180278][T10776] netlink: 'syz.3.1358': attribute type 41 has an invalid length.
[  158.197968][T10770] FAT-fs (loop1): Directory bread(block 71) failed
[  158.210704][T10776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1358'.
[  158.216753][T10770] FAT-fs (loop1): Directory bread(block 72) failed
[  158.245876][T10770] FAT-fs (loop1): Directory bread(block 73) failed
[  158.489423][T10754] loop0: detected capacity change from 0 to 32768
[  158.675348][T10805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1366'.
[  158.684916][  T991] read_mapping_page failed!
[  158.698622][  T991] ERROR: (device loop0): txCommit: 
[  158.698622][  T991] 
[  158.726772][  T991] jfs_write_inode: jfs_commit_inode failed!
[  158.808760][  T967] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  159.023315][  T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  159.051272][  T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  159.067386][  T967] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  159.088563][  T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.122521][  T967] usb 4-1: config 0 descriptor??
[  159.171088][T10833] loop0: detected capacity change from 0 to 256
[  159.282050][T10833] FAT-fs (loop0): Directory bread(block 64) failed
[  159.320824][T10833] FAT-fs (loop0): Directory bread(block 65) failed
[  159.364617][  T967] ath6kl: Failed to submit usb control message: -71
[  159.368688][T10833] FAT-fs (loop0): Directory bread(block 66) failed
[  159.385340][  T967] ath6kl: unable to send the bmi data to the device: -71
[  159.406199][T10833] FAT-fs (loop0): Directory bread(block 67) failed
[  159.406620][  T967] ath6kl: Unable to send get target info: -71
[  159.434840][T10833] FAT-fs (loop0): Directory bread(block 68) failed
[  159.458709][T10833] FAT-fs (loop0): Directory bread(block 69) failed
[  159.478848][T10833] FAT-fs (loop0): Directory bread(block 70) failed
[  159.481319][  T967] ath6kl: Failed to init ath6kl core: -71
[  159.485422][T10833] FAT-fs (loop0): Directory bread(block 71) failed
[  159.498829][T10833] FAT-fs (loop0): Directory bread(block 72) failed
[  159.513559][  T967] ath6kl_usb: probe of 4-1:0.0 failed with error -71
[  159.529025][T10833] FAT-fs (loop0): Directory bread(block 73) failed
[  159.558911][  T967] usb 4-1: USB disconnect, device number 11
[  159.797354][T10869] netlink: 'syz.2.1383': attribute type 21 has an invalid length.
[  160.182075][T10894] : renamed from veth0_to_bond (while UP)
[  160.358334][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'.
[  160.528868][T10918] loop1: detected capacity change from 0 to 256
[  160.584722][T10918] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  160.752678][T10933] loop0: detected capacity change from 0 to 512
[  160.842325][T10933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.855303][T10933] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.858765][T10943] process 'syz.2.1403' launched './file0' with NULL argv: empty string added
[  161.032134][ T5761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.196290][T10960] loop1: detected capacity change from 0 to 8
[  161.213907][T10960] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  161.265201][ T8549] udevd[8549]: incorrect cramfs checksum on /dev/loop1
[  161.280933][T10960] cramfs: bad data blocksize 4294934200
[  161.316055][ T5987] udevd[5987]: incorrect cramfs checksum on /dev/loop1
[  161.328628][T10960] cramfs: bad data blocksize 4294934200
[  161.475816][T10929] loop3: detected capacity change from 0 to 32768
[  161.522292][T10929] jfs_strtoUCS: char2uni returned -22.
[  161.535473][T10929] charset = cp932, char = 0xfc
[  161.538132][T10970] loop2: detected capacity change from 0 to 4096
[  161.582871][T10970] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  161.703346][T10970] ntfs: volume version 3.1.
[  161.885220][T10988] loop0: detected capacity change from 0 to 256
[  161.908863][  T967] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  161.942028][T10988] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  162.099217][  T967] usb 2-1: Using ep0 maxpacket: 16
[  162.113640][  T967] usb 2-1: config 0 has no interfaces?
[  162.144380][  T967] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  162.167025][  T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.212852][  T967] usb 2-1: Product: syz
[  162.219136][  T967] usb 2-1: Manufacturer: syz
[  162.238538][  T967] usb 2-1: SerialNumber: syz
[  162.266438][  T967] r8152-cfgselector 2-1: config 0 descriptor??
[  162.501425][  T967] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  162.717026][    T9] usb 2-1: USB disconnect, device number 7
[  162.746175][T11039] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  162.933145][   T27] audit: type=1326 audit(1773832283.315:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  162.983142][   T27] audit: type=1326 audit(1773832283.345:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  163.009794][   T27] audit: type=1326 audit(1773832283.345:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  163.041689][   T27] audit: type=1326 audit(1773832283.345:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  163.563088][T11097] ip6erspan0: entered promiscuous mode
[  163.660263][T11104] xt_TCPMSS: Only works on TCP SYN packets
[  163.737029][T11111] comedi comedi3: dt2817: I/O port conflict (0x1004f27,5)
[  163.744877][T11112] sctp: [Deprecated]: syz.2.1449 (pid 11112) Use of struct sctp_assoc_value in delayed_ack socket option.
[  163.744877][T11112] Use struct sctp_sack_info instead
[  163.969466][T11127] delete_channel: no stack
[  164.369573][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'.
[  164.875631][T11197] loop1: detected capacity change from 0 to 512
[  164.961564][T11195] loop2: detected capacity change from 0 to 4096
[  164.963116][T11197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.992162][T11195] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  164.999141][T11197] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.111910][T11195] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  165.144534][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.214657][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'.
[  165.223863][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'.
[  165.240204][T11215] tc_dump_action: action bad kind
[  165.559417][  T967] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  165.768545][  T967] usb 3-1: Using ep0 maxpacket: 8
[  165.795368][  T967] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  165.841422][  T967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.869391][  T967] usb 3-1: config 0 has no interface number 0
[  165.891759][  T967] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  165.920663][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.940904][  T967] usb 3-1: Product: syz
[  165.948399][  T967] usb 3-1: Manufacturer: syz
[  165.973857][  T967] usb 3-1: SerialNumber: syz
[  166.009150][  T967] usb 3-1: config 0 descriptor??
[  166.022972][T11275] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  166.288668][  T967] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  166.295081][  T967] usb 3-1: No valid video chain found.
[  166.327717][T11293] loop1: detected capacity change from 0 to 16
[  166.344343][T11297] ieee802154 phy0 wpan0: encryption failed: -22
[  166.371569][T11293] erofs: (device loop1): mounted with root inode @ nid 36.
[  166.524666][  T787] usb 3-1: USB disconnect, device number 7
[  166.705155][T11326] tmpfs: Bad value for 'mpol'
[  166.784281][T11321] loop0: detected capacity change from 0 to 4096
[  166.795796][T11321] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  166.835383][T11321] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  166.866205][T11321] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  166.888038][T11321] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  166.924553][T11321] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  166.957180][T11321] ntfs: volume version 3.1.
[  166.977548][T11341] bridge1: entered promiscuous mode
[  166.993239][T11341] bridge1: entered allmulticast mode
[  167.000464][T11321] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  167.013412][T11321] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  167.037646][T11321] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  167.054272][T11321] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  167.075921][T11321] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  167.269368][  T787] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  167.488773][  T787] usb 4-1: Using ep0 maxpacket: 32
[  167.494057][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'.
[  167.512751][  T787] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  167.554410][  T787] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  167.564498][  T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  167.582758][  T787] usb 4-1: config 1 has no interface number 0
[  167.600973][  T787] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  167.618745][  T787] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  167.638765][  T787] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  167.681796][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.714462][  T787] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  167.938923][  T787] snd_usb_pod 4-1:1.1: invalid control EP
[  167.954258][  T787] snd_usb_pod 4-1:1.1: cannot start listening: -22
[  167.991026][  T787] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  168.008854][  T787] snd_usb_pod: probe of 4-1:1.1 failed with error -22
[  168.193284][  T787] usb 4-1: USB disconnect, device number 12
[  168.465772][T11430] netlink: 'syz.1.1536': attribute type 1 has an invalid length.
[  168.929880][T11458] netlink: 'syz.0.1551': attribute type 3 has an invalid length.
[  168.937885][T11458] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1551'.
[  168.955080][T11461] loop1: detected capacity change from 0 to 512
[  168.992993][T11461] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  169.068809][T11461] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  169.185430][T11471] loop3: detected capacity change from 0 to 256
[  169.257579][T11471] FAT-fs (loop3): Directory bread(block 64) failed
[  169.275041][T11471] FAT-fs (loop3): Directory bread(block 65) failed
[  169.308892][T11471] FAT-fs (loop3): Directory bread(block 66) failed
[  169.315561][T11471] FAT-fs (loop3): Directory bread(block 67) failed
[  169.338918][T11471] FAT-fs (loop3): Directory bread(block 68) failed
[  169.345667][T11482] netlink: zone id is out of range
[  169.349063][T11471] FAT-fs (loop3): Directory bread(block 69) failed
[  169.357590][T11471] FAT-fs (loop3): Directory bread(block 70) failed
[  169.359381][T11482] netlink: zone id is out of range
[  169.373609][T11482] netlink: zone id is out of range
[  169.379736][T11482] netlink: zone id is out of range
[  169.385188][T11480] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  169.407154][T11471] FAT-fs (loop3): Directory bread(block 71) failed
[  169.408795][T11482] netlink: zone id is out of range
[  169.417372][T11471] FAT-fs (loop3): Directory bread(block 72) failed
[  169.427800][T11471] FAT-fs (loop3): Directory bread(block 73) failed
[  169.434765][T11482] netlink: get zone limit has 4 unknown bytes
[  169.809269][T11503] bond0: Error: Cannot enslave bond to itself.
[  170.086583][T11523] xt_TCPMSS: Only works on TCP SYN packets
[  170.431479][T11548] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1571'.
[  170.469409][T11548] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1571'.
[  170.495600][T11548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1571'.
[  170.559187][  T967] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  170.768608][  T967] usb 4-1: Using ep0 maxpacket: 32
[  170.790795][  T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  170.811345][  T967] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  170.821760][  T967] usb 4-1: New USB device strings: Mfr=1, Product=229, SerialNumber=2
[  170.833551][  T967] usb 4-1: Product: syz
[  170.837749][  T967] usb 4-1: Manufacturer: syz
[  170.866815][  T967] usb 4-1: SerialNumber: syz
[  170.900383][  T967] usb 4-1: config 0 descriptor??
[  170.913400][  T967] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
[  170.958273][  T967] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  171.039163][  T967] usbtouchscreen: probe of 4-1:0.0 failed with error -8
[  171.206611][ T5818] usb 4-1: USB disconnect, device number 13
[  171.247047][T11597] netlink: 'syz.0.1584': attribute type 7 has an invalid length.
[  171.290605][T11597] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1584'.
[  171.538742][ T5752] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  171.746687][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  171.767459][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  171.789037][ T5752] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  171.798153][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.839972][ T5752] usb 3-1: config 0 descriptor??
[  172.065183][ T5752] ath6kl: Failed to submit usb control message: -71
[  172.078587][ T5752] ath6kl: unable to send the bmi data to the device: -71
[  172.085863][ T5752] ath6kl: Unable to send get target info: -71
[  172.120960][ T5752] ath6kl: Failed to init ath6kl core: -71
[  172.127849][ T5752] ath6kl_usb: probe of 3-1:0.0 failed with error -71
[  172.177760][ T5752] usb 3-1: USB disconnect, device number 8
[  172.226461][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  172.226475][   T27] audit: type=1326 audit(1773832292.605:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  172.328522][   T27] audit: type=1326 audit(1773832292.605:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  172.378548][   T27] audit: type=1326 audit(1773832292.605:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  172.462971][   T27] audit: type=1326 audit(1773832292.605:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  172.514281][   T27] audit: type=1326 audit(1773832292.605:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.0.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  173.838977][T11707] cgroup: noprefix used incorrectly
[  173.914304][T11710] loop0: detected capacity change from 0 to 512
[  174.057711][T11710] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  174.200431][T11710] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  174.233428][T11681] loop1: detected capacity change from 0 to 32768
[  174.339104][T11681] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  174.339104][T11681] 
[  174.368768][ T5797] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  174.414387][T11681] ERROR: (device loop1): remounting filesystem as read-only
[  174.450939][T11681] xtLookup: xtSearch returned -5
[  174.470455][T11681] add_index: get/read_metapage failed!
[  174.482501][T11681] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  174.482501][T11681] 
[  174.511498][T11681] xtLookup: xtSearch returned -5
[  174.516847][T11681] free_index: error reading directory table
[  174.536958][T11681] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  174.536958][T11681] 
[  174.572668][T11681] xtLookup: xtSearch returned -5
[  174.577663][T11681] free_index: error reading directory table
[  174.588629][ T5797] usb 4-1: Using ep0 maxpacket: 16
[  174.614073][ T5797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  174.630712][ T5797] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  174.687807][ T5797] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  174.710038][T11681] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  174.710038][T11681] 
[  174.720475][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.758798][ T5797] usb 4-1: Product: syz
[  174.763108][ T5797] usb 4-1: Manufacturer: syz
[  174.767808][ T5797] usb 4-1: SerialNumber: syz
[  174.784980][T11681] xtLookup: xtSearch returned -5
[  174.821227][ T5797] r8152-cfgselector 4-1: config 0 descriptor??
[  174.839838][T11736] bond2: entered allmulticast mode
[  174.847552][T11681] free_index: error reading directory table
[  174.868180][T11736] 8021q: adding VLAN 0 to HW filter on device bond2
[  174.876056][T11681] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  174.876056][T11681] 
[  174.918517][T11681] xtLookup: xtSearch returned -5
[  174.938505][T11681] free_index: error reading directory table
[  174.961019][T11681] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  174.961019][T11681] 
[  175.006549][T11681] xtLookup: xtSearch returned -5
[  175.028764][T11681] free_index: error reading directory table
[  175.040730][ T5797] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  175.259147][ T5797] usb 4-1: USB disconnect, device number 14
[  175.655320][T11744] loop2: detected capacity change from 0 to 40427
[  175.684875][T11744] F2FS-fs (loop2): Invalid log blocks per segment (4278190089)
[  175.704056][T11744] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  175.737913][T11744] F2FS-fs (loop2): invalid crc value
[  175.858972][T11744] F2FS-fs (loop2): Found nat_bits in checkpoint
[  176.092843][T11744] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  176.158591][T11744] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  176.306031][T11744] F2FS-fs (loop2): Corrupted max_depth of 3: 255
[  176.346977][T11744] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  177.160646][T11859] loop3: detected capacity change from 0 to 64
[  177.708833][T11883] sctp: [Deprecated]: syz.0.1652 (pid 11883) Use of struct sctp_assoc_value in delayed_ack socket option.
[  177.708833][T11883] Use struct sctp_sack_info instead
[  178.155814][T11897] loop0: detected capacity change from 0 to 256
[  178.244784][T11863] loop1: detected capacity change from 0 to 32768
[  178.293068][T11897] FAT-fs (loop0): Directory bread(block 64) failed
[  178.319713][T11863] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.325697][T11897] FAT-fs (loop0): Directory bread(block 65) failed
[  178.367871][T11897] FAT-fs (loop0): Directory bread(block 66) failed
[  178.379621][T11897] FAT-fs (loop0): Directory bread(block 67) failed
[  178.386389][T11897] FAT-fs (loop0): Directory bread(block 68) failed
[  178.396370][T11897] FAT-fs (loop0): Directory bread(block 69) failed
[  178.405077][T11897] FAT-fs (loop0): Directory bread(block 70) failed
[  178.423071][T11897] FAT-fs (loop0): Directory bread(block 71) failed
[  178.441860][T11897] FAT-fs (loop0): Directory bread(block 72) failed
[  178.449954][T11897] FAT-fs (loop0): Directory bread(block 73) failed
[  178.529858][T11863] XFS (loop1): Ending clean mount
[  178.631658][ T5797] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  178.718842][ T5767] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.745672][T11886] loop2: detected capacity change from 0 to 32768
[  178.858543][ T5797] usb 4-1: Using ep0 maxpacket: 32
[  178.879202][ T5797] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  178.898687][ T5797] usb 4-1: config 0 has no interface number 0
[  178.906006][T11886] ERROR: (device loop2): dbFindCtl: Corrupt dmapctl page
[  178.906006][T11886] 
[  178.918701][ T5797] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  178.947891][T11886] ERROR: (device loop2): remounting filesystem as read-only
[  178.950352][ T5797] usb 4-1: config 0 interface 2 has no altsetting 0
[  178.974041][T11886] jfs_mkdir: dtInsert returned -EIO
[  178.980832][T11886] ERROR: (device loop2): jfs_mkdir: 
[  178.980832][T11886] 
[  178.985043][ T5797] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  179.008690][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.027248][ T5797] usb 4-1: Product: syz
[  179.037323][ T5797] usb 4-1: Manufacturer: syz
[  179.048559][ T5797] usb 4-1: SerialNumber: syz
[  179.059870][ T5797] usb 4-1: config 0 descriptor??
[  179.088586][  T967] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  179.174116][T11937] cgroup: noprefix used incorrectly
[  179.268624][  T967] usb 1-1: Using ep0 maxpacket: 32
[  179.300002][ T5797] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  179.307581][  T967] usb 1-1: config 0 has an invalid interface number: 66 but max is 1
[  179.328195][  T967] usb 1-1: config 0 has no interface number 1
[  179.336021][  T967] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30
[  179.357168][  T967] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69
[  179.378807][  T967] usb 1-1: too many endpoints for config 0 interface 66 altsetting 107: 137, using maximum allowed: 30
[  179.399199][  T967] usb 1-1: config 0 interface 66 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 137
[  179.418824][  T967] usb 1-1: config 0 interface 0 has no altsetting 0
[  179.430851][  T967] usb 1-1: config 0 interface 66 has no altsetting 0
[  179.467874][  T967] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  179.478470][  T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  179.486521][  T967] usb 1-1: SerialNumber: syz
[  179.545114][  T967] usb 1-1: config 0 descriptor??
[  179.563747][  T967] usb-storage 1-1:0.0: USB Mass Storage device detected
[  179.595399][ T5797] usb 4-1: USB disconnect, device number 15
[  179.619645][  T967] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  179.789440][  T967] usb-storage 1-1:0.66: USB Mass Storage device detected
[  179.817836][  T967] usb-storage 1-1:0.66: Quirks match for vid 152d pid 0539: 4000000
[  179.826628][T11992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1666'.
[  179.916706][  T967] usb 1-1: USB disconnect, device number 9
[  180.146187][T12016] mmap: syz.1.1672 (12016): VmData 49217536 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[  180.149833][T12017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1671'.
[  180.411467][T12030] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1676'.
[  180.461087][T12030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.768620][  T967] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  180.978546][  T967] usb 1-1: Using ep0 maxpacket: 32
[  180.993430][  T967] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  181.020943][  T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.051606][  T967] usb 1-1: config 0 descriptor??
[  181.106575][  T967] as10x_usb: device has been detected
[  181.113698][  T967] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  181.184606][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'.
[  181.204097][  T967] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  181.241980][T12082] netlink: 'syz.2.1691': attribute type 3 has an invalid length.
[  181.287004][  T967] as10x_usb: error during firmware upload part1
[  181.305551][T12082] netlink: 'syz.2.1691': attribute type 1 has an invalid length.
[  181.308201][  T967] Registered device nBox DVB-T Dongle
[  181.335254][  T967] usb 1-1: USB disconnect, device number 10
[  181.404196][  T967] Unregistered device nBox DVB-T Dongle
[  181.441173][  T967] as10x_usb: device has been disconnected
[  181.883196][T12127] ./file0: Can't open blockdev
[  182.131148][T12145] loop1: detected capacity change from 0 to 1764
[  182.228554][ T5752] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  182.445359][ T5752] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  182.471291][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.501480][ T5752] usb 4-1: config 0 descriptor??
[  182.855343][T12163] loop1: detected capacity change from 0 to 32768
[  182.898664][T12163] (syz.1.1710,12163,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  182.914538][ T5752] [drm:udl_init] *ERROR* Selecting channel failed
[  182.941053][T12163] (syz.1.1710,12163,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  182.993092][T12163] JBD2: Ignoring recovery information on journal
[  183.021041][ T5752] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  183.039360][ T5752] [drm] Initialized udl on minor 2
[  183.052565][ T5752] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  183.100109][ T5752] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  183.122587][   T34] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  183.143285][ T5752] usb 4-1: USB disconnect, device number 16
[  183.144135][T12163] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  183.179668][   T34] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  183.211222][T12211] loop2: detected capacity change from 0 to 16
[  183.256363][T12211] erofs: (device loop2): mounted with root inode @ nid 36.
[  183.309751][T12211] syz.2.1720: attempt to access beyond end of device
[  183.309751][T12211] loop2: rw=0, sector=34359736320, nr_sectors = 8 limit=16
[  183.590561][ T5767] ocfs2: Unmounting device (7,1) on (node local)
[  183.638009][T12236] loop0: detected capacity change from 0 to 128
[  183.750455][T12236] Bad inode number on dev loop0: 32769 is out of range
[  184.099015][T12259] bridge1: entered promiscuous mode
[  184.229854][T12281] loop2: detected capacity change from 0 to 64
[  184.252528][T12281] hfs: bad allocation block size 0
[  184.374917][T12291] loop2: detected capacity change from 0 to 512
[  184.439218][T12291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.452123][ T5752] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  184.497061][T12291] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.581993][T12291] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1740: corrupted xattr block 33: invalid ea_ino
[  184.655518][ T5752] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  184.691261][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.694259][ T5752] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[  184.714590][ T5752] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  184.724125][ T5752] usb 2-1: Manufacturer: syz
[  184.742348][ T5752] usb 2-1: SerialNumber: syz
[  184.979580][ T5752] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[  185.005803][ T5752] usb 2-1: USB disconnect, device number 8
[  185.378543][  T967] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  185.530971][T12324] loop0: detected capacity change from 0 to 40427
[  185.543865][T12324] F2FS-fs (loop0): Invalid log blocks per segment (4278190089)
[  185.568588][T12324] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  185.568613][  T967] usb 3-1: Using ep0 maxpacket: 8
[  185.600457][T12324] F2FS-fs (loop0): invalid crc value
[  185.607681][  T967] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 96, changing to 7
[  185.624458][T12337] loop3: detected capacity change from 0 to 256
[  185.641638][  T967] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 33433, setting to 1024
[  185.649814][T12324] F2FS-fs (loop0): Found nat_bits in checkpoint
[  185.691995][  T967] usb 3-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40
[  185.709891][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.741529][  T967] usb 3-1: Product: syz
[  185.760726][  T967] usb 3-1: Manufacturer: syz
[  185.765510][  T967] usb 3-1: SerialNumber: syz
[  185.765679][T12324] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  185.781027][T12337] FAT-fs (loop3): Directory bread(block 64) failed
[  185.800897][T12324] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  185.810470][T12337] FAT-fs (loop3): Directory bread(block 65) failed
[  185.837586][T12337] FAT-fs (loop3): Directory bread(block 66) failed
[  185.862847][T12337] FAT-fs (loop3): Directory bread(block 67) failed
[  185.864315][T12324] F2FS-fs (loop0): Corrupted max_depth of 3: 255
[  185.881923][T12337] FAT-fs (loop3): Directory bread(block 68) failed
[  185.885681][T12324] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  185.898592][T12337] FAT-fs (loop3): Directory bread(block 69) failed
[  185.915604][T12337] FAT-fs (loop3): Directory bread(block 70) failed
[  185.925643][T12337] FAT-fs (loop3): Directory bread(block 71) failed
[  185.961920][T12337] FAT-fs (loop3): Directory bread(block 72) failed
[  185.975700][T12337] FAT-fs (loop3): Directory bread(block 73) failed
[  186.020172][  T967] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  186.051010][  T967] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  186.132201][  T967] snd-usb-audio: probe of 3-1:1.0 failed with error -71
[  186.182051][  T967] usb 3-1: USB disconnect, device number 9
[  186.234153][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  186.383992][   T27] audit: type=1326 audit(1773832306.765:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  186.478568][   T27] audit: type=1326 audit(1773832306.765:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  186.511083][   T27] audit: type=1326 audit(1773832306.765:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  186.534467][   T27] audit: type=1326 audit(1773832306.765:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  186.617818][   T27] audit: type=1326 audit(1773832306.765:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12384 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  186.867208][T12409] loop0: detected capacity change from 0 to 1764
[  186.988825][ T5752] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  187.178606][ T5752] usb 4-1: Using ep0 maxpacket: 16
[  187.189900][ T5752] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  187.209314][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.243402][ T5752] usb 4-1: Product: syz
[  187.247667][ T5752] usb 4-1: Manufacturer: syz
[  187.255282][ T5752] usb 4-1: SerialNumber: syz
[  187.267098][ T5752] usb 4-1: config 0 descriptor??
[  187.487676][ T5752] speedtch 4-1:0.0: speedtch_bind: data interface not found!
[  187.508560][ T5752] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  187.683084][T12471] loop0: detected capacity change from 0 to 256
[  187.703061][ T5752] usb 4-1: USB disconnect, device number 17
[  187.888580][    T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  187.971345][T12491] loop1: detected capacity change from 0 to 4096
[  188.102753][    T9] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  188.118204][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.139437][    T9] usb 3-1: config 0 descriptor??
[  188.156645][    T9] gspca_main: sunplus-2.14.0 probing 055f:c420
[  188.478726][  T967] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  188.556235][    T9] gspca_sunplus: reg_w_riv err -71
[  188.575560][    T9] sunplus: probe of 3-1:0.0 failed with error -71
[  188.592377][    T9] usb 3-1: USB disconnect, device number 10
[  188.638133][T12544] loop3: detected capacity change from 0 to 512
[  188.645891][T12544] EXT4-fs: inline encryption not supported
[  188.663586][T12544] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.1787: bad orphan inode 15
[  188.674265][  T967] usb 2-1: Using ep0 maxpacket: 32
[  188.678177][T12544] ext4_test_bit(bit=14, block=5) = 0
[  188.681344][  T967] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.693470][T12544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.696339][  T967] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.720198][  T967] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  188.729528][  T967] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  188.737901][  T967] usb 2-1: Product: syz
[  188.758701][  T967] usb 2-1: Manufacturer: syz
[  188.769308][  T967] hub 2-1:4.0: USB hub found
[  188.780237][T12544] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  188.800684][T12544] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.1787: bit already cleared for inode 13
[  188.828606][ T5752] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  188.848128][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.975633][  T967] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  189.018754][ T5752] usb 1-1: Using ep0 maxpacket: 32
[  189.025799][ T5752] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  189.034522][ T5752] usb 1-1: config 0 has no interface number 0
[  189.041380][ T5752] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  189.053111][ T5752] usb 1-1: config 0 interface 2 has no altsetting 0
[  189.061822][ T5752] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  189.071343][ T5752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.079673][ T5752] usb 1-1: Product: syz
[  189.083853][ T5752] usb 1-1: Manufacturer: syz
[  189.088493][ T5752] usb 1-1: SerialNumber: syz
[  189.095052][ T5752] usb 1-1: config 0 descriptor??
[  189.158168][T12565] loop2: detected capacity change from 0 to 1024
[  189.198541][ T5818] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  189.266748][ T2953] hfsplus: b-tree write err: -5, ino 25
[  189.276995][ T2953] hfsplus: b-tree write err: -5, ino 4
[  189.285656][ T2953] hfsplus: b-tree write err: -5, ino 2
[  189.325490][ T5752] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  189.393393][   T34] usb 2-1: USB disconnect, device number 9
[  189.404937][ T5818] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  189.419718][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.436789][ T5818] usb 4-1: config 0 descriptor??
[  189.447082][T12580] bridge1: entered promiscuous mode
[  189.583840][ T5752] usb 1-1: USB disconnect, device number 11
[  189.650862][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  189.889208][ T5818] ath6kl: Failed to submit usb control message: -71
[  189.896349][T12624] loop1: detected capacity change from 0 to 512
[  189.902152][ T5818] ath6kl: unable to send the bmi data to the device: -71
[  189.915250][ T5818] ath6kl: Unable to send get target info: -71
[  189.929434][ T5818] ath6kl: Failed to init ath6kl core: -71
[  189.955563][T12624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.956884][ T5818] ath6kl_usb: probe of 4-1:0.0 failed with error -71
[  189.980090][T12624] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.020090][ T5818] usb 4-1: USB disconnect, device number 18
[  190.047883][T12624] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1796: corrupted xattr block 33: invalid ea_ino
[  190.117725][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.553380][T12664] loop0: detected capacity change from 0 to 256
[  190.649297][T12664] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  190.677800][T12664] FAT-fs (loop0): Filesystem has been set read-only
[  190.721896][T12664] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  190.775550][T12664] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  190.807138][   T27] audit: type=1800 audit(1773832311.185:152): pid=12664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1805" name="file1" dev="loop0" ino=1048613 res=0 errno=0
[  190.807786][T12664] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  190.917550][T12650] loop2: detected capacity change from 0 to 32768
[  190.931925][T12650] (syz.2.1800,12650,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  190.955676][T12650] (syz.2.1800,12650,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  191.018751][T12650] JBD2: Ignoring recovery information on journal
[  191.068645][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  191.126406][T12650] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  191.289278][    T9] usb 2-1: Using ep0 maxpacket: 32
[  191.331795][    T9] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  191.348033][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.364547][    T9] usb 2-1: config 0 descriptor??
[  191.398275][    T9] as10x_usb: device has been detected
[  191.419553][ T5764] ocfs2: Unmounting device (7,2) on (node local)
[  191.426705][    T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  191.511117][    T9] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  191.542975][    T9] as10x_usb: error during firmware upload part1
[  191.572194][    T9] Registered device nBox DVB-T Dongle
[  191.720685][    T9] usb 2-1: USB disconnect, device number 10
[  191.813383][    T9] Unregistered device nBox DVB-T Dongle
[  191.832970][    T9] as10x_usb: device has been disconnected
[  192.220671][T12785] loop0: detected capacity change from 0 to 16
[  192.255094][T12785] erofs: (device loop0): mounted with root inode @ nid 36.
[  192.281375][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'.
[  192.639144][T12811] loop3: detected capacity change from 0 to 16
[  192.674517][T12811] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  193.155420][T12840] loop1: detected capacity change from 0 to 4096
[  193.207943][T12852] netlink: zone id is out of range
[  193.217575][T12852] netlink: del zone limit has 8 unknown bytes
[  193.238729][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  193.449502][    T9] usb 3-1: Using ep0 maxpacket: 32
[  193.473716][    T9] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  193.489679][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.497572][T12863] loop3: detected capacity change from 0 to 1024
[  193.517721][T12863] EXT4-fs: Ignoring removed bh option
[  193.532108][    T9] usb 3-1: config 0 descriptor??
[  193.584799][    T9] as10x_usb: device has been detected
[  193.589618][T12863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.608896][T12863] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz.3.1850: directory missing '.'
[  193.639134][    T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  193.771527][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.789037][    T9] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  193.815398][    T9] as10x_usb: error during firmware upload part1
[  193.840243][    T9] Registered device nBox DVB-T Dongle
[  193.849484][    T9] usb 3-1: USB disconnect, device number 11
[  193.911372][    T9] Unregistered device nBox DVB-T Dongle
[  193.925918][    T9] as10x_usb: device has been disconnected
[  194.008557][  T967] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  194.105337][   T27] audit: type=1326 audit(1773832314.485:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607b9c799 code=0x7ffc0000
[  194.157533][   T27] audit: type=1326 audit(1773832314.485:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607b9c799 code=0x7ffc0000
[  194.198616][  T967] usb 2-1: Using ep0 maxpacket: 32
[  194.210924][   T27] audit: type=1326 audit(1773832314.485:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f3607b9c799 code=0x7ffc0000
[  194.242946][   T27] audit: type=1326 audit(1773832314.485:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607b9c799 code=0x7ffc0000
[  194.243167][  T967] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  194.277356][   T27] audit: type=1326 audit(1773832314.485:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607b9c799 code=0x7ffc0000
[  194.317680][  T967] usb 2-1: config 0 has no interface number 0
[  194.347874][  T967] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  194.371130][  T967] usb 2-1: config 0 interface 2 has no altsetting 0
[  194.381359][  T967] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  194.403353][  T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.422521][  T967] usb 2-1: Product: syz
[  194.426729][  T967] usb 2-1: Manufacturer: syz
[  194.449025][  T967] usb 2-1: SerialNumber: syz
[  194.469486][  T967] usb 2-1: config 0 descriptor??
[  194.516498][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  194.525230][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  194.685709][  T967] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  194.942926][   T27] audit: type=1326 audit(1773832315.325:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12949 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9f79c799 code=0x7ffc0000
[  195.003478][  T967] usb 2-1: USB disconnect, device number 11
[  195.038876][   T27] audit: type=1326 audit(1773832315.325:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12949 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9f79c799 code=0x7ffc0000
[  195.129844][   T27] audit: type=1326 audit(1773832315.325:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12949 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9f79c799 code=0x7ffc0000
[  195.164420][   T27] audit: type=1326 audit(1773832315.345:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12949 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9f79c799 code=0x7ffc0000
[  195.189507][   T27] audit: type=1326 audit(1773832315.345:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12949 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f8c9f79c799 code=0x7ffc0000
[  195.396778][T12995] loop3: detected capacity change from 0 to 1024
[  195.452686][T12995] syz.3.1873: attempt to access beyond end of device
[  195.452686][T12995] loop3: rw=0, sector=393226, nr_sectors = 2 limit=1024
[  195.498677][ T5752] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  195.577271][T13007] loop3: detected capacity change from 0 to 128
[  195.602563][T13007] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.639529][T13007] ext4 filesystem being mounted at /461/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  195.703269][ T5752] usb 1-1: Using ep0 maxpacket: 8
[  195.704459][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.725670][ T5752] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  195.755818][ T5752] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.802159][ T5752] usb 1-1: config 0 has no interface number 0
[  195.822049][ T5752] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  195.853776][ T5752] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  195.910887][ T5752] usb 1-1: config 0 interface 52 has no altsetting 0
[  195.929810][ T5752] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  195.945997][ T5752] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  195.970876][ T5752] usb 1-1: Manufacturer: syz
[  195.987952][ T5752] usb 1-1: config 0 descriptor??
[  196.010068][ T5752] hub 1-1:0.52: bad descriptor, ignoring hub
[  196.027279][ T5752] hub: probe of 1-1:0.52 failed with error -5
[  196.235496][ T5752] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input9
[  196.549642][ T5818] usb 1-1: USB disconnect, device number 12
[  196.619435][T13077] loop2: detected capacity change from 0 to 256
[  196.719703][T13077] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  196.738205][T13077] FAT-fs (loop2): Filesystem has been set read-only
[  196.746020][T13077] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  196.757792][T13077] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  196.775488][T13077] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  197.198971][T13120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1905'.
[  197.215424][T13120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1905'.
[  197.265668][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'.
[  197.432530][T13134] loop0: detected capacity change from 0 to 16
[  197.472814][T13137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'.
[  197.496572][T13134] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  197.517506][T13137] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1911'.
[  197.528923][T13137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'.
[  197.538074][T13137] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1911'.
[  197.648096][T13137] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1911'.
[  197.683292][T13149] tipc: Can't bind to reserved service type 2
[  197.712179][T13152] loop1: detected capacity change from 0 to 64
[  197.772443][T13152] Trying to free block not in datazone
[  197.795004][T13152] Trying to free block not in datazone
[  197.817432][T13152] Trying to free block not in datazone
[  198.708618][    T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  198.877451][T13254] netlink: 'syz.1.1938': attribute type 5 has an invalid length.
[  198.893449][T13254] ip6erspan0: entered promiscuous mode
[  198.898704][    T8] usb 4-1: Using ep0 maxpacket: 32
[  198.915640][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.935398][    T8] usb 4-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75
[  198.946617][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.968134][    T8] usb 4-1: Product: syz
[  198.977941][    T8] usb 4-1: Manufacturer: syz
[  198.993458][    T8] usb 4-1: SerialNumber: syz
[  198.999141][ T5818] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  199.017119][    T8] usb 4-1: config 0 descriptor??
[  199.193682][ T5818] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  199.203031][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.215209][ T5818] usb 1-1: config 0 descriptor??
[  199.231213][    T8] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro FD v12 fw v238.0.0 (2 channels)
[  199.348660][  T967] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  199.443339][    T8] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  199.454619][    T8] peak_usb 4-1:0.0: unable to tell PCAN-USB Pro FD driver is loaded (err -71)
[  199.510833][    T8] peak_usb: probe of 4-1:0.0 failed with error -71
[  199.526840][    T8] usb 4-1: USB disconnect, device number 19
[  199.541778][  T967] usb 2-1: Using ep0 maxpacket: 32
[  199.567464][  T967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.591061][  T967] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  199.608166][  T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.616505][  T967] usb 2-1: Product: syz
[  199.621314][  T967] usb 2-1: Manufacturer: syz
[  199.625967][  T967] usb 2-1: SerialNumber: syz
[  199.659361][ T5818] [drm:udl_init] *ERROR* Selecting channel failed
[  199.663878][  T967] usb 2-1: config 0 descriptor??
[  199.693659][  T967] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  199.736324][ T5818] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  199.759539][ T5818] [drm] Initialized udl on minor 2
[  199.776897][ T5818] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  199.803427][T13293] QAT: failed to copy from user.
[  199.813521][ T5818] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  199.830858][ T5752] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  199.843264][ T5818] usb 1-1: USB disconnect, device number 13
[  199.862802][ T5752] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  199.919292][  T967] usb 2-1: qt2_setup_urbs - submit read urb failed -8
[  199.937781][  T967] quatech2: probe of 2-1:0.0 failed with error -8
[  200.127153][  T787] usb 2-1: USB disconnect, device number 12
[  200.725964][T13361] netlink: 'syz.1.1953': attribute type 2 has an invalid length.
[  200.755262][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'.
[  200.962136][T13372] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1956'.
[  201.290036][T13395] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1963'.
[  201.346535][T13399] netlink: 'syz.3.1965': attribute type 10 has an invalid length.
[  201.438653][T13405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1967'.
[  201.599722][T13399] team0 (unregistering): Port device team_slave_0 removed
[  201.629228][T13399] team0 (unregistering): Port device team_slave_1 removed
[  201.845106][T13430] loop0: detected capacity change from 0 to 65
[  201.896330][T13430] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  201.903958][T13428] loop2: detected capacity change from 0 to 4096
[  201.921171][T13428] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  202.075918][T13428] ntfs3: loop2: ino=1e, "file1" attr_set_size
[  202.110278][T13428] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  202.123988][T13428] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[  202.224041][   T12] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22.
[  202.541271][T13470] netlink: 'syz.2.1987': attribute type 2 has an invalid length.
[  202.554296][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'.
[  203.141641][T13512] netlink: 'syz.0.2001': attribute type 1 has an invalid length.
[  203.511002][T13536] loop1: detected capacity change from 0 to 256
[  203.528530][T13536] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  203.603301][T13536] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  204.466351][T13595] loop3: detected capacity change from 0 to 4096
[  204.527000][T13595] __ntfs_error: 5 callbacks suppressed
[  204.527016][T13595] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  204.583295][T13613] ÿ: renamed from bond_slave_0 (while UP)
[  204.604406][T13595] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing.
[  204.639650][T13595] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  204.674014][T13595] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  204.724421][T13595] ntfs: volume version 3.1.
[  204.858889][T13595] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  204.888982][T13595] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[  204.936479][T13628] loop2: detected capacity change from 0 to 1024
[  205.298355][T13640] loop3: detected capacity change from 0 to 4096
[  205.319703][T13640] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  205.333392][T13649] loop0: detected capacity change from 0 to 256
[  205.364851][T13649] exfat: Deprecated parameter 'namecase'
[  205.455039][T13640] ntfs3: loop3: failed to convert "c46c" to macroman
[  205.501467][T13649] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  205.618830][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'.
[  205.757062][T13667] netlink: 'syz.0.2044': attribute type 10 has an invalid length.
[  205.897564][T13632] loop1: detected capacity change from 0 to 32768
[  205.916447][T13632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2038 (13632)
[  205.966787][T13667] team0 (unregistering): Port device team_slave_0 removed
[  205.995271][T13632] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  206.009113][T13632] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  206.017796][T13632] BTRFS info (device loop1): using free space tree
[  206.053531][T13667] team0 (unregistering): Port device team_slave_1 removed
[  206.151518][T13632] BTRFS info (device loop1): enabling ssd optimizations
[  206.198781][T13632] BTRFS info (device loop1): auto enabling async discard
[  206.404029][ T5767] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  206.482318][T13723] netlink: 'syz.2.2058': attribute type 30 has an invalid length.
[  206.510702][T13723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2058'.
[  206.528910][T13723] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  206.562264][T13723] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  207.182294][T13756] netlink: 'syz.1.2065': attribute type 10 has an invalid length.
[  207.405783][T13756] team0 (unregistering): Port device team_slave_0 removed
[  207.459514][T13756] team0 (unregistering): Port device team_slave_1 removed
[  207.505237][T13770] loop2: detected capacity change from 0 to 65
[  207.537018][T13728] loop3: detected capacity change from 0 to 32768
[  207.543187][T13770] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  207.553336][T13728] 
[  207.553336][T13728]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.553336][T13728] 
[  207.783753][ T5768] 
[  207.783753][ T5768]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.783753][ T5768] 
[  207.851639][ T5768] 
[  207.851639][ T5768]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.851639][ T5768] 
[  207.895122][T13794] loop1: detected capacity change from 0 to 1024
[  208.108668][  T787] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  208.345283][  T787] usb 1-1: config index 0 descriptor too short (expected 61256, got 72)
[  208.364973][  T787] usb 1-1: config 1 has an invalid interface number: 0 but max is -1
[  208.381814][  T787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  208.395679][  T787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 0
[  208.415772][  T787] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  208.449736][  T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  208.459361][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  208.479261][  T787] usb 1-1: SerialNumber: syz
[  208.497557][  T787] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  208.513640][T13831] loop1: detected capacity change from 0 to 65
[  208.520156][  T787] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[  208.526614][  T787] cdc_acm: probe of 1-1:1.0 failed with error -22
[  208.538756][T13831] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  208.578715][ T5818] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  208.703863][  T967] usb 1-1: USB disconnect, device number 14
[  208.790343][ T5818] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  208.802100][ T5818] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[  208.811462][ T5818] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  208.819942][ T5818] usb 3-1: Manufacturer: syz
[  208.824601][ T5818] usb 3-1: SerialNumber: syz
[  209.050117][ T5818] usbhid 3-1:36.0: couldn't find an input interrupt endpoint
[  209.064028][ T5818] usb 3-1: USB disconnect, device number 12
[  209.640556][T13862] netlink: 'syz.2.2084': attribute type 10 has an invalid length.
[  209.753831][T13862] team0 (unregistering): Port device team_slave_0 removed
[  209.778298][T13862] team0 (unregistering): Port device team_slave_1 removed
[  209.921571][T13877] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2090'.
[  210.328690][ T5818] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  210.377104][T13912] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2101'.
[  210.528985][ T5818] usb 1-1: Using ep0 maxpacket: 32
[  210.548081][ T5818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.568716][T13926] netlink: 'syz.2.2105': attribute type 10 has an invalid length.
[  210.575438][ T5818] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  210.596102][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.604753][ T5818] usb 1-1: Product: syz
[  210.612421][ T5818] usb 1-1: Manufacturer: syz
[  210.620164][ T5818] usb 1-1: SerialNumber: syz
[  210.637123][ T5818] usb 1-1: config 0 descriptor??
[  210.651079][ T5818] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  210.880741][ T5818] usb 1-1: qt2_setup_urbs - submit read urb failed -8
[  210.908157][ T5818] quatech2: probe of 1-1:0.0 failed with error -8
[  211.031735][T13957] loop3: detected capacity change from 0 to 256
[  211.092725][T13957] FAT-fs (loop3): Directory bread(block 64) failed
[  211.112339][T13957] FAT-fs (loop3): Directory bread(block 65) failed
[  211.121188][  T967] usb 1-1: USB disconnect, device number 15
[  211.164249][T13957] FAT-fs (loop3): Directory bread(block 66) failed
[  211.172449][T13957] FAT-fs (loop3): Directory bread(block 67) failed
[  211.186058][T13957] FAT-fs (loop3): Directory bread(block 68) failed
[  211.194696][T13957] FAT-fs (loop3): Directory bread(block 69) failed
[  211.204876][T13957] FAT-fs (loop3): Directory bread(block 70) failed
[  211.211934][T13957] FAT-fs (loop3): Directory bread(block 71) failed
[  211.225055][T13957] FAT-fs (loop3): Directory bread(block 72) failed
[  211.232060][T13957] FAT-fs (loop3): Directory bread(block 73) failed
[  211.248584][ T5818] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  211.254389][T13957] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  211.312376][T13944] loop2: detected capacity change from 0 to 32768
[  211.323814][T13944] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.2111 (13944)
[  211.375873][T13944] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  211.403549][T13944] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  211.415700][T13944] BTRFS info (device loop2): force zlib compression, level 3
[  211.424636][T13944] BTRFS info (device loop2): turning on flush-on-commit
[  211.433907][T13944] BTRFS info (device loop2): max_inline at 4096
[  211.444054][T13944] BTRFS info (device loop2): using free space tree
[  211.449031][ T5818] usb 2-1: Using ep0 maxpacket: 8
[  211.469580][ T5818] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  211.491529][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.529978][ T5818] usb 2-1: config 0 has no interface number 0
[  211.547406][ T5818] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  211.550290][T13944] BTRFS info (device loop2): enabling ssd optimizations
[  211.559296][ T5818] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.579126][ T5818] usb 2-1: config 0 interface 52 has no altsetting 0
[  211.586867][T13944] BTRFS info (device loop2): auto enabling async discard
[  211.591613][T13992] netlink: 'syz.3.2116': attribute type 10 has an invalid length.
[  211.595338][ T5818] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  211.611761][ T5818] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  211.620083][ T5818] usb 2-1: Manufacturer: syz
[  211.636020][ T5818] usb 2-1: config 0 descriptor??
[  211.644304][ T5818] hub 2-1:0.52: bad descriptor, ignoring hub
[  211.658607][ T5818] hub: probe of 2-1:0.52 failed with error -5
[  211.715132][T13997] loop3: detected capacity change from 0 to 164
[  211.799496][ T5764] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  211.861431][ T5818] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input10
[  212.235656][T14022] loop3: detected capacity change from 0 to 64
[  212.428009][  T967] usb 2-1: USB disconnect, device number 13
[  212.456464][T14034] loop3: detected capacity change from 0 to 1024
[  213.681369][T14113] loop1: detected capacity change from 0 to 16
[  213.694596][T14113] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  213.718600][    T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  213.721941][ T5987] udevd[5987]: incorrect cramfs checksum on /dev/loop1
[  213.731719][T14085] loop0: detected capacity change from 0 to 32768
[  213.815557][ T5987] udevd[5987]: incorrect cramfs checksum on /dev/loop1
[  213.932934][    T8] usb 3-1: Using ep0 maxpacket: 8
[  213.956594][    T8] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  213.977568][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.012288][    T8] usb 3-1: config 0 has no interface number 0
[  214.031436][    T8] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  214.063266][    T8] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  214.080176][T14092] loop3: detected capacity change from 0 to 40427
[  214.088796][T14092] F2FS-fs (loop3): Invalid segment count (0)
[  214.096052][T14092] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  214.105064][    T8] usb 3-1: config 0 interface 52 has no altsetting 0
[  214.119836][T14092] F2FS-fs (loop3): invalid crc value
[  214.127495][    T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  214.152765][    T8] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  214.163142][    T8] usb 3-1: Manufacturer: syz
[  214.172659][T14092] F2FS-fs (loop3): Found nat_bits in checkpoint
[  214.175355][    T8] usb 3-1: config 0 descriptor??
[  214.200470][    T8] hub 3-1:0.52: bad descriptor, ignoring hub
[  214.206564][    T8] hub: probe of 3-1:0.52 failed with error -5
[  214.341301][T14092] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  214.348390][T14092] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  214.464324][    T8] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input11
[  214.942471][  T967] usb 3-1: USB disconnect, device number 13
[  215.012855][T14166] loop1: detected capacity change from 0 to 4096
[  215.059661][T14166] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  215.256704][T14166] ntfs3: loop1: ino=1e, "file1" attr_set_size
[  215.272655][T14166] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  215.289649][T14166] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[  215.352651][T14199] loop0: detected capacity change from 0 to 128
[  215.360213][ T1323] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22.
[  215.414533][T14199] VFS: Found a Xenix FS (block size = 1024) on device loop0
[  215.544014][T14211] loop2: detected capacity change from 0 to 64
[  215.626697][ T5761] sysv_free_block: flc_count > flc_size
[  215.648731][ T5761] sysv_free_block: flc_count > flc_size
[  215.663523][ T5761] sysv_free_block: flc_count > flc_size
[  215.680520][ T5761] sysv_free_block: flc_count > flc_size
[  215.706794][ T5761] sysv_free_block: flc_count > flc_size
[  215.732928][ T5761] sysv_free_block: flc_count > flc_size
[  215.751572][ T5761] sysv_free_block: flc_count > flc_size
[  215.757175][ T5761] sysv_free_block: flc_count > flc_size
[  215.768560][ T5761] sysv_free_block: flc_count > flc_size
[  215.779601][ T5761] sysv_free_block: flc_count > flc_size
[  215.786438][ T5761] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  216.179418][T14250] binder: BC_ATTEMPT_ACQUIRE not supported
[  216.219440][T14250] binder: 14248:14250 ioctl c0306201 2000000003c0 returned -22
[  216.270612][T14258] loop0: detected capacity change from 0 to 16
[  216.288282][T14258] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  216.318028][ T5987] udevd[5987]: incorrect cramfs checksum on /dev/loop0
[  216.445009][ T5987] udevd[5987]: incorrect cramfs checksum on /dev/loop0
[  216.822063][T14297] netlink: 'syz.2.2192': attribute type 1 has an invalid length.
[  216.846772][T14299] loop0: detected capacity change from 0 to 64
[  216.853225][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2192'.
[  216.926035][T14304] loop3: detected capacity change from 0 to 16
[  216.933672][T14299] hfs: request for non-existent node 1025 in B*Tree
[  216.958088][T14299] hfs: request for non-existent node 1025 in B*Tree
[  216.981882][T14304] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  217.057989][T14314] loop1: detected capacity change from 0 to 256
[  217.061989][ T5987] udevd[5987]: incorrect cramfs checksum on /dev/loop3
[  217.150200][ T5987] udevd[5987]: incorrect cramfs checksum on /dev/loop3
[  217.419395][T14334] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  217.550381][T14344] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  217.593635][T14344] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.605027][T14352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2207'.
[  218.191169][T14392] erofs: (device loop1): mounted with root inode @ nid 36.
[  218.216514][T14392] erofs: (device loop1): erofs_find_target_block: corrupted dir block 0 @ nid 36
[  218.389488][T14400] VFS: Found a Xenix FS (block size = 1024) on device loop3
[  218.538942][ T5768] sysv_free_block: flc_count > flc_size
[  218.548769][ T5768] sysv_free_block: flc_count > flc_size
[  218.554375][ T5768] sysv_free_block: flc_count > flc_size
[  218.571830][ T5768] sysv_free_block: flc_count > flc_size
[  218.577432][ T5768] sysv_free_block: flc_count > flc_size
[  218.587431][ T5768] sysv_free_block: flc_count > flc_size
[  218.610558][ T5768] sysv_free_block: flc_count > flc_size
[  218.616335][ T5768] sysv_free_block: flc_count > flc_size
[  218.628534][ T5768] sysv_free_block: flc_count > flc_size
[  218.647253][ T5768] sysv_free_block: flc_count > flc_size
[  218.669675][ T5768] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  218.684307][T14417] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2226'.
[  218.744573][T14423] netlink: 'syz.2.2227': attribute type 21 has an invalid length.
[  218.769642][T14423] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2227'.
[  219.006902][T14436] befs: (loop3): No write support. Marking filesystem read-only
[  219.036299][T14436] syz.3.2230: attempt to access beyond end of device
[  219.036299][T14436] loop3: rw=0, sector=0, nr_sectors = 2 limit=0
[  219.068852][T14436] befs: (loop3): unable to read superblock
[  219.238565][T14446] : renamed from veth0_vlan (while UP)
[  219.285096][T14450] set_capacity_and_notify: 3 callbacks suppressed
[  219.285110][T14450] loop2: detected capacity change from 0 to 128
[  219.349548][T14450] VFS: Found a Xenix FS (block size = 1024) on device loop2
[  219.403049][T14428] loop1: detected capacity change from 0 to 32768
[  219.439266][T14428] (syz.1.2228,14428,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  219.466421][ T5764] sysv_free_block: flc_count > flc_size
[  219.483878][ T5764] sysv_free_block: flc_count > flc_size
[  219.501553][T14428] (syz.1.2228,14428,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  219.503888][ T5764] sysv_free_block: flc_count > flc_size
[  219.557318][ T5764] sysv_free_block: flc_count > flc_size
[  219.575981][ T5764] sysv_free_block: flc_count > flc_size
[  219.586070][ T5764] sysv_free_block: flc_count > flc_size
[  219.596199][ T5764] sysv_free_block: flc_count > flc_size
[  219.602260][ T5764] sysv_free_block: flc_count > flc_size
[  219.607922][ T5764] sysv_free_block: flc_count > flc_size
[  219.613856][ T5764] sysv_free_block: flc_count > flc_size
[  219.617420][T14428] JBD2: Ignoring recovery information on journal
[  219.620472][ T5764] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  219.789527][T14428] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  220.148931][  T787] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  220.157743][ T5767] ocfs2: Unmounting device (7,1) on (node local)
[  220.340905][  T787] usb 3-1: not running at top speed; connect to a high speed hub
[  220.350212][  T787] usb 3-1: config 129 has an invalid interface number: 35 but max is 0
[  220.364613][  T787] usb 3-1: config 129 has no interface number 0
[  220.378127][  T787] usb 3-1: config 129 interface 35 has no altsetting 0
[  220.401638][  T787] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=26.99
[  220.411394][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.421354][  T787] usb 3-1: Product: syz
[  220.425552][  T787] usb 3-1: Manufacturer: syz
[  220.430886][  T787] usb 3-1: SerialNumber: syz
[  220.562436][T14515] loop3: detected capacity change from 0 to 4096
[  220.641173][T14515] ntfs: volume version 3.1.
[  220.648738][ T5818] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  220.691681][  T787] usb_ehset_test: probe of 3-1:129.35 failed with error -32
[  220.719777][  T787] usb 3-1: USB disconnect, device number 14
[  220.858868][ T5818] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  220.878173][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.890439][ T5818] usb 1-1: Product: syz
[  220.894879][ T5818] usb 1-1: Manufacturer: syz
[  220.920784][ T5818] usb 1-1: SerialNumber: syz
[  220.935790][ T5818] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  220.997085][   T34] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  221.350132][T14565] cgroup: none used incorrectly
[  221.413242][    T8] usb 1-1: USB disconnect, device number 16
[  221.690469][T14588] ieee802154 phy0 wpan0: encryption failed: -22
[  221.887449][T14602] loop2: detected capacity change from 0 to 1024
[  221.915695][T14606] netlink: 'syz.1.2274': attribute type 1 has an invalid length.
[  221.933208][T14602] hfsplus: catalog name length corrupted
[  221.961724][T14606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2274'.
[  222.271598][   T34] usb 1-1: Service connection timeout for: 256
[  222.277899][   T34] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  222.337593][   T34] ath9k_htc: Failed to initialize the device
[  222.354924][    T8] usb 1-1: ath9k_htc: USB layer deinitialized
[  222.427614][T14629] loop0: detected capacity change from 0 to 4096
[  222.464196][T14629] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  222.546575][T14629] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  222.735190][T14662] befs: (loop1): No write support. Marking filesystem read-only
[  222.769120][T14662] syz.1.2291: attempt to access beyond end of device
[  222.769120][T14662] loop1: rw=0, sector=0, nr_sectors = 2 limit=0
[  222.811599][T14662] befs: (loop1): unable to read superblock
[  223.006661][   T27] audit: type=1326 audit(1773832343.382:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  223.094773][   T27] audit: type=1326 audit(1773832343.382:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  223.154218][   T27] audit: type=1326 audit(1773832343.382:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  223.208625][   T27] audit: type=1326 audit(1773832343.492:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  223.292816][   T27] audit: type=1326 audit(1773832343.512:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  223.325960][T14700] loop3: detected capacity change from 0 to 128
[  223.389058][ T6173] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  223.399487][T14700] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  223.455336][T14700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  223.619408][ T6173] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad
[  223.635901][ T6173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.663910][ T6173] usb 3-1: config 0 descriptor??
[  223.898592][   T34] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  223.917826][ T6173] snd-usb-hiface: probe of 3-1:0.0 failed with error -22
[  223.962713][T14747] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  224.054961][T14753] loop1: detected capacity change from 0 to 128
[  224.070283][T14753] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  224.108735][   T34] usb 1-1: Using ep0 maxpacket: 16
[  224.118782][   T34] usb 1-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55
[  224.131574][T14753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.139034][ T6173] usb 3-1: USB disconnect, device number 15
[  224.142309][   T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.186705][T14764] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2317'.
[  224.188494][   T34] usb 1-1: Product: syz
[  224.218544][   T34] usb 1-1: Manufacturer: syz
[  224.223201][   T34] usb 1-1: SerialNumber: syz
[  224.260518][   T34] usb 1-1: config 0 descriptor??
[  224.273518][   T34] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a
[  224.692653][   T34] gspca_sn9c20x: Write register 1001 failed -71
[  224.712972][   T34] gspca_sn9c20x: Device initialization failed
[  224.728596][   T34] gspca_sn9c20x: probe of 1-1:0.0 failed with error -71
[  224.746225][   T34] usb 1-1: USB disconnect, device number 17
[  224.780206][ T5752] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  224.853730][T14798] loop2: detected capacity change from 0 to 4096
[  224.863825][T14798] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  224.902496][T14798] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[  224.914972][T14798] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  224.982573][ T5752] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  224.993662][   T12] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22.
[  224.999155][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.004760][ T5764] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[  225.018566][ T5752] usb 2-1: Product: syz
[  225.021556][ T5764] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  225.028473][ T5752] usb 2-1: Manufacturer: syz
[  225.031300][ T5764] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[  225.038558][ T5752] usb 2-1: SerialNumber: syz
[  225.052990][ T1323] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22.
[  225.061962][ T5752] usb 2-1: config 0 descriptor??
[  225.101094][ T5752] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  225.144087][ T5752] usb 2-1: Detected FT4232HP
[  225.509252][ T5752] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  225.528289][ T5752] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  225.561327][ T5752] usb 2-1: USB disconnect, device number 14
[  225.586024][T14842] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2336'.
[  225.614340][ T5752] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  225.639224][ T5752] ftdi_sio 2-1:0.0: device disconnected
[  225.899775][T14859] loop2: detected capacity change from 0 to 4096
[  225.916917][T14859] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  225.952556][T14859] ntfs3: loop2: Failed to load $MFT (-2).
[  226.380089][T14883] ipip0: entered promiscuous mode
[  226.491650][T14895] loop2: detected capacity change from 0 to 256
[  226.587978][T14895] FAT-fs (loop2): Directory bread(block 64) failed
[  226.625098][T14895] FAT-fs (loop2): Directory bread(block 65) failed
[  226.639971][T14895] FAT-fs (loop2): Directory bread(block 66) failed
[  226.651533][T14895] FAT-fs (loop2): Directory bread(block 67) failed
[  226.658291][T14895] FAT-fs (loop2): Directory bread(block 68) failed
[  226.721432][T14895] FAT-fs (loop2): Directory bread(block 69) failed
[  226.728145][T14895] FAT-fs (loop2): Directory bread(block 70) failed
[  226.744395][T14895] FAT-fs (loop2): Directory bread(block 71) failed
[  226.763623][T14895] FAT-fs (loop2): Directory bread(block 72) failed
[  226.771145][T14895] FAT-fs (loop2): Directory bread(block 73) failed
[  226.786158][T14906] loop1: detected capacity change from 0 to 4096
[  226.832378][T14906] ntfs: volume version 3.1.
[  226.920950][   T27] audit: type=1326 audit(1773832347.302:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  226.968610][   T34] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  226.994944][   T27] audit: type=1326 audit(1773832347.302:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  227.064524][   T27] audit: type=1326 audit(1773832347.322:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  227.068681][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2355'.
[  227.116708][   T27] audit: type=1326 audit(1773832347.372:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  227.166073][   T27] audit: type=1326 audit(1773832347.402:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1204d9c799 code=0x7ffc0000
[  227.228695][   T34] usb 4-1: Using ep0 maxpacket: 16
[  227.239721][   T34] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  227.261165][   T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.286946][   T34] usb 4-1: Product: syz
[  227.295933][   T34] usb 4-1: Manufacturer: syz
[  227.309845][   T34] usb 4-1: SerialNumber: syz
[  227.333985][   T34] usb 4-1: config 0 descriptor??
[  227.559840][   T34] speedtch 4-1:0.0: speedtch_bind: data interface not found!
[  227.579114][   T34] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  227.636155][T14942] loop2: detected capacity change from 0 to 4096
[  227.657883][T14942] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  227.763433][T14942] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  227.763989][ T6173] usb 4-1: USB disconnect, device number 20
[  228.188309][T14970] loop2: detected capacity change from 0 to 4096
[  228.218733][T14981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2369'.
[  228.227878][T14978] program syz.0.2368 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  228.289551][T14970] ntfs: volume version 3.1.
[  228.426555][T14989] syz.0.2371: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  228.473753][T14989] CPU: 1 PID: 14989 Comm: syz.0.2371 Not tainted syzkaller #0
[  228.481269][T14989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  228.491522][T14989] Call Trace:
[  228.494895][T14989]  <TASK>
[  228.497909][T14989]  dump_stack_lvl+0x18c/0x250
[  228.502613][T14989]  ? show_regs_print_info+0x20/0x20
[  228.507841][T14989]  ? load_image+0x400/0x400
[  228.512362][T14989]  ? __rcu_read_unlock+0x7c/0xd0
[  228.517317][T14989]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  228.523739][T14989]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  228.530255][T14989]  warn_alloc+0x246/0x340
[  228.534593][T14989]  ? stack_trace_save+0xaa/0x100
[  228.539536][T14989]  ? zone_watermark_ok_safe+0x230/0x230
[  228.545086][T14989]  ? kasan_set_track+0x5f/0x70
[  228.549842][T14989]  ? kasan_set_track+0x4e/0x70
[  228.554593][T14989]  ? __kasan_kmalloc+0x8f/0xa0
[  228.559523][T14989]  ? xsk_init_queue+0xad/0x100
[  228.564357][T14989]  ? xsk_setsockopt+0x42e/0x760
[  228.569208][T14989]  ? do_sock_setsockopt+0x175/0x1a0
[  228.574509][T14989]  ? __x64_sys_setsockopt+0x182/0x200
[  228.579908][T14989]  __vmalloc_node_range+0x126/0x1330
[  228.585395][T14989]  ? free_vm_area+0x50/0x50
[  228.589934][T14989]  vmalloc_user+0x74/0x80
[  228.594307][T14989]  ? xskq_create+0xbf/0x170
[  228.598898][T14989]  xskq_create+0xbf/0x170
[  228.603233][T14989]  xsk_init_queue+0xad/0x100
[  228.607829][T14989]  xsk_setsockopt+0x42e/0x760
[  228.612505][T14989]  ? xsk_poll+0x680/0x680
[  228.617009][T14989]  ? __fget_files+0x28/0x4b0
[  228.621685][T14989]  ? __fget_files+0x28/0x4b0
[  228.626276][T14989]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  228.631909][T14989]  ? security_socket_setsockopt+0x7e/0xa0
[  228.637980][T14989]  ? xsk_poll+0x680/0x680
[  228.642348][T14989]  do_sock_setsockopt+0x175/0x1a0
[  228.647388][T14989]  ? __fdget+0x180/0x210
[  228.651654][T14989]  __x64_sys_setsockopt+0x182/0x200
[  228.656977][T14989]  do_syscall_64+0x55/0xa0
[  228.661396][T14989]  ? clear_bhb_loop+0x40/0x90
[  228.666099][T14989]  ? clear_bhb_loop+0x40/0x90
[  228.670774][T14989]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.676665][T14989] RIP: 0033:0x7f1204d9c799
[  228.681095][T14989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.700699][T14989] RSP: 002b:00007f1205c52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  228.709110][T14989] RAX: ffffffffffffffda RBX: 00007f1205015fa0 RCX: 00007f1204d9c799
[  228.717089][T14989] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  228.725233][T14989] RBP: 00007f1204e32c99 R08: 0000000000000004 R09: 0000000000000000
[  228.733295][T14989] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.741267][T14989] R13: 00007f1205016038 R14: 00007f1205015fa0 R15: 00007ffc3cade4f8
[  228.749335][T14989]  </TASK>
[  228.802545][T14989] Mem-Info:
[  228.808140][T14989] active_anon:6413 inactive_anon:10 isolated_anon:0
[  228.808140][T14989]  active_file:15648 inactive_file:40531 isolated_file:0
[  228.808140][T14989]  unevictable:768 dirty:405 writeback:0
[  228.808140][T14989]  slab_reclaimable:10528 slab_unreclaimable:93272
[  228.808140][T14989]  mapped:25000 shmem:1486 pagetables:594
[  228.808140][T14989]  sec_pagetables:0 bounce:0
[  228.808140][T14989]  kernel_misc_reclaimable:0
[  228.808140][T14989]  free:1346862 free_pcp:7397 free_cma:0
[  228.845835][T14998] ./file0: Can't lookup blockdev
[  228.915995][T14989] Node 0 active_anon:25252kB inactive_anon:40kB active_file:33948kB inactive_file:161920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100000kB dirty:1620kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10768kB pagetables:2476kB sec_pagetables:0kB all_unreclaimable? no
[  228.916083][T14989] Node 1 active_anon:0kB inactive_anon:0kB active_file:28644kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  228.916127][T14989] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  228.916178][T14989] lowmem_reserve[]: 0 2521 2522 2522 2522
[  228.916218][T14989] Node 0 DMA32 free:1484232kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25216kB inactive_anon:40kB active_file:33948kB inactive_file:161096kB unevictable:1536kB writepending:1620kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:29196kB local_pcp:13556kB free_cma:0kB
[  228.916268][T14989] lowmem_reserve[]: 0 0 0 0 0
[  228.916312][T14989] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  228.916360][T14989] lowmem_reserve[]: 0 0 0 0 0
[  228.916397][T14989] Node 1 Normal free:3887852kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28644kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  228.916446][T14989] lowmem_reserve[]: 0 0 0 0 0
[  228.916484][T14989] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  228.916652][T14989] Node 0 DMA32: 2*4kB (UE) 230*8kB (UE) 243*16kB (UM) 575*32kB (UME) 254*64kB (UME) 80*128kB (UM) 38*256kB (UM) 23*512kB (UME) 9*1024kB (UME) 1*2048kB (M) 342*4096kB (UM) = 1484232kB
[  228.916820][T14989] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  228.916929][T14989] Node 1 Normal: 683*4kB (UME) 678*8kB (UME) 517*16kB (UME) 716*32kB (UME) 137*64kB (UME) 66*128kB (UME) 36*256kB (UM) 17*512kB (UM) 6*1024kB (UME) 3*2048kB (UE) 928*4096kB (M) = 3887852kB
[  228.956423][T14989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  228.956441][T14989] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  228.956459][T14989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  228.956473][T14989] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  228.956494][T14989] 57075 total pagecache pages
[  228.956505][T14989] 10 pages in swap cache
[  228.956512][T14989] Free swap  = 124472kB
[  228.956520][T14989] Total swap = 124996kB
[  228.956528][T14989] 2097051 pages RAM
[  228.956536][T14989] 0 pages HighMem/MovableOnly
[  228.956542][T14989] 416924 pages reserved
[  228.956550][T14989] 0 pages cma reserved
[  229.289997][T15017] raw_sendmsg: syz.1.2380 forgot to set AF_INET. Fix it!
[  229.665071][T15008] loop2: detected capacity change from 0 to 32768
[  229.798874][T15008] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  229.826384][T15043] loop0: detected capacity change from 0 to 4096
[  229.897220][T15043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.944126][T15043] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.2387: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  229.982238][T15043] EXT4-fs (loop0): Remounting filesystem read-only
[  229.989728][T15043] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.2387: directory missing '..'
[  230.063574][ T5761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.142682][T15008] XFS (loop2): Ending clean mount
[  230.243487][ T5764] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  231.164070][T15119] loop3: detected capacity change from 0 to 4096
[  231.194066][T15119] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  231.258711][  T967] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  231.490672][  T967] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad
[  231.515254][  T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.537960][  T967] usb 2-1: config 0 descriptor??
[  231.774300][  T967] snd-usb-hiface: probe of 2-1:0.0 failed with error -22
[  231.917657][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2425'.
[  231.947845][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2425'.
[  231.983347][T15176] loop2: detected capacity change from 0 to 512
[  231.997166][  T787] usb 2-1: USB disconnect, device number 15
[  232.025355][T15176] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.2426: inode has both inline data and extents flags
[  232.157982][T15176] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.2426: couldn't read orphan inode 15 (err -117)
[  232.209940][T15176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.379500][T15207] fuse: Unknown parameter 'no'
[  232.386632][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.698922][T15228] x_tables: unsorted underflow at hook 3
[  232.702346][T15229] loop2: detected capacity change from 0 to 512
[  232.784786][T15229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.839493][T15229] ext4 filesystem being mounted at /588/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.030442][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.326615][   T27] audit: type=1400 audit(1773832353.702:178): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=15273 comm="syz.1.2448"
[  233.357936][    C0] vkms_vblank_simulate: vblank timer overrun
[  233.469102][  T967] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  233.677795][  T967] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad
[  233.700535][  T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.725842][  T967] usb 4-1: config 0 descriptor??
[  233.731131][ T6173] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  233.776255][T15306] loop0: detected capacity change from 0 to 1024
[  233.809189][   T11] hfsplus: b-tree write err: -5, ino 25
[  233.815067][   T11] hfsplus: b-tree write err: -5, ino 4
[  233.846654][   T11] hfsplus: b-tree write err: -5, ino 2
[  233.920711][ T6173] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  233.930563][ T6173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.960360][ T6173] usb 2-1: config 0 descriptor??
[  233.973201][ T6173] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  233.999167][  T967] snd-usb-hiface: probe of 4-1:0.0 failed with error -22
[  234.150559][T15324] vlan0: entered promiscuous mode
[  234.225828][  T787] usb 4-1: USB disconnect, device number 21
[  234.376145][ T6173] gspca_stv06xx: I2C: Read error writing address: -71
[  234.402706][ T6173] usb 2-1: USB disconnect, device number 16
[  234.487387][T15319] loop2: detected capacity change from 0 to 32768
[  234.502579][T15319] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2460 (15319)
[  234.557154][T15319] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  234.578656][T15319] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  234.596448][T15319] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  234.616927][T15319] BTRFS info (device loop2): use lzo compression, level 0
[  234.637315][T15319] BTRFS info (device loop2): max_inline at 0
[  234.643679][T15319] BTRFS info (device loop2): using free space tree
[  234.819363][T15319] BTRFS info (device loop2): enabling ssd optimizations
[  234.826509][T15319] BTRFS info (device loop2): auto enabling async discard
[  234.900778][T15319] BTRFS error (device loop2: state M): unrecognized mount option 'ÿÿÿÿÿÿÿÿÿÿ0x0000000000000000ÿÿ18446744073709551615'
[  235.036632][ T5764] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  235.269176][  T787] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  235.497638][  T787] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[  235.533306][  T787] usb 4-1: config 8 has no interface number 0
[  235.552657][  T787] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  235.584520][  T787] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  235.595645][T15415] tmpfs: Bad value for 'mpol'
[  235.628470][  T787] usb 4-1: config 8 interface 177 has no altsetting 0
[  235.655478][  T787] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  235.692652][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.739089][T15381] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  235.746505][T15381] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  235.771056][    C1] ir_toy 4-1:8.177: out urb status: -71
[  235.914508][   T27] audit: type=1326 audit(1773832356.292:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.1.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  235.988361][   T27] audit: type=1326 audit(1773832356.312:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.1.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  236.032453][   T27] audit: type=1326 audit(1773832356.332:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.1.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  236.108598][   T27] audit: type=1326 audit(1773832356.332:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.1.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  236.136815][T15402] loop0: detected capacity change from 0 to 32768
[  236.174281][   T27] audit: type=1326 audit(1773832356.332:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.1.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  236.220035][   T27] audit: type=1326 audit(1773832356.332:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.1.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  236.257060][T15443] dvmrp0: entered allmulticast mode
[  236.285852][  T787] ir_toy 4-1:8.177: could not write reset command: -110
[  236.301026][   T27] audit: type=1326 audit(1773832356.332:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.1.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  236.306326][  T787] ir_toy: probe of 4-1:8.177 failed with error -110
[  236.364694][   T27] audit: type=1326 audit(1773832356.332:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15425 comm="syz.1.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f239d59c799 code=0x7ffc0000
[  236.429820][  T787] usb 4-1: USB disconnect, device number 22
[  236.470899][T15455] trusted_key: encrypted_key: keylen parameter is missing
[  236.756460][T15463] loop2: detected capacity change from 0 to 4096
[  236.785966][T15463] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  236.884138][T15482] loop3: detected capacity change from 0 to 512
[  236.927741][T15463] ntfs: volume version 3.1.
[  236.965992][T15482] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.2494: inode has both inline data and extents flags
[  237.033988][T15488] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2497'.
[  237.074812][T15482] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.2494: couldn't read orphan inode 15 (err -117)
[  237.119269][T15482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.299887][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.698580][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  237.898775][    T9] usb 2-1: Using ep0 maxpacket: 32
[  237.906869][    T9] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[  237.925531][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.946113][    T9] usb 2-1: config 0 has no interface number 0
[  237.960839][    T9] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  237.995511][    T9] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 255, setting to 64
[  238.029719][    T9] usb 2-1: config 0 interface 239 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  238.057328][    T9] usb 2-1: config 0 interface 239 has no altsetting 0
[  238.083420][    T9] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  238.104593][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.128474][    T9] usb 2-1: Product: syz
[  238.132694][    T9] usb 2-1: Manufacturer: syz
[  238.137883][T15554] capability: warning: `syz.0.2516' uses 32-bit capabilities (legacy support in use)
[  238.157766][    T9] usb 2-1: SerialNumber: syz
[  238.171747][    T9] usb 2-1: config 0 descriptor??
[  238.189255][T15513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  238.220605][T15525] loop3: detected capacity change from 0 to 32768
[  238.262758][T15525] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.282362][T15564] loop2: detected capacity change from 0 to 764
[  238.440230][    T9] usb 2-1: USB disconnect, device number 17
[  238.507655][T15525] XFS (loop3): Ending clean mount
[  238.619184][ T5768] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.188696][T15616] loop0: detected capacity change from 0 to 1024
[  239.242395][T15594] loop2: detected capacity change from 0 to 32768
[  239.263290][T15594] (syz.2.2521,15594,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  239.292794][T15616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  239.297613][T15594] (syz.2.2521,15594,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  239.318929][T15616] ext4 filesystem being mounted at /649/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.366127][T15616] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.2529: corrupted xattr block 128: overlapping e_value 
[  239.428625][T15594] JBD2: Ignoring recovery information on journal
[  239.540982][ T5761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  239.552571][T15624] loop1: detected capacity change from 0 to 32768
[  239.610145][T15594] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  239.641183][T15624] JBD2: Ignoring recovery information on journal
[  239.659664][T15624] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[  239.677156][T15624] JBD2: bad block at offset 32
[  239.695393][T15624] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  239.750255][T15624] 
[  239.752631][T15624] ======================================================
[  239.759671][T15624] WARNING: possible circular locking dependency detected
[  239.766706][T15624] syzkaller #0 Not tainted
[  239.771136][T15624] ------------------------------------------------------
[  239.778164][T15624] syz.1.2530/15624 is trying to acquire lock:
[  239.784253][T15624] ffff8880787742d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  239.797588][T15624] 
[  239.797588][T15624] but task is already holding lock:
[  239.804965][T15624] ffff888078774e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0
[  239.814560][T15624] 
[  239.814560][T15624] which lock already depends on the new lock.
[  239.814560][T15624] 
[  239.824969][T15624] 
[  239.824969][T15624] the existing dependency chain (in reverse order) is:
[  239.833986][T15624] 
[  239.833986][T15624] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  239.841789][T15624]        down_read+0x46/0x2e0
[  239.846576][T15624]        ocfs2_init_acl+0x30a/0x770
[  239.851858][T15624]        ocfs2_mknod+0x140f/0x2300
[  239.856980][T15624]        vfs_mknod+0x32b/0x360
[  239.861739][T15624]        do_mknodat+0x386/0x500
[  239.866605][T15624]        __x64_sys_mknod+0x8e/0xa0
[  239.871736][T15624]        do_syscall_64+0x55/0xa0
[  239.876699][T15624]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.883127][T15624] 
[  239.883127][T15624] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  239.891838][T15624]        down_read+0x46/0x2e0
[  239.896620][T15624]        ocfs2_start_trans+0x3a8/0x6f0
[  239.902112][T15624]        ocfs2_mknod+0xf1d/0x2300
[  239.907244][T15624]        ocfs2_create+0x196/0x430
[  239.912291][T15624]        path_openat+0x12a0/0x3230
[  239.917420][T15624]        do_filp_open+0x1f5/0x430
[  239.922463][T15624]        do_sys_openat2+0x134/0x1d0
[  239.927701][T15624]        __x64_sys_openat+0x139/0x160
[  239.933075][T15624]        do_syscall_64+0x55/0xa0
[  239.938006][T15624]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.944462][T15624] 
[  239.944462][T15624] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  239.951929][T15624]        ocfs2_start_trans+0x2a9/0x6f0
[  239.957374][T15624]        ocfs2_mknod+0xf1d/0x2300
[  239.962411][T15624]        ocfs2_create+0x196/0x430
[  239.967428][T15624]        path_openat+0x12a0/0x3230
[  239.972628][T15624]        do_filp_open+0x1f5/0x430
[  239.977652][T15624]        do_sys_openat2+0x134/0x1d0
[  239.982845][T15624]        __x64_sys_openat+0x139/0x160
[  239.988206][T15624]        do_syscall_64+0x55/0xa0
[  239.993225][T15624]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.999624][T15624] 
[  239.999624][T15624] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}:
[  240.010139][T15624]        down_write+0x97/0x200
[  240.014891][T15624]        ocfs2_reserve_local_alloc_bits+0x120/0x2600
[  240.021730][T15624]        ocfs2_reserve_clusters_with_limit+0x1ba/0xc20
[  240.028575][T15624]        ocfs2_mknod+0xebb/0x2300
[  240.033668][T15624]        ocfs2_create+0x196/0x430
[  240.038790][T15624]        path_openat+0x12a0/0x3230
[  240.043883][T15624]        do_filp_open+0x1f5/0x430
[  240.048984][T15624]        do_sys_openat2+0x134/0x1d0
[  240.054169][T15624]        __x64_sys_openat+0x139/0x160
[  240.059542][T15624]        do_syscall_64+0x55/0xa0
[  240.064480][T15624]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  240.070882][T15624] 
[  240.070882][T15624] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  240.081375][T15624]        __lock_acquire+0x2df1/0x7d40
[  240.086733][T15624]        lock_acquire+0x19e/0x420
[  240.091848][T15624]        down_write+0x97/0x200
[  240.096652][T15624]        ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  240.103441][T15624]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  240.110309][T15624]        ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  240.116474][T15624]        ocfs2_xattr_set+0xc3f/0x13e0
[  240.121840][T15624]        ocfs2_set_acl+0x4e1/0x590
[  240.126930][T15624]        ocfs2_iop_set_acl+0x1b2/0x2b0
[  240.132443][T15624]        vfs_set_acl+0x803/0xa60
[  240.137415][T15624]        do_set_acl+0xf5/0x180
[  240.142168][T15624]        path_setxattr+0x41d/0x5d0
[  240.147356][T15624]        __x64_sys_setxattr+0xbb/0xd0
[  240.152823][T15624]        do_syscall_64+0x55/0xa0
[  240.157746][T15624]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  240.164149][T15624] 
[  240.164149][T15624] other info that might help us debug this:
[  240.164149][T15624] 
[  240.174363][T15624] Chain exists of:
[  240.174363][T15624]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  240.174363][T15624] 
[  240.191383][T15624]  Possible unsafe locking scenario:
[  240.191383][T15624] 
[  240.198824][T15624]        CPU0                    CPU1
[  240.204189][T15624]        ----                    ----
[  240.209561][T15624]   lock(&oi->ip_xattr_sem);
[  240.214156][T15624]                                lock(&journal->j_trans_barrier);
[  240.222043][T15624]                                lock(&oi->ip_xattr_sem);
[  240.229274][T15624]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3);
[  240.236585][T15624] 
[  240.236585][T15624]  *** DEADLOCK ***
[  240.236585][T15624] 
[  240.244722][T15624] 3 locks held by syz.1.2530/15624:
[  240.249899][T15624]  #0: ffff888075684418 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  240.259126][T15624]  #1: ffff888078775118 (&type->i_mutex_dir_key#14){+.+.}-{3:3}, at: vfs_set_acl+0x37a/0xa60
[  240.269347][T15624]  #2: ffff888078774e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0
[  240.279358][T15624] 
[  240.279358][T15624] stack backtrace:
[  240.285321][T15624] CPU: 0 PID: 15624 Comm: syz.1.2530 Not tainted syzkaller #0
[  240.292762][T15624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  240.302806][T15624] Call Trace:
[  240.306158][T15624]  <TASK>
[  240.309086][T15624]  dump_stack_lvl+0x18c/0x250
[  240.313779][T15624]  ? load_image+0x400/0x400
[  240.318445][T15624]  ? show_regs_print_info+0x20/0x20
[  240.323671][T15624]  ? print_circular_bug+0x12b/0x1a0
[  240.329042][T15624]  check_noncircular+0x2fc/0x400
[  240.334142][T15624]  ? look_up_lock_class+0x75/0x140
[  240.339426][T15624]  ? print_deadlock_bug+0x5d0/0x5d0
[  240.344623][T15624]  ? lockdep_lock+0xf5/0x230
[  240.349926][T15624]  ? _find_first_zero_bit+0xd3/0x100
[  240.355583][T15624]  __lock_acquire+0x2df1/0x7d40
[  240.360658][T15624]  ? __lock_acquire+0x7d40/0x7d40
[  240.365678][T15624]  ? verify_lock_unused+0x140/0x140
[  240.371581][T15624]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  240.377219][T15624]  ? do_raw_spin_lock+0x11f/0x2c0
[  240.382263][T15624]  ? mutex_unlock+0x10/0x10
[  240.387037][T15624]  lock_acquire+0x19e/0x420
[  240.391541][T15624]  ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  240.397616][T15624]  ? ocfs2_get_system_file_inode+0x202/0x850
[  240.403614][T15624]  ? __might_sleep+0xe0/0xe0
[  240.408322][T15624]  ? read_lock_is_recursive+0x20/0x20
[  240.413739][T15624]  ? ocfs2_fast_symlink_read_folio+0x550/0x550
[  240.419890][T15624]  ? verify_lock_unused+0x140/0x140
[  240.425206][T15624]  ? check_noncircular+0x18a/0x400
[  240.430328][T15624]  down_write+0x97/0x200
[  240.434561][T15624]  ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  240.440635][T15624]  ? down_read_killable+0x340/0x340
[  240.445832][T15624]  ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  240.451726][T15624]  ? mark_lock+0x94/0x320
[  240.456050][T15624]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  240.462022][T15624]  ? lock_chain_count+0x20/0x20
[  240.466868][T15624]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  240.472749][T15624]  ? lockdep_hardirqs_on+0x98/0x150
[  240.477930][T15624]  ? ocfs2_block_group_search+0x470/0x470
[  240.483915][T15624]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  240.489808][T15624]  ? _raw_spin_unlock+0x40/0x40
[  240.494643][T15624]  ? stack_trace_save+0xaa/0x100
[  240.499561][T15624]  ? stack_trace_snprint+0xf0/0xf0
[  240.504668][T15624]  ? __stack_depot_save+0x560/0x630
[  240.509859][T15624]  ? kasan_set_track+0x5f/0x70
[  240.514609][T15624]  ? kasan_set_track+0x4e/0x70
[  240.519415][T15624]  ? __kasan_kmalloc+0x8f/0xa0
[  240.524199][T15624]  ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0
[  240.530789][T15624]  ? ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  240.536764][T15624]  ? ocfs2_xattr_set+0xc3f/0x13e0
[  240.541779][T15624]  ? ocfs2_set_acl+0x4e1/0x590
[  240.546536][T15624]  ? ocfs2_iop_set_acl+0x1b2/0x2b0
[  240.551641][T15624]  ? vfs_set_acl+0x803/0xa60
[  240.556228][T15624]  ? do_set_acl+0xf5/0x180
[  240.560750][T15624]  ? path_setxattr+0x41d/0x5d0
[  240.565617][T15624]  ? __x64_sys_setxattr+0xbb/0xd0
[  240.570652][T15624]  ? do_syscall_64+0x55/0xa0
[  240.575245][T15624]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  240.581355][T15624]  ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  240.587712][T15624]  ? ocfs2_init_steal_slots+0x160/0x160
[  240.593267][T15624]  ? ocfs2_xattr_block_set+0x2e30/0x2e30
[  240.598905][T15624]  ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  240.604550][T15624]  ? ocfs2_xattr_set+0xc05/0x13e0
[  240.609579][T15624]  ? ocfs2_prepare_refcount_xattr+0xff0/0xff0
[  240.615654][T15624]  ? ocfs2_truncate_log_needs_flush+0x130/0x310
[  240.621889][T15624]  ? ocfs2_remove_btree_range+0x15e0/0x15e0
[  240.627767][T15624]  ? down_write+0x16e/0x200
[  240.632260][T15624]  ? down_read_killable+0x340/0x340
[  240.637531][T15624]  ? up_write+0x1c3/0x410
[  240.641937][T15624]  ocfs2_xattr_set+0xc3f/0x13e0
[  240.646814][T15624]  ? __ocfs2_xattr_set_handle+0xf40/0xf40
[  240.652528][T15624]  ? __kasan_kmalloc+0x8f/0xa0
[  240.657368][T15624]  ? ocfs2_set_acl+0x11e/0x590
[  240.662138][T15624]  ? ocfs2_iop_set_acl+0x1b2/0x2b0
[  240.667236][T15624]  ? vfs_set_acl+0x803/0xa60
[  240.671816][T15624]  ? path_setxattr+0x41d/0x5d0
[  240.676572][T15624]  ? do_syscall_64+0x55/0xa0
[  240.681187][T15624]  ? ocfs2_set_acl+0x11e/0x590
[  240.685939][T15624]  ? rcu_is_watching+0x15/0xb0
[  240.690692][T15624]  ? ocfs2_set_acl+0x11e/0x590
[  240.695479][T15624]  ? __kmalloc+0xe2/0x230
[  240.699987][T15624]  ? ocfs2_inode_lock_atime+0x530/0x530
[  240.705524][T15624]  ocfs2_set_acl+0x4e1/0x590
[  240.710212][T15624]  ocfs2_iop_set_acl+0x1b2/0x2b0
[  240.715163][T15624]  ? ocfs2_xattr_get+0x260/0x260
[  240.720091][T15624]  ? evm_inode_set_acl+0xbc/0x430
[  240.725333][T15624]  ? down_read_killable+0x340/0x340
[  240.730612][T15624]  ? evm_revalidate_status+0x4f/0xb0
[  240.736149][T15624]  ? posix_acl_valid+0x352/0x3d0
[  240.741098][T15624]  vfs_set_acl+0x803/0xa60
[  240.745520][T15624]  do_set_acl+0xf5/0x180
[  240.749844][T15624]  path_setxattr+0x41d/0x5d0
[  240.754431][T15624]  ? simple_xattrs_free+0x150/0x150
[  240.759649][T15624]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  240.765728][T15624]  ? lock_chain_count+0x20/0x20
[  240.770580][T15624]  __x64_sys_setxattr+0xbb/0xd0
[  240.775443][T15624]  do_syscall_64+0x55/0xa0
[  240.779957][T15624]  ? clear_bhb_loop+0x40/0x90
[  240.784619][T15624]  ? clear_bhb_loop+0x40/0x90
[  240.789280][T15624]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  240.795183][T15624] RIP: 0033:0x7f239d59c799
[  240.799610][T15624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.819292][T15624] RSP: 002b:00007f239e505028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  240.827711][T15624] RAX: ffffffffffffffda RBX: 00007f239d815fa0 RCX: 00007f239d59c799
[  240.835665][T15624] RDX: 0000200000002b40 RSI: 0000200000002a40 RDI: 0000200000002a00
[  240.843623][T15624] RBP: 00007f239d632c99 R08: 0000000000000000 R09: 0000000000000000
[  240.851579][T15624] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[  240.859546][T15624] R13: 00007f239d816038 R14: 00007f239d815fa0 R15: 00007ffc05ed0488
[  240.867561][T15624]  </TASK>
[  240.877734][T15624] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total
[  240.898754][T15624] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  240.909804][T15624] OCFS2: File system is now read-only.
[  240.915285][T15624] (syz.1.2530,15624,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  240.924481][T15624] (syz.1.2530,15624,0):__ocfs2_claim_clusters:2365 ERROR: status = -30
[  240.934894][T15624] (syz.1.2530,15624,0):__ocfs2_claim_clusters:2373 ERROR: status = -30
[  240.943616][T15624] (syz.1.2530,15624,0):ocfs2_block_group_alloc_contig:433 ERROR: status = -30
[  240.953461][T15624] (syz.1.2530,15624,0):ocfs2_block_group_alloc:705 ERROR: status = -30
[  240.962306][ T5764] ocfs2: Unmounting device (7,2) on (node local)
[  240.968503][T15624] (syz.1.2530,15624,1):ocfs2_block_group_alloc:758 ERROR: status = -30
[  240.977047][T15624] (syz.1.2530,15624,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30
[  240.986111][T15624] (syz.1.2530,15624,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30
[  240.995127][T15624] (syz.1.2530,15624,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30
[  241.016240][T15624] (syz.1.2530,15624,1):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30
[  241.030829][T15624] (syz.1.2530,15624,1):ocfs2_init_xattr_set_ctxt:3280 ERROR: status = -30
[  241.040723][T15624] (syz.1.2530,15624,1):ocfs2_xattr_set:3637 ERROR: status = -30
[  241.063580][ T5767] ocfs2: Unmounting device (7,1) on (node local)