last executing test programs:

2.170354514s ago: executing program 1 (id=10845):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x1c880, &(0x7f0000000000)=ANY=[], 0xf9, 0x6075, &(0x7f00000084c0)="$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")
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)

1.591978278s ago: executing program 2 (id=10852):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e21}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0)

1.473299905s ago: executing program 2 (id=10854):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x2, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1.351777722s ago: executing program 2 (id=10856):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0)

1.21069308s ago: executing program 3 (id=10859):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x7, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x1}]}, 0x38}}, 0x0)

1.136806235s ago: executing program 0 (id=10860):
r0 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1, 0x1}, 0x8)

1.099496796s ago: executing program 2 (id=10861):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003f00)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5}}, 0x1c}}, 0x20000000)

1.050336869s ago: executing program 1 (id=10862):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x32315842, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x5}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x200, 0x17}], 0x7b, 0x2, 0x8, 0x2, 0x4}})

1.027776191s ago: executing program 3 (id=10863):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x2, &(0x7f0000000580)=[0x100d, 0x8004, 0x1, 0xffff, 0x9, 0x1ed, 0x2, 0x403, 0xbb, 0x2, 0x2070, 0xfec, 0xfffffffa, 0x1ac, 0xfffffff8], 0x0, 0x4})

901.836968ms ago: executing program 0 (id=10864):
r0 = socket(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000007000000440c0554"], 0x20}}], 0x1, 0x4000810)

886.265129ms ago: executing program 2 (id=10865):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$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")
creat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

867.35345ms ago: executing program 3 (id=10866):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x1)

847.783031ms ago: executing program 1 (id=10867):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

716.768419ms ago: executing program 0 (id=10868):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0xc050)

656.633832ms ago: executing program 3 (id=10869):
set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x8)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)

561.827708ms ago: executing program 1 (id=10870):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000016500000000c0a0103000080b708ef00000100000008000440000000000900010073797a30000000002800038024"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x0)

495.413202ms ago: executing program 0 (id=10871):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x400})

401.790367ms ago: executing program 3 (id=10872):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)

382.479748ms ago: executing program 0 (id=10873):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0)

271.420755ms ago: executing program 1 (id=10874):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}, @NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)

214.261048ms ago: executing program 0 (id=10875):
open(&(0x7f00009e1000)='./file0\x00', 0x88461, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="c2923b18c0d96e9b8b4c9f210ee20ad2cfeb7a1e7f193d9c1b01cfa77004af642732a2b92da1172f49e20339888c46c57cf45981203d0be9a3e921ccffe9f40c336be4149b0c891dc63b02b58b35d7223111e05cf2a7fb15189e1a3d0cd582291f0cf5e7e4d9da4b34a605dea0659a508b951003e6b13ae20877ee7b63d1221aa2f3e3d18cd441fd8e9c5e84fe216a59631830fe3cb10a11068fa8c9609d4ac22967681a1b8d5362e6d0de160739ca3f834b6a573e299ae8f429d25f406cdf9bebe584fc13bbd77624bc6f0eb430bc502148bfbbb363e7828698076039052fe09c1e2b4588e366", @ANYRESHEX=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="789224041933c87a9d3c72f8be7bbf98666a92566f89a8f28880bc71b5e886154832fcd53f3a1d6c131931d32b7bbd2f2de5249c80e0bdcfe3f49c2947a7f1e94f180d7248fbdd1bcfe472f446d66db80fe0f6f51db6d7d061f651b14dc51a8a4d068af7e5be1396e9f27a5a070a10cffe9b4a4667f33db63fdcd26744e7d22695473d27393e69b935b223096c4864a8ac910fa64dca515a1fe03bf5ba008649682ec874d12120a9ceacd21ccaafd66bc760362a2efef138b4d0a484daaefacc731c6b0cfdfd1d0462d76a8f69f2dee9cfbac3fef50b4306ad88cd2f862c6b9c69fee2811617"], 0x5, 0x6fe, &(0x7f0000000b00)="$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")

110.682464ms ago: executing program 3 (id=10876):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000006c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7f, 0x0, 0x1, 0x0, &(0x7f0000000600)='\x00', 0x0, 0x2, 0x0, 0x1}, 0x50)

89.619615ms ago: executing program 1 (id=10877):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000340)={[{@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlateno}, {@fat=@errors_remount}, {@fat=@nfs}, {@shortname_lower}, {@shortname_mixed}, {@shortname_lower}, {@fat=@umask={'umask', 0x3d, 0x11}}, {@utf8}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@utf8no}]}, 0x2a, 0x356, &(0x7f0000000780)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

0s ago: executing program 2 (id=10878):
r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7ffffffbfffffffd, 0x40a00)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x820, 0x2008, 0x3, 0x0, 0x0, 0x686, 0x1})

kernel console output (not intermixed with test programs):

1069.928460][T30735] team0: Port device bond0 added
[ 1069.999486][T30741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9378'.
[ 1070.118899][  T787] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1070.164776][T30748] ALSA: mixer_oss: invalid OSS volume ''
[ 1070.219297][T30755] loop2: detected capacity change from 0 to 512
[ 1070.227621][T30756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9383'.
[ 1070.230587][T30755] EXT4-fs: Ignoring removed nobh option
[ 1070.315549][T30755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1070.318603][  T787] usb 4-1: Using ep0 maxpacket: 8
[ 1070.394504][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1070.412574][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1070.429349][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1070.474562][  T787] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1070.500976][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1070.535497][  T787] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1070.569793][  T787] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1070.596621][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.613114][  T787] usb 4-1: config 0 descriptor??
[ 1070.623763][T30730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1070.935470][T30805] bridge2: entered promiscuous mode
[ 1070.946595][T30805] bridge2: entered allmulticast mode
[ 1071.085937][T18756] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[ 1071.087567][T30811] sctp: [Deprecated]: syz.0.9393 (pid 30811) Use of int in max_burst socket option deprecated.
[ 1071.087567][T30811] Use struct sctp_assoc_value instead
[ 1071.093545][ T5753] usb 4-1: USB disconnect, device number 121
[ 1071.408805][T30838] loop2: detected capacity change from 0 to 1024
[ 1071.435563][T30838] hfsplus: xattr searching failed
[ 1071.631678][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1071.749503][T30860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9402'.
[ 1071.775001][T30860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9402'.
[ 1071.837275][    T9] usb 1-1: Using ep0 maxpacket: 16
[ 1071.862983][    T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[ 1071.888755][    T9] usb 1-1: config 0 has no interface number 0
[ 1071.911212][    T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1071.938569][    T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1071.965216][    T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1071.985731][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1071.995090][    T9] usb 1-1: Product: syz
[ 1072.018294][    T9] usb 1-1: Manufacturer: syz
[ 1072.025184][T30873] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9405'.
[ 1072.026372][    T9] usb 1-1: SerialNumber: syz
[ 1072.055766][T30878] loop3: detected capacity change from 0 to 64
[ 1072.067800][T30879] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1072.076546][    T9] usb 1-1: config 0 descriptor??
[ 1072.086937][T30833] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1072.106861][T30833] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1072.108964][T30878] syz.3.9409: attempt to access beyond end of device
[ 1072.108964][T30878] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64
[ 1072.173019][T30878] Buffer I/O error on dev loop3, logical block 512, async page read
[ 1072.195975][T30878] syz.3.9409: attempt to access beyond end of device
[ 1072.195975][T30878] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64
[ 1072.220601][T30878] Buffer I/O error on dev loop3, logical block 56576, async page read
[ 1072.378855][T30833] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1072.394912][T30833] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1072.596472][T30906] loop2: detected capacity change from 0 to 1764
[ 1072.624211][    T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1072.659797][    T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[ 1072.681326][T30906] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1072.693176][    T9] asix: probe of 1-1:0.251 failed with error -5
[ 1072.711227][    T9] usb 1-1: USB disconnect, device number 4
[ 1072.765998][T30918] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1073.118796][T30942] netlink: 'syz.3.9423': attribute type 10 has an invalid length.
[ 1073.184930][T30942] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1073.207793][T30942] team0: Port device bond0 added
[ 1073.464563][T30966] loop1: detected capacity change from 0 to 512
[ 1073.551061][T30966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 1073.572423][T30975] netlink: 'syz.2.9433': attribute type 2 has an invalid length.
[ 1073.592946][T30975] netlink: 5356 bytes leftover after parsing attributes in process `syz.2.9433'.
[ 1073.606173][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1073.646650][T30966] __quota_error: 8 callbacks suppressed
[ 1073.646668][T30966] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[ 1073.666951][T30966] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1073.677218][T30966] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.9430: Failed to acquire dquot type 0
[ 1073.750304][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 1073.811732][    T9] usb 1-1: Using ep0 maxpacket: 8
[ 1073.824261][    T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 1073.839317][    T9] usb 1-1: config 179 has no interface number 0
[ 1073.859726][    T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1073.904204][    T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1073.929355][T30990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9437'.
[ 1073.935134][    T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 1073.976911][    T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 1073.998073][    T9] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1074.035615][    T9] usb 1-1: config 179 interface 65 has no altsetting 0
[ 1074.058144][T30994] ipip0: entered allmulticast mode
[ 1074.063523][    T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1074.085987][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1074.168276][    T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input68
[ 1074.242707][ T5123] input input68: unable to receive magic message: -110
[ 1074.296874][ T5123] input input68: unable to receive magic message: -32
[ 1074.363513][T31016] loop1: detected capacity change from 0 to 64
[ 1074.426683][ T5123] input input68: unable to receive magic message: -32
[ 1074.483460][ T5123] input input68: unable to receive magic message: -32
[ 1074.533287][ T5123] input input68: unable to receive magic message: -32
[ 1074.562483][ T5123] input input68: unable to receive magic message: -32
[ 1074.650835][  T967] usb 1-1: USB disconnect, device number 5
[ 1074.656754][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1074.681727][  T967] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1075.249450][T31063] netlink: 'syz.0.9451': attribute type 10 has an invalid length.
[ 1075.325438][T31069] loop2: detected capacity change from 0 to 16
[ 1075.344744][T31069] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1075.347357][T31063] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1075.381842][T31063] team0: Port device bond0 added
[ 1075.564457][T31083] loop0: detected capacity change from 0 to 8
[ 1075.571523][T31082] syz.2.9457: attempt to access beyond end of device
[ 1075.571523][T31082] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1075.634689][T31082] syz.2.9457: attempt to access beyond end of device
[ 1075.634689][T31082] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0
[ 1075.647958][T31083] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1075.647988][T31083] SQUASHFS error: Failed to read block 0x108: -5
[ 1075.648002][T31083] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1075.648014][T31083] SQUASHFS error: Unable to read inode 0x11f
[ 1075.684177][T31082] Mount JFS Failure: -5
[ 1075.702426][T31082] jfs_mount failed w/return code = -5
[ 1075.750850][T22526] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1076.025770][T31114] loop1: detected capacity change from 0 to 1024
[ 1076.141513][ T5753] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1076.166373][T31122] loop1: detected capacity change from 0 to 512
[ 1076.194056][T31127] netlink: 'syz.2.9469': attribute type 10 has an invalid length.
[ 1076.203080][T31127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9469'.
[ 1076.213004][T31127] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[ 1076.222982][T31127] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[ 1076.226098][T31122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1076.233004][T31127] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1076.262900][  T967] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 1076.288993][T31122] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:335: inode #15: comm syz.1.9468: verity file corrupted; can't find descriptor
[ 1076.317123][T31122] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size
[ 1076.356726][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1076.367582][ T5753] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1076.386093][T31133] loop2: detected capacity change from 0 to 512
[ 1076.392453][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024
[ 1076.405003][T31133] EXT4-fs: Ignoring removed bh option
[ 1076.411464][ T5753] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1076.424240][ T5753] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 1076.444940][T31133] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1076.454873][  T967] usb 4-1: Using ep0 maxpacket: 16
[ 1076.460992][ T5753] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 1076.470932][T31133] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 1076.485678][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1076.495118][ T5753] usb 1-1: Manufacturer: syz
[ 1076.502200][  T967] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1076.515558][ T5753] usb 1-1: config 0 descriptor??
[ 1076.520769][  T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.529673][T31083] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1076.538345][T31133] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[ 1076.549828][  T967] usb 4-1: Product: syz
[ 1076.554103][  T967] usb 4-1: Manufacturer: syz
[ 1076.559221][T31133] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[ 1076.573117][T31133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1076.579042][ T5753] smsusb:smsusb_probe: board id=9, interface number 0
[ 1076.625010][  T967] usb 4-1: SerialNumber: syz
[ 1076.642899][  T967] r8152-cfgselector 4-1: config 0 descriptor??
[ 1076.660020][T31133] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #12: block 32: comm syz.2.9470: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0
[ 1076.693397][ T5753] smsusb:siano_media_device_register: media controller created
[ 1076.716440][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.723827][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.731163][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.738504][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.745835][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.756701][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.766189][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.773479][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.780729][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.787966][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.795537][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.802849][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.810141][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.817435][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.824732][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.848168][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.855499][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.862800][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.870085][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.877386][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.886664][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.893976][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.901489][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.909099][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.916396][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.923665][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.930902][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.938138][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.945706][ T5753] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[ 1076.955809][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.955910][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.955995][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.956081][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.956162][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 1076.973481][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1076.978562][ T5753] smsmdtv:smscore_set_device_mode: mode detect failed -22
[ 1076.978580][ T5753] smsmdtv:smscore_start_device: set device mode failed , rc -22
[ 1076.978593][ T5753] smsusb:smsusb_init_device: smscore_start_device(...) failed
[ 1076.984319][ T5753] smsusb:smsusb_probe: Device initialized with return code -22
[ 1077.033807][  T967] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[ 1077.169012][ T5753] smsusb: probe of 1-1:0.0 failed with error -22
[ 1077.196115][ T1076] usb 4-1: config 0 descriptor??
[ 1077.199905][ T5753] usb 1-1: USB disconnect, device number 6
[ 1077.216127][ T5813] usb 4-1: USB disconnect, device number 122
[ 1077.548315][T31149] loop1: detected capacity change from 0 to 40427
[ 1077.566199][T31149] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[ 1077.573889][T31149] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1077.626538][T31149] F2FS-fs (loop1): invalid crc value
[ 1077.663071][T31149] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1077.821191][T31149] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1077.853197][T31149] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 1078.141081][T31213] netlink: 424 bytes leftover after parsing attributes in process `syz.2.9485'.
[ 1078.203001][T31213] netlink: 'syz.2.9485': attribute type 1 has an invalid length.
[ 1078.575378][T31232] netlink: 'syz.3.9491': attribute type 21 has an invalid length.
[ 1078.591189][T31232] netlink: 'syz.3.9491': attribute type 1 has an invalid length.
[ 1078.952714][T31249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1078.960850][T31249] IPv6: NLM_F_CREATE should be set when creating new route
[ 1079.182905][T31227] loop1: detected capacity change from 0 to 32768
[ 1079.234591][T31227] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1079.262172][T31227] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1079.292656][T31227] BTRFS info (device loop1): using free space tree
[ 1079.361867][T31266] loop3: detected capacity change from 0 to 16
[ 1079.371295][T31266] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1079.394349][ T5764] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000]
[ 1079.429243][T31266] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192]
[ 1079.443899][   T28] audit: type=1800 audit(973083925.186:134): pid=31266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9502" name="file2" dev="loop3" ino=89 res=0 errno=0
[ 1079.604430][T31227] BTRFS info (device loop1): enabling ssd optimizations
[ 1079.624111][T31227] BTRFS info (device loop1): auto enabling async discard
[ 1079.704388][T31204] loop0: detected capacity change from 0 to 40435
[ 1079.739964][T31204] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (16843008)
[ 1079.792021][T31204] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[ 1079.800311][T31204] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff
[ 1079.835429][ T5763] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1080.313765][ T5813] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1080.513850][ T5813] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1080.537532][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1080.562772][ T5813] usb 1-1: Product: syz
[ 1080.598456][ T5813] usb 1-1: Manufacturer: syz
[ 1080.617716][ T5813] usb 1-1: SerialNumber: syz
[ 1080.669206][ T5813] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1080.710941][  T787] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1080.752037][T31347] netlink: 'syz.1.9519': attribute type 1 has an invalid length.
[ 1080.768419][T31347] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9519'.
[ 1081.295680][ T5851] usb 1-1: USB disconnect, device number 7
[ 1081.424625][T31379] bridge2: entered promiscuous mode
[ 1081.592212][T31390] loop1: detected capacity change from 0 to 8
[ 1081.604029][T31390] MTD: Attempt to mount non-MTD device "/dev/loop1"
[ 1081.615178][T22526] udevd[22526]: incorrect cramfs checksum on /dev/loop1
[ 1081.634203][T31390] cramfs: Error -3 while decompressing!
[ 1081.646639][T31390] cramfs: ffffffff973f3368(26)->ffff88804cbc0000(4096)
[ 1081.653570][T31390] cramfs: Error -3 while decompressing!
[ 1081.679075][T31390] cramfs: ffffffff973f3382(26)->ffff888056f4a000(4096)
[ 1081.696903][T31390] cramfs: Error -3 while decompressing!
[ 1081.706625][T31390] cramfs: ffffffff973f339c(16)->ffff88804d4a7000(4096)
[ 1081.720678][T31390] cramfs: Error -3 while decompressing!
[ 1081.721087][  T787] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 1081.733622][T31390] cramfs: ffffffff973f3368(26)->ffff88804cbc0000(4096)
[ 1081.767982][  T787] ath9k_htc: Failed to initialize the device
[ 1081.803131][ T5851] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1081.866286][T31403] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1082.098436][T31412] netlink: 'syz.0.9536': attribute type 1 has an invalid length.
[ 1082.173939][T31383] loop2: detected capacity change from 0 to 32768
[ 1082.255355][T31383] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1082.436778][T31446] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1082.513442][T31383] XFS (loop2): Ending clean mount
[ 1082.555586][T31383] XFS (loop2): Quotacheck needed: Please wait.
[ 1082.682106][T31383] XFS (loop2): Quotacheck: Done.
[ 1082.820839][T31460] geneve3: entered promiscuous mode
[ 1082.882711][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1082.935290][T31492] netlink: 'syz.1.9554': attribute type 21 has an invalid length.
[ 1082.944948][T31492] netlink: 'syz.1.9554': attribute type 15 has an invalid length.
[ 1082.954598][T31492] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9554'.
[ 1082.987963][T31492] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1083.021539][T31492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1083.028921][T31492] IPv6: NLM_F_CREATE should be set when creating new route
[ 1083.036262][T31492] IPv6: NLM_F_CREATE should be set when creating new route
[ 1083.043507][T31492] IPv6: NLM_F_CREATE should be set when creating new route
[ 1083.066432][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1083.112553][T31498] x_tables: unsorted underflow at hook 3
[ 1083.419920][T31512] loop0: detected capacity change from 0 to 2048
[ 1083.456394][T31515] IPv6: Can't replace route, no match found
[ 1083.488966][T31512] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1083.751691][T31534] netlink: 'syz.1.9564': attribute type 10 has an invalid length.
[ 1083.791413][T31534] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9564'.
[ 1083.838879][T31539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9567'.
[ 1083.959931][T31541] netlink: 'syz.0.9566': attribute type 3 has an invalid length.
[ 1083.992037][T31541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1084.309239][T31571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9576'.
[ 1084.393103][T31580] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9579'.
[ 1084.422181][T31580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1084.460978][T31580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1084.483736][T31580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1084.494712][T31580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1084.505541][T31580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1084.532583][T31580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1084.544165][T31580] batadv_slave_1: entered promiscuous mode
[ 1084.563865][T31578] bond0: (slave bond_slave_1): Releasing backup interface
[ 1084.648876][T31592] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9583'.
[ 1084.952749][T31610] loop0: detected capacity change from 0 to 8
[ 1085.006509][T31610] SQUASHFS error: Unknown inode type 257 in squashfs_iget!
[ 1085.208471][T31630] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1085.651486][   T28] audit: type=1326 audit(973083931.842:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31665 comm="syz.0.9606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80be79aeb9 code=0x7ffc0000
[ 1085.725359][   T28] audit: type=1326 audit(973083931.842:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31665 comm="syz.0.9606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80be79aeb9 code=0x7ffc0000
[ 1085.761473][   T28] audit: type=1326 audit(973083931.842:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31665 comm="syz.0.9606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f80be79aeb9 code=0x7ffc0000
[ 1085.894086][ T5753] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1085.926115][T31680] loop2: detected capacity change from 0 to 1024
[ 1085.936197][   T28] audit: type=1326 audit(973083932.142:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31665 comm="syz.0.9606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80be79aeb9 code=0x7ffc0000
[ 1085.992320][   T28] audit: type=1326 audit(973083932.142:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31665 comm="syz.0.9606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80be79aeb9 code=0x7ffc0000
[ 1086.014593][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1086.058027][T31687] kAFS: No cell specified
[ 1086.080611][ T5753] usb 2-1: Using ep0 maxpacket: 32
[ 1086.093964][ T5753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1086.115661][ T3530] hfsplus: b-tree write err: -5, ino 4
[ 1086.122474][ T5753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1086.170323][ T5753] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1086.225277][ T5753] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1086.244381][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1086.266782][ T5753] usb 2-1: Product: syz
[ 1086.285458][ T5753] usb 2-1: Manufacturer: syz
[ 1086.290113][ T5753] usb 2-1: SerialNumber: syz
[ 1086.321673][ T5753] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input69
[ 1086.646096][ T5753] usb 2-1: USB disconnect, device number 108
[ 1086.719075][ T5753] appletouch 2-1:1.0: input: appletouch disconnected
[ 1086.850014][T31743] netlink: 'syz.3.9624': attribute type 10 has an invalid length.
[ 1086.863211][T31743] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9624'.
[ 1087.176691][T31760] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9629'.
[ 1087.419599][T31778] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9636'.
[ 1087.514912][   T28] audit: type=1326 audit(973083933.849:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31782 comm="syz.2.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba79aeb9 code=0x7ffc0000
[ 1087.537232][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1087.608284][   T28] audit: type=1326 audit(973083933.849:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31782 comm="syz.2.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba79aeb9 code=0x7ffc0000
[ 1087.672396][   T28] audit: type=1326 audit(973083933.892:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31782 comm="syz.2.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fa5ba79aeb9 code=0x7ffc0000
[ 1087.697910][T31792] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 1087.741000][T31792] overlayfs: missing 'lowerdir'
[ 1087.746035][   T28] audit: type=1326 audit(973083933.892:143): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=31782 comm="syz.2.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba79aeb9 code=0x7ffc0000
[ 1087.776013][T31799] netlink: 'syz.3.9642': attribute type 1 has an invalid length.
[ 1087.824273][   T28] audit: type=1326 audit(973083933.892:144): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=31782 comm="syz.2.9637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ba79aeb9 code=0x7ffc0000
[ 1087.850619][T31793] loop1: detected capacity change from 0 to 4096
[ 1087.927800][T31793] ntfs: volume version 3.1.
[ 1088.460784][T31830] tipc: Trying to set illegal importance in message
[ 1089.339710][T31877] libceph: resolve 'c' (ret=-3): failed
[ 1089.757688][T31904] netlink: 'syz.2.9675': attribute type 1 has an invalid length.
[ 1089.801915][T31909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9677'.
[ 1089.815812][T31904] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.9675'.
[ 1089.825899][T31909] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1089.994225][ T5764] Bluetooth: hci0: command 0x0406 tx timeout
[ 1091.006988][T32018] loop2: detected capacity change from 0 to 256
[ 1091.158827][T32018] FAT-fs (loop2): Directory bread(block 64) failed
[ 1091.186983][T32018] FAT-fs (loop2): Directory bread(block 65) failed
[ 1091.193722][T32018] FAT-fs (loop2): Directory bread(block 66) failed
[ 1091.216123][T32018] FAT-fs (loop2): Directory bread(block 67) failed
[ 1091.232266][T32018] FAT-fs (loop2): Directory bread(block 68) failed
[ 1091.240377][T32018] FAT-fs (loop2): Directory bread(block 69) failed
[ 1091.247449][T32018] FAT-fs (loop2): Directory bread(block 70) failed
[ 1091.256615][T32018] FAT-fs (loop2): Directory bread(block 71) failed
[ 1091.268228][T32018] FAT-fs (loop2): Directory bread(block 72) failed
[ 1091.284461][T32018] FAT-fs (loop2): Directory bread(block 73) failed
[ 1091.532392][T32055] loop0: detected capacity change from 0 to 2048
[ 1091.579049][T32055] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[ 1091.596537][T32063] loop3: detected capacity change from 0 to 256
[ 1091.645897][T32055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1091.649390][T32063] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[ 1091.655161][  T967] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1091.837828][  T967] usb 2-1: Using ep0 maxpacket: 32
[ 1091.850620][  T967] usb 2-1: config 0 has an invalid interface number: 119 but max is 0
[ 1091.887623][  T967] usb 2-1: config 0 has no interface number 0
[ 1091.918663][  T967] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19
[ 1091.938896][  T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.955326][  T967] usb 2-1: Product: syz
[ 1091.960391][  T967] usb 2-1: Manufacturer: syz
[ 1091.965084][  T967] usb 2-1: SerialNumber: syz
[ 1091.987981][  T967] usb 2-1: config 0 descriptor??
[ 1092.006384][  T967] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[ 1092.071189][T32087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9717'.
[ 1092.091497][T32087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9717'.
[ 1092.399967][T32100] loop3: detected capacity change from 0 to 4096
[ 1092.407528][  T967] gspca_sn9c2028: read1 error -71
[ 1092.419988][  T967] gspca_sn9c2028: read1 error -71
[ 1092.434587][  T967] sn9c2028: probe of 2-1:0.119 failed with error -71
[ 1092.467158][  T967] usb 2-1: USB disconnect, device number 109
[ 1092.543991][T32100] ntfs3: loop3: MFT: r=b, expect seq=b instead of 1ff!
[ 1092.561467][T32100] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1092.580609][T32100] ntfs3: loop3: Failed to load $Extend (-22).
[ 1092.597043][T32100] ntfs3: loop3: Failed to initialize $Extend.
[ 1092.910143][T32141] netlink: 'syz.2.9731': attribute type 5 has an invalid length.
[ 1093.339402][T32170] loop0: detected capacity change from 0 to 16
[ 1093.373626][T32170] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1093.560830][T32186] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[ 1093.571366][T32186] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[ 1093.595036][T32186] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1094.082846][ T5828] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1094.311795][ T5828] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1094.338244][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.351410][ T5828] usb 1-1: Product: syz
[ 1094.358103][ T5828] usb 1-1: Manufacturer: syz
[ 1094.363185][ T5828] usb 1-1: SerialNumber: syz
[ 1094.399849][  T967] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1094.483144][T32252] netlink: 'syz.1.9763': attribute type 1 has an invalid length.
[ 1094.499124][T32252] netlink: 216 bytes leftover after parsing attributes in process `syz.1.9763'.
[ 1094.509728][T32252] NCSI netlink: No device for ifindex 0
[ 1094.617009][  T967] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1094.620293][T32261] ieee802154 phy1 wpan1: encryption failed: -22
[ 1094.633189][  T967] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1094.642880][  T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.664055][  T967] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 1094.802891][ T5828] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[ 1094.837142][ T5828] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[ 1094.853635][ T5753] usb 4-1: new full-speed USB device number 123 using dummy_hcd
[ 1094.872964][ T5828] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[ 1094.894365][ T5828] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1094.908882][ T5828] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1094.920372][ T5828] lan78xx: probe of 1-1:1.0 failed with error -71
[ 1094.940582][ T5828] usb 1-1: USB disconnect, device number 8
[ 1094.986411][T32285] netlink: 'syz.1.9770': attribute type 46 has an invalid length.
[ 1094.995564][T32285] netlink: 'syz.1.9770': attribute type 19 has an invalid length.
[ 1095.004827][T32285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9770'.
[ 1095.044615][ T5753] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1095.061692][ T5753] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1095.073979][ T5753] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1095.083578][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1095.091932][ T5753] usb 4-1: SerialNumber: syz
[ 1095.103095][ T5753] usb 4-1: 0:2 : does not exist
[ 1095.236775][T32294] loop1: detected capacity change from 0 to 1024
[ 1095.274106][T32294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1095.346857][T32294] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.9772: Attempting to read directory block (623) that is past i_size (638464)
[ 1095.374422][T32294] EXT4-fs (loop1): Remounting filesystem read-only
[ 1095.441793][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1095.478186][T32309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9773'.
[ 1095.496624][ T5826] usb 4-1: USB disconnect, device number 123
[ 1095.614276][T32324] loop1: detected capacity change from 0 to 256
[ 1095.655203][T32324] FAT-fs (loop1): Directory bread(block 64) failed
[ 1095.664922][  T967] stv0680 3-1:4.0: STV(e): camera ping failed!!
[ 1095.673939][T32324] FAT-fs (loop1): Directory bread(block 65) failed
[ 1095.686892][T32324] FAT-fs (loop1): Directory bread(block 66) failed
[ 1095.693586][T32324] FAT-fs (loop1): Directory bread(block 67) failed
[ 1095.716817][T32324] FAT-fs (loop1): Directory bread(block 68) failed
[ 1095.725865][T32324] FAT-fs (loop1): Directory bread(block 69) failed
[ 1095.728729][T32330] loop0: detected capacity change from 0 to 64
[ 1095.733141][T32324] FAT-fs (loop1): Directory bread(block 70) failed
[ 1095.746285][T32324] FAT-fs (loop1): Directory bread(block 71) failed
[ 1095.755129][T32324] FAT-fs (loop1): Directory bread(block 72) failed
[ 1095.767223][T32324] FAT-fs (loop1): Directory bread(block 73) failed
[ 1095.858946][  T967] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[ 1095.882119][  T967] stv0680 3-1:4.0: last error: 86,  command = 0x70
[ 1095.911898][  T967] usb 3-1: USB disconnect, device number 114
[ 1096.121039][T32354] netlink: 'syz.0.9781': attribute type 46 has an invalid length.
[ 1096.135429][T32354] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9781'.
[ 1096.598485][ T5851] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1096.723052][T32359] loop3: detected capacity change from 0 to 32768
[ 1096.784849][ T5851] usb 2-1: Using ep0 maxpacket: 8
[ 1096.792106][T32359] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1096.819866][ T5851] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1096.856396][ T5851] usb 2-1: config 179 has no interface number 0
[ 1096.879071][ T5851] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1096.946940][ T5851] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1096.990959][T32409] loop0: detected capacity change from 0 to 8
[ 1097.005695][T32359] XFS (loop3): Ending clean mount
[ 1097.022310][ T5851] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 1097.064587][ T5851] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 1097.118576][ T5851] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1097.167138][ T5851] usb 2-1: config 179 interface 65 has no altsetting 0
[ 1097.191767][ T5808] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[ 1097.193253][ T5851] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1097.230108][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1097.283022][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1097.316434][ T5851] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input74
[ 1097.372103][ T5123] input input74: unable to receive magic message: -110
[ 1097.441297][ T5123] input input74: unable to receive magic message: -32
[ 1097.511679][  T787] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1097.565358][T22603] input input74: unable to receive magic message: -32
[ 1097.598748][T32439] loop0: detected capacity change from 0 to 256
[ 1097.635013][ T5123] input input74: unable to receive magic message: -32
[ 1097.684551][ T5123] input input74: unable to receive magic message: -32
[ 1097.723111][ T5123] input input74: unable to receive magic message: -32
[ 1097.731338][  T787] usb 3-1: Using ep0 maxpacket: 8
[ 1097.742570][  T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1097.761816][  T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1097.774371][  T787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1097.814801][  T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1097.844662][  T787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1097.861159][ T5851] usb 2-1: USB disconnect, device number 110
[ 1097.867338][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1097.899791][ T5851] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1097.911561][  T787] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1097.931156][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1097.963435][  T787] usb 3-1: config 0 descriptor??
[ 1097.992389][T32420] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1098.321470][T32479] loop3: detected capacity change from 0 to 8192
[ 1098.348987][T32479] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1098.362567][T32479] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[ 1098.372401][T32479] REISERFS (device loop3): using ordered data mode
[ 1098.379145][T32479] reiserfs: using flush barriers
[ 1098.386370][T32479] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1098.404191][T32479] REISERFS (device loop3): checking transaction log (loop3)
[ 1098.415003][T32479] REISERFS (device loop3): Using r5 hash to sort names
[ 1098.422531][T32479] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[ 1098.481958][  T787] usb 3-1: USB disconnect, device number 115
[ 1098.484438][ T5764] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[ 1098.529730][T32490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9808'.
[ 1099.134339][T32533] loop1: detected capacity change from 0 to 256
[ 1099.144137][T32533] exfat: Deprecated parameter 'utf8'
[ 1099.156940][T32533] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[ 1099.178996][T32537] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9818'.
[ 1099.206967][T32539] loop2: detected capacity change from 0 to 8
[ 1099.226731][T32533] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[ 1099.332109][T32545] loop3: detected capacity change from 0 to 256
[ 1099.476150][T32545] FAT-fs (loop3): Directory bread(block 64) failed
[ 1099.509176][T32554] loop0: detected capacity change from 0 to 1024
[ 1099.521081][T32545] FAT-fs (loop3): Directory bread(block 65) failed
[ 1099.542222][T32545] FAT-fs (loop3): Directory bread(block 66) failed
[ 1099.586914][T32545] FAT-fs (loop3): Directory bread(block 67) failed
[ 1099.626583][T32545] FAT-fs (loop3): Directory bread(block 68) failed
[ 1099.639055][ T2995] hfsplus: b-tree write err: -5, ino 4
[ 1099.645056][T32545] FAT-fs (loop3): Directory bread(block 69) failed
[ 1099.682060][T32545] FAT-fs (loop3): Directory bread(block 70) failed
[ 1099.703568][T32545] FAT-fs (loop3): Directory bread(block 71) failed
[ 1099.710331][T32545] FAT-fs (loop3): Directory bread(block 72) failed
[ 1099.727592][T32545] FAT-fs (loop3): Directory bread(block 73) failed
[ 1100.031465][T32587] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9832'.
[ 1100.057871][T32587] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1100.067679][T32589] overlayfs: conflicting options: nfs_export=on,index=off
[ 1100.528439][T32619] loop1: detected capacity change from 0 to 256
[ 1100.535734][ T5753] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1100.578725][T32619] FAT-fs (loop1): Directory bread(block 64) failed
[ 1100.585386][T32619] FAT-fs (loop1): Directory bread(block 65) failed
[ 1100.591574][T32581] loop2: detected capacity change from 0 to 32768
[ 1100.596311][T32619] FAT-fs (loop1): Directory bread(block 66) failed
[ 1100.609625][T32619] FAT-fs (loop1): Directory bread(block 67) failed
[ 1100.617185][T32619] FAT-fs (loop1): Directory bread(block 68) failed
[ 1100.629576][T32619] FAT-fs (loop1): Directory bread(block 69) failed
[ 1100.643795][T32581] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.9829 (32581)
[ 1100.644567][T32619] FAT-fs (loop1): Directory bread(block 70) failed
[ 1100.659516][T32616] loop3: detected capacity change from 0 to 4096
[ 1100.690032][T32581] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1100.701315][T32619] FAT-fs (loop1): Directory bread(block 71) failed
[ 1100.717370][T32581] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1100.726034][T32619] FAT-fs (loop1): Directory bread(block 72) failed
[ 1100.728146][T32581] BTRFS info (device loop2): force zlib compression, level 3
[ 1100.736990][ T5753] usb 1-1: Using ep0 maxpacket: 8
[ 1100.741230][T32581] BTRFS info (device loop2): turning on flush-on-commit
[ 1100.763158][T32619] FAT-fs (loop1): Directory bread(block 73) failed
[ 1100.775137][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1100.796594][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1100.798257][T32581] BTRFS info (device loop2): max_inline at 4096
[ 1100.841604][ T5753] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1100.858966][T32581] BTRFS info (device loop2): using free space tree
[ 1100.863464][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1100.903010][ T5753] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1100.940024][ T5753] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1100.960016][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1100.981966][ T5753] usb 1-1: config 0 descriptor??
[ 1100.997139][T32600] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1101.075244][T32581] BTRFS info (device loop2): enabling ssd optimizations
[ 1101.145108][T32581] BTRFS info (device loop2): auto enabling async discard
[ 1101.346271][T32659] xt_hashlimit: invalid interval
[ 1101.515235][ T5772] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1101.841850][ T5764] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[ 1101.854598][ T5808] usb 1-1: USB disconnect, device number 9
[ 1101.951884][T32688] netlink: 'syz.3.9849': attribute type 1 has an invalid length.
[ 1101.966335][T22603] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop2 scanned by udevd (22603)
[ 1101.986956][T32688] netlink: 'syz.3.9849': attribute type 2 has an invalid length.
[ 1102.715902][T32732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9862'.
[ 1103.147779][  T787] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1103.202591][T32756] tmpfs: Bad value for 'mpol'
[ 1103.348742][T32742] loop2: detected capacity change from 0 to 32768
[ 1103.363076][  T787] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1103.394190][  T787] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1103.410464][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.414841][T32765] loop1: detected capacity change from 0 to 1024
[ 1103.420237][  T787] usb 1-1: Product: syz
[ 1103.430772][  T787] usb 1-1: Manufacturer: syz
[ 1103.474851][  T787] usb 1-1: SerialNumber: syz
[ 1103.482005][T32765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1103.497400][  T787] usb 1-1: config 0 descriptor??
[ 1103.526855][  T787] snd-usb-audio: probe of 1-1:0.0 failed with error -22
[ 1103.598997][T32765] EXT4-fs error (device loop1): ext4_get_first_dir_block:3606: inode #11: comm syz.1.9874: directory missing '..'
[ 1103.648207][T22603] udevd[22603]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1103.803734][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1103.912950][ T5851] usb 1-1: USB disconnect, device number 10
[ 1103.937657][  T325] loop2: detected capacity change from 0 to 2048
[ 1103.961879][  T325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1104.138996][  T340] netlink: 'syz.3.9878': attribute type 4 has an invalid length.
[ 1104.288216][  T350] bridge3: entered promiscuous mode
[ 1104.310966][  T354] loop2: detected capacity change from 0 to 8
[ 1104.335003][  T354] SQUASHFS error: Unknown inode type 257 in squashfs_iget!
[ 1105.114263][ T5826] usb 2-1: new full-speed USB device number 111 using dummy_hcd
[ 1105.153910][  T395] kcapi: manufacturer command 52776558133248 unknown.
[ 1105.178011][  T362] loop2: detected capacity change from 0 to 32768
[ 1105.222888][  T362] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1105.297412][  T362] XFS (loop2): Ending clean mount
[ 1105.302133][ T5826] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1105.340629][ T5826] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1105.365560][  T410] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1105.373006][  T410] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1105.400857][ T5826] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1105.412001][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1105.413807][ T5808] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[ 1105.435221][ T5826] usb 2-1: SerialNumber: syz
[ 1105.459097][ T5772] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1105.479240][ T5826] usb 2-1: 0:2 : does not exist
[ 1105.612287][  T418] loop0: detected capacity change from 0 to 8192
[ 1105.640266][  T418] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1105.685999][  T418] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 1105.695709][  T418] REISERFS (device loop0): using ordered data mode
[ 1105.704605][  T418] reiserfs: using flush barriers
[ 1105.718939][  T418] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1105.763999][  T418] REISERFS (device loop0): checking transaction log (loop0)
[ 1105.804616][  T418] REISERFS (device loop0): Using r5 hash to sort names
[ 1105.822279][  T418] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 1105.936454][ T5753] usb 2-1: USB disconnect, device number 111
[ 1106.269101][ T5851] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1106.455657][ T5851] usb 4-1: Using ep0 maxpacket: 8
[ 1106.494095][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1106.540938][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1106.565521][ T5851] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1106.613921][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1106.660002][ T5851] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1106.697441][ T5851] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1106.725652][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1106.754868][ T5851] usb 4-1: config 0 descriptor??
[ 1106.761591][  T436] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1106.809437][ T5808] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1107.023427][ T5808] usb 2-1: Using ep0 maxpacket: 8
[ 1107.034774][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1107.063622][ T5808] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[ 1107.083118][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1107.106918][ T5808] usb 2-1: Product: syz
[ 1107.111291][ T5808] usb 2-1: Manufacturer: syz
[ 1107.115948][ T5808] usb 2-1: SerialNumber: syz
[ 1107.139822][ T5808] usb 2-1: config 0 descriptor??
[ 1107.156381][ T5808] gspca_main: stk014-2.14.0 probing 05e1:0893
[ 1107.172196][ T5808] usb 2-1: selecting invalid altsetting 1
[ 1107.314656][  T468] loop0: detected capacity change from 0 to 32768
[ 1107.375511][T18756] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[ 1107.376639][  T787] usb 4-1: USB disconnect, device number 124
[ 1107.396436][  T468] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1107.473774][  T468] XFS (loop0): Ending clean mount
[ 1107.573425][  T967] usb 2-1: USB disconnect, device number 112
[ 1107.720560][ T5808] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[ 1107.762547][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1107.772466][  T519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9908'.
[ 1108.060325][  T530] random: crng reseeded on system resumption
[ 1108.368740][  T540] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1108.379913][  T540] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1108.404961][  T540] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1108.728240][ T5808] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1108.933399][ T5808] usb 3-1: Using ep0 maxpacket: 8
[ 1108.940733][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1108.960919][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1108.980484][ T5808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1109.007981][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1109.039016][ T5808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1109.056133][  T570] loop0: detected capacity change from 0 to 8192
[ 1109.062707][ T5808] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1109.081508][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1109.082148][  T570] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1109.108383][ T5808] usb 3-1: config 0 descriptor??
[ 1109.129925][  T545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1109.145706][  T553] loop1: detected capacity change from 0 to 32768
[ 1109.160492][  T570] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 1109.172280][  T570] REISERFS (device loop0): using journaled data mode
[ 1109.180254][  T570] reiserfs: using flush barriers
[ 1109.203166][  T570] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1109.245277][  T570] REISERFS (device loop0): checking transaction log (loop0)
[ 1109.262871][  T570] REISERFS (device loop0): Using r5 hash to sort names
[ 1109.286459][  T570] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[ 1109.292561][  T553] jfs_strtoUCS: char2uni returned -22.
[ 1109.312057][  T590] x_tables: unsorted underflow at hook 4
[ 1109.325520][  T570] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 1109.373607][  T553] charset = cp936, char = 0xd4
[ 1109.577157][  T594] random: crng reseeded on system resumption
[ 1109.627283][  T597] netlink: 'syz.3.9927': attribute type 3 has an invalid length.
[ 1109.727607][  T967] usb 3-1: USB disconnect, device number 116
[ 1109.736520][ T5764] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[ 1110.105218][  T621] loop3: detected capacity change from 0 to 512
[ 1110.119659][  T621] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[ 1110.137869][  T621] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 1110.151011][  T621] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 1110.183870][  T621] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 1110.224130][  T621] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080]
[ 1110.245521][  T621] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1110.263824][  T621] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.9932: bg 0: block 34: padding at end of block bitmap is not set
[ 1110.311570][  T621] __quota_error: 7 callbacks suppressed
[ 1110.311586][  T621] Quota error (device loop3): write_blk: dquota write failed
[ 1110.370005][  T621] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[ 1110.400821][  T621] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.9932: Failed to acquire dquot type 1
[ 1110.477370][  T621] EXT4-fs (loop3): 1 truncate cleaned up
[ 1110.495721][  T621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1110.527562][  T646] loop0: detected capacity change from 0 to 8
[ 1110.572803][  T648] loop2: detected capacity change from 0 to 256
[ 1110.611797][  T646] SQUASHFS error: Unable to read directory block [26067d:ffff]
[ 1110.677956][  T621] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 1110.705644][  T621] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080]
[ 1110.841529][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1111.203832][  T693] loop0: detected capacity change from 0 to 512
[ 1111.220661][  T692] loop3: detected capacity change from 0 to 256
[ 1111.266505][  T693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1111.319687][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1111.886611][  T703] loop1: detected capacity change from 0 to 32768
[ 1111.925809][  T703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.9953 (703)
[ 1111.965583][  T703] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1111.990221][  T703] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1112.017147][  T703] BTRFS info (device loop1): using free space tree
[ 1112.195285][  T703] BTRFS info (device loop1): enabling ssd optimizations
[ 1112.211315][  T703] BTRFS info (device loop1): auto enabling async discard
[ 1112.356580][ T5763] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1112.437859][  T787] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1112.617054][  T787] usb 1-1: Using ep0 maxpacket: 32
[ 1112.636899][  T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1112.671329][  T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1112.672489][  T789] loop1: detected capacity change from 0 to 512
[ 1112.681922][  T787] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1112.727745][  T787] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1112.750790][  T787] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1112.760281][  T787] usb 1-1: Product: syz
[ 1112.765062][  T789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1112.770089][  T787] usb 1-1: Manufacturer: syz
[ 1112.805630][  T787] usb 1-1: SerialNumber: syz
[ 1112.851615][  T787] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input76
[ 1112.898720][  T789] EXT4-fs error (device loop1): ext4_get_first_dir_block:3584: inode #12: comm syz.1.9972: Attempting to read directory block (0) that is past i_size (3)
[ 1112.932486][  T789] EXT4-fs (loop1): Remounting filesystem read-only
[ 1112.981190][   T28] audit: type=1326 audit(973083961.188:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2de99aeb9 code=0x7ffc0000
[ 1113.040949][   T28] audit: type=1326 audit(973083961.188:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2de99aeb9 code=0x7ffc0000
[ 1113.067721][   T28] audit: type=1326 audit(973083961.188:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa2de99aeb9 code=0x7ffc0000
[ 1113.158592][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1113.176800][T25450] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[ 1113.198164][   T28] audit: type=1326 audit(973083961.188:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2de99aeb9 code=0x7ffc0000
[ 1113.211010][T25450] Quota error (device loop1): write_blk: dquota write failed
[ 1113.256384][   T28] audit: type=1326 audit(973083961.188:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=808 comm="syz.3.9974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2de99aeb9 code=0x7ffc0000
[ 1113.267242][T25450] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries
[ 1113.310975][T25450] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[ 1113.335087][ T5828] usb 1-1: USB disconnect, device number 11
[ 1113.358713][T25450] Quota error (device loop1): write_blk: dquota write failed
[ 1113.366231][T25450] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[ 1113.388573][ T5828] appletouch 1-1:1.0: input: appletouch disconnected
[ 1113.443036][  T824] No such timeout policy "syz1"
[ 1114.055911][  T871] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9991'.
[ 1114.521681][  T906] deleting an unspecified loop device is not supported.
[ 1114.721623][  T920] netlink: 136 bytes leftover after parsing attributes in process `syz.1.10004'.
[ 1114.736238][  T911] loop3: detected capacity change from 0 to 8192
[ 1114.754630][  T911] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1114.774292][  T911] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[ 1114.813289][  T911] REISERFS (device loop3): using ordered data mode
[ 1114.819888][  T911] reiserfs: using flush barriers
[ 1114.827942][  T911] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1114.845057][  T911] REISERFS (device loop3): checking transaction log (loop3)
[ 1114.859596][  T911] REISERFS (device loop3): Using rupasov hash to sort names
[ 1115.141425][  T951] erspan1: entered allmulticast mode
[ 1115.825355][  T984] loop2: detected capacity change from 0 to 4096
[ 1115.867888][  T997] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1115.904178][  T984] ntfs: volume version 3.1.
[ 1116.226952][ T1015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10030'.
[ 1116.324590][  T962] loop1: detected capacity change from 0 to 32768
[ 1116.364436][  T962] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1116.373207][  T962] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1116.437570][  T962] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[ 1116.486191][ T5808] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1116.497891][ T5808] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1116.588496][ T5808] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 97ms
[ 1116.611799][ T5808] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1116.618082][  T962] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1116.770793][ T1049] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10034'.
[ 1116.826817][ T1049] openvswitch: netlink: Key type 2832 is out of range max 32
[ 1117.205998][ T1021] loop0: detected capacity change from 0 to 32768
[ 1117.261513][ T1021] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1117.283800][ T1021] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1117.363659][ T1021] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[ 1117.495228][ T5808] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1117.539257][ T1021] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 1117.555562][ T1094] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10045'.
[ 1117.709535][ T5808] usb 3-1: Using ep0 maxpacket: 32
[ 1117.721350][ T5808] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[ 1117.738443][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.762261][ T5808] usb 3-1: config 0 descriptor??
[ 1117.781409][ T5808] gspca_main: sq930x-2.14.0 probing 041e:403c
[ 1118.170748][ T5808] gspca_sq930x: ucbus_write failed -71
[ 1118.206044][ T5808] sq930x: probe of 3-1:0.0 failed with error -71
[ 1118.234144][ T5808] usb 3-1: USB disconnect, device number 117
[ 1118.255545][ T1139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10056'.
[ 1118.795777][ T1181] loop2: detected capacity change from 0 to 64
[ 1119.053255][ T1201] wg1: entered promiscuous mode
[ 1119.069709][ T1201] wg1: entered allmulticast mode
[ 1119.471244][ T1207] loop0: detected capacity change from 0 to 8192
[ 1119.524787][ T1207] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1119.589955][ T1207] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 1119.626832][ T1207] REISERFS (device loop0): using ordered data mode
[ 1119.655678][ T1207] reiserfs: using flush barriers
[ 1119.707121][ T1207] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1119.768797][ T1207] REISERFS (device loop0): checking transaction log (loop0)
[ 1119.787405][ T1207] REISERFS (device loop0): Using rupasov hash to sort names
[ 1120.450139][ T1292] overlay: Unknown parameter 'fsname'
[ 1120.798073][ T1324] loop3: detected capacity change from 0 to 1024
[ 1120.868048][T25450] hfsplus: b-tree write err: -5, ino 4
[ 1120.896273][ T5813] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1120.998294][ T5826] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1121.012074][ T1336] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10111'.
[ 1121.038949][ T1336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10111'.
[ 1121.049677][ T1336] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10111'.
[ 1121.062854][ T1336] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10111'.
[ 1121.072026][ T1336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10111'.
[ 1121.082863][ T5813] usb 1-1: Using ep0 maxpacket: 8
[ 1121.092863][ T5813] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1121.105979][ T5813] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[ 1121.136963][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1121.152790][ T5813] usb 1-1: config 0 descriptor??
[ 1121.202981][ T5826] usb 3-1: Using ep0 maxpacket: 16
[ 1121.226253][ T5826] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1121.249682][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1121.257728][ T5826] usb 3-1: Product: syz
[ 1121.270406][ T5826] usb 3-1: Manufacturer: syz
[ 1121.275055][ T5826] usb 3-1: SerialNumber: syz
[ 1121.309590][ T5826] r8152-cfgselector 3-1: config 0 descriptor??
[ 1121.385522][ T5828] usb 1-1: USB disconnect, device number 12
[ 1121.542745][ T5826] usbip-host 3-1: 3-1 is not in match_busid table... skip!
[ 1121.550905][ T1128] usb 3-1: config 0 descriptor??
[ 1121.669361][ T5808] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1121.760488][ T5826] usb 3-1: USB disconnect, device number 118
[ 1121.767257][ T1128] usb 3-1: can't set config #0, error -71
[ 1121.813560][ T1377] loop3: detected capacity change from 0 to 32768
[ 1121.864494][ T5808] usb 2-1: Using ep0 maxpacket: 8
[ 1121.875141][ T5808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1121.899395][ T5808] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1121.911410][ T5808] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1121.934293][ T5808] usb 2-1: Product: syz
[ 1121.948425][ T5808] usb 2-1: Manufacturer: syz
[ 1121.954790][ T5808] usb 2-1: SerialNumber: syz
[ 1122.065065][ T1397] x_tables: duplicate entry at hook 2
[ 1122.193884][ T5808] usb 2-1: Invalid connection information received from device
[ 1122.390587][ T5826] usb 2-1: USB disconnect, device number 113
[ 1122.438704][ T1407] loop2: detected capacity change from 0 to 8192
[ 1122.447399][ T1416] xt_recent: Unsupported userspace flags (000000b1)
[ 1122.458641][ T1407] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1122.474107][ T1407] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[ 1122.484165][ T1407] REISERFS (device loop2): using ordered data mode
[ 1122.492107][ T1407] reiserfs: using flush barriers
[ 1122.499398][ T1407] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1122.518397][ T1407] REISERFS (device loop2): checking transaction log (loop2)
[ 1122.531242][ T1407] REISERFS (device loop2): Using rupasov hash to sort names
[ 1122.719823][ T1432] syz.3.10128: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1122.769917][ T1432] CPU: 1 PID: 1432 Comm: syz.3.10128 Not tainted syzkaller #0
[ 1122.777440][ T1432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1122.787517][ T1432] Call Trace:
[ 1122.790820][ T1432]  <TASK>
[ 1122.793774][ T1432]  dump_stack_lvl+0x18c/0x250
[ 1122.798487][ T1432]  ? show_regs_print_info+0x20/0x20
[ 1122.803707][ T1432]  ? load_image+0x400/0x400
[ 1122.808231][ T1432]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1122.814677][ T1432]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1122.821211][ T1432]  warn_alloc+0x246/0x340
[ 1122.825582][ T1432]  ? stack_trace_save+0xaa/0x100
[ 1122.830549][ T1432]  ? zone_watermark_ok_safe+0x230/0x230
[ 1122.836158][ T1432]  ? kasan_set_track+0x5f/0x70
[ 1122.840950][ T1432]  ? kasan_set_track+0x4e/0x70
[ 1122.845741][ T1432]  ? __kasan_kmalloc+0x8f/0xa0
[ 1122.850535][ T1432]  ? xsk_init_queue+0xad/0x100
[ 1122.855350][ T1432]  ? xsk_setsockopt+0x42e/0x760
[ 1122.860230][ T1432]  ? do_sock_setsockopt+0x175/0x1a0
[ 1122.865467][ T1432]  ? __x64_sys_setsockopt+0x182/0x200
[ 1122.870882][ T1432]  __vmalloc_node_range+0x126/0x1330
[ 1122.876222][ T1432]  ? free_vm_area+0x50/0x50
[ 1122.880766][ T1432]  vmalloc_user+0x74/0x80
[ 1122.885121][ T1432]  ? xskq_create+0xbf/0x170
[ 1122.889645][ T1432]  xskq_create+0xbf/0x170
[ 1122.894005][ T1432]  xsk_init_queue+0xad/0x100
[ 1122.898625][ T1432]  xsk_setsockopt+0x42e/0x760
[ 1122.903336][ T1432]  ? xsk_poll+0x680/0x680
[ 1122.907693][ T1432]  ? __fget_files+0x28/0x4b0
[ 1122.912309][ T1432]  ? __fget_files+0x28/0x4b0
[ 1122.916942][ T1432]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 1122.922513][ T1432]  ? security_socket_setsockopt+0x7e/0xa0
[ 1122.928257][ T1432]  ? xsk_poll+0x680/0x680
[ 1122.932607][ T1432]  do_sock_setsockopt+0x175/0x1a0
[ 1122.937657][ T1432]  ? __fdget+0x180/0x210
[ 1122.941927][ T1432]  __x64_sys_setsockopt+0x182/0x200
[ 1122.947160][ T1432]  do_syscall_64+0x55/0xa0
[ 1122.951605][ T1432]  ? clear_bhb_loop+0x40/0x90
[ 1122.956304][ T1432]  ? clear_bhb_loop+0x40/0x90
[ 1122.961010][ T1432]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1122.966923][ T1432] RIP: 0033:0x7fa2de99aeb9
[ 1122.971337][ T1432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1122.990947][ T1432] RSP: 002b:00007fa2dcbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1122.999364][ T1432] RAX: ffffffffffffffda RBX: 00007fa2dec15fa0 RCX: 00007fa2de99aeb9
[ 1123.007336][ T1432] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[ 1123.015308][ T1432] RBP: 00007fa2dea08c1f R08: 0000000000000004 R09: 0000000000000000
[ 1123.023273][ T1432] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1123.031237][ T1432] R13: 00007fa2dec16038 R14: 00007fa2dec15fa0 R15: 00007ffc42b49b18
[ 1123.039219][ T1432]  </TASK>
[ 1123.075382][ T1432] Mem-Info:
[ 1123.078616][ T1432] active_anon:6360 inactive_anon:0 isolated_anon:0
[ 1123.078616][ T1432]  active_file:13091 inactive_file:44150 isolated_file:0
[ 1123.078616][ T1432]  unevictable:768 dirty:294 writeback:0
[ 1123.078616][ T1432]  slab_reclaimable:11776 slab_unreclaimable:94417
[ 1123.078616][ T1432]  mapped:25227 shmem:1369 pagetables:632
[ 1123.078616][ T1432]  sec_pagetables:0 bounce:0
[ 1123.078616][ T1432]  kernel_misc_reclaimable:0
[ 1123.078616][ T1432]  free:1335194 free_pcp:5258 free_cma:0
[ 1123.165867][ T1432] Node 0 active_anon:25400kB inactive_anon:0kB active_file:52364kB inactive_file:176396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100932kB dirty:1176kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11220kB pagetables:2396kB sec_pagetables:0kB all_unreclaimable? no
[ 1123.258485][ T1432] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1123.350040][ T1458] x_tables: duplicate underflow at hook 1
[ 1123.379400][ T1432] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1123.452197][ T1432] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1123.459922][ T1432] Node 0 DMA32 free:1423856kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25256kB inactive_anon:0kB active_file:52364kB inactive_file:175576kB unevictable:1536kB writepending:1176kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:9332kB local_pcp:2804kB free_cma:0kB
[ 1123.492320][ T1432] lowmem_reserve[]: 0 0 0 0 0
[ 1123.499012][ T1432] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[ 1123.527429][ T1432] lowmem_reserve[]: 0 0 0 0 0
[ 1123.532570][ T1467] netlink: 'syz.1.10139': attribute type 1 has an invalid length.
[ 1123.540931][ T1467] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10139'.
[ 1123.550088][ T1467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10139'.
[ 1123.559240][ T1432] Node 1 Normal free:3900316kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13240kB local_pcp:3832kB free_cma:0kB
[ 1123.644334][ T1432] lowmem_reserve[]: 0 0 0 0 0
[ 1123.649116][ T1432] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB
[ 1123.671165][ T1432] Node 0 DMA32: 2838*4kB (UME) 1833*8kB (UME) 1007*16kB (UME) 741*32kB (UME) 267*64kB (UME) 170*128kB (UME) 113*256kB (UME) 78*512kB (UM) 43*1024kB (UM) 7*2048kB (UM) 291*4096kB (UM) = 1423856kB
[ 1123.707504][ T1432] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1123.732393][ T1432] Node 1 Normal: 125*4kB (UME) 55*8kB (UME) 47*16kB (UME) 240*32kB (UME) 76*64kB (UE) 12*128kB (UME) 4*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3900316kB
[ 1123.787538][ T1432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1123.807558][ T1432] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1123.839418][ T1432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1123.866627][ T1432] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1123.893020][ T1432] 55178 total pagecache pages
[ 1123.904482][ T1432] 0 pages in swap cache
[ 1123.908685][ T1432] Free swap  = 124472kB
[ 1123.931541][ T1432] Total swap = 124996kB
[ 1123.941845][ T1432] 2097051 pages RAM
[ 1123.945698][ T1432] 0 pages HighMem/MovableOnly
[ 1123.969955][ T1432] 416922 pages reserved
[ 1123.974179][ T1432] 0 pages cma reserved
[ 1124.438362][ T1473] loop2: detected capacity change from 0 to 32768
[ 1124.519759][ T1473] 
[ 1124.519759][ T1473]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1124.519759][ T1473] 
[ 1124.655564][ T5772] 
[ 1124.655564][ T5772]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1124.655564][ T5772] 
[ 1124.695482][ T5772] 
[ 1124.695482][ T5772]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1124.695482][ T5772] 
[ 1125.168580][ T1503] loop3: detected capacity change from 0 to 32768
[ 1125.219334][ T1503] (syz.3.10153,1503,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1125.249601][ T1503] (syz.3.10153,1503,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1125.347653][ T1503] JBD2: Ignoring recovery information on journal
[ 1125.424627][ T1503] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1125.451670][ T1558] ip6t_srh: unknown srh invflags 4449
[ 1125.516458][ T1562] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10169'.
[ 1125.701898][ T1568] loop1: detected capacity change from 0 to 512
[ 1125.713240][ T1568] EXT4-fs: Ignoring removed nobh option
[ 1125.777440][ T1568] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #3: comm syz.1.10171: corrupted inode contents
[ 1125.802844][ T1568] EXT4-fs (loop1): Remounting filesystem read-only
[ 1125.812660][ T5766] ocfs2: Unmounting device (7,3) on (node local)
[ 1125.837029][ T1568] __quota_error: 17 callbacks suppressed
[ 1125.837048][ T1568] Quota error (device loop1): write_blk: dquota write failed
[ 1125.885200][ T1568] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[ 1125.927980][ T1568] EXT4-fs (loop1): 1 truncate cleaned up
[ 1125.974049][ T1568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1126.165720][ T1588] loop3: detected capacity change from 0 to 1024
[ 1126.198290][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1126.370684][ T1076] hfsplus: b-tree write err: -5, ino 4
[ 1126.419827][ T1601] netlink: 'syz.0.10181': attribute type 10 has an invalid length.
[ 1126.515915][ T1606] loop1: detected capacity change from 0 to 1024
[ 1126.565724][ T1550] loop2: detected capacity change from 0 to 32768
[ 1126.570433][ T1601] veth0_vlan: left promiscuous mode
[ 1126.607471][ T1601] veth0_vlan: entered promiscuous mode
[ 1126.626566][ T1550] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1126.688369][ T1601] team0: Device veth0_vlan failed to register rx_handler
[ 1126.703348][ T1550] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1126.796555][ T1550] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[ 1126.883167][ T5828] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1126.903754][ T5828] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1127.061676][ T5828] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 169ms
[ 1127.081755][ T5828] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1127.093201][ T1550] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1127.107525][ T1630] loop3: detected capacity change from 0 to 2048
[ 1127.232630][ T1644] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1127.303880][ T1630] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=255
[ 1127.355962][ T1630] Remounting filesystem read-only
[ 1127.522536][ T1650] loop0: detected capacity change from 0 to 4096
[ 1127.564864][ T1650] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[ 1127.800973][ T1650] ntfs3: loop0: failed to convert "c46c" to cp857
[ 1128.072063][ T1645] loop1: detected capacity change from 0 to 32768
[ 1128.130526][ T1645] 
[ 1128.130526][ T1645]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1128.130526][ T1645] 
[ 1128.303545][ T5763] 
[ 1128.303545][ T5763]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1128.303545][ T5763] 
[ 1128.336982][ T5763] 
[ 1128.336982][ T5763]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1128.336982][ T5763] 
[ 1128.669328][ T1678] loop3: detected capacity change from 0 to 32768
[ 1128.686063][ T1678] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.10198 (1678)
[ 1128.746282][ T1678] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1128.781281][ T1678] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[ 1128.809053][ T1678] BTRFS info (device loop3): turning off barriers
[ 1128.821315][ T1678] BTRFS info (device loop3): enabling all of the rescue options
[ 1128.840408][ T1678] BTRFS info (device loop3): ignoring data csums
[ 1128.858075][ T1678] BTRFS info (device loop3): ignoring bad roots
[ 1128.877122][ T1678] BTRFS info (device loop3): disabling log replay at mount time
[ 1128.906948][ T1678] BTRFS info (device loop3): disabling tree log
[ 1128.949741][ T1678] BTRFS info (device loop3): turning on flush-on-commit
[ 1128.972377][ T1678] BTRFS info (device loop3): using free space tree
[ 1128.993402][ T1710] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff7fff)
[ 1129.031657][ T1710] FAT-fs (loop2): Filesystem has been set read-only
[ 1129.184145][ T1678] BTRFS info (device loop3: state C): enabling ssd optimizations
[ 1129.585086][ T5766] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1129.818271][ T1697] set_capacity_and_notify: 1 callbacks suppressed
[ 1129.818287][ T1697] loop0: detected capacity change from 0 to 32768
[ 1129.905890][ T1697] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1129.941132][ T1697] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1129.991640][ T1697] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[ 1130.015556][  T967] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1130.022371][  T967] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1130.120184][  T967] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 104ms
[ 1130.142332][  T967] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1130.151182][ T1697] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1130.184891][ T1773] AppArmor: change_hat: Invalid input '0'
[ 1131.108223][ T1822] loop1: detected capacity change from 0 to 1024
[ 1131.138137][ T1822] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[ 1131.139118][ T1759] loop3: detected capacity change from 0 to 32768
[ 1131.243418][ T1759] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1131.311894][ T1759] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1131.395473][ T1759] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[ 1131.581724][ T1759] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 1131.736156][ T1857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10241'.
[ 1131.783001][ T1863] loop0: detected capacity change from 0 to 1024
[ 1132.218323][    C1] sd 0:0:1:0: [sda] tag#1463 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1132.228888][    C1] sd 0:0:1:0: [sda] tag#1463 CDB: Read(6) 08 00 00 00 03 44
[ 1132.239615][ T1880] loop1: detected capacity change from 0 to 4096
[ 1132.292816][ T1894] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1132.462674][ T1903] netlink: 'syz.0.10251': attribute type 4 has an invalid length.
[ 1132.505185][ T1903] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.10251'.
[ 1132.683002][ T1914] netlink: 'syz.0.10256': attribute type 10 has an invalid length.
[ 1132.722675][ T1914] net veth1_virt_wifi ÿÿÿÿÿÿ: entered allmulticast mode
[ 1132.738284][ T1914] team0: Port device ÿÿÿÿÿÿ added
[ 1132.811733][ T1925] loop3: detected capacity change from 0 to 16
[ 1132.832264][ T1925] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1132.960260][ T1936] netlink: 'syz.1.10261': attribute type 10 has an invalid length.
[ 1132.965763][ T1934] loop2: detected capacity change from 0 to 512
[ 1132.971572][ T1938] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.10269'.
[ 1133.017245][ T1934] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[ 1133.050979][ T1936] veth0_vlan: left promiscuous mode
[ 1133.053898][ T1934] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 1133.092491][ T1934] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 1133.101069][ T1936] veth0_vlan: entered promiscuous mode
[ 1133.126366][ T1936] team0: Device veth0_vlan failed to register rx_handler
[ 1133.149501][ T1934] EXT4-fs (loop2): revision level too high, forcing read-only mode
[ 1133.172872][ T1934] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000]
[ 1133.207139][ T1934] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1133.262366][ T1934] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1133.292835][ T1934] EXT4-fs (loop2): Cannot turn on quotas: error -22
[ 1133.311451][ T1934] EXT4-fs (loop2): 1 truncate cleaned up
[ 1133.331370][ T1956] loop3: detected capacity change from 0 to 256
[ 1133.339286][ T1934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1133.361206][ T1956] exfat: Deprecated parameter 'utf8'
[ 1133.379608][ T1956] exfat: Deprecated parameter 'namecase'
[ 1133.428578][ T1956] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[ 1133.487007][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1133.854947][ T1987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10274'.
[ 1133.897104][ T1987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10274'.
[ 1134.089349][ T2000] netlink: 'syz.3.10279': attribute type 10 has an invalid length.
[ 1134.233953][ T2000] team0: Device veth0_vlan failed to register rx_handler
[ 1134.319309][ T2010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10282'.
[ 1134.880068][ T2035] loop1: detected capacity change from 0 to 4096
[ 1134.916808][ T5813] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1134.966342][ T2035] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[ 1134.987984][ T2035] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[ 1135.130383][ T5813] usb 1-1: Using ep0 maxpacket: 8
[ 1135.144911][ T5813] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1135.146616][ T2052] netlink: 'syz.2.10294': attribute type 10 has an invalid length.
[ 1135.160439][ T2995] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22.
[ 1135.176985][ T5763] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[ 1135.191349][ T5813] usb 1-1: config 8 has an invalid interface number: 61 but max is 2
[ 1135.200065][ T5763] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[ 1135.214336][ T5813] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 3
[ 1135.233218][ T5763] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[ 1135.242038][ T1128] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22.
[ 1135.248994][ T5813] usb 1-1: config 8 has no interface number 0
[ 1135.271220][ T5813] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1135.282630][ T2052] veth0_vlan: left promiscuous mode
[ 1135.302623][ T5813] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1135.312175][ T2052] veth0_vlan: entered promiscuous mode
[ 1135.342522][ T5813] usb 1-1: config 8 interface 61 has no altsetting 0
[ 1135.343060][ T2052] team0: Device veth0_vlan failed to register rx_handler
[ 1135.362622][ T5813] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f
[ 1135.384200][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.401026][ T5813] usb 1-1: Product: syz
[ 1135.411432][ T2055] loop3: detected capacity change from 0 to 4096
[ 1135.422078][ T5813] usb 1-1: Manufacturer: syz
[ 1135.432002][ T5813] usb 1-1: SerialNumber: syz
[ 1135.473331][ T2062] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1135.651709][ T5813] bfusb: probe of 1-1:8.61 failed with error -5
[ 1135.694279][ T5813] usb 1-1: USB disconnect, device number 13
[ 1135.872625][ T2083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10299'.
[ 1135.999210][ T2059] loop1: detected capacity change from 0 to 32768
[ 1136.037055][ T2059] (syz.1.10303,2059,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1136.059675][ T2092] loop3: detected capacity change from 0 to 128
[ 1136.083266][ T2059] (syz.1.10303,2059,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1136.143945][ T2059] JBD2: Ignoring recovery information on journal
[ 1136.235823][ T2059] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1136.439079][ T2104] bond4: entered promiscuous mode
[ 1136.445566][ T2104] bond4: entered allmulticast mode
[ 1136.451012][ T2104] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1136.503978][ T5763] ocfs2: Unmounting device (7,1) on (node local)
[ 1137.039076][ T2093] loop2: detected capacity change from 0 to 32768
[ 1137.077795][ T2093] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.10301 (2093)
[ 1137.137539][ T2093] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1137.180138][ T2093] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[ 1137.207687][ T2093] BTRFS info (device loop2): turning off barriers
[ 1137.228817][ T2093] BTRFS info (device loop2): enabling all of the rescue options
[ 1137.255213][ T2093] BTRFS info (device loop2): ignoring data csums
[ 1137.261617][ T2093] BTRFS info (device loop2): ignoring bad roots
[ 1137.281101][ T2181] netlink: 'syz.1.10318': attribute type 10 has an invalid length.
[ 1137.289905][ T2093] BTRFS info (device loop2): disabling log replay at mount time
[ 1137.318540][ T2181] veth0_vlan: left promiscuous mode
[ 1137.324503][ T2093] BTRFS info (device loop2): disabling tree log
[ 1137.347379][ T2093] BTRFS info (device loop2): turning on flush-on-commit
[ 1137.354398][ T2093] BTRFS info (device loop2): using free space tree
[ 1137.364399][ T2181] veth0_vlan: entered promiscuous mode
[ 1137.370711][ T2185] loop0: detected capacity change from 0 to 256
[ 1137.381706][ T2181] team0: Device veth0_vlan failed to register rx_handler
[ 1137.519010][ T2093] BTRFS info (device loop2: state C): enabling ssd optimizations
[ 1137.737318][ T2216] xt_connbytes: Forcing CT accounting to be enabled
[ 1137.920206][ T5772] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1138.037016][ T5813] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1138.116117][T22526] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (22526)
[ 1138.203038][ T2244] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1138.235864][ T5813] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1138.273618][ T5813] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1138.313550][ T5813] usb 2-1: config 1 interface 1 has no altsetting 1
[ 1138.361363][ T5813] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1138.387038][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1138.428672][ T5813] usb 2-1: Product: syz
[ 1138.432908][ T5813] usb 2-1: Manufacturer: syz
[ 1138.437522][ T5813] usb 2-1: SerialNumber: syz
[ 1138.476161][ T5813] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[ 1138.483025][ T5813] cdc_ncm 2-1:1.0: bind() failure
[ 1138.562378][ T5813] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1138.598505][ T5813] cdc_ncm 2-1:1.1: bind() failure
[ 1138.647230][ T2264] ieee802154 phy1 wpan1: encryption failed: -22
[ 1138.804543][ T5753] usb 2-1: USB disconnect, device number 114
[ 1139.012458][ T2292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10343'.
[ 1139.104986][ T2297] netlink: 'syz.2.10345': attribute type 1 has an invalid length.
[ 1139.124517][ T2297] netlink: 'syz.2.10345': attribute type 1 has an invalid length.
[ 1139.510665][ T2326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10353'.
[ 1139.528027][ T2326] netlink: 'syz.3.10353': attribute type 1 has an invalid length.
[ 1139.535915][ T2326] netlink: 'syz.3.10353': attribute type 2 has an invalid length.
[ 1139.597639][ T2326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10353'.
[ 1139.631181][ T2335] loop2: detected capacity change from 0 to 164
[ 1139.689786][ T2335] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1140.162193][ T2372] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000
[ 1140.306175][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1140.526585][   T28] audit: type=1400 audit(973083990.761:165): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=2392 comm="syz.1.10372"
[ 1140.545583][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1140.654330][ T2365] loop3: detected capacity change from 0 to 32768
[ 1140.709272][ T2411] netlink: 'syz.1.10374': attribute type 10 has an invalid length.
[ 1140.719641][ T2365] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1140.727039][ T2411] veth0_vlan: left promiscuous mode
[ 1140.734550][ T2411] veth0_vlan: entered promiscuous mode
[ 1140.742449][ T2411] team0: Device veth0_vlan failed to register rx_handler
[ 1140.857939][ T2365] XFS (loop3): Ending clean mount
[ 1141.042384][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1141.403283][ T2456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10384'.
[ 1141.824579][ T2475] loop1: detected capacity change from 0 to 4096
[ 1143.140076][ T2538] loop1: detected capacity change from 0 to 32768
[ 1143.204401][ T2587] loop2: detected capacity change from 0 to 256
[ 1143.288520][ T2587] FAT-fs (loop2): Directory bread(block 64) failed
[ 1143.291966][ T5828] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[ 1143.307394][ T2587] FAT-fs (loop2): Directory bread(block 65) failed
[ 1143.345607][ T2592] netlink: 'syz.3.10418': attribute type 1 has an invalid length.
[ 1143.353851][ T2587] FAT-fs (loop2): Directory bread(block 66) failed
[ 1143.383480][ T2587] FAT-fs (loop2): Directory bread(block 67) failed
[ 1143.431808][ T2587] FAT-fs (loop2): Directory bread(block 68) failed
[ 1143.438441][ T2587] FAT-fs (loop2): Directory bread(block 69) failed
[ 1143.470824][ T2587] FAT-fs (loop2): Directory bread(block 70) failed
[ 1143.501375][ T5828] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[ 1143.520692][ T2587] FAT-fs (loop2): Directory bread(block 71) failed
[ 1143.533327][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1143.552303][ T2587] FAT-fs (loop2): Directory bread(block 72) failed
[ 1143.561299][ T5828] usb 1-1: config 0 has no interface number 0
[ 1143.568313][ T5828] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[ 1143.594202][ T2587] FAT-fs (loop2): Directory bread(block 73) failed
[ 1143.606839][ T5828] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1143.627674][ T5828] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1143.641391][ T5828] usb 1-1: config 0 interface 52 has no altsetting 0
[ 1143.669278][ T5828] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[ 1143.700930][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[ 1143.739048][ T5828] usb 1-1: SerialNumber: syz
[ 1143.767445][ T5828] usb 1-1: config 0 descriptor??
[ 1143.985743][ T5828] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 1144.012994][ T5828] synaptics_usb: probe of 1-1:0.52 failed with error -5
[ 1144.020575][ T2633] loop3: detected capacity change from 0 to 512
[ 1144.078585][ T2633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1144.223182][ T2651] netlink: 'syz.1.10429': attribute type 2 has an invalid length.
[ 1144.241870][ T2651] netlink: 'syz.1.10429': attribute type 1 has an invalid length.
[ 1144.256818][ T5826] usb 1-1: USB disconnect, device number 14
[ 1144.280857][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1144.921838][ T5851] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1145.040764][ T2719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1145.056894][ T2721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10445'.
[ 1145.118930][ T5851] usb 4-1: Using ep0 maxpacket: 8
[ 1145.146873][ T5851] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[ 1145.181282][ T5851] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[ 1145.201943][ T5851] usb 4-1: config 179 has no interface number 0
[ 1145.228361][ T5851] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0
[ 1145.245915][ T5851] usb 4-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[ 1145.263804][ T5851] usb 4-1: config 179 interface 65 has no altsetting 0
[ 1145.271305][ T5851] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1145.298321][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1145.574838][ T5851] usb 4-1: USB disconnect, device number 125
[ 1146.037865][ T2781] loop1: detected capacity change from 0 to 256
[ 1146.080665][ T2781] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d)
[ 1147.183178][ T2878] cgroup: name respecified
[ 1147.203074][ T2882] loop1: detected capacity change from 0 to 512
[ 1147.228570][ T2880] loop2: detected capacity change from 0 to 4096
[ 1147.245900][ T2880] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[ 1147.319628][ T2882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1147.341358][ T2880] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 1147.384111][ T2880] ntfs3: loop2: Failed to load $Extend (-22).
[ 1147.403722][ T2894] loop0: detected capacity change from 0 to 64
[ 1147.413075][ T2880] ntfs3: loop2: Failed to initialize $Extend.
[ 1147.460050][ T2882] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[ 1147.485179][ T2894] hfs: filesystem is marked locked, mounting read-only.
[ 1147.504679][ T2882] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[ 1147.548229][ T2894] hfs: filesystem is marked locked, leaving read-only.
[ 1147.549285][ T2882] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.10485: Failed to acquire dquot type 0
[ 1147.727968][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1147.772075][ T2912] loop3: detected capacity change from 0 to 64
[ 1147.782125][ T2910] netlink: 22 bytes leftover after parsing attributes in process `syz.0.10490'.
[ 1147.899359][ T2920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10493'.
[ 1148.369115][ T5851] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 1148.574670][ T5851] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1148.592469][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1148.611183][ T5851] usb 3-1: Product: syz
[ 1148.615404][ T5851] usb 3-1: Manufacturer: syz
[ 1148.638317][ T5851] usb 3-1: SerialNumber: syz
[ 1148.651489][ T5851] usb 3-1: config 0 descriptor??
[ 1148.818985][ T2943] loop1: detected capacity change from 0 to 32768
[ 1148.884253][ T5851] hso 3-1:0.0: Failed to find BULK IN ep
[ 1148.893094][ T5851] usb-storage 3-1:0.0: USB Mass Storage device detected
[ 1149.114585][ T5851] usb 3-1: USB disconnect, device number 119
[ 1149.367492][ T2974] loop0: detected capacity change from 0 to 32768
[ 1149.399585][ T2974] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1149.480505][ T2974] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1149.526562][ T2974] XFS (loop0): Starting recovery (logdev: internal)
[ 1149.573691][ T2974] XFS (loop0): Ending recovery (logdev: internal)
[ 1149.716274][ T5770] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1150.252547][ T3039] loop3: detected capacity change from 0 to 4096
[ 1150.311508][ T3039] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[ 1150.347569][ T3050] loop0: detected capacity change from 0 to 16
[ 1150.408158][ T3053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10524'.
[ 1150.429254][ T3050] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1150.441278][ T3053] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10524'.
[ 1150.452012][ T3053] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10524'.
[ 1150.480908][ T3050] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86
[ 1150.504116][ T3053] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1150.517758][ T3050] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86
[ 1150.590217][   T28] audit: type=1800 audit(973084001.559:166): pid=3050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10516" name="file1" dev="loop0" ino=86 res=0 errno=0
[ 1150.953943][ T3076] loop3: detected capacity change from 0 to 4096
[ 1150.992685][ T3076] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 1151.129848][ T3076] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1151.146354][ T3076] ntfs3: loop3: Failed to load $Extend (-22).
[ 1151.156180][ T3076] ntfs3: loop3: Failed to initialize $Extend.
[ 1151.457237][ T3107] loop3: detected capacity change from 0 to 64
[ 1151.755139][ T3126] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1151.933346][ T3092] loop2: detected capacity change from 0 to 32768
[ 1152.026005][ T3092] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1152.337694][ T5772] ocfs2: Unmounting device (7,2) on (node local)
[ 1152.766853][ T3183] loop1: detected capacity change from 0 to 4096
[ 1152.802330][ T3190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10562'.
[ 1152.815011][ T3183] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[ 1152.880323][ T3183] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[ 1152.973910][ T3183] ntfs3: loop1: failed to convert "c46c" to maccyrillic
[ 1153.061524][ T3207] netlink: 'syz.2.10566': attribute type 21 has an invalid length.
[ 1153.070215][ T5828] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1153.116020][ T3207] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10566'.
[ 1153.147522][ T3207] netlink: 'syz.2.10566': attribute type 5 has an invalid length.
[ 1153.156435][ T3207] netlink: 'syz.2.10566': attribute type 6 has an invalid length.
[ 1153.165763][ T3207] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10566'.
[ 1153.263732][ T5828] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1153.273123][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1153.287718][ T5828] usb 4-1: Product: syz
[ 1153.297027][ T5828] usb 4-1: Manufacturer: syz
[ 1153.301712][ T5828] usb 4-1: SerialNumber: syz
[ 1153.338227][ T5828] usb 4-1: config 0 descriptor??
[ 1153.413021][ T3227] loop0: detected capacity change from 0 to 512
[ 1153.429594][ T3225] loop1: detected capacity change from 0 to 512
[ 1153.434260][ T3227] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1153.462942][ T3227] EXT4-fs: Ignoring removed bh option
[ 1153.487800][ T3225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1153.501507][ T3227] EXT4-fs error (device loop0): mb_free_blocks:1954: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1153.518317][ T3227] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #11: comm syz.0.10572: corrupted inode contents
[ 1153.547264][ T5828] hso 4-1:0.0: Failed to find BULK IN ep
[ 1153.555251][ T3227] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #11: comm syz.0.10572: mark_inode_dirty error
[ 1153.569927][ T5828] usb-storage 4-1:0.0: USB Mass Storage device detected
[ 1153.589506][ T3227] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.10572: invalid indirect mapped block 1 (level 1)
[ 1153.609647][ T3227] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #11: comm syz.0.10572: corrupted inode contents
[ 1153.637569][ T3227] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[ 1153.652049][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1153.670314][ T3227] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #11: comm syz.0.10572: corrupted inode contents
[ 1153.687765][ T3227] EXT4-fs error (device loop0): ext4_truncate:4294: inode #11: comm syz.0.10572: mark_inode_dirty error
[ 1153.737276][ T3227] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[ 1153.773009][ T3227] EXT4-fs (loop0): 1 truncate cleaned up
[ 1153.803064][ T3227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1153.836105][ T5753] usb 4-1: USB disconnect, device number 126
[ 1153.876732][ T3257] netlink: 'syz.2.10576': attribute type 5 has an invalid length.
[ 1153.956676][ T3227] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.10572: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 1154.035472][ T3266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10578'.
[ 1154.073575][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1154.495682][ T3291] netlink: 'syz.3.10585': attribute type 1 has an invalid length.
[ 1154.495709][ T3291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10585'.
[ 1154.915959][ T3308] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10590'.
[ 1154.938527][ T3278] loop0: detected capacity change from 0 to 32768
[ 1155.015306][ T3278] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1155.329072][ T3278] XFS (loop0): Ending clean mount
[ 1155.555674][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1156.042346][ T3368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10606'.
[ 1156.744381][ T3421] kAFS: unparsable volume name
[ 1156.781056][ T5813] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 1156.797165][ T3415] loop1: detected capacity change from 0 to 4096
[ 1156.840597][ T3415] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[ 1156.874121][ T3415] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1156.948538][ T3415] ntfs: volume version 3.1.
[ 1156.954466][ T3432] netlink: 'syz.3.10622': attribute type 10 has an invalid length.
[ 1156.963173][ T5813] usb 3-1: Using ep0 maxpacket: 16
[ 1156.983193][ T3415] ntfs: (device loop1): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[ 1157.008296][ T3432] bridge0: port 3(macsec0) entered blocking state
[ 1157.023610][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024
[ 1157.035742][ T3432] bridge0: port 3(macsec0) entered disabled state
[ 1157.048722][ T5813] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[ 1157.059235][ T3432] macsec0: entered allmulticast mode
[ 1157.066230][ T3415] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[ 1157.077169][ T3432] veth1_macvtap: entered allmulticast mode
[ 1157.083165][ T5813] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1157.093538][ T3415] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[ 1157.108495][ T3432] macsec0: entered promiscuous mode
[ 1157.114512][ T3432] bridge0: port 3(macsec0) entered blocking state
[ 1157.121189][ T3432] bridge0: port 3(macsec0) entered forwarding state
[ 1157.130715][ T5813] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 1157.149762][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1157.181732][ T5813] usb 3-1: Product: syz
[ 1157.186031][ T5813] usb 3-1: Manufacturer: syz
[ 1157.210019][ T5813] usb 3-1: SerialNumber: syz
[ 1157.229740][ T5813] usb 3-1: config 0 descriptor??
[ 1157.235414][ T3403] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1157.246846][ T3403] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1157.290415][    C1] port100 3-1:0.0: NFC: Urb failure (status -71)
[ 1157.303847][    C1] port100 3-1:0.0: NFC: Urb failure (status -71)
[ 1157.313391][ T5813] port100 3-1:0.0: NFC: Could not get supported command types
[ 1157.468980][ T5813] usb 3-1: USB disconnect, device number 120
[ 1158.204560][ T3470] kernel profiling enabled (shift: 63)
[ 1158.204720][ T3470] profiling shift: 63 too large
[ 1158.504279][ T3486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10635'.
[ 1158.532739][ T3488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10636'.
[ 1158.649846][ T3493] loop2: detected capacity change from 0 to 2048
[ 1158.729162][ T3493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1158.862131][ T3509] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10642'.
[ 1158.879846][ T3509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10642'.
[ 1159.384151][ T3547] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10653'.
[ 1161.123474][ T3665] loop1: detected capacity change from 0 to 64
[ 1161.157816][ T3665] syz.1.10688: attempt to access beyond end of device
[ 1161.157816][ T3665] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 1161.178614][ T3665] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 1161.216217][ T3665] syz.1.10688: attempt to access beyond end of device
[ 1161.216217][ T3665] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 1161.271399][ T3665] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 1161.328565][ T3670] loop2: detected capacity change from 0 to 4096
[ 1161.344770][ T3670] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[ 1161.510031][ T3670] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[ 1161.549932][ T3649] loop0: detected capacity change from 0 to 32768
[ 1161.613350][ T3680] loop3: detected capacity change from 0 to 8
[ 1161.627397][   T28] audit: type=1326 audit(973084013.409:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3682 comm="syz.1.10692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdf79aeb9 code=0x7ffc0000
[ 1161.676992][ T3680] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1161.693317][   T28] audit: type=1326 audit(973084013.409:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3682 comm="syz.1.10692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdf79aeb9 code=0x7ffc0000
[ 1161.709239][ T5772] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22.
[ 1161.755199][T22603] udevd[22603]: incorrect cramfs checksum on /dev/loop3
[ 1161.767420][   T28] audit: type=1326 audit(973084013.431:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3682 comm="syz.1.10692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f0cdf79aeb9 code=0x7ffc0000
[ 1161.781945][ T3649] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 1161.790804][   T28] audit: type=1326 audit(973084013.431:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3682 comm="syz.1.10692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdf79aeb9 code=0x7ffc0000
[ 1161.828029][ T3680] cramfs: Error -3 while decompressing!
[ 1161.836266][ T3680] cramfs: ffffffff973f7348(18)->ffff888078f5c000(4096)
[ 1161.844137][ T3680] cramfs: Error -3 while decompressing!
[ 1161.852479][ T3680] cramfs: ffffffff973f7348(18)->ffff888078f5c000(4096)
[ 1161.860053][   T28] audit: type=1800 audit(973084013.656:171): pid=3680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10691" name="file1" dev="loop3" ino=324 res=0 errno=0
[ 1161.899756][T22603] udevd[22603]: incorrect cramfs checksum on /dev/loop3
[ 1162.001407][ T3649] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list
[ 1162.050470][ T3649] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1162.079070][ T3649] OCFS2: Returning error to the calling process.
[ 1162.131892][ T3649] (syz.0.10683,3649,0):ocfs2_find_leaf:1941 ERROR: status = -30
[ 1162.161991][ T3649] (syz.0.10683,3649,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[ 1162.180147][ T3705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10696'.
[ 1162.184909][ T3649] (syz.0.10683,3649,0):ocfs2_get_clusters:624 ERROR: status = -30
[ 1162.225768][ T3649] (syz.0.10683,3649,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[ 1162.265117][ T3649] (syz.0.10683,3649,0):ocfs2_read_virt_blocks:995 ERROR: status = -30
[ 1162.309027][ T3649] (syz.0.10683,3649,0):ocfs2_read_dir_block:511 ERROR: status = -30
[ 1162.343567][ T3649] (syz.0.10683,3649,0):ocfs2_find_dir_space_el:3505 ERROR: status = -5
[ 1162.366917][ T3649] (syz.0.10683,3649,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5
[ 1162.382653][ T3649] (syz.0.10683,3649,0):ocfs2_mknod:298 ERROR: status = -5
[ 1162.404284][ T3649] (syz.0.10683,3649,0):ocfs2_mknod:502 ERROR: status = -5
[ 1162.417982][ T3649] (syz.0.10683,3649,0):ocfs2_mkdir:659 ERROR: status = -5
[ 1162.536177][ T5770] ocfs2: Unmounting device (7,0) on (node local)
[ 1162.764014][ T5828] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1162.790699][ T3739] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.10707'.
[ 1162.856846][ T3744] loop0: detected capacity change from 0 to 8
[ 1162.919036][ T3744] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1162.948011][ T3744] SQUASHFS error: Failed to read block 0x1dd: -5
[ 1162.955664][ T3744] SQUASHFS error: Unable to read metadata cache entry [1db]
[ 1162.973506][ T3744] SQUASHFS error: Unable to read inode 0xa7
[ 1162.980815][ T5828] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1163.008500][ T5828] usb 3-1: config 129 has an invalid interface number: 135 but max is 0
[ 1163.036580][ T5828] usb 3-1: config 129 has an invalid interface number: 5 but max is 0
[ 1163.053799][ T5828] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[ 1163.084217][ T5828] usb 3-1: config 129 has no interface number 0
[ 1163.106991][ T5828] usb 3-1: config 129 has no interface number 1
[ 1163.113405][ T5828] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1163.141439][ T3759] loop1: detected capacity change from 0 to 256
[ 1163.154001][ T5828] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[ 1163.182386][ T5828] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[ 1163.203821][ T5828] usb 3-1: config 129 interface 135 has no altsetting 0
[ 1163.217203][ T5828] usb 3-1: config 129 interface 5 has no altsetting 0
[ 1163.230140][ T5828] usb 3-1: string descriptor 0 read error: -22
[ 1163.253756][ T5828] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[ 1163.280635][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.354135][ T5828] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 1163.382607][ T5828] usb 3-1: MIDIStreaming interface descriptor not found
[ 1163.641767][ T5813] usb 3-1: USB disconnect, device number 121
[ 1164.023583][ T3774] loop0: detected capacity change from 0 to 32768
[ 1164.220711][ T3791] loop1: detected capacity change from 0 to 32768
[ 1164.303022][ T3828] netlink: 'syz.0.10723': attribute type 15 has an invalid length.
[ 1164.333774][ T3791] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[ 1164.333774][ T3791] 
[ 1164.389171][ T3791] ERROR: (device loop1): remounting filesystem as read-only
[ 1164.411110][ T3791] xtLookup: xtSearch returned -5
[ 1164.436793][ T3791] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt
[ 1164.436793][ T3791] 
[ 1164.981142][ T3865] netlink: 'syz.1.10734': attribute type 3 has an invalid length.
[ 1164.999984][ T3867] binder: 3866:3867 ioctl c018620c 200000000380 returned -1
[ 1165.435777][ T3895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10745'.
[ 1165.483046][ T3895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10745'.
[ 1165.899905][ T3927] loop1: detected capacity change from 0 to 1764
[ 1166.266633][ T3953] loop1: detected capacity change from 0 to 512
[ 1166.809087][ T3990] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[ 1167.330476][ T4027] netlink: 'syz.3.10786': attribute type 1 has an invalid length.
[ 1167.507257][ T4043] ..0
ˆ: renamed from veth0_to_hsr (while UP)
[ 1167.666838][ T4053] loop3: detected capacity change from 0 to 64
[ 1167.719846][ T4053] syz.3.10793: attempt to access beyond end of device
[ 1167.719846][ T4053] loop3: rw=0, sector=65534, nr_sectors = 2 limit=64
[ 1167.765434][ T4053] Buffer I/O error on dev loop3, logical block 32767, async page read
[ 1167.785617][ T4053] syz.3.10793: attempt to access beyond end of device
[ 1167.785617][ T4053] loop3: rw=0, sector=65534, nr_sectors = 2 limit=64
[ 1167.801384][ T4053] Buffer I/O error on dev loop3, logical block 32767, async page read
[ 1167.941143][ T4070] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[ 1168.175897][ T4118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10800'.
[ 1168.224606][ T4118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10800'.
[ 1168.755710][ T4159] loop3: detected capacity change from 0 to 128
[ 1168.808188][ T4159] FAT-fs (loop3): Directory bread(block 162) failed
[ 1168.826798][ T4159] FAT-fs (loop3): Directory bread(block 163) failed
[ 1168.835887][ T4159] FAT-fs (loop3): Directory bread(block 164) failed
[ 1168.865456][ T4159] FAT-fs (loop3): Directory bread(block 165) failed
[ 1168.872144][ T4159] FAT-fs (loop3): Directory bread(block 166) failed
[ 1168.910904][ T4159] FAT-fs (loop3): Directory bread(block 167) failed
[ 1168.923352][ T4159] FAT-fs (loop3): Directory bread(block 168) failed
[ 1168.932024][ T4159] FAT-fs (loop3): Directory bread(block 169) failed
[ 1168.975071][ T4159] FAT-fs (loop3): Directory bread(block 162) failed
[ 1169.007716][ T4159] FAT-fs (loop3): Directory bread(block 163) failed
[ 1169.025030][ T4176] netlink: 'syz.2.10820': attribute type 3 has an invalid length.
[ 1169.034387][ T4159] syz.3.10816: attempt to access beyond end of device
[ 1169.034387][ T4159] loop3: rw=3, sector=226, nr_sectors = 6 limit=128
[ 1169.060115][ T4176] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.10820'.
[ 1169.079119][ T4159] syz.3.10816: attempt to access beyond end of device
[ 1169.079119][ T4159] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128
[ 1169.470544][ T4203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1169.508990][ T4207] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.10830'.
[ 1170.068260][ T4240] xt_hashlimit: overflow, try lower: 18446744073709551614/15680
[ 1170.209604][ T4248] C: renamed from lo
[ 1170.226653][ T4248] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1170.604367][ T4236] loop0: detected capacity change from 0 to 32768
[ 1170.686483][   T28] audit: type=1800 audit(973084023.124:172): pid=4236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10839" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 1171.170918][ T4255] loop1: detected capacity change from 0 to 32768
[ 1171.237874][ T4255] ialloc: diAlloc returned -5!
[ 1171.337886][ T4300] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10859'.
[ 1171.638887][ T4319] loop2: detected capacity change from 0 to 512
[ 1171.666149][ T4319] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1171.706114][ T4319] EXT4-fs: Ignoring removed bh option
[ 1171.785335][ T4319] EXT4-fs error (device loop2): mb_free_blocks:1954: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1171.837242][ T4319] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #11: comm syz.2.10865: corrupted inode contents
[ 1171.852671][ T4319] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #11: comm syz.2.10865: mark_inode_dirty error
[ 1171.883033][ T4319] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.10865: invalid indirect mapped block 1 (level 1)
[ 1171.905486][ T4319] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #11: comm syz.2.10865: corrupted inode contents
[ 1171.967117][ T4319] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[ 1171.986082][ T4319] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #11: comm syz.2.10865: corrupted inode contents
[ 1172.009360][ T4342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10870'.
[ 1172.018865][ T4319] EXT4-fs error (device loop2): ext4_truncate:4294: inode #11: comm syz.2.10865: mark_inode_dirty error
[ 1172.070567][ T4319] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[ 1172.100353][ T4319] EXT4-fs (loop2): 1 truncate cleaned up
[ 1172.105527][ T4346] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10872'.
[ 1172.130416][ T4319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1172.262574][ T4319] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.10865: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 1172.297791][ T4361] loop0: detected capacity change from 0 to 1024
[ 1172.348915][ T2995] hfsplus: b-tree write err: -5, ino 4
[ 1172.367162][ T2995] ------------[ cut here ]------------
[ 1172.372681][ T2995] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[ 1172.398623][ T4367] loop1: detected capacity change from 0 to 256
[ 1172.399633][ T2995] WARNING: CPU: 0 PID: 2995 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0
[ 1172.420178][ T2995] Modules linked in:
[ 1172.424614][ T2995] CPU: 0 PID: 2995 Comm: kworker/u4:9 Not tainted syzkaller #0
[ 1172.432941][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1172.435269][ T4367] FAT-fs (loop1): Directory bread(block 64) failed
[ 1172.443324][ T2995] Workqueue: writeback wb_workfn (flush-7:0)
[ 1172.450579][ T4367] FAT-fs (loop1): Directory bread(block 65) failed
[ 1172.456147][ T2995] RIP: 0010:__mutex_lock+0xb85/0xcc0
[ 1172.468403][ T2995] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 94 58 fe 03 00 0f 85 95 f5 ff ff 48 c7 c7 a0 b3 ca 8a 48 c7 c6 40 b4 ca 8a e8 4b 21 c4 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8
[ 1172.488313][ T2995] RSP: 0018:ffffc9000c427220 EFLAGS: 00010246
[ 1172.494467][ T2995] RAX: 715237a8c6e32b00 RBX: ffff88805c8b1460 RCX: ffff88802c529e00
[ 1172.494517][ T4367] FAT-fs (loop1): Directory bread(block 66) failed
[ 1172.502461][ T2995] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 1172.502474][ T2995] RBP: ffffc9000c427370 R08: ffff8880b8e28c13 R09: 1ffff110171c5182
[ 1172.502486][ T2995] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000
[ 1172.502496][ T2995] R13: 1ffff92001884e54 R14: dffffc0000000000 R15: 0000000000000000
[ 1172.502507][ T2995] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1172.502519][ T2995] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1172.502531][ T2995] CR2: 00007fcca580b000 CR3: 0000000019a84000 CR4: 00000000003506f0
[ 1172.502546][ T2995] Call Trace:
[ 1172.502552][ T2995]  <TASK>
[ 1172.502559][ T2995]  ? verify_lock_unused+0x140/0x140
[ 1172.502582][ T2995]  ? vprintk_emit+0x53d/0x610
[ 1172.502599][ T2995]  ? hfsplus_ext_write_extent+0x91/0x230
[ 1172.502619][ T2995]  ? mutex_lock_nested+0x20/0x20
[ 1172.502640][ T2995]  ? writeback_sb_inodes+0x362/0xf50
[ 1172.502664][ T2995]  ? inode_to_bdi+0x69/0xf0
[ 1172.502680][ T2995]  ? do_writepages+0x57c/0x630
[ 1172.502702][ T2995]  hfsplus_ext_write_extent+0x91/0x230
[ 1172.502723][ T2995]  ? hfsplus_ext_cmp_key+0x300/0x300
[ 1172.502743][ T2995]  ? __writeback_single_inode+0x48d/0xec0
[ 1172.502764][ T2995]  ? __lock_acquire+0x7d40/0x7d40
[ 1172.502781][ T2995]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1172.502803][ T2995]  hfsplus_write_inode+0x22/0x5e0
[ 1172.502822][ T2995]  __writeback_single_inode+0x705/0xec0
[ 1172.502848][ T2995]  writeback_sb_inodes+0x7cd/0xf50
[ 1172.502885][ T2995]  ? queue_io+0x550/0x550
[ 1172.502911][ T2995]  ? rcu_is_watching+0x15/0xb0
[ 1172.502935][ T2995]  wb_writeback+0x46a/0xbf0
[ 1172.502957][ T2995]  ? queue_io+0x301/0x550
[ 1172.502980][ T2995]  ? percpu_ref_tryget+0x250/0x250
[ 1172.503001][ T2995]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1172.503023][ T2995]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1172.503043][ T2995]  wb_workfn+0x400/0xe60
[ 1172.503069][ T2995]  ? inode_wait_for_writeback+0x230/0x230
[ 1172.503093][ T2995]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1172.503112][ T2995]  ? read_lock_is_recursive+0x20/0x20
[ 1172.503132][ T2995]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1172.503148][ T2995]  ? process_scheduled_works+0x96f/0x15d0
[ 1172.503168][ T2995]  ? process_scheduled_works+0x96f/0x15d0
[ 1172.503187][ T2995]  process_scheduled_works+0xa5d/0x15d0
[ 1172.503217][ T2995]  ? assign_work+0x430/0x430
[ 1172.503238][ T2995]  ? assign_work+0x3d0/0x430
[ 1172.503258][ T2995]  worker_thread+0xa55/0xfc0
[ 1172.503276][ T2995]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1172.503293][ T2995]  ? _raw_spin_unlock+0x40/0x40
[ 1172.503308][ T2995]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1172.503333][ T2995]  kthread+0x2fa/0x390
[ 1172.503348][ T2995]  ? pr_cont_work+0x560/0x560
[ 1172.503366][ T2995]  ? kthread_blkcg+0xd0/0xd0
[ 1172.503382][ T2995]  ret_from_fork+0x48/0x80
[ 1172.503400][ T2995]  ? kthread_blkcg+0xd0/0xd0
[ 1172.503416][ T2995]  ret_from_fork_asm+0x11/0x20
[ 1172.503442][ T2995]  </TASK>
[ 1172.503451][ T2995] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1172.503460][ T2995] CPU: 0 PID: 2995 Comm: kworker/u4:9 Not tainted syzkaller #0
[ 1172.503476][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1172.503485][ T2995] Workqueue: writeback wb_workfn (flush-7:0)
[ 1172.503510][ T2995] Call Trace:
[ 1172.503516][ T2995]  <TASK>
[ 1172.503521][ T2995]  dump_stack_lvl+0x18c/0x250
[ 1172.503544][ T2995]  ? show_regs_print_info+0x20/0x20
[ 1172.503564][ T2995]  ? load_image+0x400/0x400
[ 1172.503586][ T2995]  panic+0x2dc/0x730
[ 1172.503605][ T2995]  ? bpf_jit_dump+0xd0/0xd0
[ 1172.503624][ T2995]  ? ret_from_fork_asm+0x11/0x20
[ 1172.503646][ T2995]  __warn+0x2e0/0x470
[ 1172.503661][ T2995]  ? __mutex_lock+0xb85/0xcc0
[ 1172.503680][ T2995]  ? __mutex_lock+0xb85/0xcc0
[ 1172.503699][ T2995]  report_bug+0x2be/0x4f0
[ 1172.503719][ T2995]  ? __mutex_lock+0xb85/0xcc0
[ 1172.503737][ T2995]  ? __mutex_lock+0xb85/0xcc0
[ 1172.503756][ T2995]  ? __mutex_lock+0xb87/0xcc0
[ 1172.503776][ T2995]  handle_bug+0xcf/0x120
[ 1172.503796][ T2995]  exc_invalid_op+0x1a/0x50
[ 1172.503816][ T2995]  asm_exc_invalid_op+0x1a/0x20
[ 1172.503829][ T2995] RIP: 0010:__mutex_lock+0xb85/0xcc0
[ 1172.503849][ T2995] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 94 58 fe 03 00 0f 85 95 f5 ff ff 48 c7 c7 a0 b3 ca 8a 48 c7 c6 40 b4 ca 8a e8 4b 21 c4 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8
[ 1172.503868][ T2995] RSP: 0018:ffffc9000c427220 EFLAGS: 00010246
[ 1172.503882][ T2995] RAX: 715237a8c6e32b00 RBX: ffff88805c8b1460 RCX: ffff88802c529e00
[ 1172.503894][ T2995] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 1172.503904][ T2995] RBP: ffffc9000c427370 R08: ffff8880b8e28c13 R09: 1ffff110171c5182
[ 1172.503915][ T2995] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000
[ 1172.503926][ T2995] R13: 1ffff92001884e54 R14: dffffc0000000000 R15: 0000000000000000
[ 1172.503944][ T2995]  ? verify_lock_unused+0x140/0x140
[ 1172.503962][ T2995]  ? vprintk_emit+0x53d/0x610
[ 1172.503978][ T2995]  ? hfsplus_ext_write_extent+0x91/0x230
[ 1172.503996][ T2995]  ? mutex_lock_nested+0x20/0x20
[ 1172.504015][ T2995]  ? writeback_sb_inodes+0x362/0xf50
[ 1172.504038][ T2995]  ? inode_to_bdi+0x69/0xf0
[ 1172.504052][ T2995]  ? do_writepages+0x57c/0x630
[ 1172.504073][ T2995]  hfsplus_ext_write_extent+0x91/0x230
[ 1172.504091][ T2995]  ? hfsplus_ext_cmp_key+0x300/0x300
[ 1172.504109][ T2995]  ? __writeback_single_inode+0x48d/0xec0
[ 1172.504130][ T2995]  ? __lock_acquire+0x7d40/0x7d40
[ 1172.504146][ T2995]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1172.504167][ T2995]  hfsplus_write_inode+0x22/0x5e0
[ 1172.504185][ T2995]  __writeback_single_inode+0x705/0xec0
[ 1172.504208][ T2995]  writeback_sb_inodes+0x7cd/0xf50
[ 1172.504238][ T2995]  ? queue_io+0x550/0x550
[ 1172.504263][ T2995]  ? rcu_is_watching+0x15/0xb0
[ 1172.504285][ T2995]  wb_writeback+0x46a/0xbf0
[ 1172.504306][ T2995]  ? queue_io+0x301/0x550
[ 1172.504328][ T2995]  ? percpu_ref_tryget+0x250/0x250
[ 1172.504348][ T2995]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1172.504369][ T2995]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1172.504385][ T2995]  wb_workfn+0x400/0xe60
[ 1172.504410][ T2995]  ? inode_wait_for_writeback+0x230/0x230
[ 1172.504434][ T2995]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1172.504452][ T2995]  ? read_lock_is_recursive+0x20/0x20
[ 1172.504470][ T2995]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1172.504485][ T2995]  ? process_scheduled_works+0x96f/0x15d0
[ 1172.504503][ T2995]  ? process_scheduled_works+0x96f/0x15d0
[ 1172.504521][ T2995]  process_scheduled_works+0xa5d/0x15d0
[ 1172.504549][ T2995]  ? assign_work+0x430/0x430
[ 1172.504568][ T2995]  ? assign_work+0x3d0/0x430
[ 1172.504587][ T2995]  worker_thread+0xa55/0xfc0
[ 1172.504604][ T2995]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1172.504620][ T2995]  ? _raw_spin_unlock+0x40/0x40
[ 1172.504635][ T2995]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1172.504658][ T2995]  kthread+0x2fa/0x390
[ 1172.504671][ T2995]  ? pr_cont_work+0x560/0x560
[ 1172.504689][ T2995]  ? kthread_blkcg+0xd0/0xd0
[ 1172.504703][ T2995]  ret_from_fork+0x48/0x80
[ 1172.504720][ T2995]  ? kthread_blkcg+0xd0/0xd0
[ 1172.504734][ T2995]  ret_from_fork_asm+0x11/0x20
[ 1172.504759][ T2995]  </TASK>
[ 1172.510622][ T2995] Kernel Offset: disabled