last executing test programs:

2.53322654s ago: executing program 3 (id=18117):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x27, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001340)=ANY=[@ANYBLOB="b00000000000000000000000070000008627000000007609e22d4f25fba1a00603320009995835ea5e02c10704282005080b1847ea55f90144281f00000000070000000400000000fffff652000000810000000200000005fffffffd000000020713f1ac1e0101e00000017f00000164010102863a3556753f000a43d26d3c553e1c3400125f2b774acf7695cc7d22c69b922c56340606437ed7b10603ed020fc98a29a070b83b1aa5f9a4f6520000001100000000000000290000003b00000007000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0000007f0000010042ba91955d2b2754"], 0xe8}, 0x0)

2.424891448s ago: executing program 3 (id=18120):
syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0)

1.14667021s ago: executing program 4 (id=18157):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x4008af25, 0x0)

1.062498663s ago: executing program 4 (id=18159):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000))

973.264166ms ago: executing program 4 (id=18163):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006201200000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000f4110380f01100800800034000000002090009"], 0x12b4}}, 0x0)

862.418663ms ago: executing program 4 (id=18167):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x362cf9b5827262cb}})

708.782562ms ago: executing program 4 (id=18170):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205)

708.619753ms ago: executing program 1 (id=18171):
r0 = fanotify_init(0x200, 0x0)
fanotify_mark(r0, 0x249, 0x20, 0xffffffffffffffff, 0x0)

690.766889ms ago: executing program 2 (id=18173):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x42882)

630.397477ms ago: executing program 4 (id=18174):
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nogc_merge}, {@noflush_merge}, {@four_active_logs}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@disable_roll_forward}, {@nobarrier}, {@background_gc_off}, {@fsync_mode_posix}, {@user_xattr}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

615.184803ms ago: executing program 3 (id=18175):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x91, &(0x7f0000000040), &(0x7f00000000c0)=0x4)

587.798048ms ago: executing program 2 (id=18176):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127)
write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0'}, 0xb)

532.324437ms ago: executing program 0 (id=18177):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)={0x68, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0xc}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0x68}}, 0x0)

532.207807ms ago: executing program 1 (id=18178):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8008}, 0x0)

497.70426ms ago: executing program 3 (id=18179):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000))

475.066395ms ago: executing program 2 (id=18180):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0xd1f, 0xf0, 0x1}, 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)

428.823666ms ago: executing program 0 (id=18181):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0xc0f85403, 0x0)

425.726485ms ago: executing program 1 (id=18182):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x103100, 0x0)
ioctl$FIONREAD(r0, 0x541b, 0x0)

376.496586ms ago: executing program 2 (id=18183):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1001a}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x4c}}, 0x0)

357.020371ms ago: executing program 0 (id=18184):
r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x4, @meta={0x4731434d, 0x32b3e24d, 0x3144, 0x32e9, 0x4570bf5f}})

330.152026ms ago: executing program 3 (id=18185):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)

277.918356ms ago: executing program 1 (id=18186):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000000063a13f000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

277.425055ms ago: executing program 2 (id=18187):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_PIE_ON(r0, 0x7005)

271.383024ms ago: executing program 0 (id=18188):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)

182.119036ms ago: executing program 0 (id=18189):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(r0, 0x10001)

181.981186ms ago: executing program 2 (id=18190):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40)

172.382024ms ago: executing program 1 (id=18191):
r0 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0x8699, "3bdf820cff4756d896f098a14fa86cc74f176327771aa1eac10e84edca852b46", 0x2, 0x10, 0x4, 0x5, 0x0, 0x2, 0x8, 0x7})

44.870448ms ago: executing program 0 (id=18192):
r0 = socket(0xa, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3e05, 0x6}, &(0x7f0000000040)=0x8)

39.804427ms ago: executing program 1 (id=18193):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2)

0s ago: executing program 3 (id=18194):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296)

kernel console output (not intermixed with test programs):

boundary, start(4096) end(12800) block(12288)
[ 1110.368200][ T7199] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[ 1110.402024][ T7199] F2FS-fs (loop0): invalid crc value
[ 1110.408102][ T7199] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[ 1110.417610][   T21] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1110.428781][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21
[ 1110.453951][ T7199] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1110.461450][   T21] usb 4-1: Product: syz
[ 1110.471450][   T21] usb 4-1: Manufacturer: syz
[ 1110.484003][   T21] usb 4-1: SerialNumber: syz
[ 1110.510837][   T21] usb 4-1: config 0 descriptor??
[ 1110.555803][ T5175] usb 3-1: Using ep0 maxpacket: 8
[ 1110.564399][ T7199] F2FS-fs (loop0): recover fsync data on readonly fs
[ 1110.573888][   T21] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[ 1110.583381][   T21] usb 4-1: No valid video chain found.
[ 1110.592080][ T7199] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30
[ 1110.610130][ T7199] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1110.677020][ T5175] usb 3-1: config 1 has an invalid interface number: 128 but max is 1
[ 1110.691961][ T5175] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1110.713330][ T5175] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1110.733928][ T5175] usb 3-1: config 1 has no interface number 0
[ 1110.746820][ T5175] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1110.766220][   T21] usb 4-1: USB disconnect, device number 66
[ 1110.864580][ T7235] loop1: detected capacity change from 0 to 512
[ 1110.928591][ T5175] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1110.939473][ T5175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.948171][ T5175] usb 3-1: Product: syz
[ 1110.952608][ T5175] usb 3-1: Manufacturer: syz
[ 1110.959011][ T5175] usb 3-1: SerialNumber: syz
[ 1111.013776][ T5175] cdc_wdm 3-1:1.128: skipping garbage
[ 1111.029389][ T5175] cdc_wdm 3-1:1.128: invalid descriptor buffer length
[ 1111.046779][ T5175] cdc_wdm: probe of 3-1:1.128 failed with error -22
[ 1111.067814][ T7235] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1111.096433][ T7235] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[ 1111.167539][ T7235] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 1111.196903][ T5175] usb 3-1: USB disconnect, device number 57
[ 1111.227473][ T7235] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.16139: attempt to clear invalid blocks 2 len 1
[ 1111.263527][ T7235] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.16139: invalid indirect mapped block 1819239214 (level 0)
[ 1111.295750][ T7235] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.16139: invalid indirect mapped block 1819239214 (level 1)
[ 1111.347136][ T7235] EXT4-fs (loop1): 1 truncate cleaned up
[ 1111.363139][ T7235] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback.
[ 1111.431792][ T7235] EXT4-fs error (device loop1): ext4_lookup:1855: inode #2: comm syz.1.16139: 'file1' linked to parent dir
[ 1111.535309][ T7261] netlink: 'syz.4.16150': attribute type 5 has an invalid length.
[ 1111.835818][ T7287] __nla_validate_parse: 3 callbacks suppressed
[ 1111.835845][ T7287] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16162'.
[ 1111.867206][ T7289] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16163'.
[ 1111.915353][ T7291] netlink: 'syz.3.16164': attribute type 3 has an invalid length.
[ 1111.941435][ T7291] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16164'.
[ 1111.975457][ T7296] loop0: detected capacity change from 0 to 256
[ 1111.995611][ T7293] loop4: detected capacity change from 0 to 1764
[ 1112.016214][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16168'.
[ 1112.079498][ T7293] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1112.109047][ T7305] loop2: detected capacity change from 0 to 1024
[ 1112.120996][ T7296] FAT-fs (loop0): Directory bread(block 64) failed
[ 1112.134225][ T7296] FAT-fs (loop0): Directory bread(block 65) failed
[ 1112.164682][ T7296] FAT-fs (loop0): Directory bread(block 66) failed
[ 1112.181731][ T7296] FAT-fs (loop0): Directory bread(block 67) failed
[ 1112.188698][ T7296] FAT-fs (loop0): Directory bread(block 68) failed
[ 1112.214983][ T7296] FAT-fs (loop0): Directory bread(block 69) failed
[ 1112.221918][ T7296] FAT-fs (loop0): Directory bread(block 70) failed
[ 1112.223941][ T7305] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1112.262470][ T7296] FAT-fs (loop0): Directory bread(block 71) failed
[ 1112.269215][ T7296] FAT-fs (loop0): Directory bread(block 72) failed
[ 1112.278520][ T7296] FAT-fs (loop0): Directory bread(block 73) failed
[ 1112.338359][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16176'.
[ 1112.739908][ T7343] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1112.748975][ T7344] loop3: detected capacity change from 0 to 256
[ 1112.814361][ T7344] FAT-fs (loop3): Directory bread(block 64) failed
[ 1112.821536][ T7344] FAT-fs (loop3): Directory bread(block 65) failed
[ 1112.828745][ T7344] FAT-fs (loop3): Directory bread(block 66) failed
[ 1112.838121][ T7344] FAT-fs (loop3): Directory bread(block 67) failed
[ 1112.848263][ T7344] FAT-fs (loop3): Directory bread(block 68) failed
[ 1112.856613][ T7344] FAT-fs (loop3): Directory bread(block 69) failed
[ 1112.869105][ T7348] SET target dimension over the limit!
[ 1112.891620][ T7344] FAT-fs (loop3): Directory bread(block 70) failed
[ 1112.915927][ T7344] FAT-fs (loop3): Directory bread(block 71) failed
[ 1112.922600][ T7344] FAT-fs (loop3): Directory bread(block 72) failed
[ 1112.950805][ T7344] FAT-fs (loop3): Directory bread(block 73) failed
[ 1113.149677][ T7366] netlink: 'syz.2.16197': attribute type 4 has an invalid length.
[ 1113.184499][ T7366] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16197'.
[ 1113.327888][ T7377] loop2: detected capacity change from 0 to 512
[ 1113.411394][ T7377] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[ 1113.536155][ T7388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16211'.
[ 1113.546200][ T7377] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.16205: Directory hole found for htree leaf block 0
[ 1113.567871][ T7377] EXT4-fs (loop2): Remounting filesystem read-only
[ 1114.031993][ T7420] loop0: detected capacity change from 0 to 1024
[ 1114.131997][ T7431] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1114.135482][ T7420] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[ 1114.175532][ T7420] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[ 1114.210141][ T7420] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1114.256760][ T7437] comedi comedi0: Cannot bond this driver to itself!
[ 1114.264693][ T7420] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003]
[ 1114.294782][ T7420] System zones: 0-1, 3-36
[ 1114.306313][ T7420] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,mblk_io_submit,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[ 1114.327116][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1114.458225][ T7443] loop4: detected capacity change from 0 to 1024
[ 1114.716775][ T7463] netlink: 'syz.3.16246': attribute type 1 has an invalid length.
[ 1114.784012][ T7463] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16246'.
[ 1114.812821][ T7463] netlink: 9 bytes leftover after parsing attributes in process `syz.3.16246'.
[ 1114.843337][ T7472] loop1: detected capacity change from 0 to 8
[ 1114.893589][ T7476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16253'.
[ 1114.903691][ T7472] MTD: Attempt to mount non-MTD device "/dev/loop1"
[ 1114.922338][ T7472] cramfs: Error -5 while decompressing!
[ 1114.945368][ T7472] cramfs: ffffffff964030a8(26)->ffff8880525d7000(4096)
[ 1114.956440][ T7472] cramfs: Error -3 while decompressing!
[ 1114.971925][ T7472] cramfs: ffffffff964030c2(26)->ffff88806887e000(4096)
[ 1114.990853][ T7472] cramfs: Error -3 while decompressing!
[ 1115.013741][ T7472] cramfs: ffffffff964030dc(16)->ffff888050135000(4096)
[ 1115.029768][ T7472] cramfs: Error -5 while decompressing!
[ 1115.044504][ T7472] cramfs: ffffffff964030a8(26)->ffff8880525d7000(4096)
[ 1115.364918][ T5622] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1115.607448][ T5622] usb 5-1: Using ep0 maxpacket: 8
[ 1115.709895][ T5628] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1115.798096][ T7529] libceph: resolve '400' (ret=-3): failed
[ 1115.879666][ T5622] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 1115.908282][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1115.937094][ T5628] usb 2-1: Using ep0 maxpacket: 32
[ 1115.945317][ T5622] usb 5-1: Product: syz
[ 1115.960021][ T5622] usb 5-1: Manufacturer: syz
[ 1115.969832][ T5622] usb 5-1: SerialNumber: syz
[ 1116.046812][ T5628] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1116.070884][ T5628] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1116.101454][ T5628] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1116.236256][ T7513] loop0: detected capacity change from 0 to 32768
[ 1116.288321][ T5622] usb 5-1: 1:1: cannot get freq (v2/v3): err -71
[ 1116.298999][ T5628] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1116.311641][ T7513] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.16270 (7513)
[ 1116.334889][ T5628] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1116.343602][ T5622] usb 5-1: 2:1: cannot get freq (v2/v3): err -71
[ 1116.375950][ T5628] usb 2-1: Product: syz
[ 1116.380241][ T5628] usb 2-1: Manufacturer: syz
[ 1116.400947][ T5622] usb 5-1: USB disconnect, device number 59
[ 1116.418755][ T5628] usb 2-1: SerialNumber: syz
[ 1116.475214][ T7513] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 1116.492528][ T5628] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input70
[ 1116.513103][ T7513] BTRFS info (device loop0): turning off barriers
[ 1116.561088][ T7513] BTRFS info (device loop0): setting nodatasum
[ 1116.586617][ T7513] BTRFS info (device loop0): turning on flush-on-commit
[ 1116.611831][ T7513] BTRFS info (device loop0): use no compression
[ 1116.638020][ T7513] BTRFS info (device loop0): unrecognized rescue option 'imetacsums'
[ 1116.646856][ T8630] udevd[8630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1116.685029][ T7513] BTRFS error (device loop0): unrecognized rescue value imetacsums
[ 1116.717478][ T7574] netlink: 'syz.2.16290': attribute type 12 has an invalid length.
[ 1116.755412][ T7513] BTRFS error (device loop0): open_ctree failed: -22
[ 1116.765693][ T7574] netlink: 'syz.2.16290': attribute type 12 has an invalid length.
[ 1116.785431][ T5175] usb 2-1: USB disconnect, device number 65
[ 1116.810517][ T7566] loop3: detected capacity change from 0 to 4096
[ 1116.827493][ T7574] netlink: 'syz.2.16290': attribute type 12 has an invalid length.
[ 1116.868768][ T5175] appletouch 2-1:1.0: input: appletouch disconnected
[ 1116.960838][ T7566] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1116.975231][ T7566] ntfs3: loop3: Failed to load $Extend.
[ 1117.076395][ T4197] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22.
[ 1117.099610][ T4197] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22.
[ 1117.145428][   T21] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1117.332073][ T5622] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1117.424763][   T21] usb 1-1: Using ep0 maxpacket: 32
[ 1117.574041][   T21] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[ 1117.582573][   T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1117.621667][   T21] usb 1-1: config 0 has no interface number 0
[ 1117.638650][   T21] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64
[ 1117.659703][   T21] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1117.668505][ T5622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1117.694870][   T21] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1117.695744][ T5622] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1117.718505][   T21] usb 1-1: config 0 interface 85 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 7
[ 1117.751626][   T21] usb 1-1: config 0 interface 85 has no altsetting 0
[ 1117.770591][ T5622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1117.790005][ T5622] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1117.800964][ T5622] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1117.810426][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.827679][ T5622] usb 3-1: config 0 descriptor??
[ 1117.840099][ T7596] loop4: detected capacity change from 0 to 32768
[ 1117.948412][   T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1117.959570][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1117.977802][   T21] usb 1-1: Product: syz
[ 1117.982039][   T21] usb 1-1: Manufacturer: syz
[ 1118.003858][   T21] usb 1-1: SerialNumber: syz
[ 1118.032305][ T5442] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1118.040904][   T21] usb 1-1: config 0 descriptor??
[ 1118.067902][ T5622] hdpvr 3-1:0.0: firmware version 0x0 dated 
[ 1118.073967][ T5622] hdpvr 3-1:0.0: untested firmware, the driver might not work.
[ 1118.139536][ T7633] loop4: detected capacity change from 0 to 256
[ 1118.195830][ T7637] netlink: 'syz.1.16318': attribute type 1 has an invalid length.
[ 1118.204006][ T7637] netlink: 'syz.1.16318': attribute type 2 has an invalid length.
[ 1118.261588][ T7633] FAT-fs (loop4): Directory bread(block 64) failed
[ 1118.264867][ T5622] hdpvr 3-1:0.0: device init failed
[ 1118.284178][ T5622] hdpvr: probe of 3-1:0.0 failed with error -12
[ 1118.291557][   T21] appletouch 1-1:0.85: Failed to read mode from device.
[ 1118.298799][   T21] appletouch: probe of 1-1:0.85 failed with error -5
[ 1118.308955][ T7633] FAT-fs (loop4): Directory bread(block 65) failed
[ 1118.321273][ T7633] FAT-fs (loop4): Directory bread(block 66) failed
[ 1118.335257][ T5622] usb 3-1: USB disconnect, device number 58
[ 1118.339045][ T7633] FAT-fs (loop4): Directory bread(block 67) failed
[ 1118.376945][   T21] usb 1-1: USB disconnect, device number 47
[ 1118.397274][ T7633] FAT-fs (loop4): Directory bread(block 68) failed
[ 1118.427511][ T7633] FAT-fs (loop4): Directory bread(block 69) failed
[ 1118.451110][ T7633] FAT-fs (loop4): Directory bread(block 70) failed
[ 1118.457833][ T7633] FAT-fs (loop4): Directory bread(block 71) failed
[ 1118.469182][ T7633] FAT-fs (loop4): Directory bread(block 72) failed
[ 1118.475951][ T7633] FAT-fs (loop4): Directory bread(block 73) failed
[ 1118.641135][ T5442] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 1118.656279][ T7651] __nla_validate_parse: 2 callbacks suppressed
[ 1118.656299][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16325'.
[ 1118.671320][ T5442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1118.685983][ T5442] usb 4-1: Product: syz
[ 1118.690316][ T5442] usb 4-1: Manufacturer: syz
[ 1118.695373][ T5442] usb 4-1: SerialNumber: syz
[ 1118.728454][ T5442] r8152-cfgselector 4-1: config 0 descriptor??
[ 1118.734925][ T7653] loop1: detected capacity change from 0 to 1024
[ 1118.746743][ T7653] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled
[ 1118.756829][ T7653] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1118.804827][ T7653] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c02c, mo2=0103]
[ 1118.813036][ T7653] System zones: 0-1, 3-36
[ 1118.879531][ T7653] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=./bus,delalloc,bsdgroups,debug,dioread_nolock,bsddf,abort,noauto_da_alloc,errors=remount-ro,mb_optimize_scan=0x0000000000000000,auto_da_alloc,auto_da_alloc,. Quota mode: writeback.
[ 1119.003849][ T7665] netlink: 'syz.4.16330': attribute type 1 has an invalid length.
[ 1119.041697][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16330'.
[ 1119.214679][ T5442] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1119.226114][ T5442] r8152-cfgselector 4-1: USB disconnect, device number 67
[ 1119.263725][ T7684] netlink: 244 bytes leftover after parsing attributes in process `syz.0.16340'.
[ 1119.989867][ T7733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16364'.
[ 1120.124146][ T7742] netlink: 'syz.3.16368': attribute type 10 has an invalid length.
[ 1120.166760][ T7745] loop0: detected capacity change from 0 to 64
[ 1120.173832][ T7742] device hsr0 entered promiscuous mode
[ 1120.220624][ T7742] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1120.233907][ T7742] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 1120.263575][ T7742] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1120.284227][ T7742] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 1120.291571][ T7748] netlink: 'syz.2.16372': attribute type 9 has an invalid length.
[ 1120.319441][ T7748] netlink: 'syz.2.16372': attribute type 6 has an invalid length.
[ 1120.844629][ T7783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16390'.
[ 1120.889039][ T7783] netlink: 112 bytes leftover after parsing attributes in process `syz.0.16390'.
[ 1120.917604][ T7785] netlink: 'syz.3.16389': attribute type 21 has an invalid length.
[ 1120.947898][ T7785] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1121.264640][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16401'.
[ 1121.485911][ T7822] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready
[ 1121.675328][ T7834] validate_nla: 2 callbacks suppressed
[ 1121.675347][ T7834] netlink: 'syz.1.16414': attribute type 21 has an invalid length.
[ 1121.706373][ T7832] ubi31: attaching mtd0
[ 1121.711839][ T7834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16414'.
[ 1121.741709][ T7836] netlink: 'syz.2.16416': attribute type 1 has an invalid length.
[ 1121.754974][ T7832] ubi31: scanning is finished
[ 1121.768496][ T7832] ubi31: empty MTD device detected
[ 1121.919009][ T7845] netlink: 'syz.0.16419': attribute type 1 has an invalid length.
[ 1121.927163][ T7845] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16419'.
[ 1121.939049][ T7841] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[ 1122.029625][ T7832] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1122.051962][ T7832] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1122.082311][ T7832] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1122.103630][ T7832] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1122.141248][ T7832] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1122.171247][ T7832] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1122.200852][ T7832] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 337961464
[ 1122.244332][ T7832] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1122.283558][ T7848] ubi31: background thread "ubi_bgt31d" started, PID 7848
[ 1122.475355][ T7858] loop3: detected capacity change from 0 to 1024
[ 1122.665916][ T7864] netlink: 'syz.0.16428': attribute type 10 has an invalid length.
[ 1122.703371][ T7843] loop2: detected capacity change from 0 to 32768
[ 1122.713862][ T7864] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16428'.
[ 1122.747682][ T7864] device virt_wifi0 entered promiscuous mode
[ 1122.763818][ T7864] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1123.360284][ T7895] netlink: 'syz.3.16443': attribute type 10 has an invalid length.
[ 1123.389054][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16443'.
[ 1123.416910][ T7895] device virt_wifi0 entered promiscuous mode
[ 1123.449739][ T7895] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1123.486943][ T7897] netlink: 'syz.2.16444': attribute type 21 has an invalid length.
[ 1123.511396][ T7897] netlink: 'syz.2.16444': attribute type 1 has an invalid length.
[ 1123.538745][ T7897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16444'.
[ 1123.813384][ T7913] netlink: 'syz.0.16452': attribute type 1 has an invalid length.
[ 1123.839743][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16452'.
[ 1124.078424][ T7927] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16459'.
[ 1124.310494][ T7939] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16465'.
[ 1124.326989][ T7941] QAT: Invalid ioctl 1075883590
[ 1124.334415][ T7941] QAT: Invalid ioctl 1075883590
[ 1124.347539][ T7941] QAT: Invalid ioctl 1075883590
[ 1124.358874][ T7941] QAT: Invalid ioctl 1075883590
[ 1124.371454][ T7941] QAT: Invalid ioctl 1075883590
[ 1124.384181][ T7941] QAT: Invalid ioctl 1075883590
[ 1124.397399][ T7941] QAT: Invalid ioctl 1075883590
[ 1124.403932][ T7941] QAT: Invalid ioctl 1075883590
[ 1124.414408][ T7941] QAT: Invalid ioctl 1075883590
[ 1124.427956][ T7941] QAT: Invalid ioctl 1075883590
[ 1124.472971][ T7945] loop0: detected capacity change from 0 to 64
[ 1124.479292][ T7694] vivid-000: kernel_thread() failed
[ 1124.560080][ T7945] attempt to access beyond end of device
[ 1124.560080][ T7945] loop0: rw=0, want=65536, limit=64
[ 1124.610939][ T7945] Buffer I/O error on dev loop0, logical block 32767, async page read
[ 1124.636742][ T7945] attempt to access beyond end of device
[ 1124.636742][ T7945] loop0: rw=0, want=65536, limit=64
[ 1124.657717][ T7945] Buffer I/O error on dev loop0, logical block 32767, async page read
[ 1125.041420][ T7961] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1125.204136][ T7956] loop0: detected capacity change from 0 to 40427
[ 1125.242700][ T7956] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1125.251037][ T7956] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1125.277317][ T7956] F2FS-fs (loop0): invalid crc value
[ 1125.306146][ T7956] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1125.383303][ T7956] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1125.393211][ T7956] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1125.822235][ T7984] loop0: detected capacity change from 0 to 764
[ 1125.845857][ T7984] Symlink component flag not implemented
[ 1125.865818][ T7984] Symlink component flag not implemented
[ 1125.881780][ T7984] Symlink component flag not implemented (128)
[ 1125.903921][ T7984] Symlink component flag not implemented (122)
[ 1126.522302][ T8016] loop0: detected capacity change from 0 to 64
[ 1126.614616][ T8016] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported.
[ 1126.651532][ T8016] MINIX-fs: bad superblock
[ 1126.886320][ T8033] netlink: 'syz.0.16508': attribute type 3 has an invalid length.
[ 1126.983814][ T8002] loop2: detected capacity change from 0 to 32768
[ 1127.145874][ T8002] JBD2: Ignoring recovery information on journal
[ 1127.212873][ T8002] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1127.282456][ T8062] loop1: detected capacity change from 0 to 1024
[ 1127.453347][ T8002] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[ 1127.475570][  T391] hfsplus: b-tree write err: -5, ino 25
[ 1127.493167][  T391] hfsplus: b-tree write err: -5, ino 4
[ 1127.498770][  T391] hfsplus: b-tree write err: -5, ino 2
[ 1127.523006][ T8002] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1127.554855][ T8002] OCFS2: File system is now read-only.
[ 1127.560871][ T8002] (syz.2.16493,8002,0):ocfs2_search_chain:1761 ERROR: status = -30
[ 1127.640300][ T8002] (syz.2.16493,8002,0):ocfs2_search_chain:1871 ERROR: status = -30
[ 1127.671158][ T8002] (syz.2.16493,8002,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[ 1127.714611][ T8002] (syz.2.16493,8002,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[ 1127.744547][ T8002] (syz.2.16493,8002,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[ 1127.772876][ T8002] (syz.2.16493,8002,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[ 1127.816889][ T8088] loop4: detected capacity change from 0 to 512
[ 1127.823604][ T8002] (syz.2.16493,8002,0):ocfs2_mknod_locked:639 ERROR: status = -30
[ 1127.844403][ T8002] (syz.2.16493,8002,0):ocfs2_symlink:1941 ERROR: status = -30
[ 1127.880355][ T8002] (syz.2.16493,8002,0):ocfs2_symlink:2065 ERROR: status = -30
[ 1127.942745][ T8088] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[ 1128.005463][ T8103] netlink: 292 bytes leftover after parsing attributes in process `syz.3.16539'.
[ 1128.023103][ T4198] ocfs2: Unmounting device (7,2) on (node local)
[ 1128.681381][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16564'.
[ 1128.807194][ T8679] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1128.937477][ T8173] netlink: 'syz.2.16575': attribute type 13 has an invalid length.
[ 1129.093470][ T8679] usb 5-1: Using ep0 maxpacket: 16
[ 1129.214699][ T8679] usb 5-1: config 0 has an invalid interface number: 104 but max is 1
[ 1129.226567][ T8679] usb 5-1: config 0 has an invalid interface number: 104 but max is 1
[ 1129.248535][ T8679] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1129.279685][ T8679] usb 5-1: config 0 has no interface number 0
[ 1129.285899][ T8679] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[ 1129.306534][ T8679] usb 5-1: config 0 interface 104 has no altsetting 1
[ 1129.321611][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16585'.
[ 1129.345005][ T5442] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1129.418421][ T8201] loop1: detected capacity change from 0 to 512
[ 1129.443734][ T8201] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[ 1129.466640][ T8201] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1129.473776][ T8201] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1129.481373][ T5175] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[ 1129.489770][ T8201] EXT4-fs (loop1): Mount option "journal_async_commit" incompatible with ext3
[ 1129.522185][ T8679] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[ 1129.531938][ T8679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1129.539961][ T8679] usb 5-1: Product: syz
[ 1129.545479][ T8679] usb 5-1: Manufacturer: syz
[ 1129.550129][ T8679] usb 5-1: SerialNumber: syz
[ 1129.565886][ T8679] usb 5-1: config 0 descriptor??
[ 1129.612998][ T8679] asix: probe of 5-1:0.104 failed with error -22
[ 1129.746295][ T5442] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1129.758391][ T5442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1129.777176][ T5442] usb 3-1: config 0 descriptor??
[ 1129.796890][ T8203] loop0: detected capacity change from 0 to 32768
[ 1129.808963][ T5619] usb 5-1: USB disconnect, device number 60
[ 1129.845361][ T8203] (syz.0.16589,8203,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1129.867559][ T8203] (syz.0.16589,8203,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1129.890461][ T8203] JBD2: Ignoring recovery information on journal
[ 1129.914083][ T8679] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1129.922108][ T5175] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1129.936753][ T8203] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1129.949717][ T8203] (syz.0.16589,8203,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[ 1129.978331][ T8203] (syz.0.16589,8203,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[ 1129.993367][ T5175] usb 4-1: not running at top speed; connect to a high speed hub
[ 1130.001207][ T8203] (syz.0.16589,8203,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[ 1130.017672][ T8203] (syz.0.16589,8203,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[ 1130.027286][ T8203] (syz.0.16589,8203,1):ocfs2_quota_read:201 ERROR: status = -5
[ 1130.034893][ T8203] Quota error (device loop0): find_block_dqentry: Can't read quota tree block 6
[ 1130.047631][ T8203] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[ 1130.057257][ T8203] (syz.0.16589,8203,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[ 1130.093046][ T4207] ocfs2: Unmounting device (7,0) on (node local)
[ 1130.116893][ T5175] usb 4-1: config 2 has an invalid interface number: 171 but max is 0
[ 1130.125674][ T5175] usb 4-1: config 2 has no interface number 0
[ 1130.133522][ T5175] usb 4-1: config 2 interface 171 has no altsetting 0
[ 1130.225335][ T5442] ath6kl: Failed to submit usb control message: -71
[ 1130.232506][ T5442] ath6kl: unable to send the bmi data to the device: -71
[ 1130.239577][ T5442] ath6kl: Unable to send get target info: -71
[ 1130.249530][ T5442] ath6kl: Failed to init ath6kl core: -71
[ 1130.273186][ T8208] netlink: 'syz.0.16590': attribute type 2 has an invalid length.
[ 1130.282180][ T8208] netlink: 'syz.0.16590': attribute type 1 has an invalid length.
[ 1130.283262][ T5442] ath6kl_usb: probe of 3-1:0.0 failed with error -71
[ 1130.305015][ T5442] usb 3-1: USB disconnect, device number 59
[ 1130.342359][ T8679] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[ 1130.350503][ T8679] usb 2-1: config 0 has no interface number 0
[ 1130.356939][ T5175] usb 4-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=c4.e0
[ 1130.369628][ T5175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1130.378378][ T8679] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10
[ 1130.392497][ T5175] usb 4-1: Product: syz
[ 1130.406523][ T5175] usb 4-1: Manufacturer: syz
[ 1130.414244][ T8679] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024
[ 1130.425942][ T5175] usb 4-1: SerialNumber: syz
[ 1130.490456][ T8216] loop0: detected capacity change from 0 to 8
[ 1130.551115][ T8216] SQUASHFS error: Unable to read inode 0x0
[ 1130.614680][ T8679] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1130.638997][ T8224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1130.653035][ T8679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1130.673506][ T8679] usb 2-1: Product: syz
[ 1130.678505][ T8679] usb 2-1: Manufacturer: syz
[ 1130.683147][ T8679] usb 2-1: SerialNumber: syz
[ 1130.707228][ T8679] usb 2-1: config 0 descriptor??
[ 1130.738756][ T5175] gspca_main: sunplus-2.14.0 probing 046d:0960
[ 1130.745896][ T8201] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[ 1130.774809][ T5175] gspca_sunplus: reg_w_riv err -71
[ 1130.784179][ T8679] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[ 1130.799167][ T5175] sunplus: probe of 4-1:2.171 failed with error -71
[ 1130.820066][ T5175] usb 4-1: USB disconnect, device number 68
[ 1130.963618][ T8679] usb 2-1: USB disconnect, device number 66
[ 1130.989545][ T8679] yurex 2-1:0.50: USB YUREX #0 now disconnected
[ 1131.086915][ T8246] xt_hashlimit: overflow, try lower: 3/0
[ 1131.134937][ T5619] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1131.335813][ T8258] loop2: detected capacity change from 0 to 4096
[ 1131.393096][ T8266] netlink: 'syz.3.16619': attribute type 1 has an invalid length.
[ 1131.396300][ T5619] usb 5-1: Using ep0 maxpacket: 8
[ 1131.516895][ T5619] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[ 1131.525044][ T5619] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1131.550037][ T5619] usb 5-1: config 0 has no interface number 0
[ 1131.562114][ T5619] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1131.582078][ T8679] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[ 1131.586608][ T5619] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1131.643454][ T5619] usb 5-1: config 0 interface 52 has no altsetting 0
[ 1131.700343][ T8272] loop3: detected capacity change from 0 to 4096
[ 1131.747597][ T5619] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1131.764333][ T8272] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[ 1131.769909][ T5619] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 1131.801872][ T5619] usb 5-1: Manufacturer: syz
[ 1131.841475][ T5619] usb 5-1: config 0 descriptor??
[ 1131.881191][ T5619] hub 5-1:0.52: bad descriptor, ignoring hub
[ 1131.889051][ T8280] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16626'.
[ 1131.907541][ T5619] hub: probe of 5-1:0.52 failed with error -5
[ 1131.938385][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16627'.
[ 1131.993140][ T8679] usb 1-1: config 0 has an invalid interface number: 104 but max is 1
[ 1132.001464][ T8679] usb 1-1: config 0 has an invalid interface number: 104 but max is 1
[ 1132.028775][ T8679] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1132.061140][ T8288] loop1: detected capacity change from 0 to 256
[ 1132.066972][ T8679] usb 1-1: config 0 has no interface number 0
[ 1132.073685][ T8679] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64
[ 1132.095394][ T8679] usb 1-1: config 0 interface 104 has no altsetting 1
[ 1132.107513][ T5619] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input73
[ 1132.263730][ T8679] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[ 1132.282201][ T8679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1132.317035][ T8294] loop3: detected capacity change from 0 to 4096
[ 1132.317710][ T8679] usb 1-1: Product: syz
[ 1132.332698][ T8679] usb 1-1: Manufacturer: syz
[ 1132.337834][ T8679] usb 1-1: SerialNumber: syz
[ 1132.347682][ T5619] usb 5-1: USB disconnect, device number 61
[ 1132.356772][ T8296] loop2: detected capacity change from 0 to 164
[ 1132.365461][ T8679] usb 1-1: config 0 descriptor??
[ 1132.404542][ T8679] asix: probe of 1-1:0.104 failed with error -22
[ 1132.417003][ T8296] Symlink component flag not implemented
[ 1132.450078][ T8296] Symlink component flag not implemented (7)
[ 1132.613842][ T5622] usb 1-1: USB disconnect, device number 48
[ 1132.736093][ T8312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1132.867395][ T8309] loop2: detected capacity change from 0 to 4096
[ 1132.928835][ T8318] netlink: 'syz.1.16645': attribute type 1 has an invalid length.
[ 1132.982284][ T8323] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1132.998898][ T8325] netlink: 'syz.1.16648': attribute type 1 has an invalid length.
[ 1133.007457][ T8325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16648'.
[ 1133.020785][ T8325] netlink: 'syz.1.16648': attribute type 1 has an invalid length.
[ 1133.035357][ T8309] NILFS error (device loop2): nilfs_check_page: size of directory #2 is not a multiple of chunk size
[ 1133.109062][ T8309] Remounting filesystem read-only
[ 1133.126853][ T8329] loop3: detected capacity change from 0 to 512
[ 1133.202010][ T8329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022]
[ 1133.247644][ T8329] System zones: 1-12
[ 1133.321054][ T8329] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.16649: Directory hole found for htree index block 0
[ 1133.404730][ T8329] EXT4-fs (loop3): Remounting filesystem read-only
[ 1133.472723][ T8329] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[ 1133.521339][ T8329] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.16649: Directory hole found for htree index block 0
[ 1133.607147][ T8329] EXT4-fs (loop3): Remounting filesystem read-only
[ 1133.623022][ T8329] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[ 1133.672832][ T8329] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback.
[ 1133.750915][ T8329] EXT4-fs (loop3): re-mounted. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback.
[ 1133.896752][ T8381] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1134.183209][ T8400] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1134.239355][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16686'.
[ 1134.356588][ T8408] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16688'.
[ 1134.630979][ T8426] loop2: detected capacity change from 0 to 764
[ 1134.745421][ T8382] loop4: detected capacity change from 0 to 32768
[ 1134.967536][T18189] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1135.096651][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16714'.
[ 1135.329040][T18189] usb 4-1: config index 0 descriptor too short (expected 1572, got 36)
[ 1135.352591][T18189] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1135.373124][ T8474] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16720'.
[ 1135.534204][T18189] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[ 1135.571254][T18189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.582555][T18189] usb 4-1: Product: syz
[ 1135.586765][T18189] usb 4-1: Manufacturer: syz
[ 1135.591928][T18189] usb 4-1: SerialNumber: syz
[ 1135.638366][ T8486] loop4: detected capacity change from 0 to 4096
[ 1135.662806][T18189] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input74
[ 1135.691115][ T8486] ntfs3: loop4: Failed to load $MFT.
[ 1135.706219][ T8488] loop0: detected capacity change from 0 to 4096
[ 1135.740748][ T8488] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 1135.850784][ T3547] bcm5974 4-1:1.0: could not read from device
[ 1135.871534][T18189] usb 4-1: USB disconnect, device number 69
[ 1135.878390][ T3547] bcm5974 4-1:1.0: could not read from device
[ 1135.930300][ T8488] ntfs: (device loop0): parse_options(): NLS character set cp9251 not found. Using previous one macturkish.
[ 1135.978915][ T8486] loop4: detected capacity change from 0 to 4096
[ 1136.018671][ T8486] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[ 1136.043251][ T8488] ntfs: volume version 3.1.
[ 1136.077150][ T8488] ntfs: (device loop0): ntfs_index_lookup(): Corrupt index.  Aborting lookup.
[ 1136.096010][ T8486] ntfs3: loop4: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver).
[ 1136.096010][ T8486] Volume contains 64 bits run: vcn 0, lcn 480000008000, len 2.
[ 1136.096010][ T8486] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case
[ 1136.123747][ T8488] ntfs: (device loop0): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed.
[ 1136.135563][ T8488] ntfs: (device loop0): load_system_files(): Failed to mark quotas out of date.  Mounting read-only.  Run chkdsk.
[ 1136.151918][ T8486] ntfs3: loop4: Failed to load $UpCase.
[ 1136.280714][ T8506] ieee802154 phy0 wpan0: encryption failed: -22
[ 1136.289944][ T8508] netlink: 52 bytes leftover after parsing attributes in process `syz.1.16732'.
[ 1136.571219][ T8528] netlink: 'syz.1.16743': attribute type 13 has an invalid length.
[ 1136.629637][ T8532] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16745'.
[ 1136.680209][ T8532] netlink: 84 bytes leftover after parsing attributes in process `syz.4.16745'.
[ 1136.926312][ T8560] netlink: 'syz.4.16759': attribute type 3 has an invalid length.
[ 1137.047710][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16764'.
[ 1137.076901][ T8570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1137.493903][ T8608] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1137.556076][ T5622] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1137.614415][ T8613] loop2: detected capacity change from 0 to 1024
[ 1137.705699][ T8679] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1137.783604][ T8613] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1137.800316][ T5622] usb 4-1: Using ep0 maxpacket: 16
[ 1137.857668][ T8613] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 32: comm syz.2.16785: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=255, rec_len=0, size=1024 fake=0
[ 1137.931790][ T5622] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[ 1137.951328][ T5622] usb 4-1: config 0 has no interface number 0
[ 1137.970738][ T5622] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[ 1138.065637][ T8679] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 1138.085419][ T8679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.096778][ T5622] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1138.108478][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1138.118351][ T8679] usb 1-1: config 0 descriptor??
[ 1138.139272][ T5622] usb 4-1: Product: syz
[ 1138.143875][ T5622] usb 4-1: SerialNumber: syz
[ 1138.166652][ T5622] usb 4-1: config 0 descriptor??
[ 1138.169335][ T8679] gspca_main: spca508-2.14.0 probing 8086:0110
[ 1138.220761][ T5622] usbhid 4-1:0.8: couldn't find an input interrupt endpoint
[ 1138.301896][ T5442] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1138.339175][ T8644] loop2: detected capacity change from 0 to 4096
[ 1138.394345][ T8644] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1138.423016][ T5622] usb 4-1: USB disconnect, device number 70
[ 1138.494116][ T8638] loop4: detected capacity change from 0 to 32768
[ 1138.553511][ T5442] usb 2-1: Using ep0 maxpacket: 8
[ 1138.562639][ T8679] gspca_spca508: reg_read err -71
[ 1138.586803][ T8679] gspca_spca508: reg_read err -71
[ 1138.615040][ T8638] JBD2: Ignoring recovery information on journal
[ 1138.622123][ T8679] gspca_spca508: reg_read err -71
[ 1138.660785][ T8679] gspca_spca508: reg_read err -71
[ 1138.677493][ T8638] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1138.702848][ T8679] gspca_spca508: reg write: error -71
[ 1138.719578][ T8679] spca508: probe of 1-1:0.0 failed with error -71
[ 1138.732854][ T5442] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1138.745524][ T8638] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[ 1138.763917][ T8638] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1138.774307][ T8638] OCFS2: File system is now read-only.
[ 1138.780535][ T8638] (syz.4.16795,8638,0):ocfs2_search_chain:1761 ERROR: status = -30
[ 1138.793766][ T8679] usb 1-1: USB disconnect, device number 49
[ 1138.795697][ T8638] (syz.4.16795,8638,0):ocfs2_search_chain:1871 ERROR: status = -30
[ 1138.808462][ T8638] (syz.4.16795,8638,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[ 1138.821351][ T8638] (syz.4.16795,8638,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[ 1138.832981][ T5442] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1138.855841][ T8638] (syz.4.16795,8638,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[ 1138.870043][ T8638] (syz.4.16795,8638,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[ 1138.877278][ T5442] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1138.880078][ T8638] (syz.4.16795,8638,0):ocfs2_mknod_locked:639 ERROR: status = -30
[ 1138.895493][ T8638] (syz.4.16795,8638,0):ocfs2_symlink:1941 ERROR: status = -30
[ 1138.917411][ T8638] (syz.4.16795,8638,1):ocfs2_symlink:2065 ERROR: status = -30
[ 1138.918485][ T8653] netlink: 'syz.2.16801': attribute type 21 has an invalid length.
[ 1138.963840][ T8653] netlink: 120 bytes leftover after parsing attributes in process `syz.2.16801'.
[ 1138.985058][ T8653] netlink: 'syz.2.16801': attribute type 1 has an invalid length.
[ 1138.995105][ T8653] netlink: 9 bytes leftover after parsing attributes in process `syz.2.16801'.
[ 1139.021041][ T4200] ocfs2: Unmounting device (7,4) on (node local)
[ 1139.076127][ T5442] usb 2-1: New USB device found, idVendor=10f5, idProduct=1200, bcdDevice= 0.40
[ 1139.099349][ T5442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1139.124886][ T5442] usb 2-1: Product: syz
[ 1139.129166][ T5442] usb 2-1: Manufacturer: syz
[ 1139.150323][ T5442] usb 2-1: SerialNumber: syz
[ 1139.308845][ T5622] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1139.522964][ T5442] usb 2-1: 0:1 : does not exist
[ 1139.527908][ T5442] usb 2-1: 0:2 : does not exist
[ 1139.552822][ T5442] usb 2-1: 0:3 : does not exist
[ 1139.557769][ T5442] usb 2-1: 0:4 : does not exist
[ 1139.612159][ T5442] usb 2-1: USB disconnect, device number 67
[ 1139.663589][ T5622] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1139.684944][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1139.719914][ T5622] usb 4-1: config 0 descriptor??
[ 1139.777244][ T5622] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1139.851335][ T8630] udevd[8630]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1140.154042][ T8722] loop0: detected capacity change from 0 to 256
[ 1140.167898][ T5622] gspca_cpia1: usb_control_msg 03, error -71
[ 1140.197363][ T5622] gspca_cpia1: usb_control_msg 01, error -71
[ 1140.207751][ T5622] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[ 1140.249862][ T5622] usb 4-1: USB disconnect, device number 71
[ 1140.527573][ T8744] fuse: Invalid rootmode
[ 1140.688417][ T8756] loop4: detected capacity change from 0 to 512
[ 1140.790573][ T8756] EXT4-fs (loop4): Ignoring removed bh option
[ 1140.809146][ T8756] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[ 1140.846437][ T5442] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1140.876632][ T8756] EXT4-fs (loop4): 1 truncate cleaned up
[ 1140.882364][ T8756] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[ 1140.890400][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16854'.
[ 1140.938117][ T8770] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 1140.949103][ T8770] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1140.960856][ T8770] device bridge4 entered promiscuous mode
[ 1141.182413][ T8780] netlink: 'syz.4.16859': attribute type 1 has an invalid length.
[ 1141.202693][ T8780] netlink: 224 bytes leftover after parsing attributes in process `syz.4.16859'.
[ 1141.238139][ T5442] usb 1-1: config index 0 descriptor too short (expected 29, got 18)
[ 1141.250786][ T5442] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1141.256460][ T5622] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1141.270565][ T5442] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f
[ 1141.296640][ T5442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.314610][ T5628] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1141.324404][ T5442] usb 1-1: config 0 descriptor??
[ 1141.406032][ T8792] loop4: detected capacity change from 0 to 4096
[ 1141.477360][ T8792] ntfs: volume version 3.1.
[ 1141.510905][ T5622] usb 3-1: Using ep0 maxpacket: 8
[ 1141.591764][ T5442] usb 1-1: string descriptor 0 read error: -71
[ 1141.598065][ T5442] ldusb 1-1:0.0: Interrupt in endpoint not found
[ 1141.619004][ T5442] usb 1-1: USB disconnect, device number 50
[ 1141.638972][ T5175] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1141.678898][ T5622] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1141.769535][ T5622] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1141.782997][ T5622] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17520, setting to 1024
[ 1141.806376][ T5628] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1141.817962][ T5628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1141.826674][ T5628] usb 4-1: Product: syz
[ 1141.830930][ T5628] usb 4-1: Manufacturer: syz
[ 1141.839290][ T5628] usb 4-1: SerialNumber: syz
[ 1141.890644][ T5628] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1141.899510][ T5175] usb 2-1: Using ep0 maxpacket: 8
[ 1141.936653][ T5622] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[ 1141.946197][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1141.954247][ T5622] usb 3-1: Product: syz
[ 1141.958600][ T5622] usb 3-1: Manufacturer: syz
[ 1141.963235][ T5622] usb 3-1: SerialNumber: syz
[ 1142.029786][ T5175] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1142.143434][ T5442] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1142.207694][ T5622] usb 3-1: failed waiting for Axe-Fx III to boot: -71
[ 1142.215092][ T5622] snd-usb-audio: probe of 3-1:1.0 failed with error -71
[ 1142.226021][ T5175] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[ 1142.233055][ T5622] usb 3-1: USB disconnect, device number 60
[ 1142.249685][ T5175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1142.260678][ T5175] usb 2-1: Product: syz
[ 1142.265606][ T5175] usb 2-1: Manufacturer: syz
[ 1142.271198][ T5175] usb 2-1: SerialNumber: syz
[ 1142.300899][ T5175] usb 2-1: config 0 descriptor??
[ 1142.341268][ T5175] gspca_main: stk014-2.14.0 probing 05e1:0893
[ 1142.347663][ T5175] usb 2-1: selecting invalid altsetting 1
[ 1142.393600][ T5442] usb 5-1: Using ep0 maxpacket: 16
[ 1142.430640][ T5628] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1142.524503][ T5619] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1142.533481][ T5442] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1142.546341][ T5442] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 60
[ 1142.556393][ T5175] gspca_stk014: init reg: 0x00
[ 1142.561285][ T5175] stk014: probe of 2-1:0.0 failed with error -5
[ 1142.567977][ T5442] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[ 1142.654967][ T5442] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1142.664246][ T5442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1142.672258][ T5442] usb 5-1: SerialNumber: syz
[ 1142.692263][ T8807] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1142.711593][ T5442] cdc_acm 5-1:1.0: skipping garbage
[ 1142.750433][ T8679] usb 2-1: USB disconnect, device number 68
[ 1142.761336][ T8823] netlink: 'syz.2.16880': attribute type 10 has an invalid length.
[ 1142.771019][ T8823] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16880'.
[ 1142.808835][ T5622] usb 4-1: USB disconnect, device number 72
[ 1142.859524][ T5619] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[ 1142.869755][ T5619] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1142.881333][ T5619] usb 1-1: config 220 has no interface number 2
[ 1142.896723][ T5619] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1142.910889][ T5619] usb 1-1: config 220 interface 0 has no altsetting 0
[ 1142.917967][ T5619] usb 1-1: config 220 interface 76 has no altsetting 0
[ 1142.925442][ T5619] usb 1-1: config 220 interface 1 has no altsetting 0
[ 1142.933180][ T5442] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[ 1142.951338][ T5442] usb 5-1: USB disconnect, device number 62
[ 1143.025223][ T8833] netlink: 'syz.2.16885': attribute type 10 has an invalid length.
[ 1143.047326][ T8833] device netdevsim0 entered promiscuous mode
[ 1143.062362][ T8833] team0: Port device netdevsim0 added
[ 1143.073814][ T5619] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1143.083114][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1143.091166][ T5619] usb 1-1: Product: syz
[ 1143.095950][ T5619] usb 1-1: Manufacturer: syz
[ 1143.100645][ T5619] usb 1-1: SerialNumber: syz
[ 1143.168780][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[ 1143.175160][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[ 1143.390456][ T5628] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1143.413814][ T5628] ath9k_htc: Failed to initialize the device
[ 1143.446834][ T5619] usb 1-1: selecting invalid altsetting 0
[ 1143.456521][ T5619] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[ 1143.463163][ T5622] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1143.479613][ T5619] usb 1-1: No valid video chain found.
[ 1143.568815][ T5619] usb 1-1: selecting invalid altsetting 0
[ 1143.577024][ T5619] usbtest: probe of 1-1:220.1 failed with error -22
[ 1143.607667][ T5619] usb 1-1: USB disconnect, device number 51
[ 1143.670660][T18189] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1143.883989][ T8871] loop3: detected capacity change from 0 to 256
[ 1143.932039][ T8871] exfat: Deprecated parameter 'utf8'
[ 1144.001099][ T8871] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 1144.006965][T18189] usb 2-1: config index 0 descriptor too short (expected 1572, got 36)
[ 1144.053005][T18189] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1144.089322][ T8886] loop4: detected capacity change from 0 to 64
[ 1144.248183][T18189] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[ 1144.262008][T18189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1144.279993][T18189] usb 2-1: Product: syz
[ 1144.289774][T18189] usb 2-1: Manufacturer: syz
[ 1144.304355][T18189] usb 2-1: SerialNumber: syz
[ 1144.380104][ T8896] loop2: detected capacity change from 0 to 2048
[ 1144.394696][T18189] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input76
[ 1144.620766][ T3547] bcm5974 2-1:1.0: could not read from device
[ 1144.635115][ T8908] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1144.678190][ T8896] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1144.698596][T18189] usb 2-1: USB disconnect, device number 69
[ 1144.704855][ T3547] bcm5974 2-1:1.0: could not read from device
[ 1144.717311][ T3547] bcm5974 2-1:1.0: could not read from device
[ 1144.763347][ T8896] Remounting filesystem read-only
[ 1144.768851][ T8896] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1144.780657][ T8896] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1144.791379][ T8896] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1144.801628][ T8896] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1144.813601][ T8896] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1144.823945][ T8896] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1144.844614][ T8896] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1144.882859][   T26] audit: type=1800 audit(1179.066:69): pid=8896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16915" name="file2" dev="loop2" ino=16 res=0 errno=0
[ 1144.901961][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1145.054327][ T8929] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.16931'.
[ 1145.111055][ T8929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1145.519503][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16950'.
[ 1146.144141][ T8997] loop0: detected capacity change from 0 to 2048
[ 1146.209008][ T8958] loop3: detected capacity change from 0 to 32768
[ 1146.229858][ T9003] loop4: detected capacity change from 0 to 2048
[ 1146.274726][ T8997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1146.332108][ T9003] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1146.361956][ T8958] XFS (loop3): Mounting V5 Filesystem
[ 1146.375871][ T8971] loop2: detected capacity change from 0 to 40427
[ 1146.410786][ T8679] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1146.427310][ T8971] F2FS-fs (loop2): invalid crc value
[ 1146.572682][ T8971] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[ 1146.603310][ T8958] XFS (loop3): Ending clean mount
[ 1146.672242][ T8679] usb 2-1: Using ep0 maxpacket: 16
[ 1146.689423][ T9020] netlink: 'syz.0.16970': attribute type 13 has an invalid length.
[ 1146.770930][ T4197] XFS (loop3): Unmounting Filesystem
[ 1146.802532][ T8679] usb 2-1: config 0 has an invalid interface number: 49 but max is 0
[ 1146.818923][ T8679] usb 2-1: config 0 has no interface number 0
[ 1146.847261][ T8971] attempt to access beyond end of device
[ 1146.847261][ T8971] loop2: rw=0, want=45072, limit=40427
[ 1146.855527][ T8679] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[ 1146.876488][ T8679] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid maxpacket 47349, setting to 1024
[ 1146.906482][ T8679] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[ 1146.917111][ T8971] F2FS-fs (loop2): Cannot turn on quotas: -5 on 2
[ 1146.925535][ T9020] gretap0: refused to change device tx_queue_len
[ 1146.940291][ T9020] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1146.962618][ T8971] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1147.029970][ T8971] F2FS-fs (loop2): switch discard_unit option is not allowed
[ 1147.129679][ T8679] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[ 1147.167978][ T8679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1147.205109][ T8679] usb 2-1: Product: syz
[ 1147.209335][ T8679] usb 2-1: Manufacturer: syz
[ 1147.230649][ T8679] usb 2-1: SerialNumber: syz
[ 1147.270798][ T8679] usb 2-1: config 0 descriptor??
[ 1147.296030][ T8999] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1147.306725][ T8999] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1147.358339][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1147.572741][ T8679] usb 2-1: USB disconnect, device number 70
[ 1147.758161][ T9054] ieee802154 phy0 wpan0: encryption failed: -22
[ 1147.881674][ T9061] netlink: 'syz.0.16991': attribute type 21 has an invalid length.
[ 1147.892076][ T5620] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1147.900632][ T9061] netlink: 100 bytes leftover after parsing attributes in process `syz.0.16991'.
[ 1147.929632][ T9063] netlink: 11 bytes leftover after parsing attributes in process `syz.4.16992'.
[ 1147.957919][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16992'.
[ 1148.071165][ T9070] loop2: detected capacity change from 0 to 1024
[ 1148.144008][ T5620] usb 4-1: Using ep0 maxpacket: 32
[ 1148.267197][ T5620] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1148.288213][ T5620] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1148.433054][ T5620] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1148.458709][ T5620] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1148.501114][ T5620] usb 4-1: Product: syz
[ 1148.505344][ T5620] usb 4-1: Manufacturer: syz
[ 1148.564389][ T5620] hub 4-1:4.0: USB hub found
[ 1148.736472][ T9122] netlink: 56 bytes leftover after parsing attributes in process `syz.2.17021'.
[ 1148.768729][ T5620] hub 4-1:4.0: 8 ports detected
[ 1148.795591][ T5620] hub 4-1:4.0: insufficient power available to use all downstream ports
[ 1148.964525][ T5620] hub 4-1:4.0: hub_hub_status failed (err = -71)
[ 1148.981097][ T5620] hub 4-1:4.0: config failed, can't get hub status (err -71)
[ 1149.057423][ T5620] usb 4-1: USB disconnect, device number 73
[ 1149.477286][ T8679] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[ 1149.632119][ T9188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17054'.
[ 1149.657129][ T9188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17054'.
[ 1149.760629][ T9195] loop1: detected capacity change from 0 to 2048
[ 1149.831137][ T5619] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1149.840467][ T8679] usb 1-1: config 8 has an invalid interface number: 80 but max is 0
[ 1149.863517][ T8679] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1149.878734][ T9195] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1149.896193][ T8679] usb 1-1: config 8 has no interface number 0
[ 1149.923120][ T8679] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping
[ 1149.960581][ T8679] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping
[ 1149.981840][ T8679] usb 1-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1150.002108][ T8679] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[ 1150.021696][ T8679] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[ 1150.034730][ T8679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.064072][ T5619] usb 5-1: Using ep0 maxpacket: 16
[ 1150.103114][ T8679] usb 1-1: NFC: intf ffff88802a919000 id ffffffff8cb52680
[ 1150.195741][ T9219] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17068'.
[ 1150.213599][ T9219] openvswitch: netlink: Key type 541 is out of range max 29
[ 1150.294050][ T8679] usb 1-1: USB disconnect, device number 52
[ 1150.321936][ T9223] loop3: detected capacity change from 0 to 22
[ 1150.334838][ T5619] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1150.351807][ T9223] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1150.353920][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.367047][ T5620] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1150.389242][ T9223] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1150.396081][ T5619] usb 5-1: Product: syz
[ 1150.411347][ T5619] usb 5-1: Manufacturer: syz
[ 1150.416000][ T5619] usb 5-1: SerialNumber: syz
[ 1150.436750][ T5619] r8152-cfgselector 5-1: config 0 descriptor??
[ 1150.573982][ T9217] loop1: detected capacity change from 0 to 32768
[ 1150.600929][ T5620] usb 3-1: Using ep0 maxpacket: 32
[ 1150.632073][ T9217] XFS (loop1): Mounting V5 Filesystem
[ 1150.719805][ T5620] usb 3-1: config 241 has an invalid interface number: 139 but max is 0
[ 1150.732635][ T5620] usb 3-1: config 241 has no interface number 0
[ 1150.744659][ T5620] usb 3-1: config 241 interface 139 has no altsetting 0
[ 1150.760129][ T9217] XFS (loop1): Ending clean mount
[ 1150.769321][ T9217] XFS (loop1): Quotacheck needed: Please wait.
[ 1150.902683][ T5619] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1150.909267][ T5620] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a74, bcdDevice=8d.8a
[ 1150.923316][ T5619] r8152-cfgselector 5-1: bad CDC descriptors
[ 1150.929869][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.945227][ T5620] usb 3-1: Product: syz
[ 1150.950914][ T5620] usb 3-1: Manufacturer: syz
[ 1150.955777][ T5620] usb 3-1: SerialNumber: syz
[ 1150.960861][ T5619] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1150.979242][ T9217] XFS (loop1): Quotacheck: Done.
[ 1151.000201][ T5619] r8152-cfgselector 5-1: USB disconnect, device number 63
[ 1151.078622][ T4213] XFS (loop1): Unmounting Filesystem
[ 1151.220680][ T9258] afs: Bad value for 'source'
[ 1151.291366][ T9263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1151.320033][ T5620] usb 3-1: USB disconnect, device number 61
[ 1151.347553][ T9265] netlink: 2 bytes leftover after parsing attributes in process `syz.0.17087'.
[ 1152.064125][ T9314] netlink: 148 bytes leftover after parsing attributes in process `syz.1.17109'.
[ 1152.089538][ T9319] loop0: detected capacity change from 0 to 64
[ 1152.178524][ T9312] loop4: detected capacity change from 0 to 4096
[ 1152.229675][ T9327] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17116'.
[ 1152.245031][ T9312] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[ 1152.311707][ T9312] ntfs3: loop4: Failed to load $Extend.
[ 1152.634499][ T9354] trusted_key: encrypted_key: master key parameter is missing
[ 1152.716549][ T9357] loop3: detected capacity change from 0 to 2048
[ 1152.733511][ T9359] tmpfs: Bad value for 'mpol'
[ 1152.767054][ T9363] tmpfs: Bad value for 'mpol'
[ 1152.921887][ T9372] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1152.990404][ T9357] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1153.025096][ T9357] Remounting filesystem read-only
[ 1153.030795][ T9357] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1153.053940][ T9357] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1153.107199][ T9357] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1153.138887][ T9357] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1153.166405][ T9357] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1153.223428][ T9357] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1153.250642][ T9357] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1153.301492][   T26] audit: type=1800 audit(1188.090:70): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.17129" name="file2" dev="loop3" ino=16 res=0 errno=0
[ 1153.403812][ T9394] loop4: detected capacity change from 0 to 256
[ 1153.457268][ T9394] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1153.521661][ T5175] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1153.545084][ T9394] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[ 1153.646645][ T9394] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1153.777133][ T5175] usb 2-1: Using ep0 maxpacket: 8
[ 1153.916440][ T5175] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1154.087129][ T9414] loop0: detected capacity change from 0 to 64
[ 1154.097375][ T5175] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1154.110770][ T9414] MINIX-fs: bad superblock
[ 1154.119104][ T5175] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1154.127286][ T5175] usb 2-1: Product: syz
[ 1154.165475][ T9384] loop2: detected capacity change from 0 to 32768
[ 1154.190195][ T5175] usb 2-1: Manufacturer: syz
[ 1154.190222][ T5175] usb 2-1: SerialNumber: syz
[ 1154.328465][ T9412] loop3: detected capacity change from 0 to 8192
[ 1154.345953][ T9384] XFS (loop2): Mounting V5 Filesystem
[ 1154.449147][ T4293]  loop3: p1 p3 p4
[ 1154.452950][ T4293] loop3: partition table partially beyond EOD, truncated
[ 1154.454637][ T5175] usb 2-1: Invalid connection information received from device
[ 1154.478418][ T9384] XFS (loop2): Ending clean mount
[ 1154.504844][ T4293] loop3: p1 start 393225 is beyond EOD, truncated
[ 1154.513749][ T4293] loop3: p3 start 16777216 is beyond EOD, truncated
[ 1154.520740][ T4293] loop3: p4 start 4294967295 is beyond EOD, truncated
[ 1154.532804][ T9412]  loop3: p1 p3 p4
[ 1154.536698][ T9412] loop3: partition table partially beyond EOD, truncated
[ 1154.565369][ T9384] XFS (loop2): Quotacheck needed: Please wait.
[ 1154.582646][ T9412] loop3: p1 start 393225 is beyond EOD, truncated
[ 1154.623603][ T9412] loop3: p3 start 16777216 is beyond EOD, truncated
[ 1154.630280][ T9412] loop3: p4 start 4294967295 is beyond EOD, truncated
[ 1154.655680][ T5628] usb 2-1: USB disconnect, device number 71
[ 1154.771528][ T9441] netlink: 'syz.4.17166': attribute type 32 has an invalid length.
[ 1154.793666][ T9384] XFS (loop2): Quotacheck: Done.
[ 1154.947641][ T9448] netlink: 72 bytes leftover after parsing attributes in process `syz.4.17170'.
[ 1155.015560][ T4198] XFS (loop2): Unmounting Filesystem
[ 1155.044256][ T9451] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.17173'.
[ 1156.552562][ T9545] netlink: 'syz.0.17217': attribute type 49 has an invalid length.
[ 1156.736404][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17224'.
[ 1156.806308][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17226'.
[ 1156.863444][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17226'.
[ 1156.902970][ T9563] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17226'.
[ 1156.977863][ T9575] netlink: 'syz.1.17230': attribute type 21 has an invalid length.
[ 1157.016986][ T9575] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1157.315119][   T21] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1157.525157][ T9609] nfs: Unknown parameter 'ntext'
[ 1157.548168][   T21] usb 4-1: Using ep0 maxpacket: 32
[ 1157.678388][   T21] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 1157.686752][   T21] usb 4-1: config 0 has no interface number 0
[ 1157.722539][   T21] usb 4-1: config 0 interface 132 has no altsetting 0
[ 1157.920983][   T21] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02
[ 1157.940577][   T21] usb 4-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25
[ 1157.969362][   T21] usb 4-1: Product: syz
[ 1157.973673][   T21] usb 4-1: Manufacturer: syz
[ 1157.997822][   T21] usb 4-1: SerialNumber: syz
[ 1158.008457][   T21] usb 4-1: config 0 descriptor??
[ 1158.065404][   T21] ftdi_sio 4-1:0.132: FTDI USB Serial Device converter detected
[ 1158.082340][   T21] usb 4-1: Detected FT8U232AM
[ 1158.123680][   T21] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1158.197809][ T9654] netlink: 'syz.2.17270': attribute type 1 has an invalid length.
[ 1158.226001][ T9654] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.17270'.
[ 1158.254280][   T21] usb 4-1: USB disconnect, device number 74
[ 1158.270754][   T21] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1158.310243][   T21] ftdi_sio 4-1:0.132: device disconnected
[ 1158.400443][ T9665] netlink: 'syz.4.17275': attribute type 30 has an invalid length.
[ 1158.655449][ T9681] hsr0: mtu greater than device maximum
[ 1158.747448][ T9687] netlink: 'syz.1.17285': attribute type 1 has an invalid length.
[ 1158.790108][ T9687] netlink: 228 bytes leftover after parsing attributes in process `syz.1.17285'.
[ 1159.069005][ T9705] loop1: detected capacity change from 0 to 512
[ 1159.221262][ T9705] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,i_version,,errors=continue. Quota mode: writeback.
[ 1159.270920][ T9705] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.17294: invalid size
[ 1159.308516][ T9670] loop2: detected capacity change from 0 to 32768
[ 1159.715443][ T9736] loop2: detected capacity change from 0 to 22
[ 1159.745827][ T9738] loop1: detected capacity change from 0 to 256
[ 1159.771584][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17311'.
[ 1159.802796][ T9700] loop4: detected capacity change from 0 to 32768
[ 1159.812850][ T9736] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1159.837996][ T9736] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1159.880444][ T9738] FAT-fs (loop1): Directory bread(block 64) failed
[ 1159.900715][ T9738] FAT-fs (loop1): Directory bread(block 65) failed
[ 1159.924177][ T9738] FAT-fs (loop1): Directory bread(block 66) failed
[ 1159.936235][ T9738] FAT-fs (loop1): Directory bread(block 67) failed
[ 1159.942892][ T9738] FAT-fs (loop1): Directory bread(block 68) failed
[ 1160.028339][ T9700] XFS (loop4): Mounting V5 Filesystem
[ 1160.038353][ T9738] FAT-fs (loop1): Directory bread(block 69) failed
[ 1160.055690][ T9738] FAT-fs (loop1): Directory bread(block 70) failed
[ 1160.076215][ T9738] FAT-fs (loop1): Directory bread(block 71) failed
[ 1160.087768][ T9738] FAT-fs (loop1): Directory bread(block 72) failed
[ 1160.118838][ T9700] XFS (loop4): Ending clean mount
[ 1160.130009][ T9700] XFS (loop4): Quotacheck needed: Please wait.
[ 1160.137249][ T9738] FAT-fs (loop1): Directory bread(block 73) failed
[ 1160.197202][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17318'.
[ 1160.265280][ T5628] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1160.278083][ T9700] XFS (loop4): Quotacheck: Done.
[ 1160.441029][ T4200] XFS (loop4): Unmounting Filesystem
[ 1160.502045][ T5628] usb 3-1: Using ep0 maxpacket: 8
[ 1160.614185][ T5628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1160.642301][ T5628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1160.660970][ T5628] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1160.679560][ T5628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1160.710192][ T5628] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1160.739362][ T5628] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1160.757685][ T5628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1160.770076][ T5628] usb 3-1: config 0 descriptor??
[ 1160.801348][ T9750] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1161.014645][   T21] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1161.163252][ T9804] netlink: 'syz.4.17339': attribute type 1 has an invalid length.
[ 1161.230386][ T4247] usb 3-1: USB disconnect, device number 62
[ 1161.248272][   T21] usb 2-1: Using ep0 maxpacket: 8
[ 1161.270117][ T9811] x_tables: duplicate underflow at hook 4
[ 1161.340532][ T9814] netlink: 'syz.3.17345': attribute type 10 has an invalid length.
[ 1161.362630][ T9814] device macvlan0 entered promiscuous mode
[ 1161.378423][ T9814] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1161.447288][ T9820] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[ 1161.555968][   T21] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1161.581251][   T21] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1161.612947][   T21] usb 2-1: Product: syz
[ 1161.617171][   T21] usb 2-1: Manufacturer: syz
[ 1161.626131][   T21] usb 2-1: SerialNumber: syz
[ 1161.666525][   T21] usb 2-1: config 0 descriptor??
[ 1161.699922][ T9826] loop4: detected capacity change from 0 to 4096
[ 1161.717432][ T9836] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[ 1161.736273][   T21] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1161.762376][ T9826] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[ 1161.823890][ T9826] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[ 1161.945119][ T9826] ntfs: volume version 3.1.
[ 1162.013106][ T9850] CIFS: iocharset name too long
[ 1162.133762][   T21] gspca_zc3xx: reg_r err -71
[ 1162.138481][   T21] gspca_zc3xx: probe of 2-1:0.0 failed with error -71
[ 1162.188277][   T21] usb 2-1: USB disconnect, device number 72
[ 1162.554165][ T9882] netlink: 'syz.2.17378': attribute type 1 has an invalid length.
[ 1162.562048][ T9882] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17378'.
[ 1162.603748][ T9885] netlink: 'syz.0.17379': attribute type 21 has an invalid length.
[ 1162.623965][ T9885] netlink: 128 bytes leftover after parsing attributes in process `syz.0.17379'.
[ 1162.680021][ T9885] netlink: 'syz.0.17379': attribute type 4 has an invalid length.
[ 1162.702212][ T9885] netlink: 'syz.0.17379': attribute type 3 has an invalid length.
[ 1162.758271][ T9885] netlink: 3 bytes leftover after parsing attributes in process `syz.0.17379'.
[ 1162.890784][ T9899] loop1: detected capacity change from 0 to 4096
[ 1162.942780][ T9899] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[ 1163.018999][   T21] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1163.031287][ T9899] ntfs3: loop1: failed to convert "c46c" to maccenteuro
[ 1163.143607][ T9918] loop2: detected capacity change from 0 to 256
[ 1163.201730][ T9919] loop4: detected capacity change from 0 to 2048
[ 1163.226470][ T9918] FAT-fs (loop2): Directory bread(block 64) failed
[ 1163.267184][ T9918] FAT-fs (loop2): Directory bread(block 65) failed
[ 1163.270756][   T21] usb 4-1: Using ep0 maxpacket: 32
[ 1163.278631][ T9918] FAT-fs (loop2): Directory bread(block 66) failed
[ 1163.295823][ T9919] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1163.331088][ T9918] FAT-fs (loop2): Directory bread(block 67) failed
[ 1163.365353][ T9918] FAT-fs (loop2): Directory bread(block 68) failed
[ 1163.372179][ T9919] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[ 1163.410001][ T9918] FAT-fs (loop2): Directory bread(block 69) failed
[ 1163.423311][ T9919] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[ 1163.447428][ T9918] FAT-fs (loop2): Directory bread(block 70) failed
[ 1163.454123][ T9918] FAT-fs (loop2): Directory bread(block 71) failed
[ 1163.466713][   T21] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[ 1163.475655][   T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1163.499495][ T9918] FAT-fs (loop2): Directory bread(block 72) failed
[ 1163.519577][   T21] usb 4-1: config 0 has no interface number 0
[ 1163.533537][ T9918] FAT-fs (loop2): Directory bread(block 73) failed
[ 1163.562935][   T21] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1163.598934][ T9931] device lo left promiscuous mode
[ 1163.616123][ T9931] device syz_tun left promiscuous mode
[ 1163.622324][ T9931] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1163.630158][ T9931] device bond0 left promiscuous mode
[ 1163.636210][ T9931] device bond_slave_0 left promiscuous mode
[ 1163.683550][ T9931] device bond_slave_1 left promiscuous mode
[ 1163.697154][ T9931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1163.724542][ T9931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1163.754885][   T21] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[ 1163.765626][ T9931] device bridge_slave_0 left promiscuous mode
[ 1163.792358][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.810388][   T21] usb 4-1: Product: syz
[ 1163.814989][   T21] usb 4-1: Manufacturer: syz
[ 1163.819617][   T21] usb 4-1: SerialNumber: syz
[ 1163.853870][ T9931] device netdevsim0 left promiscuous mode
[ 1163.871657][ T9931] device wlan0 left promiscuous mode
[ 1163.877899][   T21] usb 4-1: config 0 descriptor??
[ 1163.932279][ T9931] device bond3 left promiscuous mode
[ 1163.940444][   T21] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[ 1163.967108][   T21] radio-si470x: probe of 4-1:0.35 failed with error -5
[ 1163.990112][ T9945] netlink: 'syz.0.17409': attribute type 1 has an invalid length.
[ 1164.007199][ T9945] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.17409'.
[ 1164.031609][ T9945] netlink: 'syz.0.17409': attribute type 1 has an invalid length.
[ 1164.146440][   T21] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[ 1164.166100][ T9957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17414'.
[ 1164.183409][   T21] usbhid 4-1:0.35: couldn't find an input interrupt endpoint
[ 1164.226757][   T21] usb 4-1: USB disconnect, device number 75
[ 1164.331067][ T9968] loop2: detected capacity change from 0 to 512
[ 1164.403345][ T9968] EXT4-fs (loop2): 1 truncate cleaned up
[ 1164.412896][ T9978] netlink: 84 bytes leftover after parsing attributes in process `syz.1.17423'.
[ 1164.426245][ T9968] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none.
[ 1164.520271][ T9983] loop4: detected capacity change from 0 to 64
[ 1164.722864][T10000] netlink: 'syz.1.17435': attribute type 1 has an invalid length.
[ 1164.838657][T10008] sctp: [Deprecated]: syz.1.17440 (pid 10008) Use of int in max_burst socket option.
[ 1164.838657][T10008] Use struct sctp_assoc_value instead
[ 1164.871481][T10012] loop3: detected capacity change from 0 to 256
[ 1165.043767][T10015] loop0: detected capacity change from 0 to 8192
[ 1165.051730][T10025] loop4: detected capacity change from 0 to 1024
[ 1165.141668][T10015] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 1165.151642][T10015] REISERFS (device loop0): using ordered data mode
[ 1165.158884][ T3070] hfsplus: b-tree write err: -5, ino 25
[ 1165.163572][T10015] reiserfs: using flush barriers
[ 1165.165691][ T3070] hfsplus: b-tree write err: -5, ino 4
[ 1165.175472][ T3070] hfsplus: b-tree write err: -5, ino 2
[ 1165.181826][ T3070] hfsplus: b-tree write err: -5, ino 26
[ 1165.189461][T10015] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1165.255185][T10015] REISERFS (device loop0): checking transaction log (loop0)
[ 1165.304357][T10015] REISERFS (device loop0): Using tea hash to sort names
[ 1165.354177][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17456'.
[ 1165.367431][T10015] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 1165.474597][T10047] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2
[ 1165.823731][ T5628] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1166.318593][ T5628] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[ 1166.337300][ T5628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.364634][ T5628] usb 2-1: Product: syz
[ 1166.395953][ T5628] usb 2-1: Manufacturer: syz
[ 1166.435131][ T5628] usb 2-1: SerialNumber: syz
[ 1166.456954][ T5628] usb 2-1: config 0 descriptor??
[ 1166.586347][T10090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1166.683898][T10094] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1166.728732][ T5628] mos7840 2-1:0.0: required endpoints missing
[ 1166.744667][T10096] loop0: detected capacity change from 0 to 1024
[ 1166.802337][T10096] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.17483: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1166.825379][T10096] Quota error (device loop0): qtree_write_dquot: dquota write failed
[ 1166.866011][T10096] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.17483: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1166.930026][T10107] loop3: detected capacity change from 0 to 2048
[ 1166.937028][ T5628] usb 2-1: USB disconnect, device number 73
[ 1166.945536][T10096] Quota error (device loop0): v2_write_file_info: Can't write info structure
[ 1166.959147][T10096] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.17483: Failed to acquire dquot type 0
[ 1166.971071][T10096] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem
[ 1166.989932][T10107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1167.022405][T10109] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.17489'.
[ 1167.040529][T10096] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.17483: mark_inode_dirty error
[ 1167.076167][T10096] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[ 1167.087868][T10096] EXT4-fs (loop0): 1 orphan inode deleted
[ 1167.095937][T10096] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000001,discard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[ 1167.124575][ T4257] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1167.150491][ T4257] Quota error (device loop0): remove_tree: Can't read quota data block 1
[ 1167.164963][ T4257] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 0
[ 1167.182455][T10096] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.17483: Invalid inode table block 1 in block_group 0
[ 1167.231282][T10096] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem
[ 1167.245977][T10096] EXT4-fs error (device loop0): ext4_quota_off:6540: inode #3: comm syz.0.17483: mark_inode_dirty error
[ 1167.290944][T10109] syz.4.17489 (10109) used greatest stack depth: 18360 bytes left
[ 1167.748912][T10138] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[ 1167.781695][T10138] overlayfs: missing 'lowerdir'
[ 1167.830403][T10142] loop1: detected capacity change from 0 to 8
[ 1167.898274][T10142] MTD: Attempt to mount non-MTD device "/dev/loop1"
[ 1167.908512][T10144] ipt_rpfilter: unknown options
[ 1167.929144][ T8630] udevd[8630]: incorrect cramfs checksum on /dev/loop1
[ 1167.941369][T10142] cramfs: Error -3 while decompressing!
[ 1167.970044][T10142] cramfs: ffffffff964070a8(1306)->ffff8880733d2000(4096)
[ 1167.981942][T10142] cramfs: bad data blocksize 3221485966
[ 1168.013121][T10142] cramfs: Error -3 while decompressing!
[ 1168.031988][ T8630] udevd[8630]: incorrect cramfs checksum on /dev/loop1
[ 1168.046936][T10142] cramfs: ffffffff964070a8(1306)->ffff8880733d2000(4096)
[ 1168.078808][   T26] audit: type=1800 audit(1203.948:71): pid=10142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.17504" name="file2" dev="loop1" ino=348 res=0 errno=0
[ 1168.253645][T10157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17512'.
[ 1168.290179][T10117] loop3: detected capacity change from 0 to 32768
[ 1168.375503][T10117] 
[ 1168.375503][T10117]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1168.375503][T10117] 
[ 1168.418437][T10165] misc userio: The device must be registered before sending interrupts
[ 1168.492675][ T3070] ERROR: (device loop3): diWrite: ixpxd invalid
[ 1168.492675][ T3070] 
[ 1168.626085][ T3070] ERROR: (device loop3): txCommit: 
[ 1168.626085][ T3070] 
[ 1168.655684][ T3070] jfs_write_inode: jfs_commit_inode failed!
[ 1168.675935][ T4197] 
[ 1168.675935][ T4197]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1168.675935][ T4197] 
[ 1168.707339][ T4197] 
[ 1168.707339][ T4197]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1168.707339][ T4197] 
[ 1168.942289][T10177] loop4: detected capacity change from 0 to 4096
[ 1168.963466][T10177] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[ 1169.064936][T10177] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[ 1169.096685][T10189] CIFS mount error: No usable UNC path provided in device string!
[ 1169.096685][T10189] 
[ 1169.132480][T10154] loop2: detected capacity change from 0 to 32768
[ 1169.155589][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17519'.
[ 1169.165455][T10189] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1169.198064][T10154] 
[ 1169.198064][T10154]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1169.198064][T10154] 
[ 1169.278920][T10154] __jfs_setxattr: xattr_size = 67, new_size = 161
[ 1169.360140][T10193] netlink: 'syz.1.17531': attribute type 1 has an invalid length.
[ 1169.395086][  T154] 
[ 1169.395086][  T154]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1169.395086][  T154] 
[ 1169.428846][  T154] 
[ 1169.428846][  T154]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1169.428846][  T154] 
[ 1169.476584][  T276] 
[ 1169.476584][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1169.476584][  T276] 
[ 1169.499608][T10203] loop3: detected capacity change from 0 to 256
[ 1169.514734][ T4198] 
[ 1169.514734][ T4198]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1169.514734][ T4198] 
[ 1169.552539][ T4198] 
[ 1169.552539][ T4198]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1169.552539][ T4198] 
[ 1169.622588][T10203] FAT-fs (loop3): Directory bread(block 64) failed
[ 1169.635890][T10203] FAT-fs (loop3): Directory bread(block 65) failed
[ 1169.674295][T10203] FAT-fs (loop3): Directory bread(block 66) failed
[ 1169.680916][T10203] FAT-fs (loop3): Directory bread(block 67) failed
[ 1169.701829][T10203] FAT-fs (loop3): Directory bread(block 68) failed
[ 1169.708533][T10203] FAT-fs (loop3): Directory bread(block 69) failed
[ 1169.725502][T10203] FAT-fs (loop3): Directory bread(block 70) failed
[ 1169.768398][T10203] FAT-fs (loop3): Directory bread(block 71) failed
[ 1169.775180][T10203] FAT-fs (loop3): Directory bread(block 72) failed
[ 1169.822706][T10203] FAT-fs (loop3): Directory bread(block 73) failed
[ 1169.982751][T10187] loop0: detected capacity change from 0 to 32768
[ 1170.065877][T10220] netlink: 'syz.1.17545': attribute type 1 has an invalid length.
[ 1170.114303][T10226] loop3: detected capacity change from 0 to 1024
[ 1170.121358][T10220] netlink: 'syz.1.17545': attribute type 3 has an invalid length.
[ 1170.174560][T10226] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a001c01c, mo2=0002]
[ 1170.178119][T10220] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17545'.
[ 1170.190369][T10226] System zones: 0-1, 3-36
[ 1170.230056][T10226] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,journal_ioprio=0x0000000000000006,resuid=0x0000000000000000,max_batch_time=0x000000000000e5a6,debug,bsddf,nodiscard,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[ 1170.242408][T10220] NCSI netlink: No device for ifindex 2986344450
[ 1170.695644][T10237] loop2: detected capacity change from 0 to 8192
[ 1170.785888][T10237] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[ 1170.810415][T10237] REISERFS (device loop2): using ordered data mode
[ 1170.830321][T10237] reiserfs: using flush barriers
[ 1170.879019][T10257] loop3: detected capacity change from 0 to 4096
[ 1170.886578][T10237] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1170.929226][T10257] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[ 1170.988199][T10237] REISERFS (device loop2): checking transaction log (loop2)
[ 1171.024100][T10237] REISERFS (device loop2): Using tea hash to sort names
[ 1171.069083][T10237] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[ 1171.236760][ T4197] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22.
[ 1171.261340][ T4197] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1171.295522][ T4197] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22.
[ 1171.316796][T10269] netlink: 'syz.0.17566': attribute type 21 has an invalid length.
[ 1171.336833][T10269] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17566'.
[ 1171.350913][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17569'.
[ 1171.393852][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17569'.
[ 1171.567831][T10285] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1171.644802][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17575'.
[ 1171.683879][T10291] bond0: option arp_validate: invalid value (18446744073491447809)
[ 1171.684077][  T391] bond0: (slave bond_slave_0): interface is now down
[ 1171.721697][  T391] bond0: (slave bond_slave_1): interface is now down
[ 1171.768315][  T391] bond0: now running without any active interface!
[ 1171.789053][T10293] netlink: 'syz.1.17578': attribute type 1 has an invalid length.
[ 1172.044198][T10313] loop3: detected capacity change from 0 to 128
[ 1172.085552][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1172.111115][T10313] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[ 1172.135615][T10321] loop4: detected capacity change from 0 to 8
[ 1172.141043][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1172.154602][T10313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1172.181161][T10321] SQUASHFS error: Failed to read block 0x8f: -5
[ 1172.189079][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1172.208380][T10321] SQUASHFS error: Unable to read data cache entry [8f]
[ 1172.224437][T10321] SQUASHFS error: Unable to read page, block 8f, size 1c00001
[ 1172.252149][T10321] SQUASHFS error: Unable to read data cache entry [8f]
[ 1172.280117][T10321] SQUASHFS error: Unable to read page, block 8f, size 1c00001
[ 1172.321741][T10321] SQUASHFS error: Unable to read data cache entry [8f]
[ 1172.341648][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17595'.
[ 1172.358194][T10321] SQUASHFS error: Unable to read page, block 8f, size 1c00001
[ 1172.365952][T10321] SQUASHFS error: Failed to read block 0x8f: -5
[ 1172.394012][T10321] SQUASHFS error: Failed to read block 0x8f: -5
[ 1172.418048][   T26] audit: type=1800 audit(1208.605:72): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.17592" name="file3" dev="loop4" ino=6 res=0 errno=0
[ 1172.629660][T10341] loop0: detected capacity change from 0 to 1024
[ 1172.688135][T10345] netlink: 68 bytes leftover after parsing attributes in process `syz.4.17603'.
[ 1172.743642][T10341] hfsplus: catalog name length corrupted
[ 1172.943161][T10366] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[ 1172.986847][T10360] sctp: [Deprecated]: syz.1.17611 (pid 10360) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1172.986847][T10360] Use struct sctp_sack_info instead
[ 1173.082965][T10373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17617'.
[ 1173.229071][T10384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17622'.
[ 1173.278556][T10387] printk: syz.4.17623 (10387): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated).
[ 1173.419538][ T5622] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1173.652561][ T5622] usb 3-1: Using ep0 maxpacket: 8
[ 1173.737174][T10411] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1173.745395][T10412] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[ 1173.774243][ T5622] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1173.802500][ T5622] usb 3-1: config 179 has no interface number 0
[ 1173.829043][ T5622] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1173.869091][ T5622] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1173.904470][ T5622] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 34304, setting to 1024
[ 1173.954642][ T5622] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1173.971067][T10419] loop1: detected capacity change from 0 to 1024
[ 1174.010991][ T5622] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1174.042206][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1174.091617][T10379] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1174.098732][T10379] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1174.251590][  T391] hfsplus: b-tree write err: -5, ino 25
[ 1174.257419][  T391] hfsplus: b-tree write err: -5, ino 4
[ 1174.305394][  T391] hfsplus: b-tree write err: -5, ino 2
[ 1174.323377][ T5620] usb 3-1: USB disconnect, device number 63
[ 1174.333406][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1174.341747][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1174.480111][ T8679] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1174.691456][T10455] loop1: detected capacity change from 0 to 256
[ 1174.752445][ T8679] usb 1-1: Using ep0 maxpacket: 8
[ 1174.883580][ T8679] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1174.902340][ T8679] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1174.939370][ T8679] usb 1-1: config 0 has no interface number 0
[ 1174.952402][ T8679] usb 1-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1174.999290][ T8679] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1175.007461][ T8679] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[ 1175.018772][ T8679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.029543][T10466] device erspan1 entered promiscuous mode
[ 1175.057213][ T8679] usb 1-1: config 0 descriptor??
[ 1175.111004][ T8679] hso 1-1:0.1: Failed to find BULK IN ep
[ 1175.322582][ T8679] usb 1-1: USB disconnect, device number 53
[ 1176.319625][T10544] loop2: detected capacity change from 0 to 4096
[ 1176.381220][T10557] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1176.402728][T10544] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[ 1176.436909][T10544] NILFS (loop2): mounting fs with errors
[ 1176.473638][T10544] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6
[ 1176.565643][T10566] set match dimension is over the limit!
[ 1176.865341][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17720'.
[ 1176.912145][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17720'.
[ 1177.403418][T10617] netlink: 'syz.3.17736': attribute type 10 has an invalid length.
[ 1177.431139][T10617] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17736'.
[ 1177.470284][T10617] device ipvlan1 entered promiscuous mode
[ 1177.491659][T10617] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1177.610523][T10627] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2
[ 1178.287047][ T4247] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1178.519547][ T4247] usb 5-1: Using ep0 maxpacket: 32
[ 1178.624672][T10686] overlayfs: unrecognized mount option "fsname=\(([\," or missing value
[ 1178.637852][ T4247] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping
[ 1178.659608][ T4247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1178.689312][ T4247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1178.735013][   T26] audit: type=1400 audit(1215.386:73): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=10689 comm="syz.3.17772"
[ 1178.866245][ T4247] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1178.884832][ T4247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1178.902837][ T4247] usb 5-1: Product: syz
[ 1178.907068][ T4247] usb 5-1: Manufacturer: syz
[ 1178.927933][ T4247] usb 5-1: SerialNumber: syz
[ 1178.959926][ T4247] usb 5-1: config 0 descriptor??
[ 1179.068325][ T5620] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1179.197687][ T4247] usb 5-1: USB disconnect, device number 64
[ 1179.244772][T10719] loop3: detected capacity change from 0 to 512
[ 1179.253116][T10711] loop1: detected capacity change from 0 to 4096
[ 1179.330388][T10721] IPv6: Can't replace route, no match found
[ 1179.382205][T10711] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[ 1179.383910][T10719] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.17786: bad orphan inode 11862016
[ 1179.403659][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1179.422088][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1179.428969][T10719] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1179.443829][ T5620] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1179.460312][ T5620] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1179.469894][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1179.480311][ T5620] usb 3-1: config 0 descriptor??
[ 1179.516009][ T5620] hub 3-1:0.0: USB hub found
[ 1179.535050][T10726] netlink: 'syz.0.17789': attribute type 10 has an invalid length.
[ 1179.568909][T10726] device syz_tun entered promiscuous mode
[ 1179.584299][T10711] ntfs3: loop1: Failed to load $Extend.
[ 1179.638172][T10726] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1179.720132][ T5620] hub 3-1:0.0: 14 ports detected
[ 1179.739710][ T5620] hub 3-1:0.0: insufficient power available to use all downstream ports
[ 1179.904932][T10739] netlink: 'syz.0.17796': attribute type 10 has an invalid length.
[ 1179.918960][T10739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17796'.
[ 1179.929760][ T5620] hub 3-1:0.0: hub_hub_status failed (err = -71)
[ 1179.938953][T10739] device ipvlan1 entered promiscuous mode
[ 1179.947050][ T5620] hub 3-1:0.0: config failed, can't get hub status (err -71)
[ 1179.969537][T10739] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1180.046876][ T5620] usb 3-1: USB disconnect, device number 64
[ 1180.123122][T10745] loop4: detected capacity change from 0 to 2048
[ 1180.167812][T10745] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1180.479798][T10757] loop1: detected capacity change from 0 to 4096
[ 1180.544673][T10757] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[ 1180.641495][T10773] netlink: 148 bytes leftover after parsing attributes in process `syz.3.17810'.
[ 1180.670900][T10773] netlink: 'syz.3.17810': attribute type 2 has an invalid length.
[ 1180.691358][T10778] loop4: detected capacity change from 0 to 64
[ 1180.907255][T10789] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17816'.
[ 1181.010233][T10795] loop4: detected capacity change from 0 to 8
[ 1181.017819][T10789] batman_adv: Cannot find parent device
[ 1181.043501][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17820'.
[ 1181.110657][T10795] SQUASHFS error: Unable to read inode 0xe3
[ 1181.581163][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17843'.
[ 1181.736636][T10859] netlink: 'syz.3.17849': attribute type 1 has an invalid length.
[ 1181.864473][T10865] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1182.024994][T10857] loop4: detected capacity change from 0 to 8192
[ 1182.113913][T10867] loop2: detected capacity change from 0 to 4096
[ 1182.384368][T10862] loop3: detected capacity change from 0 to 32768
[ 1182.436721][T10867] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[ 1182.464794][T10881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1182.470831][T10862] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.17852 (10862)
[ 1182.486492][T10857] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[ 1182.498764][T10857] REISERFS (device loop4): using ordered data mode
[ 1182.505335][T10857] reiserfs: using flush barriers
[ 1182.520150][T10881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1182.528351][T10857] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1182.576511][T10862] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1182.591978][T10881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1182.595653][T10862] BTRFS info (device loop3): enabling ssd optimizations
[ 1182.606576][T10862] BTRFS info (device loop3): not using ssd optimizations
[ 1182.613789][T10862] BTRFS info (device loop3): turning off barriers
[ 1182.620622][T10862] BTRFS info (device loop3): using free space tree
[ 1182.623597][T10884] loop0: detected capacity change from 0 to 4096
[ 1182.627215][T10862] BTRFS info (device loop3): has skinny extents
[ 1182.640335][T10857] REISERFS (device loop4): checking transaction log (loop4)
[ 1182.670046][T10857] REISERFS (device loop4): Using r5 hash to sort names
[ 1182.695951][T10857] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[ 1182.745603][T10884] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 1182.765617][T10857] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[ 1183.053806][T10862] BTRFS warning (device loop3): can't clear the mixed_groups,compress_lzo,big_metadata,extended_iref,raid56,skinny_metadata,no_holes,raid1c34,incompat:12,incompat:13,incompat:15,incompat:16,incompat:18,incompat:23,incompat:25,incompat:30,incompat:31,incompat:32,incompat:33,incompat:36,incompat:37,incompat:39,incompat:41,incompat:43,incompat:46,incompat:48,incompat:49,incompat:50,incompat:54,incompat:60,incompat:62,incompat:63 feature bits while mounted
[ 1183.095690][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1183.575619][T10937] netlink: 'syz.2.17880': attribute type 1 has an invalid length.
[ 1183.681532][T10940] xt_TCPMSS: Only works on TCP SYN packets
[ 1183.852021][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1183.869405][T10951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17887'.
[ 1183.982706][T10950] xt_CT: No such helper "syz0"
[ 1184.108846][T10956] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead
[ 1184.121728][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17891'.
[ 1184.135384][T10956] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[ 1184.151574][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1184.404944][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17886'.
[ 1184.518374][T10979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17900'.
[ 1184.553507][T10979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17900'.
[ 1184.716309][ T5177] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1184.848198][T11005] netlink: 'syz.2.17911': attribute type 3 has an invalid length.
[ 1184.958188][ T5177] usb 4-1: Using ep0 maxpacket: 16
[ 1184.971834][T11009] set_capacity_and_notify: 1 callbacks suppressed
[ 1184.971851][T11009] loop2: detected capacity change from 0 to 256
[ 1184.985716][T11010] usb usb9: usbfs: process 11010 (syz.4.17913) did not claim interface 0 before use
[ 1185.075580][T11009] FAT-fs (loop2): Directory bread(block 64) failed
[ 1185.082719][ T5177] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[ 1185.098003][T11016] netlink: 'syz.0.17917': attribute type 15 has an invalid length.
[ 1185.106149][ T5177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[ 1185.125562][T11009] FAT-fs (loop2): Directory bread(block 65) failed
[ 1185.142313][ T5177] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1185.152872][T11009] FAT-fs (loop2): Directory bread(block 66) failed
[ 1185.181968][T11009] FAT-fs (loop2): Directory bread(block 67) failed
[ 1185.189535][ T5177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024
[ 1185.218816][T11009] FAT-fs (loop2): Directory bread(block 68) failed
[ 1185.235048][ T5177] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[ 1185.255734][T11009] FAT-fs (loop2): Directory bread(block 69) failed
[ 1185.276704][T11009] FAT-fs (loop2): Directory bread(block 70) failed
[ 1185.301998][T11009] FAT-fs (loop2): Directory bread(block 71) failed
[ 1185.325885][T11009] FAT-fs (loop2): Directory bread(block 72) failed
[ 1185.338909][T11027] loop1: detected capacity change from 0 to 1024
[ 1185.355418][T11009] FAT-fs (loop2): Directory bread(block 73) failed
[ 1185.391721][T11009] attempt to access beyond end of device
[ 1185.391721][T11009] loop2: rw=0, want=1164, limit=256
[ 1185.412470][T11033] loop0: detected capacity change from 0 to 512
[ 1185.448540][T11027] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[ 1185.459282][ T5177] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1185.481752][ T5177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1185.497618][T11027] EXT4-fs error (device loop1): ext4_get_journal_inode:5185: inode #32: comm syz.1.17923: iget: special inode unallocated
[ 1185.513227][ T5177] usb 4-1: Product: syz
[ 1185.521354][T11033] EXT4-fs (loop0): inline encryption not supported
[ 1185.523056][ T5177] usb 4-1: Manufacturer: syz
[ 1185.538887][T11033] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[ 1185.543962][ T5177] usb 4-1: SerialNumber: syz
[ 1185.559942][ T5177] usb 4-1: config 0 descriptor??
[ 1185.576707][T11027] EXT4-fs (loop1): no journal found
[ 1185.582029][T11027] EXT4-fs (loop1): can't get journal size
[ 1185.588626][T10977] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1185.601131][T10977] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1185.628852][T11033] EXT4-fs (loop0): Ignoring removed bh option
[ 1185.635807][T11027] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,jqfmt=vfsv0,nobarrier,. Quota mode: none.
[ 1185.657328][ T5177] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected
[ 1185.674724][T11033] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1185.682119][    C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71)
[ 1185.682186][    C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71)
[ 1185.701642][T11033] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1185.743216][T11033] EXT4-fs (loop0): 1 truncate cleaned up
[ 1185.748944][T11033] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none.
[ 1185.785132][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17927'.
[ 1185.884375][T11046] device geneve4 entered promiscuous mode
[ 1185.926930][ T4246] usb 4-1: USB disconnect, device number 76
[ 1185.933983][ T4246] mcba_usb 4-1:0.0 can0: device disconnected
[ 1186.050227][T11057] mip6: mip6_destopt_init_state: spi is not 0: 1114112
[ 1186.170089][ T5619] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1186.186974][T11063] loop1: detected capacity change from 0 to 256
[ 1186.267654][T11070] netlink: 'syz.0.17942': attribute type 21 has an invalid length.
[ 1186.338034][T11063] FAT-fs (loop1): Directory bread(block 64) failed
[ 1186.344631][T11063] FAT-fs (loop1): Directory bread(block 65) failed
[ 1186.374144][T11063] FAT-fs (loop1): Directory bread(block 66) failed
[ 1186.385278][T11063] FAT-fs (loop1): Directory bread(block 67) failed
[ 1186.391998][T11063] FAT-fs (loop1): Directory bread(block 68) failed
[ 1186.405537][T11063] FAT-fs (loop1): Directory bread(block 69) failed
[ 1186.426171][T11063] FAT-fs (loop1): Directory bread(block 70) failed
[ 1186.440485][T11063] FAT-fs (loop1): Directory bread(block 71) failed
[ 1186.457367][T11063] FAT-fs (loop1): Directory bread(block 72) failed
[ 1186.476311][T11063] FAT-fs (loop1): Directory bread(block 73) failed
[ 1186.515800][ T5619] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1186.546966][ T5619] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1186.586084][ T5619] usb 5-1: config 1 interface 1 has no altsetting 1
[ 1186.593119][T18189] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1186.675796][T11084] loop2: detected capacity change from 0 to 4096
[ 1186.710021][T11089] 9pnet: p9_fd_create_unix (11089): problem connecting socket: ./file0: -111
[ 1186.757074][ T5619] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1186.777403][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.790582][ T5619] usb 5-1: Product: syz
[ 1186.803623][ T5619] usb 5-1: Manufacturer: syz
[ 1186.809473][T11093] netlink: 'syz.3.17953': attribute type 10 has an invalid length.
[ 1186.818075][ T5619] usb 5-1: SerialNumber: syz
[ 1186.823180][T11093] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1186.859442][T11084] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 1186.869984][ T5619] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[ 1186.878139][ T5619] cdc_ncm 5-1:1.0: bind() failure
[ 1186.897955][T11093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1186.942621][ T5619] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 1186.962365][ T5619] cdc_ncm 5-1:1.1: bind() failure
[ 1186.980480][T18189] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1187.055631][T18189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1187.077941][T18189] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[ 1187.099347][T18189] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1187.139542][ T5619] usb 5-1: USB disconnect, device number 65
[ 1187.189243][T11103] netlink: 'syz.3.17958': attribute type 1 has an invalid length.
[ 1187.220631][T11105] comedi comedi1: dt2817: a I/O base address must be specified
[ 1187.273020][T18189] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[ 1187.301647][T18189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1187.334641][T18189] usb 1-1: Product: syz
[ 1187.338927][T18189] usb 1-1: Manufacturer: syz
[ 1187.371871][T18189] usb 1-1: SerialNumber: syz
[ 1187.448603][T11117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17965'.
[ 1187.476934][T11117] netlink: 212 bytes leftover after parsing attributes in process `syz.1.17965'.
[ 1187.622199][T11129] loop4: detected capacity change from 0 to 512
[ 1187.632410][T11131] kAFS: unparsable volume name
[ 1187.690361][T18189] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[ 1187.745757][T18189] snd-usb-audio: probe of 1-1:1.1 failed with error -22
[ 1187.767648][T11129] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1187.852459][T11129] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1187.880523][T11143] xt_l2tp: wrong L2TP version: 0
[ 1187.939898][T18189] snd-usb-audio: probe of 1-1:1.2 failed with error -22
[ 1187.956615][T11129] Quota error (device loop4): write_blk: dquota write failed
[ 1187.977691][T11129] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[ 1187.996692][T18189] usb 1-1: USB disconnect, device number 54
[ 1188.004778][T11129] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.17970: Failed to acquire dquot type 1
[ 1188.148197][T11154] netlink: 256 bytes leftover after parsing attributes in process `syz.1.17982'.
[ 1188.164027][T11157] netlink: 200 bytes leftover after parsing attributes in process `syz.2.17984'.
[ 1188.230848][ T4295] udevd[4295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1188.338973][T11166] netlink: 'syz.4.17985': attribute type 1 has an invalid length.
[ 1188.392408][T11169] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1188.703872][T11197] netlink: zone id is out of range
[ 1188.723182][T11197] netlink: zone id is out of range
[ 1188.728584][T11197] netlink: zone id is out of range
[ 1188.741899][T11197] netlink: zone id is out of range
[ 1188.767365][T11197] netlink: zone id is out of range
[ 1188.777168][T11197] netlink: zone id is out of range
[ 1188.784273][T11197] netlink: zone id is out of range
[ 1188.794064][T11197] netlink: zone id is out of range
[ 1188.799778][T11197] netlink: zone id is out of range
[ 1188.960107][ T4246] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1189.064138][T11219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18013'.
[ 1189.217364][ T4246] usb 4-1: Using ep0 maxpacket: 32
[ 1189.376126][ T4246] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1189.460099][ T4246] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[ 1189.485217][ T4246] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[ 1189.515958][ T4246] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[ 1189.562190][ T4246] usb 4-1: config 128 has no interface number 0
[ 1189.583687][ T4246] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 1189.598304][T11252] loop1: detected capacity change from 0 to 1024
[ 1189.625026][ T4246] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1189.657349][T11256] loop2: detected capacity change from 0 to 164
[ 1189.663925][ T4246] usb 4-1: config 128 interface 127 has no altsetting 0
[ 1189.678474][T11252] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[ 1189.727844][T11256] Unable to read rock-ridge attributes
[ 1189.774452][T11256] Unable to read rock-ridge attributes
[ 1189.793086][T11252] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,usrquota,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[ 1189.810218][T11256] iso9660: Corrupted directory entry in block 4 of inode 1792
[ 1189.873444][ T4246] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[ 1189.893172][T11252] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz.1.18031: directory missing '..'
[ 1189.907332][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1189.934117][ T4246] usb 4-1: Product: syz
[ 1189.958272][ T4246] usb 4-1: Manufacturer: syz
[ 1189.987710][ T4246] usb 4-1: SerialNumber: syz
[ 1190.256400][T11289] kernel profiling enabled (shift: 63)
[ 1190.278329][T11289] profiling shift: 63 too large
[ 1190.413358][T11299] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[ 1190.444919][T11299] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[ 1190.480057][ T4246] usb 4-1: USB disconnect, device number 77
[ 1190.562628][T11308] netlink: 'syz.1.18058': attribute type 4 has an invalid length.
[ 1190.592073][T11308] netlink: 152 bytes leftover after parsing attributes in process `syz.1.18058'.
[ 1190.640612][T11301] loop2: detected capacity change from 0 to 4096
[ 1190.695564][T11315] loop0: detected capacity change from 0 to 256
[ 1190.713526][T11301] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[ 1190.741896][ T8630] udevd[8630]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1191.239583][T11340] libceph: secret too big 289
[ 1191.739911][T11389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18098'.
[ 1191.748635][T11382] loop1: detected capacity change from 0 to 2048
[ 1191.816085][T11382] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1192.563480][ T5442] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[ 1192.629955][T11458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18133'.
[ 1192.936364][ T5442] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1193.106958][ T5442] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1193.121644][ T5442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.154397][ T5442] usb 4-1: Product: syz
[ 1193.159245][T11480] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1193.176487][ T5442] usb 4-1: Manufacturer: syz
[ 1193.190713][ T5442] usb 4-1: SerialNumber: syz
[ 1193.217396][ T5442] usb 4-1: config 0 descriptor??
[ 1193.276480][ T5442] asix: probe of 4-1:0.0 failed with error -22
[ 1193.405932][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18152'.
[ 1193.420411][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18152'.
[ 1193.461827][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18152'.
[ 1193.494250][ T5442] usb 4-1: USB disconnect, device number 78
[ 1193.504978][T11498] net_ratelimit: 336 callbacks suppressed
[ 1193.504995][T11498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1193.737039][T11521] netlink: 4568 bytes leftover after parsing attributes in process `syz.4.18163'.
[ 1193.897982][T11531] dlm: dev_write: no op 0 74000000000000
[ 1194.002574][T11537] netlink: 'syz.0.18172': attribute type 1 has an invalid length.
[ 1194.027298][T11537] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.18172'.
[ 1194.134900][T11549] netlink: 'syz.0.18177': attribute type 2 has an invalid length.
[ 1194.150554][T11549] netlink: 'syz.0.18177': attribute type 1 has an invalid length.
[ 1194.406189][T11565] loop3: detected capacity change from 0 to 64
[ 1194.509420][T11565] hfs: unable to locate alternate MDB
[ 1194.538323][T11576] netlink: 'syz.2.18190': attribute type 10 has an invalid length.
[ 1194.557472][T11565] hfs: continuing without an alternate MDB
[ 1194.567064][T11576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18190'.
[ 1194.576126][T11576] device dummy0 entered promiscuous mode
[ 1194.602070][   T26] audit: type=1800 audit(1232.403:74): pid=11565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18185" name="bus" dev="loop3" ino=21 res=0 errno=0
[ 1194.646049][T11576] bridge0: port 3(dummy0) entered blocking state
[ 1194.664899][T11576] bridge0: port 3(dummy0) entered disabled state
[ 1194.676324][T11576] bridge0: port 3(dummy0) entered blocking state
[ 1194.682813][T11576] bridge0: port 3(dummy0) entered forwarding state
[ 1194.694611][  T391] 
[ 1194.696972][  T391] ======================================================
[ 1194.704005][  T391] WARNING: possible circular locking dependency detected
[ 1194.711048][  T391] syzkaller #0 Not tainted
[ 1194.715474][  T391] ------------------------------------------------------
[ 1194.722522][  T391] kworker/u4:3/391 is trying to acquire lock:
[ 1194.728612][  T391] ffff88807d4b41f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0
[ 1194.739451][  T391] 
[ 1194.739451][  T391] but task is already holding lock:
[ 1194.746847][  T391] ffff8880568a00b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[ 1194.756493][  T391] 
[ 1194.756493][  T391] which lock already depends on the new lock.
[ 1194.756493][  T391] 
[ 1194.766919][  T391] 
[ 1194.766919][  T391] the existing dependency chain (in reverse order) is:
[ 1194.775949][  T391] 
[ 1194.775949][  T391] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}:
[ 1194.784094][  T391]        __mutex_lock_common+0x1e3/0x2400
[ 1194.789846][  T391]        mutex_lock_nested+0x17/0x20
[ 1194.795165][  T391]        hfs_find_init+0x15b/0x1d0
[ 1194.800329][  T391]        hfs_get_block+0x553/0xc50
[ 1194.805471][  T391]        block_read_full_page+0x306/0xd40
[ 1194.811230][  T391]        do_read_cache_page+0x8a1/0x1030
[ 1194.816894][  T391]        __hfs_bnode_create+0x4f0/0xbd0
[ 1194.822473][  T391]        hfs_bnode_find+0x220/0xd30
[ 1194.827712][  T391]        hfs_brec_find+0x178/0x500
[ 1194.832876][  T391]        hfs_brec_read+0x20/0x100
[ 1194.837933][  T391]        hfs_cat_find_brec+0x174/0x3f0
[ 1194.843506][  T391]        hfs_fill_super+0xfda/0x1590
[ 1194.848818][  T391]        mount_bdev+0x287/0x3c0
[ 1194.853698][  T391]        legacy_get_tree+0xe6/0x180
[ 1194.858924][  T391]        vfs_get_tree+0x88/0x270
[ 1194.863895][  T391]        do_new_mount+0x24a/0xa40
[ 1194.868945][  T391]        __se_sys_mount+0x2e3/0x3d0
[ 1194.874166][  T391]        do_syscall_64+0x4c/0xa0
[ 1194.879126][  T391]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1194.885572][  T391] 
[ 1194.885572][  T391] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[ 1194.894814][  T391]        __lock_acquire+0x2c42/0x7d10
[ 1194.900227][  T391]        lock_acquire+0x19e/0x400
[ 1194.905293][  T391]        __mutex_lock_common+0x1e3/0x2400
[ 1194.911043][  T391]        mutex_lock_nested+0x17/0x20
[ 1194.916359][  T391]        hfs_extend_file+0xfb/0x13f0
[ 1194.921668][  T391]        hfs_bmap_reserve+0x103/0x420
[ 1194.927075][  T391]        __hfs_ext_write_extent+0x1fa/0x470
[ 1194.932996][  T391]        hfs_ext_write_extent+0x17b/0x200
[ 1194.938743][  T391]        hfs_write_inode+0xd8/0xa20
[ 1194.943979][  T391]        __writeback_single_inode+0x6c3/0xda0
[ 1194.950068][  T391]        writeback_sb_inodes+0xa4e/0x1680
[ 1194.955810][  T391]        wb_writeback+0x45d/0xbe0
[ 1194.960945][  T391]        wb_workfn+0x43a/0xf20
[ 1194.965735][  T391]        process_one_work+0x85f/0x1010
[ 1194.971219][  T391]        worker_thread+0xaa6/0x1290
[ 1194.976442][  T391]        kthread+0x436/0x520
[ 1194.981057][  T391]        ret_from_fork+0x1f/0x30
[ 1194.986018][  T391] 
[ 1194.986018][  T391] other info that might help us debug this:
[ 1194.986018][  T391] 
[ 1194.996270][  T391]  Possible unsafe locking scenario:
[ 1194.996270][  T391] 
[ 1195.003749][  T391]        CPU0                    CPU1
[ 1195.009147][  T391]        ----                    ----
[ 1195.014535][  T391]   lock(&tree->tree_lock#2/1);
[ 1195.019436][  T391]                                lock(&HFS_I(tree->inode)->extents_lock);
[ 1195.027964][  T391]                                lock(&tree->tree_lock#2/1);
[ 1195.035393][  T391]   lock(&HFS_I(tree->inode)->extents_lock);
[ 1195.041392][  T391] 
[ 1195.041392][  T391]  *** DEADLOCK ***
[ 1195.041392][  T391] 
[ 1195.049553][  T391] 3 locks held by kworker/u4:3/391:
[ 1195.054775][  T391]  #0: ffff8881421c1138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[ 1195.065446][  T391]  #1: ffffc90002f2fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[ 1195.076504][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18200'.
[ 1195.077412][  T391]  #2: ffff8880568a00b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[ 1195.096308][  T391] 
[ 1195.096308][  T391] stack backtrace:
[ 1195.102213][  T391] CPU: 0 PID: 391 Comm: kworker/u4:3 Not tainted syzkaller #0
[ 1195.109694][  T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1195.119776][  T391] Workqueue: writeback wb_workfn (flush-7:3)
[ 1195.125800][  T391] Call Trace:
[ 1195.129104][  T391]  <TASK>
[ 1195.132056][  T391]  dump_stack_lvl+0x188/0x250
[ 1195.136772][  T391]  ? load_image+0x400/0x400
[ 1195.141298][  T391]  ? show_regs_print_info+0x20/0x20
[ 1195.146557][  T391]  ? print_circular_bug+0x12b/0x1a0
[ 1195.151793][  T391]  check_noncircular+0x296/0x330
[ 1195.156759][  T391]  ? look_up_lock_class+0x71/0x110
[ 1195.161910][  T391]  ? add_chain_block+0x940/0x940
[ 1195.166869][  T391]  ? lockdep_lock+0xf1/0x1f0
[ 1195.171503][  T391]  ? deref_stack_reg+0xd0/0x120
[ 1195.176381][  T391]  ? mark_lock+0x94/0x320
[ 1195.180733][  T391]  __lock_acquire+0x2c42/0x7d10
[ 1195.185655][  T391]  ? verify_lock_unused+0x140/0x140
[ 1195.190890][  T391]  ? stack_trace_save+0xa6/0xf0
[ 1195.195771][  T391]  ? stack_trace_snprint+0xf0/0xf0
[ 1195.200908][  T391]  ? check_noncircular+0x189/0x330
[ 1195.206059][  T391]  ? add_chain_block+0x940/0x940
[ 1195.211032][  T391]  lock_acquire+0x19e/0x400
[ 1195.215577][  T391]  ? hfs_extend_file+0xfb/0x13f0
[ 1195.220571][  T391]  ? __lock_acquire+0x28ac/0x7d10
[ 1195.225628][  T391]  ? __might_sleep+0xf0/0xf0
[ 1195.230241][  T391]  ? read_lock_is_recursive+0x10/0x10
[ 1195.235652][  T391]  ? hfs_extend_file+0xfb/0x13f0
[ 1195.240617][  T391]  __mutex_lock_common+0x1e3/0x2400
[ 1195.245841][  T391]  ? hfs_extend_file+0xfb/0x13f0
[ 1195.250806][  T391]  ? mark_lock+0x94/0x320
[ 1195.255161][  T391]  ? verify_lock_unused+0x140/0x140
[ 1195.260393][  T391]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1195.266412][  T391]  ? __rwlock_init+0x140/0x140
[ 1195.271204][  T391]  ? mutex_lock_io_nested+0x60/0x60
[ 1195.276440][  T391]  ? lockdep_hardirqs_on+0x94/0x140
[ 1195.281677][  T391]  mutex_lock_nested+0x17/0x20
[ 1195.286464][  T391]  hfs_extend_file+0xfb/0x13f0
[ 1195.291261][  T391]  ? __mutex_trylock_common+0x155/0x260
[ 1195.296835][  T391]  ? hfs_get_block+0xc50/0xc50
[ 1195.301646][  T391]  ? writeback_sb_inodes+0xa4e/0x1680
[ 1195.307042][  T391]  ? wb_workfn+0x43a/0xf20
[ 1195.311492][  T391]  ? hfs_find_init+0x15b/0x1d0
[ 1195.316283][  T391]  ? __mutex_lock_common+0x465/0x2400
[ 1195.321679][  T391]  ? memset+0x1e/0x40
[ 1195.325692][  T391]  ? hfs_brec_find+0x197/0x500
[ 1195.330494][  T391]  hfs_bmap_reserve+0x103/0x420
[ 1195.335369][  T391]  __hfs_ext_write_extent+0x1fa/0x470
[ 1195.340768][  T391]  hfs_ext_write_extent+0x17b/0x200
[ 1195.345994][  T391]  ? verify_lock_unused+0x140/0x140
[ 1195.351226][  T391]  ? hfs_ext_keycmp+0x310/0x310
[ 1195.356100][  T391]  ? writeback_sb_inodes+0x418/0x1680
[ 1195.361498][  T391]  hfs_write_inode+0xd8/0xa20
[ 1195.366213][  T391]  ? hfs_inode_write_fork+0x1a0/0x1a0
[ 1195.371635][  T391]  ? __writeback_single_inode+0x471/0xda0
[ 1195.377392][  T391]  ? __lock_acquire+0x7d10/0x7d10
[ 1195.382466][  T391]  ? do_raw_spin_lock+0x128/0x2f0
[ 1195.387513][  T391]  ? __rwlock_init+0x140/0x140
[ 1195.392302][  T391]  __writeback_single_inode+0x6c3/0xda0
[ 1195.397874][  T391]  writeback_sb_inodes+0xa4e/0x1680
[ 1195.403107][  T391]  ? queue_io+0x550/0x550
[ 1195.407495][  T391]  ? rcu_is_watching+0x11/0xa0
[ 1195.412289][  T391]  wb_writeback+0x45d/0xbe0
[ 1195.416823][  T391]  ? rcu_lock_release+0x20/0x20
[ 1195.421703][  T391]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1195.427719][  T391]  ? mark_lock+0x94/0x320
[ 1195.432085][  T391]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1195.437318][  T391]  wb_workfn+0x43a/0xf20
[ 1195.441641][  T391]  ? inode_wait_for_writeback+0x220/0x220
[ 1195.447410][  T391]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1195.453470][  T391]  ? read_lock_is_recursive+0x10/0x10
[ 1195.458896][  T391]  ? __schedule+0x11f7/0x43c0
[ 1195.463606][  T391]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1195.468834][  T391]  process_one_work+0x85f/0x1010
[ 1195.473812][  T391]  ? worker_detach_from_pool+0x240/0x240
[ 1195.479558][  T391]  ? lockdep_hardirqs_off+0x70/0x100
[ 1195.484876][  T391]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1195.489927][  T391]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1195.495501][  T391]  ? wq_worker_running+0x97/0x170
[ 1195.500558][  T391]  worker_thread+0xaa6/0x1290
[ 1195.505272][  T391]  kthread+0x436/0x520
[ 1195.509378][  T391]  ? rcu_lock_release+0x20/0x20
[ 1195.514349][  T391]  ? kthread_blkcg+0xd0/0xd0
[ 1195.518979][  T391]  ret_from_fork+0x1f/0x30
[ 1195.523449][  T391]  </TASK>
[ 1195.563857][T11598] loop0: detected capacity change from 0 to 4096
[ 1195.570723][  T391] hfs: new node 0 already hashed?
[ 1195.576716][  T391] ------------[ cut here ]------------
[ 1195.582250][  T391] WARNING: CPU: 0 PID: 391 at fs/hfs/bnode.c:530 hfs_bnode_create+0x3d1/0x450
[ 1195.594352][  T391] Modules linked in:
[ 1195.598303][  T391] CPU: 0 PID: 391 Comm: kworker/u4:3 Not tainted syzkaller #0
[ 1195.606182][  T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1195.623681][T11598] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[ 1195.634866][  T391] Workqueue: writeback wb_workfn (flush-7:3)
[ 1195.645778][  T391] RIP: 0010:hfs_bnode_create+0x3d1/0x450
[ 1195.681353][  T391] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c
[ 1195.703718][  T391] RSP: 0018:ffffc90002f2ee90 EFLAGS: 00010246
[ 1195.710162][  T391] RAX: 000000000000001f RBX: ffff8880568a0000 RCX: 65a2f37cdbc12700
[ 1195.740551][T11544] loop4: detected capacity change from 0 to 40427
[ 1195.757259][  T391] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1195.772317][  T391] RBP: 0000000000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af
[ 1195.781373][  T391] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000
[ 1195.789993][  T391] R13: ffff8880568a00e0 R14: ffff888033a0eb00 R15: dffffc0000000000
[ 1195.798177][T11544] F2FS-fs (loop4): invalid crc value
[ 1195.803837][  T391] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[ 1195.814443][T11544] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1195.827737][  T391] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1195.852281][  T391] CR2: 0000001b3340eff8 CR3: 000000007e3fd000 CR4: 00000000003506e0
[ 1195.862466][  T391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1195.870525][  T391] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1195.880370][  T391] Call Trace:
[ 1195.894825][  T391]  <TASK>
[ 1195.897935][  T391]  ? do_raw_spin_unlock+0x11d/0x230
[ 1195.905249][  T391]  hfs_bmap_alloc+0x5b8/0x670
[ 1195.910139][  T391]  ? hfs_bmap_reserve+0x420/0x420
[ 1195.915243][  T391]  ? rcu_is_watching+0x11/0xa0
[ 1195.921666][  T391]  hfs_btree_inc_height+0xfd/0xac0
[ 1195.927247][  T391]  ? hfs_brec_insert+0x6f6/0xbd0
[ 1195.932706][  T391]  ? hfs_brec_insert+0xbd0/0xbd0
[ 1195.942993][  T391]  ? do_raw_spin_unlock+0x11d/0x230
[ 1195.948766][  T391]  hfs_brec_insert+0x744/0xbd0
[ 1195.954048][  T391]  ? hfs_brec_keylen+0x350/0x350
[ 1195.956657][T11544] F2FS-fs (loop4): Start checkpoint disabled!
[ 1195.967186][  T391]  __hfs_ext_write_extent+0x2a1/0x470
[ 1195.975936][T11544] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[ 1195.981661][  T391]  hfs_ext_write_extent+0x17b/0x200
[ 1195.993508][  T391]  ? verify_lock_unused+0x140/0x140
[ 1196.003587][  T391]  ? hfs_ext_keycmp+0x310/0x310
[ 1196.015004][  T391]  ? writeback_sb_inodes+0x418/0x1680
[ 1196.029448][  T391]  hfs_write_inode+0xd8/0xa20
[ 1196.037677][  T391]  ? hfs_inode_write_fork+0x1a0/0x1a0
[ 1196.043276][  T391]  ? __writeback_single_inode+0x471/0xda0
[ 1196.049110][  T391]  ? __lock_acquire+0x7d10/0x7d10
[ 1196.054175][  T391]  ? do_raw_spin_lock+0x128/0x2f0
[ 1196.059746][  T391]  ? __rwlock_init+0x140/0x140
[ 1196.064549][  T391]  __writeback_single_inode+0x6c3/0xda0
[ 1196.070354][  T391]  writeback_sb_inodes+0xa4e/0x1680
[ 1196.075607][  T391]  ? queue_io+0x550/0x550
[ 1196.080097][  T391]  ? rcu_is_watching+0x11/0xa0
[ 1196.084913][  T391]  wb_writeback+0x45d/0xbe0
[ 1196.089497][  T391]  ? rcu_lock_release+0x20/0x20
[ 1196.094370][  T391]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1196.100495][  T391]  ? mark_lock+0x94/0x320
[ 1196.104919][  T391]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1196.110136][  T391]  wb_workfn+0x43a/0xf20
[ 1196.114391][  T391]  ? inode_wait_for_writeback+0x220/0x220
[ 1196.120374][  T391]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1196.126626][  T391]  ? read_lock_is_recursive+0x10/0x10
[ 1196.132084][  T391]  ? __schedule+0x11f7/0x43c0
[ 1196.136898][  T391]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1196.142949][  T391]  process_one_work+0x85f/0x1010
[ 1196.148179][  T391]  ? worker_detach_from_pool+0x240/0x240
[ 1196.157231][  T391]  ? lockdep_hardirqs_off+0x70/0x100
[ 1196.168584][  T391]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1196.173785][  T391]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1196.179520][  T391]  ? wq_worker_running+0x97/0x170
[ 1196.184680][  T391]  worker_thread+0xaa6/0x1290
[ 1196.191168][  T391]  kthread+0x436/0x520
[ 1196.195272][  T391]  ? rcu_lock_release+0x20/0x20
[ 1196.200178][  T391]  ? kthread_blkcg+0xd0/0xd0
[ 1196.204799][  T391]  ret_from_fork+0x1f/0x30
[ 1196.210603][  T391]  </TASK>
[ 1196.213709][  T391] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1196.221106][  T391] CPU: 1 PID: 391 Comm: kworker/u4:3 Not tainted syzkaller #0
[ 1196.228592][  T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1196.238690][  T391] Workqueue: writeback wb_workfn (flush-7:3)
[ 1196.244730][  T391] Call Trace:
[ 1196.248033][  T391]  <TASK>
[ 1196.251011][  T391]  dump_stack_lvl+0x188/0x250
[ 1196.255725][  T391]  ? show_regs_print_info+0x20/0x20
[ 1196.260962][  T391]  ? load_image+0x400/0x400
[ 1196.265599][  T391]  panic+0x2e5/0x810
[ 1196.269525][  T391]  ? bpf_jit_dump+0xd0/0xd0
[ 1196.274154][  T391]  ? ret_from_fork+0x1f/0x30
[ 1196.278780][  T391]  ? hfs_bnode_create+0x3d1/0x450
[ 1196.283836][  T391]  __warn+0x248/0x2b0
[ 1196.287843][  T391]  ? hfs_bnode_create+0x3d1/0x450
[ 1196.292893][  T391]  report_bug+0x1b7/0x2e0
[ 1196.297253][  T391]  handle_bug+0x3a/0x70
[ 1196.301432][  T391]  exc_invalid_op+0x16/0x40
[ 1196.305968][  T391]  asm_exc_invalid_op+0x16/0x20
[ 1196.310847][  T391] RIP: 0010:hfs_bnode_create+0x3d1/0x450
[ 1196.316601][  T391] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c
[ 1196.336234][  T391] RSP: 0018:ffffc90002f2ee90 EFLAGS: 00010246
[ 1196.342338][  T391] RAX: 000000000000001f RBX: ffff8880568a0000 RCX: 65a2f37cdbc12700
[ 1196.350470][  T391] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1196.358469][  T391] RBP: 0000000000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af
[ 1196.366478][  T391] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000
[ 1196.374492][  T391] R13: ffff8880568a00e0 R14: ffff888033a0eb00 R15: dffffc0000000000
[ 1196.382498][  T391]  ? do_raw_spin_unlock+0x11d/0x230
[ 1196.387740][  T391]  hfs_bmap_alloc+0x5b8/0x670
[ 1196.392454][  T391]  ? hfs_bmap_reserve+0x420/0x420
[ 1196.397519][  T391]  ? rcu_is_watching+0x11/0xa0
[ 1196.402308][  T391]  hfs_btree_inc_height+0xfd/0xac0
[ 1196.407440][  T391]  ? hfs_brec_insert+0x6f6/0xbd0
[ 1196.412389][  T391]  ? hfs_brec_insert+0xbd0/0xbd0
[ 1196.417336][  T391]  ? do_raw_spin_unlock+0x11d/0x230
[ 1196.422540][  T391]  hfs_brec_insert+0x744/0xbd0
[ 1196.427311][  T391]  ? hfs_brec_keylen+0x350/0x350
[ 1196.432399][  T391]  __hfs_ext_write_extent+0x2a1/0x470
[ 1196.437780][  T391]  hfs_ext_write_extent+0x17b/0x200
[ 1196.442991][  T391]  ? verify_lock_unused+0x140/0x140
[ 1196.448339][  T391]  ? hfs_ext_keycmp+0x310/0x310
[ 1196.453210][  T391]  ? writeback_sb_inodes+0x418/0x1680
[ 1196.458632][  T391]  hfs_write_inode+0xd8/0xa20
[ 1196.463573][  T391]  ? hfs_inode_write_fork+0x1a0/0x1a0
[ 1196.468985][  T391]  ? __writeback_single_inode+0x471/0xda0
[ 1196.474735][  T391]  ? __lock_acquire+0x7d10/0x7d10
[ 1196.479791][  T391]  ? do_raw_spin_lock+0x128/0x2f0
[ 1196.484869][  T391]  ? __rwlock_init+0x140/0x140
[ 1196.489728][  T391]  __writeback_single_inode+0x6c3/0xda0
[ 1196.495323][  T391]  writeback_sb_inodes+0xa4e/0x1680
[ 1196.500565][  T391]  ? queue_io+0x550/0x550
[ 1196.505065][  T391]  ? rcu_is_watching+0x11/0xa0
[ 1196.509839][  T391]  wb_writeback+0x45d/0xbe0
[ 1196.514350][  T391]  ? rcu_lock_release+0x20/0x20
[ 1196.519229][  T391]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1196.525222][  T391]  ? mark_lock+0x94/0x320
[ 1196.529552][  T391]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1196.534763][  T391]  wb_workfn+0x43a/0xf20
[ 1196.539016][  T391]  ? inode_wait_for_writeback+0x220/0x220
[ 1196.544744][  T391]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1196.550769][  T391]  ? read_lock_is_recursive+0x10/0x10
[ 1196.556147][  T391]  ? __schedule+0x11f7/0x43c0
[ 1196.560831][  T391]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1196.566047][  T391]  process_one_work+0x85f/0x1010
[ 1196.571011][  T391]  ? worker_detach_from_pool+0x240/0x240
[ 1196.576642][  T391]  ? lockdep_hardirqs_off+0x70/0x100
[ 1196.581935][  T391]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1196.586974][  T391]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1196.592549][  T391]  ? wq_worker_running+0x97/0x170
[ 1196.597588][  T391]  worker_thread+0xaa6/0x1290
[ 1196.602278][  T391]  kthread+0x436/0x520
[ 1196.606348][  T391]  ? rcu_lock_release+0x20/0x20
[ 1196.611198][  T391]  ? kthread_blkcg+0xd0/0xd0
[ 1196.615790][  T391]  ret_from_fork+0x1f/0x30
[ 1196.620234][  T391]  </TASK>
[ 1196.623565][  T391] Kernel Offset: disabled
[ 1196.628612][  T391] Rebooting in 86400 seconds..