last executing test programs:

11m16.420436676s ago: executing program 1 (id=11637):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e80), 0x400, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbb)

11m16.238337536s ago: executing program 1 (id=11641):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x71}, 0x80, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x20)

11m16.129532081s ago: executing program 1 (id=11643):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
fstat(r0, &(0x7f0000000180))

11m15.93416666s ago: executing program 1 (id=11648):
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

11m15.674388263s ago: executing program 1 (id=11653):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0700147ea64e21160af3650ab68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

11m15.238221665s ago: executing program 1 (id=11664):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000001b40)=""/4103, 0x1007}], 0x1, 0x0, 0xfffffffd, 0x8)

11m14.9150815s ago: executing program 32 (id=11664):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000001b40)=""/4103, 0x1007}], 0x1, 0x0, 0xfffffffd, 0x8)

1.501481946s ago: executing program 0 (id=22112):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x20040000)

1.326158055s ago: executing program 0 (id=22115):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000c40)={[{@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x43, 0x4e0, &(0x7f0000000300)="$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")
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200000, 0x0)

1.283136207s ago: executing program 3 (id=22116):
r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r0, 0x1)

1.190475591s ago: executing program 4 (id=22118):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e21, @empty}], 0x40)

972.534722ms ago: executing program 3 (id=22121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=@newlink={0x48, 0x10, 0x40b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24f2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0)

932.976414ms ago: executing program 4 (id=22122):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x7, @mcast2, 0x1}}, 0x0, 0x4}, 0x90)

907.907395ms ago: executing program 2 (id=22123):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents(r0, &(0x7f0000000ec0)=""/4096, 0x1000)

816.762669ms ago: executing program 3 (id=22124):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0)
sendfile(r0, r0, 0x0, 0xb)

747.776553ms ago: executing program 4 (id=22125):
r0 = socket(0x22, 0x2, 0x24)
close(r0)

734.068404ms ago: executing program 0 (id=22126):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@s={0x5, @generic, 0x1, 0xfa})

674.174397ms ago: executing program 2 (id=22127):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002380)=@nat={'nat\x00', 0x8, 0x5, 0x4b8, 0x118, 0x208, 0xffffffff, 0x208, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)

589.606ms ago: executing program 3 (id=22128):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}]}, 0x28}], 0x1}, 0x0)

533.882394ms ago: executing program 2 (id=22129):
r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x100004, 0x4, 0x9})

517.423915ms ago: executing program 4 (id=22130):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)

501.057505ms ago: executing program 0 (id=22131):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffed9fff, 0x1000, 0xffffffff}, 0x20)

447.167878ms ago: executing program 3 (id=22132):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b"], 0x3, 0x240, &(0x7f0000000500)="$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")
stat(&(0x7f0000000040)='./file0\x00', 0x0)

403.25094ms ago: executing program 2 (id=22133):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f00000003c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

311.127115ms ago: executing program 4 (id=22134):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)

303.441935ms ago: executing program 0 (id=22135):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

218.236539ms ago: executing program 2 (id=22136):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x1, 0x9, 0x4, 0x2000, 0x0, {}, {0x0, 0x1, 0x0, 0x3, 0x0, 0x0, "2f4cb303"}, 0x0, 0x1, {0x0}})

136.457943ms ago: executing program 3 (id=22137):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xffffffffffffffff, 0xc2040)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x1011}})

86.457305ms ago: executing program 2 (id=22138):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0))

64.475567ms ago: executing program 0 (id=22139):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0)

0s ago: executing program 4 (id=22140):
signalfd(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@data_err_ignore}, {@noinit_itable}, {@sysvgroups}, {@errors_remount}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$eJzs3ElvHMUeAPB/j5fEL8mzX957QBbIQEBYIOLYWQ8cCAIpFyQkEApHYztRiJOg2EhJZBGzKEgcQPkEAW5IfAJOcEGAOIC4EsERIUXIBxw4oEE10zOMPTPe4iWxfz9pnKru6q6q7q64lmkHsGEV048sYmtE/BgR3ZXozATFyj+3piaG/piaGMqiVHrht6ycbnpq4sNq0upxW/JIbyGi8E4Wu5rkO3bp8pnB0dGRC5Xo2zfGC/mes4OnRk6NnBs4evTgga4jhwcOLUs9U5mmd75xfveO4y9fe27oxLVXvv40lbeU75+emhiaeUTPInNoa9hSjOLMa1nnkUWe/U63rS6ctaefhbUrDAuWntp0uzrK7b872sqxiu549q1aImDdKZVKpU0NW2sNfrJUL8sqBwDrRKZJwwa0ve43/vRUGqlODDWOg9e3m8eiPAJK9b6Vfyp72ssj2GJPZWzUsUL5/y8iTkz+eT19ouk8BADA8vr8WETp5987Ur+j+qnsKcQ9den+na8N9UTEfyIi9R3/m/df/h9RTntvRNxXd0zqUW6eJ//irHhj/+f7rjyQuqxLrmcrqf/3ZL62NbP/V1u/6GnLY9vK9e/ITp4eHdmfX5Pe6NiU4v2Np65Nq33xzA8ftMq/WNf/S5+Uf7UvmJfj1/ZZE3TDg+ODt1vvqptvli/slcb6Z9GeVUMROyJi5xLOn67Z6cc+2d1qf63+bXH9RKpnQ/3fb33y9iUUaJbSRxGPVu7/ZMyqf9KZh/rGz77WN3bp8hOn69cn+48cHjjUtzlGR/b3VZ+KRt98d/X5PNgwjJj//q+sdP//1fT5r61c9mT167Vji8/j6o13W45plvr8d2YvlsOd+baLg+PjF/ojOrPJxu0D/xx7cbBrRvpU/969zdv/9oi/qovbuyIiPcT3R8QDEbEnL/uDEfFQROydo/5fPf3wq62GkHfC/R9e1P1vFXjq24jmu9rOfPlZQ8bvFRdY/3T/D5ZDvfmW4cHx+X6txFwlrQ/c9gUEAACAu8CeiNgaWWFfPse5NQqFffsittRmUMbGHz95/vVzw5V3BHqio1Cd6equmw/tz+eGUzwdNVAXT/sPlOeNS6VSqSvF0/h9dNvaVh02vC0t2n/yi+/9w/q3qHW0Vm+0AXelpa+jL/8XMoDVtQzfowHuUto/bFwLbv8r9RYcsGaatf8rEbfWoCjAKmvW/l9ag3IAq8/4HzYu7R82Lu0fNqQFvSS/hMD247O31OWVta9Mpq0DhZj7rwD0RFS3VL/gOPcJfypELE8J25a1pl0z7mmhaZrNsRx5RWHeNO2L+EMMqxso3BnFqAQ2RcQ8T2/tYbtSDVxe6YKVG8HHa/u/EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO37OwAA//8GPdEz")

kernel console output (not intermixed with test programs):

nk: 'syz.4.20390': attribute type 9 has an invalid length.
[ 1863.794027][T25673] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.20390'.
[ 1863.806052][   T27] kauditd_printk_skb: 4 callbacks suppressed
[ 1863.806065][   T27] audit: type=1326 audit(2000000205.175:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25675 comm="syz.2.20392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1863.867608][   T27] audit: type=1326 audit(2000000205.175:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25675 comm="syz.2.20392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1863.927458][ T8012] usb 1-1: 0:2 : does not exist
[ 1863.951425][   T27] audit: type=1326 audit(2000000205.175:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25675 comm="syz.2.20392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1864.014843][ T8012] usb 1-1: USB disconnect, device number 115
[ 1864.043101][   T27] audit: type=1326 audit(2000000205.175:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25675 comm="syz.2.20392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1864.132600][   T27] audit: type=1326 audit(2000000205.175:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25675 comm="syz.2.20392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1864.207551][   T27] audit: type=1326 audit(2000000205.316:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.2.20393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1864.279129][   T27] audit: type=1326 audit(2000000205.316:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.2.20393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1864.310067][   T27] audit: type=1326 audit(2000000205.316:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.2.20393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1864.372056][   T27] audit: type=1326 audit(2000000205.316:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.2.20393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1864.456368][   T27] audit: type=1326 audit(2000000205.540:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25712 comm="syz.4.20397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1539c799 code=0x7ffc0000
[ 1864.806347][T25750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20409'.
[ 1864.856183][T25744] loop0: detected capacity change from 0 to 4096
[ 1865.216177][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1865.231673][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1865.315469][T23647] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1865.447794][T25785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20419'.
[ 1865.524230][T23647] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[ 1865.550625][T23647] usb 4-1: config 0 has no interface number 0
[ 1865.568727][T23647] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 1865.589119][T25791] CIFS mount error: No usable UNC path provided in device string!
[ 1865.589119][T25791] 
[ 1865.592462][T23647] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1865.603059][T25791] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1865.635319][T23647] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 1865.665932][T23647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1865.683090][T23647] usb 4-1: Product: syz
[ 1865.688415][T23647] usb 4-1: Manufacturer: syz
[ 1865.698273][T23647] usb 4-1: SerialNumber: syz
[ 1865.715199][T23647] usb 4-1: config 0 descriptor??
[ 1865.728654][T25761] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1865.749304][T23647] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 1865.782872][T23647] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1866.005138][    C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[ 1866.081269][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20429'.
[ 1866.220887][T23647] usb 4-1: USB disconnect, device number 104
[ 1866.236527][T23647] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1866.276904][T23647] cyberjack 4-1:0.69: device disconnected
[ 1867.232918][T23647] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1867.281349][T25913] loop2: detected capacity change from 0 to 512
[ 1867.335932][T25913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1867.355826][T25913] ext4 filesystem being mounted at /4888/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1867.384964][T25921] loop3: detected capacity change from 0 to 512
[ 1867.414933][T25921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1867.435860][ T6477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1867.454983][T25921] ext4 filesystem being mounted at /4912/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1867.466874][T23647] usb 5-1: Using ep0 maxpacket: 16
[ 1867.493365][T23647] usb 5-1: too many configurations: 9, using maximum allowed: 8
[ 1867.517761][T25921] EXT4-fs error (device loop3): ext4_get_first_dir_block:3584: inode #12: comm syz.3.20456: Attempting to read directory block (0) that is past i_size (3)
[ 1867.564788][T23647] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1867.597137][T23647] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1867.597436][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1867.607389][T23647] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1867.687875][T23647] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1867.711096][T23647] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1867.731649][T23647] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1867.779691][T23647] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1867.806137][T23647] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1867.817294][T25939] loop0: detected capacity change from 0 to 2048
[ 1867.831074][T23647] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1867.843531][T25942] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1867.864802][T23647] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1867.879530][T23647] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1867.901633][T23647] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1867.922453][T23647] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1867.936498][T25939] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[ 1867.951882][T23647] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1867.987067][T23647] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1868.014295][T25939] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16)
[ 1868.029321][T23647] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1868.053605][T23647] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1868.066560][T25939] Remounting filesystem read-only
[ 1868.066725][T23647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1868.083509][T25939] NILFS (loop0): error -5 truncating bmap (ino=16)
[ 1868.098978][T23647] usb 5-1: Product: syz
[ 1868.103261][T23647] usb 5-1: Manufacturer: syz
[ 1868.107874][T23647] usb 5-1: SerialNumber: syz
[ 1868.152392][T23647] r8152-cfgselector 5-1: config 0 descriptor??
[ 1868.162493][ T6485] NILFS (loop0): discard dirty page: offset=4096, ino=6
[ 1868.183350][ T6485] NILFS (loop0): discard dirty block: blocknr=39, size=1024
[ 1868.206048][ T6485] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1868.231283][ T6485] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1868.255551][ T6485] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1868.275125][ T6485] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[ 1868.295007][ T6485] NILFS (loop0): discard dirty page: offset=0, ino=16
[ 1868.310135][ T6485] NILFS (loop0): discard dirty block: blocknr=23, size=1024
[ 1868.320710][ T6485] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1868.344178][ T6485] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1868.364117][ T6485] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1868.391421][T23647] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[ 1868.410961][ T6485] NILFS (loop0): discard dirty page: offset=0, ino=3
[ 1868.421403][ T6485] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1868.452892][ T6485] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1868.473209][ T6485] NILFS (loop0): discard dirty block: blocknr=44, size=1024
[ 1868.491454][ T6485] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1868.618697][    T9] usb 5-1: USB disconnect, device number 53
[ 1869.222131][   T27] kauditd_printk_skb: 17 callbacks suppressed
[ 1869.222145][   T27] audit: type=1326 audit(2000000210.254:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26022 comm="syz.3.20482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1869.287776][   T27] audit: type=1326 audit(2000000210.254:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26022 comm="syz.3.20482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1869.360303][   T27] audit: type=1326 audit(2000000210.254:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26022 comm="syz.3.20482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1869.425413][   T27] audit: type=1326 audit(2000000210.254:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26022 comm="syz.3.20482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1869.455212][T26036] loop2: detected capacity change from 0 to 1764
[ 1869.664626][T26044] loop4: detected capacity change from 0 to 4096
[ 1869.721875][T26053] delete_channel: no stack
[ 1870.392715][T26097] loop3: detected capacity change from 0 to 128
[ 1870.638554][T26114] loop3: detected capacity change from 0 to 764
[ 1870.694195][T26114] rock: corrupted directory entry. extent=32, offset=2044, size=237
[ 1870.757896][T26114] Symlink component flag not implemented
[ 1870.776097][T26114] Symlink component flag not implemented (7)
[ 1871.234466][T26151] loop2: detected capacity change from 0 to 256
[ 1872.168373][T26158] loop3: detected capacity change from 0 to 32768
[ 1872.191029][T26158] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.20522 (26158)
[ 1872.231487][T26158] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1872.270074][T26158] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1872.295674][T26158] BTRFS info (device loop3): setting nodatasum
[ 1872.317862][T26161] loop0: detected capacity change from 0 to 32768
[ 1872.335746][T26158] BTRFS info (device loop3): force zlib compression, level 3
[ 1872.357989][T26158] BTRFS info (device loop3): metadata ratio 1
[ 1872.380647][T26158] BTRFS info (device loop3): enabling ssd optimizations
[ 1872.404325][T26161] jfs_lookup: dtSearch returned -5
[ 1872.412872][T26158] BTRFS info (device loop3): allowing degraded mounts
[ 1872.431318][T26158] BTRFS info (device loop3): using free space tree
[ 1873.014938][ T6481] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1873.434287][T26232] loop4: detected capacity change from 0 to 256
[ 1873.473582][T26209] loop2: detected capacity change from 0 to 32768
[ 1873.547996][T26209] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1873.628420][T26232] FAT-fs (loop4): Directory bread(block 64) failed
[ 1873.654485][T26248] [U] 
[ 1873.664129][T26232] FAT-fs (loop4): Directory bread(block 65) failed
[ 1873.695475][T26232] FAT-fs (loop4): Directory bread(block 66) failed
[ 1873.717902][T26232] FAT-fs (loop4): Directory bread(block 67) failed
[ 1873.741721][T26232] FAT-fs (loop4): Directory bread(block 68) failed
[ 1873.773873][T26232] FAT-fs (loop4): Directory bread(block 69) failed
[ 1873.791588][T26209] XFS (loop2): Ending clean mount
[ 1873.802508][T26232] FAT-fs (loop4): Directory bread(block 70) failed
[ 1873.822863][T26209] XFS (loop2): Quotacheck needed: Please wait.
[ 1873.850715][T26232] FAT-fs (loop4): Directory bread(block 71) failed
[ 1873.874852][T26232] FAT-fs (loop4): Directory bread(block 72) failed
[ 1873.900606][T26232] FAT-fs (loop4): Directory bread(block 73) failed
[ 1873.965195][T26209] XFS (loop2): Quotacheck: Done.
[ 1874.233377][ T6477] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1874.316067][T26269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20545'.
[ 1874.747200][T26290] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1875.256770][T26323] openvswitch: netlink: EtherType 0 is less than min 600
[ 1875.652634][T32033] bridge0: port 2(team0) entered disabled state
[ 1875.941148][T26365] loop3: detected capacity change from 0 to 2048
[ 1875.976064][T26372] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1876.022128][T26365] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=255
[ 1876.058948][T26365] Remounting filesystem read-only
[ 1876.637600][T26374] loop2: detected capacity change from 0 to 32768
[ 1876.652450][T26374] (syz.2.20577,26374,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1876.664379][T26369] loop0: detected capacity change from 0 to 32768
[ 1876.687648][T26369] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.20575 (26369)
[ 1876.704529][T26374] (syz.2.20577,26374,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1876.771276][T26369] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1876.792863][T26369] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1876.808988][T26369] BTRFS info (device loop0): force zlib compression, level 3
[ 1876.828012][T26369] BTRFS info (device loop0): force clearing of disk cache
[ 1876.835851][T26369] BTRFS info (device loop0): setting nodatasum
[ 1876.842043][T26369] BTRFS info (device loop0): allowing degraded mounts
[ 1876.849663][T26369] BTRFS info (device loop0): enabling disk space caching
[ 1876.857818][T26369] BTRFS info (device loop0): disk space caching is enabled
[ 1876.877210][T26374] JBD2: Ignoring recovery information on journal
[ 1877.027316][T26374] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1877.065546][T26369] BTRFS info (device loop0): auto enabling async discard
[ 1877.140681][T26369] BTRFS info (device loop0): rebuilding free space tree
[ 1877.242214][T26369] BTRFS info (device loop0): disabling free space tree
[ 1877.249208][T26369] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1877.292750][T26369] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1877.478892][ T6477] ocfs2: Unmounting device (7,2) on (node local)
[ 1877.527551][ T6485] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1877.826385][T26445] loop3: detected capacity change from 0 to 256
[ 1878.020139][T26445] FAT-fs (loop3): Directory bread(block 64) failed
[ 1878.041094][T26445] FAT-fs (loop3): Directory bread(block 65) failed
[ 1878.047816][T26445] FAT-fs (loop3): Directory bread(block 66) failed
[ 1878.073180][T26445] FAT-fs (loop3): Directory bread(block 67) failed
[ 1878.103190][T26445] FAT-fs (loop3): Directory bread(block 68) failed
[ 1878.143763][T26445] FAT-fs (loop3): Directory bread(block 69) failed
[ 1878.180348][T26445] FAT-fs (loop3): Directory bread(block 70) failed
[ 1878.186921][T26445] FAT-fs (loop3): Directory bread(block 71) failed
[ 1878.220903][T26445] FAT-fs (loop3): Directory bread(block 72) failed
[ 1878.246047][T26445] FAT-fs (loop3): Directory bread(block 73) failed
[ 1878.503202][T26465] loop2: detected capacity change from 0 to 8192
[ 1878.521093][T26475] loop0: detected capacity change from 0 to 8
[ 1878.613061][T26475] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1878.674633][T26475] SQUASHFS error: Failed to read block 0x144: -5
[ 1878.703936][T26475] SQUASHFS error: Unable to read metadata cache entry [142]
[ 1878.711312][T26475] SQUASHFS error: Unable to read directory block [142:26]
[ 1879.720006][T26544] netlink: 'syz.0.20624': attribute type 3 has an invalid length.
[ 1879.811293][T26551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20626'.
[ 1880.159291][T26576] netlink: 64 bytes leftover after parsing attributes in process `syz.0.20634'.
[ 1880.200851][ T8012] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1880.384363][T26592] loop4: detected capacity change from 0 to 256
[ 1880.394250][ T8012] usb 3-1: Using ep0 maxpacket: 16
[ 1880.412352][ T8012] usb 3-1: config 0 has an invalid interface number: 223 but max is 0
[ 1880.432653][ T8012] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1880.458922][ T8012] usb 3-1: config 0 has no interface number 0
[ 1880.474269][ T8012] usb 3-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7
[ 1880.491532][ T8012] usb 3-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1880.505513][ T8012] usb 3-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1880.548000][ T8012] usb 3-1: config 0 interface 223 has no altsetting 0
[ 1880.567780][ T8012] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1880.578109][ T8012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1880.591533][ T8012] usb 3-1: Product: syz
[ 1880.595757][ T8012] usb 3-1: Manufacturer: syz
[ 1880.622419][ T8012] usb 3-1: SerialNumber: syz
[ 1880.650763][ T8012] usb 3-1: config 0 descriptor??
[ 1880.861035][T26589] loop3: detected capacity change from 0 to 32768
[ 1880.872578][T26589] JBD2: Ignoring recovery information on journal
[ 1880.970756][T26589] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1881.071996][T23647] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1881.110629][ T6481] ocfs2: Unmounting device (7,3) on (node local)
[ 1881.136384][ T8012] usb 3-1: USB disconnect, device number 117
[ 1881.293989][T23647] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[ 1881.303571][T23647] usb 5-1: config 0 has no interface number 0
[ 1881.309708][T23647] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1881.346924][T23647] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1881.371409][T23647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1881.398182][T23647] usb 5-1: Product: syz
[ 1881.402413][T23647] usb 5-1: Manufacturer: syz
[ 1881.407023][T23647] usb 5-1: SerialNumber: syz
[ 1881.420845][T23647] usb 5-1: config 0 descriptor??
[ 1881.438279][T23647] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[ 1881.712265][    C1] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[ 1881.927951][T23647] usb 5-1: USB disconnect, device number 54
[ 1881.950351][T23647] yurex 5-1:0.50: USB YUREX #0 now disconnected
[ 1882.043725][T26654] loop0: detected capacity change from 0 to 32768
[ 1882.092702][T26654] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.20650 (26654)
[ 1882.126233][T26654] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1882.167152][T26654] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 1882.177593][T26654] BTRFS info (device loop0): setting nodatasum
[ 1882.209019][T26654] BTRFS info (device loop0): force zlib compression, level 3
[ 1882.227566][T26654] BTRFS info (device loop0): metadata ratio 1
[ 1882.242654][T26654] BTRFS info (device loop0): enabling ssd optimizations
[ 1882.254184][T26654] BTRFS info (device loop0): allowing degraded mounts
[ 1882.271887][T26654] BTRFS info (device loop0): using free space tree
[ 1882.386377][T26712] delete_channel: no stack
[ 1882.886192][ T6485] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1882.916128][T23647] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1882.980644][T26737] netlink: 'syz.2.20669': attribute type 39 has an invalid length.
[ 1883.119197][T23647] usb 5-1: Using ep0 maxpacket: 32
[ 1883.138917][T23647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1883.188214][T23647] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[ 1883.207203][T23647] usb 5-1: New USB device strings: Mfr=1, Product=229, SerialNumber=2
[ 1883.226179][T23647] usb 5-1: Product: syz
[ 1883.268814][T23647] usb 5-1: Manufacturer: syz
[ 1883.274492][T23647] usb 5-1: SerialNumber: syz
[ 1883.292619][T23647] usb 5-1: config 0 descriptor??
[ 1883.334092][T23647] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input103
[ 1883.374894][T23647] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[ 1883.394010][T26722] loop3: detected capacity change from 0 to 32768
[ 1883.460712][T23647] usbtouchscreen: probe of 5-1:0.0 failed with error -8
[ 1883.497821][T26722] 
[ 1883.497821][T26722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1883.497821][T26722] 
[ 1883.649242][T26722] 
[ 1883.649242][T26722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1883.649242][T26722] 
[ 1883.681817][ T6377] usb 5-1: USB disconnect, device number 55
[ 1883.712970][T26722] 
[ 1883.712970][T26722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1883.712970][T26722] 
[ 1883.763360][T26722] 
[ 1883.763360][T26722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1883.763360][T26722] 
[ 1883.802453][T26722] 
[ 1883.802453][T26722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1883.802453][T26722] 
[ 1883.845828][T26722] 
[ 1883.845828][T26722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1883.845828][T26722] 
[ 1883.889034][T26722] 
[ 1883.889034][T26722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1883.889034][T26722] 
[ 1883.918154][  T112] 
[ 1883.918154][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1883.918154][  T112] 
[ 1884.005081][ T6481] 
[ 1884.005081][ T6481]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1884.005081][ T6481] 
[ 1884.041782][T26740] loop0: detected capacity change from 0 to 32768
[ 1884.046692][ T6481] 
[ 1884.046692][ T6481]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1884.046692][ T6481] 
[ 1884.078654][T26740] (syz.0.20668,26740,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1884.142547][T26740] (syz.0.20668,26740,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1884.204789][T26740] JBD2: Ignoring recovery information on journal
[ 1884.321580][T26740] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1884.403046][ T8012] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1884.615047][ T8012] usb 3-1: Using ep0 maxpacket: 16
[ 1884.639922][ T6485] ocfs2: Unmounting device (7,0) on (node local)
[ 1884.640348][ T8012] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00
[ 1884.667095][ T8012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1884.679602][ T8012] usb 3-1: Product: syz
[ 1884.684121][ T8012] usb 3-1: Manufacturer: syz
[ 1884.688811][ T8012] usb 3-1: SerialNumber: syz
[ 1884.698036][ T8012] usb 3-1: config 0 descriptor??
[ 1884.710773][ T8012] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[ 1884.760581][ T8012] usb 3-1: Detected FT4233HP
[ 1884.771203][T26814] netlink: 'syz.3.20683': attribute type 2 has an invalid length.
[ 1885.163593][ T8012] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1885.186850][ T8012] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1885.220573][ T8012] usb 3-1: USB disconnect, device number 118
[ 1885.259387][ T8012] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1885.296832][ T8012] ftdi_sio 3-1:0.0: device disconnected
[ 1885.521155][T26867] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1886.337587][ T8012] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1886.379816][ T6377] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1886.572308][ T8012] usb 5-1: Using ep0 maxpacket: 8
[ 1886.590016][ T8012] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1886.605488][ T6377] usb 4-1: Using ep0 maxpacket: 8
[ 1886.613651][ T8012] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1886.633766][ T8012] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1886.634060][ T6377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1886.643744][ T8012] usb 5-1: Product: syz
[ 1886.669468][ T8012] usb 5-1: Manufacturer: syz
[ 1886.672024][ T6377] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1886.674082][ T8012] usb 5-1: SerialNumber: syz
[ 1886.703554][ T6377] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[ 1886.720214][ T6377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1886.750369][ T6377] usb 4-1: Product: syz
[ 1886.761119][ T6377] usb 4-1: Manufacturer: syz
[ 1886.779165][ T6377] usb 4-1: SerialNumber: syz
[ 1886.798478][ T6377] usb 4-1: config 0 descriptor??
[ 1886.943417][ T8012] usb 5-1: Invalid connection information received from device
[ 1887.152037][T26939] loop2: detected capacity change from 0 to 32768
[ 1887.218675][T26939] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1887.223436][ T6377] usb 5-1: USB disconnect, device number 56
[ 1887.312321][    T9] usb 4-1: USB disconnect, device number 105
[ 1887.371096][T26939] XFS (loop2): Ending clean mount
[ 1887.392481][T26939] XFS (loop2): Quotacheck needed: Please wait.
[ 1887.502515][T26939] XFS (loop2): Quotacheck: Done.
[ 1887.602173][ T6477] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1888.024047][T27020] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1888.142798][T27029] loop4: detected capacity change from 0 to 64
[ 1888.160149][T27029] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[ 1888.580443][T27054] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1888.710840][T27011] loop2: detected capacity change from 0 to 32768
[ 1888.771008][T27011] 
[ 1888.771008][T27011]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1888.771008][T27011] 
[ 1888.793737][T27064] netlink: 'syz.4.20744': attribute type 39 has an invalid length.
[ 1888.945775][ T6477] 
[ 1888.945775][ T6477]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1888.945775][ T6477] 
[ 1888.976861][ T6477] 
[ 1888.976861][ T6477]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1888.976861][ T6477] 
[ 1889.059858][T27075] usb usb9: usbfs: process 27075 (syz.0.20748) did not claim interface 0 before use
[ 1889.263977][T27087] netlink: zone id is out of range
[ 1889.263992][T27087] netlink: zone id is out of range
[ 1889.264000][T27087] netlink: zone id is out of range
[ 1889.264008][T27087] netlink: zone id is out of range
[ 1889.264017][T27087] netlink: zone id is out of range
[ 1889.264024][T27087] netlink: zone id is out of range
[ 1889.264032][T27087] netlink: zone id is out of range
[ 1889.264040][T27087] netlink: zone id is out of range
[ 1889.264048][T27087] netlink: zone id is out of range
[ 1889.462259][T27097] loop2: detected capacity change from 0 to 1024
[ 1889.479262][T27097] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1889.487451][T27097] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[ 1889.487561][T27097] System zones: 0-1, 3-36
[ 1889.488023][T27101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20754'.
[ 1889.497828][T27097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1889.702878][T27118] loop0: detected capacity change from 0 to 64
[ 1889.721622][ T6477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1889.918763][T23647] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1890.144595][T23647] usb 5-1: Using ep0 maxpacket: 16
[ 1890.177935][T23647] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[ 1890.206765][T23647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1890.216290][T23647] usb 5-1: Product: syz
[ 1890.232250][T23647] usb 5-1: Manufacturer: syz
[ 1890.236868][T23647] usb 5-1: SerialNumber: syz
[ 1890.261895][T23647] usb 5-1: config 0 descriptor??
[ 1890.374790][T27160] loop2: detected capacity change from 0 to 256
[ 1890.458331][T27160] FAT-fs (loop2): Directory bread(block 64) failed
[ 1890.475259][T27160] FAT-fs (loop2): Directory bread(block 65) failed
[ 1890.499126][T27160] FAT-fs (loop2): Directory bread(block 66) failed
[ 1890.519029][T27160] FAT-fs (loop2): Directory bread(block 67) failed
[ 1890.519406][T23647] speedtch 5-1:0.0: speedtch_bind: data interface not found!
[ 1890.525658][T27160] FAT-fs (loop2): Directory bread(block 68) failed
[ 1890.567559][T23647] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1890.573715][T27160] FAT-fs (loop2): Directory bread(block 69) failed
[ 1890.588395][T27160] FAT-fs (loop2): Directory bread(block 70) failed
[ 1890.621799][T27160] FAT-fs (loop2): Directory bread(block 71) failed
[ 1890.645597][T27160] FAT-fs (loop2): Directory bread(block 72) failed
[ 1890.670419][T27160] FAT-fs (loop2): Directory bread(block 73) failed
[ 1890.791400][    T9] usb 5-1: USB disconnect, device number 57
[ 1891.063752][T27195] tmpfs: User quota block hardlimit too large.
[ 1891.217463][T27202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20779'.
[ 1891.329284][T27210] netlink: 174 bytes leftover after parsing attributes in process `syz.3.20782'.
[ 1891.708931][T27235] loop4: detected capacity change from 0 to 1764
[ 1891.789086][T27235] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1891.805502][T27243] infiniband syz0: set active
[ 1891.825467][T27243] infiniband syz0: set active
[ 1891.848340][ T8012] lo speed is unknown, defaulting to 1000
[ 1891.867116][ T6538] lo speed is unknown, defaulting to 1000
[ 1891.887783][ T8012] lo speed is unknown, defaulting to 1000
[ 1892.023751][T27255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20794'.
[ 1892.106449][T27262] loop0: detected capacity change from 0 to 2048
[ 1892.193609][T27262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1892.207038][T27262] ext4 filesystem being mounted at /5019/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1892.244729][T27276] loop4: detected capacity change from 0 to 256
[ 1892.252053][T27276] exfat: Deprecated parameter 'namecase'
[ 1892.329156][T27262] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.20797: bg 0: block 345: padding at end of block bitmap is not set
[ 1892.340648][T27276] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[ 1892.373834][T27262] EXT4-fs (loop0): Remounting filesystem read-only
[ 1892.438292][T27276] exFAT-fs (loop4): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5)
[ 1892.536993][T27288] tmpfs: Bad value for 'mpol'
[ 1892.711794][ T6485] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1892.957705][T27306] overlayfs: conflicting options: metacopy=off,verity=on
[ 1893.468308][T27343] netlink: 'syz.3.20822': attribute type 2 has an invalid length.
[ 1893.476202][T27343] netlink: 224 bytes leftover after parsing attributes in process `syz.3.20822'.
[ 1893.556930][T27351] autofs4:pid:27351:autofs_fill_super: called with bogus options
[ 1893.675561][T27354] netlink: 'syz.4.20826': attribute type 3 has an invalid length.
[ 1894.178452][T27398] loop0: detected capacity change from 0 to 512
[ 1894.197747][T27398] EXT4-fs: Ignoring removed bh option
[ 1894.217134][T27398] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1894.234693][T27398] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[ 1894.296383][T27398] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[ 1894.317557][T27398] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006]
[ 1894.327469][T27398] System zones: 0-2, 18-18, 34-35
[ 1894.342822][T27398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1894.398505][ T8012] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 1894.420202][T27398] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.20839: bg 0: block 353: padding at end of block bitmap is not set
[ 1894.501689][ T6485] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1894.614900][ T8012] usb 3-1: config 0 has an invalid interface number: 156 but max is 0
[ 1894.636995][ T8012] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1894.650564][ T8012] usb 3-1: config 0 has no interface number 0
[ 1894.659261][ T8012] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1894.672890][ T8012] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1894.688586][   T27] audit: type=1326 audit(2000000234.079:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27426 comm="syz.0.20845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2ff9c799 code=0x7ffc0000
[ 1894.692747][ T8012] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1894.712933][   T27] audit: type=1326 audit(2000000234.079:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27426 comm="syz.0.20845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2ff9c799 code=0x7ffc0000
[ 1894.752159][ T8012] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1894.765076][ T8012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2
[ 1894.788300][ T8012] usb 3-1: SerialNumber: syz
[ 1894.811143][ T8012] usb 3-1: config 0 descriptor??
[ 1894.843015][ T8012] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1894.849968][   T27] audit: type=1326 audit(2000000234.117:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27426 comm="syz.0.20845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f3e2ff9c799 code=0x7ffc0000
[ 1894.902092][T27439] loop0: detected capacity change from 0 to 64
[ 1894.913698][   T27] audit: type=1326 audit(2000000234.117:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27426 comm="syz.0.20845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2ff9c799 code=0x7ffc0000
[ 1894.936385][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1894.971925][   T27] audit: type=1326 audit(2000000234.117:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27426 comm="syz.0.20845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2ff9c799 code=0x7ffc0000
[ 1895.045671][T27440] net_ratelimit: 679 callbacks suppressed
[ 1895.045679][T27440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1895.054139][ T8012] spca561: probe of 3-1:0.156 failed with error -22
[ 1895.087223][ T8012] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 1895.105915][ T8012] usb 3-1: MIDIStreaming interface descriptor not found
[ 1895.163873][ T8012] usb 3-1: USB disconnect, device number 119
[ 1895.404844][T27482] loop4: detected capacity change from 0 to 512
[ 1895.422767][T27482] EXT4-fs: Ignoring removed bh option
[ 1895.457574][T27482] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1895.476630][T27482] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 1895.495150][T27482] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[ 1895.521853][T27482] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006]
[ 1895.542513][T27482] System zones: 0-2, 18-18, 34-35
[ 1895.554313][T27482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1895.624219][T27494] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.20857'.
[ 1895.654034][T27482] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.20854: bg 0: block 353: padding at end of block bitmap is not set
[ 1895.718651][T31801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1895.950752][T27517] loop0: detected capacity change from 0 to 128
[ 1896.236746][ T6538] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1896.392217][T27548] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1896.463572][ T6538] usb 4-1: config 0 has an invalid interface number: 238 but max is 0
[ 1896.484738][ T6538] usb 4-1: config 0 has no interface number 0
[ 1896.490886][ T6538] usb 4-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1896.536002][ T6538] usb 4-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 1896.553731][ T6538] usb 4-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1896.584201][ T6538] usb 4-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[ 1896.608008][ T6538] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a
[ 1896.618138][ T6538] usb 4-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160
[ 1896.649772][ T6538] usb 4-1: Product: syz
[ 1896.654542][ T6538] usb 4-1: Manufacturer: syz
[ 1896.660575][ T6538] usb 4-1: SerialNumber: syz
[ 1896.683265][ T6538] usb 4-1: config 0 descriptor??
[ 1896.716068][ T6538] ni6501 4-1:0.238: driver 'ni6501' failed to auto-configure device.
[ 1896.940435][ T8012] usb 4-1: USB disconnect, device number 106
[ 1897.134589][ T6538] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 1897.194342][T27595] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.20881'.
[ 1897.337665][ T6538] usb 1-1: Using ep0 maxpacket: 32
[ 1897.346266][ T6538] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1897.370655][ T6538] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[ 1897.387688][ T6538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1897.405867][ T6538] usb 1-1: Product: syz
[ 1897.420961][ T6538] usb 1-1: Manufacturer: syz
[ 1897.429913][ T6538] usb 1-1: SerialNumber: syz
[ 1897.449983][ T6538] usb 1-1: config 0 descriptor??
[ 1897.576064][T27610] loop4: detected capacity change from 0 to 64
[ 1897.703720][ T6538] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1897.952641][   T23] usb 1-1: USB disconnect, device number 116
[ 1898.082271][T27644] loop2: detected capacity change from 0 to 128
[ 1898.094190][T27644] VFS: Found a Xenix FS (block size = 1024) on device loop2
[ 1898.188405][ T6477] sysv_free_block: flc_count > flc_size
[ 1898.208758][ T6477] sysv_free_block: flc_count > flc_size
[ 1898.232636][ T6477] sysv_free_block: flc_count > flc_size
[ 1898.245813][ T6477] sysv_free_block: flc_count > flc_size
[ 1898.255310][ T6477] sysv_free_block: flc_count > flc_size
[ 1898.255322][ T6477] sysv_free_block: flc_count > flc_size
[ 1898.255330][ T6477] sysv_free_block: flc_count > flc_size
[ 1898.255339][ T6477] sysv_free_block: flc_count > flc_size
[ 1898.255347][ T6477] sysv_free_block: flc_count > flc_size
[ 1898.255356][ T6477] sysv_free_block: flc_count > flc_size
[ 1898.256093][ T6477] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1898.573613][T27671] infiniband syz0: set active
[ 1898.616067][T27671] infiniband syz0: set active
[ 1898.640528][T27671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1898.695543][ T6538] lo speed is unknown, defaulting to 1000
[ 1898.705796][    T9] lo speed is unknown, defaulting to 1000
[ 1898.756745][T27681] sctp: [Deprecated]: syz.2.20904 (pid 27681) Use of int in maxseg socket option.
[ 1898.756745][T27681] Use struct sctp_assoc_value instead
[ 1899.013691][T27698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20910'.
[ 1899.174298][T27713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20915'.
[ 1899.218908][T27715] netlink: 'syz.3.20913': attribute type 2 has an invalid length.
[ 1899.553027][T27739] loop4: detected capacity change from 0 to 256
[ 1899.574430][T27739] exfat: Deprecated parameter 'utf8'
[ 1899.621517][T27736] batadv_slave_0: left promiscuous mode
[ 1899.651901][T27736] batadv_slave_0: left allmulticast mode
[ 1899.659694][T27739] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[ 1899.709027][T27736] ..0·: left allmulticast mode
[ 1899.751255][T27736] hsr_slave_0: left allmulticast mode
[ 1899.774705][T27736] hsr_slave_1: left allmulticast mode
[ 1899.782456][T27736] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1899.799254][T22853] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1899.806402][T22853] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1899.866403][T22853] bridge0: port 2(team0) entered blocking state
[ 1899.872832][T22853] bridge0: port 2(team0) entered forwarding state
[ 1900.224604][T27768] bridge_slave_0: left allmulticast mode
[ 1900.243031][T27768] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1900.502581][T27775] loop2: detected capacity change from 0 to 4096
[ 1900.565228][T27781] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1900.612028][T27775] ntfs3: loop2: MFT: r=b, expect seq=b instead of 1ff!
[ 1900.652006][T27775] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 1900.670186][T27775] ntfs3: loop2: Failed to load $Extend (-22).
[ 1900.678958][T27775] ntfs3: loop2: Failed to initialize $Extend.
[ 1900.846352][T27792] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.20938'.
[ 1901.027900][T27807] netlink: 'syz.3.20941': attribute type 9 has an invalid length.
[ 1901.035771][T27807] netlink: 911 bytes leftover after parsing attributes in process `syz.3.20941'.
[ 1901.091700][T27811] netlink: 'syz.2.20942': attribute type 3 has an invalid length.
[ 1901.172586][T27816] loop3: detected capacity change from 0 to 256
[ 1901.191934][T27816] exfat: Deprecated parameter 'utf8'
[ 1901.221008][T27816] exfat: Deprecated parameter 'namecase'
[ 1901.247522][T27816] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d)
[ 1901.560843][    T9] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 1901.582161][T27843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20952'.
[ 1901.763861][    T9] usb 3-1: Using ep0 maxpacket: 8
[ 1901.764940][T27855] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 1901.776655][    T9] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1901.799572][T27855] overlayfs: missing 'lowerdir'
[ 1901.809320][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1901.830948][    T9] usb 3-1: Product: syz
[ 1901.835148][    T9] usb 3-1: Manufacturer: syz
[ 1901.853480][    T9] usb 3-1: SerialNumber: syz
[ 1901.898597][    T9] usb 3-1: config 0 descriptor??
[ 1901.926061][    T9] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1901.939045][T27867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20959'.
[ 1901.972985][T27867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20959'.
[ 1902.023455][T27872] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1902.105725][T27877] usb usb8: usbfs: process 27877 (syz.0.20962) did not claim interface 0 before use
[ 1902.432719][    T9] gspca_sq930x: ucbus_write failed -71
[ 1902.523466][T27909] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[ 1902.638642][T27917] loop4: detected capacity change from 0 to 764
[ 1902.671506][T27914] gretap0: left promiscuous mode
[ 1902.704854][    T9] gspca_sq930x: Sensor ov9630 not yet treated
[ 1902.713477][    T9] sq930x: probe of 3-1:0.0 failed with error -22
[ 1902.723456][T27914] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[ 1902.732425][    T9] usb 3-1: USB disconnect, device number 120
[ 1902.789970][ T6538] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1903.003662][ T6538] usb 4-1: Using ep0 maxpacket: 16
[ 1903.010938][ T6538] usb 4-1: config index 0 descriptor too short (expected 1068, got 27)
[ 1903.023617][ T6538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1903.063226][ T6538] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9
[ 1903.078599][ T6538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1903.102483][ T6538] usb 4-1: Product: syz
[ 1903.106684][ T6538] usb 4-1: Manufacturer: syz
[ 1903.111910][ T6538] usb 4-1: SerialNumber: syz
[ 1903.120865][ T6538] usb 4-1: config 0 descriptor??
[ 1903.369895][T12783] usb 4-1: USB disconnect, device number 107
[ 1903.729668][T27983] gtp1: entered promiscuous mode
[ 1903.734955][T27983] gtp1: entered allmulticast mode
[ 1903.808414][T27988] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1904.093741][T28003] loop0: detected capacity change from 0 to 256
[ 1904.164448][T28011] netlink: 460 bytes leftover after parsing attributes in process `syz.4.20998'.
[ 1904.292889][T28003] FAT-fs (loop0): Directory bread(block 64) failed
[ 1904.340500][T28003] FAT-fs (loop0): Directory bread(block 65) failed
[ 1904.347189][T28003] FAT-fs (loop0): Directory bread(block 66) failed
[ 1904.404183][T28003] FAT-fs (loop0): Directory bread(block 67) failed
[ 1904.410862][T28003] FAT-fs (loop0): Directory bread(block 68) failed
[ 1904.429074][T28003] FAT-fs (loop0): Directory bread(block 69) failed
[ 1904.435739][T28003] FAT-fs (loop0): Directory bread(block 70) failed
[ 1904.435975][T28026] loop2: detected capacity change from 0 to 128
[ 1904.458652][T28003] FAT-fs (loop0): Directory bread(block 71) failed
[ 1904.468451][T28003] FAT-fs (loop0): Directory bread(block 72) failed
[ 1904.475388][T28003] FAT-fs (loop0): Directory bread(block 73) failed
[ 1904.495532][T28026] syz.2.21001: attempt to access beyond end of device
[ 1904.495532][T28026] loop2: rw=0, sector=25674, nr_sectors = 2 limit=128
[ 1904.552585][T28026] Buffer I/O error on dev loop2, logical block 12837, async page read
[ 1904.569555][T28026] Trying to free block not in datazone
[ 1904.611472][T27246] kernel write not supported for file /dsp (pid: 27246 comm: kworker/0:0)
[ 1905.961737][T28129] misc userio: No port type given on /dev/userio
[ 1906.337733][T28154] loop3: detected capacity change from 0 to 512
[ 1906.349325][T28154] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1906.408594][T28154] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.21042: inode has both inline data and extents flags
[ 1906.428303][T28154] EXT4-fs (loop3): Remounting filesystem read-only
[ 1906.458855][T28154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1906.547353][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1906.984757][T28200] kcapi: manufacturer command 52776558133248 unknown.
[ 1908.218609][T28287] loop3: detected capacity change from 0 to 16
[ 1908.230414][T28287] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1908.259813][T28287] overlay: filesystem on ./file0 is read-only
[ 1908.782782][T28333] batadv_slave_0: left allmulticast mode
[ 1908.793619][T28333] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[ 1908.916109][   T23] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1909.012982][T28343] loop3: detected capacity change from 0 to 4096
[ 1909.032560][T28343] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[ 1909.131794][   T23] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1909.151412][   T23] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1909.164616][   T23] usb 3-1: Product: syz
[ 1909.169067][   T23] usb 3-1: SerialNumber: syz
[ 1909.205576][   T23] usb 3-1: config 0 descriptor??
[ 1909.249282][T12783] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 1909.445095][   T23] hso 3-1:0.0: Failed to find BULK IN ep
[ 1909.450902][T12783] usb 1-1: Using ep0 maxpacket: 16
[ 1909.478633][T12783] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1909.507518][T12783] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[ 1909.522160][T12783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1909.535658][T12783] usb 1-1: Product: syz
[ 1909.539904][T12783] usb 1-1: Manufacturer: syz
[ 1909.544506][T12783] usb 1-1: SerialNumber: syz
[ 1909.559991][T12783] usb 1-1: config 0 descriptor??
[ 1909.580774][T12783] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[ 1909.587358][T12783] gspca_stv06xx: st6422 sensor detected
[ 1909.630922][T28379] loop3: detected capacity change from 0 to 256
[ 1909.677641][T28379] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[ 1909.689716][   T23] usb 3-1: USB disconnect, device number 121
[ 1909.787401][T32019] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[ 1909.902297][T28392] loop3: detected capacity change from 0 to 512
[ 1909.926178][T28392] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 1909.937574][T28392] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[ 1909.954544][T28392] System zones: 0-1, 15-15, 18-18, 34-34
[ 1909.960660][T28392] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1909.969275][T28392] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[ 1909.979358][T28392] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1909.994457][T28392] EXT4-fs (loop3): Cannot turn on quotas: error -22
[ 1910.002198][T28392] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.21107: bad orphan inode 16
[ 1910.023334][T28392] ext4_test_bit(bit=15, block=18) = 1
[ 1910.035191][T28368] loop4: detected capacity change from 0 to 40427
[ 1910.041902][T28392] is_bad_inode(inode)=0
[ 1910.047064][T28392] NEXT_ORPHAN(inode)=0
[ 1910.051321][T28392] max_ino=32
[ 1910.054528][T28392] i_nlink=2
[ 1910.059228][T28368] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[ 1910.060768][T28392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1910.087275][T28392] fscrypt (loop3, inode 16): Error -61 getting encryption context
[ 1910.102365][T28368] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1910.104746][T12783] STV06xx: probe of 1-1:0.0 failed with error -71
[ 1910.116063][T28368] F2FS-fs (loop4): build fault injection attr: rate: 2, type: 0x7ffff
[ 1910.135549][T28368] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8
[ 1910.149063][T12783] usb 1-1: USB disconnect, device number 117
[ 1910.164193][T28368] F2FS-fs (loop4): invalid crc value
[ 1910.170841][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1910.254379][T28368] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1910.364394][T28368] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1910.387281][T28368] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1910.436758][T28368] F2FS-fs (loop4): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[ 1910.955634][T28444] loop4: detected capacity change from 0 to 512
[ 1910.961325][T28445] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001
[ 1911.001012][T28444] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1911.094246][T28444] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.21112: inode has both inline data and extents flags
[ 1911.158873][T28444] EXT4-fs (loop4): Remounting filesystem read-only
[ 1911.175087][T28461] loop2: detected capacity change from 0 to 256
[ 1911.215338][T28444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1911.261743][T28451] loop0: detected capacity change from 0 to 8192
[ 1911.289826][T28451] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1911.344458][T28451] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 1911.374536][T28451] REISERFS (device loop0): using ordered data mode
[ 1911.381081][T28451] reiserfs: using flush barriers
[ 1911.466795][T28451] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1911.503409][T28451] REISERFS (device loop0): checking transaction log (loop0)
[ 1911.504203][T31801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1911.534015][T28481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21123'.
[ 1911.779183][T28451] REISERFS (device loop0): Using tea hash to sort names
[ 1911.812858][T28493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21130'.
[ 1911.837231][T28451] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 1912.166984][   T27] audit: type=1326 audit(2000000250.430:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28509 comm="syz.3.21136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1912.228550][   T27] audit: type=1326 audit(2000000250.430:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28509 comm="syz.3.21136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1912.299136][   T27] audit: type=1326 audit(2000000250.467:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28509 comm="syz.3.21136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1912.367440][   T27] audit: type=1326 audit(2000000250.467:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28509 comm="syz.3.21136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1912.436881][   T27] audit: type=1326 audit(2000000250.467:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28509 comm="syz.3.21136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1912.627020][T28499] loop2: detected capacity change from 0 to 32768
[ 1912.678309][T28499] ERROR: (device loop2): diAllocAG: numfree > numinos
[ 1912.678309][T28499] 
[ 1912.683141][T28536] loop0: detected capacity change from 0 to 256
[ 1912.690735][   T23] usb 5-1: new full-speed USB device number 58 using dummy_hcd
[ 1912.718418][T28499] ERROR: (device loop2): remounting filesystem as read-only
[ 1912.732942][T28499] ialloc: diAlloc returned -5!
[ 1912.810189][T28536] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[ 1912.842771][T28536] FAT-fs (loop0): Filesystem has been set read-only
[ 1912.867303][T28536] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198)
[ 1912.898833][T28536] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198)
[ 1912.915920][   T23] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[ 1912.927983][   T23] usb 5-1: config 0 has no interface number 0
[ 1912.978286][   T23] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1913.001929][   T23] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[ 1913.034133][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1913.046392][T28552] loop2: detected capacity change from 0 to 256
[ 1913.074201][   T23] usb 5-1: Product: syz
[ 1913.078393][   T23] usb 5-1: Manufacturer: syz
[ 1913.084054][   T23] usb 5-1: SerialNumber: syz
[ 1913.121069][   T23] usb 5-1: config 0 descriptor??
[ 1913.129901][T28515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1913.194097][   T23] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 96:85:da:28:3c:8c
[ 1913.415757][T28580] sctp: [Deprecated]: syz.0.21151 (pid 28580) Use of int in maxseg socket option.
[ 1913.415757][T28580] Use struct sctp_assoc_value instead
[ 1914.154557][   T23] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1914.394772][   T23] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1914.424784][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1914.435992][   T23] usb 4-1: Product: syz
[ 1914.440572][   T23] usb 4-1: Manufacturer: syz
[ 1914.456194][   T23] usb 4-1: SerialNumber: syz
[ 1914.464498][   T23] usb 4-1: config 0 descriptor??
[ 1914.477602][T27246] usb 5-1: USB disconnect, device number 58
[ 1914.490086][   T23] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1914.501444][T27246] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[ 1914.724648][T28651] loop0: detected capacity change from 0 to 764
[ 1914.800085][T28651] 9pnet_fd: p9_fd_create_unix (28651): problem connecting socket: ./file0: -30
[ 1914.907286][   T23] gspca_sunplus: reg_w_riv err -71
[ 1914.916092][   T23] sunplus: probe of 4-1:0.0 failed with error -71
[ 1914.942065][   T23] usb 4-1: USB disconnect, device number 108
[ 1915.156535][T28693] netlink: 'syz.2.21167': attribute type 3 has an invalid length.
[ 1915.686157][T28719] bond9: entered allmulticast mode
[ 1915.691652][T28719] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1915.783660][T28756] kAFS: unable to lookup cell '/,'
[ 1916.109785][T28696] loop4: detected capacity change from 0 to 32768
[ 1916.278125][T28696] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1916.345993][T28787] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1916.372282][T28796] IPv6: sit4: Disabled Multicast RS
[ 1916.389470][T28796] sit4: entered allmulticast mode
[ 1916.455038][T28696] XFS (loop4): Ending clean mount
[ 1916.647716][T31801] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1916.726242][T28763] loop2: detected capacity change from 0 to 32768
[ 1916.773696][T28763] ea_get: invalid extended attribute
[ 1917.218246][T28828] loop0: detected capacity change from 0 to 256
[ 1917.366246][T28819] loop2: detected capacity change from 0 to 4096
[ 1917.493695][T28819] ntfs: volume version 3.1.
[ 1917.670668][T28819] ntfs: (device loop2): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80.  Aborting truncate.
[ 1917.882022][T28862] ieee802154 phy0 wpan0: encryption failed: -90
[ 1918.310209][T28888] netlink: 'syz.2.21202': attribute type 10 has an invalid length.
[ 1918.348762][T28888] wlan1: mtu less than device minimum
[ 1918.354191][T28888] .`: (slave wlan1): Error -22 calling dev_set_mtu
[ 1918.524156][T28899] loop3: detected capacity change from 0 to 512
[ 1918.552986][T28899] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1918.618244][T28899] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1918.632003][T28903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21206'.
[ 1918.644163][T28899] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1918.674897][T28903] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21206'.
[ 1918.691152][T28899] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 1918.710525][T28899] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1918.744153][T28899] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4
[ 1918.847313][T28899] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota
[ 1918.857566][T28899] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.21205: Failed to acquire dquot type 1
[ 1918.912018][T28899] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.21205: Invalid block bitmap block 0 in block_group 0
[ 1918.978302][T28899] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.21205: Invalid block bitmap block 0 in block_group 0
[ 1919.004886][T28878] loop0: detected capacity change from 0 to 32768
[ 1919.016655][T28899] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.21205: Invalid block bitmap block 0 in block_group 0
[ 1919.056934][T28878] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.21199 (28878)
[ 1919.057883][T28899] Quota error (device loop3): write_blk: dquota write failed
[ 1919.099106][T28878] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1919.107414][T28899] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[ 1919.137873][T28878] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[ 1919.163367][T28878] BTRFS info (device loop0): turning off barriers
[ 1919.183094][T28878] BTRFS info (device loop0): enabling ssd optimizations
[ 1919.195694][T28899] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.21205: Failed to acquire dquot type 1
[ 1919.223209][T28878] BTRFS info (device loop0): using spread ssd allocation scheme
[ 1919.230897][T28878] BTRFS info (device loop0): enabling auto defrag
[ 1919.252851][T28899] Quota error (device loop3): write_blk: dquota write failed
[ 1919.260419][T28878] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1919.283719][T28899] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[ 1919.294646][T28899] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.21205: Failed to acquire dquot type 1
[ 1919.310850][T28899] EXT4-fs (loop3): 1 orphan inode deleted
[ 1919.316994][T28878] BTRFS info (device loop0): trying to use backup root at mount time
[ 1919.327327][T28899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1919.358893][T28878] BTRFS info (device loop0): ignoring data csums
[ 1919.362513][T28940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21212'.
[ 1919.385487][T28878] BTRFS info (device loop0): force zlib compression, level 3
[ 1919.430693][T28878] BTRFS info (device loop0): using free space tree
[ 1919.459081][T28899] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.21205: deleted inode referenced: 12
[ 1919.594470][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1919.855776][T28878] BTRFS error (device loop0: state MC): ignoredatacsums must be used with ro mount option
[ 1920.024359][ T6485] BTRFS info (device loop0: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1920.189955][ T6920] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (6920)
[ 1920.690117][T28962] loop2: detected capacity change from 0 to 32768
[ 1920.872051][T28962] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1921.045298][T29030] loop4: detected capacity change from 0 to 1024
[ 1921.095974][T29030] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5
[ 1921.109556][T28962] XFS (loop2): Ending clean mount
[ 1921.141035][T29030] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[ 1921.152687][T28962] XFS (loop2): Quotacheck needed: Please wait.
[ 1921.199580][T29030] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.21232: Failed to acquire dquot type 0
[ 1921.276572][T28962] XFS (loop2): Quotacheck: Done.
[ 1921.279890][T29030] EXT4-fs error (device loop4): mb_free_blocks:1952: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[ 1921.372332][T29030] EXT4-fs (loop4): 1 truncate cleaned up
[ 1921.379197][T29030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1921.458764][T29030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1921.502699][ T6477] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1921.779198][T29001] loop0: detected capacity change from 0 to 40427
[ 1921.807192][T29001] F2FS-fs (loop0): Invalid log blocks per segment (4278190089)
[ 1921.859778][T29001] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1921.948797][T29001] F2FS-fs (loop0): invalid crc value
[ 1921.984937][T29054] loop3: detected capacity change from 0 to 8192
[ 1922.000207][T29001] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1922.040044][T29054] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1922.087784][T29054] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[ 1922.098198][T29054] REISERFS (device loop3): using ordered data mode
[ 1922.104728][T29054] reiserfs: using flush barriers
[ 1922.113331][T29054] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1922.144937][T29001] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1922.153788][T29054] REISERFS (device loop3): checking transaction log (loop3)
[ 1922.188621][T29001] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1922.258916][T29001] F2FS-fs (loop0): Corrupted max_depth of 3: 255
[ 1922.319780][T29001] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 1922.405123][T29054] REISERFS (device loop3): Using tea hash to sort names
[ 1922.423459][T29054] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[ 1923.153066][T29118] autofs4:pid:29118:autofs_fill_super: called with bogus options
[ 1924.134490][T29159] loop0: detected capacity change from 0 to 64
[ 1924.329465][T29174] x_tables: unsorted underflow at hook 2
[ 1924.513289][T12783] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 1924.703027][T29198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21277'.
[ 1924.714181][T12783] usb 3-1: Using ep0 maxpacket: 16
[ 1924.730878][T12783] usb 3-1: config index 0 descriptor too short (expected 65, got 36)
[ 1924.739939][T12783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1924.751651][T29198] netlink: 7 bytes leftover after parsing attributes in process `syz.3.21277'.
[ 1924.761791][T12783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1924.772577][T12783] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1924.816685][T12783] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[ 1924.831485][T12783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1924.848332][T12783] usb 3-1: config 0 descriptor??
[ 1924.870070][T12783] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input105
[ 1924.910603][ T5125] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1924.955268][ T5125] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1924.964374][ T5125] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1924.979275][ T5125] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1925.012203][T22717] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1925.031374][ T5125] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1925.071109][ T5125] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1925.182602][T29164] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1925.182874][T29223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21283'.
[ 1925.224274][T27246] usb 3-1: USB disconnect, device number 122
[ 1925.250715][T29233] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.21285'.
[ 1925.298554][T29237] loop0: detected capacity change from 0 to 256
[ 1925.334839][T29237] FAT-fs (loop0): Directory bread(block 64) failed
[ 1925.345001][T29237] FAT-fs (loop0): Directory bread(block 65) failed
[ 1925.372682][T29237] FAT-fs (loop0): Directory bread(block 66) failed
[ 1925.389225][T29237] FAT-fs (loop0): Directory bread(block 67) failed
[ 1925.397035][T29237] FAT-fs (loop0): Directory bread(block 68) failed
[ 1925.410222][T29237] FAT-fs (loop0): Directory bread(block 69) failed
[ 1925.432788][T29237] FAT-fs (loop0): Directory bread(block 70) failed
[ 1925.454027][T29237] FAT-fs (loop0): Directory bread(block 71) failed
[ 1925.460714][T29237] FAT-fs (loop0): Directory bread(block 72) failed
[ 1925.481644][T29237] FAT-fs (loop0): Directory bread(block 73) failed
[ 1926.535602][T29320] loop4: detected capacity change from 0 to 512
[ 1926.610705][T29320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1926.626488][T29320] ext4 filesystem being mounted at /2385/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1926.684669][T29320] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.21311: corrupted xattr block 33: invalid checksum
[ 1926.775186][T31801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1927.032874][T29353] delete_channel: no stack
[ 1927.095595][T29358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21320'.
[ 1927.238377][T29366] loop2: detected capacity change from 0 to 736
[ 1927.538719][T23647] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1927.576780][T29393] netlink: 'syz.2.21330': attribute type 12 has an invalid length.
[ 1927.609764][T29393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21330'.
[ 1927.715855][T29400] loop3: detected capacity change from 0 to 1764
[ 1927.733853][T29400] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1927.772936][T23647] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[ 1927.790206][T23647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1927.820935][T23647] usb 5-1: Product: syz
[ 1927.833045][T23647] usb 5-1: Manufacturer: syz
[ 1927.837694][T23647] usb 5-1: SerialNumber: syz
[ 1927.850389][T23647] usb 5-1: config 0 descriptor??
[ 1928.080980][T23647] mos7840 5-1:0.0: required endpoints missing
[ 1928.299206][T23647] usb 5-1: USB disconnect, device number 59
[ 1928.356211][T29451] loop3: detected capacity change from 0 to 512
[ 1928.430698][T29451] syz.3.21345: attempt to access beyond end of device
[ 1928.430698][T29451] loop3: rw=0, sector=17179852721, nr_sectors = 1 limit=512
[ 1928.457508][T29451] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00)
[ 1928.471842][T29451] FAT-fs (loop3): Filesystem has been set read-only
[ 1928.490223][T29451] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00)
[ 1928.592202][T29464] loop0: detected capacity change from 0 to 64
[ 1928.633302][T29464] hfs: unable to locate alternate MDB
[ 1928.657817][T29464] hfs: continuing without an alternate MDB
[ 1929.197867][T29495] loop0: detected capacity change from 0 to 4096
[ 1929.221170][T29495] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[ 1929.426907][T29495] ntfs3: loop0: failed to convert "c46c" to ascii
[ 1929.720986][T29539] ±ÿ: renamed from lo (while UP)
[ 1929.834918][T29550] tc_dump_action: action bad kind
[ 1930.018931][T27246] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1930.215920][T27246] usb 5-1: Using ep0 maxpacket: 16
[ 1930.253319][T27246] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1930.275011][T27246] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[ 1930.299262][T27246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1930.303224][   T27] audit: type=1326 audit(2000000267.389:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29577 comm="syz.2.21383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1930.354840][T27246] usb 5-1: config 0 descriptor??
[ 1930.373221][T27246] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1930.391518][   T27] audit: type=1326 audit(2000000267.389:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29577 comm="syz.2.21383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1930.494573][   T27] audit: type=1326 audit(2000000267.417:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29577 comm="syz.2.21383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1930.523164][   T27] audit: type=1326 audit(2000000267.417:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29577 comm="syz.2.21383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1930.545846][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1930.559262][   T27] audit: type=1326 audit(2000000267.417:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29577 comm="syz.2.21383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63a39c799 code=0x7ffc0000
[ 1930.581678][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1930.599642][T27246] usb 5-1: USB disconnect, device number 60
[ 1930.717300][T29607] loop0: detected capacity change from 0 to 256
[ 1930.733042][T29607] exfat: Deprecated parameter 'utf8'
[ 1930.750067][T29607] exfat: Deprecated parameter 'namecase'
[ 1930.755844][T29607] exfat: Deprecated parameter 'namecase'
[ 1930.775692][T29607] exfat: Deprecated parameter 'utf8'
[ 1930.856824][T29607] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[ 1930.901328][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1930.910258][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1931.229639][T29644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21400'.
[ 1931.323464][ T6538] usb 3-1: new full-speed USB device number 123 using dummy_hcd
[ 1931.357163][T29652] netlink: 'syz.4.21402': attribute type 7 has an invalid length.
[ 1931.365019][T29652] netlink: 'syz.4.21402': attribute type 8 has an invalid length.
[ 1931.557083][ T6538] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1931.581043][ T6538] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping
[ 1931.619043][ T6538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[ 1931.643608][ T6538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64
[ 1931.677352][ T6538] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1931.712851][ T6538] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1931.736631][ T6538] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1931.747388][ T6538] usb 3-1: Manufacturer: syz
[ 1931.772222][ T6538] usb 3-1: config 0 descriptor??
[ 1931.777323][T29669] loop3: detected capacity change from 0 to 512
[ 1931.790721][T29669] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1931.847220][T29669] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1931.853614][T29669] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[ 1931.876813][T29669] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.21408: attempt to clear invalid blocks 2 len 1
[ 1931.892489][T29669] EXT4-fs (loop3): Remounting filesystem read-only
[ 1931.899500][T29669] EXT4-fs (loop3): 1 truncate cleaned up
[ 1931.906966][T29669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1932.062261][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1932.080152][T23647] usb 3-1: USB disconnect, device number 123
[ 1932.380018][T29708] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[ 1932.693193][T23647] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1932.699353][T29736] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[ 1932.888805][T23647] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1932.888835][T23647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1932.888854][T23647] usb 4-1: Product: syz
[ 1932.888868][T23647] usb 4-1: Manufacturer: syz
[ 1932.888881][T23647] usb 4-1: SerialNumber: syz
[ 1932.895265][T23647] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1932.932020][T23647] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1933.160921][T29761] loop0: detected capacity change from 0 to 1024
[ 1933.175203][T29759] netlink: 180 bytes leftover after parsing attributes in process `syz.4.21430'.
[ 1933.175357][T29759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21430'.
[ 1933.289325][T32033] hfsplus: b-tree write err: -5, ino 25
[ 1933.289577][T32033] hfsplus: b-tree write err: -5, ino 4
[ 1933.289715][T32033] hfsplus: b-tree write err: -5, ino 2
[ 1933.289922][T32033] hfsplus: b-tree write err: -5, ino 26
[ 1933.488467][T12783] usb 4-1: USB disconnect, device number 109
[ 1933.777489][T29797] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21438'.
[ 1933.814048][   T23] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1934.026930][T29814] loop0: detected capacity change from 0 to 1024
[ 1934.034949][   T23] usb 5-1: Using ep0 maxpacket: 32
[ 1934.063661][T23647] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1934.075084][   T23] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1934.093245][T23647] ath9k_htc: Failed to initialize the device
[ 1934.106034][   T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1934.115689][T12783] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1934.148047][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1934.163725][   T23] usb 5-1: Product: syz
[ 1934.172338][   T23] usb 5-1: Manufacturer: syz
[ 1934.191378][   T23] usb 5-1: SerialNumber: syz
[ 1934.227109][T29845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.21445'.
[ 1934.274870][T29845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.21445'.
[ 1934.283977][T29845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21445'.
[ 1934.329256][   T49] hfsplus: b-tree write err: -5, ino 25
[ 1934.350461][   T49] hfsplus: b-tree write err: -5, ino 4
[ 1934.366734][   T49] hfsplus: b-tree write err: -5, ino 2
[ 1934.453850][   T23] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1934.470283][   T23] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1934.493548][   T23] usb 5-1: 3:0: failed to get current value for ch 0 (-22)
[ 1934.555808][   T23] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3)
[ 1934.603135][   T23] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3)
[ 1934.625837][   T23] usb 5-1: 3:0: cannot get min/max values for control 4 (id 3)
[ 1934.669741][   T23] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3)
[ 1934.710599][   T23] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3)
[ 1934.774369][   T23] usb 5-1: USB disconnect, device number 61
[ 1934.899272][ T6920] udevd[6920]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1935.562702][T29945] loop4: detected capacity change from 0 to 16
[ 1935.579991][T29945] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1935.584265][T29947] netlink: 'syz.0.21469': attribute type 24 has an invalid length.
[ 1935.611287][T29947] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21469'.
[ 1935.655509][ T6482] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[ 1935.671519][T29945] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[ 1935.703536][   T27] audit: type=1800 audit(2000000272.440:495): pid=29945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.21470" name="file2" dev="loop4" ino=89 res=0 errno=0
[ 1936.198420][T29981] netlink: 72 bytes leftover after parsing attributes in process `syz.0.21479'.
[ 1936.408881][T29957] loop2: detected capacity change from 0 to 32768
[ 1936.495614][T29957] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[ 1936.495614][T29957] 
[ 1936.554948][T29957] ialloc: diAlloc returned -5!
[ 1936.666676][T30004] loop3: detected capacity change from 0 to 16
[ 1936.807548][T22717] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1937.286483][T30044] binder: 30039:30044 ioctl c00c6211 ffffffffffffffff returned -14
[ 1937.622844][T30052] loop4: detected capacity change from 0 to 4096
[ 1937.664103][T30057] loop3: detected capacity change from 0 to 4096
[ 1937.688526][T30052] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[ 1937.711771][T30057] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 1937.731618][T30052] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1937.804349][T30052] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 1937.855606][T30052] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1937.903399][T30052] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1937.960630][T30052] ntfs: volume version 3.1.
[ 1937.993861][T30052] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[ 1938.010314][T30052] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[ 1938.061347][T30052] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[ 1938.086028][T30052] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[ 1938.250980][T30082] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[ 1938.349954][T30088] loop0: detected capacity change from 0 to 128
[ 1938.407601][T30088] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1938.421135][T30088] ext4 filesystem being mounted at /5192/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1938.604863][ T6485] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1938.722137][T30113] netlink: 148 bytes leftover after parsing attributes in process `syz.3.21515'.
[ 1938.927741][T30130] loop4: detected capacity change from 0 to 256
[ 1939.782109][T30191] netlink: 'syz.2.21542': attribute type 1 has an invalid length.
[ 1939.808424][T30191] netlink: 480 bytes leftover after parsing attributes in process `syz.2.21542'.
[ 1939.849041][T30195] loop0: detected capacity change from 0 to 8
[ 1939.883161][T30195] SQUASHFS error: Unknown inode type 257 in squashfs_iget!
[ 1939.954439][ T6920] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1940.053884][T30199] loop4: detected capacity change from 0 to 4096
[ 1940.125000][T30199] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[ 1940.316334][T30199] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[ 1940.618698][T30234] loop4: detected capacity change from 0 to 512
[ 1940.634920][ T8012] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1940.692482][T30234] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1940.706335][T30234] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1940.721988][T30234] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1940.774740][T30202] loop3: detected capacity change from 0 to 32768
[ 1940.839123][T30202] (syz.3.21545,30202,0):ocfs2_find_slot:468 ERROR: no free slots available!
[ 1940.848868][ T8012] usb 3-1: Using ep0 maxpacket: 16
[ 1940.859854][ T8012] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1940.865874][T30202] (syz.3.21545,30202,1):ocfs2_mount_volume:1807 ERROR: status = -22
[ 1940.875492][ T8012] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[ 1940.887738][ T8012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1940.899821][T30202] (syz.3.21545,30202,0):ocfs2_fill_super:1178 ERROR: status = -22
[ 1940.913802][ T8012] usb 3-1: config 0 descriptor??
[ 1940.929163][ T8012] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1940.995191][T30234] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[ 1941.006658][T30202] NILFS (loop3): couldn't find nilfs on the device
[ 1941.028818][T30234] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.21553: Directory hole found for htree leaf block 0
[ 1941.071493][T30234] EXT4-fs (loop4): Remounting filesystem read-only
[ 1941.194858][T12783] usb 3-1: USB disconnect, device number 124
[ 1941.244175][T31801] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[ 1941.423805][T30278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1941.453641][T30278] ext4 filesystem being mounted at /2433/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1941.552929][T31801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1941.654542][T30288] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1941.693221][T30288] SQUASHFS error: Failed to read block 0x4de: -5
[ 1941.699752][T30288] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1941.719589][T30288] SQUASHFS error: Failed to read block 0x4df: -5
[ 1941.732029][T30288] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1941.741753][T30288] SQUASHFS error: Failed to read block 0x4e0: -5
[ 1941.753175][T30288] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1941.762277][T30288] SQUASHFS error: Failed to read block 0x4de: -5
[ 1941.779315][   T27] kauditd_printk_skb: 7 callbacks suppressed
[ 1941.779328][   T27] audit: type=1800 audit(2000000278.127:496): pid=30288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.21561" name="file1" dev="loop0" ino=5 res=0 errno=0
[ 1942.416914][T30338] set_capacity_and_notify: 2 callbacks suppressed
[ 1942.416929][T30338] loop2: detected capacity change from 0 to 64
[ 1942.447779][T30340] netlink: 'syz.3.21578': attribute type 3 has an invalid length.
[ 1942.481877][T30340] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.21578'.
[ 1943.136474][T27246] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1943.348780][T27246] usb 3-1: config 0 has an invalid interface number: 13 but max is 0
[ 1943.358737][T27246] usb 3-1: config 0 has no interface number 0
[ 1943.382593][T27246] usb 3-1: config 0 interface 13 has no altsetting 0
[ 1943.393879][T27246] usb 3-1: Dual-Role OTG device on HNP port
[ 1943.403075][T27246] usb 3-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice=1e.7a
[ 1943.423048][T27246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1943.442932][T27246] usb 3-1: Product: syz
[ 1943.447257][T27246] usb 3-1: Manufacturer: syz
[ 1943.451875][T27246] usb 3-1: SerialNumber: syz
[ 1943.459426][T27246] usb 3-1: config 0 descriptor??
[ 1943.620794][T30401] netlink: 152 bytes leftover after parsing attributes in process `syz.3.21597'.
[ 1943.634454][T30401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21597'.
[ 1943.722094][T27246] snd-usb-caiaq 3-1:0.13: can't set alt interface.
[ 1943.739080][T27246] usb 3-1: unable to init card! (ret=-5)
[ 1943.763296][T27246] snd-usb-caiaq: probe of 3-1:0.13 failed with error -5
[ 1943.783964][T27246] usb 3-1: USB disconnect, device number 125
[ 1943.954728][T30424] overlay: Bad value for 'metacopy'
[ 1944.707811][ T8012] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1944.926270][ T8012] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1944.940057][ T8012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1944.953424][ T8012] usb 5-1: Product: syz
[ 1944.961037][ T8012] usb 5-1: Manufacturer: syz
[ 1944.967190][ T8012] usb 5-1: SerialNumber: syz
[ 1945.001721][ T8012] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1945.024359][ T6538] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1945.149518][T30505] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[ 1945.211962][T27246] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1945.420912][T27246] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[ 1945.435903][T27246] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1945.450881][T27246] usb 3-1: config 0 has no interface number 0
[ 1945.477593][T27246] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[ 1945.504560][T27246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1945.564740][ T8012] usb 5-1: USB disconnect, device number 62
[ 1945.584273][T27246] usb 3-1: Product: syz
[ 1945.588961][T27246] usb 3-1: Manufacturer: syz
[ 1945.593569][T27246] usb 3-1: SerialNumber: syz
[ 1945.614256][T27246] usb 3-1: config 0 descriptor??
[ 1945.861729][T27246] usb 3-1: Found UVC 0.00 device syz (046d:0823)
[ 1945.871327][T27246] usb 3-1: No valid video chain found.
[ 1946.047626][T30557] libceph: resolve '400' (ret=-3): failed
[ 1946.124895][T27246] usb 3-1: USB disconnect, device number 126
[ 1946.216770][ T6538] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1946.247624][ T6538] ath9k_htc: Failed to initialize the device
[ 1946.265179][ T8012] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1946.599280][T30600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21648'.
[ 1947.192089][T30633] netlink: 'syz.2.21659': attribute type 10 has an invalid length.
[ 1947.204955][T30633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21659'.
[ 1947.221186][T30607] loop4: detected capacity change from 0 to 32768
[ 1947.338171][T30607] JBD2: Ignoring recovery information on journal
[ 1947.453957][   T27] audit: type=1326 audit(2000000283.431:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30648 comm="syz.0.21664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2ff9c799 code=0x7ffc0000
[ 1947.495327][T30607] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1947.523311][   T27] audit: type=1326 audit(2000000283.459:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30648 comm="syz.0.21664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2ff9c799 code=0x7ffc0000
[ 1947.614608][T30607] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74)
[ 1947.626293][   T27] audit: type=1326 audit(2000000283.459:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30648 comm="syz.0.21664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f3e2ff9c799 code=0x7ffc0000
[ 1947.673413][T30607] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1947.690201][   T27] audit: type=1326 audit(2000000283.459:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30648 comm="syz.0.21664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2ff9c799 code=0x7ffc0000
[ 1947.713587][T30607] OCFS2: File system is now read-only.
[ 1947.719128][T30607] (syz.4.21652,30607,1):ocfs2_search_chain:1761 ERROR: status = -30
[ 1947.794476][   T27] audit: type=1326 audit(2000000283.459:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30648 comm="syz.0.21664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2ff9c799 code=0x7ffc0000
[ 1947.817425][T30607] (syz.4.21652,30607,1):ocfs2_search_chain:1871 ERROR: status = -30
[ 1947.856374][T30607] (syz.4.21652,30607,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[ 1947.894091][T30607] (syz.4.21652,30607,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[ 1947.912415][T30607] (syz.4.21652,30607,1):ocfs2_claim_new_inode:2226 ERROR: status = -30
[ 1947.948887][T30607] (syz.4.21652,30607,1):ocfs2_claim_new_inode:2241 ERROR: status = -30
[ 1947.957203][T30607] (syz.4.21652,30607,1):ocfs2_mknod_locked:639 ERROR: status = -30
[ 1947.989784][T30607] (syz.4.21652,30607,1):ocfs2_mknod:385 ERROR: status = -30
[ 1948.008841][T30607] (syz.4.21652,30607,1):ocfs2_mknod:502 ERROR: status = -30
[ 1948.030750][T30607] (syz.4.21652,30607,1):ocfs2_create:676 ERROR: status = -30
[ 1948.125494][T30682] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.21673'.
[ 1948.149112][T31801] ocfs2: Unmounting device (7,4) on (node local)
[ 1949.183656][T30739] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615)
[ 1949.326337][T30746] veth1_virt_wifi: entered promiscuous mode
[ 1949.395243][T30753] netlink: 'syz.2.21695': attribute type 64 has an invalid length.
[ 1949.433033][T30753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21695'.
[ 1949.472320][T30753] netlink: 'syz.2.21695': attribute type 64 has an invalid length.
[ 1949.488544][T30753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21695'.
[ 1949.850625][T30781] binder: 30780:30781 ioctl c00c620f 0 returned -14
[ 1949.956927][ T6538] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 1950.136398][T30796] tmpfs: Bad value for 'mpol'
[ 1950.176798][ T6538] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1950.188249][ T6538] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[ 1950.206407][ T6538] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 1950.218958][ T6538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1950.231850][ T6538] usb 1-1: config 0 descriptor??
[ 1950.325316][   T27] audit: type=1326 audit(2000000286.115:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30807 comm="syz.4.21710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1539c799 code=0x7ffc0000
[ 1950.381439][   T27] audit: type=1326 audit(2000000286.115:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30807 comm="syz.4.21710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1539c799 code=0x7ffc0000
[ 1950.446167][   T27] audit: type=1326 audit(2000000286.143:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30807 comm="syz.4.21710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1539c799 code=0x7ffc0000
[ 1950.468703][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1950.491026][   T27] audit: type=1326 audit(2000000286.143:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30807 comm="syz.4.21710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1539c799 code=0x7ffc0000
[ 1950.519448][   T27] audit: type=1326 audit(2000000286.143:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30807 comm="syz.4.21710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0d1539c799 code=0x7ffc0000
[ 1950.541994][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1950.555486][    C0] hrtimer: interrupt took 64259 ns
[ 1950.630385][   T23] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1950.706574][ T6538] Bluetooth: Can't get state to change to load configuration err
[ 1950.714449][ T6538] Bluetooth: Loading sysconfig file failed
[ 1950.723800][ T6538] ath3k: probe of 1-1:0.0 failed with error -16
[ 1950.737647][ T6538] usb 1-1: USB disconnect, device number 118
[ 1950.855020][   T23] usb 3-1: Using ep0 maxpacket: 32
[ 1950.867063][   T23] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[ 1950.881153][   T23] usb 3-1: config 0 has no interface number 0
[ 1950.888364][   T23] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1950.902186][   T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1950.915153][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1950.934290][   T23] usb 3-1: Product: syz
[ 1950.940584][   T23] usb 3-1: Manufacturer: syz
[ 1950.951043][   T23] usb 3-1: SerialNumber: syz
[ 1950.967731][   T23] usb 3-1: config 0 descriptor??
[ 1950.978636][T30810] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1951.232701][T30810] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1951.504782][   T23] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1951.528067][   T23] asix: probe of 3-1:0.188 failed with error -71
[ 1951.544423][   T23] usb 3-1: USB disconnect, device number 127
[ 1951.712005][T30884] loop3: detected capacity change from 0 to 512
[ 1951.787123][T30884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1951.800509][T30884] ext4 filesystem being mounted at /5279/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1951.850352][ T6481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1952.027140][T30900] loop4: detected capacity change from 0 to 2048
[ 1952.046488][T30900] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[ 1952.049703][T30862] loop0: detected capacity change from 0 to 32768
[ 1952.084705][T30862] (syz.0.21725,30862,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1952.118715][T30900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1952.172632][T30862] (syz.0.21725,30862,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1952.227188][T30862] JBD2: Ignoring recovery information on journal
[ 1952.309057][T30862] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1952.461489][T30922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21737'.
[ 1952.631965][T30930] netlink: 'syz.4.21741': attribute type 3 has an invalid length.
[ 1952.643570][T30932] loop3: detected capacity change from 0 to 64
[ 1952.645030][T30930] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.21741'.
[ 1952.796008][ T6485] ocfs2: Unmounting device (7,0) on (node local)
[ 1953.133705][T30953] loop4: detected capacity change from 0 to 4096
[ 1953.205854][T30966] devpts: called with bogus options
[ 1953.239344][T30953] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[ 1953.324221][T30953] ntfs3: loop4: Failed to initialize $Extend/$Reparse.
[ 1953.452982][   T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1953.697529][   T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[ 1953.730791][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1953.751986][   T23] usb 3-1: Product: syz
[ 1953.763025][   T23] usb 3-1: Manufacturer: syz
[ 1953.777017][   T23] usb 3-1: SerialNumber: syz
[ 1953.806262][   T23] usb 3-1: config 0 descriptor??
[ 1953.827254][   T23] gspca_main: sonixb-2.14.0 probing 0c45:608f
[ 1954.175380][T31005] netlink: 'syz.3.21761': attribute type 1 has an invalid length.
[ 1954.272542][T12783] usb 3-1: USB disconnect, device number 2
[ 1954.453106][T31023] loop0: detected capacity change from 0 to 4096
[ 1954.469657][   T23] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1954.692863][   T23] usb 5-1: Using ep0 maxpacket: 8
[ 1954.707413][   T23] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 1954.713897][T31039] loop3: detected capacity change from 0 to 16
[ 1954.734366][T31039] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1954.746553][   T23] usb 5-1: config 179 has no interface number 0
[ 1954.752861][   T23] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1954.764625][T31039] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[ 1954.767469][   T23] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1954.786926][T31039] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1954.800557][T31039] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[ 1954.810274][T31039] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1954.816567][   T23] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 1954.822030][T31039] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[ 1954.862156][   T23] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 1954.874007][   T23] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1954.887390][T31039] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1954.887442][T31039] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[ 1954.887466][T31039] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[ 1954.887481][T31039] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1954.890172][   T27] kauditd_printk_skb: 4 callbacks suppressed
[ 1954.890183][   T27] audit: type=1800 audit(2000000290.390:511): pid=31039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.21770" name="file3" dev="loop3" ino=89 res=0 errno=0
[ 1954.918509][   T23] usb 5-1: config 179 interface 65 has no altsetting 0
[ 1954.957588][   T23] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1954.989217][T31047] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1955.047716][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1955.096239][   T23] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input106
[ 1955.196553][ T5125] input input106: unable to receive magic message: -110
[ 1955.300738][ T5125] input input106: unable to receive magic message: -32
[ 1955.378430][T22717] input input106: unable to receive magic message: -32
[ 1955.398746][T31074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21777'.
[ 1955.431742][ T5125] input input106: unable to receive magic message: -32
[ 1955.728546][   T23] usb 5-1: USB disconnect, device number 63
[ 1955.734723][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1955.754801][   T23] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1956.027121][T31064] loop3: detected capacity change from 0 to 40427
[ 1956.048370][T31064] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1956.065057][T31064] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1956.075062][T31064] F2FS-fs (loop3): invalid crc value
[ 1956.090471][T31064] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1956.168290][T31064] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1956.190610][T31064] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1956.296607][ T6538] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1956.510507][ T6538] usb 3-1: Using ep0 maxpacket: 8
[ 1956.522661][ T6538] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1956.539006][ T6538] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[ 1956.585359][ T6538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1956.619496][ T6538] usb 3-1: config 0 descriptor??
[ 1956.781991][T31154] netlink: 'syz.0.21794': attribute type 2 has an invalid length.
[ 1956.789911][T31154] netlink: 'syz.0.21794': attribute type 1 has an invalid length.
[ 1956.847431][ T8012] usb 3-1: USB disconnect, device number 3
[ 1957.182349][T31189] netlink: 'syz.3.21802': attribute type 1 has an invalid length.
[ 1957.280012][ T6538] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1957.339594][T31193] loop0: detected capacity change from 0 to 4096
[ 1957.380001][T31193] ntfs: (device loop0): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk.
[ 1957.420522][T31193] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing.
[ 1957.429449][T31193] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1957.478865][T31193] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1957.497973][ T6538] usb 5-1: Using ep0 maxpacket: 8
[ 1957.520157][ T6538] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1957.544321][T31193] ntfs: volume version 3.1.
[ 1957.549400][ T6538] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1957.568832][ T6538] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1957.596888][ T6538] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[ 1957.607811][T31193] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array.
[ 1957.622364][ T6538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1957.632334][ T6538] usb 5-1: Product: syz
[ 1957.637402][ T6538] usb 5-1: Manufacturer: syz
[ 1957.642018][ T6538] usb 5-1: SerialNumber: syz
[ 1957.647267][T31193] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 1957.685462][T31193] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array.
[ 1957.696327][T31193] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 1957.729014][T31193] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5.
[ 1957.912710][T31198] loop3: detected capacity change from 0 to 32768
[ 1957.969217][T31198] (syz.3.21806,31198,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1958.018208][T31219] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1958.031177][T31198] (syz.3.21806,31198,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1958.129460][ T6538] usb 5-1: cannot find UAC_HEADER
[ 1958.153864][T31198] JBD2: Ignoring recovery information on journal
[ 1958.196453][T31198] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1958.215767][ T6538] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[ 1958.285847][ T6538] usb 5-1: USB disconnect, device number 64
[ 1958.311328][ T6920] udevd[6920]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1958.537396][ T6481] ocfs2: Unmounting device (7,3) on (node local)
[ 1958.670335][T31261] loop0: detected capacity change from 0 to 512
[ 1958.709137][T31261] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[ 1958.722891][T31261] UDF-fs: Scanning with blocksize 512 failed
[ 1958.745031][T31261] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[ 1958.755563][T31261] UDF-fs: Scanning with blocksize 1024 failed
[ 1958.789637][T31261] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[ 1958.806439][T31261] UDF-fs: Scanning with blocksize 2048 failed
[ 1958.866152][T31261] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 1958.932647][T31261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1960.015698][T31304] loop0: detected capacity change from 0 to 32768
[ 1960.145163][T31304] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1960.260498][T31372] loop4: detected capacity change from 0 to 164
[ 1960.323021][T31376] netlink: 'syz.2.21847': attribute type 3 has an invalid length.
[ 1960.331432][T31376] netlink: 'syz.2.21847': attribute type 27 has an invalid length.
[ 1960.416988][T31304] XFS (loop0): Ending clean mount
[ 1960.649297][ T6485] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1960.759374][T31390] loop2: detected capacity change from 0 to 4096
[ 1960.779744][T31390] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[ 1961.256056][T31409] loop4: detected capacity change from 0 to 4096
[ 1961.383616][T31409] __ntfs_error: 8 callbacks suppressed
[ 1961.383632][T31409] ntfs: (device loop4): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk.
[ 1961.468698][T31409] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[ 1961.482490][T31409] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1961.561182][T31409] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1961.590306][T31409] ntfs: volume version 3.1.
[ 1961.624708][T31409] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array.
[ 1961.646796][T31409] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 1961.666805][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1961.682896][T31409] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array.
[ 1961.744507][T31409] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 1961.787928][T31409] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5.
[ 1961.806871][T31446] loop2: detected capacity change from 0 to 16
[ 1961.821382][T31409] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[ 1961.833260][T31446] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1962.970633][T31519] geneve1: entered allmulticast mode
[ 1963.205988][T31535] netlink: 260 bytes leftover after parsing attributes in process `syz.4.21895'.
[ 1963.724437][T31563] netlink: 'syz.3.21903': attribute type 7 has an invalid length.
[ 1963.743690][T31563] netlink: 'syz.3.21903': attribute type 8 has an invalid length.
[ 1963.769202][T31563] netlink: 'syz.3.21903': attribute type 15 has an invalid length.
[ 1963.786963][T31568] loop4: detected capacity change from 0 to 256
[ 1963.851226][T31568] FAT-fs (loop4): Directory bread(block 64) failed
[ 1963.879592][T31568] FAT-fs (loop4): Directory bread(block 65) failed
[ 1963.919093][T31568] FAT-fs (loop4): Directory bread(block 66) failed
[ 1963.925673][T31568] FAT-fs (loop4): Directory bread(block 67) failed
[ 1963.949897][T31568] FAT-fs (loop4): Directory bread(block 68) failed
[ 1963.978085][T31568] FAT-fs (loop4): Directory bread(block 69) failed
[ 1963.987636][T31568] FAT-fs (loop4): Directory bread(block 70) failed
[ 1964.017234][T31568] FAT-fs (loop4): Directory bread(block 71) failed
[ 1964.036573][T31568] FAT-fs (loop4): Directory bread(block 72) failed
[ 1964.043162][T31568] FAT-fs (loop4): Directory bread(block 73) failed
[ 1964.077654][T31576] loop3: detected capacity change from 0 to 4096
[ 1964.132299][T31576] ntfs: volume version 3.1.
[ 1965.189606][T31669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21925'.
[ 1965.504658][T31693] loop2: detected capacity change from 0 to 256
[ 1965.790146][T31713] netlink: 'syz.2.21938': attribute type 32 has an invalid length.
[ 1966.046982][T31728] netlink: 64 bytes leftover after parsing attributes in process `syz.2.21942'.
[ 1966.090243][T31729] loop0: detected capacity change from 0 to 2048
[ 1966.198576][T31729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1966.269868][T31729] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #12: block 2: comm syz.0.21943: lblock 0 mapped to illegal pblock 2 (length 1)
[ 1966.426580][ T6485] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1966.490688][T31747] loop3: detected capacity change from 0 to 1024
[ 1966.553296][T22853] hfsplus: b-tree write err: -5, ino 25
[ 1966.573802][T22853] hfsplus: b-tree write err: -5, ino 4
[ 1966.579430][T22853] hfsplus: b-tree write err: -5, ino 2
[ 1966.657923][T22853] hfsplus: b-tree write err: -5, ino 17
[ 1966.881467][T31723] loop4: detected capacity change from 0 to 40427
[ 1966.906434][T31723] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[ 1966.932746][T31723] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1966.956318][T31723] F2FS-fs (loop4): heap/no_heap options were deprecated
[ 1966.995954][T31723] F2FS-fs (loop4): invalid crc value
[ 1967.032398][T31723] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1967.160294][T31723] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1967.167406][T31723] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1967.212590][T31785] loop3: detected capacity change from 0 to 256
[ 1967.257111][T31785] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[ 1967.380617][   T49] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[ 1967.529703][T31798] loop3: detected capacity change from 0 to 64
[ 1967.658660][T31807] openvswitch: netlink: Message has 245 unknown bytes.
[ 1967.674867][T31807] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1968.267353][T31849] netlink: 'syz.2.21971': attribute type 3 has an invalid length.
[ 1968.557807][T31870] SET target dimension over the limit!
[ 1968.710217][T31881] comedi comedi0: 8255: I/O port conflict (0x2,4)
[ 1968.728020][T31881] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4)
[ 1968.747226][T31881] comedi comedi0: 8255: I/O port conflict (0x4f,4)
[ 1968.763910][T31881] comedi comedi0: 8255: I/O port conflict (0x6,4)
[ 1968.786713][T31881] comedi comedi0: 8255: I/O port conflict (0x400008,4)
[ 1968.815351][T31881] comedi comedi0: 8255: I/O port conflict (0x80ffa,4)
[ 1968.853578][T31891] loop0: detected capacity change from 0 to 256
[ 1968.960970][T31891] FAT-fs (loop0): Directory bread(block 64) failed
[ 1968.979958][T31891] FAT-fs (loop0): Directory bread(block 65) failed
[ 1968.996438][T31891] FAT-fs (loop0): Directory bread(block 66) failed
[ 1969.007139][T31891] FAT-fs (loop0): Directory bread(block 67) failed
[ 1969.035519][T31891] FAT-fs (loop0): Directory bread(block 68) failed
[ 1969.045856][T31891] FAT-fs (loop0): Directory bread(block 69) failed
[ 1969.062431][T31891] FAT-fs (loop0): Directory bread(block 70) failed
[ 1969.068986][T31891] FAT-fs (loop0): Directory bread(block 71) failed
[ 1969.097663][T31891] FAT-fs (loop0): Directory bread(block 72) failed
[ 1969.108567][T31891] FAT-fs (loop0): Directory bread(block 73) failed
[ 1969.283439][T31891] syz.0.21986: attempt to access beyond end of device
[ 1969.283439][T31891] loop0: rw=2051, sector=1224, nr_sectors = 32 limit=256
[ 1969.333587][T31916] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[ 1969.550442][T31930] netlink: 36 bytes leftover after parsing attributes in process `syz.4.21998'.
[ 1969.587375][T31931] netlink: 'syz.0.21996': attribute type 21 has an invalid length.
[ 1969.595398][T31931] netlink: 144 bytes leftover after parsing attributes in process `syz.0.21996'.
[ 1969.853940][T31949] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002
[ 1970.119592][T31969] libceph: resolve 'c' (ret=-3): failed
[ 1970.515517][T31987] loop0: detected capacity change from 0 to 4096
[ 1970.553221][T31987] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[ 1970.604550][T32004] overlayfs: workdir and upperdir must be separate subtrees
[ 1970.668424][T31987] ntfs3: loop0: Failed to load $MFT (-2).
[ 1970.962471][T32030] comedi comedi3: comedi_config --init_data is deprecated
[ 1971.523001][T32067] affs: No valid root block on device nbd3
[ 1971.676380][T32077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22042'.
[ 1971.883160][T32083] loop3: detected capacity change from 0 to 2048
[ 1971.909249][T32083] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1971.955264][T32083] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[ 1971.976649][T32083] UDF-fs: Scanning with blocksize 512 failed
[ 1972.033615][T32083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1972.231789][T32112] netlink: 'syz.4.22052': attribute type 32 has an invalid length.
[ 1972.260366][T32112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22052'.
[ 1972.281686][T32112] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[ 1972.450710][T32123] netlink: 14 bytes leftover after parsing attributes in process `syz.4.22056'.
[ 1972.596827][T32123] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1972.645025][T32123] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1972.694725][T32123] .` (unregistering): Released all slaves
[ 1972.719190][T32133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22059'.
[ 1972.858795][T32107] loop2: detected capacity change from 0 to 32768
[ 1972.909868][T32107] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1973.076149][T32107] XFS (loop2): Ending clean mount
[ 1973.122684][T32107] XFS (loop2): Quotacheck needed: Please wait.
[ 1973.159944][T32167] program syz.3.22065 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1973.265584][T32107] XFS (loop2): Quotacheck: Done.
[ 1973.315735][   T27] kauditd_printk_skb: 13 callbacks suppressed
[ 1973.325577][   T27] audit: type=1326 audit(2000000307.620:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32174 comm="syz.3.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1973.367396][   T27] audit: type=1326 audit(2000000307.658:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32174 comm="syz.3.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1973.400883][   T27] audit: type=1326 audit(2000000307.658:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32174 comm="syz.3.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1973.436312][ T6477] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1973.512433][   T27] audit: type=1326 audit(2000000307.658:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32174 comm="syz.3.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1973.593852][   T27] audit: type=1326 audit(2000000307.658:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32174 comm="syz.3.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1973.680899][   T27] audit: type=1326 audit(2000000307.658:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32174 comm="syz.3.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1973.807974][   T27] audit: type=1326 audit(2000000307.658:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32174 comm="syz.3.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1973.903994][   T27] audit: type=1326 audit(2000000307.658:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32174 comm="syz.3.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1973.961742][   T27] audit: type=1326 audit(2000000307.658:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32174 comm="syz.3.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f36cb19c799 code=0x7ffc0000
[ 1974.178744][T32221] usb usb7: usbfs: process 32221 (syz.3.22081) did not claim interface 0 before use
[ 1974.627971][T32250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22090'.
[ 1974.676491][T32255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22091'.
[ 1975.186773][T32289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22103'.
[ 1975.208276][T32289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22103'.
[ 1975.366490][T32299] loop3: detected capacity change from 0 to 128
[ 1975.470060][T32299] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1975.499632][T32299] ext4 filesystem being mounted at /5382/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1975.585914][T32299] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.22106: No space for directory leaf checksum. Please run e2fsck -D.
[ 1975.610851][T32299] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.22106: checksumming directory block 0
[ 1975.769072][T32335] loop0: detected capacity change from 0 to 512
[ 1975.781522][ T6481] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1975.803555][T32335] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1975.846491][T32335] EXT4-fs error (device loop0): ext4_find_extent:936: inode #4: comm syz.0.22115: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0)
[ 1976.013500][T32335] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117
[ 1976.059721][T32335] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1976.108772][T32335] EXT4-fs (loop0): Cannot turn on quotas: error -22
[ 1976.138252][T32335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1976.244658][T32335] EXT4-fs error (device loop0): ext4_lookup:1855: inode #2: comm syz.0.22115: 'file0' linked to parent dir
[ 1976.331982][ T6485] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1976.433568][T32376] delete_channel: no stack
[ 1976.712156][T32396] loop3: detected capacity change from 0 to 128
[ 1976.876804][T32403] loop4: detected capacity change from 0 to 64
[ 1976.908350][T32403] hfs: unable to locate alternate MDB
[ 1976.913768][T32403] hfs: continuing without an alternate MDB
[ 1977.055293][T22853] 
[ 1977.057668][T22853] ======================================================
[ 1977.064684][T22853] WARNING: possible circular locking dependency detected
[ 1977.071712][T22853] syzkaller #0 Not tainted
[ 1977.076123][T22853] ------------------------------------------------------
[ 1977.083140][T22853] kworker/u4:2/22853 is trying to acquire lock:
[ 1977.089370][T22853] ffff888074ba75f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380
[ 1977.100183][T22853] 
[ 1977.100183][T22853] but task is already holding lock:
[ 1977.107552][T22853] ffff8880311960b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0
[ 1977.116886][T22853] 
[ 1977.116886][T22853] which lock already depends on the new lock.
[ 1977.116886][T22853] 
[ 1977.127283][T22853] 
[ 1977.127283][T22853] the existing dependency chain (in reverse order) is:
[ 1977.136294][T22853] 
[ 1977.136294][T22853] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}:
[ 1977.144215][T22853]        __mutex_lock+0x136/0xcc0
[ 1977.149251][T22853]        hfs_find_init+0x17e/0x1f0
[ 1977.154373][T22853]        hfs_get_block+0x557/0xc50
[ 1977.159491][T22853]        block_read_full_folio+0x44b/0xf60
[ 1977.165308][T22853]        filemap_read_folio+0x172/0x760
[ 1977.170857][T22853]        do_read_cache_folio+0x468/0x7d0
[ 1977.176488][T22853]        do_read_cache_page+0x32/0x250
[ 1977.181936][T22853]        __hfs_bnode_create+0x4b1/0x7b0
[ 1977.187471][T22853]        hfs_bnode_find+0x222/0xd40
[ 1977.192748][T22853]        hfs_brec_find+0x17c/0x500
[ 1977.197851][T22853]        hfs_brec_read+0x24/0x110
[ 1977.202864][T22853]        hfs_cat_find_brec+0x178/0x3f0
[ 1977.208307][T22853]        hfs_fill_super+0xee2/0x14a0
[ 1977.213584][T22853]        mount_bdev+0x221/0x2d0
[ 1977.218426][T22853]        legacy_get_tree+0xea/0x180
[ 1977.223613][T22853]        vfs_get_tree+0x8c/0x280
[ 1977.228535][T22853]        do_new_mount+0x24b/0xa40
[ 1977.233543][T22853]        __se_sys_mount+0x2e7/0x3d0
[ 1977.238738][T22853]        do_syscall_64+0x55/0xa0
[ 1977.243669][T22853]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1977.250068][T22853] 
[ 1977.250068][T22853] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[ 1977.259265][T22853]        __lock_acquire+0x2df1/0x7d40
[ 1977.264622][T22853]        lock_acquire+0x19e/0x420
[ 1977.269628][T22853]        __mutex_lock+0x136/0xcc0
[ 1977.274640][T22853]        hfs_extend_file+0xff/0x1380
[ 1977.279912][T22853]        hfs_bmap_reserve+0x107/0x430
[ 1977.285265][T22853]        __hfs_ext_write_extent+0x1fa/0x470
[ 1977.291143][T22853]        hfs_ext_write_extent+0x17f/0x210
[ 1977.296844][T22853]        hfs_write_inode+0xdc/0x880
[ 1977.302026][T22853]        __writeback_single_inode+0x705/0xec0
[ 1977.308079][T22853]        writeback_sb_inodes+0x7cd/0xf50
[ 1977.313698][T22853]        wb_writeback+0x46a/0xbf0
[ 1977.318707][T22853]        wb_workfn+0x400/0xe60
[ 1977.323456][T22853]        process_scheduled_works+0xa5d/0x15d0
[ 1977.329511][T22853]        worker_thread+0xa55/0xfc0
[ 1977.334606][T22853]        kthread+0x2fa/0x390
[ 1977.339178][T22853]        ret_from_fork+0x48/0x80
[ 1977.344099][T22853]        ret_from_fork_asm+0x11/0x20
[ 1977.349370][T22853] 
[ 1977.349370][T22853] other info that might help us debug this:
[ 1977.349370][T22853] 
[ 1977.359580][T22853]  Possible unsafe locking scenario:
[ 1977.359580][T22853] 
[ 1977.367012][T22853]        CPU0                    CPU1
[ 1977.372444][T22853]        ----                    ----
[ 1977.377793][T22853]   lock(&tree->tree_lock/1);
[ 1977.382461][T22853]                                lock(&HFS_I(tree->inode)->extents_lock);
[ 1977.390943][T22853]                                lock(&tree->tree_lock/1);
[ 1977.398127][T22853]   lock(&HFS_I(tree->inode)->extents_lock);
[ 1977.404094][T22853] 
[ 1977.404094][T22853]  *** DEADLOCK ***
[ 1977.404094][T22853] 
[ 1977.412219][T22853] 3 locks held by kworker/u4:2/22853:
[ 1977.417570][T22853]  #0: ffff88801e248d38 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1977.428779][T22853]  #1: ffffc90005697d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1977.441200][T22853]  #2: ffff8880311960b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0
[ 1977.450936][T22853] 
[ 1977.450936][T22853] stack backtrace:
[ 1977.456803][T22853] CPU: 0 PID: 22853 Comm: kworker/u4:2 Not tainted syzkaller #0
[ 1977.464415][T22853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1977.474469][T22853] Workqueue: writeback wb_workfn (flush-7:4)
[ 1977.480471][T22853] Call Trace:
[ 1977.483743][T22853]  <TASK>
[ 1977.486667][T22853]  dump_stack_lvl+0x18c/0x250
[ 1977.491339][T22853]  ? load_image+0x400/0x400
[ 1977.495834][T22853]  ? show_regs_print_info+0x20/0x20
[ 1977.501036][T22853]  ? print_circular_bug+0x12b/0x1a0
[ 1977.506230][T22853]  check_noncircular+0x2fc/0x400
[ 1977.511156][T22853]  ? look_up_lock_class+0x75/0x140
[ 1977.516262][T22853]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1977.521542][T22853]  ? lockdep_lock+0xf5/0x230
[ 1977.526123][T22853]  ? _find_first_zero_bit+0xd3/0x100
[ 1977.531585][T22853]  __lock_acquire+0x2df1/0x7d40
[ 1977.536437][T22853]  ? arch_stack_walk+0x16e/0x190
[ 1977.541366][T22853]  ? ret_from_fork_asm+0x11/0x20
[ 1977.546299][T22853]  ? verify_lock_unused+0x140/0x140
[ 1977.551491][T22853]  ? stack_trace_save+0xaa/0x100
[ 1977.556419][T22853]  ? stack_trace_snprint+0xf0/0xf0
[ 1977.561524][T22853]  ? check_noncircular+0x18a/0x400
[ 1977.566628][T22853]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1977.571820][T22853]  lock_acquire+0x19e/0x420
[ 1977.576311][T22853]  ? hfs_extend_file+0xff/0x1380
[ 1977.581235][T22853]  ? __might_sleep+0xe0/0xe0
[ 1977.585811][T22853]  ? read_lock_is_recursive+0x20/0x20
[ 1977.591171][T22853]  __mutex_lock+0x136/0xcc0
[ 1977.595664][T22853]  ? hfs_extend_file+0xff/0x1380
[ 1977.600594][T22853]  ? verify_lock_unused+0x140/0x140
[ 1977.605794][T22853]  ? hfs_extend_file+0xff/0x1380
[ 1977.610743][T22853]  ? mutex_lock_nested+0x20/0x20
[ 1977.615691][T22853]  hfs_extend_file+0xff/0x1380
[ 1977.620459][T22853]  ? hfs_ext_write_extent+0x152/0x210
[ 1977.625837][T22853]  ? hfs_write_inode+0xdc/0x880
[ 1977.630676][T22853]  ? hfs_get_block+0xc50/0xc50
[ 1977.635433][T22853]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1977.641587][T22853]  ? rcu_is_watching+0x15/0xb0
[ 1977.646349][T22853]  ? trace_contention_end+0x39/0xe0
[ 1977.651548][T22853]  ? __asan_memset+0x22/0x40
[ 1977.656135][T22853]  ? hfs_brec_find+0x19b/0x500
[ 1977.660902][T22853]  ? hfs_find_init+0x17e/0x1f0
[ 1977.665678][T22853]  hfs_bmap_reserve+0x107/0x430
[ 1977.670531][T22853]  __hfs_ext_write_extent+0x1fa/0x470
[ 1977.675900][T22853]  hfs_ext_write_extent+0x17f/0x210
[ 1977.681088][T22853]  ? verify_lock_unused+0x140/0x140
[ 1977.686277][T22853]  ? hfs_ext_find_block+0x190/0x190
[ 1977.691467][T22853]  ? blk_start_plug+0x51/0x1a0
[ 1977.696225][T22853]  hfs_write_inode+0xdc/0x880
[ 1977.700901][T22853]  ? hfs_inode_write_fork+0x1a0/0x1a0
[ 1977.706278][T22853]  ? __writeback_single_inode+0x48d/0xec0
[ 1977.711997][T22853]  ? __lock_acquire+0x7d40/0x7d40
[ 1977.717009][T22853]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1977.722026][T22853]  ? __rwlock_init+0x150/0x150
[ 1977.726784][T22853]  __writeback_single_inode+0x705/0xec0
[ 1977.732332][T22853]  writeback_sb_inodes+0x7cd/0xf50
[ 1977.737454][T22853]  ? queue_io+0x550/0x550
[ 1977.741785][T22853]  ? rcu_is_watching+0x15/0xb0
[ 1977.746542][T22853]  wb_writeback+0x46a/0xbf0
[ 1977.751037][T22853]  ? queue_io+0x3b1/0x550
[ 1977.755359][T22853]  ? percpu_ref_tryget+0x250/0x250
[ 1977.760460][T22853]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1977.766428][T22853]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1977.771613][T22853]  wb_workfn+0x400/0xe60
[ 1977.775849][T22853]  ? try_to_wake_up+0x70a/0x1190
[ 1977.780779][T22853]  ? inode_wait_for_writeback+0x230/0x230
[ 1977.786488][T22853]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1977.792455][T22853]  ? read_lock_is_recursive+0x20/0x20
[ 1977.797813][T22853]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1977.802998][T22853]  ? process_scheduled_works+0x96f/0x15d0
[ 1977.808717][T22853]  ? process_scheduled_works+0x96f/0x15d0
[ 1977.814423][T22853]  process_scheduled_works+0xa5d/0x15d0
[ 1977.820050][T22853]  ? worker_attach_to_pool+0x380/0x380
[ 1977.825501][T22853]  ? assign_work+0x3d2/0x5d0
[ 1977.830079][T22853]  worker_thread+0xa55/0xfc0
[ 1977.834674][T22853]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1977.840571][T22853]  ? _raw_spin_unlock+0x40/0x40
[ 1977.845422][T22853]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1977.851313][T22853]  kthread+0x2fa/0x390
[ 1977.855384][T22853]  ? pr_cont_work+0x560/0x560
[ 1977.860057][T22853]  ? kthread_blkcg+0xd0/0xd0
[ 1977.864635][T22853]  ret_from_fork+0x48/0x80
[ 1977.869042][T22853]  ? kthread_blkcg+0xd0/0xd0
[ 1977.873622][T22853]  ret_from_fork_asm+0x11/0x20
[ 1977.878383][T22853]  </TASK>
[ 1977.907399][T22853] hfs: new node 0 already hashed?
[ 1977.912648][T22853] ------------[ cut here ]------------
[ 1977.918351][T22853] WARNING: CPU: 0 PID: 22853 at fs/hfs/bnode.c:520 hfs_bnode_create+0x3b9/0x440
[ 1977.927416][T22853] Modules linked in:
[ 1977.931332][T22853] CPU: 0 PID: 22853 Comm: kworker/u4:2 Not tainted syzkaller #0
[ 1977.939049][T22853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1977.949193][T22853] Workqueue: writeback wb_workfn (flush-7:4)
[ 1977.955205][T22853] RIP: 0010:hfs_bnode_create+0x3b9/0x440
[ 1977.960926][T22853] Code: d4 e0 8a 89 ee e8 47 8c 1f 08 e9 73 fd ff ff e8 1d 1c 2d ff 4c 89 ef e8 45 bc 34 08 48 c7 c7 c0 d4 e0 8a 89 ee e8 27 8c 1f 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c
[ 1977.980586][T22853] RSP: 0018:ffffc90005696e18 EFLAGS: 00010246
[ 1977.986662][T22853] RAX: 000000000000001f RBX: ffff888031196000 RCX: 915223cdf274f700
[ 1977.994672][T22853] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1978.001515][T32417] loop2: detected capacity change from 0 to 32768
[ 1978.002739][T22853] RBP: 0000000000000000 R08: ffffc90005696a27 R09: 1ffff92000ad2d44
[ 1978.017417][T22853] R10: dffffc0000000000 R11: fffff52000ad2d45 R12: 0000000000000000
[ 1978.025510][T22853] R13: ffff8880311960e0 R14: ffff88802d2df200 R15: dffffc0000000000
[ 1978.033576][T22853] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1978.042551][T22853] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1978.049139][T22853] CR2: 00007ff728b366c8 CR3: 000000000cf32000 CR4: 00000000003506f0
[ 1978.057151][T22853] Call Trace:
[ 1978.060437][T22853]  <TASK>
[ 1978.063421][T22853]  hfs_bmap_alloc+0x541/0x5d0
[ 1978.066873][T32417] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[ 1978.066873][T32417] 
[ 1978.068097][T22853]  ? hfs_bmap_reserve+0x430/0x430
[ 1978.083124][T22853]  ? rcu_is_watching+0x15/0xb0
[ 1978.087964][T22853]  hfs_btree_inc_height+0x101/0xac0
[ 1978.093174][T22853]  ? __rwlock_init+0x150/0x150
[ 1978.097989][T22853]  ? hfs_brec_insert+0xbd0/0xbd0
[ 1978.098649][T32417] ERROR: (device loop2): remounting filesystem as read-only
[ 1978.102937][T22853]  ? do_raw_spin_unlock+0x121/0x230
[ 1978.115574][T22853]  hfs_brec_insert+0x748/0xbd0
[ 1978.120391][T22853]  ? hfs_brec_keylen+0x360/0x360
[ 1978.122535][T32417] xtLookup: xtSearch returned -5
[ 1978.125327][T22853]  __hfs_ext_write_extent+0x2a1/0x470
[ 1978.135635][T22853]  hfs_ext_write_extent+0x17f/0x210
[ 1978.140931][T22853]  ? verify_lock_unused+0x140/0x140
[ 1978.146138][T22853]  ? hfs_ext_find_block+0x190/0x190
[ 1978.151374][T22853]  ? blk_start_plug+0x51/0x1a0
[ 1978.151687][T32417] add_index: get/read_metapage failed!
[ 1978.156130][T22853]  hfs_write_inode+0xdc/0x880
[ 1978.166354][T22853]  ? hfs_inode_write_fork+0x1a0/0x1a0
[ 1978.171766][T22853]  ? __writeback_single_inode+0x48d/0xec0
[ 1978.177600][T22853]  ? __lock_acquire+0x7d40/0x7d40
[ 1978.177655][T32417] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[ 1978.177655][T32417] 
[ 1978.182830][T22853]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1978.182854][T22853]  ? __rwlock_init+0x150/0x150
[ 1978.182877][T22853]  __writeback_single_inode+0x705/0xec0
[ 1978.182903][T22853]  writeback_sb_inodes+0x7cd/0xf50
[ 1978.182938][T22853]  ? queue_io+0x550/0x550
[ 1978.182964][T22853]  ? rcu_is_watching+0x15/0xb0
[ 1978.182986][T22853]  wb_writeback+0x46a/0xbf0
[ 1978.195899][T32417] xtLookup: xtSearch returned -5
[ 1978.197963][T22853]  ? queue_io+0x3b1/0x550
[ 1978.203039][T32417] free_index: error reading directory table
[ 1978.208245][T22853]  ? percpu_ref_tryget+0x250/0x250
[ 1978.215059][T32417] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[ 1978.215059][T32417] 
[ 1978.217665][T22853]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1978.222410][T32417] xtLookup: xtSearch returned -5
[ 1978.226929][T22853]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1978.226952][T22853]  wb_workfn+0x400/0xe60
[ 1978.233152][T32417] free_index: error reading directory table
[ 1978.236211][T22853]  ? try_to_wake_up+0x70a/0x1190
[ 1978.236237][T22853]  ? inode_wait_for_writeback+0x230/0x230
[ 1978.236264][T22853]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1978.236283][T22853]  ? read_lock_is_recursive+0x20/0x20
[ 1978.236303][T22853]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1978.244076][T32417] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[ 1978.244076][T32417] 
[ 1978.247279][T22853]  ? process_scheduled_works+0x96f/0x15d0
[ 1978.247303][T22853]  ? process_scheduled_works+0x96f/0x15d0
[ 1978.261942][T32417] xtLookup: xtSearch returned -5
[ 1978.263252][T22853]  process_scheduled_works+0xa5d/0x15d0
[ 1978.268488][T32417] free_index: error reading directory table
[ 1978.273377][T22853]  ? worker_attach_to_pool+0x380/0x380
[ 1978.280986][T32417] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[ 1978.280986][T32417] 
[ 1978.283522][T22853]  ? assign_work+0x3d2/0x5d0
[ 1978.300500][T32417] xtLookup: xtSearch returned -5
[ 1978.305529][T22853]  worker_thread+0xa55/0xfc0
[ 1978.320986][T32417] free_index: error reading directory table
[ 1978.326441][T22853]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1978.342890][T32417] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[ 1978.342890][T32417] 
[ 1978.348506][T22853]  ? _raw_spin_unlock+0x40/0x40
[ 1978.355825][T32417] xtLookup: xtSearch returned -5
[ 1978.363975][T22853]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1978.416050][T22853]  kthread+0x2fa/0x390
[ 1978.416441][T32417] free_index: error reading directory table
[ 1978.420114][T22853]  ? pr_cont_work+0x560/0x560
[ 1978.430709][T22853]  ? kthread_blkcg+0xd0/0xd0
[ 1978.435309][T22853]  ret_from_fork+0x48/0x80
[ 1978.439913][T22853]  ? kthread_blkcg+0xd0/0xd0
[ 1978.444521][T22853]  ret_from_fork_asm+0x11/0x20
[ 1978.449352][T22853]  </TASK>
[ 1978.452381][T22853] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1978.459669][T22853] CPU: 0 PID: 22853 Comm: kworker/u4:2 Not tainted syzkaller #0
[ 1978.467304][T22853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1978.477370][T22853] Workqueue: writeback wb_workfn (flush-7:4)
[ 1978.483379][T22853] Call Trace:
[ 1978.486667][T22853]  <TASK>
[ 1978.489602][T22853]  dump_stack_lvl+0x18c/0x250
[ 1978.494302][T22853]  ? show_regs_print_info+0x20/0x20
[ 1978.499510][T22853]  ? load_image+0x400/0x400
[ 1978.504032][T22853]  panic+0x2dc/0x730
[ 1978.507938][T22853]  ? bpf_jit_dump+0xd0/0xd0
[ 1978.512449][T22853]  ? ret_from_fork_asm+0x11/0x20
[ 1978.517382][T22853]  __warn+0x2e0/0x470
[ 1978.521354][T22853]  ? hfs_bnode_create+0x3b9/0x440
[ 1978.526376][T22853]  ? hfs_bnode_create+0x3b9/0x440
[ 1978.531387][T22853]  report_bug+0x2be/0x4f0
[ 1978.535751][T22853]  ? hfs_bnode_create+0x3b9/0x440
[ 1978.540782][T22853]  ? hfs_bnode_create+0x3b9/0x440
[ 1978.545802][T22853]  ? hfs_bnode_create+0x3bb/0x440
[ 1978.550823][T22853]  handle_bug+0xcf/0x120
[ 1978.555240][T22853]  exc_invalid_op+0x1a/0x50
[ 1978.559741][T22853]  asm_exc_invalid_op+0x1a/0x20
[ 1978.564578][T22853] RIP: 0010:hfs_bnode_create+0x3b9/0x440
[ 1978.570209][T22853] Code: d4 e0 8a 89 ee e8 47 8c 1f 08 e9 73 fd ff ff e8 1d 1c 2d ff 4c 89 ef e8 45 bc 34 08 48 c7 c7 c0 d4 e0 8a 89 ee e8 27 8c 1f 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c
[ 1978.589811][T22853] RSP: 0018:ffffc90005696e18 EFLAGS: 00010246
[ 1978.595870][T22853] RAX: 000000000000001f RBX: ffff888031196000 RCX: 915223cdf274f700
[ 1978.603830][T22853] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1978.611799][T22853] RBP: 0000000000000000 R08: ffffc90005696a27 R09: 1ffff92000ad2d44
[ 1978.619771][T22853] R10: dffffc0000000000 R11: fffff52000ad2d45 R12: 0000000000000000
[ 1978.627734][T22853] R13: ffff8880311960e0 R14: ffff88802d2df200 R15: dffffc0000000000
[ 1978.635706][T22853]  ? hfs_bnode_create+0x3b9/0x440
[ 1978.640727][T22853]  hfs_bmap_alloc+0x541/0x5d0
[ 1978.645398][T22853]  ? hfs_bmap_reserve+0x430/0x430
[ 1978.650417][T22853]  ? rcu_is_watching+0x15/0xb0
[ 1978.655176][T22853]  hfs_btree_inc_height+0x101/0xac0
[ 1978.660359][T22853]  ? __rwlock_init+0x150/0x150
[ 1978.665119][T22853]  ? hfs_brec_insert+0xbd0/0xbd0
[ 1978.670047][T22853]  ? do_raw_spin_unlock+0x121/0x230
[ 1978.675239][T22853]  hfs_brec_insert+0x748/0xbd0
[ 1978.679994][T22853]  ? hfs_brec_keylen+0x360/0x360
[ 1978.685094][T22853]  __hfs_ext_write_extent+0x2a1/0x470
[ 1978.690461][T22853]  hfs_ext_write_extent+0x17f/0x210
[ 1978.695643][T22853]  ? verify_lock_unused+0x140/0x140
[ 1978.700828][T22853]  ? hfs_ext_find_block+0x190/0x190
[ 1978.706012][T22853]  ? blk_start_plug+0x51/0x1a0
[ 1978.710771][T22853]  hfs_write_inode+0xdc/0x880
[ 1978.715438][T22853]  ? hfs_inode_write_fork+0x1a0/0x1a0
[ 1978.720798][T22853]  ? __writeback_single_inode+0x48d/0xec0
[ 1978.726509][T22853]  ? __lock_acquire+0x7d40/0x7d40
[ 1978.731520][T22853]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1978.736537][T22853]  ? __rwlock_init+0x150/0x150
[ 1978.741289][T22853]  __writeback_single_inode+0x705/0xec0
[ 1978.746833][T22853]  writeback_sb_inodes+0x7cd/0xf50
[ 1978.751942][T22853]  ? queue_io+0x550/0x550
[ 1978.756264][T22853]  ? rcu_is_watching+0x15/0xb0
[ 1978.761026][T22853]  wb_writeback+0x46a/0xbf0
[ 1978.765528][T22853]  ? queue_io+0x3b1/0x550
[ 1978.769848][T22853]  ? percpu_ref_tryget+0x250/0x250
[ 1978.774949][T22853]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1978.780921][T22853]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1978.786105][T22853]  wb_workfn+0x400/0xe60
[ 1978.790338][T22853]  ? try_to_wake_up+0x70a/0x1190
[ 1978.795269][T22853]  ? inode_wait_for_writeback+0x230/0x230
[ 1978.800983][T22853]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1978.806952][T22853]  ? read_lock_is_recursive+0x20/0x20
[ 1978.812313][T22853]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1978.817587][T22853]  ? process_scheduled_works+0x96f/0x15d0
[ 1978.823303][T22853]  ? process_scheduled_works+0x96f/0x15d0
[ 1978.829010][T22853]  process_scheduled_works+0xa5d/0x15d0
[ 1978.834558][T22853]  ? worker_attach_to_pool+0x380/0x380
[ 1978.840009][T22853]  ? assign_work+0x3d2/0x5d0
[ 1978.844590][T22853]  worker_thread+0xa55/0xfc0
[ 1978.849177][T22853]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1978.855061][T22853]  ? _raw_spin_unlock+0x40/0x40
[ 1978.859900][T22853]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1978.865784][T22853]  kthread+0x2fa/0x390
[ 1978.869840][T22853]  ? pr_cont_work+0x560/0x560
[ 1978.874512][T22853]  ? kthread_blkcg+0xd0/0xd0
[ 1978.879090][T22853]  ret_from_fork+0x48/0x80
[ 1978.883514][T22853]  ? kthread_blkcg+0xd0/0xd0
[ 1978.888093][T22853]  ret_from_fork_asm+0x11/0x20
[ 1978.892867][T22853]  </TASK>
[ 1978.896194][T22853] Kernel Offset: disabled
[ 1978.900509][T22853] Rebooting in 86400 seconds..