last executing test programs:

3.863688146s ago: executing program 0 (id=1674):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)

3.849037076s ago: executing program 4 (id=1676):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x6bebcbcc, @remote, 0x8}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000480)={r1}, &(0x7f0000000540)=0x8)

3.748865199s ago: executing program 0 (id=1678):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8)
setuid(0xee00)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0xfc, 0x0, 0x1, 0x1, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

3.71686152s ago: executing program 4 (id=1679):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)

3.667285711s ago: executing program 0 (id=1681):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.534581834s ago: executing program 0 (id=1682):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='func=FILE_CHECK', 0xf)

3.464162586s ago: executing program 4 (id=1684):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80045b09, 0x0)

3.409352837s ago: executing program 0 (id=1685):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000001040)={0x0, 0x22, 0x19, {[@global=@item_4={0x3, 0x1, 0x0, "67351d64"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "0400"}, @main=@item_4={0x3, 0x0, 0x8, "3d16ab37"}, @global=@item_012={0x1, 0x1, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0)

2.45412214s ago: executing program 1 (id=1697):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="593bac7c7ba5166ba78998c3130bfdba44b2d14a1202aca23f58e1e02a401992fd19685df0afb9b2b372ee53d13f6ca11e94707c25f029c0ad1833c07d6af86bdebc7c26660ea78f2583e030bcd7b680cae08b9557fa331ba2e24af4927134532b7bda0051cd8fbbdad053cf0cb24930b32ee31340de4a7d0a408664fe18f5", 0x7f}, {&(0x7f00000001c0)='K', 0x1}], 0x2}, 0x0)

2.331806634s ago: executing program 1 (id=1698):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101042, 0x33)
fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0)

2.330935334s ago: executing program 1 (id=1699):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000e80)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}, {{&(0x7f0000000280)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=ANY=[], 0x10}}], 0x2, 0xc000)

2.009019681s ago: executing program 1 (id=1710):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000240)=ANY=[], 0x1, 0xc42, &(0x7f0000000540)="$eJzs3U9sHNd9B/DfG+6KK7utmNhRnDQuNm2Ryorl6l9MxSrcVU2zDSDLaijmFoArcaUSpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEXQI9O6QHLxocip6IFoYSMoemCLADkFDGb2rbikqD8RRYmSPh+b+u7OvDf73rz1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xj9z9Fh62K0AAB6kc2NfPnrc/R8AnigX/P8/AAAAAAAAAAAAAADsdSmKeCZSzJ1bSxPV+67G2an6tevjI6PbV9ufqpoDVfnyp3Hs+ImTX3h5+FQvz07N3Kb+/fbpeHPswpnma7NX5+Y7Cwudyeb4zNSl2cnOXR9hp/W3OlydgObVt65NXr680Dz+0olNu68PfTT49MGh08MvHHm+V3Z8ZHR0bKNIo7987Z4b0nWrGR77oogjkeLF7/w4tSOiiJ2fi8aDHfut9ledOFx1YnxktOrI9FR7ZrHceb53IoqIZl+lVu8cbT8WUas/0D7cWitiqWx+2eDDZffG5trz7YvTneb59vzi1OLU7Mz51G1t2Z9mFHEqRSxHxOrgzYerRxG1SPGtA2vpYkQM9M7D56uJwbduR7GLfbwLZTub9Yjl4hEYsz1sMIp4I1L85P1DcSlfZ6przeci3ijzexHvlvlqRCq/GCcjPtzme8SjqRZF/EU5/qfX0mR1PehdV85+pfmlmcuzfWV715Vf8P5w05XiId0f9m/JB2OPX5saUUS7uuKvpXv/zQ4AAAAAAAAAAAAAAAAA99v+KOJTkeL1f//jal5xVPPSD5we/v2hX+6fM/7cHY5Tln0pIpaKu5uTuy9PDDyfzqf0kOcSP8kaUcSf5Pl/33jYjQEAAAAAAAAAAAAAAAAAAHiCracifhQpXvngUFqO/jXFp2auNC+0L053V4Xtrf3bWzN9fX19vZm62co5kXMp53LOlZyrOaPI9XO2ck7kXMq5nHMl52rOGMj1c7ZyTuRcyrmccyXnas6o5fo5Wzknci7lXM65knM1Z+yRtXsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nRRTxs0jxza+tpUgR0YqYiG6uDD7s1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApcFUxHcjRfMPWje21SIiVf92HSp/ORmtfWV+PFrDZb4arTM521XWWt94CO1nZ+qpiB9GisHGezcGPI9/vfvuxtcg3v36xrtP17o50Ns59NHg0wcPnB4e/bXnbvU6bdeAw2enZq5db46PjI6O9W2u5U//eN+2ofy5xf3pOhGx8PY7b7Wnpzvz9/6i/ArsoPqj8yJS7QnpqRfdF1HbE814OH3nCVDe/z+MFL/9wX/0bvjd+38jfqn77sYdPn76pxv3/1e2Huj29///7N3/a1vr5ft/eU/f7v7/TN+2V/LvRuq1iMbi1bn6wYjGwtvvHJm62r7SudKZOXn06BeHh7944mh9X0Tj8tR0p+/VfTldAAAAAAAAAAAAAAAAAA9OKuJ3I0X7h2upGRHXq/laQ6eHXzjy/EAMVPOtNs3bfnPswpnma7NX5+Y7Cwudyeb4zNSl2clOd2f9jh/XqKZ7jY+M7lqHbmv/7dt/Z3do//7Ga7Nzb89PXfmjxW33P9U4c3Fhcb59afvdsT+KiFb/lsNVg8dHRqtGT0+1Z6qq57edTP+Lq6ci/itSXDrZTJ/N2/L8/60z/DfN/1/aeqBdmv//sb5t5WemVMRPI8Vv/eVz8dmqnU/FTecsl/vbSHH41GdyudhXluu1oftcge7MwLLs/0WKf/zZ5rK9b/MzG2WP3fWJfUSU438gUnz3z78dv563bX7+w/bj/9TWA+3S+D/bt+2pTc8r2HHXyeN/JFK8+sx78Rt52+2e/9F79sahXPjG8zl2afw/0bdtKH/ub96frgMAAAAAAAAAADzS6qmIv4sU3x+tpZfztrv5+3+TWw+0S3//65N92ybvz3pFd3xRftYfDu70zAIAAADAw1dPRfwoUlxZfO/GHOrN87/75n/+zsb8z5G0ZW/153y/Uj034H7++V+/ofy5EzvvNgAAAAAAAAAAAAAAAAAAAOwpKRXxcl5PfaKazz95y/XUVyLF6//zYi6XDpbleuvAD1W/Ns7Nzhw5Mz09e6m92L443WmOzbUvdcq6z0aKtb/5TK5bVOur99ab767xvrEW+3ykGP37XtnuWuy9tcmf7ZVd6hwry34sUvz3P2wu21vH+hMbxz1elv3rSPHVf96+7MGNsifKst+OFD/4arNX9qmybO/5qJ/cKPvSpdliF0YFAAAAAAAAAAAAAAAAAACAJ009FfFnkeJ/ry7fmMuf1/+v972tvPv1vvX+t7herfM/VK3/f6vX97L+f/VcgaW0qR0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC4S1HEO5Fi7txaWhks33c1zk7NXLs+PjK6fbX9qao5UJUvfxrHjp84+YWXh0/18vb177dPxZtjF840X5u9OjffWVjoTDbHZ6YuzU527voIO62/1eHqBDSvvnVt8vLlhebxl05s2n196KPBpw8OnR5+4cjzvbLjI6OjY31lavV7/vSbpFts3xdF/FWkePE7P07fH4woYufn4g7fnd22v+rE4aoT4yOjVUemp9ozi+XO870TUUQ0+yq1eufoAYzFjrQilsrmlw0+XHZvbK4937443Vk/0C0wO3M+dVtb9qcZRZxKEcsRsTp48+HqUcRbkeJbB9bSvwxGDPTOw+fPjX356PFbt6PYrQ7enbKdzXrEcnG7Mdumw2wyGEX8U6T4yfuH4l8HI2rR/YnPRbxR5vci3o3ueKfyi3Ey4kOn9bFRiyL+vxz/02vp/cHyetC7rpz9SvNLM5dn+8r2riuP/P3hQdrj95NGFPGD6oq/lv7Nf9cAAAAAAAAAAAAAAAAAe0gRvxopXvngUKrmB9+YUzw1c6V5oX1xujutrzf3rzdnen19fb2ZutnKOZFzKedyzpWcqzmjyPVztspsrK9PFKk68lLevpxzJedqzhjI9XO2ck7kXMq5nHMl52rOqOX6OVs5J3Iu5VzOuZJzNWfskbl7AAAAAAAAAAAAAAAAAADA46Wo/knxza+tpfXBan3pgd6+FeuBPvZ+HgAA//8bKfXU")
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x810, 0x0)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00')

1.835750865s ago: executing program 1 (id=1703):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}}, 0x4000040)
r0 = syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x3218255, &(0x7f0000000040), 0x0, 0x965a, &(0x7f0000012c40)="$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")
ioctl$FS_IOC_GETFSMAP(r0, 0xc080583d, &(0x7f0000000340)=ANY=[])

1.514058863s ago: executing program 4 (id=1709):
syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x80000d, &(0x7f0000000540)=ANY=[], 0xfa, 0x155, &(0x7f00000001c0)="$eJzskT9LQlEYxp/jvV41Mg0MKiiChsQwb1dsa9BIcrADhUtToCcSNEUh3LLmhj6AS0uTOERjQ9FkeSHsMzS6BUGLce4faW1/f8u953mf87zvOWd324wiDCiw2alV6w3RbIrSygHPZw/vHx5npO5THQOq9YY0l+zVUxo4lV8VGF3a8kvQA6AiNoq1SkkDkAaiADIyo+yFDts7JbWIHyflith0tOgqPp1WwnA1DdDmYPmSjraoApmQrek/wPgWWJN5s5jkfQFodbzO3PHY3ZKSdk/R6qz3uq/7g34uHlsW10Z2wbqBgpDzMln/SPTj74led2gOxhc8z82kYWwldUXXU0P+Nsil2jdQ96bPgSMGBP7kaTKjAFwxoMOArpU3enZ7c3/IFwkAnrMwwGSFBWXP9jevuu+gWJXi8byXudsmPwRBEARBEARBEATxX34DAAD//4EIV14=")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1.295122419s ago: executing program 0 (id=1713):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000100)={[{@dir_resv_level={'dir_resv_level', 0x3d, 0x402}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@noacl}, {@journal_async_commit}, {@coherency_full}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0x3}}, {@acl}]}, 0xfd, 0x4421, &(0x7f0000004480)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000021300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d811, 0x0, 0x1, 0x0, &(0x7f0000000140))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
lseek(r0, 0x10001, 0x0)

1.294331268s ago: executing program 4 (id=1714):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@RTM_DELMDB={0x38, 0x54, 0x93d, 0xfff, 0x25dfdbfe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x3, 0x2, {@ip4=@dev={0xac, 0x14, 0x14, 0xf}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)

1.098644503s ago: executing program 4 (id=1715):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff, 0x7, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0x8, 0x715, 0x8000000000000000, 0x0, 0x3, 0x800, 0x20000}, 0x0, 0x0)

1.098425373s ago: executing program 2 (id=1716):
r0 = socket(0x2b, 0x1, 0x0)
listen(r0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xfb, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x8, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x2, 0x57, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x2, 0x6, 0x3, 0x80092a5, 0x4, 0x81, 0x9, 0x7e, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x3fe, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xb, 0x1, 0x7, 0x9, 0x2, 0x7f, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4000006, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x10005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x100006, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x400007, 0x5, 0x1003, 0x40000101, 0x1ff, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x86, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2c, 0xc, 0x7, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.080568924s ago: executing program 3 (id=1717):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000})
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08006, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0xfe, 0x687, &(0x7f0000000fc0)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000)

1.010920306s ago: executing program 2 (id=1718):
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x80000)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x3}}]}})

862.790419ms ago: executing program 3 (id=1719):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10, 0x0)

861.769689ms ago: executing program 2 (id=1720):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000001f4c0)={0x30, r1, 0x1, 0x74bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40488d0)

782.560201ms ago: executing program 2 (id=1721):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6d, 0xfffffffffffffb01, 0x2, 0x9e, 0x6, 0x7}}, @TCA_NETEM_RATE={0x11, 0xd, {0x0, 0x0, 0x0, 0x1}}, @TCA_NETEM_CORRUPT={0xc, 0x2, {0x1}}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x4040)

657.469604ms ago: executing program 3 (id=1722):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000550)='1', 0x1)

598.962865ms ago: executing program 2 (id=1723):
syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x4810, &(0x7f00000001c0)=ANY=[], 0x14, 0x693, &(0x7f0000000880)="$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")
truncate(&(0x7f0000000940)='./file1\x00', 0xcba1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109842, 0x184)
write$P9_RREADDIR(r0, &(0x7f0000000040)={0xb, 0x29, 0x2, {0x5}}, 0xb)

515.894978ms ago: executing program 3 (id=1724):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38)

398.56247ms ago: executing program 3 (id=1725):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)=',123', 0x4)

385.643521ms ago: executing program 1 (id=1726):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

134.61µs ago: executing program 2 (id=1727):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x132a})
write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x80, 0x1, 0x0, 0xfffffffd})

0s ago: executing program 3 (id=1728):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000800), 0xfa, 0x4df, &(0x7f0000000280)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x400, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20004000)

kernel console output (not intermixed with test programs):

device loop0): ext4_validate_block_bitmap:438: comm syz.0.600: bg 0: block 248: padding at end of block bitmap is not set
[  116.428662][ T5753] loop3: detected capacity change from 0 to 128
[  116.465927][ T5730] Quota error (device loop0): write_blk: dquota write failed
[  116.479921][ T5730] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  116.494575][ T5730] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.600: Failed to acquire dquot type 1
[  116.540663][ T5730] EXT4-fs (loop0): 1 truncate cleaned up
[  116.546562][ T5730] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback.
[  116.570610][ T5753] FAT-fs (loop3): Directory bread(block 32) failed
[  116.577205][ T5753] FAT-fs (loop3): Directory bread(block 33) failed
[  116.632020][ T5753] FAT-fs (loop3): Directory bread(block 34) failed
[  116.683719][ T5753] FAT-fs (loop3): Directory bread(block 35) failed
[  116.710986][ T5753] FAT-fs (loop3): Directory bread(block 36) failed
[  116.717614][ T5753] FAT-fs (loop3): Directory bread(block 37) failed
[  116.770336][ T5753] FAT-fs (loop3): Directory bread(block 38) failed
[  116.790278][ T5753] FAT-fs (loop3): Directory bread(block 39) failed
[  116.807272][ T5753] FAT-fs (loop3): Directory bread(block 40) failed
[  116.826679][ T5753] FAT-fs (loop3): Directory bread(block 41) failed
[  117.134742][ T5753] attempt to access beyond end of device
[  117.134742][ T5753] loop3: rw=524288, want=4112, limit=128
[  117.162337][ T5753] attempt to access beyond end of device
[  117.162337][ T5753] loop3: rw=0, want=4112, limit=128
[  117.180662][   T26] audit: type=1800 audit(1788196706.364:16): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.612" name="file1" dev="loop3" ino=1048626 res=0 errno=0
[  117.200576][    C0] vkms_vblank_simulate: vblank timer overrun
[  117.221365][ T5753] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  117.235881][ T5753] FAT-fs (loop3): Filesystem has been set read-only
[  117.308597][ T5758] loop1: detected capacity change from 0 to 32768
[  117.376549][ T5758] JBD2: Ignoring recovery information on journal
[  117.383381][ T4236] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  117.460558][ T5758] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  117.494861][ T5777] netlink: 220 bytes leftover after parsing attributes in process `syz.2.622'.
[  117.638117][ T4236] usb 1-1: Using ep0 maxpacket: 8
[  117.750959][ T5792] loop3: detected capacity change from 0 to 24
[  117.758258][ T4236] usb 1-1: config 3 has an invalid interface number: 45 but max is 0
[  117.766426][ T4236] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  117.788765][ T5792] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  117.796051][ T4236] usb 1-1: config 3 has no interface number 0
[  117.808817][ T4188] ocfs2: Unmounting device (7,1) on (node local)
[  117.827571][ T5792] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  117.837719][ T4236] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  117.870033][ T4236] usb 1-1: config 3 interface 45 has no altsetting 0
[  117.883434][ T5795] loop4: detected capacity change from 0 to 512
[  117.956058][ T5795] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  117.986482][ T5795] EXT4-fs (loop4): inline encryption not supported
[  118.009956][ T5795] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  118.056758][ T4236] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  118.070784][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.079246][ T4236] usb 1-1: Product: syz
[  118.083565][ T4236] usb 1-1: Manufacturer: syz
[  118.088275][ T4236] usb 1-1: SerialNumber: syz
[  118.097632][ T5795] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  118.114945][ T5795] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.629: bg 0: block 248: padding at end of block bitmap is not set
[  118.139332][ T5795] Quota error (device loop4): write_blk: dquota write failed
[  118.146950][ T5795] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  118.159126][ T5795] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.629: Failed to acquire dquot type 1
[  118.176835][ T5795] EXT4-fs (loop4): 1 truncate cleaned up
[  118.183546][ T5795] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback.
[  118.302263][ T5806] loop1: detected capacity change from 0 to 64
[  118.455777][ T4188] hfs: node 4:3 still has 1 user(s)!
[  118.553053][ T4236] usb 1-1: USB disconnect, device number 6
[  118.672121][ T5818] loop1: detected capacity change from 0 to 128
[  118.693237][ T5822] loop4: detected capacity change from 0 to 512
[  118.762856][ T5818] FAT-fs (loop1): Directory bread(block 32) failed
[  118.815940][ T5822] EXT4-fs (loop4): Invalid journal IO priority (must be 0-7)
[  118.828429][ T4701] udevd[4701]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  118.845411][ T5818] FAT-fs (loop1): Directory bread(block 33) failed
[  118.876331][ T5818] FAT-fs (loop1): Directory bread(block 34) failed
[  118.907387][ T5818] FAT-fs (loop1): Directory bread(block 35) failed
[  118.936842][ T5818] FAT-fs (loop1): Directory bread(block 36) failed
[  118.943813][ T5818] FAT-fs (loop1): Directory bread(block 37) failed
[  118.961265][ T5822] loop4: detected capacity change from 0 to 256
[  118.978150][ T5818] FAT-fs (loop1): Directory bread(block 38) failed
[  118.984790][ T5818] FAT-fs (loop1): Directory bread(block 39) failed
[  119.008698][ T5822] exfat: Deprecated parameter 'utf8'
[  119.014494][ T5822] exfat: Deprecated parameter 'namecase'
[  119.014556][ T5818] FAT-fs (loop1): Directory bread(block 40) failed
[  119.037371][ T5822] exfat: Deprecated parameter 'namecase'
[  119.043379][ T5818] FAT-fs (loop1): Directory bread(block 41) failed
[  119.077789][ T5832] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  119.097536][ T5832] EXT4-fs (loop3): inline encryption not supported
[  119.126885][ T5832] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  119.137540][ T5822] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  119.276979][ T5832] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  119.394322][ T5818] attempt to access beyond end of device
[  119.394322][ T5818] loop1: rw=524288, want=4112, limit=128
[  119.405928][ T5818] attempt to access beyond end of device
[  119.405928][ T5818] loop1: rw=0, want=4112, limit=128
[  119.428627][   T26] audit: type=1800 audit(1788196708.614:17): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.633" name="file1" dev="loop1" ino=1048628 res=0 errno=0
[  119.448491][    C0] vkms_vblank_simulate: vblank timer overrun
[  119.465189][ T5832] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.645: bg 0: block 248: padding at end of block bitmap is not set
[  119.484889][ T5818] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  119.515110][ T5832] Quota error (device loop3): write_blk: dquota write failed
[  119.529624][ T5818] FAT-fs (loop1): Filesystem has been set read-only
[  119.540522][ T5841] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  119.552670][ T5832] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  119.563950][ T5841] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  119.583761][ T5832] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.645: Failed to acquire dquot type 1
[  119.620072][ T5832] EXT4-fs (loop3): 1 truncate cleaned up
[  119.625790][ T5832] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback.
[  119.903657][ T5828] JBD2: Ignoring recovery information on journal
[  120.076255][ T5828] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  120.299981][   T26] audit: type=1807 audit(1788196709.484:18): action=measure func=F res=0
[  120.300657][ T5867] ima: policy update failed
[  120.329044][   T26] audit: type=1802 audit(1788196709.484:19): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.664" res=0 errno=0
[  120.357567][ T4452] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  120.427640][ T4185] ocfs2: Unmounting device (7,2) on (node local)
[  120.599464][ T5880] bridge_slave_0: default FDB implementation only supports local addresses
[  120.668225][ T4452] usb 5-1: Using ep0 maxpacket: 8
[  120.808161][ T4452] usb 5-1: config 3 has an invalid interface number: 45 but max is 0
[  120.816524][ T4452] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  120.858469][ T4452] usb 5-1: config 3 has no interface number 0
[  120.870762][ T4452] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  120.892527][ T4230] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  120.894520][ T4452] usb 5-1: config 3 interface 45 has no altsetting 0
[  120.995615][ T5894] set_capacity_and_notify: 5 callbacks suppressed
[  120.995631][ T5894] loop1: detected capacity change from 0 to 256
[  121.118063][ T4452] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  121.127160][ T4452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.140391][ T4452] usb 5-1: Product: syz
[  121.144624][ T4452] usb 5-1: Manufacturer: syz
[  121.149438][ T4452] usb 5-1: SerialNumber: syz
[  121.150091][ T4230] usb 4-1: Using ep0 maxpacket: 32
[  121.220778][ T5897] nvmet: can only link subsystems into the subsystems dir.!
[  121.234459][ T5895] ima: policy update failed
[  121.289421][ T4230] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  121.311925][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.337989][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  121.364454][ T4230] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  121.384117][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.395162][ T4230] usb 4-1: config 0 descriptor??
[  121.511432][ T5900] loop0: detected capacity change from 0 to 32768
[  121.590961][ T4452] usb 5-1: USB disconnect, device number 6
[  121.629562][ T5900] JBD2: Ignoring recovery information on journal
[  121.682290][ T5900] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  121.784481][ T4184] ocfs2: Unmounting device (7,0) on (node local)
[  121.818771][ T4702] udevd[4702]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  121.879802][ T4230] elecom 0003:056E:011C.000A: item fetching failed at offset 5/6
[  121.889698][ T5912] loop2: detected capacity change from 0 to 128
[  121.915482][ T4230] elecom: probe of 0003:056E:011C.000A failed with error -22
[  121.945113][ T5912] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  122.077713][ T5917] loop4: detected capacity change from 0 to 64
[  122.114912][ T4173] usb 4-1: USB disconnect, device number 5
[  122.123733][ T5912] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  122.222648][ T5921] loop1: detected capacity change from 0 to 512
[  122.260066][ T4187] hfs: node 4:3 still has 1 user(s)!
[  122.269612][ T5921] EXT4-fs (loop1): Invalid journal IO priority (must be 0-7)
[  122.341679][ T5923] loop2: detected capacity change from 0 to 256
[  122.390504][ T5927] bridge_slave_0: default FDB implementation only supports local addresses
[  122.425054][ T5921] loop1: detected capacity change from 0 to 256
[  122.483240][ T4230] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  122.498867][ T5921] exfat: Deprecated parameter 'utf8'
[  122.504283][ T5921] exfat: Deprecated parameter 'namecase'
[  122.528415][ T5921] exfat: Deprecated parameter 'namecase'
[  122.543925][ T5921] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  122.578668][ T5929] nvmet: can only link subsystems into the subsystems dir.!
[  122.904408][ T5931] loop1: detected capacity change from 0 to 32768
[  122.936449][ T5931] XFS (loop1): Mounting V5 Filesystem
[  123.008047][ T4230] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  123.017353][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.025491][ T4230] usb 1-1: Product: syz
[  123.030176][ T4230] usb 1-1: Manufacturer: syz
[  123.034828][ T4230] usb 1-1: SerialNumber: syz
[  123.041603][ T4230] usb 1-1: config 0 descriptor??
[  123.084173][ T4230] hub 1-1:0.0: bad descriptor, ignoring hub
[  123.090538][ T5931] XFS (loop1): Ending clean mount
[  123.101432][ T4230] hub: probe of 1-1:0.0 failed with error -5
[  123.236265][ T4188] XFS (loop1): Unmounting Filesystem
[  123.300826][ T4230] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  123.321819][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  123.380858][ T4230] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  123.392050][ T4230] usb 1-1: media controller created
[  123.416105][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  123.533530][ T4230] DVB: Unable to find symbol dib7000p_attach()
[  123.550067][ T4230] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  123.613290][ T5963] loop3: detected capacity change from 0 to 256
[  123.685773][ T5965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.705'.
[  123.709519][ T4230] rc_core: IR keymap rc-dib0700-rc5 not found
[  123.715997][ T4230] Registered IR keymap rc-empty
[  123.737679][ T4230] dvb-usb: could not initialize remote control.
[  123.775622][ T4230] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  123.825049][ T4230] usb 1-1: USB disconnect, device number 7
[  123.906876][ T5943] loop2: detected capacity change from 0 to 32768
[  123.976462][ T4230] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  124.583373][ T5997] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.605882][ T5992] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean
[  124.623005][ T4173] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  124.895434][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'.
[  125.018219][ T4173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  125.050377][ T4173] usb 5-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.00
[  125.075588][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.086166][ T6009] __ntfs_error: 4 callbacks suppressed
[  125.086180][ T6009] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  125.117336][ T4173] usb 5-1: config 0 descriptor??
[  125.138371][ T5986] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  125.169215][ T4173] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12
[  125.237568][  T155] Bluetooth: hci5: Frame reassembly failed (-84)
[  125.268774][ T6009] ntfs: volume version 3.1.
[  125.389010][ T3541] bcm5974 5-1:0.0: could not read from device
[  125.399667][ T4173] usb 5-1: USB disconnect, device number 7
[  125.457663][ T6025] Unsupported NM flag settings (240)
[  125.496542][ T6025] Unsupported NM flag settings (240)
[  125.764255][ T6039] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  126.166109][ T6031] set_capacity_and_notify: 4 callbacks suppressed
[  126.166126][ T6031] loop1: detected capacity change from 0 to 32768
[  126.238039][ T4230] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  126.270170][ T6031] XFS (loop1): Mounting V5 Filesystem
[  126.295744][ T6063] loop4: detected capacity change from 0 to 2048
[  126.339986][ T6063] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.400268][ T6031] XFS (loop1): Ending clean mount
[  126.428920][ T6031] XFS (loop1): Quotacheck needed: Please wait.
[  126.438637][ T4192] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  126.478143][ T4230] usb 1-1: Using ep0 maxpacket: 16
[  126.485797][ T6031] XFS (loop1): Quotacheck: Done.
[  126.534493][ T4188] XFS (loop1): Unmounting Filesystem
[  126.598201][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.615626][ T4230] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  126.634519][ T4230] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[  126.656062][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.666454][ T4230] usb 1-1: config 0 descriptor??
[  126.679248][ T4192] usb 4-1: Using ep0 maxpacket: 8
[  126.838071][ T4173] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  126.838331][ T4192] usb 4-1: unable to get BOS descriptor or descriptor too short
[  126.928071][ T4192] usb 4-1: config 1 has an invalid interface number: 211 but max is 0
[  126.936365][ T4192] usb 4-1: config 1 has no interface number 0
[  126.942908][ T4192] usb 4-1: config 1 interface 211 has no altsetting 0
[  127.088008][ T4173] usb 5-1: Using ep0 maxpacket: 32
[  127.108118][ T4192] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54
[  127.117284][ T4192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.125691][ T4192] usb 4-1: Product: syz
[  127.129968][ T4192] usb 4-1: Manufacturer: syz
[  127.134624][ T4192] usb 4-1: SerialNumber: syz
[  127.160827][ T4230] hid-generic 0003:0458:5005.000B: unknown main item tag 0xd
[  127.170338][ T4230] hid-generic 0003:0458:5005.000B: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.0-1/input0
[  127.218182][ T4173] usb 5-1: config 2 has an invalid interface number: 88 but max is 0
[  127.231360][ T4173] usb 5-1: config 2 has no interface number 0
[  127.237758][ T4173] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  127.254105][ T4173] usb 5-1: config 2 interface 88 has no altsetting 0
[  127.308366][ T4201] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  127.370524][ T4274] usb 1-1: USB disconnect, device number 8
[  127.435375][ T6074] loop2: detected capacity change from 0 to 16
[  127.462097][ T4192] usb 4-1: USB disconnect, device number 6
[  127.473842][ T6074] erofs: (device loop2): mounted with root inode @ nid 36.
[  127.488085][ T4173] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  127.507572][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  127.516477][ T4173] usb 5-1: Product: syz
[  127.521233][ T4173] usb 5-1: Manufacturer: syz
[  127.525998][ T4173] usb 5-1: SerialNumber: syz
[  127.568332][ T6067] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  127.602757][ T6076] loop1: detected capacity change from 0 to 1024
[  127.624734][ T6078] netlink: 'syz.2.754': attribute type 4 has an invalid length.
[  127.648173][ T6078] netlink: 17 bytes leftover after parsing attributes in process `syz.2.754'.
[  127.655444][ T6076] hfsplus: small file entry
[  127.784671][ T6081] loop1: detected capacity change from 0 to 164
[  127.813974][ T6067] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  127.825567][ T6081] Unsupported NM flag settings (240)
[  127.831885][ T6081] Unsupported NM flag settings (240)
[  128.059871][ T6091] loop0: detected capacity change from 0 to 4096
[  128.072414][ T6091] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  128.192489][ T6091] ntfs: volume version 3.1.
[  128.217059][ T6089] loop3: detected capacity change from 0 to 32768
[  128.292458][ T6089] (syz.3.760,6089,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  128.306456][ T6089] (syz.3.760,6089,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  128.337477][ T6089] JBD2: Ignoring recovery information on journal
[  128.348299][ T4173] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  128.387956][ T4230] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  128.396407][ T6089] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  128.409120][ T4173] asix: probe of 5-1:2.88 failed with error -71
[  128.418840][ T6089] (syz.3.760,6089,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4d558a87, computed 0x1734b5e7. Applying ECC.
[  128.432757][ T6089] (syz.3.760,6089,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4d558a87, computed 0x7466ecf
[  128.445422][ T6089] (syz.3.760,6089,0):ocfs2_read_virt_blocks:1021 ERROR: status = -5
[  128.453532][ T6089] (syz.3.760,6089,0):ocfs2_read_quota_block:150 ERROR: status = -5
[  128.461706][ T6089] (syz.3.760,6089,0):ocfs2_load_local_quota_bitmaps:269 ERROR: status = -5
[  128.469095][ T4173] usb 5-1: USB disconnect, device number 8
[  128.470654][ T6089] (syz.3.760,6089,0):ocfs2_local_read_info:758 ERROR: status = -5
[  128.484303][ T6089] (syz.3.760,6089,0):ocfs2_enable_quotas:940 ERROR: status = -5
[  128.492083][ T6089] (syz.3.760,6089,0):ocfs2_fill_super:1144 ERROR: status = -5
[  128.520724][ T6089] ocfs2: Unmounting device (7,3) on (node local)
[  128.749658][ T6107] netlink: 256 bytes leftover after parsing attributes in process `syz.3.769'.
[  128.818289][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  128.841676][ T4230] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.00
[  128.851894][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.869922][ T4230] usb 2-1: config 0 descriptor??
[  128.892553][ T6085] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  128.948392][ T4230] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13
[  128.959303][ T4452] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  128.981270][ T6115] loop4: detected capacity change from 0 to 256
[  129.043965][ T6115] FAT-fs (loop4): Directory bread(block 64) failed
[  129.050798][ T6115] FAT-fs (loop4): Directory bread(block 65) failed
[  129.057425][ T6115] FAT-fs (loop4): Directory bread(block 66) failed
[  129.070394][ T6115] FAT-fs (loop4): Directory bread(block 67) failed
[  129.077043][ T6115] FAT-fs (loop4): Directory bread(block 68) failed
[  129.084064][ T4192] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  129.097355][ T6115] FAT-fs (loop4): Directory bread(block 69) failed
[  129.105373][ T6115] FAT-fs (loop4): Directory bread(block 70) failed
[  129.112848][ T6115] FAT-fs (loop4): Directory bread(block 71) failed
[  129.119786][ T6115] FAT-fs (loop4): Directory bread(block 72) failed
[  129.126557][ T6115] FAT-fs (loop4): Directory bread(block 73) failed
[  129.158107][ T3541] bcm5974 2-1:0.0: could not read from device
[  129.171788][ T4230] usb 2-1: USB disconnect, device number 6
[  129.188014][ T4236] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  129.328027][ T4192] usb 1-1: Using ep0 maxpacket: 16
[  129.388059][ T4452] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.398381][ T4452] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  129.411471][ T4452] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[  129.428089][ T4452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.549844][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.561001][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.571105][ T4236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  129.584247][ T4236] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  129.593781][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.604374][ T4236] usb 4-1: config 0 descriptor??
[  129.609686][ T4192] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  129.618981][ T4192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.626968][ T4192] usb 1-1: Product: syz
[  129.631233][ T4192] usb 1-1: Manufacturer: syz
[  129.635845][ T4192] usb 1-1: SerialNumber: syz
[  129.905472][ T4230] usb 3-1: USB disconnect, device number 8
[  130.053193][ T6119] loop1: detected capacity change from 0 to 32768
[  130.103251][ T4236] kye 0003:0458:5019.000C: ignoring exceeding usage max
[  130.153804][ T4236] kye 0003:0458:5019.000C: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.3-1/input0
[  130.181269][ T4236] kye 0003:0458:5019.000C: tablet-enabling feature report not found
[  130.195345][ T4236] kye 0003:0458:5019.000C: tablet enabling failed
[  130.358355][ T6130] loop4: detected capacity change from 0 to 4096
[  130.369812][ T4173] usb 4-1: USB disconnect, device number 7
[  130.400815][ T4192] snd-usb-audio: probe of 1-1:222.0 failed with error -71
[  130.434038][ T4192] usb 1-1: USB disconnect, device number 9
[  130.488004][ T4452] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  130.496243][ T6130] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  130.559631][ T6130] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  130.651708][ T6130] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  130.665518][ T6130] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  130.685501][ T4702] udevd[4702]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  130.715302][ T6133] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  130.739679][ T6130] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  130.744273][ T6133] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  130.801250][ T6130] ntfs: volume version 3.1.
[  130.826886][ T6130] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  130.849441][ T6133] ntfs: volume version 3.1.
[  130.854400][ T6130] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  130.918650][ T4452] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  130.968344][ T4452] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  131.000540][ T4452] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  131.032039][ T6130] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  131.046898][ T4452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.064886][ T4452] usb 2-1: config 0 descriptor??
[  131.260531][ T4236] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  131.384521][ T6143] set_capacity_and_notify: 1 callbacks suppressed
[  131.384539][ T6143] loop4: detected capacity change from 0 to 4096
[  131.462559][ T6143] ntfs: volume version 3.1.
[  131.534503][ T4236] usb 1-1: Using ep0 maxpacket: 8
[  131.557707][ T4452] hid-multitouch 0003:1FD2:6007.000D: unbalanced delimiter at end of report description
[  131.558724][ T4192] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  131.578546][ T4452] hid-multitouch: probe of 0003:1FD2:6007.000D failed with error -22
[  131.698197][ T4236] usb 1-1: unable to get BOS descriptor or descriptor too short
[  131.782590][ T4236] usb 1-1: config 1 has an invalid interface number: 211 but max is 0
[  131.798674][ T4236] usb 1-1: config 1 has no interface number 0
[  131.806743][ T4236] usb 1-1: config 1 interface 211 has no altsetting 0
[  131.823307][ T4230] usb 2-1: USB disconnect, device number 7
[  131.848051][ T4192] usb 3-1: Using ep0 maxpacket: 32
[  131.968078][ T4192] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  131.976610][ T4192] usb 3-1: config 2 has no interface number 0
[  131.986714][ T4236] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54
[  132.001186][ T4192] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  132.012912][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.025898][ T4192] usb 3-1: config 2 interface 88 has no altsetting 0
[  132.035538][ T4236] usb 1-1: Product: syz
[  132.045099][ T4236] usb 1-1: Manufacturer: syz
[  132.051558][ T4236] usb 1-1: SerialNumber: syz
[  132.208234][ T4192] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  132.223236][ T4192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  132.231962][ T4192] usb 3-1: Product: syz
[  132.236155][ T4192] usb 3-1: Manufacturer: syz
[  132.246919][ T4192] usb 3-1: SerialNumber: syz
[  132.298284][ T6141] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  132.391455][ T4236] usb 1-1: USB disconnect, device number 10
[  132.525623][ T6141] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  132.750272][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  132.756768][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  132.979192][ T4192] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  132.993879][ T4192] asix: probe of 3-1:2.88 failed with error -71
[  133.005166][ T4192] usb 3-1: USB disconnect, device number 9
[  133.113076][ T6163] loop4: detected capacity change from 0 to 4096
[  133.148234][ T4201] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  133.178155][ T4231] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  133.217949][ T6164] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  133.240725][ T6163] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[  133.258118][ T4452] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  133.527930][ T4452] usb 2-1: Using ep0 maxpacket: 16
[  133.548276][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  133.574427][ T4231] usb 1-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.00
[  133.613950][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.630489][ T4231] usb 1-1: config 0 descriptor??
[  133.648284][ T6153] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  133.648314][ T4452] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.671525][ T4231] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14
[  133.676559][ T4452] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  133.733788][ T4452] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[  133.757975][ T4452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.784715][ T4452] usb 2-1: config 0 descriptor??
[  133.821937][ T6184] loop3: detected capacity change from 0 to 2048
[  133.842041][ T6184] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.888033][ T3541] bcm5974 1-1:0.0: could not read from device
[  133.907105][ T4231] usb 1-1: USB disconnect, device number 11
[  133.934343][ T3541] bcm5974 1-1:0.0: could not read from device
[  134.252408][ T6188] loop4: detected capacity change from 0 to 32768
[  134.303083][ T4452] hid-generic 0003:0458:5005.000E: unknown main item tag 0xd
[  134.314382][ T6188] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  134.323296][ T6188] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  134.330990][ T4452] hid-generic 0003:0458:5005.000E: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0
[  134.355005][ T6188] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error
[  134.355005][ T6188]   inode = 1 19
[  134.355005][ T6188]   function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[  134.373839][ T6188] gfs2: fsid=syz:syz.s: about to withdraw this file system
[  134.381117][ T6188] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount.
[  134.389984][ T6188] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0
[  134.396834][ T6188] gfs2: fsid=syz:syz.s: File system withdrawn
[  134.403027][ T6188] CPU: 1 PID: 6188 Comm: syz.4.805 Not tainted syzkaller #0
[  134.410349][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.420439][ T6188] Call Trace:
[  134.423756][ T6188]  <TASK>
[  134.426726][ T6188]  dump_stack_lvl+0x188/0x250
[  134.431832][ T6188]  ? show_regs_print_info+0x20/0x20
[  134.437089][ T6188]  ? load_image+0x410/0x410
[  134.441656][ T6188]  gfs2_withdraw+0xb9a/0x14e0
[  134.446377][ T6188]  ? gfs2_lm+0x240/0x240
[  134.450655][ T6188]  ? _raw_spin_unlock+0x24/0x40
[  134.455532][ T6188]  ? gfs2_glock_nq+0xcaa/0x1510
[  134.460431][ T6188]  ? gfs2_consist_inode_i+0xc0/0xe0
[  134.465785][ T6188]  gfs2_jdesc_check+0x137/0x290
[  134.470785][ T6188]  check_journal_clean+0x186/0x360
[  134.475946][ T6188]  ? gfs2_trans_remove_revoke+0x360/0x360
[  134.481706][ T6188]  ? check_journal_clean+0x142/0x360
[  134.487028][ T6188]  ? __rwlock_init+0x140/0x140
[  134.491852][ T6188]  ? do_raw_spin_unlock+0x11d/0x230
[  134.497091][ T6188]  ? _raw_spin_unlock+0x24/0x40
[  134.501975][ T6188]  ? gfs2_jdesc_find+0xa7/0xc0
[  134.506783][ T6188]  init_journal+0x182e/0x22d0
[  134.511521][ T6188]  ? end_bio_io_page+0x100/0x100
[  134.516493][ T6188]  ? vsnprintf+0x1b22/0x1c20
[  134.521137][ T6188]  ? snprintf+0xe5/0x140
[  134.525415][ T6188]  ? init_journal+0x749/0x22d0
[  134.530211][ T6188]  ? vscnprintf+0x80/0x80
[  134.534599][ T6188]  ? gfs2_glock_nq_num+0x170/0x1b0
[  134.539752][ T6188]  init_inodes+0xdb/0x320
[  134.544128][ T6188]  gfs2_fill_super+0x1671/0x1ea0
[  134.549114][ T6188]  ? gfs2_reconfigure+0xd80/0xd80
[  134.554178][ T6188]  ? gfs2_glock_nq_num+0x7e/0x1b0
[  134.559256][ T6188]  ? sb_set_blocksize+0xa5/0xe0
[  134.564179][ T6188]  get_tree_bdev+0x3e6/0x610
[  134.568990][ T6188]  ? gfs2_reconfigure+0xd80/0xd80
[  134.574068][ T6188]  gfs2_get_tree+0x4d/0x1e0
[  134.578606][ T6188]  vfs_get_tree+0x88/0x270
[  134.583071][ T6188]  do_new_mount+0x247/0xa40
[  134.587624][ T6188]  __se_sys_mount+0x2e3/0x3d0
[  134.592343][ T6188]  ? __x64_sys_mount+0xc0/0xc0
[  134.597152][ T6188]  ? lockdep_hardirqs_on+0x94/0x140
[  134.602383][ T6188]  ? __x64_sys_mount+0x1c/0xc0
[  134.607224][ T6188]  do_syscall_64+0x4c/0xa0
[  134.611673][ T6188]  ? clear_bhb_loop+0x30/0x80
[  134.616389][ T6188]  ? clear_bhb_loop+0x30/0x80
[  134.621107][ T6188]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  134.627062][ T6188] RIP: 0033:0x7fac90e0c3ca
[  134.631513][ T6188] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.651243][ T6188] RSP: 002b:00007fac8f062e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  134.659717][ T6188] RAX: ffffffffffffffda RBX: 00007fac8f062ee0 RCX: 00007fac90e0c3ca
[  134.667729][ T6188] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fac8f062ea0
[  134.675843][ T6188] RBP: 0000200000000400 R08: 00007fac8f062ee0 R09: 0000000000210401
[  134.683852][ T6188] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500
[  134.691855][ T6188] R13: 00007fac8f062ea0 R14: 00000000000125d8 R15: 0000200000000240
[  134.699864][ T6188]  </TASK>
[  134.704684][ T6188] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount.
[  134.750519][ T4230] usb 2-1: USB disconnect, device number 8
[  134.769578][ T6198] netlink: 'syz.3.812': attribute type 4 has an invalid length.
[  134.801883][ T6198] netlink: 17 bytes leftover after parsing attributes in process `syz.3.812'.
[  134.946991][ T6207] netlink: 256 bytes leftover after parsing attributes in process `syz.0.816'.
[  135.027804][ T6199] fido_id[6199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  135.046097][ T6206] loop2: detected capacity change from 0 to 4096
[  135.201436][ T6206] ntfs: volume version 3.1.
[  135.279409][ T6219] loop0: detected capacity change from 0 to 1024
[  135.363606][ T4274] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  135.390355][ T6219] hfsplus: small file entry
[  135.505088][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.826'.
[  135.667910][ T4274] usb 5-1: Using ep0 maxpacket: 16
[  135.804186][ T6244] netlink: 'syz.0.831': attribute type 49 has an invalid length.
[  135.885988][ T6248] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  135.978255][ T4274] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  135.987486][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.028225][ T4274] usb 5-1: Product: syz
[  136.032461][ T4274] usb 5-1: Manufacturer: syz
[  136.039194][ T6254] __ntfs_error: 25 callbacks suppressed
[  136.039210][ T6254] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  136.058039][ T4274] usb 5-1: SerialNumber: syz
[  136.084346][ T6260] netlink: 436 bytes leftover after parsing attributes in process `syz.3.841'.
[  136.113531][ T6254] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[  136.126741][ T6260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.841'.
[  136.136198][ T6254] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume.
[  136.458047][ T6279] netlink: 'syz.1.850': attribute type 49 has an invalid length.
[  136.617793][ T6287] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  136.635999][ T6289] netlink: 436 bytes leftover after parsing attributes in process `syz.0.855'.
[  136.646613][ T6289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.855'.
[  136.668207][ T4231] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  136.825355][ T4274] snd-usb-audio: probe of 5-1:222.0 failed with error -71
[  136.849180][ T4274] usb 5-1: USB disconnect, device number 9
[  136.918143][ T4231] usb 3-1: Using ep0 maxpacket: 8
[  137.038273][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.069178][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  137.110845][ T4701] udevd[4701]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  137.136695][ T4231] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  137.156401][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.183062][ T4231] usb 3-1: config 0 descriptor??
[  137.508235][ T4274] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  137.668147][ T4452] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  137.682720][ T4231] input: HID 1b1c:1b34 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B1C:1B34.000F/input/input15
[  137.728092][ T4231] corsair 0003:1B1C:1B34.000F: input,hidraw0: USB HID v0.05 Joystick [HID 1b1c:1b34] on usb-dummy_hcd.2-1/input0
[  137.773392][ T6330] loop0: detected capacity change from 0 to 2048
[  137.788380][ T4274] usb 4-1: Using ep0 maxpacket: 16
[  137.856202][ T6330] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.933486][ T4236] usb 3-1: USB disconnect, device number 10
[  137.953050][ T4274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.008142][ T4274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  138.033352][ T4274] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[  138.043245][ T4274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.076943][ T6336] fido_id[6336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  138.084579][ T4274] usb 4-1: config 0 descriptor??
[  138.097391][ T6338] loop4: detected capacity change from 0 to 512
[  138.118710][ T4452] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.136070][ T4452] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.148139][ T4452] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.186006][ T6340] loop0: detected capacity change from 0 to 16
[  138.191763][ T4452] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  138.212379][ T6338] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  138.215071][ T4452] usb 2-1: New USB device found, idVendor=04e7, idProduct=0050, bcdDevice= 0.00
[  138.229905][ T4452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.241337][ T4452] usb 2-1: config 0 descriptor??
[  138.251238][ T6340] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  138.265474][ T6338] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.877: corrupted in-inode xattr
[  138.281004][ T6338] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.877: couldn't read orphan inode 15 (err -117)
[  138.297237][ T6338] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback.
[  139.295158][ T6351] loop2: detected capacity change from 0 to 131072
[  139.305359][ T4274] hid-generic 0003:0458:5005.0010: unknown main item tag 0xd
[  139.319281][ T4452] input: HID 04e7:0050 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04E7:0050.0011/input/input16
[  139.333687][ T4274] hid-generic 0003:0458:5005.0010: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.3-1/input0
[  139.349340][ T4274] usb 4-1: USB disconnect, device number 8
[  139.368257][ T6351] F2FS-fs (loop2): invalid crc value
[  139.410590][ T4452] hid-accutouch 0003:04E7:0050.0011: input,hidraw0: USB HID v0.00 Joystick [HID 04e7:0050] on usb-dummy_hcd.1-1/input0
[  139.439507][ T6351] F2FS-fs (loop2): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:0, type:0, next_blkoff:0, blkofs:1
[  139.454151][ T6351] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117)
[  139.562365][ T4231] usb 2-1: USB disconnect, device number 9
[  139.709982][ T6360] fido_id[6360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  139.773320][ T6369] netlink: 'syz.3.890': attribute type 1 has an invalid length.
[  139.914960][ T6377] netem: change failed
[  140.022476][ T6381] tmpfs: Too few inodes for current use
[  140.043156][ T6385] loop3: detected capacity change from 0 to 512
[  140.139629][ T6385] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  140.177214][ T6385] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.899: corrupted in-inode xattr
[  140.267631][ T6385] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.899: couldn't read orphan inode 15 (err -117)
[  140.332531][ T6385] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback.
[  140.436706][ T6393] fido_id[6393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  140.640586][ T4230] kernel write not supported for file /uhid (pid: 4230 comm: kworker/0:4)
[  140.756692][ T6419] loop2: detected capacity change from 0 to 512
[  140.847626][ T6423] binder: 6422:6423 ioctl c018620b 200000000040 returned -14
[  140.943079][ T6419] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  140.993681][ T6419] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.120049][ T6419] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.915: invalid size
[  141.153790][ T6441] loop1: detected capacity change from 0 to 1024
[  141.425552][ T6441] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  141.475469][ T6441] hfsplus: filesystem is marked journaled, leaving read-only.
[  141.523158][ T4452] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  141.557253][   T23] kernel write not supported for file /input/event0 (pid: 23 comm: kworker/1:1)
[  141.735304][ T6460] loop0: detected capacity change from 0 to 512
[  141.935542][ T6460] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  141.958183][ T6460] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  141.978236][ T4452] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.017413][ T4452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.081964][ T4452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.120642][ T4452] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  142.134562][ T4452] usb 4-1: New USB device found, idVendor=04e7, idProduct=0050, bcdDevice= 0.00
[  142.144501][ T4452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.159412][ T6478] netem: change failed
[  142.172365][ T4452] usb 4-1: config 0 descriptor??
[  142.265613][   T23] kernel write not supported for file /uhid (pid: 23 comm: kworker/1:1)
[  142.513335][ T6496] loop4: detected capacity change from 0 to 4096
[  142.540151][ T6504] loop2: detected capacity change from 0 to 256
[  142.632798][ T6509] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.647776][ T4452] input: HID 04e7:0050 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04E7:0050.0012/input/input17
[  142.666670][ T6504] FAT-fs (loop2): Directory bread(block 64) failed
[  142.696110][ T6504] FAT-fs (loop2): Directory bread(block 65) failed
[  142.730125][ T4452] hid-accutouch 0003:04E7:0050.0012: input,hidraw0: USB HID v0.00 Joystick [HID 04e7:0050] on usb-dummy_hcd.3-1/input0
[  142.743280][ T6504] FAT-fs (loop2): Directory bread(block 66) failed
[  142.773890][ T6504] FAT-fs (loop2): Directory bread(block 67) failed
[  142.805835][ T6504] FAT-fs (loop2): Directory bread(block 68) failed
[  142.857668][ T6504] FAT-fs (loop2): Directory bread(block 69) failed
[  142.909447][ T6515] netlink: 128 bytes leftover after parsing attributes in process `syz.4.959'.
[  142.921138][ T4452] usb 4-1: USB disconnect, device number 9
[  142.928142][ T6504] FAT-fs (loop2): Directory bread(block 70) failed
[  142.934773][ T6504] FAT-fs (loop2): Directory bread(block 71) failed
[  142.952810][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  142.972412][ T6504] FAT-fs (loop2): Directory bread(block 72) failed
[  143.003636][ T6515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.038438][ T6504] FAT-fs (loop2): Directory bread(block 73) failed
[  143.059437][ T6521] loop1: detected capacity change from 0 to 8
[  143.126843][ T6521] SQUASHFS error: Failed to read block 0x636: -5
[  143.160246][ T6521] SQUASHFS error: Unable to read metadata cache entry [634]
[  143.219191][ T6519] fido_id[6519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  143.577629][ T6541] netlink: 32 bytes leftover after parsing attributes in process `syz.1.970'.
[  143.610827][ T6542] loop3: detected capacity change from 0 to 1024
[  143.645739][ T6538] loop4: detected capacity change from 0 to 4096
[  143.688131][ T4230] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  143.763948][ T6538] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  143.807928][ T6538] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  143.899564][ T6538] ntfs: volume version 3.1.
[  144.068235][ T4230] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  144.097705][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.119999][ T4230] usb 1-1: config 0 descriptor??
[  144.205369][ T6557] loop2: detected capacity change from 0 to 4096
[  144.322751][ T6557] ntfs: volume version 3.1.
[  144.381499][ T4230] [drm] vendor descriptor length:6 data:06 5f 01 02 00 00 00 00 00 00 00
[  144.401436][ T4230] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  144.588307][ T4230] [drm:udl_init] *ERROR* Selecting channel failed
[  144.605072][ T4230] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  144.625212][ T4230] [drm] Initialized udl on minor 2
[  144.658034][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  144.676984][ T4230] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  144.686388][ T4230] usb 1-1: USB disconnect, device number 12
[  144.700298][ T4192] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  144.718487][ T4192] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  144.727765][ T4192] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  144.733078][ T6555] loop1: detected capacity change from 0 to 32768
[  144.943559][ T6562] loop4: detected capacity change from 0 to 1024
[  145.045445][ T6562] EXT4-fs (loop4): Ignoring removed bh option
[  145.060678][ T6562] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  145.186193][ T6562] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none.
[  145.247087][ T6576] loop2: detected capacity change from 0 to 256
[  145.428002][ T4230] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  145.691684][ T4230] usb 1-1: Using ep0 maxpacket: 16
[  145.788884][ T6589] loop2: detected capacity change from 0 to 256
[  145.808423][ T4230] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 250, using maximum allowed: 30
[  145.838105][ T6589] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.880414][ T4230] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 250
[  145.944821][ T6589] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  146.008246][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0
[  146.015006][ T4230] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  146.060840][ T6589] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  146.065308][ T6587] loop1: detected capacity change from 0 to 32768
[  146.118167][ T6587] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  146.126435][ T6587] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  146.138760][ T6587] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error
[  146.138760][ T6587]   inode = 1 19
[  146.138760][ T6587]   function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[  146.150989][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.157465][ T6587] gfs2: fsid=syz:syz.s: about to withdraw this file system
[  146.172905][ T6587] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount.
[  146.181776][ T6587] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0
[  146.188746][ T6587] gfs2: fsid=syz:syz.s: File system withdrawn
[  146.194877][ T6587] CPU: 1 PID: 6587 Comm: syz.1.988 Not tainted syzkaller #0
[  146.202191][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  146.212280][ T6587] Call Trace:
[  146.215591][ T6587]  <TASK>
[  146.218552][ T6587]  dump_stack_lvl+0x188/0x250
[  146.223276][ T6587]  ? show_regs_print_info+0x20/0x20
[  146.228510][ T6587]  ? load_image+0x410/0x410
[  146.233066][ T6587]  gfs2_withdraw+0xb9a/0x14e0
[  146.237790][ T6587]  ? gfs2_lm+0x240/0x240
[  146.242069][ T6587]  ? _raw_spin_unlock+0x24/0x40
[  146.246955][ T6587]  ? gfs2_glock_nq+0xcaa/0x1510
[  146.251847][ T6587]  ? gfs2_consist_inode_i+0xc0/0xe0
[  146.257091][ T6587]  gfs2_jdesc_check+0x137/0x290
[  146.261989][ T6587]  check_journal_clean+0x186/0x360
[  146.267134][ T6587]  ? gfs2_trans_remove_revoke+0x360/0x360
[  146.272916][ T6587]  ? check_journal_clean+0x142/0x360
[  146.278239][ T6587]  ? __rwlock_init+0x140/0x140
[  146.283048][ T6587]  ? do_raw_spin_unlock+0x11d/0x230
[  146.288336][ T6587]  ? _raw_spin_unlock+0x24/0x40
[  146.293217][ T6587]  ? gfs2_jdesc_find+0xa7/0xc0
[  146.298014][ T6587]  init_journal+0x182e/0x22d0
[  146.302841][ T6587]  ? end_bio_io_page+0x100/0x100
[  146.306706][ T4230] usb 1-1: config 0 descriptor??
[  146.307811][ T6587]  ? vsnprintf+0x1b22/0x1c20
[  146.317375][ T6587]  ? snprintf+0xe5/0x140
[  146.321662][ T6587]  ? init_journal+0x749/0x22d0
[  146.326470][ T6587]  ? vscnprintf+0x80/0x80
[  146.330835][ T6587]  ? gfs2_glock_nq_num+0x170/0x1b0
[  146.335995][ T6587]  init_inodes+0xdb/0x320
[  146.340365][ T6587]  gfs2_fill_super+0x1671/0x1ea0
[  146.345349][ T6587]  ? gfs2_reconfigure+0xd80/0xd80
[  146.350417][ T6587]  ? gfs2_glock_nq_num+0x7e/0x1b0
[  146.355493][ T6587]  ? sb_set_blocksize+0xa5/0xe0
[  146.360388][ T6587]  get_tree_bdev+0x3e6/0x610
[  146.365018][ T6587]  ? gfs2_reconfigure+0xd80/0xd80
[  146.370086][ T6587]  gfs2_get_tree+0x4d/0x1e0
[  146.374627][ T6587]  vfs_get_tree+0x88/0x270
[  146.379077][ T6587]  do_new_mount+0x247/0xa40
[  146.383629][ T6587]  __se_sys_mount+0x2e3/0x3d0
[  146.388346][ T6587]  ? __x64_sys_mount+0xc0/0xc0
[  146.393157][ T6587]  ? lockdep_hardirqs_on+0x94/0x140
[  146.398397][ T6587]  ? __x64_sys_mount+0x1c/0xc0
[  146.403202][ T6587]  do_syscall_64+0x4c/0xa0
[  146.407669][ T6587]  ? clear_bhb_loop+0x30/0x80
[  146.412386][ T6587]  ? clear_bhb_loop+0x30/0x80
[  146.417103][ T6587]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  146.423032][ T6587] RIP: 0033:0x7f535ec7d3ca
[  146.427479][ T6587] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.447230][ T6587] RSP: 002b:00007f535ced3e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  146.455729][ T6587] RAX: ffffffffffffffda RBX: 00007f535ced3ee0 RCX: 00007f535ec7d3ca
[  146.463742][ T6587] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f535ced3ea0
[  146.471751][ T6587] RBP: 0000200000000400 R08: 00007f535ced3ee0 R09: 0000000000210401
[  146.479761][ T6587] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500
[  146.487771][ T6587] R13: 00007f535ced3ea0 R14: 00000000000125d8 R15: 0000200000000240
[  146.495828][ T6587]  </TASK>
[  146.499595][ T6587] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount.
[  146.631516][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.996'.
[  146.787960][ T4236] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  146.869738][ T4230] acrux 0003:1A34:0802.0013: unknown main item tag 0x2
[  146.907313][ T4230] acrux 0003:1A34:0802.0013: unknown main item tag 0x1
[  146.934890][ T4230] acrux 0003:1A34:0802.0013: unknown main item tag 0xe
[  146.944380][ T4230] acrux 0003:1A34:0802.0013: unknown main item tag 0x3
[  146.980631][ T4230] acrux 0003:1A34:0802.0013: unknown main item tag 0xe
[  146.987656][ T4230] acrux 0003:1A34:0802.0013: item fetching failed at offset 38/40
[  147.027573][ T4230] acrux 0003:1A34:0802.0013: parse failed
[  147.033844][ T4236] usb 4-1: Using ep0 maxpacket: 32
[  147.048551][ T4230] acrux: probe of 0003:1A34:0802.0013 failed with error -22
[  147.115715][ T4230] usb 1-1: USB disconnect, device number 13
[  147.158244][ T4236] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 17, changing to 8
[  147.189651][ T4236] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.233018][ T4236] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  147.249017][ T4236] usb 4-1: config 0 interface 0 has no altsetting 0
[  147.255803][ T4236] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  147.265360][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.290217][ T4236] usb 4-1: config 0 descriptor??
[  147.793289][ T4236] input: Apple Inc. Magic Trackpad 2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:0265.0014/input/input18
[  148.010448][ T4236] magicmouse 0003:05AC:0265.0014: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:0265] on usb-dummy_hcd.3-1/input0
[  148.114087][ T4236] usb 4-1: USB disconnect, device number 10
[  148.277944][ T6621] loop1: detected capacity change from 0 to 131072
[  148.312018][ T6634] fido_id[6634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  148.343353][ T6621] F2FS-fs (loop1): invalid crc value
[  148.380769][ T6636] loop4: detected capacity change from 0 to 512
[  148.421825][ T6621] F2FS-fs (loop1): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:0, type:0, next_blkoff:0, blkofs:1
[  148.436555][ T6621] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117)
[  148.522722][ T6636] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  148.623892][ T6636] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.1015: casefold flag without casefold feature
[  148.670102][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'.
[  148.782925][ T6636] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1015: couldn't read orphan inode 15 (err -117)
[  148.803464][ T6647] n: the hash_elasticity option has been deprecated and is always 16
[  148.827330][ T6647] n: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  148.884035][ T6636] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none.
[  148.905996][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'.
[  148.929288][ T6646] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  148.968063][ T6652] n: the hash_elasticity option has been deprecated and is always 16
[  148.976538][ T6652] n: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  148.991393][ T6636] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 4: comm syz.4.1015: lblock 0 mapped to illegal pblock 4 (length 1)
[  149.036198][ T6660] netlink: 'syz.1.1024': attribute type 2 has an invalid length.
[  149.398546][ T6671] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID
[  149.550945][ T6677] tmpfs: Too few inodes for current use
[  149.884008][ T6689] loop0: detected capacity change from 0 to 512
[  150.002383][ T6689] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  150.031702][ T6689] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.166443][ T6656] loop2: detected capacity change from 0 to 40427
[  150.174234][ T6689] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.1036: invalid size
[  150.209893][ T6656] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  150.231726][ T6656] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  150.344947][ T6656] F2FS-fs (loop2): Found nat_bits in checkpoint
[  150.601509][ T6708] loop4: detected capacity change from 0 to 512
[  150.635750][ T6656] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  150.650584][ T6656] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  150.686736][ T6684] loop3: detected capacity change from 0 to 32768
[  150.831195][ T4185] attempt to access beyond end of device
[  150.831195][ T4185] loop2: rw=2049, want=45104, limit=40427
[  150.846337][ T6708] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv0,nouid32,,errors=continue. Quota mode: none.
[  150.898730][ T6718] loop0: detected capacity change from 0 to 512
[  150.950630][ T6708] EXT4-fs error (device loop4): ext4_readdir:223: inode #2: comm syz.4.1045: path (unknown): directory fails checksum at offset 0
[  150.990379][ T6718] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.1059: bad orphan inode 11862016
[  151.002848][ T6723] loop1: detected capacity change from 0 to 512
[  151.018559][ T6718] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  151.068085][ T6718] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.152809][ T6723] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  151.200916][ T6723] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  151.317930][ T4230] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  151.524349][ T6733] loop0: detected capacity change from 0 to 4096
[  151.648075][ T6736] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.708184][ T4230] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  151.737051][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.769460][ T4230] usb 4-1: config 0 descriptor??
[  151.787009][ T6740] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1054'.
[  151.809804][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  151.827269][ T6740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  152.019230][ T4230] [drm] vendor descriptor length:6 data:06 5f 01 02 00 00 00 00 00 00 00
[  152.032370][ T4230] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  152.176510][ T6735] loop2: detected capacity change from 0 to 32768
[  152.229737][ T4230] [drm:udl_init] *ERROR* Selecting channel failed
[  152.277417][ T4230] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  152.292167][ T4230] [drm] Initialized udl on minor 2
[  152.302368][ T6735] XFS (loop2): Mounting V5 Filesystem
[  152.315337][ T6763] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  152.337522][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  152.357901][ T6763] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  152.375359][ T6763] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  152.390200][ T4230] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  152.432040][ T6735] XFS (loop2): Ending clean mount
[  152.439419][ T4230] usb 4-1: USB disconnect, device number 11
[  152.470455][ T4236] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  152.484923][ T4236] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  152.497438][ T4236] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  152.554799][ T4185] XFS (loop2): Unmounting Filesystem
[  152.859438][ T6770] ntfs: volume version 3.1.
[  152.942289][ T6777] EXT4-fs (loop0): Test dummy encryption mode enabled
[  152.960346][ T6777] EXT4-fs (loop0): Test dummy encryption mode enabled
[  153.005938][ T6779] hfsplus: xattr exists yet
[  153.061783][ T6777] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000009,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback.
[  153.085918][    C0] vkms_vblank_simulate: vblank timer overrun
[  153.238226][ T4236] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  153.483405][ T4236] usb 5-1: Using ep0 maxpacket: 16
[  153.492661][   T26] audit: type=1800 audit(1788196742.674:24): pid=6792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1084" name="tcp_port" dev="configfs" ino=41346 res=0 errno=0
[  153.512963][    C0] vkms_vblank_simulate: vblank timer overrun
[  153.608183][ T4236] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 250, using maximum allowed: 30
[  153.625006][ T4236] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 250
[  153.644577][ T4236] usb 5-1: config 0 interface 0 has no altsetting 0
[  153.652485][ T4236] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  153.667647][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.691826][ T4236] usb 5-1: config 0 descriptor??
[  153.908509][ T6784] set_capacity_and_notify: 4 callbacks suppressed
[  153.908525][ T6784] loop2: detected capacity change from 0 to 32768
[  154.160942][ T4236] acrux 0003:1A34:0802.0015: unknown main item tag 0x2
[  154.193375][ T4236] acrux 0003:1A34:0802.0015: unknown main item tag 0x1
[  154.218095][ T4236] acrux 0003:1A34:0802.0015: unknown main item tag 0xe
[  154.225030][ T4236] acrux 0003:1A34:0802.0015: unknown main item tag 0x3
[  154.263255][ T4236] acrux 0003:1A34:0802.0015: unknown main item tag 0xe
[  154.275635][ T4236] acrux 0003:1A34:0802.0015: item fetching failed at offset 38/40
[  154.306421][ T4236] acrux 0003:1A34:0802.0015: parse failed
[  154.318114][ T4236] acrux: probe of 0003:1A34:0802.0015 failed with error -22
[  154.393405][ T4192] usb 5-1: USB disconnect, device number 10
[  154.419864][ T6800] loop3: detected capacity change from 0 to 32768
[  154.555349][ T6800] XFS (loop3): Mounting V5 Filesystem
[  154.627061][ T6806] loop0: detected capacity change from 0 to 40427
[  154.644913][ T6806] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  154.657405][ T6800] XFS (loop3): Ending clean mount
[  154.690871][ T6806] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  154.747267][ T6806] F2FS-fs (loop0): Found nat_bits in checkpoint
[  154.815747][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1085'.
[  154.843787][ T6806] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  154.852263][ T4186] XFS (loop3): Unmounting Filesystem
[  154.861979][ T6806] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  154.877530][ T6821] n: the hash_elasticity option has been deprecated and is always 16
[  154.929838][ T6821] n: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  154.985212][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1085'.
[  155.049317][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'.
[  155.054809][ T6824] n: the hash_elasticity option has been deprecated and is always 16
[  155.091339][ T6824] n: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  155.172891][ T4184] attempt to access beyond end of device
[  155.172891][ T4184] loop0: rw=2049, want=45104, limit=40427
[  155.444556][ T6834] loop3: detected capacity change from 0 to 512
[  155.576988][ T6834] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  155.645635][ T6834] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  155.833216][ T6851] loop4: detected capacity change from 0 to 512
[  155.991193][ T6851] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1096: bad orphan inode 11862016
[  156.018495][ T6851] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  156.020875][ T6861] loop1: detected capacity change from 0 to 4096
[  156.070533][ T6851] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.132225][ T6861] EXT4-fs (loop1): Test dummy encryption mode enabled
[  156.159485][ T6861] EXT4-fs (loop1): Test dummy encryption mode enabled
[  156.276965][ T6861] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000009,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback.
[  156.594897][ T6886] loop3: detected capacity change from 0 to 256
[  156.658887][ T6888] loop4: detected capacity change from 0 to 512
[  156.775184][ T6888] EXT4-fs (loop4): Ignoring removed orlov option
[  156.861944][ T6888] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback.
[  158.134542][ T6952] loop0: detected capacity change from 0 to 512
[  158.224612][ T6952] EXT4-fs (loop0): Ignoring removed orlov option
[  158.311318][ T6952] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback.
[  158.691673][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1152'.
[  158.916253][ T6992] netlink: 'syz.4.1157': attribute type 2 has an invalid length.
[  159.038758][ T6998] program syz.3.1160 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  159.207468][ T7005] loop0: detected capacity change from 0 to 764
[  159.268331][ T7008] loop1: detected capacity change from 0 to 512
[  159.314608][ T7008] EXT4-fs (loop1): Ignoring removed orlov option
[  159.372487][ T7008] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback.
[  159.736388][ T7029] Line length is too long: Should be less than 4094
[  159.972268][ T7041] loop3: detected capacity change from 0 to 764
[  160.332432][ T7059] Line length is too long: Should be less than 4094
[  160.484700][ T7068] loop4: detected capacity change from 0 to 2048
[  160.564015][ T4701] Alternate GPT is invalid, using primary GPT.
[  160.590867][ T4701]  loop4: p2 p3 p7
[  160.614311][   T26] audit: type=1400 audit(1788196749.794:25): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=7073 comm="syz.0.1196" name="p" offset=92
[  160.650710][ T7068] Alternate GPT is invalid, using primary GPT.
[  160.683918][ T7068]  loop4: p2 p3 p7
[  160.713095][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'.
[  160.867705][ T7081] loop0: detected capacity change from 0 to 8192
[  160.939194][ T7081] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  160.994169][ T7081] REISERFS (device loop0): using ordered data mode
[  161.021141][ T7081] reiserfs: using flush barriers
[  161.047039][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  161.071275][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  161.088588][ T7081] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  161.090800][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  161.158522][ T7081] REISERFS (device loop0): checking transaction log (loop0)
[  161.305540][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  161.328108][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  161.342730][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  161.454992][   T26] audit: type=1400 audit(1788196750.634:26): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=7103 comm="syz.1.1210" name="p" offset=92
[  161.475306][ T7081] REISERFS (device loop0): Using tea hash to sort names
[  161.488370][ T7081] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  161.623919][ T7111] loop1: detected capacity change from 0 to 2048
[  161.714070][ T4702] Alternate GPT is invalid, using primary GPT.
[  161.723851][ T4702]  loop1: p2 p3 p7
[  161.746325][ T7115] loop4: detected capacity change from 0 to 128
[  161.777096][ T7111] Alternate GPT is invalid, using primary GPT.
[  161.785628][ T7111]  loop1: p2 p3 p7
[  161.947453][ T7115] attempt to access beyond end of device
[  161.947453][ T7115] loop4: rw=2049, want=250, limit=128
[  162.044457][ T7115] attempt to access beyond end of device
[  162.044457][ T7115] loop4: rw=2049, want=154, limit=128
[  162.094712][ T7126] loop3: detected capacity change from 0 to 64
[  162.208694][ T7127] loop1: detected capacity change from 0 to 4096
[  162.337184][ T7136] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.376841][   T26] audit: type=1800 audit(1788196751.554:27): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1230" name="bus" dev="loop1" ino=18 res=0 errno=0
[  162.455847][   T26] audit: type=1800 audit(1788196751.634:28): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1230" name="bus" dev="loop1" ino=18 res=0 errno=0
[  162.522204][   T26] audit: type=1400 audit(1788196751.704:29): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7148 comm="syz.0.1226" name="unknown" offset=16
[  162.713263][ T7162] loop0: detected capacity change from 0 to 64
[  162.876853][ T7162] hfs: walked past end of dir
[  162.934037][ T7171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.069846][ T7184] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  163.109146][ T7184] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1246: iget: bad i_size value: -6196953087261802486
[  163.138841][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  163.158258][ T7184] EXT4-fs (loop1): Remounting filesystem read-only
[  163.164873][ T7184] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1246: couldn't read orphan inode 15 (err -117)
[  163.176622][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  163.189882][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  163.268502][ T7184] EXT4-fs (loop1): Remounting filesystem read-only
[  163.275318][ T7184] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback.
[  163.392092][ T4263] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  163.487305][ T7203] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  163.508088][ T7203] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  163.572166][ T7207] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  163.672572][ T4263] usb 1-1: Using ep0 maxpacket: 8
[  163.696720][ T7217] tap0: tun_chr_ioctl cmd 1074025677
[  163.706367][ T7217] tap0: linktype set to 805
[  163.818110][ T4263] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.840642][ T4263] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.917160][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  164.043839][ T4263] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  164.065201][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.089841][ T4263] usb 1-1: Product: syz
[  164.094452][ T4263] usb 1-1: Manufacturer: syz
[  164.110974][ T4263] usb 1-1: SerialNumber: syz
[  164.215052][ T7228] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  164.318286][ T7228] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.374487][ T7228] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes
[  164.483194][ T7238] set_capacity_and_notify: 5 callbacks suppressed
[  164.483210][ T7238] loop1: detected capacity change from 0 to 256
[  164.496634][ T4263] usb 1-1: unit 0 not found!
[  164.504148][ T4263] usb 1-1: unit 4 not found!
[  164.555315][ T7238] exfat: Deprecated parameter 'utf8'
[  164.564994][ T7238] exfat: Deprecated parameter 'utf8'
[  164.596908][ T4263] usb 1-1: USB disconnect, device number 14
[  164.652107][ T7238] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  164.809300][ T7244] loop2: detected capacity change from 0 to 2048
[  164.867190][ T7246] loop9: detected capacity change from 0 to 2640
[  164.888045][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  164.899233][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  164.922964][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  164.933925][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  164.953012][ T7244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.025236][ T7246] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  165.073895][ T7246] Buffer I/O error on dev loop9, logical block 0, async page read
[  165.125807][ T7251] loop0: detected capacity change from 0 to 256
[  165.139856][ T7246] ldm_validate_partition_table(): Disk read failed.
[  165.146521][ T7246] Dev loop9: unable to read RDB block 0
[  165.196563][ T7246]  loop9: unable to read partition table
[  165.211164][ T7246] loop9: partition table beyond EOD, truncated
[  165.257537][ T7251] FAT-fs (loop0): Directory bread(block 1285) failed
[  165.267268][ T7246] loop_reread_partitions: partition scan of loop9 () failed (rc=-5)
[  165.319855][ T7251] FAT-fs (loop0): Directory bread(block 1286) failed
[  165.340754][ T7251] FAT-fs (loop0): Directory bread(block 1287) failed
[  165.383109][ T7251] FAT-fs (loop0): Directory bread(block 1288) failed
[  165.452984][ T7251] FAT-fs (loop0): Directory bread(block 1285) failed
[  165.491843][ T7251] FAT-fs (loop0): Directory bread(block 1286) failed
[  165.527407][ T7251] FAT-fs (loop0): Directory bread(block 1287) failed
[  165.566753][ T7251] FAT-fs (loop0): Directory bread(block 1288) failed
[  165.609040][ T7267] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  165.615781][ T7264] FAT-fs (loop0): Directory bread(block 1285) failed
[  165.810998][ T7242] loop3: detected capacity change from 0 to 32768
[  165.927650][ T7242] XFS (loop3): Mounting V5 Filesystem
[  166.065687][ T7242] XFS (loop3): Ending clean mount
[  166.231116][ T4186] XFS (loop3): Unmounting Filesystem
[  166.553066][ T7293] loop2: detected capacity change from 0 to 32768
[  166.614266][ T7288] loop1: detected capacity change from 0 to 32768
[  166.726222][ T7293] 
[  166.726222][ T7293]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  166.726222][ T7293] 
[  166.791573][ T7293] ERROR: (device loop2): diWrite: ixpxd invalid
[  166.791573][ T7293] 
[  166.845051][ T7293] ERROR: (device loop2): remounting filesystem as read-only
[  166.921103][ T7293] ERROR: (device loop2): txCommit: 
[  166.921103][ T7293] 
[  166.940902][ T7288] XFS (loop1): Mounting V5 Filesystem
[  166.969883][ T7296] loop0: detected capacity change from 0 to 40427
[  167.022267][ T7288] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  167.077249][ T7296] F2FS-fs (loop0): invalid crc value
[  167.093597][ T7288] XFS (loop1): Starting recovery (logdev: internal)
[  167.165347][ T7296] F2FS-fs (loop0): Found nat_bits in checkpoint
[  167.194217][ T7288] XFS (loop1): Ending recovery (logdev: internal)
[  167.389820][ T7288] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8
[  167.427759][ T7296] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  167.456169][ T7288] XFS (loop1): Unmount and run xfs_repair
[  167.556054][ T7322] attempt to access beyond end of device
[  167.556054][ T7322] loop0: rw=2049, want=40976, limit=40427
[  167.576388][ T7337] loop2: detected capacity change from 0 to 1024
[  167.600984][ T4188] XFS (loop1): Unmounting Filesystem
[  167.608491][   T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  168.058139][   T23] usb 5-1: unable to get BOS descriptor or descriptor too short
[  168.178398][   T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  168.330911][ T7360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1314'.
[  168.388047][   T23] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  168.397405][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.418019][ T7362] loop3: detected capacity change from 0 to 1024
[  168.434067][   T23] usb 5-1: Product: syz
[  168.447422][   T23] usb 5-1: Manufacturer: syz
[  168.452468][   T23] usb 5-1: SerialNumber: syz
[  168.490589][ T7362] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  168.515157][ T7362] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  168.605162][ T7362] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.1315: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  168.657693][ T7362] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1315: couldn't read orphan inode 11 (err -117)
[  168.677151][ T7362] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback.
[  168.726474][ T7362] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1315: Invalid block bitmap block 0 in block_group 0
[  168.743455][ T7362] Quota error (device loop3): write_blk: dquota write failed
[  168.752313][ T7362] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  168.764166][ T7362] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1315: Failed to acquire dquot type 0
[  168.768428][ T4453] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  168.798542][ T7380] hfsplus: bad catalog entry type
[  168.810795][   T23] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  168.824465][ T7362] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1315: Invalid inode bitmap blk 137438953472 in block_group 0
[  168.867504][ T4247] hfsplus: b-tree write err: -5, ino 25
[  168.876218][ T4247] hfsplus: b-tree write err: -5, ino 4
[  168.882463][ T4247] hfsplus: b-tree write err: -5, ino 2
[  169.023634][ T4453] usb 1-1: Using ep0 maxpacket: 16
[  169.038468][   T23] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  169.057253][   T23] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[  169.148339][ T4453] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  169.183249][ T4453] usb 1-1: config 0 interface 0 has no altsetting 0
[  169.197999][ T4453] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  169.211515][ T4453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.252802][ T4453] usb 1-1: config 0 descriptor??
[  169.299216][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.504624][ T7389] set_capacity_and_notify: 1 callbacks suppressed
[  169.504639][ T7389] loop2: detected capacity change from 0 to 32768
[  169.517988][   T23] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  169.598672][ T7387] loop3: detected capacity change from 0 to 32768
[  169.614466][    C0] vkms_vblank_simulate: vblank timer overrun
[  169.646518][   T23] usb 5-1: USB disconnect, device number 11
[  169.704078][ T7389] XFS (loop2): Mounting V5 Filesystem
[  169.750287][ T7387] XFS (loop3): Mounting V5 Filesystem
[  169.763158][ T4453] wacom 0003:056A:5000.0016: unknown main item tag 0x6
[  169.781190][ T4453] wacom 0003:056A:5000.0016: hidraw0: USB HID v0.05 Device [HID 056a:5000] on usb-dummy_hcd.0-1/input0
[  169.813055][ T7389] XFS (loop2): Ending clean mount
[  169.931125][ T7387] XFS (loop3): Ending clean mount
[  169.970573][ T4702] udevd[4702]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.002610][ T4453] usb 1-1: USB disconnect, device number 15
[  170.057172][ T4185] XFS (loop2): Unmounting Filesystem
[  170.124501][ T4186] XFS (loop3): Unmounting Filesystem
[  170.561106][ T7420] loop4: detected capacity change from 0 to 128
[  170.620948][ T7420] EXT4-fs (loop4): Ignoring removed nobh option
[  170.677414][ T7420] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none.
[  170.760273][ T7420] ext4 filesystem being mounted at /279/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  170.880290][ T7420] fscrypt (loop4, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop4' because it doesn't have stable inode numbers
[  171.206593][ T7442] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1343'.
[  171.359367][ T7447] loop1: detected capacity change from 0 to 2048
[  171.377171][ T7451] <
[  171.402873][ T7447] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  171.506220][ T7447] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: writeback.
[  171.556912][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'.
[  171.626400][ T7447] EXT4-fs (loop1): shut down requested (2)
[  171.772326][ T7437] loop3: detected capacity change from 0 to 32768
[  171.827154][ T7437] (syz.3.1341,7437,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22
[  171.846524][ T7437] (syz.3.1341,7437,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  171.846564][ T7437] (syz.3.1341,7437,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22
[  171.910134][ T7437] (syz.3.1341,7437,1):ocfs2_initialize_super:2279 ERROR: status = -22
[  171.940567][ T7437] (syz.3.1341,7437,1):ocfs2_fill_super:1177 ERROR: status = -22
[  171.955467][ T7434] loop0: detected capacity change from 0 to 32768
[  171.962121][ T4452] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  172.028808][ T7434] read_mapping_page failed!
[  172.039617][ T7434] ERROR: (device loop0): txCommit: 
[  172.039617][ T7434] 
[  172.277539][ T7437] loop3: detected capacity change from 0 to 1024
[  172.360248][ T4452] usb 5-1: not running at top speed; connect to a high speed hub
[  172.466189][ T4452] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.590976][ T4452] usb 5-1: New USB device found, idVendor=1853, idProduct=0001, bcdDevice= 1.00
[  172.613603][ T4452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  172.643603][ T4452] usb 5-1: Product: syz
[  172.661367][ T4452] usb 5-1: Manufacturer: syz
[  172.743364][ T4452] usb 5-1: Found UVC 1.00 device syz (1853:0001)
[  172.768932][ T4452] usb 5-1: No streaming interface found for terminal 2.
[  172.773157][ T7501] ip_tables: iptables: counters copy to user failed while replacing table
[  172.793172][ T4452] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input23
[  172.844903][ T7505] device lo entered promiscuous mode
[  172.873987][ T7506] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[  172.896751][ T7505] device bond0 entered promiscuous mode
[  172.946016][ T7505] device dummy0 entered promiscuous mode
[  172.967944][ T7505] device eql entered promiscuous mode
[  172.998987][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  173.038332][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  173.059516][   T23] usb 5-1: USB disconnect, device number 12
[  173.066204][ T7505] device ifb0 entered promiscuous mode
[  173.073667][ T7505] device ifb1 entered promiscuous mode
[  173.080737][ T7505] device eth0 entered promiscuous mode
[  173.090657][ T7505] device wlan0 entered promiscuous mode
[  173.104053][ T7505] device wlan1 entered promiscuous mode
[  173.115748][ T7505] device hwsim0 entered promiscuous mode
[  173.146058][ T7505] device wpan0 entered promiscuous mode
[  173.164835][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  173.183877][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  173.191757][ T7505] device wpan1 entered promiscuous mode
[  173.198038][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  173.205688][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  173.214788][ T7505] device teql0 entered promiscuous mode
[  173.226695][ T7505] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  173.248838][ T7518] loop2: detected capacity change from 0 to 512
[  173.316892][ T7518] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.1376: corrupted in-inode xattr
[  173.367607][ T7518] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1376: couldn't read orphan inode 15 (err -117)
[  173.411964][ T7518] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  173.472466][ T7527] bonding: no command found in bonding_masters - use +ifname or -ifname
[  173.501751][ T7518] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.1376: bad entry in directory: inode out of bounds - offset=0, inode=87, rec_len=12, size=1024 fake=0
[  173.738641][ T7539] MTRR 1 not used
[  173.877801][ T7548] loop3: detected capacity change from 0 to 512
[  173.940325][ T7548] EXT4-fs (loop3): Ignoring removed bh option
[  173.999860][ T7548] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,usrquota,noinit_itable,resuid=0x0000000000000000,errors=remount-ro,bh,. Quota mode: writeback.
[  174.034305][ T7548] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.116072][ T7562] netlink: 'syz.0.1395': attribute type 3 has an invalid length.
[  174.129761][ T7548] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 32: comm syz.3.1389: path /277/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=134217740, rec_len=0, size=2048 fake=1
[  174.202413][ T7562] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1395'.
[  174.284953][ T7548] EXT4-fs (loop3): Remounting filesystem read-only
[  174.434753][ T7572] loop2: detected capacity change from 0 to 4096
[  174.581196][ T7589] loop0: detected capacity change from 0 to 1024
[  174.590772][ T7590] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.667215][ T7594] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 256 already freed
[  174.684460][ T7589] hfsplus: invalid length 32517 has been corrected to 255
[  174.704444][ T7594] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean
[  174.716301][ T7595] loop3: detected capacity change from 0 to 512
[  174.969893][ T7592] netdevsim netdevsim14 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.067672][  T144] hfsplus: b-tree write err: -5, ino 20
[  175.305348][ T7614] device syz_tun entered promiscuous mode
[  175.321571][ T7614] device macvtap1 entered promiscuous mode
[  175.385572][ T7614] device syz_tun left promiscuous mode
[  175.443509][ T7621] loop2: detected capacity change from 0 to 1024
[  175.733230][ T7630] loop4: detected capacity change from 0 to 2048
[  175.854865][ T7631] loop1: detected capacity change from 0 to 4096
[  175.862778][ T7630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.922366][ T7631] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  176.242967][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1434'.
[  176.400853][ T7654] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1437'.
[  176.521380][ T7656] device erspan0 entered promiscuous mode
[  176.585215][ T7659] loop1: detected capacity change from 0 to 2048
[  176.724904][ T7666] loop2: detected capacity change from 0 to 2048
[  176.734615][ T7659] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  176.752044][ T7659] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.852500][ T7676] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.921249][   T26] audit: type=1800 audit(1788196766.104:30): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1441" name="bus" dev="loop2" ino=2097152 res=0 errno=0
[  177.214396][ T7688] loop3: detected capacity change from 0 to 16
[  177.323893][ T7688] erofs: (device loop3): mounted with root inode @ nid 36.
[  177.600423][ T7661] loop4: detected capacity change from 0 to 40427
[  177.727761][ T7705] loop0: detected capacity change from 0 to 1024
[  177.754030][ T7661] F2FS-fs (loop4): invalid crc value
[  177.814815][ T7661] F2FS-fs (loop4): Found nat_bits in checkpoint
[  177.831985][ T7705] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  178.005890][ T7661] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  178.058958][ T7661] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  178.138796][ T7684] XFS (loop1): Mounting V5 Filesystem
[  178.235119][ T7726] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  178.256617][ T7726] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  178.296220][ T7684] XFS (loop1): Ending clean mount
[  178.329082][ T7734] FAT-fs (loop0): Unrecognized mount option "i0²sj#PêäJTÊ /—™s4êI‚¨’" or missing value
[  178.362930][ T7734] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1465'.
[  178.417266][ T7726] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,quota,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback.
[  178.545070][ T4188] XFS (loop1): Unmounting Filesystem
[  178.588847][ T7726] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.793471][   T26] audit: type=1400 audit(1788196767.974:31): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7747 comm="syz.2.1474" name="unknown" offset=16
[  178.812383][    C0] vkms_vblank_simulate: vblank timer overrun
[  179.368341][ T7773] netlink: 'syz.2.1484': attribute type 2 has an invalid length.
[  179.529173][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1488'.
[  179.623779][ T7781] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  179.671878][ T7781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.912342][ T7766] set_capacity_and_notify: 5 callbacks suppressed
[  179.912357][ T7766] loop0: detected capacity change from 0 to 32768
[  179.924539][ T4230] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  180.016375][ T7800] loop2: detected capacity change from 0 to 512
[  180.024353][   T26] audit: type=1400 audit(1788196769.204:32): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=7801 comm="syz.4.1496" name="foo" offset=81
[  180.082963][ T7766] XFS (loop0): Mounting V5 Filesystem
[  180.103782][ T7800] EXT4-fs (loop2): Ignoring removed bh option
[  180.177892][ T4230] usb 2-1: Using ep0 maxpacket: 8
[  180.223496][ T7800] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  180.241620][ T7800] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.255738][ T7766] XFS (loop0): Ending clean mount
[  180.298099][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  180.331687][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  180.396669][ T4230] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  180.426719][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.451810][ T4184] XFS (loop0): Unmounting Filesystem
[  180.462557][ T4230] usb 2-1: config 0 descriptor??
[  180.695149][ T7829] loop4: detected capacity change from 0 to 512
[  180.742233][ T7829] EXT4-fs (loop4): Ignoring removed bh option
[  180.790259][ T7829] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,usrquota,noinit_itable,resuid=0x0000000000000000,errors=remount-ro,bh,. Quota mode: writeback.
[  180.837991][ T7829] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.883221][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'.
[  180.937395][ T7787] udc-core: couldn't find an available UDC or it's busy
[  180.954790][ T7787] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  180.967654][ T7829] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz.4.1504: path /313/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=134217740, rec_len=0, size=2048 fake=1
[  180.993163][ T4230] uclogic 0003:28BD:0071.0017: interface is invalid, ignoring
[  181.079766][ T7829] EXT4-fs (loop4): Remounting filesystem read-only
[  181.181792][ T4230] usb 2-1: USB disconnect, device number 10
[  181.268173][ T7827] loop3: detected capacity change from 0 to 32768
[  181.366793][ T7827] read_mapping_page failed!
[  181.389445][ T7827] ERROR: (device loop3): txCommit: 
[  181.389445][ T7827] 
[  181.596843][ T7849] netlink: 'syz.4.1512': attribute type 1 has an invalid length.
[  181.653302][ T7843] loop2: detected capacity change from 0 to 40427
[  181.683855][ T7843] F2FS-fs (loop2): invalid crc value
[  181.715189][ T7843] F2FS-fs (loop2): Found nat_bits in checkpoint
[  181.918071][ T7843] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  181.938917][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  182.010531][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  182.043190][ T7852] attempt to access beyond end of device
[  182.043190][ T7852] loop2: rw=2049, want=40976, limit=40427
[  182.055568][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  182.077151][ T7863] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  182.185716][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'.
[  182.238434][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'.
[  182.275533][ T7876] loop3: detected capacity change from 0 to 512
[  182.335646][ T7876] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  182.421490][ T7881] loop4: detected capacity change from 0 to 164
[  182.502425][ T7881] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  182.543901][ T7881] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  182.994220][ T7901] loop0: detected capacity change from 0 to 256
[  183.145647][ T7909] loop3: detected capacity change from 0 to 512
[  183.268060][ T7909] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  183.306100][ T7915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1540'.
[  183.333493][ T7909] EXT4-fs (loop3): 1 truncate cleaned up
[  183.400007][ T7909] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000101,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  183.640780][ T7907] loop2: detected capacity change from 0 to 32768
[  183.699557][ T7907] read_mapping_page failed!
[  183.704156][ T7907] ERROR: (device loop2): txCommit: 
[  183.704156][ T7907] 
[  184.017949][ T4230] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  184.203980][ T7922] F2FS-fs (loop1): invalid crc value
[  184.215748][ T7922] F2FS-fs (loop1): Found nat_bits in checkpoint
[  184.314342][ T7922] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  184.367059][ T7929] attempt to access beyond end of device
[  184.367059][ T7929] loop1: rw=2049, want=40976, limit=40427
[  184.407285][ T7925] XFS (loop0): Mounting V5 Filesystem
[  184.480971][ T7925] XFS (loop0): Ending clean mount
[  184.558325][ T4230] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  184.576739][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.585213][ T4230] usb 4-1: Product: syz
[  184.605766][ T4230] usb 4-1: Manufacturer: syz
[  184.644354][ T4230] usb 4-1: SerialNumber: syz
[  184.662151][ T4184] XFS (loop0): Unmounting Filesystem
[  184.684745][ T4230] usb 4-1: config 0 descriptor??
[  184.729006][ T4230] hub 4-1:0.0: bad descriptor, ignoring hub
[  184.738422][ T4230] hub: probe of 4-1:0.0 failed with error -5
[  184.938919][ T4230] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  184.961462][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  184.999232][ T4230] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  185.011939][ T4230] usb 4-1: media controller created
[  185.077766][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  185.088023][ T4274] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  185.113216][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1549'.
[  185.155872][ T4230] DVB: Unable to find symbol dib7000p_attach()
[  185.162985][ T4230] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  185.228094][ T4230] rc_core: IR keymap rc-dib0700-rc5 not found
[  185.234350][ T4230] Registered IR keymap rc-empty
[  185.239760][ T4230] dvb-usb: could not initialize remote control.
[  185.246154][ T4230] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  185.270323][ T4230] usb 4-1: USB disconnect, device number 12
[  185.292872][ T4230] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  185.348049][ T4274] usb 2-1: Using ep0 maxpacket: 32
[  185.498187][ T4274] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  185.509177][ T4274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.520175][ T4274] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  185.533362][ T4274] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  185.542496][ T4274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.552966][ T4274] usb 2-1: config 0 descriptor??
[  185.730991][ T7954] set_capacity_and_notify: 2 callbacks suppressed
[  185.731008][ T7954] loop3: detected capacity change from 0 to 512
[  185.750843][ T7955] loop2: detected capacity change from 0 to 1024
[  185.795169][ T7955] hfsplus: invalid length 32517 has been corrected to 255
[  185.821656][ T7954] EXT4-fs (loop3): Ignoring removed orlov option
[  185.898341][ T7954] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback.
[  185.958362][  T144] hfsplus: b-tree write err: -5, ino 20
[  186.059943][ T4274] elecom 0003:056E:011C.0018: item fetching failed at offset 5/6
[  186.077521][ T4274] elecom: probe of 0003:056E:011C.0018 failed with error -22
[  186.269857][ T4452] usb 2-1: USB disconnect, device number 11
[  186.428030][ T7913] block2mtd: error: cannot open device #! 
[  186.454491][ T7972] loop3: detected capacity change from 0 to 4096
[  186.569297][ T7979] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.618514][ T7972] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 256 already freed
[  186.628361][ T7972] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  186.729558][ T7981] device syz_tun entered promiscuous mode
[  186.735456][ T7981] device macvtap1 entered promiscuous mode
[  186.790608][ T7981] device syz_tun left promiscuous mode
[  187.124552][ T7994] loop1: detected capacity change from 0 to 4096
[  187.248802][ T7994] ntfs3: loop1: ino=3, Correct links count -> 2.
[  187.541238][ T7994] ntfs3: loop1: failed to convert "0080" to cp874
[  187.542987][ T7994] ntfs3: loop1: failed to convert name for inode 1e.
[  187.786524][ T7976] loop4: detected capacity change from 0 to 40427
[  187.954506][ T8022] device syz_tun entered promiscuous mode
[  187.978326][ T7976] F2FS-fs (loop4): invalid crc value
[  188.001623][ T8022] device macvtap1 entered promiscuous mode
[  188.026960][ T8022] device syz_tun left promiscuous mode
[  188.035579][ T7976] F2FS-fs (loop4): Found nat_bits in checkpoint
[  188.231410][ T7976] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  188.373427][ T8012] loop0: detected capacity change from 0 to 40427
[  188.392136][ T8024] attempt to access beyond end of device
[  188.392136][ T8024] loop4: rw=2049, want=40976, limit=40427
[  188.418250][ T8012] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  188.424741][ T8012] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  188.470738][ T8012] F2FS-fs (loop0): invalid crc value
[  188.503734][ T8012] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  188.570112][ T8018] loop1: detected capacity change from 0 to 32768
[  188.654093][ T8018] JBD2: Ignoring recovery information on journal
[  188.665993][ T8012] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  188.675386][ T8012] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  188.782067][ T8020] loop2: detected capacity change from 0 to 32768
[  188.819988][ T4184] attempt to access beyond end of device
[  188.819988][ T4184] loop0: rw=2049, want=45104, limit=40427
[  188.877993][ T8018] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  188.938832][ T8020] XFS (loop2): Mounting V5 Filesystem
[  189.042143][ T8018] (syz.1.1580,8018,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=255, inode=0, rec_len=0, name_len=0
[  189.198000][ T8020] XFS (loop2): Ending clean mount
[  189.217637][ T4188] ocfs2: Unmounting device (7,1) on (node local)
[  189.307085][ T4185] XFS (loop2): Unmounting Filesystem
[  189.745892][ T8054] loop0: detected capacity change from 0 to 512
[  189.753362][ T8041] loop3: detected capacity change from 0 to 32768
[  189.843039][ T8054] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  189.926850][ T8041] XFS (loop3): Mounting V5 Filesystem
[  190.054542][ T8054] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  190.155129][ T8041] XFS (loop3): Ending clean mount
[  190.164321][ T8054] Quota error (device loop0): write_blk: dquota write failed
[  190.180999][ T8054] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  190.235638][ T8054] Quota error (device loop0): write_blk: dquota write failed
[  190.278165][ T4186] XFS (loop3): Unmounting Filesystem
[  190.309832][ T8054] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  190.360994][ T8054] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1584: Failed to acquire dquot type 1
[  190.395740][ T8054] EXT4-fs (loop0): 1 truncate cleaned up
[  190.419299][ T8054] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000010000,resgid=0x0000000000000000,norecovery,abort,auto_da_alloc,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  190.443948][    C0] vkms_vblank_simulate: vblank timer overrun
[  190.615260][ T8054] EXT4-fs (loop0): shut down requested (2)
[  190.631232][ T8087] kAFS: bad VL server IP address
[  190.639128][ T8054] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[  190.788679][ T8091] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  190.838947][ T8089] loop4: detected capacity change from 0 to 512
[  190.906660][ T8089] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  191.003754][ T8089] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000006,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  191.020885][ T8089] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  191.162749][ T4452] Bluetooth: hci0: command 0x0406 tx timeout
[  191.171434][ T4452] Bluetooth: hci3: command 0x0406 tx timeout
[  191.184562][ T4452] Bluetooth: hci1: command 0x0406 tx timeout
[  191.197646][ T4274] Bluetooth: hci2: command 0x0406 tx timeout
[  191.502028][   T26] audit: type=1400 audit(1788196780.684:33): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8117 comm="syz.3.1621" name="p" offset=48
[  191.698052][ T4274] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  191.846261][ T8106] loop1: detected capacity change from 0 to 32768
[  191.927528][ T8133] loop3: detected capacity change from 0 to 512
[  191.938003][ T4274] usb 5-1: Using ep0 maxpacket: 8
[  191.983982][ T8133] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  192.012658][ T8133] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  192.029022][ T8106] XFS (loop1): Mounting V5 Filesystem
[  192.038215][ T8133] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  192.104398][ T8133] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.1616: Allocating blocks 41-42 which overlap fs metadata
[  192.134846][ T8133] Quota error (device loop3): write_blk: dquota write failed
[  192.144170][ T8106] XFS (loop1): Ending clean mount
[  192.165612][ T8133] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  192.188199][ T8133] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.1616: Allocating blocks 41-42 which overlap fs metadata
[  192.218003][ T4274] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  192.228039][ T4192] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  192.232174][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.257763][ T4274] usb 5-1: Product: syz
[  192.266515][ T4274] usb 5-1: Manufacturer: syz
[  192.277115][ T4274] usb 5-1: SerialNumber: syz
[  192.289381][ T4274] usb 5-1: config 0 descriptor??
[  192.306493][ T8133] Quota error (device loop3): write_blk: dquota write failed
[  192.340295][ T4274] gspca_main: se401-2.14.0 probing 047d:5003
[  192.348309][ T8133] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  192.379083][ T4188] XFS (loop1): Unmounting Filesystem
[  192.388155][ T8133] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1616: Failed to acquire dquot type 1
[  192.435484][ T8133] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  192.466694][ T8133] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1616: corrupted inode contents
[  192.504240][ T8133] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #12: comm syz.3.1616: mark_inode_dirty error
[  192.526215][ T8133] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1616: corrupted inode contents
[  192.538929][ T8133] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.1616: mark_inode_dirty error
[  192.551012][ T8133] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1616: corrupted inode contents
[  192.587017][ T8133] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  192.604876][ T8133] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1616: corrupted inode contents
[  192.627762][ T8133] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.1616: mark_inode_dirty error
[  192.647005][ T8133] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  192.663918][ T8133] EXT4-fs (loop3): 1 truncate cleaned up
[  192.670732][ T8133] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,noblock_validity,mblk_io_submit,noinit_itable,noinit_itable,grpjquota=,jqfmt=vfsv1,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2,errors=continue. Quota mode: writeback.
[  192.694956][    C0] vkms_vblank_simulate: vblank timer overrun
[  192.702884][ T4192] usb 1-1: unable to get BOS descriptor or descriptor too short
[  192.778143][ T4274] gspca_se401: ExtraFeatures: 255
[  192.783264][ T4274] gspca_se401: Too many frame sizes
[  192.798934][ T8133] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback.
[  192.823518][ T4192] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  192.839620][ T8133] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  192.858276][ T4192] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  192.868343][ T8133] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback.
[  192.885131][ T8133] EXT4-fs error (device loop3): ext4_mb_discard_group_preallocations:4970: comm syz.3.1616: Error -117 reading block bitmap for 0
[  192.944123][ T8133] EXT4-fs error (device loop3): ext4_mb_discard_group_preallocations:4970: comm syz.3.1616: Error -117 reading block bitmap for 0
[  192.964487][ T8133] Quota error (device loop3): write_blk: dquota write failed
[  192.973061][ T8133] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1616: Failed to acquire dquot type 1
[  192.991818][ T4274] usb 5-1: USB disconnect, device number 13
[  193.083283][ T4192] usb 1-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40
[  193.112001][ T4192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.126814][ T4192] usb 1-1: Product: syz
[  193.156160][ T4192] usb 1-1: Manufacturer: syz
[  193.172769][ T4192] usb 1-1: SerialNumber: syz
[  193.303421][ T8168] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1627'.
[  193.445662][ T8177] loop2: detected capacity change from 0 to 512
[  193.471926][ T8135] udc-core: couldn't find an available UDC or it's busy
[  193.493575][ T8177] EXT4-fs (loop2): Ignoring removed orlov option
[  193.503193][ T8135] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  193.522466][ T8177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  193.546334][ T8135] udc-core: couldn't find an available UDC or it's busy
[  193.563308][ T8135] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  193.604546][ T8177] EXT4-fs (loop2): 1 truncate cleaned up
[  193.618119][ T8177] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[  193.718143][ T4192] usb 1-1: unit 3 not found!
[  193.753464][ T4192] usb 1-1: USB disconnect, device number 16
[  193.836727][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.065111][ T4701] udevd[4701]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.196452][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  194.202835][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  194.267156][ T8203] device syz_tun entered promiscuous mode
[  194.287286][ T8170] loop3: detected capacity change from 0 to 32768
[  194.295942][ T8203] device macvtap1 entered promiscuous mode
[  194.335269][ T8203] device syz_tun left promiscuous mode
[  194.444977][ T8170] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  194.558878][ T8207] loop4: detected capacity change from 0 to 4096
[  194.624788][ T8214] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  194.690202][ T8207] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  194.725807][ T4186] ocfs2: Unmounting device (7,3) on (node local)
[  194.868247][ T8221] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1647'.
[  195.160582][ T8199] loop2: detected capacity change from 0 to 32768
[  195.342021][ T8245] loop3: detected capacity change from 0 to 8
[  195.354328][ T8199] XFS (loop2): Mounting V5 Filesystem
[  195.399089][ T8245] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  195.436494][ T4701] udevd[4701]: incorrect cramfs checksum on /dev/loop3
[  195.448188][ T8249] loop0: detected capacity change from 0 to 4096
[  195.506537][ T4701] udevd[4701]: incorrect cramfs checksum on /dev/loop3
[  195.517372][ T8199] XFS (loop2): Ending clean mount
[  195.586414][ T8249] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  195.729786][ T4185] XFS (loop2): Unmounting Filesystem
[  196.021225][ T8275] loop3: detected capacity change from 0 to 256
[  196.413485][ T8295] input: syz0 as /devices/virtual/input/input25
[  196.424606][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  196.424621][   T26] audit: type=1807 audit(1788196785.604:35): func=FILE_CHECK res=0
[  196.445752][ T8296] ima: policy update failed
[  196.459416][   T26] audit: type=1802 audit(1788196785.624:36): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1682" res=0 errno=0
[  196.557923][   T26] audit: type=1802 audit(1788196785.664:37): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1682" res=0 errno=0
[  196.721465][ T8307] kvm [8306]: vcpu0, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop
[  196.798112][ T4236] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  196.877906][ T4274] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  197.034785][ T8314] loop2: detected capacity change from 0 to 128
[  197.067937][ T4236] usb 5-1: Using ep0 maxpacket: 8
[  197.101920][ T8314] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  197.125896][ T8314] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  197.208188][ T4236] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  197.216494][ T4236] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  197.240745][ T4236] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  197.256601][ T4236] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  197.258813][ T4274] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.267778][ T4236] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.298485][ T4236] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  197.307701][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.307724][ T4274] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  197.338656][ T4274] usb 1-1: config 0 interface 0 has no altsetting 0
[  197.345636][ T4274] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00
[  197.349969][ T4247] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  197.357028][ T4274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.383172][ T4274] usb 1-1: config 0 descriptor??
[  197.537436][ T8326] loop2: detected capacity change from 0 to 2048
[  197.622975][ T8331] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.635273][ T4236] usb 5-1: GET_CAPABILITIES returned 0
[  197.650258][ T4236] usbtmc 5-1:16.0: can't read capabilities
[  197.682225][ T8326] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  197.725486][ T8326] Remounting filesystem read-only
[  197.856015][ T4173] usb 5-1: USB disconnect, device number 14
[  197.864465][ T4274] smartjoyplus 0003:0B43:0003.0019: unbalanced collection at end of report description
[  197.882197][ T4274] smartjoyplus 0003:0B43:0003.0019: parse failed
[  197.895944][ T4274] smartjoyplus: probe of 0003:0B43:0003.0019 failed with error -22
[  197.985627][ T8337] loop1: detected capacity change from 0 to 2048
[  198.015301][ T8337] UDF-fs: warning (device loop1): udf_fill_super: No fileset found
[  198.066897][ T4274] usb 1-1: USB disconnect, device number 17
[  198.417685][ T8351] loop4: detected capacity change from 0 to 8
[  198.500015][ T8351] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  198.536739][ T4701] udevd[4701]: incorrect cramfs checksum on /dev/loop4
[  198.620459][ T4701] udevd[4701]: incorrect cramfs checksum on /dev/loop4
[  198.704878][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'.
[  198.936659][ T8370] loop3: detected capacity change from 0 to 1024
[  198.961858][ T8343] loop1: detected capacity change from 0 to 32768
[  198.975482][ T4236] kernel write not supported for file /snd/midiC2D0 (pid: 4236 comm: kworker/0:7)
[  199.102960][ T8343] XFS (loop1): Mounting V5 Filesystem
[  199.137968][ T4274] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  199.221279][ T8386] netem: change failed
[  199.301978][ T8363] loop0: detected capacity change from 0 to 32768
[  199.353320][ T8343] XFS (loop1): Ending clean mount
[  199.383634][ T4274] usb 5-1: Using ep0 maxpacket: 32
[  199.434897][ T8390] loop2: detected capacity change from 0 to 1024
[  199.453295][ T8363] JBD2: Ignoring recovery information on journal
[  199.509025][ T4274] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  199.517299][ T4274] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  199.555884][ T4188] XFS (loop1): Unmounting Filesystem
[  199.621601][ T8363] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  199.633348][ T4274] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  199.662764][ T8397] attempt to access beyond end of device
[  199.662764][ T8397] loop2: rw=0, want=5780, limit=1024
[  199.708014][ T4274] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  199.731291][ T8397] Buffer I/O error on dev loop2, logical block 2889, async page read
[  199.749327][ T4274] usb 5-1: config 0 interface 0 has no altsetting 0
[  199.810483][ T8397] attempt to access beyond end of device
[  199.810483][ T8397] loop2: rw=0, want=5780, limit=1024
[  199.839206][ T8397] Buffer I/O error on dev loop2, logical block 2889, async page read
[  199.874180][   T26] audit: type=1800 audit(1788196789.054:38): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1723" name="file1" dev="loop2" ino=20 res=0 errno=0
[  199.915477][ T8363] 
[  199.917919][ T8363] ======================================================
[  199.924959][ T8363] WARNING: possible circular locking dependency detected
[  199.932181][ T8363] syzkaller #0 Not tainted
[  199.936609][ T8363] ------------------------------------------------------
[  199.943648][ T8363] syz.0.1713/8363 is trying to acquire lock:
[  199.949641][ T8363] ffff8880508531b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x307/0x770
[  199.958983][ T8363] 
[  199.958983][ T8363] but task is already holding lock:
[  199.966458][ T8363] ffff88805ee9b0e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  199.970116][ T8399] loop3: detected capacity change from 0 to 512
[  199.976770][ T8363] 
[  199.976770][ T8363] which lock already depends on the new lock.
[  199.976770][ T8363] 
[  199.976778][ T8363] 
[  199.976778][ T8363] the existing dependency chain (in reverse order) is:
[  199.976785][ T8363] 
[  199.976785][ T8363] -> #4 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  200.011008][ T8363]        down_read+0x44/0x2e0
[  200.015695][ T8363]        ocfs2_start_trans+0x3a6/0x6f0
[  200.021170][ T8363]        ocfs2_modify_bh+0xe0/0x4c0
[  200.026410][ T8363]        ocfs2_local_read_info+0x1499/0x1820
[  200.032420][ T8363]        dquot_load_quota_sb+0x72f/0xa80
[  200.038066][ T8363]        dquot_load_quota_inode+0x2d3/0x5c0
[  200.043970][ T8363]        ocfs2_enable_quotas+0x1c0/0x4a0
[  200.049604][ T8363]        ocfs2_fill_super+0x3c84/0x50a0
[  200.055168][ T8363]        mount_bdev+0x28a/0x3c0
[  200.060207][ T8363]        legacy_get_tree+0xe6/0x180
[  200.065418][ T8363]        vfs_get_tree+0x88/0x270
[  200.070360][ T8363]        do_new_mount+0x247/0xa40
[  200.075409][ T8363]        __se_sys_mount+0x2e3/0x3d0
[  200.080613][ T8363]        do_syscall_64+0x4c/0xa0
[  200.085553][ T8363]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  200.091968][ T8363] 
[  200.091968][ T8363] -> #3 (sb_internal#3){.+.+}-{0:0}:
[  200.099949][ T8363]        ocfs2_start_trans+0x2a7/0x6f0
[  200.105436][ T8363]        ocfs2_mknod+0xf70/0x2510
[  200.110489][ T8363]        ocfs2_create+0x192/0x420
[  200.115515][ T8363]        path_openat+0x120a/0x2fb0
[  200.120632][ T8363]        do_filp_open+0x1df/0x400
[  200.125663][ T8363]        do_sys_openat2+0x14b/0x500
[  200.130884][ T8363]        __x64_sys_openat+0x135/0x160
[  200.136349][ T8363]        do_syscall_64+0x4c/0xa0
[  200.141308][ T8363]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  200.147862][ T8363] 
[  200.147862][ T8363] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[  200.158390][ T8363]        down_write+0x38/0x60
[  200.163074][ T8363]        ocfs2_reserve_local_alloc_bits+0x11c/0x2630
[  200.169757][ T8363]        ocfs2_reserve_clusters_with_limit+0x1b6/0xc10
[  200.176637][ T8363]        ocfs2_mknod+0xf0e/0x2510
[  200.181660][ T8363]        ocfs2_create+0x192/0x420
[  200.186691][ T8363]        path_openat+0x120a/0x2fb0
[  200.191814][ T8363]        do_filp_open+0x1df/0x400
[  200.196839][ T8363]        do_sys_openat2+0x14b/0x500
[  200.202037][ T8363]        __x64_sys_openat+0x135/0x160
[  200.207410][ T8363]        do_syscall_64+0x4c/0xa0
[  200.212359][ T8363]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  200.218774][ T8363] 
[  200.218774][ T8363] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  200.229287][ T8363]        down_write+0x38/0x60
[  200.233970][ T8363]        ocfs2_reserve_suballoc_bits+0x16d/0x44b0
[  200.240416][ T8363]        ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  200.247266][ T8363]        ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0
[  200.253443][ T8363]        ocfs2_xattr_set+0xc68/0x1390
[  200.258854][ T8363]        __vfs_setxattr+0x3d8/0x410
[  200.264058][ T8363]        __vfs_setxattr_noperm+0x126/0x5e0
[  200.269983][ T8363]        vfs_setxattr+0x167/0x2e0
[  200.275018][ T8363]        setxattr+0x2cb/0x360
[  200.279697][ T8363]        path_setxattr+0x147/0x290
[  200.284816][ T8363]        __x64_sys_setxattr+0xb7/0xd0
[  200.290210][ T8363]        do_syscall_64+0x4c/0xa0
[  200.295204][ T8363]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  200.301653][ T8363] 
[  200.301653][ T8363] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}:
[  200.309499][ T8363]        __lock_acquire+0x2c66/0x7b50
[  200.314908][ T8363]        lock_acquire+0x19e/0x400
[  200.319964][ T8363]        down_read+0x44/0x2e0
[  200.324676][ T8363]        ocfs2_init_acl+0x307/0x770
[  200.329874][ T8363]        ocfs2_mknod+0x15de/0x2510
[  200.334984][ T8363]        ocfs2_mkdir+0x192/0x420
[  200.339924][ T8363]        vfs_mkdir+0x386/0x570
[  200.344691][ T8363]        do_mkdirat+0x1dd/0x5c0
[  200.349584][ T8363]        __x64_sys_mkdirat+0x85/0x90
[  200.354881][ T8363]        do_syscall_64+0x4c/0xa0
[  200.359815][ T8363]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  200.366232][ T8363] 
[  200.366232][ T8363] other info that might help us debug this:
[  200.366232][ T8363] 
[  200.376463][ T8363] Chain exists of:
[  200.376463][ T8363]   &oi->ip_xattr_sem --> sb_internal#3 --> &journal->j_trans_barrier
[  200.376463][ T8363] 
[  200.390370][ T8363]  Possible unsafe locking scenario:
[  200.390370][ T8363] 
[  200.397826][ T8363]        CPU0                    CPU1
[  200.403204][ T8363]        ----                    ----
[  200.408591][ T8363]   lock(&journal->j_trans_barrier);
[  200.413879][ T8363]                                lock(sb_internal#3);
[  200.420643][ T8363]                                lock(&journal->j_trans_barrier);
[  200.428452][ T8363]   lock(&oi->ip_xattr_sem);
[  200.433057][ T8363] 
[  200.433057][ T8363]  *** DEADLOCK ***
[  200.433057][ T8363] 
[  200.441197][ T8363] 8 locks held by syz.0.1713/8363:
[  200.446305][ T8363]  #0: ffff88807e0ec460 (sb_writers#34){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  200.455545][ T8363]  #1: ffff888050853488 (&type->i_mutex_dir_key#22/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  200.466255][ T8363]  #2: ffff88806245c2c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x44b0
[  200.479911][ T8363]  #3: ffff88806245b488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x44b0
[  200.493587][ T8363]  #4: ffff888062459808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x11c/0x2630
[  200.507532][ T8363]  #5: ffff88807e0ec650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xf70/0x2510
[  200.516763][ T8363]  #6: ffff88805ee9b0e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  200.527463][ T8363]  #7: ffff8881449a8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[  200.537131][ T8363] 
[  200.537131][ T8363] stack backtrace:
[  200.543016][ T8363] CPU: 1 PID: 8363 Comm: syz.0.1713 Not tainted syzkaller #0
[  200.550411][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  200.560479][ T8363] Call Trace:
[  200.563769][ T8363]  <TASK>
[  200.566712][ T8363]  dump_stack_lvl+0x188/0x250
[  200.571397][ T8363]  ? load_image+0x410/0x410
[  200.575907][ T8363]  ? show_regs_print_info+0x20/0x20
[  200.581117][ T8363]  ? print_circular_bug+0x12b/0x1a0
[  200.586352][ T8363]  check_noncircular+0x296/0x330
[  200.591336][ T8363]  ? add_chain_block+0x9b0/0x9b0
[  200.596277][ T8363]  ? mark_lock+0x94/0x320
[  200.600607][ T8363]  ? _find_first_zero_bit+0xd1/0xf0
[  200.605813][ T8363]  ? add_lock_to_list+0x18d/0x280
[  200.610879][ T8363]  __lock_acquire+0x2c66/0x7b50
[  200.615772][ T8363]  ? verify_lock_unused+0x140/0x140
[  200.620990][ T8363]  ? verify_lock_unused+0x140/0x140
[  200.626215][ T8363]  ? __ocfs2_journal_access+0x678/0x860
[  200.631761][ T8363]  lock_acquire+0x19e/0x400
[  200.636275][ T8363]  ? ocfs2_init_acl+0x307/0x770
[  200.641147][ T8363]  ? __might_sleep+0xf0/0xf0
[  200.645732][ T8363]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  200.651373][ T8363]  ? read_lock_is_recursive+0x10/0x10
[  200.656770][ T8363]  ? mutex_unlock+0x10/0x10
[  200.661297][ T8363]  down_read+0x44/0x2e0
[  200.665498][ T8363]  ? ocfs2_init_acl+0x307/0x770
[  200.670355][ T8363]  ocfs2_init_acl+0x307/0x770
[  200.675034][ T8363]  ? ocfs2_acl_chmod+0x330/0x330
[  200.679978][ T8363]  ? dquot_alloc_inode+0x1c2/0x9b0
[  200.685302][ T8363]  ? ocfs2_journal_access+0x40/0x40
[  200.690647][ T8363]  ? ocfs2_block_signals+0x97/0xe0
[  200.695896][ T8363]  ? ocfs2_free_mem_caches+0x50/0x50
[  200.701203][ T8363]  ? ocfs2_init_security_get+0x135/0x1a0
[  200.706846][ T8363]  ocfs2_mknod+0x15de/0x2510
[  200.711469][ T8363]  ? ocfs2_mkdir+0x420/0x420
[  200.716097][ T8363]  ? __lock_acquire+0x13dc/0x7b50
[  200.721156][ T8363]  ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10
[  200.727414][ T8363]  ? ocfs2_inode_lock_tracker+0x433/0x700
[  200.733148][ T8363]  ? __lock_acquire+0x7b50/0x7b50
[  200.738178][ T8363]  ? do_raw_spin_lock+0x128/0x2f0
[  200.743232][ T8363]  ? ocfs2_inode_unlock_tracker+0x26c/0x2e0
[  200.749137][ T8363]  ? __lock_acquire+0x7b50/0x7b50
[  200.754167][ T8363]  ? __rwlock_init+0x140/0x140
[  200.758947][ T8363]  ? ocfs2_lookup+0x4a8/0x960
[  200.763642][ T8363]  ? do_raw_spin_unlock+0x11d/0x230
[  200.768847][ T8363]  ? put_pid+0xda/0x120
[  200.773036][ T8363]  ocfs2_mkdir+0x192/0x420
[  200.777479][ T8363]  ? make_kgid+0x650/0x650
[  200.781898][ T8363]  ? ocfs2_symlink+0x2780/0x2780
[  200.786839][ T8363]  ? HAS_UNMAPPED_ID+0x1c5/0x220
[  200.791781][ T8363]  ? ocfs2_getattr+0x360/0x360
[  200.796548][ T8363]  ? inode_permission+0xef/0x480
[  200.801618][ T8363]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  200.806656][ T8363]  ? security_inode_mkdir+0xb3/0x100
[  200.811953][ T8363]  vfs_mkdir+0x386/0x570
[  200.816219][ T8363]  do_mkdirat+0x1dd/0x5c0
[  200.820556][ T8363]  ? vfs_mkdir+0x570/0x570
[  200.824995][ T8363]  __x64_sys_mkdirat+0x85/0x90
[  200.829923][ T8363]  do_syscall_64+0x4c/0xa0
[  200.834374][ T8363]  ? clear_bhb_loop+0x30/0x80
[  200.839183][ T8363]  ? clear_bhb_loop+0x30/0x80
[  200.843894][ T8363]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  200.849826][ T8363] RIP: 0033:0x7f644d141fc7
[  200.854243][ T8363] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.873871][ T8363] RSP: 002b:00007f644b39ae58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  200.882292][ T8363] RAX: ffffffffffffffda RBX: 00007f644b39aee0 RCX: 00007f644d141fc7
[  200.890272][ T8363] RDX: 00000000000001ff RSI: 0000200000021300 RDI: 00000000ffffff9c
[  200.898252][ T8363] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000
[  200.906242][ T8363] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000200000021300
[  200.914215][ T8363] R13: 00007f644b39aea0 R14: 0000000000000000 R15: 0000000000000000
[  200.922204][ T8363]  </TASK>
[  200.926858][ T4274] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  200.940768][ T4274] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  200.957863][ T4274] usb 5-1: Product: syz
[  200.962073][ T4274] usb 5-1: Manufacturer: syz
[  200.966695][ T4274] usb 5-1: SerialNumber: syz
[  200.987992][ T4274] usb 5-1: config 0 descriptor??
[  200.994931][ T8363] syz.0.1713 (8363) used greatest stack depth: 17024 bytes left
[  201.024444][ T8399] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1728: inode has both inline data and extents flags
[  201.039368][ T4274] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  201.050988][ T4184] ocfs2: Unmounting device (7,0) on (node local)
[  201.108008][ T4274] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  201.152023][ T8399] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1728: couldn't read orphan inode 15 (err -117)
[  201.166107][ T8399] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  201.478224][ T4230] usb 5-1: USB disconnect, device number 15
[  201.486374][ T4230] ldusb 5-1:0.0: LD USB Device #0 now disconnected