last executing test programs:

4m28.282533447s ago: executing program 2 (id=480):
r0 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000000)={0x1000000})

4m28.200312798s ago: executing program 2 (id=481):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

4m25.682321459s ago: executing program 2 (id=512):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000809000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000081000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000080))

4m25.682071193s ago: executing program 2 (id=513):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x2)

4m25.530239345s ago: executing program 2 (id=515):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x6d}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x8, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x240480c4)

4m25.192264319s ago: executing program 2 (id=520):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0xd3bf075d5923c4f0, 0x4)

4m25.192181183s ago: executing program 32 (id=520):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0xd3bf075d5923c4f0, 0x4)

3m55.701449537s ago: executing program 0 (id=903):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x400c4d00, 0x0)

3m55.701235493s ago: executing program 0 (id=904):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x9, 0x4)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)

3m55.595832455s ago: executing program 0 (id=906):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x8000, 0x7, 0xa, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x4, 0x0}}}}})

3m55.516276841s ago: executing program 0 (id=907):
mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2003, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

3m55.439708865s ago: executing program 0 (id=908):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xfb, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x103, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x4, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x5, 0x9, 0x9, 0xfffffbff, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x1001f, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3m55.090233706s ago: executing program 0 (id=911):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/221, 0xd01}], 0x1, 0x0, 0xfffffca4}, 0x2)

3m54.893431294s ago: executing program 33 (id=911):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/221, 0xd01}], 0x1, 0x0, 0xfffffca4}, 0x2)

53.818779001s ago: executing program 3 (id=2842):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

53.747666079s ago: executing program 3 (id=2844):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18)

53.670610714s ago: executing program 3 (id=2845):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r0, 0x541b, 0x0)

53.600644559s ago: executing program 3 (id=2847):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f00000002c0), 0x5, 0x530, &(0x7f0000001f00)="$eJzs3c9vI1cdAPDvzG426XbbpFCpgIAupbCg1dobt42qnsqFH6oqIVacOKQh8UZRnDiKndKElZr8D0hU4oDghDgigeBQqSeOCG5w66UckApdgRokDkYzHmfdjd14k6yt2p+PNPLMvPF83/No3ou/sf0CmFhXI2I/Ii5FxGsRMVvsT4olXm4v2XEf3r2zfHj3znISrdatfyV5ebYvup6TebQ450xEfO9bET9Mjsdt7O6tL9Vq1e1iu9zc2Co3dvdurG0srVZXq5uVysL8ws0Xn3uhMlA7ZgY45umN37z/zbVXvv/2H77w3l/2v/7jrFpXirLudpyndtOnjuJkLkbEKw8j2AhcKNpzadQV4VTSiPhURDyT3/+zcSG/moPpcVsDAJ8ArdZstGa7twGAcZfmObAkLRW5gCuRpqVSO4f3ZFxOa/VG8/rt+s7mSjtXNhdT6e21WvVmkSuci6kk255/M1u/t12Jj2x/8OuIeCIifjL9SF5eWh48zwAAnK9H7xv//zPdHv8BgDHX88Mz3e/PF4dXFwBgOAb58CwAMF6M/wAwee6N/5dHWg8AYHi8/weAyWP8B4BJ825n/L8w6poAAEPx3VdfzZbWYfH71yuv7+6s11+/sVJtrJc2dpZLy/XtrdJqvb5aq5aW6xsnna9Wr2/NPx87b5Sb1Uaz3NjdW9yo72w2F/Pf9V6sTg2lVQDAx3ni6Xf+lkTE/kuP5Et0zeVgrIbxlo66AsDIyPnD5PIr3DC5vMeHyfXb4hu/J83l2fcjwm+dImjrzVM8CThv1z4r/w+TSv4fJpf8P0yu4/n//ZHUAxi+VivpN+d/enQIADBWHjDH718CMIaG+v9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBNX8mWuaztNS6WIxyJiLqaS22u16s2IeDwi/jo9NZ1tz4+0xgDA2aX/SIr5v67NPnvl/tJLyX+n88eI+NHPbv30jaVmc3s+2//B0f7mW8X+yijqDwCcpDNOd8bxjg/v3lnuLMOsz/vfaE8umsU9LJZ2ycW4mD38eSafdPjyv5P2diH7e+XCOcTfP4iIz/Rqf5LnRuaKmU/vj5/Ffmyo8dOPxE/zsvZj9lp8+tiZp/vGPGmuV5gU72T9z8u97r80ruaPMz0nP57Je6iz6/R/h8f6v879PpP3Nb36v6uDxnj+j9/pW3YQ8bmLveInR/GTPvGfHTD+u5//4jP9ylq/iLgWveN3xyo3N7bKjd29G9kLX12tblYqC/MLN1987oVKOc9RlzuZ6m7tEeKfL11/vG/7f/X7oqM8Hr992We+fatP+7/ysa1uHXXAv/zfaz/4Ur/4BxFf+3Lv6/9kO37P1z8bE79arPfv6duWLv+u7/TdWfyV9ut/8KDX//oJcTve+/veyoCHAgBD0NjdW1+q1arb57oyFed8wq6V5CHV2cppVtI409NjiFXN/kw+63meKlJmS537p/uYP/387aeyfSO/KOeyMro+CRiOezf9qGsCAAAAAAAAAAAAAAD089C/TpSOuoUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMs/8HAAD//xVhxok=")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x6, 0x0, "ef35af413bb901527fe4d0ce5d29e4e536c23676345a41499db7aac63a2ae2c084a0ea0000000000007700000c0000200000faffffffffffffff00", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220ffffd2fe00000000000000000e00", [0x800000002, 0x8]})
truncate(&(0x7f0000000240)='./file1\x00', 0x8)
socket$inet_tcp(0x2, 0x1, 0x0)

53.270382464s ago: executing program 3 (id=2852):
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140)="0098", 0x2, 0xffffffffffffffff)

52.84128165s ago: executing program 3 (id=2857):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}, 0x1000000})

52.702266808s ago: executing program 34 (id=2857):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}, 0x1000000})

3.770112348s ago: executing program 1 (id=3327):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x2, 0x8, 0x1, 0xfffc]}}]}]}]}, 0x38}}, 0x0)

3.70104294s ago: executing program 1 (id=3328):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)

3.700927347s ago: executing program 1 (id=3329):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}, {0x18, 0x110, 0x1, '\x00'}, {0x10, 0x115}], 0x40}, 0x0)

3.61246768s ago: executing program 1 (id=3330):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000050c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844)

3.455967545s ago: executing program 1 (id=3331):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0), 0x4, 0x97d7, &(0x7f0000012d80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000004c9002000c00000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038b69c7c263d9d00000000000000000000000000000000000000000000a6133fa79da39b735da1"])

3.326858279s ago: executing program 1 (id=3332):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

1.518908693s ago: executing program 4 (id=3344):
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x20, @void}, 0x10)
r0 = io_uring_setup(0x1680, &(0x7f0000000200)={0x0, 0x3a29, 0x1, 0x80000007, 0x14b})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

597.348191ms ago: executing program 4 (id=3345):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)
close(r0)

597.001563ms ago: executing program 4 (id=3346):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x4004550d, 0x0)

495.186648ms ago: executing program 5 (id=3347):
r0 = gettid()
rt_sigqueueinfo(r0, 0x5, &(0x7f00000012c0)={0xf, 0xffff, 0x6})

429.622153ms ago: executing program 4 (id=3348):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

357.753943ms ago: executing program 4 (id=3349):
syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000000800)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

250.931532ms ago: executing program 5 (id=3350):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200050, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYBLOB="8f885045210635adb7e6436894228db3ca307a6a34ed8bcac81952ee0bd544cd75dfb41348803558a5fce3ce459f0520b79b93828d78bdefc834dd46e379d43441d36a2175580482bac07e9f8e36e0c0ed7665883da3c4307fcec811da2a770ebeb360ee9f7feab5696ff3736fc5d0299fd2f93ce9c0f30bd2f5c5c3efe112e0b6f4968d88ad0095457ca2847daf624d643e11daf40e9e8953f2eda4e319da17d99f30c215919c5ffed73a4a908ea9829108fc04e3666f7cf793825539f06254d0cad1dc084027bc029ba42e450b3592f440145b3b4b12f076472702", @ANYRESOCT=0x0], 0x1, 0x1d2, &(0x7f00000005c0)="$eJzs20tu00Acx/Gf67gp4f3asEBILGBDAoUNO3oALsCuak1V4QKibBIhRRyFm+QEXIELJBLsWDHIzkQklh2PnVDn8f1Ibf7q+OeZSDPuzMICsLVuJL89eQqSyhjTfyDpzWtJjZoHB+C/MvpjAGwr/2fdIwBQj9GBn+wDBp7049eXo6H9CRz3D6ODnXGxJ2kqv+ua/+oln/ca0nAq37S3LNy/fBvnH2k2f6lk/61UvpVz/Xf76aX+/vjhbP6ypCuSrkq6Jum6PWvdlHQro//jVP93HccPLCKefe1F8wvcIH56vD2NwqdZjX5xPrD5Z9nNU4+QQeYFuza/7zjevPzzivmmzbePPkTHGe07Fe8LuIjnV7tZdFUrdx66rH9jTD+vzZd+m/T6f1U0nn8a89c/gDnOu713h1EUfipRBEkxeWiUiMeXl+zLqfC05Btue7GX0RRUnC3p4r49ea7EN43/fa3AMFyLyaq9yL4AbKrO57OPnfNu78np2eFJeBK+33/xcnLsTs7lndzTOYA1N7s5BwAAAAAAAAAAAAAA6+i2pDtVgq4v+AEAAABYGct9ZyiQMl7Fq/s7AgAAAAAAAAAAAAAAAAAAAJvibwAAAP//CWZIGA==")
truncate(&(0x7f0000000940)='./file1\x00', 0x3000000)

160.005865ms ago: executing program 5 (id=3351):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180))
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

159.83895ms ago: executing program 4 (id=3352):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlockall(0x7)
modify_ldt$write2(0x11, &(0x7f0000000200)={0x7, 0x20000800, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10)

60.847359ms ago: executing program 5 (id=3353):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)

682.949µs ago: executing program 5 (id=3354):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0)

0s ago: executing program 5 (id=3355):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00')
symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', 0x0)
symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00')
symlink(0x0, &(0x7f0000001900)='streaming/class/hs/h\x00')
symlink(0x0, &(0x7f0000001b00)='streaming/class/ss/h\x00')
fchdir(r0)
symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc)

kernel console output (not intermixed with test programs):

1604][T11632] (syz.3.2330,11632,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  256.054837][T11632] (syz.3.2330,11632,0):ocfs2_mount_volume:1757 ERROR: status = -22
[  256.068070][T11632] (syz.3.2330,11632,0):ocfs2_fill_super:1177 ERROR: status = -22
[  256.184791][ T5677] usb 5-1: Using ep0 maxpacket: 32
[  256.188268][ T5677] usb 5-1: unable to get BOS descriptor or descriptor too short
[  256.191877][ T5677] usb 5-1: config 42 has an invalid interface number: 12 but max is 0
[  256.196291][ T5677] usb 5-1: config 42 has no interface number 0
[  256.201568][ T5677] usb 5-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice=7d.0d
[  256.208089][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.215756][ T5677] usb 5-1: Product: syz
[  256.226848][ T5677] usb 5-1: Manufacturer: syz
[  256.230078][ T5677] usb 5-1: SerialNumber: syz
[  256.818026][T11639] loop3: detected capacity change from 0 to 131072
[  256.827821][T11639] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  256.830460][T11639] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  256.840151][T11639] F2FS-fs (loop3): invalid crc value
[  256.883503][T11639] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  256.891914][T11639] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  256.894383][T11639] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  256.913120][ T5677] usb 5-1: USB disconnect, device number 26
[  257.289120][T11653] netlink: 'syz.1.2339': attribute type 13 has an invalid length.
[  257.530426][T11660] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2342'.
[  258.369030][T11673] openvswitch: netlink: IP tunnel dst address not specified
[  258.466352][T11680] loop1: detected capacity change from 0 to 256
[  258.996670][T11692] loop3: detected capacity change from 0 to 32768
[  259.045367][T11692] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  259.045367][T11692] 
[  259.072478][T11692] ERROR: (device loop3): remounting filesystem as read-only
[  259.708511][T11712] loop3: detected capacity change from 0 to 131072
[  259.719570][T11712] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  259.721716][T11712] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  259.727927][T11712] F2FS-fs (loop3): invalid crc value
[  259.755150][T11712] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  259.761606][T11712] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[  259.763950][T11712] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  259.951484][T11718] loop1: detected capacity change from 0 to 764
[  260.021384][T11720] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.361491][T11734] loop1: detected capacity change from 0 to 256
[  260.373881][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'.
[  260.381016][T11734] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  260.396111][T11736] bridge_slave_1: left allmulticast mode
[  260.406629][T11736] bridge_slave_1: left promiscuous mode
[  260.414007][   T34] audit: type=1800 audit(1785552314.839:87): pid=11734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2375" name="file1" dev="loop1" ino=1048655 res=0 errno=0
[  260.425394][T11736] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.453802][   T34] audit: type=1800 audit(1785552314.859:88): pid=11734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2375" name="file1" dev="loop1" ino=1048655 res=0 errno=0
[  260.477906][T11736] bridge_slave_0: left allmulticast mode
[  260.479741][T11736] bridge_slave_0: left promiscuous mode
[  260.486890][T11736] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.532697][T11739] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  260.561149][T11739] FAT-fs (loop1): Filesystem has been set read-only
[  260.610956][T11739] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  261.154695][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  261.238931][   T34] audit: type=1326 audit(1785552315.669:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.4.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  261.252649][T11765] binder: 11764:11765 ioctl c0306201 0 returned -14
[  261.262339][   T34] audit: type=1326 audit(1785552315.679:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.4.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  261.287144][   T34] audit: type=1326 audit(1785552315.679:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.4.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  261.303977][   T34] audit: type=1326 audit(1785552315.679:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.4.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  261.318348][    T9] usb 4-1: Using ep0 maxpacket: 16
[  261.331651][   T34] audit: type=1326 audit(1785552315.679:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.4.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  261.340751][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  261.347971][    T9] usb 4-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00
[  261.359937][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.364976][T11769] loop4: detected capacity change from 0 to 256
[  261.369834][   T34] audit: type=1326 audit(1785552315.679:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.4.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff2aef9dd82 code=0x7ffc0000
[  261.381401][T11771] scsi_nl_rcv_msg: Msgtype 1 failed - err -3
[  261.386358][    T9] usb 4-1: config 0 descriptor??
[  261.411892][   T34] audit: type=1326 audit(1785552315.679:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.4.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff2aef9dd82 code=0x7ffc0000
[  261.448304][   T34] audit: type=1326 audit(1785552315.679:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.4.2389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  261.489130][T11769] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  261.579670][T11775] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  261.579670][T11775] Please contact the netfilter-devel mailing list or update your nftables rules.
[  261.597596][T11777] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2393'.
[  261.804084][    T9] ortek 0003:05A4:8003.0008: unknown main item tag 0x2
[  261.816435][    T9] ortek 0003:05A4:8003.0008: unknown main item tag 0x6
[  261.825435][    T9] ortek 0003:05A4:8003.0008: unknown main item tag 0x4
[  261.830273][    T9] ortek 0003:05A4:8003.0008: ignoring exceeding usage max
[  261.837306][    T9] ortek 0003:05A4:8003.0008: global environment stack underflow
[  261.842768][    T9] ortek 0003:05A4:8003.0008: item 0 4 1 11 parsing failed
[  261.850737][    T9] ortek 0003:05A4:8003.0008: probe with driver ortek failed with error -22
[  261.997922][T11791] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2400'.
[  262.009755][    T9] usb 4-1: USB disconnect, device number 23
[  262.052252][ T5618] Bluetooth: hci1: unexpected event for opcode 0x042d
[  262.488474][T11813] loop4: detected capacity change from 0 to 32768
[  262.500144][T11813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2411 (11813)
[  262.512102][T11813] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  262.525655][T11813] BTRFS info (device loop4): using crc32c checksum algorithm
[  262.589582][T11813] BTRFS info (device loop4): enabling ssd optimizations
[  262.598424][T11813] BTRFS info (device loop4): turning on flush-on-commit
[  262.607139][T11813] BTRFS info (device loop4): turning on async discard
[  262.612696][T11813] BTRFS info (device loop4): enabling free space tree
[  262.622623][T11813] BTRFS info (device loop4): enabling auto defrag
[  262.631193][T11813] BTRFS info (device loop4): force zlib compression, level 3
[  262.642653][T11813] BTRFS info (device loop4): max_inline set to 4096
[  262.705887][ T8041] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  263.152319][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2420'.
[  263.351835][T11860] loop4: detected capacity change from 0 to 1024
[  263.674195][T11874] loop1: detected capacity change from 0 to 256
[  263.703028][T11874] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  263.716346][    T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  263.741050][T11874] exFAT-fs (loop1): valid_size(150994954) is greater than size(10)
[  263.875967][    T9] usb 5-1: Using ep0 maxpacket: 8
[  263.911817][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  263.937008][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  263.953354][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  263.976037][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  264.013345][T11880] loop1: detected capacity change from 0 to 8
[  264.018014][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  264.026839][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.063880][T11880] SQUASHFS error: Unable to read directory block [1d0:62]
[  264.266672][    T9] usb 5-1: GET_CAPABILITIES returned 0
[  264.273437][    T9] usbtmc 5-1:16.0: can't read capabilities
[  264.282867][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'.
[  264.301112][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'.
[  264.312475][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'.
[  264.330663][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'.
[  264.337350][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'.
[  264.475919][ T5677] usb 5-1: USB disconnect, device number 27
[  264.604425][    T9] usb 4-1: new low-speed USB device number 24 using dummy_hcd
[  264.619438][T11899] syzkaller1: entered promiscuous mode
[  264.623410][T11899] syzkaller1: entered allmulticast mode
[  264.763275][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  264.771629][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  264.779641][T11903] tmpfs: Cannot disable swap on remount
[  264.786097][    T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  264.796121][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  264.805903][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  264.826123][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  264.836433][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  264.850367][    T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  264.866361][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  264.880280][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  264.905312][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  264.913011][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  264.927424][    T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  264.942769][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  264.953416][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  264.977629][    T9] usb 4-1: string descriptor 0 read error: -22
[  264.983357][    T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  264.995786][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.093342][    T9] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  265.239727][T11886] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  265.357867][T11925] GUP no longer grows the stack in syz.1.2456 (11925): 200000004000-200000007000 (200000002000)
[  265.363056][T11925] CPU: 0 UID: 0 PID: 11925 Comm: syz.1.2456 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  265.363069][T11925] Tainted: [L]=SOFTLOCKUP
[  265.363072][T11925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  265.363077][T11925] Call Trace:
[  265.363081][T11925]  <TASK>
[  265.363084][T11925]  dump_stack_lvl+0xe8/0x150
[  265.363100][T11925]  __get_user_pages+0x23b6/0x2750
[  265.363121][T11925]  get_user_pages_remote+0x307/0xb10
[  265.363130][T11925]  ? __pfx_mtree_load+0x10/0x10
[  265.363143][T11925]  ? __pfx_get_user_pages_remote+0x10/0x10
[  265.363152][T11925]  ? __access_remote_vm+0x42c/0x6f0
[  265.363163][T11925]  __access_remote_vm+0x222/0x6f0
[  265.363176][T11925]  ? __pfx___access_remote_vm+0x10/0x10
[  265.363185][T11925]  ? proc_pid_cmdline_read+0x41c/0x900
[  265.363195][T11925]  ? proc_pid_cmdline_read+0x41c/0x900
[  265.363208][T11925]  proc_pid_cmdline_read+0x46b/0x900
[  265.363219][T11925]  ? __asan_memset+0x22/0x50
[  265.363231][T11925]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  265.363244][T11925]  ? rw_verify_area+0x24a/0x4c0
[  265.363253][T11925]  vfs_readv+0x57c/0x850
[  265.363264][T11925]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  265.363276][T11925]  ? __pfx_vfs_readv+0x10/0x10
[  265.363291][T11925]  ? __fget_files+0x2a/0x420
[  265.363300][T11925]  ? __fget_files+0x3a2/0x420
[  265.363306][T11925]  ? __fget_files+0x2a/0x420
[  265.363315][T11925]  __x64_sys_preadv+0x19c/0x2b0
[  265.363325][T11925]  ? __pfx___x64_sys_preadv+0x10/0x10
[  265.363337][T11925]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.363345][T11925]  do_syscall_64+0x174/0x580
[  265.363354][T11925]  ? trace_irq_disable+0x3b/0x140
[  265.363370][T11925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.363377][T11925] RIP: 0033:0x7f6434b9e019
[  265.363385][T11925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.363391][T11925] RSP: 002b:00007f643599b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  265.363400][T11925] RAX: ffffffffffffffda RBX: 00007f6434e25fa0 RCX: 00007f6434b9e019
[  265.363405][T11925] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003
[  265.363410][T11925] RBP: 00007f6434c3500c R08: 00000000fffffff9 R09: 0000000000000000
[  265.363415][T11925] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  265.363419][T11925] R13: 00007f6434e26038 R14: 00007f6434e25fa0 R15: 00007ffc8b7475f8
[  265.363431][T11925]  </TASK>
[  265.510882][T11927] loop1: detected capacity change from 0 to 24
[  265.540715][T11927] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  265.546440][T11927] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  265.585687][    T9] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  265.736533][    T9] usb 5-1: config 8 has an invalid interface number: 212 but max is 1
[  265.739152][T11938] loop1: detected capacity change from 0 to 8
[  265.741579][    T9] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  265.758869][    T9] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 2
[  265.761961][T11938] SQUASHFS error: xz decompression failed, data probably corrupt
[  265.774040][    T9] usb 5-1: config 8 has no interface number 0
[  265.778072][ T5677] usb 4-1: USB disconnect, device number 24
[  265.781960][T11938] SQUASHFS error: Failed to read block 0x108: -5
[  265.789971][    T9] usb 5-1: config 8 interface 212 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  265.799700][T11938] SQUASHFS error: Unable to read metadata cache entry [106]
[  265.805183][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.815417][T11938] SQUASHFS error: Unable to read inode 0x11f
[  265.817344][    T9] usb 5-1: config 8 interface 212 has no altsetting 0
[  265.836784][    T9] usb 5-1: New USB device found, idVendor=19d2, idProduct=7fc1, bcdDevice=e8.57
[  265.853386][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.870786][    T9] usb 5-1: Product: syz
[  265.872179][    T9] usb 5-1: Manufacturer: syz
[  265.888182][    T9] usb 5-1: SerialNumber: syz
[  266.123387][    T9] rndis_host 5-1:8.212: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  266.148078][    T9] usb 5-1: USB disconnect, device number 28
[  266.174257][T11952] loop3: detected capacity change from 0 to 2048
[  266.210804][T11952]  loop3: p3 < > p4 < >
[  266.214275][T11952] loop3: partition table partially beyond EOD, truncated
[  266.231440][T11952] loop3: p3 start 4284289 is beyond EOD, truncated
[  266.252996][ T5057]  loop3: p3 < > p4 < >
[  266.258872][ T5057] loop3: partition table partially beyond EOD, truncated
[  266.267564][ T5057] loop3: p3 start 4284289 is beyond EOD, truncated
[  266.317619][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  266.349994][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  266.412889][T11963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2470'.
[  266.849370][T11977] loop4: detected capacity change from 0 to 1764
[  266.930691][T11977] iso9660: Corrupted directory entry in block 2 of inode 1920
[  267.210687][T11986] loop4: detected capacity change from 0 to 1024
[  267.242762][T11986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.346914][ T8041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.444099][T11993] loop4: detected capacity change from 0 to 1024
[  267.457960][T11993] EXT4-fs warning (device loop4): read_mmp_block:110: Error -117 while reading MMP block 64
[  267.597618][T12001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2487'.
[  267.600816][T12001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2487'.
[  267.635043][T12003] loop3: detected capacity change from 0 to 128
[  267.735042][    T9] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  267.857032][T12013] loop3: detected capacity change from 0 to 512
[  267.876549][T12013] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  267.890787][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  267.895563][T12013] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  267.899942][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  267.911227][    T9] usb 5-1: config 9 has an invalid interface number: 124 but max is 0
[  267.916221][    T9] usb 5-1: config 9 has no interface number 0
[  267.919602][T12013] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  267.924139][    T9] usb 5-1: config 9 interface 124 altsetting 195 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  267.929655][T12013] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  267.936210][    T9] usb 5-1: config 9 interface 124 altsetting 195 endpoint 0xB has an invalid bInterval 0, changing to 4
[  267.940194][T12013] System zones: 0-2, 18-18, 34-35
[  267.946066][T12013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.951429][    T9] usb 5-1: config 9 interface 124 altsetting 195 endpoint 0xB has invalid wMaxPacketSize 0
[  267.959044][    T9] usb 5-1: config 9 interface 124 has no altsetting 0
[  267.973249][    T9] usb 5-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=42.b4
[  267.981260][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.990702][    T9] usb 5-1: Product: syz
[  267.992054][    T9] usb 5-1: Manufacturer: syz
[  268.002120][    T9] usb 5-1: SerialNumber: syz
[  268.042830][ T6984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.212971][T11993] loop4: detected capacity change from 0 to 8
[  268.227332][T11993] squashfs: Unknown parameter '0x0000000000000000g\.DRرtAf߸JL)t9pCF_V[pyJ1B}%I}ߟZ
[  268.227332][T11993] m*'
[  268.278097][    T9] usbtest 5-1:9.124: couldn't get endpoints, -71
[  268.293571][    T9] usbtest 5-1:9.124: probe with driver usbtest failed with error -71
[  268.322013][    T9] usb 5-1: USB disconnect, device number 29
[  269.520817][T12025] usb usb8: usbfs: process 12025 (syz.1.2496) did not claim interface 0 before use
[  269.952934][T12047] loop4: detected capacity change from 0 to 128
[  271.043315][T12084] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2524'.
[  271.799595][T12122] netlink: 'syz.4.2543': attribute type 1 has an invalid length.
[  271.803707][T12122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.872095][T12125] netlink: 'syz.4.2544': attribute type 14 has an invalid length.
[  271.941151][  T799] kernel write not supported for file /vcsu (pid: 799 comm: kworker/0:2)
[  272.026989][T12130] loop4: detected capacity change from 0 to 2048
[  272.052879][T12130] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  273.592691][T12155] loop4: detected capacity change from 0 to 128
[  273.620235][T12155] FAT-fs (loop4): bogus number of reserved sectors
[  273.631994][T12155] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  273.663926][T12155] FAT-fs (loop4): Can't find a valid FAT filesystem
[  273.686788][T12157] gretap0: Device is already in use.
[  273.889609][T12165] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2562'.
[  274.473985][T12167] loop1: detected capacity change from 0 to 32768
[  274.531303][T12167] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  274.573915][T12167] XFS (loop1): Ending clean mount
[  274.650169][T12190] input: syz0 as /devices/virtual/input/input15
[  274.793327][ T5608] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  275.026852][T12196] loop4: detected capacity change from 0 to 8192
[  275.459216][T12212] netlink: 'syz.1.2579': attribute type 7 has an invalid length.
[  276.224655][  T799] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  276.246985][ T5505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.258836][ T5505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.268939][ T5505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.284145][ T5505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.377541][  T799] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  276.385879][  T799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.401791][  T799] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  276.412067][  T799] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  276.422152][T12259] loop1: detected capacity change from 0 to 2048
[  276.427230][  T799] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  276.441381][  T799] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  276.449207][  T799] usb 4-1: Product: syz
[  276.450481][  T799] usb 4-1: Manufacturer: syz
[  276.457825][T12259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.465501][  T799] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  276.468590][T12267] netlink: 'syz.4.2602': attribute type 8 has an invalid length.
[  276.495688][T12267] bridge0: entered allmulticast mode
[  276.571092][T12259] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  276.599589][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.677344][ T5694] usb 4-1: USB disconnect, device number 25
[  276.794396][  T799] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  276.944689][  T799] usb 5-1: Using ep0 maxpacket: 16
[  276.949225][  T799] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  276.954790][  T799] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  276.957792][  T799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.960520][  T799] usb 5-1: Product: syz
[  276.961872][  T799] usb 5-1: Manufacturer: syz
[  276.963633][  T799] usb 5-1: SerialNumber: syz
[  276.969976][  T799] r8152-cfgselector 5-1: Unknown version 0x0000
[  276.972177][  T799] r8152-cfgselector 5-1: config 0 descriptor??
[  277.391792][  T799] r8152-cfgselector 5-1: USB disconnect, device number 30
[  277.426899][T12291] loop3: detected capacity change from 0 to 4096
[  277.447914][T12291] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  277.459059][T12291] ntfs3(loop3): Failed to load $Extend (-22).
[  277.461596][T12291] ntfs3(loop3): Failed to initialize $Extend.
[  277.750727][T12293] loop3: detected capacity change from 0 to 32768
[  277.785756][T12293] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  277.815067][T12293] XFS (loop3): Ending clean mount
[  277.877122][T12311] loop1: detected capacity change from 0 to 1024
[  277.976977][ T6984] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  278.004011][T12313] loop4: detected capacity change from 0 to 16
[  278.030711][T12313] erofs (device loop4): compressed inode (nid 36) is invalid in a plain filesystem
[  279.577628][T12359] loop1: detected capacity change from 0 to 1024
[  279.580574][T12359] EXT4-fs: inline encryption not supported
[  279.590751][T12359] EXT4-fs: Ignoring removed bh option
[  279.597911][T12359] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  279.617004][T12359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.656349][  T799] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  279.676899][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.794484][ T5694] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  279.814418][  T799] usb 4-1: Using ep0 maxpacket: 16
[  279.818248][  T799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  279.822462][  T799] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  279.836530][  T799] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  279.840315][  T799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.847979][  T799] usb 4-1: Product: syz
[  279.853741][  T799] usb 4-1: Manufacturer: syz
[  279.856040][  T799] usb 4-1: SerialNumber: syz
[  279.873598][  T799] usb 4-1: 0:2 : does not exist
[  279.951284][ T5694] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  279.963871][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.987107][ T5694] usb 5-1: Product: syz
[  279.993212][ T5694] usb 5-1: Manufacturer: syz
[  280.001654][ T5694] usb 5-1: SerialNumber: syz
[  280.019703][ T5694] usb 5-1: config 0 descriptor??
[  280.091260][  T799] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  280.228970][  T799] usb 4-1: USB disconnect, device number 26
[  280.266240][ T5694] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  280.340708][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  280.873605][ T5694] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  280.888946][ T5694] usb 5-1: USB disconnect, device number 31
[  281.311681][T12383] loop3: detected capacity change from 0 to 128
[  281.317505][T12383] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  281.325636][  T799] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  281.336651][T12383] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  281.476935][  T799] usb 2-1: Using ep0 maxpacket: 8
[  281.483338][  T799] usb 2-1: unable to get BOS descriptor or descriptor too short
[  281.490498][  T799] usb 2-1: config 2 has an invalid interface number: 216 but max is 0
[  281.495061][  T799] usb 2-1: config 2 has no interface number 0
[  281.499631][  T799] usb 2-1: config 2 interface 216 has no altsetting 0
[  281.507940][  T799] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=6c.76
[  281.519452][  T799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.528857][  T799] usb 2-1: Product: syz
[  281.533658][  T799] usb 2-1: Manufacturer: syz
[  281.538793][  T799] usb 2-1: SerialNumber: syz
[  281.613177][T12389] loop4: detected capacity change from 0 to 4096
[  281.623456][T12389] ntfs3(loop4): Failed to load $Volume (-22).
[  281.760261][  T799] pcwd_usb: The device isn't a Human Interface Device
[  281.775900][  T799] usb 2-1: USB disconnect, device number 24
[  281.900484][T12399] loop3: detected capacity change from 0 to 2048
[  282.057342][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2655'.
[  282.066690][T12405] team_slave_1: Caught tx_queue_len zero misconfig
[  282.211508][T12415] loop4: detected capacity change from 0 to 2048
[  282.250887][T12416] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  282.306578][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2659'.
[  282.350682][T12415] NILFS (loop4): error -2 reading inode: ino=835371204608
[  282.400152][T12416] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  282.415196][T12416] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  282.429445][T12416] Remounting filesystem read-only
[  282.453913][ T8041] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  282.497676][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2664'.
[  282.623889][T12430] tmpfs: Bad value for 'mpol'
[  282.770459][T12439] loop4: detected capacity change from 0 to 512
[  282.787961][T12439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.821211][ T8041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.327650][T12457] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  284.340658][T12457] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  284.352029][T12457] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  284.409306][T12457] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  284.418455][T12457] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  284.953221][T12481] netlink: 'syz.3.2688': attribute type 1 has an invalid length.
[  284.993638][T12481] 8021q: adding VLAN 0 to HW filter on device bond3
[  285.399533][T12487] loop1: detected capacity change from 0 to 131072
[  285.407107][T12487] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  285.409639][T12487] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  285.412752][T12487] F2FS-fs (loop1): invalid crc value
[  285.446710][T12487] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  285.453627][T12487] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  285.456196][T12487] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  285.476224][T12487] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[  285.486776][   T34] kauditd_printk_skb: 411 callbacks suppressed
[  285.486784][   T34] audit: type=1800 audit(1785552339.919:508): pid=12487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2690" name="file2" dev="loop1" ino=8 res=0 errno=0
[  285.509904][T12485] bond3: entered allmulticast mode
[  285.564756][T12481] bond3: (slave ip6gretap0): making interface the new active one
[  285.574030][T12481] ip6gretap0: entered allmulticast mode
[  285.583537][T12481] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link
[  285.592796][T12470] loop4: detected capacity change from 0 to 32768
[  285.972070][T12498] kAFS: unable to lookup cell '('
[  287.406324][T12512] loop4: detected capacity change from 0 to 256
[  287.410535][T12512] vfat: Unknown parameter 'ipcharset'
[  287.514604][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  287.521363][T12518] loop4: detected capacity change from 0 to 256
[  287.527923][T12518] exfat: Deprecated parameter 'namecase'
[  287.541860][T12518] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  287.665492][    T9] usb 4-1: Using ep0 maxpacket: 8
[  287.677439][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  287.690531][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  287.707460][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  287.729986][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  287.735487][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.744705][    T9] usb 4-1: Product: syz
[  287.748989][    T9] usb 4-1: Manufacturer: syz
[  287.758028][    T9] usb 4-1: SerialNumber: syz
[  287.777287][    T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  287.791003][    T9] usbtest 4-1:1.0: Linux user mode ISO test driver
[  287.803521][    T9] usbtest 4-1:1.0: high-speed {control iso-in} tests (+alt)
[  287.892236][T12534] loop4: detected capacity change from 0 to 512
[  287.912554][T12534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.934640][T12534] ext4 filesystem being mounted at /574/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  287.978290][    T9] usb 4-1: USB disconnect, device number 27
[  288.010953][ T5618] Bluetooth: hci1: unexpected event for opcode 0x0c38
[  288.026022][   T34] audit: type=1800 audit(1785552342.459:509): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2710" name="file1" dev="loop4" ino=15 res=0 errno=0
[  288.099914][ T8041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.319834][T12593] loop1: detected capacity change from 0 to 256
[  290.719184][T12600] loop4: detected capacity change from 0 to 512
[  291.205120][  T799] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  291.357075][  T799] usb 4-1: Using ep0 maxpacket: 16
[  291.368263][  T799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.379371][  T799] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.391751][  T799] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  291.409470][  T799] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  291.413851][  T799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  291.420207][  T799] usb 4-1: SerialNumber: syz
[  291.435278][  T799] hub 4-1:1.0: bad descriptor, ignoring hub
[  291.438890][  T799] hub 4-1:1.0: probe with driver hub failed with error -5
[  291.446267][  T799] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  291.525504][ T5694] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  291.678464][ T5694] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  291.684543][ T5694] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  291.691996][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.703117][ T5694] gspca_main: stv0680-2.14.0 probing 041e:4007
[  291.735327][  T799] usb 4-1: USB disconnect, device number 28
[  292.289208][T12677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2757'.
[  292.526196][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2762'.
[  293.304626][ T5694] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  293.315078][ T5694] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  293.326195][ T5694] stv0680 2-1:4.0: last error: 39,  command = 0xd5
[  293.534028][ T5677] usb 2-1: USB disconnect, device number 25
[  296.476778][T12726] loop4: detected capacity change from 0 to 32768
[  296.507033][T12726] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  296.560658][T12726] XFS (loop4): Ending clean mount
[  296.799714][T12726] XFS (loop4): User initiated shutdown received.
[  296.811241][T12726] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:458).  Shutting down filesystem.
[  296.833170][T12754] loop1: detected capacity change from 0 to 2048
[  296.835528][T12726] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  296.952486][T12754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.994005][ T8041] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  297.000789][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.120790][T12762] loop1: detected capacity change from 0 to 256
[  297.328139][T12766] loop1: detected capacity change from 0 to 136
[  297.340991][T12766] Attempt to read inode for relocated directory
[  297.579595][T12773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2790'.
[  297.727475][T12775] loop1: detected capacity change from 0 to 512
[  297.867700][T12777] bond1: option mode: unable to set because the bond device is up
[  297.877322][T12777] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  298.721747][T12777] 8021q: adding VLAN 0 to HW filter on device bond1
[  298.749212][T12777] bond1: (slave lo): making interface the new active one
[  298.759149][T12777] bond1: (slave lo): Enslaving as an active interface with an up link
[  298.766388][T12777] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  299.273522][   T34] audit: type=1326 audit(1785552353.699:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12802 comm="syz.3.2804" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f518619e019 code=0x0
[  299.354561][ T5677] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  299.516211][ T5677] usb 2-1: Using ep0 maxpacket: 16
[  299.523902][ T5677] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  299.534166][ T5677] usb 2-1: config 0 has no interface number 0
[  299.547979][ T5677] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  299.568375][ T5677] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  299.596600][ T5677] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  299.606171][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.614614][ T5677] usb 2-1: Product: syz
[  299.621154][ T5677] usb 2-1: Manufacturer: syz
[  299.643549][ T5677] usb 2-1: SerialNumber: syz
[  299.660567][ T5677] usb 2-1: config 0 descriptor??
[  299.670984][T12793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  299.678101][T12793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  299.908447][T12793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  299.919842][T12793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  299.980185][T12816] loop3: detected capacity change from 0 to 8192
[  300.131759][ T5677] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  300.335371][T12822] loop3: detected capacity change from 0 to 1024
[  301.011157][T12848] loop4: detected capacity change from 0 to 512
[  301.017068][T12848] EXT4-fs: Ignoring removed nobh option
[  301.023450][T12848] EXT4-fs: Ignoring removed mblk_io_submit option
[  301.028672][T12848] EXT4-fs (loop4): orphan cleanup on readonly fs
[  301.030767][T12848] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  301.041254][T12848] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2824: attempt to clear invalid blocks 2 len 1
[  301.046161][T12848] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  301.048519][T12848] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  301.055659][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  301.055669][    C0] EXT4-fs (loop4): initial error at time 1785552355: ext4_clear_blocks:876: inode 13
[  301.055681][    C0] EXT4-fs (loop4): last error at time 1785552355: ext4_clear_blocks:876: inode 13
[  301.070836][T12848] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2824: invalid indirect mapped block 1819239214 (level 0)
[  301.075427][T12848] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  301.075823][T12848] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2824: invalid indirect mapped block 1819239214 (level 1)
[  301.083036][T12848] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  301.084261][T12848] EXT4-fs (loop4): 1 truncate cleaned up
[  301.090695][T12848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  301.339639][ T5677] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  301.346352][ T5677] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  301.349876][ T5677] asix 2-1:0.34: probe with driver asix failed with error -71
[  301.355782][ T5677] usb 2-1: USB disconnect, device number 26
[  301.872257][ T8041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.051108][T12860] bond1: option mode: unable to set because the bond device has slaves
[  302.073031][T12860] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link
[  302.266339][T12865] loop4: detected capacity change from 0 to 40427
[  302.270491][T12865] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  302.272895][T12865] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  302.276908][T12865] F2FS-fs (loop4): invalid crc value
[  302.301935][T12865] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  302.309725][T12865] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  302.311981][T12865] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  302.322969][T12866] netlink: 'syz.1.2831': attribute type 7 has an invalid length.
[  302.336102][T12866] netlink: 'syz.1.2831': attribute type 7 has an invalid length.
[  302.474582][T12871] syz.4.2830: attempt to access beyond end of device
[  302.474582][T12871] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  302.480447][T12871] syz.4.2830: attempt to access beyond end of device
[  302.480447][T12871] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  302.490761][T12871] syz.4.2830 (12871) used greatest stack depth: 16896 bytes left
[  302.500339][T12873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2832'.
[  304.148298][T12889] loop4: detected capacity change from 0 to 1024
[  304.299451][T12893] loop3: detected capacity change from 0 to 1024
[  304.309243][T12893] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  304.322451][T12893] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  304.328869][T12893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  304.345546][ T6984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.649982][T12907] loop3: detected capacity change from 0 to 512
[  304.678632][T12907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.708507][T12907] ext4 filesystem being mounted at /758/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.804602][T12907] loop3: detected capacity change from 512 to 0
[  304.807133][T12907] EXT4-fs error (device loop3): __ext4_find_entry:1615: inode #2: comm syz.3.2847: reading directory lblock 0
[  304.836902][T12907] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  304.847296][T12907] EXT4-fs (loop3): I/O error while writing superblock
[  304.879192][ T6984] EXT4-fs error (device loop3): ext4_get_inode_loc:5024: inode #2: block 34: comm syz-executor: unable to read itable block
[  304.942618][ T6984] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  304.948970][T12918] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2853'.
[  304.953355][ T6984] EXT4-fs (loop3): I/O error while writing superblock
[  304.958108][T12918] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2853'.
[  304.962556][ T6984] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: IO failure
[  304.967497][ T6984] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  304.975540][ T6984] EXT4-fs (loop3): I/O error while writing superblock
[  304.983296][ T6984] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error
[  304.995782][ T6984] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  305.010099][ T6984] EXT4-fs (loop3): I/O error while writing superblock
[  305.051410][T12920] loop4: detected capacity change from 0 to 256
[  305.062537][T12920] vfat: Deprecated parameter 'posix'
[  305.069231][T12920] FAT-fs: "posix" option is obsolete, not supported now
[  305.089355][ T1199] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:5009: inode #2: block 34: comm kworker/u9:9: unable to read itable block
[  305.127332][ T1199] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  305.143077][ T1199] EXT4-fs (loop3): I/O error while writing superblock
[  305.153284][ T7563] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.173611][ T7563] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  305.190791][ T7563] EXT4-fs (loop3): I/O error while writing superblock
[  305.201964][T12908] Buffer I/O error on dev loop3, logical block 12, lost sync page write
[  305.294220][ T7563] bond0: (slave syz_tun): Releasing backup interface
[  305.385279][ T5505] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.479385][ T5505] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.505604][ T5694] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  305.528898][ T5505] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.571244][ T5505] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.608133][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  305.619944][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  305.629260][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  305.632185][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  305.635637][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  305.655593][ T5694] usb 5-1: Using ep0 maxpacket: 16
[  305.679881][ T5694] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  305.700380][ T5694] usb 5-1: config 0 has no interface number 0
[  305.707092][ T5694] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  305.719377][ T5694] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  305.732005][ T5694] usb 5-1: config 0 interface 41 has no altsetting 0
[  305.747809][ T5694] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  305.756345][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.763789][ T5694] usb 5-1: Product: syz
[  305.770318][ T5694] usb 5-1: Manufacturer: syz
[  305.778275][ T5694] usb 5-1: SerialNumber: syz
[  305.786892][ T5694] usb 5-1: config 0 descriptor??
[  305.797800][T12924] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  305.800398][T12924] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  306.003531][ T5505] bridge_slave_1: left allmulticast mode
[  306.016689][ T5505] bridge_slave_1: left promiscuous mode
[  306.025402][ T5694] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71
[  306.031998][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.047253][ T5694] usb 5-1: USB disconnect, device number 32
[  306.053047][ T5505] bridge_slave_0: left allmulticast mode
[  306.060616][ T5505] bridge_slave_0: left promiscuous mode
[  306.073487][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.320648][ T5505] bond3 (unregistering): (slave ip6gretap0): Releasing active interface
[  306.328847][ T5505] ip6gretap0 (unregistering): left allmulticast mode
[  306.522099][ T5505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.540169][ T5505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.556893][ T5505] bond0 (unregistering): Released all slaves
[  306.591455][ T5505] bond1 (unregistering): (slave lo): Releasing active interface
[  306.604887][ T5505] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  306.625135][ T5505] bond1 (unregistering): Released all slaves
[  306.650110][ T5505] bond2 (unregistering): Released all slaves
[  306.682839][ T5505] bond3 (unregistering): Released all slaves
[  306.702212][ T5354] 8021q: adding VLAN 0 to HW filter on device eth9
[  306.879649][T12962] loop4: detected capacity change from 0 to 1024
[  306.909840][T12962] ext4: Unknown parameter 'uid'
[  307.663715][T12962] loop4: detected capacity change from 0 to 256
[  307.666255][T12962] exfat: Deprecated parameter 'utf8'
[  307.667903][T12962] exfat: Deprecated parameter 'namecase'
[  307.681316][T12962] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  307.725105][   T55] Bluetooth: hci2: command tx timeout
[  308.177830][ T5354] 8021q: adding VLAN 0 to HW filter on device eth10
[  308.712876][ T5505] hsr_slave_0: left promiscuous mode
[  308.718895][ T5505] hsr_slave_1: left promiscuous mode
[  308.729220][ T5505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.733802][ T5505] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.743062][ T5505] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.754227][ T5505] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.775923][ T5505] virt_wifi0: left allmulticast mode
[  308.780618][ T5505] virt_wifi0: left promiscuous mode
[  308.785953][ T5505] veth1_macvtap: left promiscuous mode
[  308.790000][ T5505] veth0_macvtap: left promiscuous mode
[  308.794133][ T5505] veth1_vlan: left promiscuous mode
[  308.797811][ T5505] veth0_vlan: left promiscuous mode
[  309.136876][ T5505] team0 (unregistering): Port device team_slave_1 removed
[  309.146509][ T5505] team0 (unregistering): Port device team_slave_0 removed
[  309.978700][   T55] Bluetooth: hci2: command tx timeout
[  310.062107][ T5354] 8021q: adding VLAN 0 to HW filter on device eth11
[  310.194832][T12929] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.212766][T12929] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.224459][T12929] bridge_slave_0: entered allmulticast mode
[  310.240660][T12929] bridge_slave_0: entered promiscuous mode
[  310.255282][T12929] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.258939][T13004] CIFS: bad ip= option (1270.0.1)
[  310.266279][T13004] CIFS: Attempting to mount (null)
[  310.271390][T12929] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.277362][T12929] bridge_slave_1: entered allmulticast mode
[  310.289225][T12929] bridge_slave_1: entered promiscuous mode
[  310.403068][T12929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.442630][T12929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.548291][T12929] team0: Port device team_slave_0 added
[  310.551946][ T5505] IPVS: stop unused estimator thread 0...
[  310.563671][T12929] team0: Port device team_slave_1 added
[  310.734967][T12929] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.751412][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  310.785991][T12929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.802423][T12929] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.813206][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  310.848376][T12929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.858056][ T5354] 8021q: adding VLAN 0 to HW filter on device eth12
[  310.936632][T12929] hsr_slave_0: entered promiscuous mode
[  310.941316][T12929] hsr_slave_1: entered promiscuous mode
[  310.949271][T12929] debugfs: 'hsr0' already exists in 'hsr'
[  310.954667][T12929] Cannot create hsr debugfs directory
[  311.113529][T13004] CIFS: VFS: Error connecting to socket. Aborting operation.
[  311.122252][T13004] CIFS: VFS: cifs_mount failed w/return code = -4
[  311.442546][T13036] loop4: detected capacity change from 0 to 2048
[  311.463210][T13036] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  311.877978][T12929] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  311.901717][T12929] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  311.914662][T12929] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  311.926363][T12929] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  311.942941][T12929] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  311.945233][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  311.978019][T12929] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  311.992826][T12929] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  312.015176][T12929] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  312.106385][   T55] Bluetooth: hci2: command tx timeout
[  312.867582][    T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  312.877080][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.891126][    T9] usb 2-1: config 0 descriptor??
[  312.911673][    T9] gspca_main: cpia1-2.14.0 probing 0813:0001
[  312.939322][T12929] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.085947][T12929] 8021q: adding VLAN 0 to HW filter on device team0
[  313.126991][  T336] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.129294][  T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.157921][  T336] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.160324][  T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.335579][    T9] gspca_cpia1: usb_control_msg 03, error -32
[  313.348413][    T9] gspca_cpia1: usb_control_msg 03, error -71
[  313.372035][    T9] gspca_cpia1: usb_control_msg 01, error -71
[  313.387471][    T9] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  313.415944][    T9] usb 2-1: USB disconnect, device number 27
[  313.961424][T13107] loop1: detected capacity change from 0 to 512
[  313.983618][T13107] EXT4-fs: Ignoring removed oldalloc option
[  313.996282][T13110] loop4: detected capacity change from 0 to 256
[  314.006349][T13107] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  314.032759][T12929] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.039000][T13107] EXT4-fs (loop1): 1 truncate cleaned up
[  314.050539][T13107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.060551][   T34] audit: type=1800 audit(1785552368.489:511): pid=13110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2898" name="file1" dev="loop4" ino=1048677 res=0 errno=0
[  314.124550][   T55] Bluetooth: hci2: command tx timeout
[  314.165736][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.361621][T13126] netlink: 'syz.1.2901': attribute type 21 has an invalid length.
[  314.372924][T13126] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2901'.
[  314.442650][T12929] veth0_vlan: entered promiscuous mode
[  314.473193][T12929] veth1_vlan: entered promiscuous mode
[  314.517092][T12929] veth0_macvtap: entered promiscuous mode
[  314.540964][T12929] veth1_macvtap: entered promiscuous mode
[  314.568454][T12929] batman_adv: batadv0: Interface activated: batadv_slave_0
[  314.593713][T12929] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.612170][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.621618][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.630788][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.643725][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.784787][   T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  314.789889][  T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.799834][  T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.822262][  T336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.825987][  T336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.846366][    T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  314.941541][   T10] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  314.948504][   T10] usb 2-1: config 0 has no interface number 0
[  314.954103][   T10] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  314.966966][   T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  314.973877][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.980626][   T10] usb 2-1: Product: syz
[  314.985792][   T10] usb 2-1: Manufacturer: syz
[  314.991174][   T10] usb 2-1: SerialNumber: syz
[  314.998159][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  315.004023][   T10] usb 2-1: config 0 descriptor??
[  315.014657][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  315.030337][   T10] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  315.041689][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40
[  315.052399][T13150] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  315.055860][T13150] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  315.060835][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.064265][    T9] usb 5-1: Product: syz
[  315.068709][    T9] usb 5-1: Manufacturer: syz
[  315.072473][    T9] usb 5-1: SerialNumber: syz
[  315.306411][    T9] usb 5-1: 0:1 : does not exist
[  315.311623][    T9] usb 5-1: unit 5 not found!
[  315.375949][    T9] usb 5-1: USB disconnect, device number 33
[  315.433747][T13142] usb 2-1: USB disconnect, device number 28
[  315.457559][T13142] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  315.532287][T13164] sctp: [Deprecated]: syz.5.2915 (pid 13164) Use of struct sctp_assoc_value in delayed_ack socket option.
[  315.532287][T13164] Use struct sctp_sack_info instead
[  315.604264][T13166] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[  315.803615][   T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  315.811986][   T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  315.819249][   T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  315.832219][   T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  315.921395][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2921'.
[  316.009141][T13181] loop4: detected capacity change from 0 to 2048
[  316.026642][T13181] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  316.046792][T13181] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  316.065765][T13181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  316.121542][T13183] loop5: detected capacity change from 0 to 4096
[  316.141196][T13183] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  316.163818][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'.
[  316.179176][T13188] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.422200][   T34] audit: type=1800 audit(1785552370.849:512): pid=13183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2923" name="@" dev="loop5" ino=33 res=0 errno=0
[  317.006002][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  317.818652][T13198] autofs4:pid:13198:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374)
[  317.963130][T13220] loop1: detected capacity change from 0 to 2048
[  317.997651][T13220] EXT4-fs (loop1): failed to initialize system zone (-117)
[  318.012759][T13220] EXT4-fs (loop1): mount failed
[  318.106182][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2939'.
[  318.111938][T13226] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.123861][T13226] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.265040][ T5677] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  318.315846][T13237] loop1: detected capacity change from 0 to 64
[  318.335377][T13237] syz.1.2945: attempt to access beyond end of device
[  318.335377][T13237] loop1: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  318.345940][T13237] Buffer I/O error on dev loop1, logical block 512, async page read
[  318.348533][T13237] syz.1.2945: attempt to access beyond end of device
[  318.348533][T13237] loop1: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  318.352688][T13237] Buffer I/O error on dev loop1, logical block 56576, async page read
[  318.430766][ T5677] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  318.442523][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  318.454071][ T5677] usb 5-1: Product: syz
[  318.462028][ T5677] usb 5-1: Manufacturer: syz
[  318.471233][ T5677] usb 5-1: SerialNumber: syz
[  318.481089][ T5677] usb 5-1: config 0 descriptor??
[  318.498788][T13245] loop1: detected capacity change from 0 to 128
[  318.514031][T13245] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  318.531627][T13245] hpfs: filesystem error: improperly stopped
[  318.538148][T13245] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  318.545861][T13245] hpfs: You really don't want any checks? You are crazy...
[  318.552940][T13245] hpfs: Code page index out of array
[  318.570744][T13245] hpfs: code page support is disabled
[  318.574151][T13245] hpfs: hpfs_map_4sectors(): unaligned read
[  318.588190][T13245] hpfs: hpfs_map_4sectors(): unaligned read
[  318.598700][T13245] hpfs: filesystem error: unable to find root dir
[  318.887625][ T5677] usb 5-1: USB disconnect, device number 34
[  319.125273][T13262] loop5: detected capacity change from 0 to 8192
[  319.136900][T13262] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  319.451003][T13276] loop5: detected capacity change from 0 to 256
[  319.709795][ T5677] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  319.867821][ T5677] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  319.873498][ T5677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.945586][ T5677] usb 5-1: selecting invalid altsetting 3
[  319.951277][ T5677] comedi comedi5: could not set alternate setting 3 in high speed
[  319.956576][ T5677] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[  319.979987][ T5677] usbduxsigma 5-1:128.0: probe with driver usbduxsigma failed with error -22
[  320.035525][T13142] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  320.185425][T13142] usb 6-1: Using ep0 maxpacket: 32
[  320.193080][T13142] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  320.199006][T13142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.203659][T13142] usb 6-1: Product: syz
[  320.208791][T13142] usb 6-1: Manufacturer: syz
[  320.210346][T13142] usb 6-1: SerialNumber: syz
[  320.216028][T13142] usb 6-1: config 0 descriptor??
[  320.225940][T13142] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  320.637842][ T5677] usb 5-1: USB disconnect, device number 35
[  320.727446][T13302] openvswitch: netlink: Unknown key attributes 2
[  321.013602][T13312] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  321.187233][ T5677] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  321.201039][ T5677] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  321.215502][ T5677] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  321.233988][ T5677] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  321.251030][ T5677] rtc rtc0: __rtc_set_alarm: err=-22
[  321.339582][T13325] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  321.366384][T13327] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  321.998443][T13349] loop4: detected capacity change from 0 to 8192
[  322.032805][T13142] gspca_ov534_9: reg_w failed -71
[  322.072936][T13355] netlink: 'syz.1.2999': attribute type 31 has an invalid length.
[  322.275430][T13142] gspca_ov534_9: Unknown sensor 0000
[  322.275476][T13142] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22
[  322.298566][T13142] usb 6-1: USB disconnect, device number 2
[  322.901297][T13376] ipvlan2: entered promiscuous mode
[  322.922332][T13376] bridge0: port 3(ipvlan2) entered blocking state
[  322.929469][T13376] bridge0: port 3(ipvlan2) entered disabled state
[  322.936938][T13376] ipvlan2: entered allmulticast mode
[  322.941736][T13376] bridge0: entered allmulticast mode
[  322.957449][T13376] ipvlan2: left allmulticast mode
[  322.959678][T13376] bridge0: left allmulticast mode
[  323.430924][T13386] kAFS: unable to lookup cell 'էKyy
[  323.430924][T13386] 
[  323.430924][T13386] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qGjnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5!G3{K,'
[  324.394502][T13142] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  324.545930][T13142] usb 2-1: config 2 has an invalid interface number: 43 but max is 0
[  324.548666][T13142] usb 2-1: config 2 has no interface number 0
[  324.550949][T13142] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[  324.554210][T13142] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8
[  324.557620][T13142] usb 2-1: config 2 interface 43 has no altsetting 0
[  324.562383][T13142] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  324.566184][T13142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.568779][T13142] usb 2-1: Product: syz
[  324.570279][T13142] usb 2-1: Manufacturer: syz
[  324.572390][T13142] usb 2-1: SerialNumber: syz
[  324.578340][T13418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  324.582396][T13418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  324.805898][T13142] ums-usbat 2-1:2.43: USB Mass Storage device detected
[  324.838667][T13142] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  324.878565][T13142] ums-usbat 2-1:2.43: probe with driver ums-usbat failed with error -5
[  324.887942][T13142] usb 2-1: USB disconnect, device number 29
[  325.202605][T13437] loop5: detected capacity change from 0 to 8
[  325.219595][T13437] squashfs image failed sanity check
[  325.507953][T13450] loop5: detected capacity change from 0 to 2048
[  325.583076][T13450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.600522][T13450] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.640906][T13450] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 16: comm syz.5.3037: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0
[  325.747083][T12929] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.822439][T13142] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  326.900593][T13479] netlink: 'syz.5.3045': attribute type 1 has an invalid length.
[  326.995238][T13142] usb 5-1: Using ep0 maxpacket: 8
[  327.000783][T13142] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.015083][T13142] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  327.029917][T13142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.049281][T13142] usb 5-1: config 0 descriptor??
[  327.069175][T13142] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22
[  327.162333][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3050'.
[  327.292292][ T5677] usb 5-1: USB disconnect, device number 36
[  327.699523][T13510] loop1: detected capacity change from 0 to 32768
[  327.716861][T13510] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  327.722144][T13510] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #72: signature = INODE
[  327.727659][T13510] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  327.730703][T13510] OCFS2: File system is now read-only.
[  327.732438][T13510] (syz.1.3057,13510,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[  327.735581][T13510] (syz.1.3057,13510,0):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[  327.738375][T13510] (syz.1.3057,13510,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=7, slot=0
[  327.741556][T13510] (syz.1.3057,13510,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  327.744878][T13510] (syz.1.3057,13510,0):ocfs2_mount_volume:1757 ERROR: status = -30
[  327.756391][T13510] (syz.1.3057,13510,0):ocfs2_fill_super:1177 ERROR: status = -30
[  327.924791][ T5677] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  327.972380][T13520] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3061'.
[  328.076753][ T5677] usb 6-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb
[  328.084858][ T5677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.102520][ T5677] usb 6-1: config 0 descriptor??
[  328.117707][ T5677] gspca_main: spca505-2.14.0 probing 0733:0430
[  328.346000][T13537] loop1: detected capacity change from 0 to 8
[  328.354007][T13537] SQUASHFS error: zlib decompression failed, data probably corrupt
[  328.370437][T13537] SQUASHFS error: Failed to read block 0x9b: -5
[  328.383059][T13537] SQUASHFS error: Unable to read metadata cache entry [99]
[  328.395930][T13537] SQUASHFS error: Unable to read inode 0x127
[  328.526183][ T5677] gspca_spca505: reg write: error -71
[  328.529541][ T5677] spca505 6-1:0.0: probe with driver spca505 failed with error -5
[  328.543939][ T5677] usb 6-1: USB disconnect, device number 3
[  329.973315][   T34] audit: type=1804 audit(1785552384.399:513): pid=13574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3086" name="bus" dev="ramfs" ino=33925 res=1 errno=0
[  330.000283][   T34] audit: type=1804 audit(1785552384.429:514): pid=13574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3086" name="bus" dev="ramfs" ino=33925 res=1 errno=0
[  330.261246][T13587] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  330.291538][T13589] autofs: Bad value for 'fd'
[  331.122540][T13625] loop4: detected capacity change from 0 to 512
[  331.159941][T13625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.173943][T13625] ext4 filesystem being mounted at /698/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.228774][ T8041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.364716][ T5677] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  331.387959][T13634] loop4: detected capacity change from 0 to 2048
[  331.399097][T13634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  331.516591][ T5677] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  331.530478][ T5677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.542887][ T5677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.562063][ T5677] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  331.584235][ T5677] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  331.591481][ T5677] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  331.600799][ T5677] usb 6-1: Manufacturer: syz
[  331.611022][ T5677] usb 6-1: config 0 descriptor??
[  331.713869][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'.
[  331.723878][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3119'.
[  331.760237][T13645] macvlan3: entered allmulticast mode
[  331.768374][T13645] gretap0: entered allmulticast mode
[  331.872866][T13649] xt_hl: Unknown Hop Limit match mode: 206
[  332.047455][ T5677] appleir 0003:05AC:8243.0009: unknown main item tag 0x0
[  332.143985][ T5677] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  332.383340][    T9] usb 6-1: USB disconnect, device number 4
[  332.562470][T13657] loop1: detected capacity change from 0 to 32768
[  332.590012][T13657] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  332.639096][   T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.642266][T13657] XFS (loop1): Ending clean mount
[  332.653402][T13657] XFS (loop1): Quotacheck needed: Please wait.
[  332.743879][T13657] XFS (loop1): Quotacheck: Done.
[  332.863324][ T5608] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  333.025895][T13680] openvswitch: netlink: Missing valid actions attribute.
[  333.033621][T13680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.339827][T13695] tipc: Started in network mode
[  333.348605][T13695] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711
[  333.361740][T13695] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  333.440299][T13701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3142'.
[  333.693588][   T34] audit: type=1326 audit(1785552388.119:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  333.706815][   T34] audit: type=1326 audit(1785552388.139:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  333.729912][   T34] audit: type=1326 audit(1785552388.139:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  333.751869][   T34] audit: type=1326 audit(1785552388.139:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  333.771453][   T34] audit: type=1326 audit(1785552388.139:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  333.787674][   T34] audit: type=1326 audit(1785552388.139:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  333.801738][   T34] audit: type=1326 audit(1785552388.139:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  333.808486][ T5677] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  333.825929][   T34] audit: type=1326 audit(1785552388.139:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff2aef9e019 code=0x7ffc0000
[  333.965915][ T5677] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  333.969110][ T5677] usb 2-1: config 0 interface 0 has no altsetting 0
[  333.973091][ T5677] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  333.976395][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.979010][ T5677] usb 2-1: Product: syz
[  333.980370][ T5677] usb 2-1: Manufacturer: syz
[  333.981903][ T5677] usb 2-1: SerialNumber: syz
[  333.985516][ T5677] usb 2-1: config 0 descriptor??
[  333.991108][ T5677] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  333.997896][ T5677] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  334.001413][ T5677] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  334.007573][ T5677] usb 2-1: media controller created
[  334.016239][ T5677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  334.037913][ T5677] DVB: Unable to find symbol tda10046_attach()
[  334.040031][ T5677] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  334.043217][ T5677] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  334.154401][    T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  334.193386][ T5677] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  334.204959][ T5677] usb 2-1: USB disconnect, device number 30
[  334.336673][    T9] usb 5-1: Using ep0 maxpacket: 16
[  334.345483][    T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.353606][    T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.363733][    T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  334.373283][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  334.375804][    T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  334.378629][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.388378][    T9] usb 5-1: config 0 descriptor??
[  334.604449][T13142] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  334.755753][T13142] usb 6-1: Using ep0 maxpacket: 16
[  334.770519][T13142] usb 6-1: config 9 has an invalid interface number: 226 but max is 0
[  334.773246][T13142] usb 6-1: config 9 has no interface number 0
[  334.782419][T13142] usb 6-1: config 9 interface 226 has no altsetting 0
[  334.791344][T13142] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=dc.fd
[  334.799205][T13142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.806722][T13142] usb 6-1: Product: syz
[  334.811079][T13142] usb 6-1: Manufacturer: syz
[  334.816053][T13142] usb 6-1: SerialNumber: syz
[  335.402114][T13725] loop1: detected capacity change from 0 to 131072
[  335.434955][T13142] mdc800 6-1:9.226: probe fails -> wrong Interface
[  335.446890][    T9] usb 5-1: USB disconnect, device number 37
[  335.449423][T13142] usb 6-1: USB disconnect, device number 5
[  335.465907][T13725] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  335.521039][T13725] XFS (loop1): Starting recovery (logdev: internal)
[  335.548695][T13725] XFS (loop1): Ending recovery (logdev: internal)
[  335.580097][ T5608] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  335.927247][T13740] loop1: detected capacity change from 0 to 512
[  335.950798][T13740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.975188][T13740] ext4 filesystem being mounted at /1094/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  336.012278][   T34] audit: type=1800 audit(1785552390.439:523): pid=13740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3155" name="file1" dev="loop1" ino=15 res=0 errno=0
[  336.033996][T13745] loop4: detected capacity change from 0 to 512
[  336.049354][T13745] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent
[  337.290676][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.418797][T13764] team0: Port device bridge0 added
[  337.431533][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'.
[  337.453533][T13764] bridge_slave_0: entered promiscuous mode
[  337.575945][T13771] tipc: Enabled bearer <eth:gre0>, priority 25
[  338.211748][T13782] loop4: detected capacity change from 0 to 131072
[  338.223667][T13782] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0)
[  338.226686][T13782] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  338.231092][T13782] F2FS-fs (loop4): invalid crc value
[  338.260550][T13782] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  338.268765][T13782] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  338.271238][T13782] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  338.508671][T13142] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  338.554739][T13782] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36
[  338.563870][T13782] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36
[  339.073047][    T9] tipc: Node number set to 14849
[  339.191218][T13142] usb 6-1: Using ep0 maxpacket: 8
[  339.196419][T13142] usb 6-1: unable to get BOS descriptor or descriptor too short
[  339.201899][T13142] usb 6-1: config 2 has an invalid interface number: 99 but max is 0
[  339.210307][T13142] usb 6-1: config 2 has no interface number 0
[  339.212375][T13142] usb 6-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  339.217627][T13142] usb 6-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  339.221058][T13142] usb 6-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0
[  339.224098][T13142] usb 6-1: config 2 interface 99 has no altsetting 0
[  339.228764][T13142] usb 6-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3
[  339.231586][T13142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.234043][T13142] usb 6-1: Product: syz
[  339.235974][T13142] usb 6-1: Manufacturer: syz
[  339.237565][T13142] usb 6-1: SerialNumber: syz
[  339.453397][T13142] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.99/input/input16
[  339.488775][T13142] usb 6-1: USB disconnect, device number 6
[  340.105274][T13142] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  340.264679][T13142] usb 2-1: Using ep0 maxpacket: 16
[  340.273110][T13142] usb 2-1: config 251 has an invalid interface number: 202 but max is 0
[  340.286861][T13142] usb 2-1: config 251 has no interface number 0
[  340.294901][T13142] usb 2-1: too many endpoints for config 251 interface 202 altsetting 1: 165, using maximum allowed: 30
[  340.309577][T13142] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid maxpacket 2048, setting to 1024
[  340.319684][T13142] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024
[  340.329802][T13142] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  340.339922][T13142] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  340.352081][T13142] usb 2-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  340.368663][T13142] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 120
[  340.381295][T13142] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 165
[  340.399280][T13142] usb 2-1: config 251 interface 202 has no altsetting 0
[  340.410281][T13142] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  340.419708][T13142] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  340.428309][T13142] usb 2-1: Product: syz
[  340.429622][T13142] usb 2-1: SerialNumber: syz
[  340.440340][T13800] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  340.666847][T13142] cxacru 2-1:251.202: send of cm 0x90 failed (-71)
[  340.710269][T13825] cxacru 2-1:251.202: Direct firmware load for cxacru-fw.bin failed with error -2
[  340.719002][T13142] usb 2-1: USB disconnect, device number 31
[  340.739035][T13825] cxacru 2-1:251.202: Falling back to sysfs fallback for: cxacru-fw.bin
[  341.372817][T13844] program syz.1.3199 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  341.528623][   T55] Bluetooth: hci1: unexpected event for opcode 0x0c20
[  341.656065][    T9] usb 5-1: new full-speed USB device number 38 using dummy_hcd
[  341.822368][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  341.834558][    T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  341.846321][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.864622][    T9] usb 5-1: config 0 descriptor??
[  341.868432][T13863] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  341.881359][T13863] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  342.225251][T13865] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3209'.
[  342.229622][T13865] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3209'.
[  342.329804][    T9] lenovo 0003:17EF:6067.000B: global environment stack underflow
[  342.337314][    T9] lenovo 0003:17EF:6067.000B: item 0 2 1 11 parsing failed
[  342.342727][    T9] lenovo 0003:17EF:6067.000B: hid_parse failed
[  342.350690][    T9] lenovo 0003:17EF:6067.000B: probe with driver lenovo failed with error -22
[  342.491765][ T5694] usb 5-1: USB disconnect, device number 38
[  342.760094][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3213'.
[  342.839476][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3214'.
[  342.902808][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3214'.
[  343.138184][T13882] loop5: detected capacity change from 0 to 256
[  343.161891][T13882] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  343.373631][T13892] tipc: Disabling bearer <udp:syz2>
[  343.531713][T13902] xt_CT: You must specify a L4 protocol and not use inversions on it
[  343.696543][T13911] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3231'.
[  343.834829][ T5694] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  343.984711][ T5694] usb 5-1: Using ep0 maxpacket: 32
[  343.989057][ T5694] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  343.993150][ T5694] usb 5-1: config 0 has no interface number 0
[  343.999099][ T5694] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  344.002760][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.006480][ T5694] usb 5-1: Product: syz
[  344.008327][ T5694] usb 5-1: Manufacturer: syz
[  344.010339][ T5694] usb 5-1: SerialNumber: syz
[  344.015409][ T5694] usb 5-1: config 0 descriptor??
[  344.028275][ T5694] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  344.032057][ T5694] usb 5-1: selecting invalid altsetting 1
[  344.035569][ T5694] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  344.041297][ T5694] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  344.046590][ T5694] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  344.049856][ T5694] usb 5-1: media controller created
[  344.054777][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  344.068598][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  344.206644][    T9] usb 6-1: Using ep0 maxpacket: 16
[  344.220656][    T9] usb 6-1: config index 0 descriptor too short (expected 51443, got 18)
[  344.243346][    T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  344.261671][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.268572][ T5694] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  344.278788][    T9] usb 6-1: Product: syz
[  344.281767][    T9] usb 6-1: Manufacturer: syz
[  344.286228][    T9] usb 6-1: SerialNumber: syz
[  344.303972][ T5694] zl10353_read_register: readreg error (reg=127, ret==-71)
[  344.310787][    T9] r8152-cfgselector 6-1: Unknown version 0x0000
[  344.320244][    T9] r8152-cfgselector 6-1: config 0 descriptor??
[  344.325119][ T5694] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  344.482605][ T5694] usb 5-1: USB disconnect, device number 39
[  344.724850][T13925] mtrr: base(0x20000000) is not aligned on a size(0x40000000) boundary
[  344.798552][ T5694] r8152-cfgselector 6-1: USB disconnect, device number 7
[  344.811055][T13927] netlink: 'syz.1.3239': attribute type 10 has an invalid length.
[  344.826581][T13927] syz_tun: entered promiscuous mode
[  344.843672][T13927] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  344.868669][T13927] netlink: 'syz.1.3239': attribute type 10 has an invalid length.
[  344.880630][T13927] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.886732][T13927] team0: Device bond0 failed to register rx_handler
[  344.938666][T13931] loop4: detected capacity change from 0 to 256
[  344.961621][T13931] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  345.332595][T13933] loop1: detected capacity change from 0 to 131072
[  345.339683][T13933] F2FS-fs (loop1): invalid crc value
[  345.367068][T13933] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  345.373495][T13933] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  345.448238][ T5694] Process accounting resumed
[  345.463294][ T5694] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264)
[  345.474436][ T5694] FAT-fs (loop4): Filesystem has been set read-only
[  345.965416][T13952] loop5: detected capacity change from 0 to 8
[  346.007457][T13952] SQUASHFS error: Unable to read inode 0x127
[  346.293573][T13965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3254'.
[  346.392553][T13970] syz_tun: entered allmulticast mode
[  346.483183][T13973] netlink: 'syz.5.3258': attribute type 8 has an invalid length.
[  346.490617][T13954] loop4: detected capacity change from 0 to 32768
[  346.503550][T13954] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3250 (13954)
[  346.651718][T13954] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  346.673557][T13954] BTRFS info (device loop4): using crc32c checksum algorithm
[  346.785006][T13954] BTRFS info (device loop4): enabling ssd optimizations
[  346.799004][T13954] BTRFS info (device loop4): turning on flush-on-commit
[  346.806507][T13954] BTRFS info (device loop4): enabling free space tree
[  346.815976][T13954] BTRFS info (device loop4): enabling auto defrag
[  346.821110][T13954] BTRFS info (device loop4): use lzo compression, level 1
[  346.830345][T13954] BTRFS info (device loop4): max_inline set to 4096
[  346.964195][ T8041] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  347.174817][T14008] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  347.386063][T14012] loop5: detected capacity change from 0 to 16
[  347.415535][T14012] erofs (device loop5): mounted with root inode @ nid 36.
[  347.499508][T14012] syz.5.3269: attempt to access beyond end of device
[  347.499508][T14012] loop5: rw=0, sector=0, nr_sectors = 1025 limit=16
[  347.542308][T14012] erofs (device loop5): read error -5 @ 0 of nid 36
[  347.576658][T14013] syz.5.3269: attempt to access beyond end of device
[  347.576658][T14013] loop5: rw=0, sector=0, nr_sectors = 1025 limit=16
[  347.595743][T14013] erofs (device loop5): read error -5 @ 0 of nid 36
[  347.681867][T14019] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  347.818707][T14023] loop4: detected capacity change from 0 to 256
[  347.827294][T14023] exfat: Deprecated parameter 'utf8'
[  347.834814][T14023] exfat: Deprecated parameter 'namecase'
[  347.844068][T14023] exfat: Deprecated parameter 'namecase'
[  347.847929][T14023] exfat: Deprecated parameter 'utf8'
[  347.858266][T14023] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  347.869009][T14023] exFAT-fs (loop4): failed to test first cluster bit of root dir(5)
[  347.956744][T14017] loop5: detected capacity change from 0 to 32768
[  347.979690][T14017] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3271 (14017)
[  348.020147][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3276'.
[  348.025322][T14017] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  348.030008][T14027] netlink: set zone limit has 4 unknown bytes
[  348.033485][T14017] BTRFS info (device loop5): using blake2b checksum algorithm
[  348.099585][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'.
[  348.147861][T14017] BTRFS info (device loop5): enabling ssd optimizations
[  348.160206][T14017] BTRFS info (device loop5): turning on async discard
[  348.172370][T14017] BTRFS info (device loop5): enabling free space tree
[  348.352147][T14049] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.3280'.
[  348.488465][T12929] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  348.636222][T14056] loop4: detected capacity change from 0 to 512
[  348.655581][T14056] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  348.686893][T14056] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3284: Invalid block bitmap block 0 in block_group 0
[  348.705973][T14056] loop4: lost filesystem error report for type 5 error -117
[  348.706476][T14056] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  348.714357][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  348.716479][    C0] EXT4-fs (loop4): initial error at time 1785552403: ext4_read_block_bitmap_nowait:483
[  348.720154][    C0] EXT4-fs (loop4): last error at time 1785552403: ext4_read_block_bitmap_nowait:483
[  348.735278][T14056] loop4: lost filesystem error report for type 5 error -117
[  348.737271][T14056] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.3284: attempt to clear invalid blocks 983261 len 1
[  348.762372][T14056] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  348.762810][T14056] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.3284: Invalid inode table block 0 in block_group 0
[  348.791565][T14056] loop4: lost filesystem error report for type 5 error -117
[  348.819362][T14056] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  348.846130][T14056] loop4: lost filesystem error report for type 5 error -117
[  348.848579][T14056] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  348.859769][T14062] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3285'.
[  348.872437][T14056] loop4: lost filesystem error report for type 5 error -117
[  348.872657][T14056] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.3284: Invalid inode table block 0 in block_group 0
[  348.884956][T14056] loop4: lost filesystem error report for type 5 error -117
[  348.885331][T14056] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  348.912705][T14056] loop4: lost filesystem error report for type 5 error -117
[  348.914887][T14056] EXT4-fs error (device loop4): ext4_truncate:4691: inode #11: comm syz.4.3284: mark_inode_dirty error
[  348.937573][T14056] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  348.937836][T14056] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  348.954777][T14056] loop4: lost filesystem error report for type 5 error -117
[  348.955107][T14056] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.3284: Invalid inode table block 0 in block_group 0
[  348.976293][T14056] loop4: lost filesystem error report for type 5 error -117
[  348.976534][T14056] EXT4-fs (loop4): 1 truncate cleaned up
[  348.989760][T14056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.040227][ T8041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.131478][T14071] loop5: detected capacity change from 0 to 1024
[  349.141701][T14071] EXT4-fs: Ignoring removed bh option
[  349.171960][T14071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.216471][T14071] EXT4-fs (loop5): stripe (536871160) is not aligned with cluster size (16), stripe is disabled
[  349.220050][T14071] EXT4-fs (loop5): can't enable nombcache during remount
[  349.238898][T12929] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.364064][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3292'.
[  349.503719][T14084] loop5: detected capacity change from 0 to 512
[  349.516701][T14084] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  349.571281][T14084] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3294: bg 0: block 104: invalid block bitmap
[  349.576776][T14084] loop5: lost filesystem error report for type 5 error -117
[  349.581239][T14084] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  349.584965][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  349.584982][    C0] EXT4-fs (loop5): initial error at time 1785552404: ext4_validate_block_bitmap:432
[  349.584992][    C0] EXT4-fs (loop5): last error at time 1785552404: ext4_validate_block_bitmap:432
[  349.604178][T14084] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3294: invalid indirect mapped block 1 (level 1)
[  349.611248][T14084] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  349.621520][T14084] EXT4-fs (loop5): 1 truncate cleaned up
[  349.642221][T14084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.749737][T12929] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.972586][T14091] loop1: detected capacity change from 0 to 1024
[  349.985880][T14091] EXT4-fs: inline encryption not supported
[  350.000475][T14091] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  350.048119][T14091] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3297: Invalid block bitmap block 0 in block_group 0
[  350.084358][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  350.086407][    C0] EXT4-fs (loop1): initial error at time 1785552404: ext4_read_block_bitmap_nowait:483
[  350.089226][    C0] EXT4-fs (loop1): last error at time 1785552404: ext4_read_block_bitmap_nowait:483
[  350.114168][T14091] Quota error (device loop1): write_blk: dquota write failed
[  350.124522][T14091] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  350.139542][T14091] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.3297: Failed to acquire dquot type 0
[  350.170954][T14091] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.3297: Freeing blocks not in datazone - block = 0, count = 4096
[  350.213997][T14087] loop5: detected capacity change from 0 to 32768
[  350.217009][T14091] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.3297: Invalid inode bitmap blk 0 in block_group 0
[  350.224581][ T6677] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8
[  350.236149][T14091] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem
[  350.238887][ T6677] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u9:19: Failed to release dquot type 0
[  350.252073][T14091] EXT4-fs (loop1): 1 orphan inode deleted
[  350.260983][T14091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.321580][T14087] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  350.363983][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.540199][T12929] ocfs2: Unmounting device (7,5) on (node local)
[  351.814148][T14124] loop4: detected capacity change from 0 to 512
[  351.828042][T14124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.832033][T14124] ext4 filesystem being mounted at /766/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.877549][ T8041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.941875][ T5677] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  352.095831][ T5677] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[  352.098502][ T5677] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  352.104673][ T5677] usb 6-1: config 8 has no interface number 0
[  352.108111][ T5677] usb 6-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  352.120782][ T5677] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  352.123648][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.128248][ T5677] usb 6-1: Product: syz
[  352.129577][ T5677] usb 6-1: Manufacturer: syz
[  352.133752][ T5677] usb 6-1: SerialNumber: syz
[  352.155774][T14133] loop4: detected capacity change from 0 to 32768
[  352.169094][T14133] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  352.198033][T14133] XFS (loop4): Ending clean mount
[  352.209458][T14133] XFS (loop4): Quotacheck needed: Please wait.
[  352.223695][ T6668] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.229923][ T6668] XFS (loop4): Unmount and run xfs_repair
[  352.232621][ T6668] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.235501][ T6668] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.238294][ T6668] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.241124][ T6668] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.243938][ T6668] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.247045][ T6668] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.249781][ T6668] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.253074][ T6668] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.257312][ T6668] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.260318][ T6668] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  352.272131][T14133] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  352.309028][T14133] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.313323][T14133] XFS (loop4): Unmount and run xfs_repair
[  352.315766][T14133] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.318756][T14133] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.322195][T14133] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.328954][T14133] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.332424][T14133] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.337337][T14133] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.340133][T14133] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.348311][ T5677] usb 6-1: USB disconnect, device number 8
[  352.359871][T14133] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.363605][T14133] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.371067][T14133] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  352.386248][T14133] XFS (loop4): page discard on page ffffea0000e27380, inode 0x244a, pos 0.
[  352.408261][T14142] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.417013][T14142] XFS (loop4): Unmount and run xfs_repair
[  352.418916][T14142] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.421237][T14142] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.423886][T14142] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.427133][T14142] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.429935][T14142] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.432782][T14142] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.436118][T14142] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.439071][T14142] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.441779][T14142] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.447247][T14142] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  352.453559][T14142] XFS (loop4): page discard on page ffffea0000e27380, inode 0x244a, pos 2048.
[  352.457067][T14142] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.460528][T14142] XFS (loop4): Unmount and run xfs_repair
[  352.462335][T14142] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.465017][T14142] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.468025][T14142] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.470827][T14142] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.474073][T14142] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.477484][T14142] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.480195][T14142] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.483001][T14142] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.486228][T14142] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.489651][T14142] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  352.493323][T14142] XFS (loop4): page discard on page ffffea0000e27840, inode 0x244a, pos 4096.
[  352.497380][T14142] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.501269][T14142] XFS (loop4): Unmount and run xfs_repair
[  352.503109][T14142] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.505809][T14142] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.508587][T14142] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.511476][T14142] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.514251][T14142] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.517885][T14142] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.520548][T14142] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.523384][T14142] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.526894][T14142] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.529692][T14142] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  352.533327][T14142] XFS (loop4): page discard on page ffffea0000dc8080, inode 0x244a, pos 8192.
[  352.537173][T14142] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.540641][T14142] XFS (loop4): Unmount and run xfs_repair
[  352.542517][T14142] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.545276][T14142] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.548387][T14142] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.551061][T14142] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.557543][T14142] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.560474][T14142] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.563224][T14142] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.566384][T14142] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.569228][T14142] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.572178][T14142] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  352.577018][T14142] XFS (loop4): page discard on page ffffea0000dc8100, inode 0x244a, pos 16384.
[  352.580143][T14142] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.583518][T14142] XFS (loop4): Unmount and run xfs_repair
[  352.585697][T14142] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.588121][T14142] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.590926][T14142] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.593926][T14142] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.597197][T14142] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.599987][T14142] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.602775][T14142] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.605908][T14142] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.608692][T14142] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.611494][T14142] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  352.615369][T14142] XFS (loop4): page discard on page ffffea0000dc8200, inode 0x244a, pos 32768.
[  352.618680][T14142] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.622159][T14142] XFS (loop4): Unmount and run xfs_repair
[  352.624182][T14142] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.627000][T14142] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.629898][T14142] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.632756][T14142] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.635926][T14142] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.638856][T14142] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.641793][T14142] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.644787][T14142] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.647664][T14142] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.650473][T14142] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  352.654142][T14142] XFS (loop4): page discard on page ffffea0000d21000, inode 0x244a, pos 65536.
[  352.657777][T14142] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.661234][T14142] XFS (loop4): Unmount and run xfs_repair
[  352.663078][T14142] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.667561][T14142] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.670411][T14142] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.673227][T14142] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.676397][T14142] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.679696][T14142] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.682546][T14142] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.685633][T14142] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.688514][T14142] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.691450][T14142] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  352.695416][T14142] XFS (loop4): page discard on page ffffea0000cf0800, inode 0x244a, pos 131072.
[  352.698696][T14142] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.702244][T14142] XFS (loop4): Unmount and run xfs_repair
[  352.704073][T14142] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.707183][T14142] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.710128][T14142] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.713002][T14142] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.716490][T14142] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.719653][T14142] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.722335][T14142] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.725409][T14142] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.728267][T14142] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.731115][T14142] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[  352.735000][T14142] XFS (loop4): page discard on page ffffea0000ce1000, inode 0x244a, pos 262144.
[  352.738372][T14142] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.741769][T14142] XFS (loop4): Unmount and run xfs_repair
[  352.743556][T14142] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.746501][T14142] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.749381][T14142] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.752227][T14142] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.755347][T14142] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.758347][T14142] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.761252][T14142] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.764005][T14142] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.767166][T14142] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.770230][T14142] XFS (loop4): page discard on page ffffea0000d70000, inode 0x244a, pos 524288.
[  352.773615][T14142] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.779645][T14142] XFS (loop4): Unmount and run xfs_repair
[  352.782033][T14142] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.784718][T14142] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.787502][T14142] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.790303][T14142] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.793102][T14142] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.796301][T14142] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.799190][T14142] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.802040][T14142] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.805207][T14142] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.808590][T14142] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.812095][T14142] XFS (loop4): Unmount and run xfs_repair
[  352.813975][T14142] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.816704][T14142] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.819596][T14142] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.822464][T14142] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.825646][T14142] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.828484][T14142] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.831433][T14142] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.834216][T14142] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.837599][T14142] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.841223][T14142] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[  352.845146][T14142] XFS (loop4): Unmount and run xfs_repair
[  352.847041][T14142] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  352.849409][T14142] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  352.852228][T14142] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  352.857646][T14142] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  352.867507][T14142] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  352.880989][T14142] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  352.904143][T14142] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.912092][T14142] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  352.919756][T14142] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  353.585756][ T8041] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  353.601763][ T8041] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  353.893944][T14155] loop4: detected capacity change from 0 to 256
[  353.909071][T14155] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  354.425032][ T5677] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  354.575058][ T5677] usb 6-1: Using ep0 maxpacket: 8
[  354.580029][ T5677] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  354.583920][ T5677] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  354.600032][ T5677] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  354.612872][ T5677] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  354.623806][ T5677] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  354.739608][T14180] loop1: detected capacity change from 0 to 32768
[  354.755532][ T5677] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  354.762593][ T5677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.801812][T14180] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  354.841330][T14180] XFS (loop1): Ending clean mount
[  354.889614][ T5608] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  354.988811][ T5677] usb 6-1: GET_CAPABILITIES returned 0
[  354.998706][ T5677] usbtmc 6-1:16.0: can't read capabilities
[  355.630104][T14190] loop4: detected capacity change from 0 to 131072
[  355.637503][T14190] F2FS-fs (loop4): invalid crc value
[  355.660368][ T5676] usb 6-1: USB disconnect, device number 9
[  355.692099][T14190] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  355.700490][T14190] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  356.139439][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'.
[  356.238320][T14206] loop5: detected capacity change from 0 to 8
[  356.248316][T14206] Page size > filesystem block size (0).  This is currently not supported!
[  356.632986][T14215] loop5: detected capacity change from 0 to 1024
[  356.640256][T14215] EXT4-fs: Ignoring removed orlov option
[  356.659932][T14215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  357.809109][T12929] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.842016][T14232] loop4: detected capacity change from 0 to 128
[  357.853371][T14232] FAT-fs (loop4): Directory bread(block 1048) failed
[  357.861156][T14232] FAT-fs (loop4): Directory bread(block 1049) failed
[  357.872594][T14232] FAT-fs (loop4): Directory bread(block 1050) failed
[  357.882339][T14232] FAT-fs (loop4): Directory bread(block 1051) failed
[  357.896036][T14232] FAT-fs (loop4): Directory bread(block 1052) failed
[  357.905241][T14232] FAT-fs (loop4): Directory bread(block 1053) failed
[  357.909832][T14232] FAT-fs (loop4): Directory bread(block 1054) failed
[  357.921022][T14232] FAT-fs (loop4): Directory bread(block 1055) failed
[  357.942460][T14232] FAT-fs (loop4): Directory bread(block 1048) failed
[  357.950288][T14236] loop5: detected capacity change from 0 to 64
[  357.961160][T14232] FAT-fs (loop4): Directory bread(block 1049) failed
[  358.327530][T14247] ==================================================================
[  358.330015][T14247] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x1b8/0x320
[  358.332395][T14247] Read of size 128 at addr ffffffff9ab18580 by task syz.5.3355/14247
[  358.335049][T14247] 
[  358.336235][T14247] CPU: 0 UID: 0 PID: 14247 Comm: syz.5.3355 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  358.336249][T14247] Tainted: [L]=SOFTLOCKUP
[  358.336252][T14247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  358.336257][T14247] Call Trace:
[  358.336261][T14247]  <TASK>
[  358.336265][T14247]  dump_stack_lvl+0xe8/0x150
[  358.336278][T14247]  print_address_description+0x55/0x1e0
[  358.336290][T14247]  ? usb_copy_descriptors+0x1b8/0x320
[  358.336302][T14247]  print_report+0x58/0x70
[  358.336316][T14247]  kasan_report+0x117/0x150
[  358.336328][T14247]  ? usb_copy_descriptors+0x1b8/0x320
[  358.336345][T14247]  kasan_check_range+0x264/0x2c0
[  358.336357][T14247]  ? usb_copy_descriptors+0x1b8/0x320
[  358.336370][T14247]  __asan_memcpy+0x29/0x70
[  358.336381][T14247]  usb_copy_descriptors+0x1b8/0x320
[  358.336390][T14247]  usb_assign_descriptors+0xcf/0x290
[  358.336398][T14247]  f_audio_bind+0x1b5e/0x34b0
[  358.336409][T14247]  usb_add_function+0x2e1/0x9f0
[  358.336417][T14247]  ? check_remote_wakeup_config+0x58/0x1c0
[  358.336425][T14247]  configfs_composite_bind+0xde0/0x1410
[  358.336436][T14247]  ? __pfx_configfs_composite_bind+0x10/0x10
[  358.336444][T14247]  gadget_bind_driver+0x2ca/0x9e0
[  358.336462][T14247]  ? __pfx_gadget_bind_driver+0x10/0x10
[  358.336471][T14247]  really_probe+0x254/0xae0
[  358.336484][T14247]  __driver_probe_device+0x1e8/0x360
[  358.336494][T14247]  driver_probe_device+0x4f/0x240
[  358.336505][T14247]  __driver_attach+0x339/0x600
[  358.336516][T14247]  bus_for_each_dev+0x23b/0x2c0
[  358.336523][T14247]  ? __pfx___driver_attach+0x10/0x10
[  358.336533][T14247]  ? __pfx_bus_for_each_dev+0x10/0x10
[  358.336542][T14247]  ? do_raw_spin_unlock+0x4d/0x210
[  358.336551][T14247]  bus_add_driver+0x345/0x670
[  358.336559][T14247]  driver_register+0x23a/0x320
[  358.336570][T14247]  usb_gadget_register_driver_owner+0xf9/0x270
[  358.336581][T14247]  gadget_dev_desc_UDC_store+0x1c9/0x2f0
[  358.336592][T14247]  ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[  358.336603][T14247]  configfs_write_iter+0x337/0x430
[  358.336612][T14247]  vfs_write+0x612/0xba0
[  358.336621][T14247]  ? __pfx_vfs_write+0x10/0x10
[  358.336630][T14247]  ? __fget_files+0x2a/0x420
[  358.336638][T14247]  ksys_write+0x150/0x270
[  358.336646][T14247]  ? __pfx_ksys_write+0x10/0x10
[  358.336655][T14247]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.336662][T14247]  do_syscall_64+0x174/0x580
[  358.336672][T14247]  ? trace_irq_disable+0x3b/0x140
[  358.336682][T14247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.336689][T14247] RIP: 0033:0x7ff917d9e019
[  358.336698][T14247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  358.336705][T14247] RSP: 002b:00007ff918be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  358.336714][T14247] RAX: ffffffffffffffda RBX: 00007ff918025fa0 RCX: 00007ff917d9e019
[  358.336720][T14247] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000004
[  358.336725][T14247] RBP: 00007ff917e3500c R08: 0000000000000000 R09: 0000000000000000
[  358.336730][T14247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  358.336735][T14247] R13: 00007ff918026038 R14: 00007ff918025fa0 R15: 00007ffdec988858
[  358.336743][T14247]  </TASK>
[  358.336746][T14247] 
[  358.434718][T14247] The buggy address belongs to the variable:
[  358.436524][T14247]  ac_header_desc+0x0/0x20
[  358.437883][T14247] 
[  358.438611][T14247] The buggy address belongs to the physical page:
[  358.440550][T14247] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ab18
[  358.443172][T14247] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  358.445539][T14247] raw: 00fff00000002000 ffffea00006ac608 ffffea00006ac608 0000000000000000
[  358.448118][T14247] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  358.450717][T14247] page dumped because: kasan: bad access detected
[  358.452654][T14247] page_owner info is not present (never set?)
[  358.454577][T14247] 
[  358.455431][T14247] Memory state around the buggy address:
[  358.457216][T14247]  ffffffff9ab18480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  358.459787][T14247]  ffffffff9ab18500: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9
[  358.462227][T14247] >ffffffff9ab18580: 00 f9 f9 f9 00 f9 f9 f9 00 f9 f9 f9 00 00 f9 f9
[  358.464656][T14247]                       ^
[  358.465988][T14247]  ffffffff9ab18600: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 00 00
[  358.468382][T14247]  ffffffff9ab18680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  358.470911][T14247] ==================================================================
[  358.530133][T14247] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  358.532425][T14247] CPU: 0 UID: 0 PID: 14247 Comm: syz.5.3355 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  358.535733][T14247] Tainted: [L]=SOFTLOCKUP
[  358.537106][T14247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  358.540249][T14247] Call Trace:
[  358.541309][T14247]  <TASK>
[  358.542230][T14247]  vpanic+0x56c/0xa60
[  358.543494][T14247]  ? __pfx_vpanic+0x10/0x10
[  358.544924][T14247]  panic+0xc5/0xd0
[  358.546081][T14247]  ? __pfx_panic+0x10/0x10
[  358.547456][T14247]  ? preempt_schedule_thunk+0x16/0x40
[  358.549103][T14247]  ? usb_copy_descriptors+0x1b8/0x320
[  358.550773][T14247]  ? preempt_schedule_thunk+0x16/0x40
[  358.552462][T14247]  ? usb_copy_descriptors+0x1b8/0x320
[  358.554133][T14247]  check_panic_on_warn+0x89/0xb0
[  358.555673][T14247]  ? usb_copy_descriptors+0x1b8/0x320
[  358.557325][T14247]  end_report+0x73/0x170
[  358.558628][T14247]  ? usb_copy_descriptors+0x1b8/0x320
[  358.560322][T14247]  kasan_report+0x128/0x150
[  358.561730][T14247]  ? usb_copy_descriptors+0x1b8/0x320
[  358.563394][T14247]  kasan_check_range+0x264/0x2c0
[  358.564990][T14247]  ? usb_copy_descriptors+0x1b8/0x320
[  358.566756][T14247]  __asan_memcpy+0x29/0x70
[  358.568156][T14247]  usb_copy_descriptors+0x1b8/0x320
[  358.569776][T14247]  usb_assign_descriptors+0xcf/0x290
[  358.571469][T14247]  f_audio_bind+0x1b5e/0x34b0
[  358.573048][T14247]  usb_add_function+0x2e1/0x9f0
[  358.574579][T14247]  ? check_remote_wakeup_config+0x58/0x1c0
[  358.576606][T14247]  configfs_composite_bind+0xde0/0x1410
[  358.578302][T14247]  ? __pfx_configfs_composite_bind+0x10/0x10
[  358.580126][T14247]  gadget_bind_driver+0x2ca/0x9e0
[  358.581872][T14247]  ? __pfx_gadget_bind_driver+0x10/0x10
[  358.584020][T14247]  really_probe+0x254/0xae0
[  358.585815][T14247]  __driver_probe_device+0x1e8/0x360
[  358.587869][T14247]  driver_probe_device+0x4f/0x240
[  358.589703][T14247]  __driver_attach+0x339/0x600
[  358.591256][T14247]  bus_for_each_dev+0x23b/0x2c0
[  358.592823][T14247]  ? __pfx___driver_attach+0x10/0x10
[  358.594456][T14247]  ? __pfx_bus_for_each_dev+0x10/0x10
[  358.596108][T14247]  ? do_raw_spin_unlock+0x4d/0x210
[  358.597684][T14247]  bus_add_driver+0x345/0x670
[  358.599266][T14247]  driver_register+0x23a/0x320
[  358.600785][T14247]  usb_gadget_register_driver_owner+0xf9/0x270
[  358.602819][T14247]  gadget_dev_desc_UDC_store+0x1c9/0x2f0
[  358.604547][T14247]  ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[  358.606455][T14247]  configfs_write_iter+0x337/0x430
[  358.608043][T14247]  vfs_write+0x612/0xba0
[  358.609369][T14247]  ? __pfx_vfs_write+0x10/0x10
[  358.610874][T14247]  ? __fget_files+0x2a/0x420
[  358.612311][T14247]  ksys_write+0x150/0x270
[  358.613675][T14247]  ? __pfx_ksys_write+0x10/0x10
[  358.615324][T14247]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.617174][T14247]  do_syscall_64+0x174/0x580
[  358.618601][T14247]  ? trace_irq_disable+0x3b/0x140
[  358.620164][T14247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.621993][T14247] RIP: 0033:0x7ff917d9e019
[  358.623350][T14247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  358.629359][T14247] RSP: 002b:00007ff918be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  358.632126][T14247] RAX: ffffffffffffffda RBX: 00007ff918025fa0 RCX: 00007ff917d9e019
[  358.634577][T14247] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000004
[  358.637255][T14247] RBP: 00007ff917e3500c R08: 0000000000000000 R09: 0000000000000000
[  358.639663][T14247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  358.642104][T14247] R13: 00007ff918026038 R14: 00007ff918025fa0 R15: 00007ffdec988858
[  358.644538][T14247]  </TASK>
[  358.645903][T14247] Kernel Offset: disabled
[  358.647229][T14247] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:46:52  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001a8c RDI=0000000000001a8d RBP=00000000000003f8 RSP=ffffc900037e7010
R8 =ffff888109760237 R9 =1ffff110212ec046 R10=dffffc0000000000 R11=ffffffff85676d60
R12=dffffc0000000000 R13=ffffffff9aade0e0 R14=ffffffff9aade120 R15=0000000000000000
RIP=ffffffff85676ddc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff918be66c0 ffffffff 00c00000
GS =0000 ffff88818d94d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d214ff8 CR3=000000002b8fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007ff2afd5d560
XMM02=00007ff2af1f25e8 00007ff2af1f2618 XMM03=00007ff2af1f2600 00007ff2af1f25e0
XMM04=00007ff2afd5d020 00007ff2af1f25c0 XMM05=00007ff2af1f25d0 00007ff2af1f2610
XMM06=00007ff2af1f25f8 00007ff2af1f25c8 XMM07=00007ff2af1f2600 00007ff2af1f25e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81749a12 RBX=000000000000000f RCX=ffff888160478000 RDX=0000000000000000
RSI=000000000000000f RDI=0000000000000003 RBP=ffffc90000197f10 RSP=ffffc90000197e38
R8 =ffff88823c623fcb R9 =1ffff110478c47f9 R10=dffffc0000000000 R11=ffffed10478c47fa
R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff81749a13 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8f4d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3381fff8 CR3=000000000e946000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007ff2afd5d560
XMM02=00007ff2af1f25e8 00007ff2af1f2618 XMM03=00007ff2af1f2600 00007ff2af1f25e0
XMM04=00007ff2afd5d020 00007ff2af1f25c0 XMM05=00007ff2af1f25d0 00007ff2af1f2610
XMM06=00007ff2af1f25f8 00007ff2af1f25c8 XMM07=00007ff2af1f2600 00007ff2af1f25e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
