last executing test programs:

1m6.021554398s ago: executing program 5 (id=6102):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0xb, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x204, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x330}}, 0x0)

1m5.612823963s ago: executing program 5 (id=6107):
r0 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000200)={[{@fat=@codepage={'codepage', 0x3d, '936'}}, {@fat=@nfs}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@fat=@fmask={'fmask', 0x3d, 0x1ff}}, {@fat=@fmask={'fmask', 0x3d, 0x6}}, {@nodots}, {@nodots}, {@nodots}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@discard}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@check_strict}, {}, {@nodots}]}, 0x0, 0x1f1, &(0x7f00000006c0)="$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")
getdents64(r0, &(0x7f0000000100)=""/151, 0x97)

1m5.25922762s ago: executing program 5 (id=6111):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)

1m4.845463026s ago: executing program 5 (id=6115):
syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)={[{@errors_remount}, {@keep_last_dots}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8}, {@keep_last_dots}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x401}}, {@umask={'umask', 0x3d, 0xb35e}}, {@utf8}]}, 0x1, 0x152a, &(0x7f0000001ac0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

1m4.28581754s ago: executing program 5 (id=6121):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044004}, 0x40000)

1m3.837690214s ago: executing program 5 (id=6125):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0)

1m3.059555448s ago: executing program 32 (id=6125):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0)

3.57425644s ago: executing program 2 (id=6879):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)

3.574009288s ago: executing program 4 (id=6880):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108)

3.299009253s ago: executing program 4 (id=6883):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x700, 0x35315258, 0xf00, 0x870, 0x0, @stepwise})

3.206373804s ago: executing program 2 (id=6885):
r0 = syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0xff, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000640)="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", 0x0, 0x3c1, 0x0, 0x3, 0x0})

2.985693655s ago: executing program 4 (id=6887):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002940), 0x100, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x10, 0x415, 0x3ff, 0x21, 0xe, "55ff318036abe2970313410ed68987e749efe5"})

2.915991685s ago: executing program 2 (id=6890):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

2.75160241s ago: executing program 0 (id=6892):
r0 = semget$private(0x0, 0x1, 0x80)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/255)

2.673582292s ago: executing program 4 (id=6893):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0)

2.665563708s ago: executing program 6 (id=6894):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000020200000000002e2e"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

2.659964608s ago: executing program 2 (id=6895):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f0000001040)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19)

2.550700121s ago: executing program 0 (id=6897):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@generic="b0c0a477c1"]}, 0x1c}}, 0x0)

2.42028729s ago: executing program 4 (id=6899):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x80, &(0x7f0000000000)=ANY=[], 0xf9, 0x606c, &(0x7f00000084c0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))

2.250345895s ago: executing program 6 (id=6900):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x279, 0x80000)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x100000, {0x0, 0x10002, 0x3011, 0x6, 0x2, 0x7, 0x1, 0x1}})

2.230655613s ago: executing program 0 (id=6901):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980915, 0x3, @value=0x140000000000})

2.186162496s ago: executing program 3 (id=6902):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x1)

2.15077922s ago: executing program 1 (id=6903):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
pidfd_send_signal(r0, 0x1, &(0x7f00000001c0)={0x30, 0x28b, 0x80}, 0x0)

2.100113969s ago: executing program 2 (id=6904):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x4, 0x619d, &(0x7f0000000780)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x3)

1.905559557s ago: executing program 0 (id=6905):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0)

1.881996928s ago: executing program 6 (id=6906):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0xf4240}], 0xb, 0x0, 0x0, 0x0)

1.872243783s ago: executing program 1 (id=6907):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8000)

1.707888922s ago: executing program 3 (id=6908):
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f"], 0x1, 0x17d, &(0x7f0000000d80)="$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")
execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

1.707126775s ago: executing program 0 (id=6909):
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/udp6\x00')
lseek(r0, 0x1, 0x2)

1.601307531s ago: executing program 1 (id=6910):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20)

1.600648309s ago: executing program 6 (id=6911):
r0 = socket(0x840000000002, 0x3, 0x5)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x29, 0x0, &(0x7f0000000040))

1.4433751s ago: executing program 0 (id=6912):
r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYBLOB="97ff0f"], 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00037b0000007b03"], 0x0, 0x0, 0x0}, 0x0)

1.337549467s ago: executing program 1 (id=6913):
r0 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a})
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1)

1.287561282s ago: executing program 3 (id=6914):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}]}}}]}, 0x48}}, 0x40080c0)

1.245112066s ago: executing program 6 (id=6915):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000d0000000000000005000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000006c0)='GPL\x00', 0x7, 0x31, &(0x7f00000004c0)=""/49, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)

1.144294449s ago: executing program 1 (id=6916):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x4, 0xa, 0x0, "3258c54db700f4ff270000e0ffffff000000000002000000000100", 0x32314742})

993.293265ms ago: executing program 6 (id=6917):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000180)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c67727071756f74612c696e6f646536342c61636c2c6c6f63616c666c6f636b732c005ea7501d3984f30800000034dd9b5f52523eb71133652077aca5d26b513822020aa04ceba373f5ce95c0d1d4d8d88b077307143bab05b944c8717fae9043000a828674b0cdb1a82528e59e857c2049a73f8389f4eb91af6e2f93e4894cc0e776da52222dc59219"], 0x0, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0xa, 0x7ec, 0x2000000000, 0x2000000000002, 0x3, 0x0, 0x7ffd})

985.493335ms ago: executing program 1 (id=6918):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000000)={0x20, 0x15, 0x2, "2f8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

941.627861ms ago: executing program 3 (id=6919):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)

462.758385ms ago: executing program 3 (id=6920):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f000000b9c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xffffab71, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @local, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000f80)}, {&(0x7f0000000040)="11de14fab5334a7a74f4120171cbb7b91c4e33d51107f968a0537657c19b781f115f5795e7fe994fdec07ce0aed95551c67e", 0x32}], 0x2}}], 0x2, 0x14002051)

308.506414ms ago: executing program 2 (id=6921):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001140)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@noadinicb}, {@adinicb}, {@uid}, {@uid_forget}, {@umask={'umask', 0x3d, 0x2}}, {@longad}, {@gid}, {@nostrict}]}, 0xfe, 0xc22, &(0x7f00000002c0)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu43bTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22YXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkFPAYGbfikuKsmhTpCj7+2zqNzvz3sx7M+sZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/fOnMc+lhtwIAOEhXxr985qznPwB8rFz1//8AAAAAAAAAAAAAAHDYpSji8Ugxf2U9TVafOwYut2dv3Z4YGd252rFU1TxSlS9/Bp47e+78F54fvtDN96//oD0Zr45fvVR/ae7m/EJrcbE1XZ+YbU/NTbd2vYe91t9uqDoB9Zuv3Zq+fn2xfvbZc1s23x58r/+xk4MXh58+/VS37MTI6Oh4T5la34c++l3uNcLjaBRxOlI8890fp2ZEFLH3c3Gf785+O1Z1YqjqxMTIaNWRmXZzdqncONY9EUVEvadSo3uODuBa7EkjYrlsftngobJ74/PNhea1mVZ9rLmw1F5qz82OpU5ry/7Uo4gLKWIlItb6795dXxRRixTfPrGerkXEke55+Hw1MPje7Sj2sY+7ULaz3hexUjwC1+wQ648iXokUP3m7iKnynOWf+FzEK2V+P+LNMl+MSOUX43zEuzt8j3g01aKIvyiv/8X1NB0RGyc660frl79S/9Ls9bmest37yiP/fDhIh/zeNBBFNKs7/nr68L/ZAQAAAAAAAAAAAAAAAOBBOxZFPBkpXv6PP67GFUc1Lv3ExeE/GPzF3jHjT9xnP2XZZyNiudjdmNyjeQjxWBpL6SGPJf44G4gi/iSP//vmw24MAAAAAAAAAAAAAAAAAADAx1oRP4oUL7xzKq1E75zi7dkb9avNazOdWWG7c/9250zf2NjYqKdONnJO5lzOuZJzNedazihy/ZyNnJM5l3Ou5FzNuZYzjuT6ORs5J3Mu51zJuZpzLWfUcv2cjZyTOZdzruRczbmWMw7J3L0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8lRRTxs0jxra+tp0gR0YiYjE6u9nfLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU38q4nuRov6HjTvrahGRqn87TpW/nI/G0TI/GY3hMl+MxqWczSprjW/e92hpX/rAh9eXivhhpOgfeOvO1cnXv6/zafOavfn1zU+/Uuvkke7Gwff6Hzt54uLw6K89ca/lHa/+0OX27K3b9YmR0dHxntW1fPRP9qwbzMctHkzXiYjF1994rTkz01qw8PFYqHUWanFI2nNQC/l+FYelPdsXGoejGZsLD/nGxIEon//vRorfeec/uw/87vP/Fzqf7jzh46d/uvn8f2H7jvbp+f94z7oX8u9G+moRA0s35/tORgwsvv7G6fbN5o3Wjdbs+TNnvjg8/MVzZ/qORgxcb8+0epb2fKoAAAAAAAAAAAAAAAAADlYq4vciRfOH66keEber8VqDF4efPv3UkThSjbfaMm7r1fGrl+ovzd2cX2gtLram6xOz7am56dZuDzdQDfeaGBndl87c17F9bv+xgZfm5l9faN/4o6Udtx8fuHRtcWmhObXz5jgWRUSjd81Q1eCJkdGq0TPt5mxVdewBvUqhLxXxX5Fi6nw9fTavy+P/to/w3zL+f3n7jvZp/N8netaVx0ypiJ9Git/+yyfis1U7j8dd5yyX+9tIMXThM7lcHC3LddvQea9AZ2RgWfb/IsU//mxr2e54yMc3yz636xP7iCiv/4lI8b0//078Rl639f0PO1//49t3tE/X/1M9645veV/BnrtOvv6nI8WLj78Vv5nXvd/7P4rY2Nj4RsSpXPjO+zn26fp/umfdYHSO+1sPrvsAAAAAAAAAAACPrL5UxN9FiqdGa+n5vG43f/9vevuO9unvf/1yz7rpA5qvaM8nFQAAAAAOib5UxI8ixY2lt+6Mod46/rtn/Ofvbs69PpK2ba3+nO+XqvcGPMg//+s1mI87ufduAwAAAAAAAAAAAAAAAAAAwKGSUhHP5/nUJ+8zn/pqpHj5f57J5dLJslx3HvjB6teBK3Ozpy/NzMxNNZea12Za9fH55lSrrPupSLH+N5/JdYtqfvXufPOdOd4HNrpzsS9EitG/75btzMXenZu8Mx94Zy72suwnIsV//8PWst15rD+9WfZsWfavI8VX/3nnsic3y54ry34nUvzgq/Vu2eNl2e77UTvvJB2oxUzr2am5mbtehQoAAAAAAAAAAAAAAAAAAAAfVF8q4s8ixf/eXInlPOw/z//fnYG/1i375td75vvf5nY1z/9gNf//vZY/zPz/gw+spwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OhIUcQbkWL+ynpa7S8/dwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lzw/fKGb71//QXsyXh2/eqn+0tzN+YXW4mJruj4x256am27teg97rb956jqGqhNQv/narenr1xfrZ589t2Xz7cH3+h87OXhx+OnTT3XLToyMjo73lKn1fYCjf6DGbToaRfxVpHjmuz9O/9IfUcTez8V9vjv77VjViaGqExMjo1VHZtrN2aVy41j3RBQR9Z5Kje45OoBrsSeNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv3t3fVHEa5Hi2yfW07/2RxzpnofPXxn/8pmz925HsY993IWynfW+iJXiEbhmh1h/FPFPkeInb5+Kf+uPqEXnJz4X8UqZ3494s8wXI1KK2PhGxLs7fI94NNWiiP8vr//F9fR2f3k/6N5XLn+l/qXZ63M9Zbv3lV09H3793sd86M+Hg3TI700DUcQPqjv+evp3/10DAAAAAAAAAAAAAAAAHCJF/GqkeOGdU6kaH3xnTHF79kb9avPaTGdYX3fsX3fM9MbGxkY9dbKRczLncs6VnKs513JGkevnbOSczLmccyXnas61nHEk18/ZyDmZcznnSs7VnGs5o5br52zknMy5nHMl52rOtZxxSMbuAQAAAAAAAAAAAAAAAAAAHy1F9U+Kb31tPW30d+aXnoxOrpoP9CPv5wEAAP//N4D+uw==")
lchown(&(0x7f00000001c0)='./file1\x00', 0x0, 0xee01)

228.943657ms ago: executing program 4 (id=6922):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060500000000c2000000000000000005000400000000000900020073797a32000000001400078005001400fbcfd9150800084000000000050005000a000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0)

0s ago: executing program 3 (id=6923):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
request_key(&(0x7f0000001000)='dns_resolver\x00', 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

[  644.931818][T18597] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  644.966237][T18597] BTRFS info (device loop5): using free-space-tree
[  645.029639][T18674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5256'.
[  645.458296][T18692] loop2: detected capacity change from 0 to 4096
[  645.534672][ T5841] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  645.592675][T18692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  645.646899][  T876] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  645.845867][T18716] loop3: detected capacity change from 0 to 512
[  645.852464][  T876] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  645.877481][  T876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.885601][  T876] usb 2-1: Product: syz
[  645.904524][T18716] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  645.906751][  T876] usb 2-1: Manufacturer: syz
[  645.926401][  T876] usb 2-1: SerialNumber: syz
[  645.957222][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.970761][  T876] usb 2-1: config 0 descriptor??
[  646.032354][T18716] EXT4-fs (loop3): 1 truncate cleaned up
[  646.075542][T18716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  646.218400][T18716] EXT4-fs error (device loop3): ext4_find_extent:903: inode #15: comm syz.3.5264: inode has invalid extent depth: 25964
[  646.279064][T18716] EXT4-fs (loop3): Remounting filesystem read-only
[  646.313658][T18716] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  646.394987][  T876] usb 2-1: f81604_write: reg: 105 data: 0 failed: -EPROTO
[  646.422588][  T876] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  646.469044][  T876] f81604 2-1:0.0: probe with driver f81604 failed with error -71
[  646.512495][  T876] usb 2-1: USB disconnect, device number 91
[  646.599728][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.663743][T18746] loop4: detected capacity change from 0 to 2048
[  646.736765][T18746] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  646.861466][T18746] UDF-fs: unknown compression code (0)
[  647.161802][T18779] __nla_validate_parse: 1 callbacks suppressed
[  647.161824][T18779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5275'.
[  647.345628][T18713] loop0: detected capacity change from 0 to 32768
[  647.408482][T18713] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5263 (18713)
[  647.506952][T18713] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  647.538420][   T30] audit: type=1326 audit(1750326347.354:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368578e929 code=0x7ffc0000
[  647.586339][T18713] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  647.633985][T18713] BTRFS info (device loop0): using free-space-tree
[  647.681172][   T30] audit: type=1326 audit(1750326347.354:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368578e929 code=0x7ffc0000
[  647.793761][   T30] audit: type=1326 audit(1750326347.364:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f368578e929 code=0x7ffc0000
[  647.867200][   T30] audit: type=1326 audit(1750326347.364:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368578e929 code=0x7ffc0000
[  648.025347][   T30] audit: type=1326 audit(1750326347.364:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18792 comm="syz.4.5280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368578e929 code=0x7ffc0000
[  648.136461][   T30] audit: type=1326 audit(1750326347.834:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433638e929 code=0x7ffc0000
[  648.178587][ T5847] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  648.238155][T18842] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5288'.
[  648.277176][   T30] audit: type=1326 audit(1750326347.844:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433638e929 code=0x7ffc0000
[  648.304513][T18842] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5288'.
[  648.399001][   T30] audit: type=1326 audit(1750326347.844:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f433638e929 code=0x7ffc0000
[  648.465231][T18853] loop3: detected capacity change from 0 to 1024
[  648.472544][   T30] audit: type=1326 audit(1750326347.844:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433638e929 code=0x7ffc0000
[  648.564474][   T30] audit: type=1326 audit(1750326347.844:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18830 comm="syz.1.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433638e929 code=0x7ffc0000
[  648.587133][ T5958] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  648.656295][T18853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  648.787135][ T5958] usb 5-1: Using ep0 maxpacket: 16
[  648.815628][ T5958] usb 5-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config
[  648.887172][ T5958] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  648.967586][ T5958] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  649.008717][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.015764][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.016751][ T5958] usb 5-1: Product: syz
[  649.016773][ T5958] usb 5-1: Manufacturer: syz
[  649.147251][ T5958] usb 5-1: SerialNumber: syz
[  649.388811][T15423] Bluetooth: hci2: unexpected event for opcode 0x0c05
[  649.398389][ T5958] usb 5-1: 0:2 : does not exist
[  649.403344][ T5958] usb 5-1: unit 9 not found!
[  649.647023][ T5958] usb 5-1: USB disconnect, device number 102
[  649.749125][T18911] loop0: detected capacity change from 0 to 2048
[  649.805883][ T6141] udevd[6141]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  649.807583][T18911] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  649.886149][T18911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  649.898248][T18932] dlm: plock device version mismatch: kernel (1.2.0), user (1.16384000.0)
[  650.034367][T18940] loop2: detected capacity change from 0 to 64
[  650.107091][T18940] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  651.721654][T19013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5326'.
[  652.005560][T19022] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5329'.
[  652.349564][T19040] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  652.381614][T19039] loop0: detected capacity change from 0 to 1024
[  652.391579][T19040] /dev/nullb0: Can't open blockdev
[  652.450112][T19046] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5336'.
[  652.530730][T18971] loop4: detected capacity change from 0 to 32768
[  652.619839][T18971] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  652.647322][T18971] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  652.818936][   T30] audit: type=1326 audit(1750326352.633:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433638e929 code=0x7ffc0000
[  652.843742][T18971] XFS (loop4): Ending clean mount
[  652.940190][T18971] XFS (loop4): Quotacheck needed: Please wait.
[  652.946754][   T30] audit: type=1326 audit(1750326352.633:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433638e929 code=0x7ffc0000
[  653.017725][T19079] program syz.0.5341 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  653.120369][T18971] XFS (loop4): Quotacheck: Done.
[  653.121472][   T30] audit: type=1326 audit(1750326352.673:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f433638e929 code=0x7ffc0000
[  653.267021][   T30] audit: type=1326 audit(2000000000.000:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433638e929 code=0x7ffc0000
[  653.287632][T19096] netlink: 'syz.1.5345': attribute type 10 has an invalid length.
[  653.313442][T19096] bridge0: port 3(team0) entered blocking state
[  653.363407][T19096] bridge0: port 3(team0) entered disabled state
[  653.383506][ T5842] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  653.400586][T19096] team0: entered allmulticast mode
[  653.403935][   T30] audit: type=1326 audit(2000000000.000:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.1.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433638e929 code=0x7ffc0000
[  653.414304][T19096] team_slave_0: entered allmulticast mode
[  653.428509][ T5958] usb 4-1: new full-speed USB device number 96 using dummy_hcd
[  653.489646][T19096] team_slave_1: entered allmulticast mode
[  653.505340][T19096] team0: entered promiscuous mode
[  653.537424][T19096] team_slave_0: entered promiscuous mode
[  653.552087][T19096] team_slave_1: entered promiscuous mode
[  653.588460][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  653.601406][T19096] bridge0: port 3(team0) entered blocking state
[  653.609509][T19096] bridge0: port 3(team0) entered forwarding state
[  653.659936][ T5958] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  653.683459][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.731549][ T5958] usb 4-1: Product: syz
[  653.757539][ T5958] usb 4-1: Manufacturer: syz
[  653.762188][ T5958] usb 4-1: SerialNumber: syz
[  653.818243][ T5958] usb 4-1: config 0 descriptor??
[  653.951291][T19123] openvswitch: netlink: Duplicate or invalid key (type 0).
[  653.996010][T19123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  654.055352][ T5916] usb 4-1: USB disconnect, device number 96
[  654.606812][T19168] netlink: 'syz.2.5365': attribute type 1 has an invalid length.
[  654.639278][T19168] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5365'.
[  654.886400][T19179] loop0: detected capacity change from 0 to 2048
[  654.967702][T19185] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5371'.
[  654.979000][T19185] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5371'.
[  654.992289][T19179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  655.144823][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  655.299001][ T5929] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  655.508747][ T5929] usb 6-1: Using ep0 maxpacket: 16
[  655.517927][ T5929] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  655.533497][T19221] netlink: 'syz.2.5381': attribute type 1 has an invalid length.
[  655.563828][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  655.579275][T19221] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5381'.
[  655.620010][ T5929] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  655.637552][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.665947][ T5929] usb 6-1: Product: syz
[  655.683806][ T5929] usb 6-1: Manufacturer: syz
[  655.704595][ T5929] usb 6-1: SerialNumber: syz
[  655.738499][ T5929] usb 6-1: config 0 descriptor??
[  655.988897][ T5929] appledisplay: Apple Cinema Display connected
[  656.107563][  T876] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  656.216359][T19264] xt_hashlimit: max too large, truncated to 1048576
[  656.241129][T19265] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5391'.
[  656.281386][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5391'.
[  656.289775][   T10] usb 6-1: USB disconnect, device number 97
[  656.290615][    C1] usb 6-1: appledisplay_complete - usb_submit_urb failed with result -19
[  656.329692][  T876] usb 4-1: Using ep0 maxpacket: 32
[  656.345265][  T876] usb 4-1: config 4 has an invalid interface number: 128 but max is 0
[  656.355332][   T10] appledisplay: Apple Cinema Display disconnected
[  656.368844][  T876] usb 4-1: config 4 has no interface number 0
[  656.395444][  T876] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  656.419631][T19273] qrtr: Invalid version 0
[  656.449254][  T876] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  656.486432][  T876] usb 4-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00
[  656.517525][  T876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.590202][  T876] hub 4-1:4.128: USB hub found
[  656.683417][T19294] loop1: detected capacity change from 0 to 64
[  656.820649][  T876] hub 4-1:4.128: 2 ports detected
[  656.838623][  T876] hub 4-1:4.128: Using single TT (err -22)
[  657.024054][  T876] hub 4-1:4.128: hub_hub_status failed (err = -71)
[  657.051811][  T876] hub 4-1:4.128: config failed, can't get hub status (err -71)
[  657.065153][T19311] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  657.073032][T19313] loop5: detected capacity change from 0 to 128
[  657.106809][T19311] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  657.125055][T19313] EXT4-fs (loop5): Test dummy encryption mode enabled
[  657.136452][  T876] usb 4-1: USB disconnect, device number 97
[  657.216157][T19313] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  657.311680][T19313] ext4 filesystem being mounted at /892/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  657.371384][T19284] loop2: detected capacity change from 0 to 32768
[  657.408657][T19284] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5395 (19284)
[  657.497421][T19336] netlink: 'syz.0.5406': attribute type 7 has an invalid length.
[  657.506463][T19284] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  657.519122][ T5841] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  657.531768][T19284] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  657.561714][T19284] BTRFS info (device loop2): using free-space-tree
[  657.717255][T19360] netlink: 'syz.1.5410': attribute type 6 has an invalid length.
[  657.763400][T19360] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5410'.
[  657.827572][ T5929] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  657.878311][T19373] netlink: 'syz.0.5411': attribute type 5 has an invalid length.
[  657.895417][T19284] BTRFS info (device loop2): rebuilding free space tree
[  658.008932][ T5929] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  658.017258][ T5929] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  658.029848][ T5929] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  658.040491][ T5929] usb 5-1: config 220 has no interface number 2
[  658.048294][ T5929] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  658.062418][ T5929] usb 5-1: config 220 interface 0 has no altsetting 0
[  658.069741][ T5929] usb 5-1: config 220 interface 76 has no altsetting 0
[  658.076624][ T5929] usb 5-1: config 220 interface 1 has no altsetting 0
[  658.086917][ T5929] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  658.107602][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.115763][ T5929] usb 5-1: Product: syz
[  658.127739][ T5929] usb 5-1: Manufacturer: syz
[  658.132417][ T5929] usb 5-1: SerialNumber: syz
[  658.261949][ T5844] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  658.439862][ T5929] usb 5-1: selecting invalid altsetting 0
[  658.472787][ T5929] usb 5-1: selecting invalid altsetting 0
[  658.498122][ T5929] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  658.525214][ T5929] usb 5-1: No valid video chain found.
[  658.662378][ T5929] usb 5-1: selecting invalid altsetting 0
[  658.703506][ T5929] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  658.767917][ T5929] usb 5-1: USB disconnect, device number 103
[  659.269301][T19437] random: crng reseeded on system resumption
[  659.554659][T19449] loop5: detected capacity change from 0 to 2048
[  659.572523][T19442] loop3: detected capacity change from 0 to 1764
[  659.659275][T19449] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  659.715344][T19462] netlink: 'syz.1.5434': attribute type 1 has an invalid length.
[  660.255286][ T1609] lo speed is unknown, defaulting to 1000
[  660.387961][T19495] loop4: detected capacity change from 0 to 1024
[  660.541773][T19493] loop2: detected capacity change from 0 to 4096
[  660.601779][   T12] hfsplus: b-tree write err: -5, ino 4
[  660.609316][T19493] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  660.738143][T19493] ntfs3(loop2): ino=1a, mi_enum_attr
[  660.743604][T19493] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  660.812713][T19493] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  660.862142][T19493] ntfs3(loop2): ino=5, "/" indx_read
[  661.487528][   T30] audit: type=1326 audit(2000000008.619:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19558 comm="syz.4.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368578e929 code=0x7ffc0000
[  661.600852][   T30] audit: type=1326 audit(2000000008.629:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19558 comm="syz.4.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f368578e929 code=0x7ffc0000
[  662.053810][T19579] program syz.2.5470 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  662.107904][T19581] loop3: detected capacity change from 0 to 256
[  662.251038][T19581] FAT-fs (loop3): Directory bread(block 64) failed
[  662.282562][T19581] FAT-fs (loop3): Directory bread(block 65) failed
[  662.292800][T19581] FAT-fs (loop3): Directory bread(block 66) failed
[  662.340285][T19581] FAT-fs (loop3): Directory bread(block 67) failed
[  662.379541][T19581] FAT-fs (loop3): Directory bread(block 68) failed
[  662.414237][T19581] FAT-fs (loop3): Directory bread(block 69) failed
[  662.425130][T19546] loop1: detected capacity change from 0 to 32768
[  662.434122][T19581] FAT-fs (loop3): Directory bread(block 70) failed
[  662.467649][T19546] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5460 (19546)
[  662.496533][T19581] FAT-fs (loop3): Directory bread(block 71) failed
[  662.524767][T19581] FAT-fs (loop3): Directory bread(block 72) failed
[  662.527712][T19593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5474'.
[  662.546051][T19581] FAT-fs (loop3): Directory bread(block 73) failed
[  662.553712][T19586] loop5: detected capacity change from 0 to 4096
[  662.567060][T19593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5474'.
[  662.586462][T19546] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  662.597765][T19586] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  662.642657][T19546] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  662.717942][T19546] BTRFS info (device loop1): using free-space-tree
[  662.769745][T19564] loop0: detected capacity change from 0 to 32768
[  662.812264][T19586] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  662.923098][T19564] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  663.171553][T19546] BTRFS info (device loop1): rebuilding free space tree
[  663.375224][T19564] XFS (loop0): Ending clean mount
[  663.423504][T19564] XFS (loop0): Quotacheck needed: Please wait.
[  663.533268][ T5840] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  663.623069][T19564] XFS (loop0): Quotacheck: Done.
[  663.836866][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  664.163843][T19683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5490'.
[  664.332665][T19690] netlink: 'syz.2.5494': attribute type 12 has an invalid length.
[  664.365874][T19690] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5494'.
[  664.642052][T19704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5498'.
[  665.001970][T19716] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5502'.
[  665.617725][ T5929] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  665.844672][ T5929] usb 1-1: Using ep0 maxpacket: 32
[  665.892563][ T5929] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  665.935354][ T5929] usb 1-1: config 0 has no interface number 0
[  665.977601][ T5929] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  666.022115][ T5929] usb 1-1: config 0 interface 85 has no altsetting 0
[  666.060957][ T5929] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  666.098517][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.143084][ T5929] usb 1-1: Product: syz
[  666.172892][ T5929] usb 1-1: Manufacturer: syz
[  666.189739][ T5929] usb 1-1: SerialNumber: syz
[  666.218271][ T5929] usb 1-1: config 0 descriptor??
[  666.563335][T19803] sock: sock_timestamping_bind_phc: sock not bind to device
[  666.657344][ T5929] appletouch 1-1:0.85: Failed to request geyser raw mode
[  666.684317][ T5929] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  666.808750][ T5929] usb 1-1: USB disconnect, device number 106
[  666.839438][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5532'.
[  666.875623][T19825] netlink: 'syz.2.5530': attribute type 1 has an invalid length.
[  666.892908][T19824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5532'.
[  667.378464][T19851] loop3: detected capacity change from 0 to 512
[  667.385716][T19851] EXT4-fs: inline encryption not supported
[  667.455778][T19864] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5542'.
[  667.460534][T19851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  667.504066][T19854] loop2: detected capacity change from 0 to 4096
[  667.518452][T19851] ext4 filesystem being mounted at /878/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  667.529194][T19854] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  667.550759][T19851] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #15: comm syz.3.5538: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  667.582654][T19869] loop4: detected capacity change from 0 to 512
[  667.891347][T19873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5546'.
[  668.015347][T19878] loop1: detected capacity change from 0 to 128
[  668.026032][T19880] netlink: 'syz.0.5548': attribute type 1 has an invalid length.
[  668.200363][T19869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  668.237849][T19869] ext4 filesystem being mounted at /917/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  668.337657][T19889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5550'.
[  668.350368][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  668.539537][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  668.666110][T19904] loop5: detected capacity change from 0 to 16
[  668.728588][T19904] erofs (device loop5): mounted with root inode @ nid 36.
[  668.744442][T19910] geneve2: entered promiscuous mode
[  668.773265][T19904] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet
[  669.761686][T19973] loop0: detected capacity change from 0 to 4096
[  669.766123][T19978] loop3: detected capacity change from 0 to 1764
[  669.853645][T19987] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  669.866213][T19978] iso9660: Corrupted directory entry in block 2 of inode 1920
[  670.042114][T19994] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  670.157598][T19994] CIFS mount error: No usable UNC path provided in device string!
[  670.157598][T19994] 
[  670.250268][T19994] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  670.429226][T20002] loop5: detected capacity change from 0 to 4096
[  670.501627][T20002] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  670.593570][T20013] ubi31: attaching mtd0
[  670.628535][T20013] ubi31: scanning is finished
[  670.657694][T20013] ubi31: empty MTD device detected
[  670.704862][T20020] nft_compat: unsupported protocol 16
[  670.987922][T20013] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  670.995718][T20013] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  671.008150][T20013] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  671.015232][T20013] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  671.133872][T20013] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  671.187714][T20013] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  671.231188][T20013] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1790543184
[  671.317586][T20013] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  671.355077][T19990] loop1: detected capacity change from 0 to 32768
[  671.367811][ T5929] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  671.399710][T20029] ubi31: background thread "ubi_bgt31d" started, PID 20029
[  671.465884][T19990] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5577 (19990)
[  671.583606][ T5929] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  671.601200][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.628106][T19990] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  671.656393][ T5929] usb 1-1: Product: syz
[  671.663834][ T5929] usb 1-1: Manufacturer: syz
[  671.709072][ T5929] usb 1-1: SerialNumber: syz
[  671.712506][T19990] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  671.744191][ T5929] usb 1-1: config 0 descriptor??
[  671.755933][T19990] BTRFS info (device loop1): disk space caching is enabled
[  671.783809][ T5929] gspca_main: sunplus-2.14.0 probing 055f:c230
[  671.790533][T19990] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  671.960633][T19990] BTRFS info (device loop1): rebuilding free space tree
[  672.017068][T19990] BTRFS info (device loop1): disabling free space tree
[  672.026320][T19990] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  672.062892][T19990] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  672.213262][ T5929] usb 1-1: USB disconnect, device number 107
[  672.407999][T20114] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5601'.
[  672.470298][ T5840] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  672.696597][   T30] audit: type=1326 audit(2000000019.829:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20125 comm="syz.3.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef358e929 code=0x7ffc0000
[  672.787572][   T30] audit: type=1326 audit(2000000019.829:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20125 comm="syz.3.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef358e929 code=0x7ffc0000
[  672.949122][   T30] audit: type=1326 audit(2000000019.839:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20125 comm="syz.3.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7faef358e929 code=0x7ffc0000
[  673.083942][   T30] audit: type=1326 audit(2000000019.839:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20125 comm="syz.3.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef358e929 code=0x7ffc0000
[  673.209779][T20149] loop5: detected capacity change from 0 to 64
[  673.227669][   T30] audit: type=1326 audit(2000000019.839:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20125 comm="syz.3.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef358e929 code=0x7ffc0000
[  673.681934][T20170] xt_CT: You must specify a L4 protocol and not use inversions on it
[  674.153127][T20196] loop2: detected capacity change from 0 to 64
[  674.837579][  T876] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  674.882483][ T1609] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  675.027727][   T10] usb 4-1: new full-speed USB device number 98 using dummy_hcd
[  675.038069][  T876] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  675.049855][  T876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.057739][ T1609] usb 3-1: Using ep0 maxpacket: 16
[  675.070043][  T876] usb 2-1: Product: syz
[  675.074724][  T876] usb 2-1: Manufacturer: syz
[  675.076637][ T1609] usb 3-1: config 0 has an invalid interface number: 65 but max is 0
[  675.088150][  T876] usb 2-1: SerialNumber: syz
[  675.103909][  T876] usb 2-1: config 0 descriptor??
[  675.112845][ T1609] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  675.145421][T20180] loop4: detected capacity change from 0 to 32768
[  675.157163][  T876] usb 2-1: interface 1 not found
[  675.157646][ T1609] usb 3-1: config 0 has no interface number 0
[  675.199725][ T1609] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x4 has invalid maxpacket 31232, setting to 1024
[  675.236412][   T10] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  675.237815][ T1609] usb 3-1: config 0 interface 65 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  675.266896][   T10] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  675.276946][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.286880][   T10] usb 4-1: Product: syz
[  675.300258][   T10] usb 4-1: Manufacturer: syz
[  675.304909][   T10] usb 4-1: SerialNumber: syz
[  675.318557][T20180] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  675.344469][ T1609] usb 3-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  675.356931][ T5937] usb 2-1: USB disconnect, device number 92
[  675.460056][ T1609] usb 3-1: New USB device found, idVendor=387e, idProduct=1fb6, bcdDevice=99.b4
[  675.500968][ T1609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.519339][ T1609] usb 3-1: Product: syz
[  675.537186][ T1609] usb 3-1: Manufacturer: syz
[  675.567197][ T1609] usb 3-1: SerialNumber: syz
[  675.568258][   T10] usb 4-1: selecting invalid altsetting 1
[  675.600385][   T10] LME2510(C): Firmware Status: 00 00 00 00 00 00
[  675.600512][   T10] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22
[  675.608524][ T1609] usb 3-1: config 0 descriptor??
[  675.675255][T20180] XFS (loop4): Ending clean mount
[  675.676284][   T30] audit: type=1326 audit(2000000022.789:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.0.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171f98e929 code=0x7ffc0000
[  675.718014][   T10] usb 4-1: USB disconnect, device number 98
[  675.763937][   T30] audit: type=1326 audit(2000000022.849:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.0.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f171f98e929 code=0x7ffc0000
[  675.836221][   T30] audit: type=1326 audit(2000000022.849:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.0.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171f98e929 code=0x7ffc0000
[  675.867382][ T5842] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  675.875181][ T1609] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  675.900717][ T1609] usb 3-1: MIDIStreaming interface descriptor not found
[  675.927349][   T30] audit: type=1326 audit(2000000022.849:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.0.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171f98e929 code=0x7ffc0000
[  676.016988][ T1609] usb 3-1: USB disconnect, device number 100
[  676.305629][ T6139] udevd[6139]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  676.556472][T20329] loop1: detected capacity change from 0 to 1024
[  676.566544][T20329] EXT4-fs: Ignoring removed bh option
[  676.616507][T20329] EXT4-fs: inline encryption not supported
[  676.676074][T20329] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  676.752426][T20329] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  676.798452][T20343] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  676.843935][T20329] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.5650: lblock 2 mapped to illegal pblock 2 (length 1)
[  676.848197][T20344] No source specified
[  676.883941][T20345] loop5: detected capacity change from 0 to 1024
[  676.924783][T20329] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  676.977852][T20329] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.5650: lblock 0 mapped to illegal pblock 48 (length 1)
[  677.048937][T20329] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.5650: Failed to acquire dquot type 0
[  677.108581][T20329] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  677.173045][T20329] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.5650: mark_inode_dirty error
[  677.225589][T20329] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  677.273965][T13737] hfsplus: b-tree write err: -5, ino 4
[  677.291818][T20329] EXT4-fs (loop1): 1 orphan inode deleted
[  677.307792][   T12] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  677.334221][T20329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  677.405673][   T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0
[  677.474185][T20329] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm syz.1.5650: lblock 1 mapped to illegal pblock 1 (length 1)
[  677.774437][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  677.828658][ T5840] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  677.904918][ T5840] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  677.945343][ T5840] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  678.177613][  T876] usb 3-1: new full-speed USB device number 101 using dummy_hcd
[  678.375392][  T876] usb 3-1: config 0 has an invalid interface number: 30 but max is 0
[  678.393038][  T876] usb 3-1: config 0 has no interface number 0
[  678.433105][  T876] usb 3-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04
[  678.457868][T20423] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5677'.
[  678.487418][  T876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.517696][  T876] usb 3-1: Product: syz
[  678.521931][  T876] usb 3-1: Manufacturer: syz
[  678.560371][  T876] usb 3-1: SerialNumber: syz
[  678.597308][  T876] usb 3-1: config 0 descriptor??
[  678.654202][  T876] hub 3-1:0.30: bad descriptor, ignoring hub
[  678.675298][  T876] hub 3-1:0.30: probe with driver hub failed with error -5
[  678.703897][  T876] keyspan 3-1:0.30: Keyspan - (without firmware) converter detected
[  678.986547][T20460] netlink: 'syz.1.5686': attribute type 21 has an invalid length.
[  679.047998][  T876] usb 3-1: USB disconnect, device number 101
[  679.071691][  T876] keyspan 3-1:0.30: device disconnected
[  679.335920][T20482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5692'.
[  679.532804][T20481] loop1: detected capacity change from 0 to 4096
[  679.616932][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5697'.
[  680.530005][T20525] netlink: 942 bytes leftover after parsing attributes in process `syz.3.5708'.
[  681.309131][T20576] netlink: 'syz.1.5721': attribute type 32 has an invalid length.
[  681.342007][T20576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5721'.
[  681.417884][   T10] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  681.598689][   T10] usb 3-1: Using ep0 maxpacket: 32
[  681.629465][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  681.654792][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  681.705116][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  681.724701][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.740947][   T10] usb 3-1: config 0 descriptor??
[  681.783113][   T10] hub 3-1:0.0: USB hub found
[  681.930925][T20608] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  681.971586][   T10] hub 3-1:0.0: 26 ports detected
[  681.980585][T20608] batadv_slave_0: entered promiscuous mode
[  681.997679][   T10] hub 3-1:0.0: insufficient power available to use all downstream ports
[  682.064282][T20608] batman_adv: batadv0: Removing interface: batadv_slave_0
[  682.098693][T20608] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  682.117046][T20617] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  682.182969][   T10] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  682.201594][   T10] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  682.278801][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  682.285904][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  682.350319][   T10] usb 3-1: USB disconnect, device number 102
[  682.897828][T20654] loop4: detected capacity change from 0 to 256
[  683.008171][T20663] loop2: detected capacity change from 0 to 256
[  683.029800][T20663] exfat: Deprecated parameter 'namecase'
[  683.071512][T20663] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  683.566174][T20700] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (65535)
[  684.172654][T20725] loop2: detected capacity change from 0 to 2048
[  684.341359][T20725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  684.644447][T20739] loop5: detected capacity change from 0 to 4096
[  684.708803][T20739] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  684.781968][T20758] netlink: 'syz.2.5773': attribute type 1 has an invalid length.
[  684.810072][T20692] loop3: detected capacity change from 0 to 32768
[  684.863424][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  684.876142][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  684.884862][T20739] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  684.918934][T20692] (syz.3.5753,20692,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  684.945245][T20739] ntfs3(loop5): ino=19, mi_enum_attr
[  684.971848][T20692] (syz.3.5753,20692,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  685.037310][T20739] ntfs3(loop5): failed to convert "c46c" to euc-jp
[  685.057744][T20771] netlink: 'syz.0.5776': attribute type 7 has an invalid length.
[  685.087636][T20739] ntfs3(loop5): ino=20, mi_enum_attr
[  685.099183][T20692] JBD2: Ignoring recovery information on journal
[  685.127613][   T10] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  685.214216][T20692] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  685.224055][T20771] : entered promiscuous mode
[  685.278100][   T10] usb 5-1: Using ep0 maxpacket: 8
[  685.292684][   T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e
[  685.308924][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.339627][   T10] usb 5-1: Product: syz
[  685.343833][   T10] usb 5-1: Manufacturer: syz
[  685.367652][   T10] usb 5-1: SerialNumber: syz
[  685.425990][   T10] usb 5-1: config 0 descriptor??
[  685.449117][   T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e
[  685.700554][ T5843] ocfs2: Unmounting device (7,3) on (node local)
[  685.860938][   T10] gspca_sn9c20x: Write register 1001 failed -71
[  685.903113][   T10] gspca_sn9c20x: Device initialization failed
[  685.930292][   T10] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  685.983027][   T10] usb 5-1: USB disconnect, device number 104
[  686.116606][T20827] netlink: 'syz.2.5790': attribute type 2 has an invalid length.
[  686.232505][T20824] loop5: detected capacity change from 0 to 4096
[  686.281647][T20824] ntfs3(loop5): It is recommened to use chkdsk.
[  686.323531][T20824] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00
[  686.338854][T20824] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00
[  686.346772][T20824] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00
[  686.408264][T20824] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00
[  686.424523][T20824] ntfs3(loop5): try to read out of volume at offset 0x3fffffc1c00
[  686.462575][T20824] ntfs3(loop5): try to read out of volume at offset 0x3fffffc2c00
[  686.477762][T20824] ntfs3(loop5): try to read out of volume at offset 0x3fffffc4c00
[  686.506916][T20824] ntfs3(loop5): try to read out of volume at offset 0x3fffffc8c00
[  686.540876][T20824] ntfs3(loop5): try to read out of volume at offset 0x3fffffd0c00
[  687.002155][T20857] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5798'.
[  687.037743][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5798'.
[  687.226617][T20822] loop1: detected capacity change from 0 to 32768
[  687.330587][T20822] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  687.549829][T20822] XFS (loop1): Ending clean mount
[  687.581699][T20898] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5810'.
[  687.630176][T20822] XFS (loop1): Quotacheck needed: Please wait.
[  687.636600][T20898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5810'.
[  687.878967][T20822] XFS (loop1): Quotacheck: Done.
[  688.153927][T20927] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5817'.
[  688.216553][ T5840] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  688.262161][T20932] loop0: detected capacity change from 0 to 256
[  688.449239][T20932] FAT-fs (loop0): Directory bread(block 64) failed
[  688.455831][T20932] FAT-fs (loop0): Directory bread(block 65) failed
[  688.512190][T20932] FAT-fs (loop0): Directory bread(block 66) failed
[  688.512867][T20946] netlink: 'syz.5.5824': attribute type 3 has an invalid length.
[  688.558463][T20932] FAT-fs (loop0): Directory bread(block 67) failed
[  688.606934][T20932] FAT-fs (loop0): Directory bread(block 68) failed
[  688.655575][T20932] FAT-fs (loop0): Directory bread(block 69) failed
[  688.754612][T20932] FAT-fs (loop0): Directory bread(block 70) failed
[  688.803649][T20932] FAT-fs (loop0): Directory bread(block 71) failed
[  688.829273][T20932] FAT-fs (loop0): Directory bread(block 72) failed
[  688.835859][T20932] FAT-fs (loop0): Directory bread(block 73) failed
[  688.949026][T20960] loop1: detected capacity change from 0 to 512
[  689.044132][T20960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  689.062710][T20960] ext4 filesystem being mounted at /963/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  689.231237][T20973] loop4: detected capacity change from 0 to 1764
[  689.323566][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  689.323799][T20973] iso9660: Corrupted directory entry in block 2 of inode 1920
[  689.415507][T20986] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5835'.
[  689.467904][T20980] loop2: detected capacity change from 0 to 4096
[  689.538219][T20980] NILFS (loop2): invalid segment: Checksum error in segment payload
[  689.582022][T20980] NILFS (loop2): trying rollback from an earlier position
[  689.657091][T20980] NILFS (loop2): recovery complete
[  689.740087][T21006] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  689.796462][T21008] loop4: detected capacity change from 0 to 16
[  689.883055][T21008] erofs (device loop4): mounted with root inode @ nid 36.
[  689.973085][T21008] erofs (device loop4): readahead error at folio 2 @ nid 89
[  690.053982][T15423] erofs (device loop4): failed to decompress -5 in[4096, 0] out[8192]
[  690.068865][T21008] erofs (device loop4): failed to decompress -5 in[4096, 0] out[8192]
[  690.113602][T21023] loop1: detected capacity change from 0 to 1024
[  690.139263][T21008] erofs (device loop4): read error -117 @ 0 of nid 89
[  690.196751][T21030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5846'.
[  690.220675][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  690.220695][   T30] audit: type=1800 audit(2000000037.329:79): pid=21008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5839" name="file2" dev="loop4" ino=89 res=0 errno=0
[  690.327334][T21030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5846'.
[  690.393189][T21030] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5846'.
[  690.628982][T21052] bond0: option arp_interval: invalid value (18446744073072017407)
[  690.677757][T21052] bond0: option arp_interval: allowed values 0 - 2147483647
[  690.952609][T21072] netlink: 'syz.3.5857': attribute type 16 has an invalid length.
[  691.014869][T21072] netlink: 'syz.3.5857': attribute type 17 has an invalid length.
[  691.222038][T21082] CIFS: VFS: Malformed UNC in devname
[  692.032547][T21118] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5873'.
[  692.300687][T21134] netlink: 'syz.4.5879': attribute type 1 has an invalid length.
[  692.413736][T21145] netlink: 'syz.3.5881': attribute type 21 has an invalid length.
[  692.457994][T21145] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5881'.
[  692.572398][ T5976] usb 1-1: new full-speed USB device number 108 using dummy_hcd
[  692.695783][T21085] loop1: detected capacity change from 0 to 40427
[  692.723129][T21085] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  692.748362][T21085] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  692.788915][ T5976] usb 1-1: unable to get BOS descriptor or descriptor too short
[  692.801095][ T5976] usb 1-1: not running at top speed; connect to a high speed hub
[  692.833417][T21085] F2FS-fs (loop1): invalid crc value
[  692.840951][ T5976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  692.848091][T21166] usb usb7: usbfs: process 21166 (syz.5.5888) did not claim interface 0 before use
[  692.891421][ T5976] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  692.923275][ T5976] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  692.944007][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.987242][ T5976] usb 1-1: Product: syz
[  693.002315][ T5976] usb 1-1: Manufacturer: syz
[  693.006959][ T5976] usb 1-1: SerialNumber: syz
[  693.257488][T21182] overlayfs: missing 'lowerdir'
[  693.290316][T21085] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  693.316153][T21085] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  693.322062][ T5976] usb 1-1: 0:2 : does not exist
[  693.426641][ T5976] usb 1-1: USB disconnect, device number 108
[  693.580304][ T8115] udevd[8115]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  693.619379][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5898'.
[  693.932407][T21232] ÿ: renamed from vxcan1 (while UP)
[  693.970063][T21233] loop2: detected capacity change from 0 to 256
[  694.125377][T21233] FAT-fs (loop2): Directory bread(block 64) failed
[  694.157663][T21233] FAT-fs (loop2): Directory bread(block 65) failed
[  694.164342][T21233] FAT-fs (loop2): Directory bread(block 66) failed
[  694.237841][T21233] FAT-fs (loop2): Directory bread(block 67) failed
[  694.244508][T21233] FAT-fs (loop2): Directory bread(block 68) failed
[  694.305786][T21233] FAT-fs (loop2): Directory bread(block 69) failed
[  694.354375][T21233] FAT-fs (loop2): Directory bread(block 70) failed
[  694.380919][T21233] FAT-fs (loop2): Directory bread(block 71) failed
[  694.388694][T21233] FAT-fs (loop2): Directory bread(block 72) failed
[  694.395243][T21233] FAT-fs (loop2): Directory bread(block 73) failed
[  694.758018][ T5929] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  694.899262][T21279] loop1: detected capacity change from 0 to 1024
[  694.982173][ T5929] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  694.983568][T21279] hfsplus: bad catalog entry type
[  695.012380][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.048357][ T5929] usb 4-1: Product: syz
[  695.052616][ T5929] usb 4-1: Manufacturer: syz
[  695.080747][ T5929] usb 4-1: SerialNumber: syz
[  695.141668][ T5929] r8152-cfgselector 4-1: Unknown version 0x0000
[  695.161943][T21294] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  695.177777][ T5929] r8152-cfgselector 4-1: config 0 descriptor??
[  695.291573][T21301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5924'.
[  695.343879][T21301] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5924'.
[  695.357096][T21306] loop1: detected capacity change from 0 to 8
[  695.425181][T21301] netlink: 336 bytes leftover after parsing attributes in process `syz.0.5924'.
[  695.486418][T21306] SQUASHFS error: xz decompression failed, data probably corrupt
[  695.497795][T21301] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5924'.
[  695.526227][T21306] SQUASHFS error: Failed to read block 0xa8: -5
[  695.574594][T21306] SQUASHFS error: xz decompression failed, data probably corrupt
[  695.594096][T21306] SQUASHFS error: Failed to read block 0xa8: -5
[  695.609087][ T5976] r8152-cfgselector 4-1: USB disconnect, device number 99
[  695.622398][   T30] audit: type=1800 audit(2000000042.739:80): pid=21306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5926" name="file0" dev="loop1" ino=3 res=0 errno=0
[  695.697733][ T5916] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  695.841312][   T30] audit: type=1326 audit(2000000042.979:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69af8e929 code=0x7ffc0000
[  695.899832][   T30] audit: type=1326 audit(2000000042.979:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69af8e929 code=0x7ffc0000
[  695.917873][ T5916] usb 3-1: Using ep0 maxpacket: 32
[  695.963810][ T5916] usb 3-1: config 4 has an invalid interface number: 128 but max is 0
[  695.986323][ T5916] usb 3-1: config 4 has no interface number 0
[  696.012746][ T5916] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  696.018529][   T30] audit: type=1326 audit(2000000043.009:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fc69af8e929 code=0x7ffc0000
[  696.042746][ T5916] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  696.084798][ T5916] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  696.127684][   T30] audit: type=1326 audit(2000000043.009:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69af8e929 code=0x7ffc0000
[  696.131165][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.239453][ T5916] hub 3-1:4.128: USB hub found
[  696.247851][T21356] netlink: 'syz.4.5939': attribute type 1 has an invalid length.
[  696.272933][   T30] audit: type=1326 audit(2000000043.009:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.5.5932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69af8e929 code=0x7ffc0000
[  696.304958][T21356] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.5939'.
[  696.376294][T21361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  696.425608][ T5916] hub 3-1:4.128: 2 ports detected
[  696.456704][ T5916] hub 3-1:4.128: Using single TT (err -22)
[  696.567423][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5944'.
[  696.616472][ T5916] hub 3-1:4.128: hub_hub_status failed (err = -71)
[  696.635417][ T5916] hub 3-1:4.128: config failed, can't get hub status (err -71)
[  696.695456][ T5916] usb 3-1: USB disconnect, device number 103
[  696.929225][T21397] loop5: detected capacity change from 0 to 512
[  696.964916][T21397] EXT4-fs: Ignoring removed nomblk_io_submit option
[  697.015858][T21397] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.5.5950: corrupted xattr block 95: invalid header
[  697.043215][T21397] EXT4-fs (loop5): Remounting filesystem read-only
[  697.081552][T21397] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  697.177824][T21397] EXT4-fs (loop5): 1 orphan inode deleted
[  697.240093][T21397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  697.269821][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5956'.
[  697.297711][T21417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5956'.
[  697.323432][T21417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5956'.
[  697.405465][T21421] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  697.446366][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  697.454860][T21423] loop3: detected capacity change from 0 to 512
[  697.494044][T21423] EXT4-fs (loop3): orphan cleanup on readonly fs
[  697.518677][T21423] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  697.585900][T21435] loop0: detected capacity change from 0 to 256
[  697.597988][T21435] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  697.619673][T21423] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5958: invalid indirect mapped block 4278190080 (level 0)
[  697.633985][T21435] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  697.661844][T21423] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5958: invalid indirect mapped block 1 (level 1)
[  697.723233][T21435] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  697.795500][T21423] EXT4-fs (loop3): 1 truncate cleaned up
[  697.870812][T21423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  697.936075][T21423] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  698.132020][T21461] loop4: detected capacity change from 0 to 256
[  698.237423][T21467] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5969'.
[  698.299160][T21467] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5969'.
[  698.917451][T21495] netlink: 'syz.4.5973': attribute type 24 has an invalid length.
[  699.460086][T21525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5986'.
[  699.465601][T21523] loop1: detected capacity change from 0 to 65
[  699.507774][T21523] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  699.708217][T21536] netlink: 'syz.4.5990': attribute type 28 has an invalid length.
[  699.747682][T21536] netlink: 'syz.4.5990': attribute type 3 has an invalid length.
[  699.773467][T21536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5990'.
[  700.602990][T21580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  700.993475][T21600] netlink: 'syz.5.6009': attribute type 3 has an invalid length.
[  701.110623][T21604] loop2: detected capacity change from 0 to 2048
[  701.230411][T21612] loop3: detected capacity change from 0 to 16
[  701.263581][T21614] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  701.377690][T21604] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=0, inode=18374686479671623682, rec_len=65535, name_len=255
[  701.533897][T21604] Remounting filesystem read-only
[  701.552318][T21561] loop4: detected capacity change from 0 to 32768
[  701.584492][T21561] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  701.746283][T21561] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  701.832917][T21561] ocfs2: Unmounting device (7,4) on (node local)
[  702.245907][T21659] loop1: detected capacity change from 0 to 256
[  702.307676][ T5916] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  702.439240][T21664] sit1: entered promiscuous mode
[  702.444245][T21664] sit1: entered allmulticast mode
[  702.517804][ T5916] usb 3-1: Using ep0 maxpacket: 16
[  702.531929][ T5916] usb 3-1: config 4 has an invalid interface number: 51 but max is 0
[  702.558106][ T5916] usb 3-1: config 4 has no interface number 0
[  702.583606][T21599] loop0: detected capacity change from 0 to 32768
[  702.586176][ T5916] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  702.637847][ T5916] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  702.670370][ T5916] usb 3-1: config 4 interface 51 has no altsetting 0
[  702.696418][T21599] 
[  702.696418][T21599]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  702.696418][T21599] 
[  702.724181][ T5916] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  702.772847][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.825696][ T5916] usb 3-1: Product: syz
[  702.826329][T21599] 
[  702.826329][T21599]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  702.826329][T21599] 
[  702.847726][ T5916] usb 3-1: Manufacturer: syz
[  702.852358][ T5916] usb 3-1: SerialNumber: syz
[  702.894348][T21599] 
[  702.894348][T21599]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  702.894348][T21599] 
[  702.899717][T21643] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  702.937826][T21643] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  702.970541][T21599] 
[  702.970541][T21599]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  702.970541][T21599] 
[  703.007795][T21599] 
[  703.007795][T21599]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  703.007795][T21599] 
[  703.090526][T21599] 
[  703.090526][T21599]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  703.090526][T21599] 
[  703.186126][T21599] 
[  703.186126][T21599]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  703.186126][T21599] 
[  703.231731][T21643] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  703.246169][  T110] 
[  703.246169][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  703.246169][  T110] 
[  703.287818][T21643] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  703.361696][ T5916] cdc_eem 3-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.2-1, CDC EEM Device, 86:05:ca:99:6c:cc
[  703.446673][ T5847] 
[  703.446673][ T5847]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  703.446673][ T5847] 
[  703.532891][ T5847] 
[  703.532891][ T5847]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  703.532891][ T5847] 
[  703.600549][   T10] usb 3-1: USB disconnect, device number 104
[  703.658965][   T10] cdc_eem 3-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.2-1, CDC EEM Device
[  704.801416][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6058'.
[  704.847808][T21791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6058'.
[  704.954340][T21791] geneve2: entered promiscuous mode
[  704.989524][T21791] geneve2: entered allmulticast mode
[  705.051382][ T5937] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  705.272485][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  705.315781][ T5937] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  705.367633][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  705.411316][T21821] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.415539][ T5937] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  705.475103][ T5937] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  705.500213][T21821] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.517464][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.561193][ T5937] usb 2-1: config 0 descriptor??
[  705.768204][T21821] macsec0: left allmulticast mode
[  705.794806][ T5937] hdpvr 2-1:0.0: firmware version 0x0 dated 
[  705.810106][T21821] gretap1: left allmulticast mode
[  705.811239][ T5937] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[  705.846761][T21821] sit1: left allmulticast mode
[  705.999523][ T5937] hdpvr 2-1:0.0: device init failed
[  706.004876][ T5937] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  706.075589][ T5937] usb 2-1: USB disconnect, device number 93
[  706.297747][ T5976] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  706.410941][T21874] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6077'.
[  706.497747][ T5976] usb 3-1: Using ep0 maxpacket: 32
[  706.517174][ T5976] usb 3-1: unable to get BOS descriptor or descriptor too short
[  706.538821][T21824] loop4: detected capacity change from 0 to 32768
[  706.579497][ T5976] usb 3-1: string descriptor 0 read error: -22
[  706.615244][T21824] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6066 (21824)
[  706.628581][ T5976] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  706.673517][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.714789][T21824] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  706.767436][ T5976] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  706.783901][T21824] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  706.824113][T21824] BTRFS info (device loop4): using free-space-tree
[  707.018702][T21918] loop5: detected capacity change from 0 to 256
[  707.091125][T21918] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  707.273682][ T1609] usb 3-1: USB disconnect, device number 105
[  707.326607][ T8115] udevd[8115]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  707.427417][ T5842] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  707.809078][T21968] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma?
[  708.335050][T21989] loop0: detected capacity change from 0 to 512
[  708.427757][ T5976] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  708.511134][T21989] EXT4-fs (loop0): 1 orphan inode deleted
[  708.538811][   T49] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  708.601860][   T49] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[  708.624983][T21989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  708.656215][ T5976] usb 3-1: config 0 has an invalid interface number: 58 but max is 0
[  708.702827][ T5976] usb 3-1: config 0 has no interface number 0
[  708.711267][T21989] ext4 filesystem being mounted at /1071/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  708.732214][ T5976] usb 3-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  708.828127][ T5976] usb 3-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64
[  708.828711][T22018] xt_bpf: check failed: parse error
[  708.892109][ T5976] usb 3-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81
[  708.903030][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.949049][ T5976] usb 3-1: Product: syz
[  708.961744][ T5976] usb 3-1: Manufacturer: syz
[  708.986149][ T5976] usb 3-1: SerialNumber: syz
[  709.005091][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  709.059074][ T5976] usb 3-1: config 0 descriptor??
[  709.068123][T21984] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  709.111538][T22030] loop5: detected capacity change from 0 to 256
[  709.271479][T22043] loop0: detected capacity change from 0 to 256
[  709.328639][T22044] loop4: detected capacity change from 0 to 256
[  709.380530][ T5976] kaweth 3-1:0.58: Firmware present in device.
[  709.414694][T22044] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001)
[  709.468036][T22044] FAT-fs (loop4): Filesystem has been set read-only
[  709.506068][T22043] FAT-fs (loop0): Directory bread(block 64) failed
[  709.537949][ T5976] kaweth 3-1:0.58: Error reading configuration (-71), no net device created
[  709.547207][T22043] FAT-fs (loop0): Directory bread(block 65) failed
[  709.574266][ T5976] kaweth 3-1:0.58: probe with driver kaweth failed with error -5
[  709.591060][T22043] FAT-fs (loop0): Directory bread(block 66) failed
[  709.641345][T22043] FAT-fs (loop0): Directory bread(block 67) failed
[  709.658581][ T5976] usb 3-1: USB disconnect, device number 106
[  709.693115][T22043] FAT-fs (loop0): Directory bread(block 68) failed
[  709.717962][T22043] FAT-fs (loop0): Directory bread(block 69) failed
[  709.734090][T22062] netlink: 'syz.1.6113': attribute type 1 has an invalid length.
[  709.763335][T22043] FAT-fs (loop0): Directory bread(block 70) failed
[  709.797684][T22062] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6113'.
[  709.827140][T22043] FAT-fs (loop0): Directory bread(block 71) failed
[  709.857920][T22043] FAT-fs (loop0): Directory bread(block 72) failed
[  709.894509][T22072] loop5: detected capacity change from 0 to 256
[  709.901967][T22043] FAT-fs (loop0): Directory bread(block 73) failed
[  709.938754][T22072] exfat: Deprecated parameter 'utf8'
[  709.958577][T22072] exfat: Deprecated parameter 'utf8'
[  710.083071][T22072] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  710.485379][T22101] loop1: detected capacity change from 0 to 256
[  710.568480][ T5976] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  710.607699][   T10] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  710.670551][T22045] loop3: detected capacity change from 0 to 32768
[  710.715001][T22045] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6109 (22045)
[  710.757857][   T10] usb 5-1: Using ep0 maxpacket: 32
[  710.768663][ T5976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  710.797283][   T10] usb 5-1: config 4 has an invalid interface number: 128 but max is 0
[  710.808795][T22045] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  710.825531][   T10] usb 5-1: config 4 has no interface number 0
[  710.834423][ T5976] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[  710.839903][T22116] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  710.851740][T22045] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  710.869686][   T10] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  710.881322][ T5976] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  710.912394][   T10] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  710.922987][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.931329][T22045] BTRFS info (device loop3): using free-space-tree
[  710.957745][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  710.978373][ T5976] usb 3-1: config 0 descriptor??
[  710.997970][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.026563][ T1609] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  711.036263][   T10] hub 5-1:4.128: USB hub found
[  711.110467][   T74] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.220453][   T10] hub 5-1:4.128: 2 ports detected
[  711.227654][ T1609] usb 1-1: Using ep0 maxpacket: 8
[  711.239702][ T1609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  711.243222][   T10] hub 5-1:4.128: Using single TT (err -22)
[  711.268276][ T5843] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  711.276636][ T1609] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  711.327854][ T1609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  711.341633][   T74] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.364811][ T1609] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  711.384346][ T1609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.406335][ T5976] Bluetooth: Can't get version to change to load ram patch err
[  711.417269][ T1609] usb 1-1: Product: syz
[  711.425261][   T10] hub 5-1:4.128: hub_hub_status failed (err = -71)
[  711.437319][ T1609] usb 1-1: Manufacturer: syz
[  711.442488][ T1609] usb 1-1: SerialNumber: syz
[  711.457061][ T5976] Bluetooth: Loading patch file failed
[  711.467715][   T10] hub 5-1:4.128: config failed, can't get hub status (err -71)
[  711.468538][ T1609] usb 1-1: config 0 descriptor??
[  711.487836][ T5976] ath3k 3-1:0.0: probe with driver ath3k failed with error -71
[  711.537310][ T1609] radioshark 1-1:0.0: Invalid radioSHARK device
[  711.546363][ T5976] usb 3-1: USB disconnect, device number 107
[  711.553658][   T10] usb 5-1: USB disconnect, device number 105
[  711.589667][ T1609] radioshark 1-1:0.0: probe with driver radioshark failed with error -22
[  711.631487][   T74] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.717332][ T1609] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  711.748891][ T1609] usb 1-1: USB disconnect, device number 109
[  711.936659][   T74] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  711.977927][ T5929] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  712.163746][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  712.196389][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  712.240343][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  712.326944][ T5929] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  712.388028][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.461683][ T5929] usb 2-1: config 0 descriptor??
[  712.495689][ T5929] hub 2-1:0.0: USB hub found
[  712.568545][   T74] bridge_slave_1: left allmulticast mode
[  712.574652][   T74] bridge_slave_1: left promiscuous mode
[  712.636990][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.705003][ T5929] hub 2-1:0.0: 14 ports detected
[  712.743553][ T5929] hub 2-1:0.0: insufficient power available to use all downstream ports
[  712.826203][   T74] bridge_slave_0: left allmulticast mode
[  712.866156][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  712.876405][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  712.885606][   T74] bridge_slave_0: left promiscuous mode
[  712.891697][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  712.908412][ T5929] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  712.936849][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.964841][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  712.972121][ T5929] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  712.981562][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  713.070512][ T5929] usb 2-1: USB disconnect, device number 94
[  713.511825][  T876] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  713.695284][  T876] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  713.716953][  T876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.743427][  T876] usb 5-1: Product: syz
[  713.753533][  T876] usb 5-1: Manufacturer: syz
[  713.763948][  T876] usb 5-1: SerialNumber: syz
[  713.802322][  T876] usb 5-1: config 0 descriptor??
[  713.866992][T22270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6145'.
[  714.127006][T22277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6147'.
[  714.260466][  T876] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  714.279014][  T876] asix 5-1:0.0: probe with driver asix failed with error -71
[  714.315075][  T876] usb 5-1: USB disconnect, device number 106
[  714.323355][T22277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6147'.
[  714.622593][T22295] loop1: detected capacity change from 0 to 64
[  714.752003][   T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  714.841417][T22282] loop0: detected capacity change from 0 to 32768
[  714.859032][   T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  714.890653][   T74] bond0 (unregistering): Released all slaves
[  714.922061][T22282] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  714.963363][T22282] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  715.100229][T15423] Bluetooth: hci1: command tx timeout
[  715.154803][T22216] virt_wifi0 speed is unknown, defaulting to 1000
[  715.171167][T22216] lo speed is unknown, defaulting to 1000
[  715.302681][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  715.471652][T22347] dlm: Unknown command passed to DLM device : 11
[  715.471652][T22347] 
[  715.712154][T22355] loop2: detected capacity change from 0 to 128
[  715.773752][T22355] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  715.931474][T22355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  716.170657][T22384] loop1: detected capacity change from 0 to 128
[  716.247954][T22384] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  716.306925][T22384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  716.453971][T22392] loop4: detected capacity change from 0 to 4096
[  716.563990][T22392] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  716.649180][T22408] netlink: 'syz.3.6167': attribute type 10 has an invalid length.
[  716.836893][T22408] team0: Device hsr_slave_0 failed to register rx_handler
[  717.178018][T15423] Bluetooth: hci1: command tx timeout
[  717.222033][T22439] loop0: detected capacity change from 0 to 1764
[  717.635304][T22494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6178'.
[  717.845091][T22500] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  718.035416][T22555] netlink: 'syz.1.6185': attribute type 1 has an invalid length.
[  718.066291][T22555] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6185'.
[  718.170471][   T74] hsr_slave_0: left promiscuous mode
[  718.207823][   T74] hsr_slave_1: left promiscuous mode
[  718.236823][   T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  718.264413][   T74] batman_adv: batadv0: Removing interface: batadv_slave_0
[  718.338057][   T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  718.345986][   T74] batman_adv: batadv0: Removing interface: batadv_slave_1
[  718.604647][   T74] veth0_macvtap: left promiscuous mode
[  718.629633][   T74] veth1_vlan: left promiscuous mode
[  718.637310][T22589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6196'.
[  718.652883][   T74] veth0_vlan: left promiscuous mode
[  718.660720][T22592] netlink: 'syz.3.6195': attribute type 23 has an invalid length.
[  718.837805][ T5937] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  718.997830][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6202'.
[  719.037656][ T5937] usb 5-1: Using ep0 maxpacket: 32
[  719.087963][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  719.124502][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  719.165069][ T5937] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  719.218258][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.260971][T15423] Bluetooth: hci1: command tx timeout
[  719.278109][ T5937] usb 5-1: config 0 descriptor??
[  719.299983][ T5937] hub 5-1:0.0: USB hub found
[  719.505047][ T5937] hub 5-1:0.0: 1 port detected
[  719.710925][ T5937] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  719.731158][ T5937] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  719.753189][ T5937] usbhid 5-1:0.0: can't add hid device: -71
[  719.771131][ T5937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  719.798438][ T5937] usb 5-1: USB disconnect, device number 107
[  719.831927][T22650] loop3: detected capacity change from 0 to 256
[  719.840205][T22650] exfat: Deprecated parameter 'namecase'
[  719.899990][T22650] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  720.558263][   T74] team0 (unregistering): Port device team_slave_1 removed
[  720.701113][   T74] team0 (unregistering): Port device team_slave_0 removed
[  721.338165][T15423] Bluetooth: hci1: command tx timeout
[  721.514733][T22706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6228'.
[  721.569220][T22216] chnl_net:caif_netlink_parms(): no params data found
[  721.836850][T22733] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6232'.
[  722.138678][T22762] vivid-000: disconnect
[  722.228296][T22755] vivid-000: reconnect
[  722.460177][T22216] bridge0: port 1(bridge_slave_0) entered blocking state
[  722.487678][ T1609] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  722.512999][T22216] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.532859][T22216] bridge_slave_0: entered allmulticast mode
[  722.597757][T22216] bridge_slave_0: entered promiscuous mode
[  722.646306][T22216] bridge0: port 2(bridge_slave_1) entered blocking state
[  722.685276][ T1609] usb 3-1: Using ep0 maxpacket: 32
[  722.690597][T22216] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.720990][T22216] bridge_slave_1: entered allmulticast mode
[  722.727727][ T1609] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  722.735636][T22216] bridge_slave_1: entered promiscuous mode
[  722.777096][ T1609] usb 3-1: config 0 has no interface number 0
[  722.802178][T22819] misc userio: No port type given on /dev/userio
[  722.815844][ T1609] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  722.872864][ T1609] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  722.931549][ T1609] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  722.948271][ T1609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.982747][ T1609] usb 3-1: Product: syz
[  722.986931][ T1609] usb 3-1: Manufacturer: syz
[  723.017658][ T1609] usb 3-1: SerialNumber: syz
[  723.056399][T22216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  723.085412][ T1609] usb 3-1: config 0 descriptor??
[  723.122034][ T1609] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  723.146150][T22859] loop4: detected capacity change from 0 to 512
[  723.162413][T22216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  723.280263][T22859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  723.330181][ T1609] usb 3-1: qt2_setup_urbs - submit read urb failed -90
[  723.337356][ T1609] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90
[  723.387462][T22859] ext4 filesystem being mounted at /1039/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  723.452397][T22889] netlink: 'syz.3.6250': attribute type 1 has an invalid length.
[  723.494214][T22889] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6250'.
[  723.523727][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  723.547959][ T5937] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  723.566154][T22216] team0: Port device team_slave_0 added
[  723.596961][   T10] usb 3-1: USB disconnect, device number 108
[  723.653014][T22216] team0: Port device team_slave_1 added
[  723.727663][ T5937] usb 1-1: Using ep0 maxpacket: 8
[  723.751810][ T5937] usb 1-1: config 0 has an invalid interface number: 58 but max is 0
[  723.760999][ T5937] usb 1-1: config 0 has no interface number 0
[  723.815538][T22927] loop1: detected capacity change from 0 to 1764
[  723.819688][ T5937] usb 1-1: config 0 interface 58 altsetting 0 endpoint 0x6 has invalid maxpacket 56166, setting to 64
[  723.860167][ T5937] usb 1-1: config 0 interface 58 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  723.908500][ T5937] usb 1-1: config 0 interface 58 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  723.935532][ T5937] usb 1-1: config 0 interface 58 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  723.947096][T22946] loop4: detected capacity change from 0 to 8
[  723.979405][T22946] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  724.000487][ T6141] udevd[6141]: incorrect cramfs checksum on /dev/loop4
[  724.008638][ T5937] usb 1-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=5c.24
[  724.018117][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.052382][ T5937] usb 1-1: Product: syz
[  724.070569][ T5937] usb 1-1: Manufacturer: syz
[  724.084096][ T5937] usb 1-1: SerialNumber: syz
[  724.084885][T22216] batman_adv: batadv0: Adding interface: batadv_slave_0
[  724.111673][ T6141] udevd[6141]: incorrect cramfs checksum on /dev/loop4
[  724.115839][ T5937] usb 1-1: config 0 descriptor??
[  724.124036][T22216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  724.191302][T22216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  724.258665][T22216] batman_adv: batadv0: Adding interface: batadv_slave_1
[  724.286770][T22216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  724.369311][T22216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  724.409989][ T5937] appletouch 1-1:0.58: Could not find int-in endpoint
[  724.416822][ T5937] appletouch 1-1:0.58: probe with driver appletouch failed with error -5
[  724.455552][T22977] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6257'.
[  724.459078][ T5937] usbhid 1-1:0.58: couldn't find an input interrupt endpoint
[  724.567228][ T5937] usb 1-1: USB disconnect, device number 110
[  724.699675][T22216] hsr_slave_0: entered promiscuous mode
[  724.706367][T22216] hsr_slave_1: entered promiscuous mode
[  724.761710][T23023] netlink: 'syz.2.6260': attribute type 3 has an invalid length.
[  724.800011][T22948] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  725.691683][T23113] netlink: 'syz.2.6270': attribute type 1 has an invalid length.
[  725.753174][T23113] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6270'.
[  725.825013][T22983] loop1: detected capacity change from 0 to 32768
[  725.876779][T22983] 
[  725.876779][T22983]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  725.876779][T22983] 
[  726.235567][T22216] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  726.273882][ T5840] 
[  726.273882][ T5840]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  726.273882][ T5840] 
[  726.313030][ T5840] 
[  726.313030][ T5840]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  726.313030][ T5840] 
[  726.359028][T22216] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  726.460078][T22216] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  726.524935][T22216] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  726.816318][T23180] loop1: detected capacity change from 0 to 64
[  726.827788][T23176] binder: 23173:23176 ioctl c018620b 0 returned -14
[  727.081734][T23055] loop3: detected capacity change from 0 to 40427
[  727.124627][T23055] F2FS-fs (loop3): Invalid segment count (1)
[  727.138591][T23055] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  727.164543][T23055] F2FS-fs (loop3): Unrecognized mount option "backgr	" or missing value
[  727.283327][T22216] 8021q: adding VLAN 0 to HW filter on device bond0
[  727.418866][T22216] 8021q: adding VLAN 0 to HW filter on device team0
[  727.533589][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.542051][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  727.649037][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.656241][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state
[  728.513041][T23262] usb usb8: usbfs: process 23262 (syz.2.6302) did not claim interface 0 before use
[  728.621441][T23268] netlink: 'syz.4.6304': attribute type 3 has an invalid length.
[  728.932480][T22216] 8021q: adding VLAN 0 to HW filter on device batadv0
[  729.550127][T23305] loop0: detected capacity change from 0 to 512
[  729.565903][T23309] loop3: detected capacity change from 0 to 256
[  729.718518][T23305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  729.748811][T23309] FAT-fs (loop3): Directory bread(block 64) failed
[  729.778184][T23309] FAT-fs (loop3): Directory bread(block 65) failed
[  729.817842][T23309] FAT-fs (loop3): Directory bread(block 66) failed
[  729.824432][T23309] FAT-fs (loop3): Directory bread(block 67) failed
[  729.838223][T23305] ext4 filesystem being mounted at /1108/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  729.918042][T23309] FAT-fs (loop3): Directory bread(block 68) failed
[  729.959111][T23309] FAT-fs (loop3): Directory bread(block 69) failed
[  729.994433][T23309] FAT-fs (loop3): Directory bread(block 70) failed
[  730.040105][T23309] FAT-fs (loop3): Directory bread(block 71) failed
[  730.082698][T23309] FAT-fs (loop3): Directory bread(block 72) failed
[  730.103416][T23309] FAT-fs (loop3): Directory bread(block 73) failed
[  730.118865][T23254] loop1: detected capacity change from 0 to 32768
[  730.229286][T23341] loop2: detected capacity change from 0 to 8
[  730.240248][T23254] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  730.289412][T23327] "syz.4.6318" (23327) uses obsolete ecb(arc4) skcipher
[  730.390616][T23341] SQUASHFS error: Failed to read block 0x2fc: -5
[  730.400974][T23254] XFS (loop1): Ending clean mount
[  730.457764][T23341] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  730.491237][T23341] SQUASHFS error: Unable to read directory block [247:26]
[  730.596136][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  730.614759][T22216] veth0_vlan: entered promiscuous mode
[  730.683924][T22216] veth1_vlan: entered promiscuous mode
[  730.726985][ T5840] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  730.789660][T22216] veth0_macvtap: entered promiscuous mode
[  730.810692][T22216] veth1_macvtap: entered promiscuous mode
[  731.012073][T22216] batman_adv: batadv0: Interface activated: batadv_slave_0
[  731.095766][T22216] batman_adv: batadv0: Interface activated: batadv_slave_1
[  731.196443][T22216] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  731.248146][T22216] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  731.256914][T22216] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  731.337738][T22216] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  731.780844][  T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  731.828363][  T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.999097][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  732.038159][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  732.098205][T23423] loop2: detected capacity change from 0 to 256
[  732.517269][T23440] loop2: detected capacity change from 0 to 64
[  732.614181][T23363] loop4: detected capacity change from 0 to 32768
[  732.784150][T23363] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  732.987169][T23363] XFS (loop4): Ending clean mount
[  733.358355][ T5842] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  734.002458][T23522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6356'.
[  734.079720][T23522] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  734.547417][   T30] audit: type=1400 audit(2000000081.669:86): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=23548 comm="syz.4.6365"
[  735.447706][  T876] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  735.656235][  T876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  735.704087][  T876] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  735.757713][  T876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  735.785694][  T876] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  735.815398][T23617] loop0: detected capacity change from 0 to 2048
[  735.861932][  T876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.903323][  T876] usb 5-1: config 0 descriptor??
[  735.941513][T23632] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  735.960166][  T876] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  735.975355][T23627] loop6: detected capacity change from 0 to 1024
[  736.068927][T23627] EXT4-fs: Ignoring removed nomblk_io_submit option
[  736.130794][T23627] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  736.142592][  T876] usb 5-1: USB disconnect, device number 108
[  736.230354][T23627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  736.354445][T23627] System zones: 0-1, 3-36
[  736.431863][T23627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  736.809040][T22216] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  736.961588][T23688] loop0: detected capacity change from 0 to 256
[  737.938961][T23751] loop4: detected capacity change from 0 to 16
[  737.998108][T23751] erofs (device loop4): mounted with root inode @ nid 36.
[  738.465870][T23782] overlayfs: missing 'lowerdir'
[  738.472076][T23780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6427'.
[  738.527688][  T876] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  738.654022][T23789] process 'syz.0.6430' launched './file0' with NULL argv: empty string added
[  738.738124][  T876] usb 3-1: Using ep0 maxpacket: 32
[  738.758904][  T876] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  738.793668][  T876] usb 3-1: config 0 has no interface number 0
[  738.823639][  T876] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  738.866927][T23801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6434'.
[  738.877052][  T876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.903559][  T876] usb 3-1: Product: syz
[  738.945548][  T876] usb 3-1: Manufacturer: syz
[  738.966573][  T876] usb 3-1: SerialNumber: syz
[  739.018232][  T876] usb 3-1: config 0 descriptor??
[  739.040028][  T876] radio-si470x 3-1:0.35: could not find interrupt in endpoint
[  739.083021][  T876] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5
[  739.216833][T23819] libceph: resolve '4' (ret=-3): failed
[  739.238100][  T876] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  739.245770][  T876] usbhid 3-1:0.35: couldn't find an input interrupt endpoint
[  739.434442][T23833] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6443'.
[  739.487308][ T1609] usb 3-1: USB disconnect, device number 109
[  740.228155][T23880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  740.299621][T23883] usb usb8: usbfs: process 23883 (syz.4.6456) did not claim interface 0 before use
[  740.668239][T23909] tmpfs: Bad value for 'mpol'
[  740.907789][  T876] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  740.986797][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6470'.
[  741.089069][  T876] usb 1-1: Using ep0 maxpacket: 16
[  741.132848][  T876] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  741.163847][  T876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.207858][  T876] usb 1-1: Product: syz
[  741.212091][  T876] usb 1-1: Manufacturer: syz
[  741.227415][  T876] usb 1-1: SerialNumber: syz
[  741.248534][T23943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6474'.
[  741.293542][  T876] r8152-cfgselector 1-1: Unknown version 0x0000
[  741.333510][  T876] r8152-cfgselector 1-1: config 0 descriptor??
[  741.456628][T23954] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6477'.
[  741.494034][T23941] loop1: detected capacity change from 0 to 8192
[  741.579669][T23941] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  741.685506][T23967] loop6: detected capacity change from 0 to 16
[  741.764330][T23967] erofs (device loop6): mounted with root inode @ nid 36.
[  741.796543][  T876] r8152-cfgselector 1-1: USB disconnect, device number 111
[  742.093523][T23997] loop3: detected capacity change from 0 to 512
[  742.124527][T23997] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  742.183148][T24004] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6488'.
[  742.193309][T24004] netlink: 'syz.6.6488': attribute type 1 has an invalid length.
[  742.207727][   T10] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  742.245487][T23997] EXT4-fs (loop3): 1 truncate cleaned up
[  742.293958][T23997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  742.429065][   T10] usb 5-1: Using ep0 maxpacket: 32
[  742.486671][   T10] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  742.515570][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.540245][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  742.565447][   T10] usb 5-1: config 0 descriptor??
[  742.600090][T24024] loop0: detected capacity change from 0 to 1024
[  742.616364][   T10] gspca_main: sq930x-2.14.0 probing 041e:403c
[  742.681887][T24032] sctp: [Deprecated]: syz.1.6495 (pid 24032) Use of struct sctp_assoc_value in delayed_ack socket option.
[  742.681887][T24032] Use struct sctp_sack_info instead
[  742.764727][T24024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  742.868156][T24046] netlink: 'syz.6.6498': attribute type 1 has an invalid length.
[  742.946458][T24024] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.6493: missing EA_INODE flag
[  743.039341][   T10] gspca_sq930x: ucbus_write failed -71
[  743.044936][   T10] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  743.073928][T24024] EXT4-fs (loop0): Remounting filesystem read-only
[  743.087869][   T10] usb 5-1: USB disconnect, device number 109
[  743.176851][T24058] loop2: detected capacity change from 0 to 764
[  743.314770][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  743.676260][T24096] loop1: detected capacity change from 0 to 1024
[  743.898846][   T30] audit: type=1326 audit(2000000091.029:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24110 comm="syz.3.6514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faef358e929 code=0x0
[  744.058005][   T10] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  744.168835][T24131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6517'.
[  744.285728][   T10] usb 1-1: Using ep0 maxpacket: 8
[  744.325459][   T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  744.342686][T24140] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6520'.
[  744.344699][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.388928][   T10] usb 1-1: config 0 descriptor??
[  744.607484][   T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  744.809580][   T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  744.873093][   T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  744.940494][   T10] asix 1-1:0.0: probe with driver asix failed with error -71
[  744.999611][   T10] usb 1-1: USB disconnect, device number 112
[  745.510126][T24203] loop1: detected capacity change from 0 to 128
[  745.759023][T24144] loop4: detected capacity change from 0 to 32768
[  745.927862][T24144] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  746.086592][T24343] netlink: 'syz.0.6544': attribute type 1 has an invalid length.
[  746.105444][T24144] XFS (loop4): Ending clean mount
[  746.124932][T24144] XFS (loop4): Quotacheck needed: Please wait.
[  746.201939][T24363] loop6: detected capacity change from 0 to 47
[  746.275952][T24144] XFS (loop4): Quotacheck: Done.
[  746.302203][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  746.308917][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  746.615562][ T5842] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  747.197170][T24469] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6557'.
[  747.302008][T24474] loop1: detected capacity change from 0 to 1024
[  747.449202][T24474] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  747.456211][T24474] hfsplus: xattr searching failed
[  747.631656][T24489] netlink: 'syz.2.6563': attribute type 1 has an invalid length.
[  747.693069][T24489] netlink: 'syz.2.6563': attribute type 2 has an invalid length.
[  747.873771][T24503] QAT: Device 7 not found
[  748.517831][ T1609] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  748.744759][ T1609] usb 5-1: config 1 has an invalid interface number: 60 but max is 0
[  748.758553][ T1609] usb 5-1: config 1 has no interface number 0
[  748.787704][ T1609] usb 5-1: config 1 interface 60 has no altsetting 0
[  748.839992][ T1609] usb 5-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=40.32
[  748.867706][ T1609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.905829][ T1609] usb 5-1: Product: syz
[  748.947693][ T1609] usb 5-1: Manufacturer: syz
[  748.952355][ T1609] usb 5-1: SerialNumber: syz
[  749.265223][ T1609] usb 5-1: USB disconnect, device number 110
[  750.176355][T24647] loop4: detected capacity change from 0 to 1024
[  750.344121][T24660] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6610'.
[  750.429248][T24660] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  750.457174][T24668] netlink: 'syz.6.6613': attribute type 21 has an invalid length.
[  750.490683][T24668] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6613'.
[  750.502032][   T36] hfsplus: b-tree write err: -5, ino 8
[  750.547012][T24668] netlink: 'syz.6.6613': attribute type 4 has an invalid length.
[  750.597962][T24668] netlink: 'syz.6.6613': attribute type 3 has an invalid length.
[  750.626344][T24668] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6613'.
[  750.671002][T24681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6616'.
[  750.737856][T24681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6616'.
[  751.362874][T24701] loop0: detected capacity change from 0 to 4096
[  751.403193][T24701] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  751.678925][T24701] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  751.907784][   T49] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  751.915654][ T5847] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  751.915701][ T5847] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  751.915729][ T5847] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  751.920513][   T74] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  752.325706][T24753] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6637'.
[  752.325744][T24753] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6637'.
[  752.621803][T24768] netlink: 'syz.6.6641': attribute type 1 has an invalid length.
[  752.668151][T24768] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.6641'.
[  752.791054][T24692] loop3: detected capacity change from 0 to 32768
[  752.930183][T24692] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  753.191739][T24692] XFS (loop3): Ending clean mount
[  753.214830][T24692] XFS (loop3): Quotacheck needed: Please wait.
[  753.456603][T24692] XFS (loop3): Quotacheck: Done.
[  753.687845][ T5916] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  753.831130][ T5843] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  753.893138][T24844] netlink: 'syz.1.6659': attribute type 5 has an invalid length.
[  753.911769][ T5916] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  753.924059][ T5916] usb 7-1: config 0 has no interface number 0
[  753.932691][ T5916] usb 7-1: config 0 interface 41 has no altsetting 0
[  753.973849][ T5916] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  753.985553][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.027163][ T5916] usb 7-1: Product: syz
[  754.068123][ T5916] usb 7-1: Manufacturer: syz
[  754.072827][ T5916] usb 7-1: SerialNumber: syz
[  754.129358][ T5916] usb 7-1: config 0 descriptor??
[  754.369869][   T30] audit: type=1326 audit(2000000101.509:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24865 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f01f8e929 code=0x7ffc0000
[  754.479949][   T30] audit: type=1326 audit(2000000101.509:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24865 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f01f8e929 code=0x7ffc0000
[  754.502294][    C1] vkms_vblank_simulate: vblank timer overrun
[  754.608014][ T5916] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  754.645568][   T30] audit: type=1326 audit(2000000101.509:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24865 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f6f01f8e929 code=0x7ffc0000
[  754.675731][ T5916] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71
[  754.765355][ T5916] usb 7-1: USB disconnect, device number 2
[  754.778033][   T30] audit: type=1326 audit(2000000101.529:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24865 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f01f8e929 code=0x7ffc0000
[  754.866633][T24887] netlink: 'syz.4.6670': attribute type 1 has an invalid length.
[  754.882495][   T30] audit: type=1326 audit(2000000101.529:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24865 comm="syz.2.6665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f01f8e929 code=0x7ffc0000
[  755.015156][T24891] loop3: detected capacity change from 0 to 2048
[  755.182117][T24909] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  755.365157][T24891] NILFS (loop3): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3)
[  755.412843][T24891] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=13)
[  755.548484][T24924] C: renamed from team_slave_0 (while UP)
[  755.555278][T24891] Remounting filesystem read-only
[  755.580495][T24924] netlink: 'syz.6.6678': attribute type 1 has an invalid length.
[  755.607706][T24924] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6678'.
[  755.617996][T24891] NILFS (loop3): error -5 truncating bmap (ino=13)
[  755.619701][T24926] netlink: 'syz.4.6679': attribute type 1 has an invalid length.
[  755.668930][T24924] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  755.820002][ T5843] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  756.217997][  T876] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  756.468832][  T876] usb 7-1: config 0 has an invalid interface number: 120 but max is 0
[  756.477129][  T876] usb 7-1: config 0 has no interface number 0
[  756.505254][  T876] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  756.543060][  T876] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  756.599976][  T876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.653200][  T876] usb 7-1: config 0 descriptor??
[  756.763117][  T876] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input49
[  757.063743][T25008] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6700'.
[  757.077403][ T5976] usb 7-1: USB disconnect, device number 3
[  757.401105][T25035] loop0: detected capacity change from 0 to 1024
[  758.153121][T25073] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6715'.
[  758.243197][T25080] loop6: detected capacity change from 0 to 256
[  758.288057][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6719'.
[  758.431169][T25080] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  758.576559][T25099] xt_recent: Unsupported userspace flags (000000de)
[  759.294760][T25142] xt_CT: You must specify a L4 protocol and not use inversions on it
[  759.754795][T25164] loop4: detected capacity change from 0 to 16
[  759.984182][T25164] erofs (device loop4): mounted with root inode @ nid 36.
[  760.109286][T25164] syz.4.6740: attempt to access beyond end of device
[  760.109286][T25164] loop4: rw=0, sector=103079215104, nr_sectors = 8 limit=16
[  760.522130][T25120] loop1: detected capacity change from 0 to 32768
[  761.012455][T25217] loop2: detected capacity change from 0 to 256
[  761.137474][T25217] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  761.518536][ T5929] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  761.658381][ T1609] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  761.722012][ T5929] usb 7-1: Using ep0 maxpacket: 16
[  761.752044][ T5929] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  761.762788][T25182] loop3: detected capacity change from 0 to 32768
[  761.792230][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.816043][T25182] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6747 (25182)
[  761.834853][ T5929] usb 7-1: Product: syz
[  761.839454][ T1609] usb 2-1: Using ep0 maxpacket: 32
[  761.866001][ T1609] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  761.887743][ T5929] usb 7-1: Manufacturer: syz
[  761.913589][ T5929] usb 7-1: SerialNumber: syz
[  761.950346][ T1609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  761.955104][T25182] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  761.995600][ T5929] r8152-cfgselector 7-1: Unknown version 0x0000
[  762.023024][ T5929] r8152-cfgselector 7-1: config 0 descriptor??
[  762.029568][ T1609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  762.061322][T25182] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  762.117518][ T1609] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  762.129543][T25182] BTRFS info (device loop3): using free-space-tree
[  762.168103][ T1609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.213493][ T1609] usb 2-1: config 0 descriptor??
[  762.228943][T25244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  762.259763][ T1609] hub 2-1:0.0: USB hub found
[  762.424675][T25296] loop2: detected capacity change from 0 to 512
[  762.456353][ T1609] hub 2-1:0.0: config failed, hub has too many ports! (err -19)
[  762.478140][T25182] BTRFS info (device loop3): rebuilding free space tree
[  762.539225][ T5916] r8152-cfgselector 7-1: USB disconnect, device number 4
[  762.566950][T25296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  762.682193][ T1609] usbhid 2-1:0.0: can't add hid device: -71
[  762.688428][T25296] ext4 filesystem being mounted at /1131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  762.718208][ T1609] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  762.755158][T25296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  762.788384][ T1609] usb 2-1: USB disconnect, device number 95
[  762.875578][T25324] loop0: detected capacity change from 0 to 256
[  763.020446][T25324] FAT-fs (loop0): Directory bread(block 64) failed
[  763.061124][T25324] FAT-fs (loop0): Directory bread(block 65) failed
[  763.098107][T25324] FAT-fs (loop0): Directory bread(block 66) failed
[  763.127007][T25324] FAT-fs (loop0): Directory bread(block 67) failed
[  763.213055][T25324] FAT-fs (loop0): Directory bread(block 68) failed
[  763.253456][T25324] FAT-fs (loop0): Directory bread(block 69) failed
[  763.303336][T25324] FAT-fs (loop0): Directory bread(block 70) failed
[  763.354938][T25324] FAT-fs (loop0): Directory bread(block 71) failed
[  763.407877][T25324] FAT-fs (loop0): Directory bread(block 72) failed
[  763.415963][T25324] FAT-fs (loop0): Directory bread(block 73) failed
[  763.475803][ T5843] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  763.972916][T25363] netlink: 'syz.4.6778': attribute type 10 has an invalid length.
[  764.022979][T25363] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6778'.
[  764.032431][T25367] nftables ruleset with unbound chain
[  764.109223][T25370] loop2: detected capacity change from 0 to 1024
[  764.358145][T25370] syz.2.6781: attempt to access beyond end of device
[  764.358145][T25370] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  764.453309][T25370] Buffer I/O error on dev loop2, logical block 100663296, async page read
[  764.497925][T25370] hfsplus: unable to mark blocks free: error -5
[  764.522917][T25370] hfsplus: can't free extent
[  764.638229][T25396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6787'.
[  765.436160][T25424] netlink: zone id is out of range
[  765.461930][T25424] netlink: zone id is out of range
[  765.498058][T25424] netlink: zone id is out of range
[  765.538027][T25424] netlink: zone id is out of range
[  765.567903][T25424] netlink: zone id is out of range
[  765.637879][T25424] netlink: zone id is out of range
[  765.653255][T25424] netlink: zone id is out of range
[  765.670230][T25432] loop1: detected capacity change from 0 to 1024
[  765.682053][T25424] netlink: zone id is out of range
[  765.748791][T25424] netlink: zone id is out of range
[  765.802999][T25424] netlink: zone id is out of range
[  766.224887][T25461] loop6: detected capacity change from 0 to 2048
[  766.309557][ T1609] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  766.335996][T25471] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  766.367922][T25461] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12
[  766.381176][T25470] loop2: detected capacity change from 0 to 256
[  766.420066][T25461] Remounting filesystem read-only
[  766.479481][ T1609] usb 4-1: Using ep0 maxpacket: 16
[  766.491671][ T1609] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  766.527886][ T1609] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  766.577697][ T1609] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  766.647747][ T1609] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  766.687380][ T1609] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  766.754293][T25487] loop4: detected capacity change from 0 to 512
[  766.801173][ T1609] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  766.820411][T25487] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  766.867822][ T1609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  766.905672][T25487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  766.907842][ T1609] usb 4-1: SerialNumber: syz
[  766.959363][T25487] EXT4-fs (loop4): orphan cleanup on readonly fs
[  767.003049][T25451] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  767.010352][T25487] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.6811: bad orphan inode 267
[  767.062205][ T1609] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  767.086850][T25487] EXT4-fs (loop4): Remounting filesystem read-only
[  767.132232][T25487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  767.137062][ T1609] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12
[  767.289312][T25487] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.6811: dx entry: limit 0 != root limit 125
[  767.378234][ T1609] usb 4-1: USB disconnect, device number 100
[  767.469265][T25487] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6811: Corrupt directory, running e2fsck is recommended
[  767.731149][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  768.577197][T25595] netlink: 'syz.3.6836': attribute type 21 has an invalid length.
[  768.639478][T25595] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6836'.
[  769.513148][T25556] loop6: detected capacity change from 0 to 32768
[  769.758659][T25655] IPVS: length: 4096 != 8
[  769.884134][T25663] netlink: 'syz.4.6857': attribute type 10 has an invalid length.
[  769.958551][T25666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6856'.
[  770.033504][T25663] team0: Device ipvlan1 failed to register rx_handler
[  770.458359][T25692] net_ratelimit: 6 callbacks suppressed
[  770.458383][T25692] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  770.741952][T25710] loop6: detected capacity change from 0 to 256
[  770.918974][T25710] FAT-fs (loop6): Directory bread(block 64) failed
[  770.947809][T25710] FAT-fs (loop6): Directory bread(block 65) failed
[  770.954501][T25710] FAT-fs (loop6): Directory bread(block 66) failed
[  771.015411][T25710] FAT-fs (loop6): Directory bread(block 67) failed
[  771.076913][T25710] FAT-fs (loop6): Directory bread(block 68) failed
[  771.122376][T25710] FAT-fs (loop6): Directory bread(block 69) failed
[  771.139231][T25710] FAT-fs (loop6): Directory bread(block 70) failed
[  771.145816][T25710] FAT-fs (loop6): Directory bread(block 71) failed
[  771.172924][T25710] FAT-fs (loop6): Directory bread(block 72) failed
[  771.236057][T25710] FAT-fs (loop6): Directory bread(block 73) failed
[  771.788089][T25763] raw_sendmsg: syz.1.6889 forgot to set AF_INET. Fix it!
[  772.094018][T25778] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  772.127239][T25780] loop2: detected capacity change from 0 to 2048
[  772.186089][T25786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6898'.
[  772.201970][T25780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  772.205973][T25778] overlayfs: missing 'lowerdir'
[  772.288324][   T30] audit: type=1800 audit(2000000119.429:93): pid=25780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6895" name="bus" dev="loop2" ino=1367 res=0 errno=0
[  773.009930][T25826] loop3: detected capacity change from 0 to 8
[  773.108948][T25826] SQUASHFS error: Failed to read block 0x71: -5
[  773.474398][  T876] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  773.633557][T25793] loop4: detected capacity change from 0 to 32768
[  773.667118][  T876] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  773.688270][  T876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  773.717219][  T876] usb 1-1: config 0 has no interface number 0
[  773.728523][  T876] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  773.746021][  T876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.781934][  T876] usb 1-1: Product: syz
[  773.786371][  T876] usb 1-1: Manufacturer: syz
[  773.793311][  T876] usb 1-1: SerialNumber: syz
[  773.802793][  T876] usb 1-1: config 0 descriptor??
[  773.845311][T25793] syz.4.6899: attempt to access beyond end of device
[  773.845311][T25793] loop4: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  773.896161][T25811] loop2: detected capacity change from 0 to 32768
[  773.904925][T25793] metapage_write_end_io: I/O error
[  773.909166][T25861] 8021q: adding VLAN 0 to HW filter on device bond3
[  773.912422][T25793] ERROR: (device loop4): release_metapage: metapage_write_one() failed
[  773.912422][T25793] 
[  773.945473][T25793] ERROR: (device loop4): remounting filesystem as read-only
[  773.960551][T25811] 
[  773.960551][T25811]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  773.960551][T25811] 
[  773.987505][T25793] ERROR: (device loop4): diWrite: ixpxd invalid
[  773.987505][T25793] 
[  774.011676][T25793] ERROR: (device loop4): txCommit: 
[  774.011676][T25793] 
[  774.039103][T25811] 
[  774.039103][T25811]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  774.039103][T25811] 
[  774.047803][ T5958] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  774.072895][T25793] blkno = 8f7c0, nblocks = 1
[  774.083632][T25793] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  774.083632][T25793] 
[  774.096582][T25811] 
[  774.096582][T25811]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  774.096582][T25811] 
[  774.119902][T25793] ERROR: (device loop4): dbAllocNext: Corrupt dmap page
[  774.119902][T25793] 
[  774.131449][T25793] ialloc: diAlloc returned -5!
[  774.142984][  T111] 
[  774.142984][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  774.142984][  T111] 
[  774.233115][ T5958] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  774.255743][  T876] usb 1-1: Found UVC 0.00 device syz (046d:0823)
[  774.267877][  T876] usb 1-1: No valid video chain found.
[  774.277792][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.295826][   T36] 
[  774.295826][   T36]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  774.295826][   T36] 
[  774.312936][ T5958] usb 2-1: Product: syz
[  774.317160][ T5958] usb 2-1: Manufacturer: syz
[  774.332609][  T876] usb 1-1: USB disconnect, device number 113
[  774.345316][ T5958] usb 2-1: SerialNumber: syz
[  774.354399][ T5842] syz-executor: attempt to access beyond end of device
[  774.354399][ T5842] loop4: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  774.366516][   T36] 
[  774.366516][   T36]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  774.366516][   T36] 
[  774.406360][ T5958] usb 2-1: config 0 descriptor??
[  774.444023][ T5844] 
[  774.444023][ T5844]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  774.444023][ T5844] 
[  774.455696][ T5842] metapage_write_end_io: I/O error
[  774.462040][ T5958] ch341 2-1:0.0: ch341-uart converter detected
[  774.483407][ T5844] 
[  774.483407][ T5844]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  774.483407][ T5844] 
[  774.518347][  T110] 
[  774.518347][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  774.518347][  T110] 
[  774.586460][  T110] ==================================================================
[  774.594587][  T110] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x530
[  774.601456][  T110] Write of size 8 at addr ffff888029025840 by task jfsCommit/110
[  774.609185][  T110] 
[  774.611530][  T110] CPU: 0 UID: 0 PID: 110 Comm: jfsCommit Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  774.611562][  T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  774.611577][  T110] Call Trace:
[  774.611588][  T110]  <TASK>
[  774.611598][  T110]  dump_stack_lvl+0x189/0x250
[  774.611640][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.611671][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.611701][  T110]  ? __pfx_dump_stack_lvl+0x10/0x10
[  774.611739][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.611767][  T110]  ? rcu_is_watching+0x15/0xb0
[  774.611791][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.611819][  T110]  ? lock_release+0x4b/0x3e0
[  774.611858][  T110]  ? __virt_addr_valid+0x1c8/0x5c0
[  774.611884][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.611913][  T110]  ? __virt_addr_valid+0x4a5/0x5c0
[  774.611941][  T110]  print_report+0xd2/0x2b0
[  774.611974][  T110]  ? txEnd+0x32d/0x530
[  774.612003][  T110]  kasan_report+0x118/0x150
[  774.612033][  T110]  ? txEnd+0x32d/0x530
[  774.612061][  T110]  kasan_check_range+0x2b0/0x2c0
[  774.612092][  T110]  txEnd+0x32d/0x530
[  774.612118][  T110]  jfs_lazycommit+0x5ba/0xa90
[  774.612149][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[  774.612176][  T110]  ? __pfx_default_wake_function+0x10/0x10
[  774.612214][  T110]  ? __kthread_parkme+0x7b/0x200
[  774.612237][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.612266][  T110]  ? __kthread_parkme+0x1a1/0x200
[  774.612294][  T110]  kthread+0x711/0x8a0
[  774.612325][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[  774.612351][  T110]  ? __pfx_kthread+0x10/0x10
[  774.612377][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.612408][  T110]  ? _raw_spin_unlock_irq+0x23/0x50
[  774.612439][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.612468][  T110]  ? lockdep_hardirqs_on+0x9c/0x150
[  774.612499][  T110]  ? __pfx_kthread+0x10/0x10
[  774.612527][  T110]  ret_from_fork+0x3fc/0x770
[  774.612565][  T110]  ? __pfx_ret_from_fork+0x10/0x10
[  774.612604][  T110]  ? __switch_to_asm+0x39/0x70
[  774.612630][  T110]  ? __switch_to_asm+0x33/0x70
[  774.612656][  T110]  ? __pfx_kthread+0x10/0x10
[  774.612684][  T110]  ret_from_fork_asm+0x1a/0x30
[  774.612722][  T110]  </TASK>
[  774.612731][  T110] 
[  774.829060][  T110] Allocated by task 25811:
[  774.833504][  T110]  kasan_save_track+0x3e/0x80
[  774.838205][  T110]  __kasan_kmalloc+0x93/0xb0
[  774.842818][  T110]  __kmalloc_cache_noprof+0x230/0x3d0
[  774.848221][  T110]  lmLogOpen+0x2d1/0xfb0
[  774.852504][  T110]  jfs_mount_rw+0xe9/0x670
[  774.856961][  T110]  jfs_fill_super+0x754/0xd90
[  774.861685][  T110]  get_tree_bdev_flags+0x40e/0x4d0
[  774.863686][ T5958] usb 2-1: failed to send control message: -71
[  774.866803][  T110]  vfs_get_tree+0x92/0x2b0
[  774.877393][  T110]  do_new_mount+0x24a/0xa40
[  774.881918][  T110]  __se_sys_mount+0x317/0x410
[  774.886619][  T110]  do_syscall_64+0xfa/0x3b0
[  774.891239][  T110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.897145][  T110] 
[  774.897894][ T5958] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  774.899453][  T110] Freed by task 5844:
[  774.899467][  T110]  kasan_save_track+0x3e/0x80
[  774.916515][  T110]  kasan_save_free_info+0x46/0x50
[  774.921558][  T110]  __kasan_slab_free+0x62/0x70
[  774.926319][  T110]  kfree+0x18e/0x440
[  774.930208][  T110]  lmLogClose+0x297/0x520
[  774.934530][  T110]  jfs_umount+0x2ef/0x3c0
[  774.938866][  T110]  jfs_put_super+0x8c/0x190
[  774.943371][  T110]  generic_shutdown_super+0x135/0x2c0
[  774.948749][  T110]  kill_block_super+0x44/0x90
[  774.953420][  T110]  deactivate_locked_super+0xbc/0x130
[  774.958793][  T110]  cleanup_mnt+0x425/0x4c0
[  774.963214][  T110]  task_work_run+0x1d4/0x260
[  774.967895][  T110]  exit_to_user_mode_loop+0xec/0x110
[  774.973187][  T110]  do_syscall_64+0x2bd/0x3b0
[  774.977782][  T110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.983672][  T110] 
[  774.985996][  T110] The buggy address belongs to the object at ffff888029025800
[  774.985996][  T110]  which belongs to the cache kmalloc-1k of size 1024
[  775.000069][  T110] The buggy address is located 64 bytes inside of
[  775.000069][  T110]  freed 1024-byte region [ffff888029025800, ffff888029025c00)
[  775.013877][  T110] 
[  775.016199][  T110] The buggy address belongs to the physical page:
[  775.022604][  T110] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029025000 pfn:0x29020
[  775.032670][  T110] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  775.041258][  T110] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  775.049755][  T110] page_type: f5(slab)
[  775.053730][  T110] raw: 00fff00000000240 ffff88801a441dc0 ffffea0000c49e10 ffffea00011e6610
[  775.062315][  T110] raw: ffff888029025000 000000000010000e 00000000f5000000 0000000000000000
[  775.070899][  T110] head: 00fff00000000240 ffff88801a441dc0 ffffea0000c49e10 ffffea00011e6610
[  775.079568][  T110] head: ffff888029025000 000000000010000e 00000000f5000000 0000000000000000
[  775.088258][  T110] head: 00fff00000000003 ffffea0000a40801 00000000ffffffff 00000000ffffffff
[  775.096952][  T110] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  775.105635][  T110] page dumped because: kasan: bad access detected
[  775.112048][  T110] page_owner tracks the page as allocated
[  775.117755][  T110] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 70, tgid 70 (kworker/u8:4), ts 156679143550, free_ts 156494991800
[  775.138349][  T110]  post_alloc_hook+0x240/0x2a0
[  775.143125][  T110]  get_page_from_freelist+0x21e4/0x22c0
[  775.148679][  T110]  __alloc_frozen_pages_noprof+0x181/0x370
[  775.154513][  T110]  alloc_pages_mpol+0x232/0x4a0
[  775.159363][  T110]  allocate_slab+0x8a/0x3b0
[  775.163869][  T110]  ___slab_alloc+0xbfc/0x1480
[  775.168588][  T110]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  775.175003][  T110]  kmalloc_reserve+0x136/0x290
[  775.179762][  T110]  pskb_expand_head+0x18e/0x1150
[  775.184697][  T110]  batadv_skb_head_push+0x169/0x200
[  775.189900][  T110]  batadv_send_skb_packet+0xfa/0x6d0
[  775.195200][  T110]  batadv_iv_send_outstanding_bat_ogm_packet+0x62f/0x7e0
[  775.202240][  T110]  process_scheduled_works+0xae1/0x17b0
[  775.207795][  T110]  worker_thread+0x8a0/0xda0
[  775.212412][  T110]  kthread+0x711/0x8a0
[  775.216480][  T110]  ret_from_fork+0x3fc/0x770
[  775.221072][  T110] page last free pid 6926 tgid 6923 stack trace:
[  775.227385][  T110]  __free_frozen_pages+0xc71/0xe70
[  775.232496][  T110]  __put_partials+0x161/0x1c0
[  775.237172][  T110]  put_cpu_partial+0x17c/0x250
[  775.241946][  T110]  __slab_free+0x2f7/0x400
[  775.246371][  T110]  qlist_free_all+0x97/0x140
[  775.250976][  T110]  kasan_quarantine_reduce+0x148/0x160
[  775.256445][  T110]  __kasan_slab_alloc+0x22/0x80
[  775.261290][  T110]  __kmalloc_cache_noprof+0x1be/0x3d0
[  775.266656][  T110]  ocfs2_extent_map_insert_rec+0x5a6/0xf30
[  775.272472][  T110]  ocfs2_get_clusters+0x861/0xa70
[  775.277503][  T110]  ocfs2_extent_map_get_blocks+0x202/0x6a0
[  775.283318][  T110]  ocfs2_init_slot_info+0x946/0x1240
[  775.288608][  T110]  ocfs2_fill_super+0x2c44/0x63d0
[  775.293646][  T110]  get_tree_bdev_flags+0x40e/0x4d0
[  775.298757][  T110]  vfs_get_tree+0x92/0x2b0
[  775.303169][  T110]  do_new_mount+0x24a/0xa40
[  775.307761][  T110] 
[  775.310075][  T110] Memory state around the buggy address:
[  775.315692][  T110]  ffff888029025700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  775.323747][  T110]  ffff888029025780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  775.331801][  T110] >ffff888029025800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  775.339854][  T110]                                            ^
[  775.346025][  T110]  ffff888029025880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  775.354107][  T110]  ffff888029025900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  775.362157][  T110] ==================================================================
[  775.458771][ T5958] usb 2-1: USB disconnect, device number 96
[  775.466378][ T5958] ch341 2-1:0.0: device disconnected
[  775.508466][T25866] loop6: detected capacity change from 0 to 32768
[  775.516651][  T110] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  775.523868][  T110] CPU: 1 UID: 0 PID: 110 Comm: jfsCommit Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[  775.535371][  T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  775.545425][  T110] Call Trace:
[  775.548699][  T110]  <TASK>
[  775.551623][  T110]  dump_stack_lvl+0x99/0x250
[  775.556230][  T110]  ? __asan_memcpy+0x40/0x70
[  775.560829][  T110]  ? __pfx_dump_stack_lvl+0x10/0x10
[  775.566040][  T110]  ? __pfx__printk+0x10/0x10
[  775.570638][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  775.576273][  T110]  panic+0x2db/0x790
[  775.580178][  T110]  ? __pfx_panic+0x10/0x10
[  775.584603][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  775.590244][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  775.595875][  T110]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  775.601799][  T110]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  775.608132][  T110]  ? print_memory_metadata+0x314/0x400
[  775.613597][  T110]  ? txEnd+0x32d/0x530
[  775.617665][  T110]  check_panic_on_warn+0x89/0xb0
[  775.622616][  T110]  ? txEnd+0x32d/0x530
[  775.626680][  T110]  end_report+0x78/0x160
[  775.630919][  T110]  kasan_report+0x129/0x150
[  775.635424][  T110]  ? txEnd+0x32d/0x530
[  775.639496][  T110]  kasan_check_range+0x2b0/0x2c0
[  775.644445][  T110]  txEnd+0x32d/0x530
[  775.648341][  T110]  jfs_lazycommit+0x5ba/0xa90
[  775.653019][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[  775.658217][  T110]  ? __pfx_default_wake_function+0x10/0x10
[  775.664030][  T110]  ? __kthread_parkme+0x7b/0x200
[  775.668966][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  775.674598][  T110]  ? __kthread_parkme+0x1a1/0x200
[  775.679620][  T110]  kthread+0x711/0x8a0
[  775.683690][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[  775.688885][  T110]  ? __pfx_kthread+0x10/0x10
[  775.693473][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  775.699104][  T110]  ? _raw_spin_unlock_irq+0x23/0x50
[  775.704305][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  775.709944][  T110]  ? lockdep_hardirqs_on+0x9c/0x150
[  775.715145][  T110]  ? __pfx_kthread+0x10/0x10
[  775.719734][  T110]  ret_from_fork+0x3fc/0x770
[  775.724334][  T110]  ? __pfx_ret_from_fork+0x10/0x10
[  775.729480][  T110]  ? __switch_to_asm+0x39/0x70
[  775.734244][  T110]  ? __switch_to_asm+0x33/0x70
[  775.739031][  T110]  ? __pfx_kthread+0x10/0x10
[  775.743624][  T110]  ret_from_fork_asm+0x1a/0x30
[  775.748396][  T110]  </TASK>
[  775.751650][  T110] Kernel Offset: disabled
[  775.755974][  T110] Rebooting in 86400 seconds..