last executing test programs:

3m27.038887022s ago: executing program 4 (id=5580):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

3m26.678547421s ago: executing program 4 (id=5584):
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='f', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, 0x0)

3m26.342746327s ago: executing program 4 (id=5587):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)

3m25.920366375s ago: executing program 4 (id=5591):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58b, &(0x7f00000006c0)="$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")
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003640)='./file0\x00', &(0x7f0000003680)='ext4\x00', 0x0, 0x0)

3m25.381612272s ago: executing program 4 (id=5597):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0)

3m22.541465474s ago: executing program 4 (id=5617):
r0 = syz_io_uring_setup(0x370a, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2bf}, &(0x7f0000000500), &(0x7f0000000380))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)="46c2", 0x2)

3m21.865123428s ago: executing program 32 (id=5617):
r0 = syz_io_uring_setup(0x370a, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2bf}, &(0x7f0000000500), &(0x7f0000000380))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)="46c2", 0x2)

2m46.81411675s ago: executing program 0 (id=5959):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac141440000000000000000000000000fe8000000000000000000000000000364e2200004e2400000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000001040000000000000500000000000000000000400000000002000000800000000000000000000000000000000800000001000000000000000000000000000000000000000000000002000000000000000000000000000000000000040000000400000100000000000c000800a8"], 0xc4}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)

2m46.46096803s ago: executing program 0 (id=5960):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe)

2m46.096017809s ago: executing program 0 (id=5964):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80000c, &(0x7f0000000000)=ANY=[], 0x1, 0x6f7, &(0x7f0000000640)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2ec0, 0x40)

2m45.286808284s ago: executing program 0 (id=5971):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@dmask={'dmask', 0x3d, 0x1}}, {@sys_tz}, {}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@zero_size_dir}, {@gid}, {@keep_last_dots}, {}, {@sys_tz}, {@errors_remount}, {@errors_continue}]}, 0x4, 0x152f, &(0x7f00000037c0)="$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")
mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0)

2m44.623383878s ago: executing program 0 (id=5979):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x7ff, 0x65bf, 0x6, 0x0, 0x1, 0xcb02}, 0x50)
fchown(r0, 0x0, 0x0)

2m43.79084729s ago: executing program 0 (id=5991):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x11, 0xb0d, &(0x7f0000000d80)="$eJzs3U2sXFUBAOAz8968H1roFAs8C/IjCKjwCq9P/Gm0JRATCSXGDQlx05SCjbUmYqISEtuuTYSQalz5E1dsCBoT2ZimKzck0oSYsEIXmtDUSOJCq+2YN3POvDuHmXdn3s/MvM73JXfOnHvuvefcO3fu/z0nABOr2vxcXl6ohHD2zVcff//ev82v9DnYHqLe/JwuxGohhEqMT2fTe2+qFV754KWj3cJKWGp+pnh46lJ73B0hhFPhznAu1MPesxdeeWvpycOnnzhz19uvHbi4NXMPAACT5avnDizf9Jc/3br78uu3Hwqz7f7p+Lwe4zvjcf+heOCfjv+roTNeKXRFM9lw07GrzncON9VluGI+tWy46RAa3fKfyfKv9SjnbFg7/6lCv27zDdtZWo/roVJd7IhXq4uLrXPy0Dyvn6ksnjx+4rkXRlRQYNP9644Qwp2F7rEznfFx6w6OQRnW2TXGoAzbsjs0vLwuN1pGPs9D6hq7Rr0FAmjJ7xd+yKn8ysLG5FMry//So9U1x4eNGPb632l27fxntjr/Neb/nvOtcFT5JyPO/9enbXHYPNfq2pTmK/2PdsZ4fh8hf36p9/8vv9PR2Xcqm16c/lxZOXvdR9gu9xd6lXNqyOVYr17lz9eLa9UXY5iWw5ey9OL/J/9Nt8tvDHT37/z6v043bl3aGY+6HOPSdS6L2kam1RjhtgcYb/lzc410fzTKn+vL02dL0udK0udL0q8rSd9Rkg6T7Lff/XF4ubJ6np+f0w96PTxdZ7s+hjcMWJ5B78fl+efP/Q5qo/nnzxPDOPv9kaePfe7ZZy60nv+vtNf/q3F9T6cb9fjfOhcHSNcL8+vq7Wf/6535VLsO9/dwY1ae67sM3/y+p3O4Sivevkx7Q69yLHSOt6vXcLd1DlfPhpuPXX5BPz8+uS4bLx1/pO1qWl7T2fzWsvmYycqRtiu7Y7hSjh+9H2BD0vrY4/n/9s5tIdQqzx0/ceyhGE/r6R+narMr/R8ebrGBTdDv+z8LofP9n53t/rVqcbuwa7V/pbVdeCNOr7P/Ujufzv77Yzzt574xNd/sv3j02yee3fzZh4n2wg9e/OaREyeOfWdrvoTqVk15jL58eTyKMciXdNoyLuWZqC8r+9gxKEbJlxFvmIAtt++HrYOAB49/68jzx54/dnL/I4/sX1p65PP7l/c1j+v3FY/ui06NoLTAZlrd6a893I5hFQgAAAAAAAAAAAAo9b0nHr/wzvnPvtt6/3/1/b/0/n968rf1/v9qXRfVQv/QpXbc9B7g7i7pzWGyClZnsuFqsftIVt49WT43ZePdHMN2O37x/f+UXV6vayrPLVn/Wo9oVp3Ah+pLmcnqIMnbC/x4DM/E8FcBRqgy3713DLvVb138b6R1PdVPUagfo6F+4O0j/W5pbUj1mKTnvrvW61T4sXcPoYxsvmG8TjjqeQS6+8dE1f/9z9UZH6i+5foYlH2Suunh5vezdawTA3aN2a2d/uF1lr/R8yi9tvUbH4CCkbX/GS8MpuueKTz5h6/MrXRpsEuPdm4v8/pLYRB/fqczPu7tT251/nm7fcPOf9TzP+z2P9vt3/W9/ctazKuvL9///Pziu4Vsw95+88/nP94QquwZLP/LMf80N/eF/vJv/DLLP78h1Kf/Zvlf10f+Xeu2v63/PH9a+P6/mH9abPffXZ5/aC7/Vokrc53LIb9unO7/5deNkyvZ/Ke6PdfI/2svdvv919lQ49WYP0yy7dLO7KCy44j2Qfv62/+NTg3U/m//hc02a/lzGJ+J8bQhTs855PuEQcufnq9I+4GbsulXSvZv62n/d5waX5r09n+/EMOy/0Nq/zetj/W4yy/Em8syxWtdlu21uq2B7eq9ibr/ty26ub6Gq/UxTBj5vExC15hax3jtduJGXP5Go7G1F7RKjDRzRr78C+cJd4w4/5EY9fIvk7f/mz/3n7f/mx/j5+3/5ul5+795+nz8hXql5+3/5sszb/83T78lm27ePvBCSfpHS9L3dk9vn7bfWjL+bSXpHytJv6udfrBjiJR+e8n4d/RKj3NwY8n4d5ek31OS/omS9HvXSH9gZwj3F9KLbUCn8T9ZMv1rXXofZVLnHyZZ/n5e7///zcMsFjAE6f5Pr///npJ0YPv6yesPP/bMb75eb73/P9O+HpLu4x2K8Vo8f/p+jOf3vUMhvpJ2Psb/mqWP+/UOmCR5/Rn5/v2+knRg+0pn9f7fMIEqc917x7Cs3qpex/lsL5+K4adj+EAMH4zhYgz3xfDhGC4NqXxsjcfe+N2Blyur5/u7svR+nyevVDvP7DvqiQoh7O+zPPn1gUGfZ8/r8RvURvNf5+tgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI1Ntfi4vL1RCOPvmq48/ffj4vpU+B9tD1Juf04VYrT1eCA/FcCqGv4hfrnzw0tFieDWGlbAUKqHS7h+eutTOaUcI4VS4M5wL9bD37IVX3lp68vDpJ87c9fZrBy5u3RIAAACAa9//AwAA///sPRGX")
truncate(&(0x7f0000000000)='./file2\x00', 0x2002)

2m43.011239542s ago: executing program 33 (id=5991):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x11, 0xb0d, &(0x7f0000000d80)="$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")
truncate(&(0x7f0000000000)='./file2\x00', 0x2002)

6.334171496s ago: executing program 3 (id=7828):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000200)=@conn_svc_rsp={0x0, 0x0, 0xa, "7305df70", {0x3, 0x0, 0x0, 0x3, 0x80, 0x9, 0xe}})

3.82587018s ago: executing program 6 (id=7848):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@deltaction={0x48, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3.610454807s ago: executing program 3 (id=7850):
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x121100, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0)

3.522574107s ago: executing program 5 (id=7852):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0)

3.491051304s ago: executing program 6 (id=7853):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x80, 0x1, 'client0\x00', 0x180000001, "2b73800dc9dcada7", "3a9f8435ac0e34c572916cb561cf1658c33169e018a23b6eb3828a75d5073326", 0x4, 0x40})

3.311366739s ago: executing program 3 (id=7855):
r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)

3.090315022s ago: executing program 6 (id=7859):
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x5, 0x0, &(0x7f0000000040))

3.088899019s ago: executing program 5 (id=7860):
syz_usb_connect(0x5, 0x3e0, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100008339f010b4040210ab58010203010902ce0301000000000904"], 0x0)
socket(0x2, 0x3, 0xff)

2.942746998s ago: executing program 3 (id=7861):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x0)

2.84519456s ago: executing program 6 (id=7864):
r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x0, 0xfd, 0x5, 0x0})

2.689859967s ago: executing program 3 (id=7865):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x2000480, &(0x7f0000000480)=ANY=[], 0xfd, 0x62f4, &(0x7f00000006c0)="$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")

2.591627759s ago: executing program 2 (id=7866):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe1b, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}, 0x1, 0x0, 0x0, 0xc090}, 0x0)

2.570688729s ago: executing program 6 (id=7868):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x1, 0xf01, &(0x7f0000002d40)="$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")
symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.419866205s ago: executing program 7 (id=7869):
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)
munlockall()

2.073537826s ago: executing program 2 (id=7871):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, 0xffffffffffffffff)

1.899481765s ago: executing program 6 (id=7873):
r0 = syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000000), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

1.697232504s ago: executing program 2 (id=7874):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000001940)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=")
lchown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)

1.654825919s ago: executing program 1 (id=7875):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f00000005c0)}, 0x20)
rt_sigqueueinfo(0x0, 0x11, &(0x7f0000000580)={0x2a, 0x67, 0x9})

1.358378655s ago: executing program 1 (id=7876):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000006c0)=@generic={0x1, 0x7fffffffffffffff, 0x4})

1.357240608s ago: executing program 2 (id=7877):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x5411, &(0x7f00000000c0)={0x5})

1.231204137s ago: executing program 5 (id=7878):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000002380))

1.126318084s ago: executing program 7 (id=7879):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xf, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})

1.07189071s ago: executing program 1 (id=7880):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, 0x0)

1.006828892s ago: executing program 2 (id=7881):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f0000000000)=0x5)

850.876198ms ago: executing program 1 (id=7882):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)

802.981544ms ago: executing program 5 (id=7883):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000009e80)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, 0x0)

802.748831ms ago: executing program 7 (id=7884):
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg$inet(r0, &(0x7f00000044c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40041)

593.430705ms ago: executing program 2 (id=7885):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2000002, &(0x7f0000000340), 0x9, 0x558, &(0x7f0000001a80)="$eJzs3c9vHFcdAPDvjH8mdeoEeoAKSIBCQFHW8aaNql5oLiBUVUIgDohDauyNZbLOBntd1cYS7t8AB67wJ3BA4oDUEwduHJE4IKRyQApggWIkkAbN7NjZJLvtut4f1e7nI41m3szufL8vzsx7+7yeF8DEuhIRBxExGxFvRcRiuT8pl3i9teSve3S4v3p0uL+aRJZ95x9JcTzfF23vyT1XnnM+Ir79jYgfJG0B51qr7d29eyv1em2r3L3U3HywtL27d31jc2W9tl67X63eWr5149Wbr1T7VtfLm796+PWNN77729989v0/HHz1x3laC+Wx9np8FNNd9reqPnMS5/i1b5wl2MfIVLmeHXEefDRpRHwiIr5QXP+LMdX1fzIAMC6ybDGyxfYyADDu0mIMLEkr5VjAQqRppdIaw3shzqf1xnbz2t3Gzv211ljZxZhJ727Uazcuzf3pR0WPYSbJy8vFseJ4Ua4+Vb4ZEZci4mdz54pyZbVRXxtdtwcAJtpzT7X//55rtf89SAaeHAAwOPOjTgAAGDrtPwBMHu0/AEyeHtr/8pf9BwPPBQAYjlN8/k8HmQcAMDzG/wFg8mj/AWCifOvNN/MlOyqff7329u7Ovcbb19dq2/cqmzurldXG1oPKeqOxXjyzZ/PDzldvNB4svxw77yw1a9vNpe3dvTubjZ37zTvFc73v1GaGUisA4INcuvzeH5OIOHjtXLFE21wO2moYb71/n2fOHQHGTNtD/Ez8AxPGRQ+Tq/ce/e8HmgcwOh0f5j3fcfNJPz9FEN8zgo+Vq5/uffzfHM8wXvw9L0yuqYjWxH6nMjeQXIDhOv34vx4DjIssSyLLzp2UsiybbS8AAOPnDN/ozX7Sjw4IMHJJa+n6fO++/P4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxsxCRPwwkrRSzuy5EGlaqURciIiLMZPc3ajXbkTE83E5Imbm8vLyqJMGAM4o/Vs591dcXXxp4emjs8l/isn+Z/PWv9y3tZzv/+fJ/rnW2yOqj993hnkFAYA+e2el2dyqluu2D/KPDvdXj5dh5vPwdvyvnIr4Qhzurx6dxJ+O6WI9X/Qlzv8rKcutuUhfjIipPsQ/eDciPtWp/kkxNnKxnPm0PX6UsS8MNX76RPy0ONZa552vT/YhF5g0792OiNc7XX9pXCnWna//+eIOdXYPb7dOdlTe+44O92eP4x/f/6Y6xM+v+Su9xnj5d998Zme22Dr2bsSL0yfx56Pt/nMcP+kS/6Ue4//5M5/76de6HMt+EXE1nqj/6uMIj7eWmpsPlrZ3965vbK6s19Zr96vVW8u3brx685XqUjFGvXQ8Uv2sv7927fluueX1P98l/nzH+s+evPdLPdb/l/996/uf/4D4X/lip/hpvNAxfkveJn65x/gr53/ddfruPP5al/p/2M//Wo/x3//r3lqPLwUAhmB7d+/eSr1e2zrTRv4ptB/neWYjT7GvJ+ywMduW/F9isLFOtTHTr3/V6WEnP33SV+zvmb+Xn3HIP4u077U408ajYcUa7X0JGLzHF/2oMwEAAAAAAAAAAAAAALoZxp8ujbqOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjK//BwAA//9FJ7wx")
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

513.198588ms ago: executing program 3 (id=7886):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000e1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94)

500.594521ms ago: executing program 5 (id=7887):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xda32}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)

493.543221ms ago: executing program 7 (id=7888):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x9, &(0x7f00000000c0))
getegid()

440.356953ms ago: executing program 1 (id=7889):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe, 0x5, 0x0, 0x65, 0x0, 0x1}, {0x4, 0x0, 0x80000}, {}, 0x0, 0x0, 0xa, 0x4, 0xfd, 0xaf}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x42, 0xffffffff}}]}, 0x154}, 0x1, 0x0, 0x0, 0x3886f31be662c690}, 0x0)

290.15963ms ago: executing program 5 (id=7890):
r0 = gettid()
process_vm_readv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0)

175.907242ms ago: executing program 7 (id=7891):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x7, 0x1, 0x3, "0d9a6cd990f4c7d0b316a970f22d3947c15c32000f00", 0x50565559})

86.965827ms ago: executing program 7 (id=7892):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f007)

0s ago: executing program 1 (id=7893):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xbf, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230)

kernel console output (not intermixed with test programs):

xb3775c19, computed 0x2dd1c265. Applying ECC.
[  878.930549][T20921] (syz.2.6351,20921,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  879.021855][T20921] JBD2: Ignoring recovery information on journal
[  879.029963][T20906] XFS (loop6): Ending clean mount
[  879.107561][T20906] XFS (loop6): Quotacheck needed: Please wait.
[  879.147579][T20973] netlink: 'syz.7.6367': attribute type 10 has an invalid length.
[  879.155685][T20973] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6367'.
[  879.166706][T20973] ipvlan1: entered promiscuous mode
[  879.208401][T20921] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  879.222751][T20973] ipvlan1: entered allmulticast mode
[  879.266944][T20973] veth0_vlan: entered allmulticast mode
[  879.277765][T20906] XFS (loop6): Quotacheck: Done.
[  879.290332][T20973] bridge0: port 3(ipvlan1) entered blocking state
[  879.302413][T20973] bridge0: port 3(ipvlan1) entered disabled state
[  879.367988][T20973] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  879.540185][T20976] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  879.678641][T19118] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  879.701123][T20976] bond3 (unregistering): Released all slaves
[  879.965582][ T6154] ocfs2: Unmounting device (7,2) on (node local)
[  880.149551][T20996] comedi comedi0: pcl724: I/O port conflict (0x9,4)
[  881.372795][T21033] comedi comedi0: pcm3724: I/O port conflict (0x3,16)
[  881.453839][T21036] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6392'.
[  881.509825][T21036] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6392'.
[  881.918454][ T6236] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  881.981826][T21056] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6401'.
[  882.112661][ T6236] usb 7-1: config index 0 descriptor too short (expected 65305, got 72)
[  882.176282][ T6236] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  882.214351][ T6236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.242938][ T6236] usb 7-1: Product: syz
[  882.253055][ T6236] usb 7-1: Manufacturer: syz
[  882.257703][ T6236] usb 7-1: SerialNumber: syz
[  882.291370][ T6236] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  882.322444][ T6263] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  882.435468][  T911] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  882.656758][  T911] usb 6-1: Using ep0 maxpacket: 8
[  882.667666][  T911] usb 6-1: unable to get BOS descriptor or descriptor too short
[  882.709190][  T911] usb 6-1: config 12 interface 0 altsetting 7 endpoint 0x3 has an invalid bInterval 82, changing to 10
[  882.750557][   T30] audit: type=1326 audit(2000524763.286:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21074 comm="syz.2.6409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb255f8efc9 code=0x7ffc0000
[  882.784012][  T911] usb 6-1: config 12 interface 0 has no altsetting 0
[  882.818769][  T911] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  882.864386][   T30] audit: type=1326 audit(2000524763.286:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21074 comm="syz.2.6409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb255f8efc9 code=0x7ffc0000
[  882.891050][  T911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.899577][  T911] usb 6-1: Product: syz
[  882.915380][  T911] usb 6-1: Manufacturer: syz
[  882.931181][  T911] usb 6-1: SerialNumber: syz
[  883.017517][   T30] audit: type=1326 audit(2000524763.314:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21074 comm="syz.2.6409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fb255f8efc9 code=0x7ffc0000
[  883.281502][   T30] audit: type=1326 audit(2000524763.323:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21074 comm="syz.2.6409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb255f8efc9 code=0x7ffc0000
[  883.441897][  T911] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  883.556373][  T911] usb 6-1: selecting invalid altsetting 0
[  883.586509][   T30] audit: type=1326 audit(2000524763.323:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21074 comm="syz.2.6409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb255f8efc9 code=0x7ffc0000
[  883.829750][  T911] usb 6-1: USB disconnect, device number 3
[  884.300189][ T6298] udevd[6298]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  884.508114][ T6236] usb 7-1: USB disconnect, device number 4
[  884.524350][ T6263] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  884.536417][ T6263] ath9k_htc: Failed to initialize the device
[  884.544442][ T6236] usb 7-1: ath9k_htc: USB layer deinitialized
[  884.883796][T21106] loop1: detected capacity change from 0 to 2048
[  884.999427][T21106] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  885.552229][T21126] netlink: 'syz.1.6429': attribute type 6 has an invalid length.
[  885.815481][T21130] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  885.853872][ T6249] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  885.902729][T21130] bond1 (unregistering): Released all slaves
[  886.046352][ T6249] usb 6-1: Using ep0 maxpacket: 8
[  886.065566][ T6249] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  886.089646][ T6249] usb 6-1: config 179 has no interface number 0
[  886.096109][ T6249] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  886.141093][ T6249] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  886.185424][ T6249] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  886.249473][ T6249] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  886.324801][ T6249] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  886.353802][T21109] loop6: detected capacity change from 0 to 32768
[  886.368820][ T6249] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  886.421111][ T6249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.445343][T21109] (syz.6.6421,21109,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  886.483008][T21129] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  886.532272][T21109] (syz.6.6421,21109,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  886.768442][T21109] JBD2: Ignoring recovery information on journal
[  887.032379][T21109] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  887.092428][T21109] (syz.6.6421,21109,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC.
[  887.205280][ T6263] usb 6-1: USB disconnect, device number 4
[  887.205338][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  887.220214][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  887.467170][T21109] (syz.6.6421,21109,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC.
[  887.532143][T21176] loop3: detected capacity change from 0 to 256
[  887.543613][T21109] (syz.6.6421,21109,1):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118
[  887.581350][T21109] (syz.6.6421,21109,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  887.628320][T21109] (syz.6.6421,21109,1):ocfs2_quota_read:201 ERROR: status = -5
[  887.666847][T21109] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 3
[  887.685891][T21109] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  887.712947][T21109] (syz.6.6421,21109,1):ocfs2_acquire_dquot:890 ERROR: status = -5
[  887.748866][T21109] (syz.6.6421,21109,1):ocfs2_mknod:317 ERROR: status = -5
[  887.762978][T21109] (syz.6.6421,21109,1):ocfs2_mknod:505 ERROR: status = -5
[  887.782759][T21109] (syz.6.6421,21109,1):ocfs2_mkdir:661 ERROR: status = -5
[  888.254618][T19118] ocfs2: Unmounting device (7,6) on (node local)
[  888.903583][T21158] loop1: detected capacity change from 0 to 40427
[  888.952486][T21158] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  888.977079][T21158] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  889.030809][T21158] F2FS-fs (loop1): invalid crc value
[  889.068015][T21207] loop6: detected capacity change from 0 to 65
[  889.101476][T21207] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway
[  889.148054][ T6236] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  889.285581][T21213] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  889.353207][ T6236] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f
[  889.383163][ T6236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  889.431453][T21158] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  889.440098][ T6236] usb 3-1: config 0 descriptor??
[  889.492681][T21158] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  889.594884][T21158] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  889.724643][T21188] loop5: detected capacity change from 0 to 32768
[  889.737208][ T6236] usb 3-1: string descriptor 0 read error: -71
[  889.743486][ T6236] ldusb 3-1:0.0: Interrupt in endpoint not found
[  889.780479][T21188] (syz.5.6453,21188,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  889.806169][ T6236] usb 3-1: USB disconnect, device number 3
[  889.847331][T21188] (syz.5.6453,21188,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  889.962757][T21188] JBD2: Ignoring recovery information on journal
[  890.172237][T21188] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  890.524518][T21232] loop6: detected capacity change from 0 to 4096
[  890.579600][ T6164] ocfs2: Unmounting device (7,5) on (node local)
[  890.657254][T21232] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  890.752222][ T6236] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  890.864435][T21232] ntfs3(loop6): ino=1a, mi_enum_attr
[  890.880668][T21232] ntfs3(loop6): ino=1a, mi_enum_attr
[  890.912655][T21232] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  890.955390][ T6236] usb 8-1: Using ep0 maxpacket: 16
[  890.981922][ T6236] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  891.034278][ T6236] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  891.076755][ T6236] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.138484][ T6236] usb 8-1: config 0 descriptor??
[  891.185332][ T6236] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input50
[  891.420832][ T5180] bcm5974 8-1:0.0: could not read from device
[  891.424433][T21250] bridge1: entered promiscuous mode
[  891.473603][ T6236] bcm5974 8-1:0.0: could not read from device
[  891.493353][ T6162] Bluetooth: hci0: command tx timeout
[  891.543698][ T5180] bcm5974 8-1:0.0: could not read from device
[  891.676343][ T6236] input: failed to attach handler mousedev to device input50, error: -5
[  891.709055][ T6236] usb 8-1: USB disconnect, device number 2
[  891.712362][ T5180] bcm5974 8-1:0.0: could not read from device
[  891.756369][T21254] loop2: detected capacity change from 0 to 4096
[  891.801276][T21258] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  891.830295][T21259] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config
[  892.317621][T21271] loop6: detected capacity change from 0 to 512
[  892.348292][T21271] EXT4-fs: Ignoring removed orlov option
[  892.386120][T21271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  892.435873][T21271] EXT4-fs (loop6): orphan cleanup on readonly fs
[  892.456583][T21271] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.6489: bg 0: block 248: padding at end of block bitmap is not set
[  892.488504][T21271] Quota error (device loop6): write_blk: dquota write failed
[  892.556995][T21271] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  892.657194][T21271] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.6489: Failed to acquire dquot type 1
[  892.726423][T21271] EXT4-fs (loop6): 1 truncate cleaned up
[  892.795670][T21271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  892.900972][T21271] EXT4-fs: Ignoring removed orlov option
[  892.933122][T21271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  893.007119][T21271] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  893.033800][T21290] loop1: detected capacity change from 0 to 4096
[  893.061701][T21271] EXT4-fs error (device loop6): __ext4_remount:6748: comm syz.6.6489: Abort forced by user
[  893.091539][T21271] EXT4-fs (loop6): Remounting filesystem read-only
[  893.140669][T21271] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  893.190964][T21271] ext4 filesystem being remounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  893.503494][T19118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  893.982146][ T6249] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  894.183225][ T6249] usb 6-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[  894.200017][ T6249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.254159][ T6249] usb 6-1: config 0 descriptor??
[  894.295750][ T6249] pwc: Philips SPC 900NC USB webcam detected.
[  894.416547][T21334] xt_addrtype: ipv6 does not support BROADCAST matching
[  894.491149][T21337] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6516'.
[  894.517333][T21337] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6516'.
[  894.570624][    T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  894.741587][    T9] usb 7-1: Using ep0 maxpacket: 16
[  894.753028][ T6249] pwc: send_video_command error -71
[  894.761259][ T6249] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  894.772741][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  894.795647][ T6249] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71
[  894.815225][    T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14
[  894.827597][ T6249] usb 6-1: USB disconnect, device number 5
[  894.847770][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.896505][    T9] usb 7-1: Product: syz
[  894.901899][    T9] usb 7-1: Manufacturer: syz
[  894.906551][    T9] usb 7-1: SerialNumber: syz
[  894.993108][    T9] usb 7-1: config 0 descriptor??
[  895.297289][ T6249] usb 7-1: USB disconnect, device number 5
[  895.340900][T21350] loop1: detected capacity change from 0 to 4096
[  895.382872][T21350] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  895.413685][T21361] xt_connbytes: Forcing CT accounting to be enabled
[  895.449492][T21350] ntfs3(loop1): Failed to load $Extend (-22).
[  895.477600][T21350] ntfs3(loop1): Failed to initialize $Extend.
[  895.745700][T21365] loop2: detected capacity change from 0 to 1024
[  896.629871][T21348] loop7: detected capacity change from 0 to 32768
[  896.732103][T21348] add_index: next_index = 0.  Resetting!
[  896.782629][T21348] find_entry called with index >= next_index
[  896.827224][T21348] find_entry called with index >= next_index
[  896.862482][T21348] find_entry called with index >= next_index
[  896.882164][T21348] find_entry called with index >= next_index
[  897.334037][T21407] netlink: 'syz.6.6546': attribute type 1 has an invalid length.
[  897.362758][T21407] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6546'.
[  897.405097][T21410] Cannot find set identified by id 65534 to match
[  898.185994][T21430] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6554'.
[  898.195004][T21430] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6554'.
[  898.640848][T21438] loop3: detected capacity change from 0 to 4096
[  898.706237][T21388] loop2: detected capacity change from 0 to 40427
[  898.771933][T21388] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  898.839248][T21388] F2FS-fs (loop2): invalid crc value
[  898.878532][T21438] ntfs3: Cannot use different iocharset when remounting!
[  899.170527][T21452] comedi comedi0: fl512: I/O port conflict (0x1,16)
[  899.292668][T21388] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  899.368769][T21388] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  899.383902][T21417] loop7: detected capacity change from 0 to 32768
[  899.420104][T21417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6544 (21417)
[  899.505783][T21388] syz.2.6537: attempt to access beyond end of device
[  899.505783][T21388] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  899.549893][T21417] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  899.570695][T21417] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  899.806883][ T6154] syz-executor: attempt to access beyond end of device
[  899.806883][ T6154] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  899.823157][    T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  899.886297][ T6154] CPU: 0 UID: 0 PID: 6154 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  899.886352][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  899.886400][ T6154] Call Trace:
[  899.886413][ T6154]  <TASK>
[  899.886429][ T6154]  dump_stack_lvl+0x16c/0x1f0
[  899.886481][ T6154]  f2fs_handle_critical_error+0x624/0x9f0
[  899.886527][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.886574][ T6154]  ? f2fs_build_fault_attr+0x53/0x1f0
[  899.886647][ T6154]  f2fs_write_end_io+0x958/0xcf0
[  899.886697][ T6154]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  899.886745][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.886798][ T6154]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  899.886851][ T6154]  bio_endio+0x713/0x860
[  899.886906][ T6154]  submit_bio_noacct+0x306/0x1f60
[  899.886957][ T6154]  __submit_merged_bio+0x33c/0x770
[  899.887006][ T6154]  __submit_merged_write_cond+0x319/0x3f0
[  899.887064][ T6154]  f2fs_write_cache_pages+0x2067/0x2570
[  899.887143][ T6154]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  899.887201][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.887263][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.887313][ T6154]  ? __lock_acquire+0x622/0x1c90
[  899.887459][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.887507][ T6154]  ? mod_memcg_lruvec_state+0x389/0x5f0
[  899.887560][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.887607][ T6154]  ? __mod_zone_page_state+0xcc/0x1a0
[  899.887655][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.887726][ T6154]  f2fs_write_data_pages+0x4ad/0xd90
[  899.887799][ T6154]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  899.887877][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.887925][ T6154]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  899.887982][ T6154]  do_writepages+0x27a/0x600
[  899.888029][ T6154]  ? __pfx_do_writepages+0x10/0x10
[  899.888065][ T6154]  ? do_raw_spin_unlock+0x172/0x230
[  899.888110][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.888157][ T6154]  ? _raw_spin_unlock+0x28/0x50
[  899.888202][ T6154]  filemap_fdatawrite_wbc+0x104/0x160
[  899.888247][ T6154]  __filemap_fdatawrite_range+0xb9/0x100
[  899.888309][ T6154]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  899.888434][ T6154]  ? find_held_lock+0x2b/0x80
[  899.888486][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.888534][ T6154]  ? do_raw_spin_unlock+0x172/0x230
[  899.888580][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.888635][ T6154]  f2fs_sync_dirty_inodes+0x2a2/0x980
[  899.888713][ T6154]  block_operations+0x2b0/0xfe0
[  899.888781][ T6154]  ? __pfx_block_operations+0x10/0x10
[  899.888895][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.888945][ T6154]  ? ktime_get+0x200/0x310
[  899.889001][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.889047][ T6154]  ? lockdep_hardirqs_on+0x7c/0x110
[  899.889093][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.889139][ T6154]  ? rcu_is_watching+0x12/0xc0
[  899.889221][ T6154]  f2fs_write_checkpoint+0x32b/0x5300
[  899.889302][ T6154]  ? kfree+0x2b8/0x6d0
[  899.889346][ T6154]  ? f2fs_stop_gc_thread+0x79/0xd0
[  899.889409][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.889456][ T6154]  ? rcu_is_watching+0x12/0xc0
[  899.889505][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.889550][ T6154]  ? kthread_stop+0x272/0x630
[  899.889592][ T6154]  kill_f2fs_super+0x3d6/0x490
[  899.889649][ T6154]  ? __pfx_kill_f2fs_super+0x10/0x10
[  899.889724][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.889788][ T6154]  deactivate_locked_super+0xc1/0x1a0
[  899.889846][ T6154]  deactivate_super+0xde/0x100
[  899.889911][ T6154]  cleanup_mnt+0x225/0x450
[  899.889996][ T6154]  task_work_run+0x150/0x240
[  899.890040][ T6154]  ? __pfx_task_work_run+0x10/0x10
[  899.890080][ T6154]  ? srso_alias_return_thunk+0x5/0xfbef5
[  899.890133][ T6154]  ? __pfx___x64_sys_umount+0x10/0x10
[  899.890205][ T6154]  exit_to_user_mode_loop+0xec/0x130
[  899.890250][ T6154]  do_syscall_64+0x426/0xfa0
[  899.890303][ T6154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.890342][ T6154] RIP: 0033:0x7fb255f902f7
[  899.890373][ T6154] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  899.890411][ T6154] RSP: 002b:00007ffe5dd175b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  899.890447][ T6154] RAX: 0000000000000000 RBX: 00007fb256011d7d RCX: 00007fb255f902f7
[  899.890472][ T6154] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5dd17670
[  899.890497][ T6154] RBP: 00007ffe5dd17670 R08: 0000000000000000 R09: 0000000000000000
[  899.890521][ T6154] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe5dd18700
[  899.890546][ T6154] R13: 00007fb256011d7d R14: 00000000000d4ba2 R15: 00007ffe5dd18740
[  899.890601][ T6154]  </TASK>
[  899.890616][ T6154] F2FS-fs (loop2): Remounting filesystem read-only
[  900.057767][T21417] BTRFS info (device loop7): enabling ssd optimizations
[  900.178181][    T9] usb 7-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  900.218920][T21417] BTRFS info (device loop7): turning on async discard
[  900.341013][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.395061][T21417] BTRFS info (device loop7): enabling free space tree
[  900.437367][    T9] usb 7-1: Product: syz
[  900.441689][    T9] usb 7-1: Manufacturer: syz
[  900.447625][    T9] usb 7-1: SerialNumber: syz
[  900.471041][    T9] usb 7-1: config 0 descriptor??
[  900.712311][    T9] int51x1 7-1:0.0: probe with driver int51x1 failed with error -22
[  900.763610][  T911] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  900.776193][T20066] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  900.985137][  T911] usb 2-1: Using ep0 maxpacket: 8
[  901.054316][  T911] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  901.070340][ T6339] usb 7-1: USB disconnect, device number 6
[  901.085726][  T911] usb 2-1: config 179 has no interface number 0
[  901.093921][  T911] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  901.158589][  T911] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  901.203234][  T911] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  901.238233][T21502] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6577'.
[  901.259725][  T911] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  901.315090][  T911] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  901.394056][  T911] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  901.403161][  T911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.502172][T21492] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  901.946813][   T30] audit: type=1326 audit(2000524781.247:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.5.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8838efc9 code=0x7ffc0000
[  902.035623][   T30] audit: type=1326 audit(2000524781.275:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.5.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8838efc9 code=0x7ffc0000
[  902.200911][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  902.200910][ T6339] usb 2-1: USB disconnect, device number 123
[  902.201061][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  902.217501][   T30] audit: type=1326 audit(2000524781.284:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.5.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2d8838efc9 code=0x7ffc0000
[  902.289968][T21522] netlink: 'syz.2.6587': attribute type 1 has an invalid length.
[  902.311488][T21522] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6587'.
[  902.392066][   T30] audit: type=1326 audit(2000524781.284:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21515 comm="syz.5.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8838efc9 code=0x7ffc0000
[  902.685478][T21536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6594'.
[  902.802149][T21540] netlink: 'syz.7.6595': attribute type 10 has an invalid length.
[  902.853372][T21540] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6595'.
[  902.912794][T21540] team0: entered promiscuous mode
[  902.955430][T21540] team_slave_0: entered promiscuous mode
[  902.992486][T21540] team_slave_1: entered promiscuous mode
[  903.030948][T21540] team0: entered allmulticast mode
[  903.041125][T21540] team_slave_0: entered allmulticast mode
[  903.066761][T21540] team_slave_1: entered allmulticast mode
[  903.101638][T21540] bridge0: port 3(team0) entered blocking state
[  903.131601][T21540] bridge0: port 3(team0) entered disabled state
[  903.143696][T21540] bridge0: port 3(team0) entered blocking state
[  903.150722][T21540] bridge0: port 3(team0) entered forwarding state
[  903.177947][T21543] ip6erspan0: entered allmulticast mode
[  903.372776][T21554] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  903.878231][T21572] loop7: detected capacity change from 0 to 1764
[  903.896861][    T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  904.017978][T21572] iso9660: Corrupted directory entry in block 2 of inode 1920
[  904.105662][    T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  904.149599][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  904.206702][    T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  904.246006][    T9] usb 4-1: config 1 has no interface number 1
[  904.265225][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  904.348427][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  904.367105][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.401467][    T9] usb 4-1: Product: syz
[  904.405702][    T9] usb 4-1: Manufacturer: syz
[  904.423497][    T9] usb 4-1: SerialNumber: syz
[  904.713148][    T9] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  904.740551][    T9] usb 4-1: MIDIStreaming interface descriptor not found
[  904.896624][    T9] usb 4-1: USB disconnect, device number 101
[  905.012705][T21606] loop6: detected capacity change from 0 to 16
[  905.041495][T21606] erofs (device loop6): mounted with root inode @ nid 36.
[  905.114285][T21606] erofs (device loop6): failed to read inode meta block (nid: 18446744071562067967): -117
[  905.534221][T21620] comedi: No check for data length of config insn id -8 is implemented
[  905.588050][T21620] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  905.654385][T21620] comedi: Assuming n=15 is correct
[  906.156861][T21640] netlink: 45 bytes leftover after parsing attributes in process `syz.6.6645'.
[  906.342077][T21649] xt_connbytes: Forcing CT accounting to be enabled
[  906.342388][T21649] set match dimension is over the limit!
[  906.473047][    T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  906.634518][    T9] usb 2-1: Using ep0 maxpacket: 16
[  906.653199][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  906.690464][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  906.745735][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  906.783361][T21662] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6656'.
[  906.792453][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.819170][T21662] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6656'.
[  906.839003][    T9] usb 2-1: config 0 descriptor??
[  906.858539][    T9] xbox_remote_probe: endpoint_in message size==0?
[  907.095151][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  907.103012][T21671] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6660'.
[  907.118734][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  907.198570][    T9] usb 2-1: USB disconnect, device number 124
[  907.214606][T21671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  907.483758][T21683] loop3: detected capacity change from 0 to 256
[  907.540789][T21683] exfat: Deprecated parameter 'utf8'
[  907.568469][T21683] exfat: Deprecated parameter 'utf8'
[  907.618769][T21683] exfat: Deprecated parameter 'utf8'
[  907.675450][T21683] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  907.786747][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6670'.
[  907.871443][T21683] exFAT-fs (loop3): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  907.907514][T21683] exFAT-fs (loop3): Filesystem has been set read-only
[  907.986310][T21690] loop7: detected capacity change from 0 to 4096
[  908.017871][T21696] loop1: detected capacity change from 0 to 64
[  908.037503][T21690] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  908.112021][T21698] new mount options do not match the existing superblock, will be ignored
[  908.284208][T21690] ntfs3(loop7): ino=19, mi_enum_attr
[  908.289573][T21690] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  908.615337][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  908.621828][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  908.807779][T21718] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  908.966509][ T6263] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  909.104827][T21727] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6687'.
[  909.126506][  T911] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  909.179663][ T6263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  909.208892][ T6263] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  909.220052][T21730] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  909.240386][ T6263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  909.270421][ T6263] usb 3-1: config 0 descriptor??
[  909.298650][  T911] usb 8-1: config 0 has an invalid interface number: 90 but max is 0
[  909.301834][ T6263] smsusb:smsusb_probe: board id=8, interface number 0
[  909.317661][  T911] usb 8-1: config 0 has no interface number 0
[  909.350217][  T911] usb 8-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=de.7f
[  909.354963][ T6263] smsusb:smsusb_probe: Device initialized with return code -19
[  909.366065][  T911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  909.393934][  T911] usb 8-1: Product: syz
[  909.398883][  T911] usb 8-1: Manufacturer: syz
[  909.419636][  T911] usb 8-1: SerialNumber: syz
[  909.453853][  T911] usb 8-1: config 0 descriptor??
[  909.586409][ T6263] usb 3-1: USB disconnect, device number 4
[  909.710049][  T911] cdc_subset 8-1:0.90: probe with driver cdc_subset failed with error -22
[  909.972307][ T6263] usb 8-1: USB disconnect, device number 3
[  910.022824][T21724] loop5: detected capacity change from 0 to 32768
[  910.035364][T21747] Cannot find add_set index 4 as target
[  910.075613][T21724] (syz.5.6686,21724,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  910.119585][T21724] (syz.5.6686,21724,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  910.204549][T21724] JBD2: Ignoring recovery information on journal
[  910.233364][T21750] loop3: detected capacity change from 0 to 1024
[  910.249580][    T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  910.321023][T21724] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  910.373740][T21724] (syz.5.6686,21724,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC.
[  910.416447][T21755] netlink: 'syz.6.6700': attribute type 10 has an invalid length.
[  910.431374][    T9] usb 2-1: Using ep0 maxpacket: 8
[  910.435674][T21750] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  910.441346][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  910.453573][T21750] hfsplus: xattr search failed
[  910.463782][T21755] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6700'.
[  910.474397][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  910.498028][T21755] team0: entered promiscuous mode
[  910.508736][T21755] team_slave_0: entered promiscuous mode
[  910.509496][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  910.514645][T21755] team_slave_1: entered promiscuous mode
[  910.559788][T21755] team0: entered allmulticast mode
[  910.566709][T21755] team_slave_0: entered allmulticast mode
[  910.568014][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  910.584573][T21755] team_slave_1: entered allmulticast mode
[  910.586754][T21755] bridge0: port 3(team0) entered blocking state
[  910.608637][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  910.609250][T21724] (syz.5.6686,21724,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC.
[  910.618819][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  910.641615][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.650254][   T13] hfsplus: b-tree write err: -5, ino 4
[  910.656847][T21755] bridge0: port 3(team0) entered disabled state
[  910.663219][T21724] (syz.5.6686,21724,0):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118
[  910.692408][T21755] bridge0: port 3(team0) entered blocking state
[  910.698984][T21755] bridge0: port 3(team0) entered forwarding state
[  910.707697][T21724] (syz.5.6686,21724,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  910.730834][T21724] (syz.5.6686,21724,1):ocfs2_quota_read:201 ERROR: status = -5
[  910.738472][T21724] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 3
[  910.776807][    T9] usb 2-1: config 0 descriptor??
[  910.783052][T21745] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  910.844046][T21724] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  910.875426][T21724] (syz.5.6686,21724,1):ocfs2_acquire_dquot:890 ERROR: status = -5
[  910.908024][T21724] (syz.5.6686,21724,1):ocfs2_mknod:317 ERROR: status = -5
[  910.940488][T21724] (syz.5.6686,21724,1):ocfs2_mknod:505 ERROR: status = -5
[  910.958768][T21724] (syz.5.6686,21724,1):ocfs2_mkdir:661 ERROR: status = -5
[  911.066386][T21760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  911.292874][    C1] Bluetooth: hci6: Unexpected continuation: 1 bytes
[  911.304926][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.315344][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.324054][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.331361][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.338247][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.345790][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.353926][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.360950][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.369152][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.370540][ T6164] ocfs2: Unmounting device (7,5) on (node local)
[  911.378284][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.390310][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.397464][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.405276][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.412898][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.420200][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.428751][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.435701][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.443657][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.450922][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.457806][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.465061][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.472503][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.479737][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.488611][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.495969][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.503145][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.510273][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.517995][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.521191][  T911] usb 2-1: USB disconnect, device number 125
[  911.525169][T15651] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  911.541947][ T6162] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[  912.370785][T21795] loop2: detected capacity change from 0 to 16
[  912.848562][T21812] netlink: 'syz.2.6725': attribute type 30 has an invalid length.
[  913.224154][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6732'.
[  913.478969][   T65] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  913.830282][T21851] loop5: detected capacity change from 0 to 256
[  913.909954][T21851] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d)
[  913.950144][ T6263] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  914.042951][T21851] exFAT-fs (loop5): error, data size is invalid(150994954)
[  914.097497][T21851] exFAT-fs (loop5): Filesystem has been set read-only
[  914.166033][ T6263] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  914.188916][ T6263] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  914.246038][ T6263] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  914.320858][ T6263] usb 2-1: config 1 interface 1 has no altsetting 0
[  914.342517][ T6263] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  914.363357][ T6263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.402988][ T6263] usb 2-1: Product: syz
[  914.413062][ T6263] usb 2-1: Manufacturer: syz
[  914.436267][ T6263] usb 2-1: SerialNumber: syz
[  914.531136][ T6263] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[  914.551234][ T6263] cdc_ncm 2-1:1.0: bind() failure
[  914.666813][T21870] loop5: detected capacity change from 0 to 128
[  914.695445][T21870] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  914.812385][T21875] netlink: 'syz.3.6751': attribute type 2 has an invalid length.
[  914.855821][T21870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  914.871575][T21875] netlink: 'syz.3.6751': attribute type 1 has an invalid length.
[  914.926581][T21877] loop2: detected capacity change from 0 to 764
[  914.950260][T21881] overlayfs: workdir and upperdir must be separate subtrees
[  915.008472][T21877] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  915.101586][ T6263] usb 2-1: USB disconnect, device number 126
[  915.657841][T21899] Cannot find del_set index 16384 as target
[  915.967851][T21909] comedi comedi0: Minor 3 could not be opened
[  916.350568][T21925] loop2: detected capacity change from 0 to 64
[  916.434237][T21925] Trying to free block not in datazone
[  917.338971][T21911] loop1: detected capacity change from 0 to 32768
[  917.382159][T21911] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6769 (21911)
[  917.440572][T21911] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  917.503958][T21911] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  917.672730][T21919] loop6: detected capacity change from 0 to 32768
[  917.687407][T21919] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6773 (21919)
[  917.875233][T21919] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  917.920040][T21911] BTRFS info (device loop1): enabling ssd optimizations
[  917.939391][T21919] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  917.976739][T21911] BTRFS info (device loop1): turning on async discard
[  918.006658][T21911] BTRFS info (device loop1): enabling free space tree
[  918.206789][T21919] BTRFS info (device loop6): enabling ssd optimizations
[  918.213818][T21919] BTRFS info (device loop6): turning on async discard
[  918.224539][T21998] netlink: 'syz.5.6796': attribute type 1 has an invalid length.
[  918.271134][T21919] BTRFS info (device loop6): enabling free space tree
[  918.453090][ T6152] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  918.671917][T19118] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  919.295896][T22020] loop2: detected capacity change from 0 to 64
[  919.426181][T22024] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  919.520967][T22028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6810'.
[  920.052533][T22042] libceph: resolve '.
[  920.052533][T22042] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[  920.052533][T22042] ' (ret=-3): failed
[  920.067895][T22040] openvswitch: netlink: Key type 31 is not supported
[  920.287500][T22048] ip6t_srh: unknown srh match flags  5F28
[  920.730870][T22058] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6825'.
[  921.360066][T22077] fuse: blksize only supported for fuseblk
[  921.427852][   T30] audit: type=1326 audit(2000524799.461:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22080 comm="syz.1.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914f78efc9 code=0x7ffc0000
[  921.500574][   T30] audit: type=1326 audit(2000524799.489:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22080 comm="syz.1.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914f78efc9 code=0x7ffc0000
[  921.614880][   T30] audit: type=1326 audit(2000524799.489:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22080 comm="syz.1.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f914f78efc9 code=0x7ffc0000
[  921.694607][   T30] audit: type=1326 audit(2000524799.489:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22080 comm="syz.1.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914f78efc9 code=0x7ffc0000
[  921.726042][T22045] loop6: detected capacity change from 0 to 32768
[  921.732543][   T30] audit: type=1326 audit(2000524799.489:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22080 comm="syz.1.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914f78efc9 code=0x7ffc0000
[  921.757658][T22045] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6818 (22045)
[  921.839952][T22045] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  921.907512][T22045] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  922.194883][   T30] audit: type=1326 audit(2000524800.162:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22116 comm="syz.1.6845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914f78efc9 code=0x7ffc0000
[  922.308288][T22045] BTRFS info (device loop6): enabling ssd optimizations
[  922.309467][   T30] audit: type=1326 audit(2000524800.237:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22116 comm="syz.1.6845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f914f78efc9 code=0x7ffc0000
[  922.378016][T22045] BTRFS info (device loop6): turning on async discard
[  922.387997][T22045] BTRFS info (device loop6): enabling free space tree
[  922.491377][   T30] audit: type=1326 audit(2000524800.452:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22116 comm="syz.1.6845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914f78efc9 code=0x7ffc0000
[  922.624474][   T30] audit: type=1326 audit(2000524800.452:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22116 comm="syz.1.6845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914f78efc9 code=0x7ffc0000
[  922.741900][T19118] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  923.128165][T22143] loop7: detected capacity change from 0 to 256
[  923.146169][T22146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  923.232350][T22137] loop3: detected capacity change from 0 to 4096
[  923.338821][T22150] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  924.240203][T22164] loop3: detected capacity change from 0 to 4096
[  924.249502][ T6263] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  924.276086][T22164] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  924.435642][T22164] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  924.452874][ T6263] usb 6-1: Using ep0 maxpacket: 8
[  924.481865][ T6263] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  924.525828][ T6263] usb 6-1: config 0 has no interface number 0
[  924.597101][ T6263] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  924.619474][ T6263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.671710][ T6263] usb 6-1: Product: syz
[  924.676054][ T6263] usb 6-1: Manufacturer: syz
[  924.722217][ T6263] usb 6-1: SerialNumber: syz
[  924.761829][ T6263] usb 6-1: config 0 descriptor??
[  924.852464][T22186] loop7: detected capacity change from 0 to 256
[  925.035076][ T6263] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  925.072577][ T6263] uvcvideo 6-1:0.31: Failed to initialize entity for entity 6
[  925.134419][ T6263] uvcvideo 6-1:0.31: Failed to register entities (-22).
[  925.309584][ T6249] usb 6-1: USB disconnect, device number 6
[  925.414640][T22198] xt_hashlimit: size too large, truncated to 1048576
[  925.491859][T22199] loop7: detected capacity change from 0 to 512
[  925.555972][T22199] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  925.696531][T22201] loop6: detected capacity change from 0 to 2048
[  925.737514][T22201] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=27485, location=27485
[  925.794611][T22201] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  926.463478][T22224] ieee802154 phy0 wpan0: encryption failed: -22
[  926.752635][T22227] loop5: detected capacity change from 0 to 1024
[  927.132606][   T36] hfsplus: b-tree write err: -5, ino 4
[  927.265788][T22247] libceph: resolve '.
[  927.265788][T22247] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[  927.265788][T22247] ' (ret=-3): failed
[  928.121338][T22271] xt_policy: too many policy elements
[  928.467865][T22283] loop5: detected capacity change from 0 to 164
[  928.505422][T22285] libceph: resolve '.
[  928.505422][T22285] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[  928.505422][T22285] ' (ret=-3): failed
[  928.559227][T22283] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  928.583005][T22283] UDF-fs: Scanning with blocksize 512 failed
[  928.621193][T22283] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  928.650132][T22245] loop1: detected capacity change from 0 to 32768
[  928.677426][T22283] UDF-fs: Scanning with blocksize 1024 failed
[  928.688867][T22245] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6908 (22245)
[  928.744423][T22283] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  928.778839][T22283] UDF-fs: Scanning with blocksize 2048 failed
[  928.798651][T22245] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  928.837936][T22283] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  928.845378][T22283] UDF-fs: Scanning with blocksize 4096 failed
[  928.864530][T22245] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  929.117354][T22245] BTRFS info (device loop1): enabling ssd optimizations
[  929.124375][T22245] BTRFS info (device loop1): turning on async discard
[  929.179962][T22245] BTRFS info (device loop1): enabling free space tree
[  929.393188][T22319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  929.551324][ T6152] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  930.156708][T22333] loop2: detected capacity change from 0 to 4096
[  930.234131][T22333] ntfs3(loop2): ino=3, Correct links count -> 2.
[  930.309733][T22345] netlink: 'syz.3.6947': attribute type 10 has an invalid length.
[  930.405198][T22345] team0: Cannot enslave team device to itself
[  931.268904][T22371] loop3: detected capacity change from 0 to 1024
[  931.315904][T22371] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  931.807568][T22386] xt_nat: multiple ranges no longer supported
[  932.102841][T22394] loop2: detected capacity change from 0 to 64
[  932.687749][T22411] loop7: detected capacity change from 0 to 1024
[  932.826438][T22414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6980'.
[  932.840350][T22411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  933.000549][T22411] EXT4-fs error (device loop7): ext4_get_first_dir_block:3552: inode #11: comm syz.7.6979: directory missing '..'
[  933.028380][T22373] loop5: detected capacity change from 0 to 32768
[  933.114911][T22373] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  933.116822][    T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  933.163784][T20066] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.252020][T22435] loop2: detected capacity change from 0 to 512
[  933.339220][T22435] EXT4-fs: Ignoring removed nobh option
[  933.388157][T22435] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  933.401868][T22373] XFS (loop5): Ending clean mount
[  933.425998][    T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00
[  933.435123][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.476181][    T9] usb 2-1: Product: syz
[  933.481064][T22435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002]
[  933.498724][    T9] usb 2-1: Manufacturer: syz
[  933.536047][T22435] EXT4-fs (loop2): orphan cleanup on readonly fs
[  933.566241][    T9] usb 2-1: SerialNumber: syz
[  933.571453][ T6164] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  933.583127][T22435] EXT4-fs error (device loop2): ext4_clear_blocks:874: inode #11: comm syz.2.6985: attempt to clear invalid blocks 1024 len 1
[  933.626333][    T9] usb 2-1: config 0 descriptor??
[  933.650510][T22435] EXT4-fs (loop2): Remounting filesystem read-only
[  933.677489][T22435] EXT4-fs (loop2): 1 truncate cleaned up
[  933.697356][    T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  933.728625][    T9] usb 2-1: Detected FT2232HP
[  933.758826][T22446] Cannot find add_set index 2 as target
[  933.777021][T22435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  933.917649][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  933.944871][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  933.988677][    T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  934.048984][ T6154] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  934.101987][    T9] usb 2-1: USB disconnect, device number 127
[  934.135321][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  934.188285][    T9] ftdi_sio 2-1:0.0: device disconnected
[  934.432314][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6995'.
[  934.683416][T22439] loop7: detected capacity change from 0 to 32768
[  934.729697][T22439] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6987 (22439)
[  934.839300][T22439] BTRFS info (device loop7): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  934.885797][T22439] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  934.925574][T22469] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  935.014214][T22479] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7004'.
[  935.082729][T22471] loop2: detected capacity change from 0 to 4096
[  935.116123][T22471] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  935.181517][T22439] BTRFS info (device loop7): turning off barriers
[  935.198968][T22439] BTRFS info (device loop7): turning on flush-on-commit
[  935.209771][T22439] BTRFS info (device loop7): turning on sync discard
[  935.231418][T22439] BTRFS info (device loop7): enabling free space tree
[  935.257311][T22490] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  935.620311][T20066] BTRFS info (device loop7): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  936.207924][T22513] netlink: 'syz.3.7016': attribute type 5 has an invalid length.
[  936.225255][T22517] random: crng reseeded on system resumption
[  936.761934][T22532] xt_hashlimit: max too large, truncated to 1048576
[  937.523372][T22552] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  937.840687][T22534] loop2: detected capacity change from 0 to 32768
[  937.853288][T22560] netlink: 'syz.1.7037': attribute type 1 has an invalid length.
[  937.871601][T22534] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7025 (22534)
[  937.887797][T22560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7037'.
[  937.921976][T22560] netlink: 'syz.1.7037': attribute type 1 has an invalid length.
[  937.962266][T22534] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  937.974930][T22534] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  938.208820][T15651] Bluetooth: hci5: command 0x0406 tx timeout
[  938.321430][T22534] BTRFS info (device loop2): turning off barriers
[  938.353312][T22534] BTRFS info (device loop2): turning on flush-on-commit
[  938.388562][T22534] BTRFS info (device loop2): turning on sync discard
[  938.406264][T22534] BTRFS info (device loop2): enabling free space tree
[  938.676552][ T6154] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  938.835030][T22546] loop6: detected capacity change from 0 to 32768
[  938.939203][T22546] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  939.085044][T22583] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  939.127758][T22583] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  939.174465][T22546] XFS (loop6): Ending clean mount
[  939.204767][T22583] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  939.254428][T22583] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  939.318133][T22583] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  939.351121][T22583] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  939.639192][   T30] audit: type=1326 audit(2000524816.487:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22622 comm="syz.2.7054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb255f8efc9 code=0x7ffc0000
[  939.738958][T19118] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  939.748122][   T30] audit: type=1326 audit(2000524816.534:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22622 comm="syz.2.7054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb255f8efc9 code=0x7ffc0000
[  939.850497][   T30] audit: type=1326 audit(2000524816.534:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22622 comm="syz.2.7054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fb255f8efc9 code=0x7ffc0000
[  939.924403][   T30] audit: type=1326 audit(2000524816.534:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22622 comm="syz.2.7054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb255f8efc9 code=0x7ffc0000
[  940.040198][   T30] audit: type=1326 audit(2000524816.534:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22622 comm="syz.2.7054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb255f8efc9 code=0x7ffc0000
[  940.192677][T22583] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  940.238870][T22583] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  940.772043][T22653] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  941.186794][ T6249] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  941.421058][ T6249] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  941.461617][ T6249] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  941.490394][ T6249] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  941.499468][ T6249] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  941.534368][ T6249] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  941.555032][ T6263] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  941.575906][ T6249] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  941.585079][ T6249] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  941.598825][ T6249] usb 2-1: Product: syz
[  941.609130][ T6249] usb 2-1: Manufacturer: syz
[  941.655287][ T6249] cdc_wdm 2-1:1.0: skipping garbage
[  941.660581][ T6249] cdc_wdm 2-1:1.0: skipping garbage
[  941.684863][ T6249] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  941.705223][ T6249] cdc_wdm 2-1:1.0: Unknown control protocol
[  941.779802][ T6263] usb 6-1: Using ep0 maxpacket: 8
[  941.804663][ T6263] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  941.841501][ T6263] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  941.889940][ T6263] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  941.907058][ T6249] usb 2-1: USB disconnect, device number 2
[  941.924858][ T6263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  941.974846][ T6263] usb 6-1: Product: syz
[  941.994856][ T6263] usb 6-1: Manufacturer: syz
[  942.018706][ T6263] usb 6-1: SerialNumber: syz
[  942.066308][ T6263] usb 6-1: bad CDC descriptors
[  942.090927][ T6263] usbtest 6-1:1.0: couldn't get endpoints, -22
[  942.113184][ T6263] usbtest 6-1:1.0: probe with driver usbtest failed with error -22
[  942.219791][T22697] loop7: detected capacity change from 0 to 2048
[  942.369519][ T6263] usb 6-1: USB disconnect, device number 7
[  943.488751][T22719] loop6: detected capacity change from 0 to 8192
[  943.606519][T22737] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  943.659527][T22737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  943.772620][   T30] audit: type=1400 audit(2000524820.349:108): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(" pid=22740 comm="syz.2.7101"
[  944.154822][T22758] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  944.176102][T22754] i2c i2c-0: Invalid block write size 128
[  944.593576][T22770] loop7: detected capacity change from 0 to 128
[  944.692706][T22770] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  944.884285][T20066] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  945.822691][T22807] xt_l2tp: missing protocol rule (udp|l2tpip)
[  945.993435][  T911] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  946.203911][T22755] loop3: detected capacity change from 0 to 40427
[  946.213675][  T911] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  946.237414][T22755] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  946.238766][  T911] usb 2-1: config 0 has no interface number 0
[  946.270855][  T911] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  946.279735][T22815] comedi comedi4: bad chanlist[0]=0x00000101 chan=257 range length=2
[  946.292338][T22755] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  946.314083][  T911] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  946.334103][  T911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.350178][T22755] F2FS-fs (loop3): invalid crc value
[  946.396383][  T911] usb 2-1: Product: syz
[  946.415246][  T911] usb 2-1: Manufacturer: syz
[  946.419912][  T911] usb 2-1: SerialNumber: syz
[  946.467388][  T911] usb 2-1: config 0 descriptor??
[  946.760686][  T911] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[  946.781052][T22827] netlink: 'syz.7.7135': attribute type 11 has an invalid length.
[  946.784393][  T911] keyspan 2-1:0.133: unsupported endpoint type 0
[  946.822699][T22755] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  946.839782][  T911] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[  946.847744][  T911] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[  946.891207][T22755] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  946.899987][  T911] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[  946.923307][T22755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  946.938968][  T911] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  946.998200][  T911] usb 2-1: USB disconnect, device number 3
[  947.017578][  T911] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  947.058446][  T911] keyspan 2-1:0.133: device disconnected
[  947.280311][T22842] loop2: detected capacity change from 0 to 512
[  947.305656][T22839] loop6: detected capacity change from 0 to 512
[  947.382300][T22809] loop5: detected capacity change from 0 to 32768
[  947.399524][T22842] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 3: comm syz.2.7141: lblock 0 mapped to illegal pblock 3 (length 1)
[  947.457767][T22839] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  947.473613][T22842] EXT4-fs (loop2): Remounting filesystem read-only
[  947.508331][T22842] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.7141: error -117 reading directory block
[  947.522731][T22839] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  947.575866][T22842] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  947.601951][T22842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  947.603662][T22839] EXT4-fs (loop6): 1 truncate cleaned up
[  947.665518][T22809] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  947.711683][T22839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  947.776156][T22809] OCFS2: ERROR (device loop5): ocfs2_reserve_suballoc_bits: Invalid chain allocator 74
[  947.798907][T22839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  947.831049][T22809] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  947.886780][T22809] OCFS2: Returning error to the calling process.
[  947.921001][T22809] (syz.5.7130,22809,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5
[  947.969097][T22809] (syz.5.7130,22809,1):ocfs2_reserve_new_inode:1097 ERROR: status = -5
[  947.985643][ T6154] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  947.997722][T22809] (syz.5.7130,22809,1):ocfs2_reserve_new_inode:1120 ERROR: status = -5
[  948.007386][T22809] (syz.5.7130,22809,1):ocfs2_symlink:1886 ERROR: status = -5
[  948.039016][T22809] (syz.5.7130,22809,1):ocfs2_symlink:2080 ERROR: status = -5
[  948.300159][ T6164] ocfs2: Unmounting device (7,5) on (node local)
[  948.848456][ T6339] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  948.948605][T22869] loop1: detected capacity change from 0 to 4096
[  949.033769][ T6339] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  949.055475][ T6339] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.084089][T22879] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  949.094978][ T6339] usb 8-1: Product: syz
[  949.099258][ T6339] usb 8-1: Manufacturer: syz
[  949.103879][ T6339] usb 8-1: SerialNumber: syz
[  949.172625][ T6339] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  949.220186][ T6263] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  949.246593][T22869] ntfs3(loop1): ino=1e, "file1" attr_set_size
[  949.253253][T22869] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  949.800806][  T978] usb 8-1: USB disconnect, device number 4
[  950.063921][T22901] loop6: detected capacity change from 0 to 512
[  950.091644][T22901] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  950.128893][T22904] loop1: detected capacity change from 0 to 256
[  950.150439][T22901] EXT4-fs (loop6): 1 truncate cleaned up
[  950.181234][T22901] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  950.279694][T22904] FAT-fs (loop1): Directory bread(block 64) failed
[  950.302816][T22910] loop3: detected capacity change from 0 to 256
[  950.340239][T22904] FAT-fs (loop1): Directory bread(block 65) failed
[  950.356737][ T6263] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  950.367225][T22904] FAT-fs (loop1): Directory bread(block 66) failed
[  950.373825][T22904] FAT-fs (loop1): Directory bread(block 67) failed
[  950.391250][ T6263] ath9k_htc: Failed to initialize the device
[  950.416865][T22910] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xecfd5def, utbl_chksum : 0xe619d30d)
[  950.431295][  T978] usb 8-1: ath9k_htc: USB layer deinitialized
[  950.431461][T22904] FAT-fs (loop1): Directory bread(block 68) failed
[  950.503283][T22904] FAT-fs (loop1): Directory bread(block 69) failed
[  950.542689][T22904] FAT-fs (loop1): Directory bread(block 70) failed
[  950.578404][T22904] FAT-fs (loop1): Directory bread(block 71) failed
[  950.630480][T22904] FAT-fs (loop1): Directory bread(block 72) failed
[  950.656100][T22904] FAT-fs (loop1): Directory bread(block 73) failed
[  950.665818][T19118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  951.044050][T22926] xt_TCPMSS: Only works on TCP SYN packets
[  951.327797][T22934] netlink: 'syz.6.7184': attribute type 1 has an invalid length.
[  951.348910][T22934] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7184'.
[  951.370932][T22937] netlink: 'syz.3.7185': attribute type 2 has an invalid length.
[  952.139616][T22959] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  952.280725][T22965] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  952.464647][T22969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7201'.
[  952.949953][T22944] loop2: detected capacity change from 0 to 32768
[  953.020950][ T6263] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  953.063083][T22944] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  953.255543][ T6263] usb 2-1: Using ep0 maxpacket: 8
[  953.287861][ T6263] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  953.316182][ T6263] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  953.347665][T22998] loop3: detected capacity change from 0 to 8
[  953.355093][ T6154] ocfs2: Unmounting device (7,2) on (node local)
[  953.362435][ T6263] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  953.402972][ T6263] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  953.414250][ T6263] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  953.537153][T22998] SQUASHFS error: Failed to read block 0x4de: -5
[  953.546130][ T6263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.574078][T22998] SQUASHFS error: Failed to read block 0x4de: -5
[  953.600733][ T6263] hub 2-1:1.0: bad descriptor, ignoring hub
[  953.636446][ T6263] hub 2-1:1.0: probe with driver hub failed with error -5
[  953.644889][T22998] SQUASHFS error: Failed to read block 0x4de: -5
[  953.664290][ T6263] cdc_wdm 2-1:1.0: skipping garbage
[  953.681172][T22998] SQUASHFS error: Failed to read block 0x4de: -5
[  953.691728][ T6263] cdc_wdm 2-1:1.0: skipping garbage
[  953.722760][ T6263] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  953.730572][T22998] SQUASHFS error: Failed to read block 0x4de: -5
[  953.757718][ T6263] cdc_wdm 2-1:1.0: Unknown control protocol
[  953.780940][   T30] audit: type=1800 audit(2000524829.717:109): pid=22998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7213" name="file1" dev="loop3" ino=5 res=0 errno=0
[  953.902778][T22978] cdc_wdm 2-1:1.0: Error submitting int urb - -90
[  953.971674][T23008] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  954.003811][T23008] /dev/nullb0: Can't open blockdev
[  954.101880][ T6263] usb 2-1: USB disconnect, device number 4
[  954.461584][T23022] tmpfs: Bad value for 'mpol'
[  954.578678][ T6263] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  954.586496][T23002] loop7: detected capacity change from 0 to 32768
[  954.819256][ T6263] usb 7-1: config 0 has an invalid interface number: 127 but max is 0
[  954.863614][ T6263] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  954.875892][T23032] tmpfs: Bad value for 'nr_inodes'
[  954.917656][ T6263] usb 7-1: config 0 has no interface number 1
[  954.937676][ T6263] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  954.955576][ T6339] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  954.986828][ T6263] usb 7-1: too many endpoints for config 0 interface 127 altsetting 107: 62, using maximum allowed: 30
[  955.031907][ T6263] usb 7-1: config 0 interface 127 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 62
[  955.094618][ T6263] usb 7-1: config 0 interface 127 has no altsetting 0
[  955.154375][ T6263] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=c5.2d
[  955.169431][ T6339] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  955.179937][ T6339] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[  955.199961][ T6263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.227320][T23041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7233'.
[  955.230564][ T6263] usb 7-1: Product: syz
[  955.254904][ T6339] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  955.276208][ T6263] usb 7-1: Manufacturer: syz
[  955.280904][ T6263] usb 7-1: SerialNumber: syz
[  955.308276][ T6339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.316391][ T6339] usb 3-1: Product: syz
[  955.325703][ T6263] usb 7-1: config 0 descriptor??
[  955.371314][ T6339] usb 3-1: Manufacturer: syz
[  955.383280][ T6339] usb 3-1: SerialNumber: syz
[  955.487210][ T6339] usb 3-1: config 0 descriptor??
[  955.537349][ T6339] gspca_main: sunplus-2.14.0 probing 055f:c630
[  955.631836][ T6263] snd-usb-6fire 7-1:0.0: unable to receive device firmware state.
[  955.672771][ T6263] snd-usb-6fire 7-1:0.0: probe with driver snd-usb-6fire failed with error -71
[  955.747137][ T6263] usb 7-1: USB disconnect, device number 7
[  955.875697][T23054] netlink: 'syz.7.7241': attribute type 21 has an invalid length.
[  955.925612][T23054] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7241'.
[  955.959105][T23054] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7241'.
[  956.003297][ T6339] usb 3-1: USB disconnect, device number 5
[  956.828892][T23084] netlink: 260 bytes leftover after parsing attributes in process `syz.3.7254'.
[  957.170291][  T911] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  957.257853][T23097] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7262'.
[  957.362313][  T911] usb 3-1: Using ep0 maxpacket: 8
[  957.387511][  T911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  957.416804][T23103] loop1: detected capacity change from 0 to 256
[  957.434816][  T911] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  957.463898][  T911] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  957.483639][  T911] usb 3-1: Product: syz
[  957.494482][  T911] usb 3-1: Manufacturer: syz
[  957.507202][  T911] usb 3-1: SerialNumber: syz
[  957.515817][T23103] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  957.786922][  T911] usb 3-1: Invalid connection information received from device
[  957.896563][ T6249] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  958.065527][  T911] usb 3-1: USB disconnect, device number 6
[  958.101898][ T6249] usb 8-1: config 0 has an invalid interface number: 52 but max is 0
[  958.121064][ T6249] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  958.148556][ T6249] usb 8-1: config 0 has no interface number 0
[  958.165491][ T6249] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  958.185773][ T6249] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  958.227757][ T6249] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  958.260190][ T6249] usb 8-1: config 0 interface 52 has no altsetting 0
[  958.280552][T23119] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7273'.
[  958.307482][ T6249] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  958.336205][ T6249] usb 8-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34
[  958.344688][ T6249] usb 8-1: Product: syz
[  958.344837][T23089] loop6: detected capacity change from 0 to 32768
[  958.355914][ T6249] usb 8-1: SerialNumber: syz
[  958.375934][ T6249] usb 8-1: config 0 descriptor??
[  958.627912][ T6249] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  958.666783][ T6249] synaptics_usb 8-1:0.52: probe with driver synaptics_usb failed with error -5
[  958.703593][T23125] netlink: 'syz.1.7276': attribute type 11 has an invalid length.
[  958.763056][T23125] netlink: 'syz.1.7276': attribute type 11 has an invalid length.
[  958.771094][T23125] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7276'.
[  958.847445][ T6249] usb 8-1: USB disconnect, device number 5
[  959.035515][T23110] loop3: detected capacity change from 0 to 32768
[  959.122084][T23110] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  959.263383][T23110] XFS (loop3): Ending clean mount
[  959.494683][ T6161] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  959.789662][ T6339] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  960.014280][ T6339] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  960.023468][ T6339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.111778][ T6339] usb 3-1: config 0 descriptor??
[  960.149378][ T6339] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  960.301432][T23169] loop1: detected capacity change from 0 to 164
[  960.584114][ T6339] gp8psk: usb in 138 operation failed.
[  960.626893][ T6339] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  960.660681][ T6339] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  960.690340][ T6339] usb 3-1: USB disconnect, device number 7
[  960.783762][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7298'.
[  961.369708][T23198] loop1: detected capacity change from 0 to 736
[  961.498714][T23195] nvme_fabrics: missing parameter 'transport=%s'
[  961.525420][T23195] nvme_fabrics: missing parameter 'nqn=%s'
[  961.930390][T23177] loop3: detected capacity change from 0 to 32768
[  961.983260][T23177] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7297 (23177)
[  962.022486][T23177] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  962.067948][T23177] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  962.226563][T23177] BTRFS info (device loop3): turning off barriers
[  962.303059][T23177] BTRFS info (device loop3): enabling free space tree
[  962.340692][T23177] BTRFS info (device loop3): use zlib compression, level 3
[  962.860944][ T6161] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  962.894129][T23254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7327'.
[  963.092822][T23262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7332'.
[  964.010378][T23290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7345'.
[  964.154533][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7348'.
[  964.190634][T23297] loop5: detected capacity change from 0 to 16
[  964.212936][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7347'.
[  964.283482][T23297] erofs (device loop5): mounted with root inode @ nid 36.
[  964.566437][T23306] loop6: detected capacity change from 0 to 8
[  964.605891][T23306] SQUASHFS error: Failed to read block 0x4de: -5
[  964.612445][T23306] SQUASHFS error: Failed to read block 0x4de: -5
[  964.681093][T23306] SQUASHFS error: Failed to read block 0x4de: -5
[  964.687686][T23306] SQUASHFS error: Failed to read block 0x4de: -5
[  964.712932][T23310] loop5: detected capacity change from 0 to 1024
[  964.752814][T23306] SQUASHFS error: Failed to read block 0x4de: -5
[  964.765859][   T30] audit: type=1800 audit(2000524839.984:110): pid=23306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7353" name="file1" dev="loop6" ino=5 res=0 errno=0
[  964.998231][   T43] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  965.006841][   T13] hfsplus: b-tree write err: -5, ino 4
[  965.197863][   T43] usb 8-1: config 0 has an invalid interface number: 69 but max is 0
[  965.254134][   T43] usb 8-1: config 0 has no interface number 0
[  965.286949][   T43] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  965.296997][   T43] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  965.385311][   T43] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  965.411046][   T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.469006][T23330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7364'.
[  965.478369][   T43] usb 8-1: Product: syz
[  965.491610][   T43] usb 8-1: Manufacturer: syz
[  965.496276][   T43] usb 8-1: SerialNumber: syz
[  965.534123][   T43] usb 8-1: config 0 descriptor??
[  965.551009][T23313] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  965.563256][   T43] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  965.673688][   T43] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  965.889762][T23346] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7373'.
[  966.137261][   T43] usb 8-1: USB disconnect, device number 6
[  966.166165][   T43] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  966.179520][   T43] cyberjack 8-1:0.69: device disconnected
[  966.653307][T23368] loop5: detected capacity change from 0 to 512
[  966.707678][T23368] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  966.821161][T23368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  966.916209][   T43] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  966.924162][T23368] ext4 filesystem being mounted at /1192/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  967.009766][T23368] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  967.052345][T23368] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  967.085445][T23368] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.7385: Failed to acquire dquot type 0
[  967.120379][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  967.139074][   T43] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  967.179896][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.271756][   T43] usb 4-1: config 0 descriptor??
[  967.310625][   T43] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22
[  967.330912][T23389] loop2: detected capacity change from 0 to 1024
[  967.348077][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  967.583122][   T43] usb 4-1: USB disconnect, device number 102
[  967.591036][   T12] hfsplus: b-tree write err: -5, ino 4
[  967.817582][T23400] loop6: detected capacity change from 0 to 2048
[  967.896920][T23400] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  968.219037][T23414] loop7: detected capacity change from 0 to 1024
[  968.730801][ T6263] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  968.937610][ T6263] usb 4-1: Using ep0 maxpacket: 32
[  968.960918][ T6263] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  968.974152][T23439] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7417'.
[  968.985131][ T6263] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  969.054035][ T6263] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  969.072992][ T6263] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  969.100296][ T6263] usb 4-1: Product: syz
[  969.107543][ T6263] usb 4-1: Manufacturer: syz
[  969.137660][ T6263] usb 4-1: SerialNumber: syz
[  969.155932][ T6263] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input54
[  969.157335][T23443] usb usb8: usbfs: process 23443 (syz.7.7418) did not claim interface 0 before use
[  969.383225][ T6263] usb 4-1: USB disconnect, device number 103
[  969.574632][T23453] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7423'.
[  969.600934][ T6263] appletouch 4-1:1.0: input: appletouch disconnected
[  969.814919][T23420] loop2: detected capacity change from 0 to 40427
[  970.046265][   T43] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  970.189727][T23420] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  970.233105][T23420] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  970.250929][   T43] usb 6-1: Using ep0 maxpacket: 16
[  970.265603][   T43] usb 6-1: config 0 has an invalid interface number: 126 but max is 0
[  970.300495][   T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  970.349027][   T43] usb 6-1: config 0 has no interface number 0
[  970.355201][   T43] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  970.408075][   T43] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  970.439601][   T43] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  970.506499][   T43] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  970.559603][   T43] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  970.599735][T23482] loop3: detected capacity change from 0 to 1024
[  970.602223][   T43] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  970.635919][T23482] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  970.683511][   T43] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  970.703496][T23482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  970.703687][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.732278][   T43] usb 6-1: config 0 descriptor??
[  970.738278][T23457] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  970.781358][   T43] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  970.917085][T23482] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.7436: missing EA_INODE flag
[  970.994123][T23482] EXT4-fs (loop3): Remounting filesystem read-only
[  971.065767][ T9725] udevd[9725]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  971.108931][   T43] snd-usb-audio 6-1:0.126: probe with driver snd-usb-audio failed with error -12
[  971.204008][   T43] usb 6-1: USB disconnect, device number 8
[  971.206106][ T6161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  971.832542][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  971.948832][T23517] netlink: 'syz.5.7452': attribute type 2 has an invalid length.
[  971.993031][    T9] usb 2-1: Using ep0 maxpacket: 8
[  971.996405][T23519] loop6: detected capacity change from 0 to 1024
[  972.003143][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  972.019184][    T9] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  972.041131][    T9] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  972.082391][    T9] usb 2-1: Product: syz
[  972.097491][    T9] usb 2-1: Manufacturer: syz
[  972.108276][    T9] usb 2-1: SerialNumber: syz
[  972.116332][T23519] hfsplus: catalog searching failed
[  972.369785][    T9] usb 2-1: Invalid connection information received from device
[  972.664875][    T9] usb 2-1: USB disconnect, device number 5
[  973.024285][T23543] loop6: detected capacity change from 0 to 256
[  973.257992][T23543] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF
[  973.276166][T23543] FAT-fs (loop6): Filesystem has been set read-only
[  973.391524][T23547] xt_hashlimit: max too large, truncated to 1048576
[  973.581624][T23521] infiniband syz2: set active
[  973.618623][T23521] infiniband syz2: added bond0
[  973.641615][T23521] syz2: rxe_create_cq: returned err = -12
[  973.671354][T23521] infiniband syz2: Couldn't create ib_mad CQ
[  973.703442][T23521] infiniband syz2: Couldn't open port 1
[  973.821702][    T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  973.868978][T23521] RDS/IB: syz2: added
[  973.873060][T23521] smc: adding ib device syz2 with port count 1
[  973.906955][T23521] smc:    ib device syz2 port 1 has no pnetid
[  973.938517][T23563] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  974.033073][    T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  974.084169][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4
[  974.110407][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  974.149108][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  974.174611][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.202942][    T9] usb 2-1: Product: syz
[  974.228842][    T9] usb 2-1: Manufacturer: syz
[  974.234229][    T9] usb 2-1: SerialNumber: syz
[  974.236946][T23571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  974.269910][T23575] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  974.329915][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  974.338789][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  974.496170][    T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  974.507996][    T9] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  974.529512][    T9] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 255 bytes
[  974.595420][T23582] loop5: detected capacity change from 0 to 1024
[  974.838428][    T9] usb 2-1: USB disconnect, device number 6
[  974.945228][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  975.084134][   T36] hfsplus: b-tree write err: -5, ino 8
[  975.500200][T23603] loop5: detected capacity change from 0 to 512
[  975.522475][    T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[  975.594699][T23603] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  975.650593][T23603] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  975.691381][T23603] System zones: 0-1, 15-15, 18-18, 34-34
[  975.722997][T23603] EXT4-fs (loop5): orphan cleanup on readonly fs
[  975.727470][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  975.740466][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  975.752283][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.775197][T23603] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  975.799449][    T9] usb 4-1: config 0 descriptor??
[  975.805107][T23603] EXT4-fs warning (device loop5): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  975.825770][    T9] smsusb:smsusb_probe: board id=8, interface number 0
[  975.843975][T23603] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  975.850799][    T9] smsusb:smsusb_probe: Device initialized with return code -19
[  975.930705][T23603] EXT4-fs (loop5): 1 truncate cleaned up
[  975.938750][T23603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  976.041873][T23603] fscrypt (loop5, inode 16): Error -61 getting encryption context
[  976.089497][    T9] usb 4-1: USB disconnect, device number 104
[  976.196661][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  976.684282][T23626] block device autoloading is deprecated and will be removed.
[  977.314043][T23649] loop5: detected capacity change from 0 to 256
[  977.464440][T23649] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  977.566060][T23649] exFAT-fs (loop5): valid_size(150994954) is greater than size(10)
[  977.642882][T23659] netlink: 'syz.6.7521': attribute type 1 has an invalid length.
[  977.686169][T23659] netlink: 228 bytes leftover after parsing attributes in process `syz.6.7521'.
[  978.896120][    T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  979.123480][    T9] usb 7-1: config 0 has an invalid interface number: 176 but max is 2
[  979.150555][    T9] usb 7-1: config 0 has no interface number 1
[  979.178980][    T9] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  979.216614][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.241230][T23718] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7536'.
[  979.252134][    T9] usb 7-1: config 0 descriptor??
[  979.545388][    T9] usb 7-1: Could not set interface, error -71
[  979.629946][    T9] usb 7-1: USB disconnect, device number 8
[  979.633014][T23729] netlink: 'syz.5.7542': attribute type 8 has an invalid length.
[  980.001792][T23739] netlink: 'syz.5.7547': attribute type 10 has an invalid length.
[  980.053068][T23739] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7547'.
[  980.068873][ T6236] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[  980.094555][T23739] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  980.102958][T23739] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  980.110704][T23739] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  980.138048][T23743] loop1: detected capacity change from 0 to 256
[  980.225112][T23743] FAT-fs (loop1): Directory bread(block 64) failed
[  980.242866][T23743] FAT-fs (loop1): Directory bread(block 65) failed
[  980.268790][T23743] FAT-fs (loop1): Directory bread(block 66) failed
[  980.280049][ T6236] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  980.297535][ T6236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.307344][T23743] FAT-fs (loop1): Directory bread(block 67) failed
[  980.346658][ T6236] usb 4-1: Product: syz
[  980.351143][T23743] FAT-fs (loop1): Directory bread(block 68) failed
[  980.357802][ T6236] usb 4-1: Manufacturer: syz
[  980.378702][ T6236] usb 4-1: SerialNumber: syz
[  980.384323][T23743] FAT-fs (loop1): Directory bread(block 69) failed
[  980.405004][ T6236] r8152-cfgselector 4-1: Unknown version 0x0000
[  980.421025][T23743] FAT-fs (loop1): Directory bread(block 70) failed
[  980.430289][ T6236] r8152-cfgselector 4-1: config 0 descriptor??
[  980.449303][T23743] FAT-fs (loop1): Directory bread(block 71) failed
[  980.485275][T23743] FAT-fs (loop1): Directory bread(block 72) failed
[  980.502912][T23743] FAT-fs (loop1): Directory bread(block 73) failed
[  980.978013][   T43] r8152-cfgselector 4-1: USB disconnect, device number 105
[  981.140996][T23763] loop5: detected capacity change from 0 to 512
[  981.252754][T23763] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.7559: bg 0: block 288: padding at end of block bitmap is not set
[  981.321619][T23763] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  981.374860][T23763] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #13: comm syz.5.7559: attempt to clear invalid blocks 1024 len 1
[  981.432190][T23763] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.7559: invalid indirect mapped block 1819239214 (level 0)
[  981.502448][T23763] EXT4-fs (loop5): 1 truncate cleaned up
[  981.523339][T23763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  981.865825][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  982.002885][T23789] loop2: detected capacity change from 0 to 16
[  982.048540][T23789] erofs (device loop2): mounted with root inode @ nid 36.
[  982.142549][   T43] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  982.358539][   T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  982.410040][   T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  982.446925][   T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  982.465962][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  982.495401][   T43] usb 2-1: SerialNumber: syz
[  982.551598][   T43] usb 2-1: 0:2 : does not exist
[  982.748613][T23813] netlink: 'syz.2.7582': attribute type 1 has an invalid length.
[  983.064257][   T43] usb 2-1: USB disconnect, device number 7
[  983.626569][T23839] loop5: detected capacity change from 0 to 256
[  983.649340][T23839] exfat: Deprecated parameter 'namecase'
[  983.694069][T23841] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  983.696455][T23839] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xa6b7a7ad, utbl_chksum : 0xe619d30d)
[  983.934177][T23848] loop7: detected capacity change from 0 to 256
[  984.101346][T23853] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7603'.
[  984.784492][  T978] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  984.852305][T23873] loop6: detected capacity change from 0 to 1764
[  984.928984][T23873] iso9660: Corrupted directory entry in block 2 of inode 1920
[  985.031030][  T978] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  985.039361][  T978] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  985.094606][  T978] usb 6-1: config 220 has no interface number 2
[  985.101466][  T978] usb 6-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF
[  985.141094][  T978] usb 6-1: config 220 interface 1 altsetting 5 endpoint 0xF has invalid wMaxPacketSize 0
[  985.190852][  T978] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  985.244581][  T978] usb 6-1: config 220 interface 0 has no altsetting 0
[  985.251432][  T978] usb 6-1: config 220 interface 76 has no altsetting 0
[  985.300504][  T978] usb 6-1: config 220 interface 1 has no altsetting 0
[  985.332272][  T978] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  985.362638][  T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.392409][  T978] usb 6-1: Product: syz
[  985.406089][  T978] usb 6-1: Manufacturer: syz
[  985.413982][  T978] usb 6-1: SerialNumber: syz
[  985.686265][  T978] usb 6-1: selecting invalid altsetting 0
[  985.717387][  T978] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  985.736448][  T978] uvcvideo 6-1:220.0: No valid video chain found.
[  985.773786][  T978] usb 6-1: selecting invalid altsetting 0
[  985.803442][  T978] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  985.843513][  T978] usb 6-1: USB disconnect, device number 9
[  985.996602][T23903] bond3 (unregistering): Released all slaves
[  986.056626][T23909] loop6: detected capacity change from 0 to 2048
[  986.060282][T23912] loop7: detected capacity change from 0 to 16
[  986.105452][T23909] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  986.199631][T23909] syz.6.7630: attempt to access beyond end of device
[  986.199631][T23909] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  986.215379][T23913] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  986.313739][T23909] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=32, inode=11, rec_len=151, name_len=6
[  986.452245][T23909] Remounting filesystem read-only
[  987.039789][T23935] netlink: 'syz.3.7643': attribute type 9 has an invalid length.
[  987.789322][T23960] loop6: detected capacity change from 0 to 64
[  987.819800][T23962] loop2: detected capacity change from 0 to 256
[  988.009926][T23967] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  988.062039][T23962] FAT-fs (loop2): Directory bread(block 64) failed
[  988.123664][T23962] FAT-fs (loop2): Directory bread(block 65) failed
[  988.155671][T23962] FAT-fs (loop2): Directory bread(block 66) failed
[  988.162236][T23962] FAT-fs (loop2): Directory bread(block 67) failed
[  988.202686][T23962] FAT-fs (loop2): Directory bread(block 68) failed
[  988.217492][T23962] FAT-fs (loop2): Directory bread(block 69) failed
[  988.235089][T23962] FAT-fs (loop2): Directory bread(block 70) failed
[  988.249435][T23962] FAT-fs (loop2): Directory bread(block 71) failed
[  988.279955][T23962] FAT-fs (loop2): Directory bread(block 72) failed
[  988.320310][T23962] FAT-fs (loop2): Directory bread(block 73) failed
[  988.335226][  T978] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  988.506209][  T978] usb 4-1: Using ep0 maxpacket: 16
[  988.549337][  T978] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  988.570358][  T978] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  988.609695][  T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  988.645482][  T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  988.668981][  T978] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  988.712245][  T978] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  988.721986][  T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  988.730046][  T978] usb 4-1: Product: syz
[  988.745742][  T978] usb 4-1: Manufacturer: syz
[  988.750410][  T978] usb 4-1: SerialNumber: syz
[  988.791201][  T978] usb 4-1: config 0 descriptor??
[  988.891722][  T911] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  989.061074][  T978] appledisplay: Apple Cinema Display connected
[  989.100697][  T911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  989.157503][  T911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  989.190699][  T911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  989.220853][  T911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  989.236198][  T911] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  989.266115][  T911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.274303][  T911] usb 7-1: Product: syz
[  989.331856][  T911] usb 7-1: Manufacturer: syz
[  989.336760][  T911] usb 7-1: SerialNumber: syz
[  989.399832][  T911] usb 7-1: config 0 descriptor??
[  989.499998][  T978] usb 4-1: USB disconnect, device number 106
[  989.506130][    C1] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -19
[  989.553748][  T978] appledisplay: Apple Cinema Display disconnected
[  989.666767][T23977] loop5: detected capacity change from 0 to 32768
[  989.699037][  T911] adutux 7-1:0.0: Could not retrieve serial number
[  989.715517][  T911] adutux 7-1:0.0: probe with driver adutux failed with error -5
[  990.007455][ T6339] usb 7-1: USB disconnect, device number 9
[  990.312675][T24016] loop2: detected capacity change from 0 to 8
[  990.375316][T24017] loop5: detected capacity change from 0 to 512
[  990.450505][T24017] EXT4-fs (loop5): orphan cleanup on readonly fs
[  990.506140][ T6339] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  990.515722][T24017] EXT4-fs error (device loop5): ext4_quota_enable:7136: inode #15: comm syz.5.7683: iget: bad i_size value: 360287970189639690
[  990.530642][T24017] EXT4-fs error (device loop5): ext4_quota_enable:7138: comm syz.5.7683: Bad quota inode: 15, type: 2
[  990.556321][T24017] EXT4-fs warning (device loop5): ext4_enable_quotas:7176: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix.
[  990.641215][T24017] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  990.703730][T24017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  990.747960][ T6339] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  990.775824][ T6339] usb 2-1: config 1 has no interface number 0
[  990.784318][ T6339] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  990.842089][ T6339] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  990.885670][ T6339] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  990.944603][ T6339] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  990.987590][ T6339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.043013][ T6339] usb 2-1: Product: syz
[  991.073082][ T6339] usb 2-1: Manufacturer: syz
[  991.077746][ T6339] usb 2-1: SerialNumber: syz
[  991.100704][ T6164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  991.112929][T24013] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  991.360476][T24013] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  991.402394][ T6339] usb 2-1: No status endpoint found
[  991.724877][ T6339] usb 2-1: USB disconnect, device number 8
[  992.113975][ T6236] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  992.302955][ T6236] usb 8-1: Using ep0 maxpacket: 8
[  992.318337][ T6236] usb 8-1: config 2 has an invalid interface number: 31 but max is 0
[  992.349988][ T6236] usb 8-1: config 2 has no interface number 0
[  992.356186][ T6236] usb 8-1: config 2 interface 31 has no altsetting 0
[  992.421631][T24073] netlink: 'syz.2.7709': attribute type 1 has an invalid length.
[  992.423601][ T6236] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  992.476217][ T6236] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  992.507392][ T6236] usb 8-1: Product: syz
[  992.511620][ T6236] usb 8-1: Manufacturer: syz
[  992.517505][T24071] loop6: detected capacity change from 0 to 1764
[  992.545689][ T6236] usb 8-1: SerialNumber: syz
[  992.912622][  T978] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  993.059938][ T6236] ch9200 8-1:2.31: probe with driver ch9200 failed with error -22
[  993.103853][ T6236] usb 8-1: USB disconnect, device number 7
[  993.126470][  T978] usb 6-1: Using ep0 maxpacket: 32
[  993.171166][  T978] usb 6-1: config 0 interface 0 has no altsetting 0
[  993.213624][  T978] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  993.235144][  T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  993.243287][  T978] usb 6-1: Product: syz
[  993.267353][  T978] usb 6-1: Manufacturer: syz
[  993.279104][  T978] usb 6-1: SerialNumber: syz
[  993.284021][T24094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7722'.
[  993.317223][T24094] netlink: 15 bytes leftover after parsing attributes in process `syz.1.7722'.
[  993.353752][  T978] usb 6-1: config 0 descriptor??
[  993.506265][T24100] loop6: detected capacity change from 0 to 2048
[  993.551446][T24101] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  993.633606][T24100] NILFS (loop6): error -2 truncating bmap (ino=16)
[  993.844049][  T978] gs_usb 6-1:0.0: Couldn't get device config: (err=-71)
[  993.872773][  T978] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71
[  993.962754][  T978] usb 6-1: USB disconnect, device number 10
[  994.099076][T24111] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7729'.
[  994.224683][T24115] loop2: detected capacity change from 0 to 1024
[  994.308278][T24115] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  994.373198][T24121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7735'.
[  994.408167][T24115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  994.489272][T24115] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.7731: missing EA_INODE flag
[  994.565313][T24115] EXT4-fs (loop2): Remounting filesystem read-only
[  994.718519][ T6154] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  994.732251][ T6236] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  994.785280][  T978] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  994.912597][ T6236] usb 2-1: Using ep0 maxpacket: 16
[  994.921029][ T6236] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  994.942843][ T6236] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  994.983757][ T6236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  995.002787][  T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  995.023795][ T6236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  995.040977][  T978] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  995.050131][  T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.058335][ T6236] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  995.061505][ T6236] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  995.139359][ T6236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.149207][  T978] usb 7-1: config 0 descriptor??
[  995.163056][ T6236] usb 2-1: Product: syz
[  995.167426][ T6236] usb 2-1: Manufacturer: syz
[  995.189553][ T6236] usb 2-1: SerialNumber: syz
[  995.216171][ T6236] usb 2-1: config 0 descriptor??
[  995.404368][  T978] ath6kl: Failed to submit usb control message: -71
[  995.411307][  T978] ath6kl: unable to send the bmi data to the device: -71
[  995.445566][  T978] ath6kl: Unable to send get target info: -71
[  995.517748][  T978] ath6kl: Failed to init ath6kl core: -71
[  995.530627][  T978] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[  995.537771][ T6236] appledisplay: Apple Cinema Display connected
[  995.639703][  T978] usb 7-1: USB disconnect, device number 10
[  995.974367][T24158] bond2 (unregistering): Released all slaves
[  996.013466][ T6249] usb 2-1: USB disconnect, device number 9
[  996.013604][    C0] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19
[  996.029980][ T6249] appledisplay: Apple Cinema Display disconnected
[  996.075325][T24163] bond0: entered promiscuous mode
[  996.083043][T24163] bond_slave_0: entered promiscuous mode
[  996.091778][T24163] bond_slave_1: entered promiscuous mode
[  996.319832][  T978] usb 4-1: new full-speed USB device number 107 using dummy_hcd
[  996.429942][T24171] loop7: detected capacity change from 0 to 2048
[  996.552185][  T978] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  996.595040][  T978] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  996.630502][  T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  996.673708][  T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  996.716215][  T978] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  996.794894][  T978] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  996.825904][  T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.859310][  T978] usb 4-1: Product: syz
[  996.863552][  T978] usb 4-1: Manufacturer: syz
[  996.893496][  T978] usb 4-1: SerialNumber: syz
[  996.894069][T24189] xt_recent: Unsupported userspace flags (000000b1)
[  996.967787][  T978] usb 4-1: config 0 descriptor??
[  997.045785][  T978] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input55
[  997.264829][T24198] loop6: detected capacity change from 0 to 1024
[  997.313536][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7771'.
[  997.416561][T24198] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  997.592719][ T6339] usb 4-1: USB disconnect, device number 107
[  997.616950][T24198] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  997.762435][T24207] bond2 (unregistering): Released all slaves
[  997.823298][T19118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  998.606945][T24241] loop2: detected capacity change from 0 to 1024
[  998.657031][T24241] hfsplus: xattr searching failed
[  998.862824][T23696] hfsplus: b-tree write err: -5, ino 4
[  999.056962][T24253] loop7: detected capacity change from 0 to 1024
[  999.117186][T24253] EXT4-fs: Ignoring removed nomblk_io_submit option
[  999.157435][T24253] EXT4-fs (loop7): stripe (2834) is not aligned with cluster size (16), stripe is disabled
[  999.235890][T24253] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c018, mo2=0102]
[  999.259032][T24262] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7799'.
[  999.278688][T24253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  999.444746][T24253] EXT4-fs error (device loop7): __ext4_remount:6748: comm syz.7.7795: Abort forced by user
[  999.485549][T24253] EXT4-fs (loop7): Remounting filesystem read-only
[  999.521230][T24253] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000.
[  999.665201][T24273] loop3: detected capacity change from 0 to 64
[  999.779553][T20066] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1000.377992][T24289] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1000.384574][T24289] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1000.502495][T24257] loop2: detected capacity change from 0 to 32768
[ 1000.530958][T24257] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7796 (24257)
[ 1000.633301][T24257] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1000.664409][T24257] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1000.737772][T24308] Cannot find add_set index 0 as target
[ 1000.892785][T24257] BTRFS info (device loop2): enabling ssd optimizations
[ 1000.900316][T24257] BTRFS info (device loop2): turning on async discard
[ 1000.928612][T24257] BTRFS info (device loop2): enabling free space tree
[ 1001.273825][ T6154] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1001.381088][T24323] loop1: detected capacity change from 0 to 8192
[ 1001.458009][ T6339] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1001.543082][T24323] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000ff00)
[ 1001.588287][T24323] FAT-fs (loop1): Filesystem has been set read-only
[ 1001.672517][ T6339] usb 7-1: Using ep0 maxpacket: 16
[ 1001.674573][ T6339] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1001.674616][ T6339] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[ 1001.674659][ T6339] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[ 1001.674706][ T6339] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[ 1001.674752][ T6339] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1001.677457][ T6339] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1001.677504][ T6339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.677539][ T6339] usb 7-1: Product: syz
[ 1001.677565][ T6339] usb 7-1: Manufacturer: syz
[ 1001.677592][ T6339] usb 7-1: SerialNumber: syz
[ 1001.684941][  T978] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1001.717808][ T6339] usb 7-1: config 0 descriptor??
[ 1001.877118][  T978] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1002.036220][ T6339] appledisplay: Apple Cinema Display connected
[ 1002.302288][   T43] usb 7-1: USB disconnect, device number 11
[ 1002.302283][    C0] usb 7-1: appledisplay_complete - usb_submit_urb failed with result -19
[ 1002.318609][T24347] loop1: detected capacity change from 0 to 164
[ 1002.370771][   T43] appledisplay: Apple Cinema Display disconnected
[ 1002.378980][T24347] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[ 1002.408607][T24347] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[ 1002.415161][T24351] xt_hashlimit: overflow, rate too high: 0
[ 1002.435802][T24347] Symlink component flag not implemented
[ 1002.437529][  T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.441652][T24347] Symlink component flag not implemented
[ 1002.456735][T24347] Symlink component flag not implemented (7)
[ 1002.462862][T24347] Symlink component flag not implemented (116)
[ 1002.527116][  T978] usb 4-1: Product: syz
[ 1002.547517][  T978] usb 4-1: Manufacturer: syz
[ 1002.557573][T24348] bond2 (unregistering): Released all slaves
[ 1002.574006][  T978] usb 4-1: SerialNumber: syz
[ 1002.636381][  T978] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1002.699214][  T911] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1003.151228][T24359] loop7: detected capacity change from 0 to 512
[ 1003.304046][T24362] loop5: detected capacity change from 0 to 2048
[ 1003.321872][ T6263] usb 4-1: USB disconnect, device number 108
[ 1003.368243][T24362] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[ 1003.443568][T24362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1003.579460][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1003.819839][    T9] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[ 1003.835407][  T911] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1003.836152][    T9] usb 2-1: config 0 has no interface number 0
[ 1003.851053][    T9] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1003.864285][  T911] ath9k_htc: Failed to initialize the device
[ 1003.872868][ T6263] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1003.922658][T24377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7846'.
[ 1003.939341][T24377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7846'.
[ 1003.957757][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1003.987721][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1004.005667][T24385] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1004.013522][    T9] usb 2-1: Product: syz
[ 1004.024327][    T9] usb 2-1: Manufacturer: syz
[ 1004.055735][    T9] usb 2-1: SerialNumber: syz
[ 1004.086347][    T9] usb 2-1: config 0 descriptor??
[ 1004.159727][    T9] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[ 1004.202890][T24387] QAT: failed to copy from user cfg_data.
[ 1004.358549][T24394] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7852'.
[ 1004.385715][    C0] yurex 2-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[ 1004.613756][T24402] loop7: detected capacity change from 0 to 64
[ 1004.621829][ T6263] usb 2-1: USB disconnect, device number 10
[ 1004.652951][ T6263] yurex 2-1:0.50: USB YUREX #0 now disconnected
[ 1004.967685][    T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1005.143111][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1005.192703][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1005.224594][    T9] usb 6-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=58.ab
[ 1005.238703][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.261974][    T9] usb 6-1: Product: syz
[ 1005.271542][    T9] usb 6-1: Manufacturer: syz
[ 1005.283400][    T9] usb 6-1: SerialNumber: syz
[ 1005.292932][T24423] loop6: detected capacity change from 0 to 4096
[ 1005.304892][    T9] usb 6-1: config 0 descriptor??
[ 1005.407094][T24425] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1005.456974][T24423] NILFS error (device loop6): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[ 1005.555615][T24423] Remounting filesystem read-only
[ 1005.640281][ T6263] usb 6-1: USB disconnect, device number 11
[ 1006.085488][T24438] loop2: detected capacity change from 0 to 2048
[ 1006.118430][T24438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1006.654577][T24416] loop3: detected capacity change from 0 to 32768
[ 1006.722821][T24416] 
[ 1006.722821][T24416]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1006.722821][T24416] 
[ 1006.775547][T24416] 
[ 1006.775547][T24416]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1006.775547][T24416] 
[ 1006.853666][T24416] 
[ 1006.853666][T24416]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1006.853666][T24416] 
[ 1007.245938][T24463] loop2: detected capacity change from 0 to 512
[ 1007.323220][T24436] loop6: detected capacity change from 0 to 32768
[ 1007.361450][T24436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7873 (24436)
[ 1007.406926][T24463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[ 1007.502403][T24436] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1007.524637][T24463] ext4 filesystem being mounted at /1280/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1007.538281][T24436] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[ 1007.649820][T24463] 
[ 1007.652187][T24463] ======================================================
[ 1007.659202][T24463] WARNING: possible circular locking dependency detected
[ 1007.666236][T24463] syzkaller #0 Not tainted
[ 1007.670653][T24463] ------------------------------------------------------
[ 1007.677756][T24463] syz.2.7885/24463 is trying to acquire lock:
[ 1007.683858][T24463] ffff888055e945e8 (&dquot->dq_lock){+.+.}-{4:4}, at: dqget+0x5f1/0x1180
[ 1007.692376][T24463] 
[ 1007.692376][T24463] but task is already holding lock:
[ 1007.699728][T24463] ffff88804c19f388 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x875/0x2ae0
[ 1007.708741][T24463] 
[ 1007.708741][T24463] which lock already depends on the new lock.
[ 1007.708741][T24463] 
[ 1007.719141][T24463] 
[ 1007.719141][T24463] the existing dependency chain (in reverse order) is:
[ 1007.728152][T24463] 
[ 1007.728152][T24463] -> #5 (&ei->xattr_sem){++++}-{4:4}:
[ 1007.735736][T24463]        down_read+0x9b/0x480
[ 1007.740523][T24463]        ext4_setattr+0x875/0x2ae0
[ 1007.745746][T24463]        notify_change+0x6d2/0x12a0
[ 1007.751055][T24463]        chown_common+0x54e/0x680
[ 1007.756094][T24463]        do_fchownat+0x1a7/0x200
[ 1007.761047][T24463]        __x64_sys_chown+0x7b/0xc0
[ 1007.766173][T24463]        do_syscall_64+0xcd/0xfa0
[ 1007.771213][T24463]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1007.777647][T24463] 
[ 1007.777647][T24463] -> #4 (jbd2_handle){++++}-{0:0}:
[ 1007.784972][T24463]        start_this_handle+0x5ea/0x1410
[ 1007.790551][T24463]        jbd2__journal_start+0x394/0x6a0
[ 1007.796222][T24463]        jbd2_journal_start+0x29/0x40
[ 1007.801627][T24463]        ocfs2_start_trans+0x3b9/0x970
[ 1007.807114][T24463]        ocfs2_shutdown_local_alloc+0x281/0xa10
[ 1007.813394][T24463]        ocfs2_dismount_volume+0x1f5/0xa00
[ 1007.819325][T24463]        generic_shutdown_super+0x156/0x390
[ 1007.825322][T24463]        kill_block_super+0x3b/0x90
[ 1007.830546][T24463]        deactivate_locked_super+0xc1/0x1a0
[ 1007.836467][T24463]        deactivate_super+0xde/0x100
[ 1007.841863][T24463]        cleanup_mnt+0x225/0x450
[ 1007.846916][T24463]        task_work_run+0x150/0x240
[ 1007.852042][T24463]        exit_to_user_mode_loop+0xec/0x130
[ 1007.857944][T24463]        do_syscall_64+0x426/0xfa0
[ 1007.863159][T24463]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1007.869583][T24463] 
[ 1007.869583][T24463] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[ 1007.878213][T24463]        down_read+0x9b/0x480
[ 1007.882913][T24463]        ocfs2_start_trans+0x3ae/0x970
[ 1007.888481][T24463]        ocfs2_shutdown_local_alloc+0x281/0xa10
[ 1007.894751][T24463]        ocfs2_dismount_volume+0x1f5/0xa00
[ 1007.900706][T24463]        generic_shutdown_super+0x156/0x390
[ 1007.906621][T24463]        kill_block_super+0x3b/0x90
[ 1007.911839][T24463]        deactivate_locked_super+0xc1/0x1a0
[ 1007.917753][T24463]        deactivate_super+0xde/0x100
[ 1007.923063][T24463]        cleanup_mnt+0x225/0x450
[ 1007.928042][T24463]        task_work_run+0x150/0x240
[ 1007.933193][T24463]        exit_to_user_mode_loop+0xec/0x130
[ 1007.939020][T24463]        do_syscall_64+0x426/0xfa0
[ 1007.944156][T24463]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1007.950586][T24463] 
[ 1007.950586][T24463] -> #2 (sb_internal#4){.+.+}-{0:0}:
[ 1007.958297][T24463]        ocfs2_start_trans+0x29d/0x970
[ 1007.963795][T24463]        ocfs2_acquire_dquot+0x563/0xb00
[ 1007.969444][T24463]        dqget+0x693/0x1180
[ 1007.973979][T24463]        dquot_set_dqblk+0x2b/0x1290
[ 1007.979475][T24463]        quota_setquota+0x4c4/0x5e0
[ 1007.984785][T24463]        do_quotactl+0xaf6/0x13d0
[ 1007.989881][T24463]        __x64_sys_quotactl+0x1b3/0x440
[ 1007.995567][T24463]        do_syscall_64+0xcd/0xfa0
[ 1008.000704][T24463]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.007171][T24463] 
[ 1008.007171][T24463] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[ 1008.016073][T24463]        down_write+0x92/0x200
[ 1008.021164][T24463]        ocfs2_create_local_dquot+0x157/0xb30
[ 1008.027358][T24463]        ocfs2_acquire_dquot+0x626/0xb00
[ 1008.033016][T24463]        dqget+0x693/0x1180
[ 1008.037632][T24463]        dquot_set_dqblk+0x2b/0x1290
[ 1008.042946][T24463]        quota_setquota+0x4c4/0x5e0
[ 1008.048197][T24463]        do_quotactl+0xaf6/0x13d0
[ 1008.053298][T24463]        __x64_sys_quotactl+0x1b3/0x440
[ 1008.058969][T24463]        do_syscall_64+0xcd/0xfa0
[ 1008.064293][T24463]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.070735][T24463] 
[ 1008.070735][T24463] -> #0 (&dquot->dq_lock){+.+.}-{4:4}:
[ 1008.078414][T24463]        __lock_acquire+0x126f/0x1c90
[ 1008.083834][T24463]        lock_acquire+0x179/0x350
[ 1008.088863][T24463]        __mutex_lock+0x193/0x1060
[ 1008.093997][T24463]        dqget+0x5f1/0x1180
[ 1008.098514][T24463]        dquot_transfer+0x3a8/0x6a0
[ 1008.103741][T24463]        ext4_setattr+0x885/0x2ae0
[ 1008.108884][T24463]        notify_change+0x6d2/0x12a0
[ 1008.114106][T24463]        chown_common+0x54e/0x680
[ 1008.119228][T24463]        do_fchownat+0x1a7/0x200
[ 1008.124171][T24463]        __x64_sys_chown+0x7b/0xc0
[ 1008.129287][T24463]        do_syscall_64+0xcd/0xfa0
[ 1008.134364][T24463]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.140787][T24463] 
[ 1008.140787][T24463] other info that might help us debug this:
[ 1008.140787][T24463] 
[ 1008.151004][T24463] Chain exists of:
[ 1008.151004][T24463]   &dquot->dq_lock --> jbd2_handle --> &ei->xattr_sem
[ 1008.151004][T24463] 
[ 1008.163725][T24463]  Possible unsafe locking scenario:
[ 1008.163725][T24463] 
[ 1008.171171][T24463]        CPU0                    CPU1
[ 1008.176551][T24463]        ----                    ----
[ 1008.181912][T24463]   rlock(&ei->xattr_sem);
[ 1008.186424][T24463]                                lock(jbd2_handle);
[ 1008.193021][T24463]                                lock(&ei->xattr_sem);
[ 1008.199914][T24463]   lock(&dquot->dq_lock);
[ 1008.204339][T24463] 
[ 1008.204339][T24463]  *** DEADLOCK ***
[ 1008.204339][T24463] 
[ 1008.212558][T24463] 3 locks held by syz.2.7885/24463:
[ 1008.217766][T24463]  #0: ffff88807cb54420 (sb_writers#4){.+.+}-{0:0}, at: do_fchownat+0x117/0x200
[ 1008.226946][T24463]  #1: ffff88804c19f6a0 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: chown_common+0x335/0x680
[ 1008.237207][T24463]  #2: ffff88804c19f388 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x875/0x2ae0
[ 1008.246678][T24463] 
[ 1008.246678][T24463] stack backtrace:
[ 1008.252570][T24463] CPU: 0 UID: 0 PID: 24463 Comm: syz.2.7885 Not tainted syzkaller #0 PREEMPT(full) 
[ 1008.252613][T24463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1008.252636][T24463] Call Trace:
[ 1008.252648][T24463]  <TASK>
[ 1008.252661][T24463]  dump_stack_lvl+0x116/0x1f0
[ 1008.252705][T24463]  print_circular_bug+0x275/0x350
[ 1008.252764][T24463]  check_noncircular+0x14c/0x170
[ 1008.252826][T24463]  __lock_acquire+0x126f/0x1c90
[ 1008.252891][T24463]  lock_acquire+0x179/0x350
[ 1008.252921][T24463]  ? dqget+0x5f1/0x1180
[ 1008.252958][T24463]  ? __pfx___might_resched+0x10/0x10
[ 1008.253004][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.253047][T24463]  ? map_id_range_up+0x2ce/0x3b0
[ 1008.253095][T24463]  ? dqget+0x5f1/0x1180
[ 1008.253127][T24463]  __mutex_lock+0x193/0x1060
[ 1008.253176][T24463]  ? dqget+0x5f1/0x1180
[ 1008.253210][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.253252][T24463]  ? __lock_acquire+0xb8a/0x1c90
[ 1008.253311][T24463]  ? __pfx___mutex_lock+0x10/0x10
[ 1008.253353][T24463]  ? __pfx_from_kuid+0x10/0x10
[ 1008.253395][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.253443][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.253484][T24463]  ? find_held_lock+0x2b/0x80
[ 1008.253528][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.253576][T24463]  ? dqget+0x5f1/0x1180
[ 1008.253608][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.253650][T24463]  dqget+0x5f1/0x1180
[ 1008.253688][T24463]  ? __pfx_dqget+0x10/0x10
[ 1008.253724][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.253771][T24463]  dquot_transfer+0x3a8/0x6a0
[ 1008.253814][T24463]  ? __pfx_dquot_transfer+0x10/0x10
[ 1008.253858][T24463]  ? ext4_journal_check_start+0x22b/0x340
[ 1008.253901][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.253943][T24463]  ? __ext4_journal_start_sb+0x19e/0x690
[ 1008.253983][T24463]  ? ext4_setattr+0x83c/0x2ae0
[ 1008.254031][T24463]  ext4_setattr+0x885/0x2ae0
[ 1008.254076][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.254118][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.254165][T24463]  ? evm_verify_current_integrity+0x85/0xe0
[ 1008.254220][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.254262][T24463]  ? evm_inode_setattr+0x65/0x680
[ 1008.254317][T24463]  ? __pfx_ext4_setattr+0x10/0x10
[ 1008.254362][T24463]  notify_change+0x6d2/0x12a0
[ 1008.254420][T24463]  chown_common+0x54e/0x680
[ 1008.254458][T24463]  ? __pfx_chown_common+0x10/0x10
[ 1008.254493][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.254542][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.254585][T24463]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.254627][T24463]  ? mnt_get_write_access+0x1e9/0x2f0
[ 1008.254672][T24463]  do_fchownat+0x1a7/0x200
[ 1008.254706][T24463]  ? __pfx_do_fchownat+0x10/0x10
[ 1008.254747][T24463]  __x64_sys_chown+0x7b/0xc0
[ 1008.254781][T24463]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1008.254820][T24463]  do_syscall_64+0xcd/0xfa0
[ 1008.254862][T24463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.254899][T24463] RIP: 0033:0x7fb255f8efc9
[ 1008.254927][T24463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1008.254962][T24463] RSP: 002b:00007fb256eed038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c
[ 1008.254994][T24463] RAX: ffffffffffffffda RBX: 00007fb2561e5fa0 RCX: 00007fb255f8efc9
[ 1008.255018][T24463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[ 1008.255040][T24463] RBP: 00007fb256011f91 R08: 0000000000000000 R09: 0000000000000000
[ 1008.255062][T24463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1008.255084][T24463] R13: 00007fb2561e6038 R14: 00007fb2561e5fa0 R15: 00007ffe5dd18328
[ 1008.255120][T24463]  </TASK>
[ 1008.674984][T24463] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[ 1008.700228][T24486] loop7: detected capacity change from 0 to 2048
[ 1008.706867][T24463] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[ 1008.734494][T24463] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.7885: Failed to acquire dquot type 0
[ 1008.887120][T24436] BTRFS info (device loop6): enabling ssd optimizations
[ 1008.889391][ T6154] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[ 1008.897941][T24436] BTRFS info (device loop6): turning on async discard
[ 1008.910790][T24436] BTRFS info (device loop6): enabling free space tree
[ 1009.039678][T19118] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d