last executing test programs:

3.177263659s ago: executing program 1 (id=2361):
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00"], 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

1.585441079s ago: executing program 1 (id=2380):
r0 = syz_open_dev$loop(&(0x7f0000000340), 0x7fff, 0x80000)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000380)={0x3, 0x0, 0x98, &(0x7f0000000480)={0xffffffffffffffff, 0x10001, 0x8}})

1.369661373s ago: executing program 0 (id=2383):
r0 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r0, &(0x7f0000001280)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000040)="f550b36301e9a32630461b1edea61a15dc8e30c9", 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000001740)="b6663cf10ac29b7dd6a531182b27b535c78d6ed3", 0x303a56441f496c02}], 0x1}}], 0x2, 0x20044000)

1.352362444s ago: executing program 1 (id=2384):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7)

1.234961956s ago: executing program 2 (id=2385):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x7ff, '\x00', @p_u8=0x0}})

1.149551818s ago: executing program 3 (id=2386):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51)

1.124841388s ago: executing program 0 (id=2387):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

1.064744119s ago: executing program 2 (id=2388):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)

1.04222931s ago: executing program 3 (id=2389):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000018c0)={0x3, "010020"}, 0x4)

964.180471ms ago: executing program 1 (id=2390):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")

900.149602ms ago: executing program 0 (id=2391):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x8, @win={{0xd, 0x8, 0x80000000}, 0x8, 0xf89, 0x0, 0x401, 0x0, 0x10}})

874.596303ms ago: executing program 3 (id=2392):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000000)={0x11, {{0x29, 0x0, 0x3000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000000}}}, 0x88)

805.962664ms ago: executing program 2 (id=2393):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x1b, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x334e8b, 0x200000a00000})

756.212905ms ago: executing program 0 (id=2394):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240000001a00010025bd7000fbdb5f251c208008ff01ff0a000e000008000100000001"], 0x24}, 0x1, 0x0, 0x0, 0x4c25}, 0x400c020)

712.414136ms ago: executing program 2 (id=2395):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)

615.797748ms ago: executing program 3 (id=2396):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
accept4$llc(r0, 0x0, 0x0, 0x80800)

530.203799ms ago: executing program 0 (id=2397):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7, @empty, 0x3}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x4e20, 0x0, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1400000000000000290000000b00000000004d4d00faffff130000000000000029"], 0x30}}], 0x2, 0x0)

467.518961ms ago: executing program 2 (id=2398):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in=@multicast1}, @mark={0xc}]}, 0x48}}, 0x0)

352.418493ms ago: executing program 3 (id=2399):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e000000208000740000000001c0018800800014000000452080001400000b49008000140000099321000058009"], 0xa4}}, 0x0)

333.518483ms ago: executing program 1 (id=2400):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x9, {0xe, 0x9, 0x1, 0x2}})

163.408786ms ago: executing program 0 (id=2401):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)

150.202617ms ago: executing program 2 (id=2402):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)

645.8µs ago: executing program 3 (id=2403):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x40000000}, 0x20)

0s ago: executing program 1 (id=2404):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)=@allocspi={0x104, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xd, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@mark={0xc, 0x15, {0x0, 0xfffff329}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)

kernel console output (not intermixed with test programs):

(1024) and media sector size (512).
[  110.703650][ T6386] loop1: detected capacity change from 0 to 32768
[  110.785323][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  110.785339][   T27] audit: type=1326 audit(1758279380.766:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd614d8ec29 code=0x7ffc0000
[  110.887738][   T27] audit: type=1326 audit(1758279380.766:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd614d8ec29 code=0x7ffc0000
[  110.911955][   T27] audit: type=1326 audit(1758279380.816:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd614d8ec29 code=0x7ffc0000
[  110.935821][   T27] audit: type=1326 audit(1758279380.816:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd614d8ec29 code=0x7ffc0000
[  110.960530][   T27] audit: type=1326 audit(1758279380.816:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd614d8ec29 code=0x7ffc0000
[  111.030489][ T6386] JBD2: Ignoring recovery information on journal
[  111.048824][ T6405] netlink: 44 bytes leftover after parsing attributes in process `syz.2.226'.
[  111.103644][ T6409] sctp: [Deprecated]: syz.0.228 (pid 6409) Use of int in maxseg socket option.
[  111.103644][ T6409] Use struct sctp_assoc_value instead
[  111.128353][ T6386] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  111.294788][ T6386] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 73 has 4294901761 used bits but only 0 total
[  111.341758][ T6386] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  111.353526][ T6386] OCFS2: File system is now read-only.
[  111.364075][ T6386] (syz.1.217,6386,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  111.373277][ T6386] (syz.1.217,6386,0):ocfs2_claim_metadata:2008 ERROR: status = -30
[  111.398319][ T6386] (syz.1.217,6386,0):ocfs2_claim_metadata:2021 ERROR: status = -30
[  111.410221][ T6386] (syz.1.217,6386,0):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30
[  111.419094][ T6386] (syz.1.217,6386,0):ocfs2_expand_inline_dir:3023 ERROR: status = -30
[  111.442426][ T6386] (syz.1.217,6386,0):ocfs2_extend_dir:3205 ERROR: status = -30
[  111.452387][ T6386] (syz.1.217,6386,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30
[  111.465741][ T6386] (syz.1.217,6386,0):ocfs2_mknod:298 ERROR: status = -30
[  111.474715][ T6386] (syz.1.217,6386,0):ocfs2_mknod:502 ERROR: status = -30
[  111.486678][ T5835] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[  111.493389][ T6386] (syz.1.217,6386,0):ocfs2_mkdir:659 ERROR: status = -30
[  111.593689][ T6386] syz.1.217 (6386) used greatest stack depth: 19632 bytes left
[  111.650503][ T5787] ocfs2: Unmounting device (7,1) on (node local)
[  111.688982][ T5835] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  111.697719][ T5835] usb 3-1: config 0 has no interface number 0
[  111.703880][ T5835] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  111.741089][ T5835] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  111.771487][ T5835] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  111.803686][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.836199][ T5835] usb 3-1: config 0 descriptor??
[  111.882682][ T5835] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  111.907557][ T6428] loop0: detected capacity change from 0 to 1024
[  112.134810][ T6412] iowarrior 3-1:0.1: Error -90 while submitting URB
[  112.165936][ T5835] usb 3-1: USB disconnect, device number 2
[  112.225160][ T6437] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  112.328636][ T6439] loop3: detected capacity change from 0 to 256
[  112.846967][ T6451] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  113.039754][ T6456] netlink: 'syz.3.251': attribute type 21 has an invalid length.
[  113.048839][ T6456] netlink: 164 bytes leftover after parsing attributes in process `syz.3.251'.
[  113.593157][ T6472] ipip0: entered allmulticast mode
[  113.755078][ T6454] loop2: detected capacity change from 0 to 32768
[  113.849150][ T6454] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  114.055144][ T6454] (syz.2.249,6454,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1
[  114.114595][ T6454] (syz.2.249,6454,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2
[  114.136929][ T6454] (syz.2.249,6454,0):ocfs2_mknod:298 ERROR: status = -2
[  114.144113][ T6454] (syz.2.249,6454,0):ocfs2_mknod:502 ERROR: status = -2
[  114.165006][ T6454] (syz.2.249,6454,0):ocfs2_create:676 ERROR: status = -2
[  114.339281][ T5786] ocfs2: Unmounting device (7,2) on (node local)
[  114.593736][ T6493] warning: `syz.1.268' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  115.205957][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'.
[  115.447014][ T5788] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  115.646022][ T5788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.666624][ T5788] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  115.695555][ T5788] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  115.697161][   T27] audit: type=1800 audit(1758279385.676:21): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.280" name="/" dev="sockfs" ino=9521 res=0 errno=0
[  115.716594][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.768871][ T5788] usb 4-1: Product: syz
[  115.780367][ T5788] usb 4-1: Manufacturer: syz
[  115.792753][ T5788] usb 4-1: SerialNumber: syz
[  115.823337][ T5788] cdc_ncm 4-1:1.0: skipping garbage
[  115.854282][ T5788] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing
[  115.899115][ T5788] cdc_ncm 4-1:1.0: bind() failure
[  115.928588][ T5788] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  115.942032][ T5788] cdc_ncm 4-1:1.1: bind() failure
[  116.071000][ T5788] usb 4-1: USB disconnect, device number 2
[  116.146322][ T6543] loop2: detected capacity change from 0 to 1024
[  116.167361][ T5835] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  116.280045][ T6545] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.287'.
[  116.346862][ T5835] usb 1-1: Using ep0 maxpacket: 32
[  116.359517][ T5835] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[  116.372019][ T5835] usb 1-1: config 0 has no interface number 0
[  116.390078][ T5835] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19
[  116.407118][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.425479][ T5835] usb 1-1: Product: syz
[  116.433673][ T5835] usb 1-1: Manufacturer: syz
[  116.438815][ T5835] usb 1-1: SerialNumber: syz
[  116.449056][ T5835] usb 1-1: config 0 descriptor??
[  116.460664][ T5835] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  116.811529][ T6558] loop3: detected capacity change from 0 to 1024
[  116.890459][ T5835] gspca_sn9c2028: read1 error -71
[  116.891555][ T6558] syz.3.293: attempt to access beyond end of device
[  116.891555][ T6558] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  116.916274][ T5835] gspca_sn9c2028: read1 error -71
[  116.934227][ T5835] sn9c2028: probe of 1-1:0.119 failed with error -71
[  116.942938][ T6558] Buffer I/O error on dev loop3, logical block 100663296, async page read
[  116.972972][ T5835] usb 1-1: USB disconnect, device number 4
[  116.979491][ T6558] syz.3.293: attempt to access beyond end of device
[  116.979491][ T6558] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  117.002046][ T6561] loop1: detected capacity change from 0 to 1024
[  117.017602][ T6561] EXT4-fs: Ignoring removed bh option
[  117.061882][ T6558] Buffer I/O error on dev loop3, logical block 100663296, async page read
[  117.101757][ T6561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  117.372088][ T6553] loop2: detected capacity change from 0 to 32768
[  117.384865][ T6553] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.291 (6553)
[  117.385914][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  117.414910][ T6553] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  117.447816][ T6553] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  117.487077][ T6553] BTRFS info (device loop2): force zlib compression, level 3
[  117.504836][ T6553] BTRFS info (device loop2): force clearing of disk cache
[  117.546189][ T6553] BTRFS info (device loop2): turning off barriers
[  117.587978][ T6553] BTRFS info (device loop2): doing ref verification
[  117.614290][ T6569] netlink: 'syz.1.297': attribute type 8 has an invalid length.
[  117.636675][ T6553] BTRFS info (device loop2): enabling disk space caching
[  117.643878][ T6553] BTRFS info (device loop2): disk space caching is enabled
[  117.694044][ T6573] loop3: detected capacity change from 0 to 256
[  117.886677][ T6553] BTRFS info (device loop2): enabling ssd optimizations
[  117.893701][ T6553] BTRFS info (device loop2): auto enabling async discard
[  117.942813][ T6553] BTRFS info (device loop2): rebuilding free space tree
[  118.092683][ T6553] BTRFS info (device loop2): disabling free space tree
[  118.127983][ T6553] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  118.165089][ T6553] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  118.378164][ T6553] BTRFS error (device loop2): balance: mixed groups data and metadata options must be the same
[  118.513327][ T5786] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  118.877499][ T6613] netlink: 'syz.3.311': attribute type 32 has an invalid length.
[  119.722898][ T6630] loop3: detected capacity change from 0 to 1024
[  119.778856][ T6630] EXT4-fs: Ignoring removed bh option
[  119.839146][ T6630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  120.148496][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  120.422963][ T6655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.326'.
[  121.025093][ T6677] netlink: 772 bytes leftover after parsing attributes in process `syz.3.335'.
[  121.068732][   T27] audit: type=1326 audit(1758279391.056:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  121.091591][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'.
[  121.140218][   T27] audit: type=1326 audit(1758279391.056:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  121.206862][   T27] audit: type=1326 audit(1758279391.056:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  121.229412][   T27] audit: type=1326 audit(1758279391.056:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  121.252510][   T27] audit: type=1326 audit(1758279391.056:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  121.506994][ T6693] netlink: 'syz.2.343': attribute type 21 has an invalid length.
[  121.868386][ T6707] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  121.903418][ T6707] overlayfs: missing 'lowerdir'
[  123.429731][ T6730] loop2: detected capacity change from 0 to 32768
[  123.473745][ T6730] (syz.2.363,6730,1):ocfs2_find_slot:468 ERROR: no free slots available!
[  123.497184][ T6730] (syz.2.363,6730,0):ocfs2_mount_volume:1809 ERROR: status = -22
[  123.544853][ T6730] (syz.2.363,6730,0):ocfs2_fill_super:1178 ERROR: status = -22
[  123.745573][ T6741] loop3: detected capacity change from 0 to 40427
[  123.747470][ T6730] NILFS (loop2): couldn't find nilfs on the device
[  123.793627][ T6741] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  123.832248][ T6741] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  123.906655][ T6741] F2FS-fs (loop3): invalid crc value
[  123.944981][ T6741] F2FS-fs (loop3): Found nat_bits in checkpoint
[  124.110835][ T6741] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  124.130497][ T6741] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  124.967030][ T6785] futex_wake_op: syz.0.387 tries to shift op by 32; fix this program
[  125.053695][ T6787] loop1: detected capacity change from 0 to 256
[  125.191218][ T6787] FAT-fs (loop1): Directory bread(block 64) failed
[  125.239874][ T6787] FAT-fs (loop1): Directory bread(block 65) failed
[  125.253675][ T6787] FAT-fs (loop1): Directory bread(block 66) failed
[  125.272389][ T6787] FAT-fs (loop1): Directory bread(block 67) failed
[  125.280618][ T6787] FAT-fs (loop1): Directory bread(block 68) failed
[  125.291609][ T6787] FAT-fs (loop1): Directory bread(block 69) failed
[  125.300818][ T6787] FAT-fs (loop1): Directory bread(block 70) failed
[  125.311611][ T6787] FAT-fs (loop1): Directory bread(block 71) failed
[  125.336876][ T6787] FAT-fs (loop1): Directory bread(block 72) failed
[  125.343584][ T6787] FAT-fs (loop1): Directory bread(block 73) failed
[  125.437498][   T27] audit: type=1800 audit(1758279395.406:27): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.388" name="cpu.stat" dev="loop1" ino=1048599 res=0 errno=0
[  125.444153][ T6787] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006c61)
[  125.539579][ T5794] Bluetooth: hci3: command 0x0406 tx timeout
[  126.446113][ T6828] loop3: detected capacity change from 0 to 2048
[  126.459423][ T6828] EXT4-fs: Ignoring removed mblk_io_submit option
[  126.582488][ T6828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.604135][ T6839] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.410'.
[  126.614191][ T6839] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8
[  126.633149][ T6837] netlink: 'syz.1.411': attribute type 1 has an invalid length.
[  126.667932][ T6837] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.411'.
[  126.719614][ T6828] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.408: bg 0: block 234: padding at end of block bitmap is not set
[  126.723941][ T6842] loop2: detected capacity change from 0 to 16
[  126.774833][ T6842] erofs: (device loop2): mounted with root inode @ nid 36.
[  126.826651][ T6828] EXT4-fs (loop3): Remounting filesystem read-only
[  126.907238][ T6842] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768
[  126.936624][ T6842] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768
[  126.955073][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.956201][ T6842] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 32811 of nid 36
[  127.622359][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  127.659257][ T6869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.426'.
[  128.115481][ T6886] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  128.620581][ T6902] loop1: detected capacity change from 0 to 1024
[  128.685744][ T6904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.443'.
[  128.882107][ T6887] loop3: detected capacity change from 0 to 32768
[  128.898193][  T143] hfsplus: b-tree write err: -5, ino 4
[  128.994618][ T6887] JBD2: Ignoring recovery information on journal
[  129.207580][ T6887] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  129.372691][ T6887] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 73 has 4294901761 used bits but only 0 total
[  129.427344][ T6887] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  129.445977][ T6887] OCFS2: File system is now read-only.
[  129.452132][ T6887] (syz.3.434,6887,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  129.463967][ T6887] (syz.3.434,6887,0):ocfs2_claim_metadata:2008 ERROR: status = -30
[  129.472188][ T6887] (syz.3.434,6887,0):ocfs2_claim_metadata:2021 ERROR: status = -30
[  129.496851][ T6887] (syz.3.434,6887,0):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30
[  129.505280][ T6887] (syz.3.434,6887,0):ocfs2_expand_inline_dir:3023 ERROR: status = -30
[  129.551028][ T6887] (syz.3.434,6887,0):ocfs2_extend_dir:3205 ERROR: status = -30
[  129.566161][ T6887] (syz.3.434,6887,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30
[  129.581518][ T6887] (syz.3.434,6887,0):ocfs2_mknod:298 ERROR: status = -30
[  129.596636][ T6887] (syz.3.434,6887,0):ocfs2_mknod:502 ERROR: status = -30
[  129.610602][ T6887] (syz.3.434,6887,0):ocfs2_mkdir:659 ERROR: status = -30
[  129.727294][ T6887] syz.3.434 (6887) used greatest stack depth: 19216 bytes left
[  129.793934][ T5792] ocfs2: Unmounting device (7,3) on (node local)
[  130.814612][ T6953] loop1: detected capacity change from 0 to 2048
[  130.855904][ T6953] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  130.918133][ T6953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.951533][   T27] audit: type=1326 audit(1758279401.926:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x50000
[  132.015239][   T27] audit: type=1326 audit(1758279401.926:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x50000
[  132.075978][   T27] audit: type=1326 audit(1758279401.926:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x50000
[  132.150324][   T27] audit: type=1326 audit(1758279401.926:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x50000
[  132.241731][   T27] audit: type=1326 audit(1758279401.926:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x50000
[  132.290795][   T27] audit: type=1326 audit(1758279401.926:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x50000
[  132.365043][   T27] audit: type=1326 audit(1758279401.926:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x50000
[  132.437403][   T27] audit: type=1326 audit(1758279401.926:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x50000
[  132.459660][    C1] vkms_vblank_simulate: vblank timer overrun
[  132.533937][   T27] audit: type=1326 audit(1758279401.926:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x50000
[  132.566612][ T7004] netlink: 1 bytes leftover after parsing attributes in process `syz.3.492'.
[  132.606646][   T27] audit: type=1326 audit(1758279401.926:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x50000
[  132.628582][    C1] vkms_vblank_simulate: vblank timer overrun
[  132.679395][ T7006] loop1: detected capacity change from 0 to 512
[  132.779105][ T7006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.827180][ T7006] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.073283][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.224781][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  133.231808][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  134.070288][ T7033] loop1: detected capacity change from 0 to 1024
[  134.186882][ T7033] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  134.255331][ T7033] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  134.260018][ T7034] loop3: detected capacity change from 0 to 8192
[  134.341058][ T7034] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  134.398596][   T48] hfsplus: b-tree write err: -5, ino 4
[  134.414717][ T7034] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  134.447412][ T7034] FAT-fs (loop3): Filesystem has been set read-only
[  134.605019][ T5792] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  134.854442][ T7048] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  135.535003][ T7068] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  135.747583][ T7076] netlink: 52 bytes leftover after parsing attributes in process `syz.0.526'.
[  135.873865][ T7080] loop2: detected capacity change from 0 to 2048
[  135.894680][ T7080] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.963192][ T7080] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh
[  136.059797][ T7082] loop1: detected capacity change from 0 to 4096
[  136.859126][ T7102] loop1: detected capacity change from 0 to 2048
[  136.951760][ T7102] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  136.964777][ T7102] UDF-fs: Scanning with blocksize 512 failed
[  137.055433][ T7102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.348177][ T7114] netlink: 'syz.0.545': attribute type 1 has an invalid length.
[  137.435575][ T7096] loop2: detected capacity change from 0 to 32768
[  137.537416][ T7096] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[  137.537416][ T7096] 
[  137.852390][ T7131] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  137.906434][ T7131] x_tables: unsorted entry at hook 1
[  138.672359][ T7150] comedi comedi3: ni_at_a2150: I/O port conflict (0x4f27,28)
[  138.901192][ T7155] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  139.087839][ T7134] loop2: detected capacity change from 0 to 32768
[  139.116709][ T7134] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.555 (7134)
[  139.186885][ T7134] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  139.216757][ T7134] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  139.225530][ T7134] BTRFS info (device loop2): using free space tree
[  139.496755][ T7134] BTRFS info (device loop2): enabling ssd optimizations
[  139.503795][ T7134] BTRFS info (device loop2): auto enabling async discard
[  139.595473][ T7188] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  139.871923][ T5786] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  139.994567][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'.
[  140.903641][ T7223] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[  140.984923][ T7215] loop3: detected capacity change from 0 to 8192
[  141.066293][ T7215] process 'syz.3.585' launched './file2' with NULL argv: empty string added
[  141.115545][ T7215] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  141.165491][ T7215] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  141.189041][ T7215] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  141.204145][ T7215] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  141.216216][ T7215] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  141.242546][ T7215] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  141.261705][ T7215] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  141.293024][ T7215] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  141.363274][ T7215] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  141.402354][ T7215] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  141.426962][ T7215] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[  141.449690][   T27] kauditd_printk_skb: 2076 callbacks suppressed
[  141.449706][   T27] audit: type=1800 audit(1758279411.436:2114): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.585" name="file2" dev="loop3" ino=1048601 res=0 errno=0
[  141.825895][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.602'.
[  142.003774][ T7245] loop2: detected capacity change from 0 to 4096
[  142.451111][ T7263] 9pnet_fd: p9_fd_create_unix (7263): problem connecting socket: ./file0: -111
[  143.560620][ T7301] loop1: detected capacity change from 0 to 2048
[  143.586741][ T7305] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.606715][ T5835] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  143.781121][    T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  143.809796][ T5835] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  143.815549][ T7307] loop1: detected capacity change from 0 to 4096
[  143.819012][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.828572][ T5835] usb 3-1: config 0 descriptor??
[  143.838119][ T7307] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  143.839121][   T28] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  143.935704][ T7307] ntfs3: loop1: failed to convert "c46c" to cp863
[  143.980694][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.995767][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.007570][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  144.023103][    T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  144.032684][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.046720][   T28] usb 4-1: Using ep0 maxpacket: 32
[  144.047928][    T8] usb 1-1: config 0 descriptor??
[  144.059560][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.074791][    T8] hub 1-1:0.0: USB hub found
[  144.087372][ T5835] [drm] vendor descriptor length:6 data:06 5f 01 ff 00 00 00 00 00 00 00
[  144.106615][   T28] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  144.115582][   T28] usb 4-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  144.128828][ T5835] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  144.156650][   T28] usb 4-1: config 0 interface 0 has no altsetting 1
[  144.168643][   T28] usb 4-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57
[  144.188932][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.206852][   T28] usb 4-1: Product: syz
[  144.213892][   T28] usb 4-1: Manufacturer: syz
[  144.218769][   T28] usb 4-1: SerialNumber: syz
[  144.233723][   T28] usb 4-1: config 0 descriptor??
[  144.254054][   T28] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  144.282655][ T5835] [drm:udl_init] *ERROR* Selecting channel failed
[  144.293944][    T8] hub 1-1:0.0: 9 ports detected
[  144.309809][    T8] hub 1-1:0.0: insufficient power available to use all downstream ports
[  144.354779][ T5835] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  144.369503][   T28] snd-usb-audio: probe of 4-1:0.0 failed with error -2
[  144.393852][ T5835] [drm] Initialized udl on minor 2
[  144.406444][ T5835] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  144.427075][ T5835] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  144.459745][ T6436] udevd[6436]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.474037][   T23] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  144.494273][ T5835] usb 3-1: USB disconnect, device number 3
[  144.500357][    T8] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  144.527364][   T23] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  144.532064][    T8] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  144.616196][   T23] usb 4-1: USB disconnect, device number 3
[  144.642247][    T8] usb 1-1: USB disconnect, device number 5
[  145.053434][ T7315] loop1: detected capacity change from 0 to 32768
[  145.068336][ T7315] (syz.1.635,7315,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  145.085993][ T7315] (syz.1.635,7315,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  145.192119][ T7315] JBD2: Ignoring recovery information on journal
[  145.391747][ T7315] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  145.461159][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'.
[  145.633906][ T7337] dlm: non-version read from control device 0
[  145.768689][   T27] audit: type=1400 audit(1758279415.756:2115): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=7338 comm="syz.3.646"
[  145.860704][   T48] hfsplus: b-tree write err: -5, ino 4
[  145.883414][ T5787] ocfs2: Unmounting device (7,1) on (node local)
[  146.198030][ T7351] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  146.870785][ T7371] xt_TCPMSS: Only works on TCP SYN packets
[  147.216020][ T7381] netlink: 'syz.1.666': attribute type 21 has an invalid length.
[  147.225403][ T7381] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[  147.233652][ T7381] netlink: 144 bytes leftover after parsing attributes in process `syz.1.666'.
[  147.449058][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'.
[  147.626750][ T7397] libceph: resolve '00' (ret=-3): failed
[  148.180373][ T7415] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  148.626788][   T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  148.836648][   T23] usb 4-1: Using ep0 maxpacket: 16
[  148.846366][   T23] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  148.854894][   T23] usb 4-1: config 0 has no interface number 0
[  148.881209][   T23] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  148.914441][   T23] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  148.944156][   T23] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  148.964482][   T23] usb 4-1: Manufacturer: syz
[  148.981030][   T23] usb 4-1: SerialNumber: syz
[  149.025834][   T23] usb 4-1: config 0 descriptor??
[  149.469476][   T23] usbtouchscreen: probe of 4-1:0.214 failed with error -71
[  149.509645][   T23] usb 4-1: USB disconnect, device number 4
[  150.366911][ T7483] netlink: 224 bytes leftover after parsing attributes in process `syz.2.717'.
[  150.657643][ T7494] netlink: 'syz.0.723': attribute type 11 has an invalid length.
[  150.798548][ T7496] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  150.825811][ T7496] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  151.294731][ T7513] xt_TPROXY: Can be used only with -p tcp or -p udp
[  152.067260][ T7533] ieee802154 phy0 wpan0: encryption failed: -22
[  152.352500][ T7541] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.745'.
[  153.210766][ T7561] loop3: detected capacity change from 0 to 64
[  153.329042][ T7561] syz.3.756: attempt to access beyond end of device
[  153.329042][ T7561] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  153.346114][ T7561] Buffer I/O error on dev loop3, logical block 134217734, lost async page write
[  153.457458][ T7565] netlink: 'syz.0.758': attribute type 3 has an invalid length.
[  153.512458][ T7545] loop1: detected capacity change from 0 to 32768
[  153.614146][ T7545] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.971756][ T7545] XFS (loop1): Ending clean mount
[  154.263341][ T5787] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  154.479117][ T7596] loop3: detected capacity change from 0 to 256
[  154.553905][ T7596] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  155.216861][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'.
[  155.241771][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'.
[  155.254714][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'.
[  155.265311][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'.
[  155.280831][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'.
[  155.291196][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'.
[  155.306457][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'.
[  155.322525][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'.
[  155.336951][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'.
[  155.426753][ T5788] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  155.533388][ T7618] .: renamed from bond0 (while UP)
[  155.612885][ T5788] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  155.652724][ T5788] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  155.669778][ T5788] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  155.699351][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.728727][ T7609] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  155.750155][ T5788] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  156.072261][ T7611] loop1: detected capacity change from 0 to 32768
[  156.123341][ T7611] (syz.1.776,7611,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  156.209107][ T7611] (syz.1.776,7611,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  156.344377][ T7611] JBD2: Ignoring recovery information on journal
[  156.354731][    T9] usb 1-1: USB disconnect, device number 6
[  156.512462][ T7641] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  156.524187][ T7611] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  156.524435][ T7641] overlayfs: missing 'lowerdir'
[  156.810420][ T5787] ocfs2: Unmounting device (7,1) on (node local)
[  156.995020][ T7652] loop2: detected capacity change from 0 to 64
[  157.390689][ T7660] __nla_validate_parse: 44 callbacks suppressed
[  157.390708][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'.
[  157.446843][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'.
[  157.732330][ T7674] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  157.739448][ T7674] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  158.880019][ T7680] loop2: detected capacity change from 0 to 32768
[  159.381664][ T7723] netlink: 'syz.0.830': attribute type 9 has an invalid length.
[  159.399884][ T7723] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.830'.
[  159.835149][ T7710] loop1: detected capacity change from 0 to 32768
[  159.905388][ T7710] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  159.945766][ T7710] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.301467][ T7755] netlink: 'syz.3.842': attribute type 10 has an invalid length.
[  160.339025][ T7710] XFS (loop1): Ending clean mount
[  160.353209][ T7755] macvlan0: entered promiscuous mode
[  160.376656][ T7755] macvlan0: entered allmulticast mode
[  160.423049][ T7755] veth1_vlan: entered allmulticast mode
[  160.477343][ T7755] .: (slave macvlan0): Enslaving as an active interface with an up link
[  160.617110][ T5787] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.806773][ T7767] misc userio: Invalid payload size
[  161.082561][ T7773] netlink: 'syz.3.851': attribute type 10 has an invalid length.
[  161.147575][ T7773] bridge0: port 3(team0) entered blocking state
[  161.154014][ T7773] bridge0: port 3(team0) entered disabled state
[  161.196442][ T7773] team0: entered allmulticast mode
[  161.216034][ T7773] team_slave_0: entered allmulticast mode
[  161.233630][ T7773] team_slave_1: entered allmulticast mode
[  161.248349][ T7773] team0: entered promiscuous mode
[  161.265077][ T7773] team_slave_0: entered promiscuous mode
[  161.273361][ T7779] ipt_rpfilter: unknown options
[  161.298676][ T7773] team_slave_1: entered promiscuous mode
[  161.305712][ T7773] bridge0: port 3(team0) entered blocking state
[  161.312779][ T7773] bridge0: port 3(team0) entered forwarding state
[  161.729249][ T7791] netlink: 44 bytes leftover after parsing attributes in process `syz.1.860'.
[  161.748344][ T7791] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  162.045945][ T7803] cgroup2: Unknown parameter 'memory_hugetlb_accounting'
[  162.977817][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.884'.
[  162.996733][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'.
[  163.362932][ T7853] Process accounting resumed
[  163.954456][ T7876] netlink: 'syz.2.902': attribute type 21 has an invalid length.
[  164.122152][ T7880] netlink: 11 bytes leftover after parsing attributes in process `syz.1.904'.
[  164.166642][ T7884] netlink: 'syz.2.906': attribute type 49 has an invalid length.
[  164.460597][   T27] audit: type=1326 audit(1758279434.446:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7895 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c658ec29 code=0x7ffc0000
[  164.560084][   T27] audit: type=1326 audit(1758279434.446:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7895 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c658ec29 code=0x7ffc0000
[  164.627562][   T27] audit: type=1326 audit(1758279434.466:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7895 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f90c658ec29 code=0x7ffc0000
[  164.706798][   T27] audit: type=1326 audit(1758279434.466:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7895 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c658ec29 code=0x7ffc0000
[  165.029713][ T7915] netlink: 'syz.1.921': attribute type 9 has an invalid length.
[  165.048640][ T7915] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.921'.
[  165.457792][ T7931] x_tables: duplicate underflow at hook 4
[  165.517784][ T5835] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  165.735246][ T5835] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  165.757394][ T5835] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  165.787235][ T5835] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  165.797312][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.840243][ T7945] dlm: no locking on control device
[  165.897144][ T7943] loop1: detected capacity change from 0 to 8192
[  165.922280][ T7943] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  165.947305][ T7943] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  165.957842][ T7943] REISERFS (device loop1): using ordered data mode
[  165.964460][ T7943] reiserfs: using flush barriers
[  165.974008][ T7943] REISERFS warning (device loop1): journal-1393 journal_init: journal 1st super block is invalid: 1st reserved block 130, but actual 1st block is 18
[  166.238831][ T5835] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  166.269357][ T5835] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input9
[  166.305379][ T5835] input: failed to attach handler kbd to device input9, error: -5
[  166.321450][ T7951] loop1: detected capacity change from 0 to 4096
[  166.347838][ T7951] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  166.348826][ T7933] Bluetooth: hci0: Opcode 0x080f failed: -4
[  166.387034][ T5835] usb 4-1: USB disconnect, device number 5
[  167.436844][ T7978] loop3: detected capacity change from 0 to 4096
[  167.489448][ T7986] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.543105][ T7978] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  167.573932][ T7978] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12)
[  167.626644][   T50] Bluetooth: hci0: command 0x080f tx timeout
[  167.649749][ T7978] Remounting filesystem read-only
[  167.697704][ T7978] NILFS (loop3): error -5 truncating bmap (ino=12)
[  167.832628][ T5792] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  167.868787][ T5792] NILFS (loop3): discard dirty page: offset=0, ino=2
[  167.906604][ T5792] NILFS (loop3): discard dirty block: blocknr=14, size=4096
[  167.914294][ T5792] NILFS (loop3): discard dirty page: offset=0, ino=6
[  167.945292][ T5792] NILFS (loop3): discard dirty block: blocknr=23, size=4096
[  167.961286][ T5792] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  167.988226][ T5792] NILFS (loop3): discard dirty block: blocknr=24, size=4096
[  167.995611][ T5792] NILFS (loop3): discard dirty page: offset=8192, ino=6
[  168.052856][ T5792] NILFS (loop3): discard dirty block: blocknr=25, size=4096
[  168.357467][ T8013] Cannot find del_set index 2 as target
[  168.755727][ T8027] loop2: detected capacity change from 0 to 64
[  169.209838][ T8037] loop1: detected capacity change from 0 to 128
[  169.333127][ T8037] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  169.378243][ T8037] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.400793][ T8037] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.981: Directory block failed checksum
[  169.499259][ T5787] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  169.876715][   T23] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  170.056717][    T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  170.091636][   T23] usb 4-1: unable to get BOS descriptor or descriptor too short
[  170.103401][   T23] usb 4-1: not running at top speed; connect to a high speed hub
[  170.122627][   T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.149586][   T23] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe
[  170.166885][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.174952][   T23] usb 4-1: Product: syz
[  170.189261][   T23] usb 4-1: Manufacturer: syz
[  170.199316][   T23] usb 4-1: SerialNumber: syz
[  170.205485][   T27] audit: type=1400 audit(1758279440.186:2120): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8065 comm="syz.0.994"
[  170.218237][   T23] usb 4-1: config 0 descriptor??
[  170.270447][    T8] usb 3-1: config 0 has an invalid interface number: 110 but max is 0
[  170.289393][    T8] usb 3-1: config 0 has no interface number 0
[  170.295614][    T8] usb 3-1: config 0 interface 110 has no altsetting 0
[  170.316939][    T8] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  170.336393][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.344747][    T8] usb 3-1: Product: syz
[  170.352173][    T8] usb 3-1: Manufacturer: syz
[  170.357463][    T8] usb 3-1: SerialNumber: syz
[  170.373121][    T8] usb 3-1: config 0 descriptor??
[  170.542228][ T5835] usb 4-1: USB disconnect, device number 6
[  170.551959][ T8074] netlink: 'syz.1.998': attribute type 9 has an invalid length.
[  170.611461][    T8] cdc_subset: probe of 3-1:0.110 failed with error -22
[  170.862820][    T8] usb 3-1: USB disconnect, device number 4
[  170.921239][ T8082] loop1: detected capacity change from 0 to 2048
[  170.956637][ T8082] NILFS (loop1): unrecognized mount option ">"
[  170.997306][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1003'.
[  171.102460][ T8086] loop1: detected capacity change from 0 to 256
[  171.134955][ T8086] FAT-fs (loop1): Directory bread(block 64) failed
[  171.143872][ T8086] FAT-fs (loop1): Directory bread(block 65) failed
[  171.156365][ T8086] FAT-fs (loop1): Directory bread(block 66) failed
[  171.186693][ T8086] FAT-fs (loop1): Directory bread(block 67) failed
[  171.195514][ T8086] FAT-fs (loop1): Directory bread(block 68) failed
[  171.225883][ T8086] FAT-fs (loop1): Directory bread(block 69) failed
[  171.243448][ T8086] FAT-fs (loop1): Directory bread(block 70) failed
[  171.268129][ T8086] FAT-fs (loop1): Directory bread(block 71) failed
[  171.274825][ T8086] FAT-fs (loop1): Directory bread(block 72) failed
[  171.348083][ T8086] FAT-fs (loop1): Directory bread(block 73) failed
[  171.814246][ T8104] [U] ^R
[  171.898716][ T8108] loop3: detected capacity change from 0 to 8
[  171.906396][ T8108] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  172.004491][ T8111] loop2: detected capacity change from 0 to 256
[  172.021418][ T8108] cramfs: Error -3 while decompressing!
[  172.021624][ T8111] exfat: Deprecated parameter 'namecase'
[  172.051376][ T8111] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  172.064583][ T8108] cramfs: ffffffff96fdc2e8(18)->ffff888075368000(4096)
[  172.076774][ T8108] cramfs: Error -3 while decompressing!
[  172.106410][ T8108] cramfs: ffffffff96fdc2e8(18)->ffff888075368000(4096)
[  172.160506][   T27] audit: type=1800 audit(1758279442.136:2121): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1014" name="file1" dev="loop3" ino=324 res=0 errno=0
[  172.335483][ T8117] netlink: 'syz.0.1019': attribute type 13 has an invalid length.
[  173.087122][   T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  173.151509][   T27] audit: type=1326 audit(1758279443.126:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c658ec29 code=0x7ffc0000
[  173.209752][   T27] audit: type=1326 audit(1758279443.126:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c658ec29 code=0x7ffc0000
[  173.273124][   T27] audit: type=1326 audit(1758279443.136:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f90c658ec29 code=0x7ffc0000
[  173.309277][   T23] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  173.322452][   T27] audit: type=1326 audit(1758279443.136:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c658ec29 code=0x7ffc0000
[  173.346679][   T23] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  173.381042][   T23] usb 2-1: config 220 has no interface number 2
[  173.397830][   T23] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.406641][   T27] audit: type=1326 audit(1758279443.136:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.3.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c658ec29 code=0x7ffc0000
[  173.416608][   T23] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  173.487157][   T23] usb 2-1: config 220 interface 0 has no altsetting 0
[  173.533963][   T23] usb 2-1: config 220 interface 76 has no altsetting 0
[  173.544668][   T23] usb 2-1: config 220 interface 1 has no altsetting 0
[  173.569532][   T23] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  173.581896][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.595982][   T23] usb 2-1: Product: syz
[  173.599299][   T27] audit: type=1326 audit(1758279443.586:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c658ec29 code=0x7ffc0000
[  173.604139][   T23] usb 2-1: Manufacturer: syz
[  173.622519][    C0] vkms_vblank_simulate: vblank timer overrun
[  173.640747][   T23] usb 2-1: SerialNumber: syz
[  173.653107][   T27] audit: type=1326 audit(1758279443.586:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c658ec29 code=0x7ffc0000
[  173.710397][   T27] audit: type=1326 audit(1758279443.616:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f90c658ec29 code=0x7ffc0000
[  173.905481][   T23] usb 2-1: selecting invalid altsetting 0
[  173.917328][   T23] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  173.923844][   T23] usb 2-1: No valid video chain found.
[  173.946076][   T23] usb 2-1: selecting invalid altsetting 0
[  173.952170][   T23] usbtest: probe of 2-1:220.1 failed with error -22
[  173.972240][   T23] usb 2-1: USB disconnect, device number 4
[  174.290190][ T8170] loop3: detected capacity change from 0 to 4096
[  174.348118][ T8171] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.383079][ T8173] cgroup: name respecified
[  174.736338][ T8181] loop1: detected capacity change from 0 to 256
[  174.752801][ T8177] loop2: detected capacity change from 0 to 4096
[  174.842032][ T8181] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  174.881078][ T8182] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.945135][ T8177] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  174.966089][ T8181] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008)
[  174.977420][ T8177] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12)
[  174.983245][ T8184] loop3: detected capacity change from 0 to 512
[  175.002466][ T8177] Remounting filesystem read-only
[  175.015706][ T8177] NILFS (loop2): error -5 truncating bmap (ino=12)
[  175.056483][ T8184] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  175.088711][ T8184] EXT4-fs (loop3): orphan cleanup on readonly fs
[  175.095677][ T5786] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  175.118631][ T5786] NILFS (loop2): discard dirty page: offset=0, ino=2
[  175.125389][ T5786] NILFS (loop2): discard dirty block: blocknr=14, size=4096
[  175.133208][ T5786] NILFS (loop2): discard dirty page: offset=0, ino=6
[  175.140363][ T5786] NILFS (loop2): discard dirty block: blocknr=23, size=4096
[  175.144676][ T8184] EXT4-fs warning (device loop3): ext4_enable_quotas:7175: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  175.209564][ T5786] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  175.226667][ T5786] NILFS (loop2): discard dirty block: blocknr=24, size=4096
[  175.234517][ T5786] NILFS (loop2): discard dirty page: offset=8192, ino=6
[  175.242066][ T8184] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  175.266797][ T5786] NILFS (loop2): discard dirty block: blocknr=25, size=4096
[  175.278139][ T8184] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.1052: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  175.334879][ T8184] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1052: couldn't read orphan inode 13 (err -117)
[  175.371611][ T8184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  175.456990][ T8184] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  175.490027][ T8184] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  175.538005][ T8184] EXT4-fs warning (device loop3): ext4_enable_quotas:7175: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  175.681694][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.882550][ T8200] loop3: detected capacity change from 0 to 1024
[  176.062686][  T143] hfsplus: b-tree write err: -5, ino 4
[  176.156634][ T5788] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  176.382011][ T5788] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  176.416841][ T5788] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  176.446966][ T5788] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  176.468602][ T5788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.485280][ T8214] loop2: detected capacity change from 0 to 512
[  176.499538][ T8201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  176.519039][ T8214] EXT4-fs: inline encryption not supported
[  176.529177][ T5788] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  176.541232][ T8214] EXT4-fs (loop2): Test dummy encryption mode enabled
[  176.563292][ T8214] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  176.656282][ T8214] EXT4-fs (loop2): 1 truncate cleaned up
[  176.683480][ T8214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.727351][ T8214] EXT4-fs error (device loop2): ext4_find_extent:900: inode #15: comm syz.2.1066: inode has invalid extent depth: 25964
[  176.786252][ T8214] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size
[  176.896009][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.040301][ T5788] usb 2-1: USB disconnect, device number 5
[  177.351975][ T8238] overlayfs: unescaped trailing colons in lowerdir mount option.
[  177.719556][ T8250] loop3: detected capacity change from 0 to 256
[  178.012940][ T8256] loop1: detected capacity change from 0 to 128
[  178.021840][ T8258] binder: 8257:8258 unknown command 1074553619
[  178.029718][ T8258] binder: 8257:8258 ioctl c0306201 200000000540 returned -22
[  178.169834][ T8261] overlayfs: missing 'lowerdir'
[  178.568132][ T8268] loop3: detected capacity change from 0 to 4096
[  178.585852][ T8268] __ntfs_warning: 2 callbacks suppressed
[  178.585874][ T8268] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  178.693353][ T8268] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  178.739589][ T8268] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing.
[  178.760941][ T8268] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  178.820796][ T8268] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  178.885985][ T8268] ntfs: volume version 3.1.
[  178.918186][ T8268] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[  178.955664][ T8268] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  178.973085][ T8268] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  179.056825][ T5888] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  179.114598][ T8268] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[  179.114809][ T8268] ntfs: (device loop3): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5.
[  179.177244][ T8286] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  179.177270][ T8286] CIFS mount error: No usable UNC path provided in device string!
[  179.177270][ T8286] 
[  179.177520][ T8286] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  179.247355][ T5888] usb 2-1: Using ep0 maxpacket: 32
[  179.260310][ T5888] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  179.260340][ T5888] usb 2-1: config 0 has no interface number 0
[  179.272051][ T5888] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  179.272085][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.272105][ T5888] usb 2-1: Product: syz
[  179.272121][ T5888] usb 2-1: Manufacturer: syz
[  179.272136][ T5888] usb 2-1: SerialNumber: syz
[  179.274792][ T5888] usb 2-1: config 0 descriptor??
[  179.496816][ T5888] radio-si470x 2-1:0.35: this is not a si470x device.
[  179.698537][ T5888] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  179.737484][ T5888] usb 2-1: USB disconnect, device number 6
[  180.511012][ T8320] syz.1.1114 uses obsolete (PF_INET,SOCK_PACKET)
[  180.891947][ T8331] xt_policy: too many policy elements
[  182.428000][ T8393] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1142'.
[  182.450728][ T8396] dlm: non-version read from control device 59
[  183.000884][ T8413] x_tables: duplicate underflow at hook 3
[  183.059548][ T8415] loop2: detected capacity change from 0 to 8
[  183.128983][ T8415] SQUASHFS error: Failed to read block 0x6e6: -5
[  183.132310][ T8418] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1153'.
[  183.135369][ T8415] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  183.162463][ T8415] SQUASHFS error: Unable to read inode 0xa7
[  183.237374][ T8422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1155'.
[  183.247053][ T8422] unsupported nlmsg_type 40
[  183.284654][ T8424] syz.3.1154 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  183.598647][ T8432] netlink: 460 bytes leftover after parsing attributes in process `syz.3.1159'.
[  184.132856][ T8453] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1169'.
[  184.321641][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'.
[  184.653574][ T8473] loop1: detected capacity change from 0 to 8
[  185.332959][ T8496] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1185'.
[  185.374305][ T8496] unsupported nla_type 65024
[  185.459893][ T8500] loop1: detected capacity change from 0 to 256
[  185.784742][ T8502] loop2: detected capacity change from 0 to 4096
[  185.907433][ T8510] netlink: 'syz.3.1190': attribute type 2 has an invalid length.
[  186.705183][ T8526] loop2: detected capacity change from 0 to 4096
[  186.731453][ T8526] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  188.028223][ T8572] overlayfs: missing 'lowerdir'
[  188.681186][ T8589] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  188.702257][ T8589] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  188.805725][ T8593] loop2: detected capacity change from 0 to 8
[  190.448519][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'.
[  190.489980][ T8639] netlink: zone id is out of range
[  190.495205][ T8639] netlink: del zone limit has 4 unknown bytes
[  190.692182][ T8622] loop1: detected capacity change from 0 to 32768
[  190.722259][ T8622] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1236 (8622)
[  190.776373][ T8622] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  190.806091][ T8622] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  190.825015][ T8649] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  190.826993][ T8622] BTRFS info (device loop1): using free space tree
[  190.999964][ T8622] BTRFS info (device loop1): enabling ssd optimizations
[  191.024741][ T8622] BTRFS info (device loop1): auto enabling async discard
[  191.343745][ T5787] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  191.391639][ T8673] bond0: entered allmulticast mode
[  191.547876][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'.
[  191.909882][ T8694] xt_connbytes: Forcing CT accounting to be enabled
[  191.953810][ T8694] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  191.987984][ T8694] xt_bpf: check failed: parse error
[  192.259392][ T8704] Unknown options in mask 5
[  192.596203][ T8714] netlink: 'syz.2.1274': attribute type 8 has an invalid length.
[  192.775361][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'.
[  192.998951][ T8725] netlink: 'syz.3.1279': attribute type 3 has an invalid length.
[  193.271760][ T8735] loop2: detected capacity change from 0 to 512
[  193.318172][ T8735] EXT4-fs (loop2): Test dummy encryption mode enabled
[  193.366796][ T8735] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  193.404116][ T8735] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1284: bad orphan inode 131083
[  193.417733][ T8708] loop1: detected capacity change from 0 to 32768
[  193.432303][ T8735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.473099][ T8708] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  193.527495][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.964307][ T8708] XFS (loop1): Ending clean mount
[  194.199170][ T8761] block device autoloading is deprecated and will be removed.
[  194.219973][ T8761] syz.3.1291: attempt to access beyond end of device
[  194.219973][ T8761] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  194.239116][ T5787] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  194.586400][ T8771] hsr0: VLAN not yet supported
[  194.666365][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  194.696704][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  195.133040][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.176031][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.315421][ T8787] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  195.382981][ T8787] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  195.662732][ T8801] loop3: detected capacity change from 0 to 512
[  195.681330][ T8801] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  195.996076][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'.
[  196.046582][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'.
[  197.650996][ T8867] bridge1: the hash_elasticity option has been deprecated and is always 16
[  197.651515][ T8867] bridge1: entered promiscuous mode
[  197.651537][ T8867] bridge1: entered allmulticast mode
[  198.171742][ T8877] loop1: detected capacity change from 0 to 2048
[  198.186825][ T8877] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  198.232305][ T8880] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.327987][ T8877] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952
[  198.366732][ T8877] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15)
[  198.428550][ T8877] Remounting filesystem read-only
[  198.428601][ T8877] NILFS (loop1): error -5 truncating bmap (ino=15)
[  198.620259][ T5787] NILFS (loop1): discard dirty page: offset=0, ino=6
[  198.620314][ T5787] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  198.620352][ T5787] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  198.620369][ T5787] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  198.620385][ T5787] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  198.622468][ T5787] NILFS (loop1): discard dirty page: offset=0, ino=3
[  198.622490][ T5787] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  198.622507][ T5787] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  198.622604][ T5787] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  198.622620][ T5787] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  198.622643][ T5787] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  198.622660][ T5787] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  198.622676][ T5787] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  198.622693][ T5787] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  198.622709][ T5787] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  198.881489][ T8871] loop2: detected capacity change from 0 to 32768
[  199.116150][ T8898] loop1: detected capacity change from 0 to 1024
[  199.240415][ T8898] hfsplus: inconsistency in B*Tree (31095,1,255,1,0)
[  199.627807][ T8910] loop3: detected capacity change from 0 to 512
[  199.668790][ T8910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  199.757765][ T8910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.795897][ T8910] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.810421][ T8918] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1361'.
[  199.868095][ T8918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1361'.
[  199.906217][ T8910] __quota_error: 5 callbacks suppressed
[  199.906235][ T8910] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6
[  199.943134][ T8918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1361'.
[  199.980803][ T8910] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  200.016811][ T8910] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.1360: Failed to acquire dquot type 1
[  200.031238][ T8918] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1361'.
[  200.175270][ T8926] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  200.226238][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.441105][ T8931] loop3: detected capacity change from 0 to 256
[  200.483257][ T8931] FAT-fs (loop3): Directory bread(block 64) failed
[  200.516343][ T8931] FAT-fs (loop3): Directory bread(block 65) failed
[  200.538708][ T8931] FAT-fs (loop3): Directory bread(block 66) failed
[  200.545387][ T8931] FAT-fs (loop3): Directory bread(block 67) failed
[  200.593302][ T8931] FAT-fs (loop3): Directory bread(block 68) failed
[  200.625774][ T8931] FAT-fs (loop3): Directory bread(block 69) failed
[  200.626098][ T8935] syz.0.1367: attempt to access beyond end of device
[  200.626098][ T8935] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  200.655473][ T8931] FAT-fs (loop3): Directory bread(block 70) failed
[  200.681096][ T8931] FAT-fs (loop3): Directory bread(block 71) failed
[  200.724890][ T8931] FAT-fs (loop3): Directory bread(block 72) failed
[  200.743256][ T8931] FAT-fs (loop3): Directory bread(block 73) failed
[  201.386695][ T5835] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  201.576970][ T5835] usb 3-1: Using ep0 maxpacket: 16
[  201.593132][ T5835] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  201.616715][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.625293][ T5835] usb 3-1: Product: syz
[  201.648889][ T5835] usb 3-1: Manufacturer: syz
[  201.663831][ T5835] usb 3-1: SerialNumber: syz
[  201.681427][ T5835] usb 3-1: config 0 descriptor??
[  201.956916][ T5835] usb 3-1: ignoring: not an USB2CAN converter
[  202.137186][ T8972] netlink: 'syz.1.1387': attribute type 1 has an invalid length.
[  202.165654][ T8972] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1387'.
[  202.176747][    T9] usb 3-1: USB disconnect, device number 5
[  202.522310][ T8956] loop3: detected capacity change from 0 to 32768
[  202.559937][ T8956] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  202.619111][ T8956] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  202.841356][ T8956] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  202.908965][ T5888] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  202.916168][ T5888] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  203.089868][ T8987] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  203.118901][ T5888] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 202ms
[  203.165389][ T5888] gfs2: fsid=syz:syz.0: jid=0: Done
[  203.173358][ T8956] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  203.694735][ T8995] loop2: detected capacity change from 0 to 8192
[  203.714137][ T8995] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  203.738237][ T8995] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  203.773284][ T8995] REISERFS (device loop2): using ordered data mode
[  203.842708][ T8995] reiserfs: using flush barriers
[  203.852810][ T8995] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  203.887653][ T8995] REISERFS (device loop2): checking transaction log (loop2)
[  204.161612][ T8995] REISERFS (device loop2): Using tea hash to sort names
[  204.199771][ T8995] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  204.847369][ T9028] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  204.854826][ T9028] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  204.883614][ T9023] loop3: detected capacity change from 0 to 4096
[  204.918886][ T9023] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  205.072772][ T9023] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  205.332845][ T9037] netlink: 'syz.0.1417': attribute type 21 has an invalid length.
[  205.381601][ T9037] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1417'.
[  205.426819][ T9037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1417'.
[  205.809908][ T9052] overlayfs: empty lowerdir
[  206.506388][ T9075] loop2: detected capacity change from 0 to 1024
[  206.548026][ T9075] EXT4-fs: Ignoring removed mblk_io_submit option
[  206.589014][ T9075] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  206.658512][ T9075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.778437][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.898659][ T9089] loop1: detected capacity change from 0 to 64
[  206.967541][ T9089] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  207.862416][ T9118] geneve2: entered promiscuous mode
[  207.897137][ T9118] geneve2: entered allmulticast mode
[  208.008662][ T9121] netlink: 'syz.1.1459': attribute type 10 has an invalid length.
[  208.053499][ T9121] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  208.487252][   T27] audit: type=1400 audit(1758279478.476:2137): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=9135 comm="syz.0.1466"
[  208.543274][ T9138] loop3: detected capacity change from 0 to 2368
[  208.626862][ T5835] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  208.828791][ T5835] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  208.837176][ T5835] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  208.868223][ T5835] usb 2-1: config 0 has no interface number 0
[  208.888798][ T5835] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  208.922704][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.937545][ T5835] usb 2-1: Product: syz
[  208.941776][ T5835] usb 2-1: Manufacturer: syz
[  208.946405][ T5835] usb 2-1: SerialNumber: syz
[  208.999523][ T5835] usb 2-1: config 0 descriptor??
[  209.416717][ T5835] usb 2-1: Found UVC 0.00 device syz (046d:0823)
[  209.437135][ T5835] usb 2-1: No valid video chain found.
[  209.474354][ T5835] usb 2-1: USB disconnect, device number 7
[  209.522565][ T9164] ieee802154 phy0 wpan0: encryption failed: -90
[  209.664135][ T9167] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.1481'.
[  209.964014][ T9175] loop2: detected capacity change from 0 to 4096
[  210.032992][ T9175] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  210.136629][ T9175] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  210.186632][ T9175] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  210.234574][ T9175] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  210.315754][ T9175] ntfs: volume version 3.1.
[  210.451050][ T9175] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  210.494786][ T9175] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[  210.565463][ T9190] netlink: 'syz.3.1493': attribute type 10 has an invalid length.
[  210.737020][ T9194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1496'.
[  210.788881][ T9196] loop2: detected capacity change from 0 to 64
[  210.807633][ T9190] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  210.837735][ T9190] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  210.870677][ T9190] team0: Port device wlan1 added
[  210.962314][ T9198] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1497'.
[  211.538781][ T9212] loop3: detected capacity change from 0 to 2048
[  211.578659][ T9212] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.993942][ T9224] loop2: detected capacity change from 0 to 8192
[  212.020778][ T9224] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  212.054549][ T9224] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  212.066996][ T9224] REISERFS (device loop2): using ordered data mode
[  212.088348][ T9224] reiserfs: using flush barriers
[  212.104438][ T5102] Bluetooth: hci1: command 0x0406 tx timeout
[  212.106830][ T5793] Bluetooth: hci0: command 0x080f tx timeout
[  212.110633][ T5801] Bluetooth: hci2: command 0x0406 tx timeout
[  212.136674][ T9224] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  212.255533][ T9224] REISERFS (device loop2): checking transaction log (loop2)
[  212.302912][ T9224] REISERFS (device loop2): Using r5 hash to sort names
[  212.321650][ T9224] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  213.143152][   T27] audit: type=1326 audit(1758279483.126:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.2.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x7ffc0000
[  213.165533][    C0] vkms_vblank_simulate: vblank timer overrun
[  213.179353][ T9266] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[  213.261957][   T27] audit: type=1326 audit(1758279483.126:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.2.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x7ffc0000
[  213.364329][   T27] audit: type=1326 audit(1758279483.146:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.2.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f590e98ec29 code=0x7ffc0000
[  213.945522][ T9291] loop3: detected capacity change from 0 to 64
[  213.994512][ T9291] Trying to free block not in datazone
[  214.231910][ T9301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1548'.
[  214.448070][ T9310] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1552'.
[  214.586800][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1554'.
[  214.595878][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1554'.
[  215.755099][ T9357] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1576'.
[  215.959785][ T9362] team0: entered promiscuous mode
[  215.964928][ T9362] team_slave_0: entered promiscuous mode
[  215.987422][ T9362] team_slave_1: entered promiscuous mode
[  216.142010][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'.
[  216.378497][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  216.378512][   T27] audit: type=1326 audit(1758279486.366:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd614d8ec29 code=0x7ffc0000
[  216.458362][   T27] audit: type=1326 audit(1758279486.366:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd614d8ec29 code=0x7ffc0000
[  216.496748][   T27] audit: type=1326 audit(1758279486.366:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd614d8ec29 code=0x7ffc0000
[  216.539383][   T27] audit: type=1326 audit(1758279486.366:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd614d8ec29 code=0x7ffc0000
[  216.634721][   T27] audit: type=1326 audit(1758279486.366:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.0.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd614d8ec29 code=0x7ffc0000
[  217.502448][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'.
[  217.727497][ T9427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1610'.
[  217.995777][ T9437] loop2: detected capacity change from 0 to 256
[  218.243244][ T9443] loop3: detected capacity change from 0 to 2048
[  218.283112][ T9443] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.620726][ T9457] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1624'.
[  219.475449][ T9487] loop1: detected capacity change from 0 to 512
[  219.554677][ T9487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.633232][ T9487] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.750254][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.873305][ T9500] futex_wake_op: syz.3.1646 tries to shift op by -1; fix this program
[  220.700385][ T9520] loop1: detected capacity change from 0 to 8192
[  220.760749][ T9520] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  220.816831][ T9537] loop2: detected capacity change from 0 to 16
[  220.823766][ T9520] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  220.843077][ T9520] REISERFS (device loop1): using ordered data mode
[  220.849966][ T9520] reiserfs: using flush barriers
[  220.861408][ T9537] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  220.875388][ T9520] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  220.893979][ T9520] REISERFS (device loop1): checking transaction log (loop1)
[  220.905626][ T9520] REISERFS (device loop1): Using r5 hash to sort names
[  220.937077][ T9520] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  220.978475][ T9520] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  221.279415][ T9543] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1666'.
[  221.306109][ T9543] 0ªX¹¦D: renamed from macvtap0 (while UP)
[  221.353703][ T9543] 0ªX¹¦D: entered allmulticast mode
[  221.386421][ T9543] veth0_macvtap: entered allmulticast mode
[  221.397312][ T9543] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  221.973307][ T9565] loop3: detected capacity change from 0 to 8
[  222.760425][ T9591] comedi comedi1: pcl816: I/O port conflict (0x4f27,16)
[  223.311532][ T9581] loop2: detected capacity change from 0 to 32768
[  223.354246][ T9611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1700'.
[  223.357494][ T9581] (syz.2.1685,9581,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  223.380776][ T9603] loop1: detected capacity change from 0 to 4096
[  223.407048][ T9581] (syz.2.1685,9581,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  223.481552][ T9581] JBD2: Ignoring recovery information on journal
[  223.542852][ T9603] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  223.619915][ T9603] ntfs3: loop1: Failed to load $Extend (-22).
[  223.629423][ T9603] ntfs3: loop1: Failed to initialize $Extend.
[  223.719774][ T9581] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  223.828942][ T9618] loop3: detected capacity change from 0 to 2048
[  223.858497][ T9618] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  223.903368][ T9618] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  223.942436][ T9618] UDF-fs: Scanning with blocksize 512 failed
[  223.978810][ T9618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.080205][ T5786] ocfs2: Unmounting device (7,2) on (node local)
[  224.135686][ T9625] loop1: detected capacity change from 0 to 128
[  224.396714][ T9629] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  224.710310][ T9639] binder: 9636:9639 ioctl c0046209 0 returned -22
[  224.828953][ T9643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1715'.
[  225.151449][ T9656] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  225.174946][ T9656] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  225.193575][ T9656] overlayfs: missing 'lowerdir'
[  225.471720][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'.
[  225.796008][ T9676] xt_CONNSECMARK: invalid mode: 0
[  225.916781][ T5888] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  226.128847][ T5888] usb 2-1: Using ep0 maxpacket: 8
[  226.155922][ T5888] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  226.176679][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.205186][ T5888] usb 2-1: Product: syz
[  226.218429][ T5888] usb 2-1: Manufacturer: syz
[  226.223105][ T5888] usb 2-1: SerialNumber: syz
[  226.239005][ T9692] loop2: detected capacity change from 0 to 8
[  226.249742][ T5888] usb 2-1: config 0 descriptor??
[  226.263486][ T5888] gspca_main: sq930x-2.14.0 probing 2770:930c
[  226.625131][ T9702] xt_l2tp: missing protocol rule (udp|l2tpip)
[  226.680278][ T5888] gspca_sq930x: ucbus_write failed -71
[  226.907534][ T9712] loop2: detected capacity change from 0 to 64
[  226.926611][ T5888] gspca_sq930x: Sensor ov9630 not yet treated
[  226.932928][ T5888] sq930x: probe of 2-1:0.0 failed with error -22
[  226.971448][ T5888] usb 2-1: USB disconnect, device number 8
[  227.435313][ T9728] netlink: 4168 bytes leftover after parsing attributes in process `syz.3.1757'.
[  227.642846][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'.
[  227.949880][ T9748] loop1: detected capacity change from 0 to 512
[  228.252420][ T9758] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1772'.
[  228.432440][ T9758] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1772'.
[  228.550009][ T9769] xt_bpf: check failed: parse error
[  229.193245][ T9791] loop1: detected capacity change from 0 to 764
[  229.233673][ T9791] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  229.733467][ T9811] loop3: detected capacity change from 0 to 512
[  229.768206][ T9811] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  229.828847][ T9811] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  229.855633][ T9820] netlink: 'syz.0.1800': attribute type 1 has an invalid length.
[  229.911242][ T9811] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  229.967080][ T9811] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.1798: Failed to acquire dquot type 1
[  230.041528][ T9811] EXT4-fs (loop3): 1 truncate cleaned up
[  230.051506][ T9811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.140059][ T9826] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1804'.
[  230.209337][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1804'.
[  230.225380][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'.
[  230.242036][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.654297][ T9842] loop1: detected capacity change from 0 to 512
[  230.708267][ T9842] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  230.807263][ T9842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.876005][ T9842] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.961957][ T9842] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  230.988707][ T9842] EXT4-fs (loop1): Remounting filesystem read-only
[  231.000679][ T9854] loop2: detected capacity change from 0 to 4096
[  231.037220][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.046392][ T9854] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  231.074711][ T3500] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  231.094209][ T9856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1818'.
[  231.096411][ T3500] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  231.136897][ T9854] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  231.137590][ T9856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1818'.
[  231.153508][ T9854] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  231.226585][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  231.406627][    T9] usb 1-1: Using ep0 maxpacket: 8
[  231.418857][    T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  231.453944][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  231.471072][    T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[  231.496536][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.535224][    T9] usb 1-1: Product: syz
[  231.556595][    T9] usb 1-1: Manufacturer: syz
[  231.561291][    T9] usb 1-1: SerialNumber: syz
[  231.597923][    T9] usb 1-1: config 0 descriptor??
[  231.623142][    T9] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  231.863966][    T9] snd_usb_toneport 1-1:0.0: cannot get proper max packet size
[  231.884924][    T9] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  231.895666][ T9874] netlink: 'syz.2.1828': attribute type 5 has an invalid length.
[  231.905802][    T9] snd_usb_toneport: probe of 1-1:0.0 failed with error -22
[  232.140368][ T5788] usb 1-1: USB disconnect, device number 7
[  232.372662][   T27] audit: type=1326 audit(1758279502.346:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.1.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  232.440957][   T27] audit: type=1326 audit(1758279502.356:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.1.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  232.492955][   T27] audit: type=1326 audit(1758279502.396:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.1.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  232.552437][   T27] audit: type=1326 audit(1758279502.396:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.1.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  232.616419][   T27] audit: type=1326 audit(1758279502.396:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.1.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  232.700348][ T9872] loop3: detected capacity change from 0 to 40427
[  232.731071][ T9872] F2FS-fs (loop3): Invalid segment count (0)
[  232.786914][ T9872] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  232.825374][ T9896] loop1: detected capacity change from 0 to 256
[  232.863358][ T9872] F2FS-fs (loop3): Found nat_bits in checkpoint
[  233.072229][ T9872] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  233.094827][ T9872] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  233.217620][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  233.433264][    T9] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  233.442944][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.466907][    T9] usb 3-1: config 0 has no interface number 0
[  233.473194][    T9] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  233.506806][    T9] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  233.540824][    T9] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  233.559772][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.586618][    T9] usb 3-1: Product: syz
[  233.591003][    T9] usb 3-1: Manufacturer: syz
[  233.595639][    T9] usb 3-1: SerialNumber: syz
[  233.622360][    T9] usb 3-1: config 0 descriptor??
[  233.863113][    T9] usbtouchscreen: probe of 3-1:0.117 failed with error -71
[  233.904550][    T9] usb 3-1: USB disconnect, device number 6
[  234.304010][ T9932] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1846'.
[  234.865889][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'.
[  235.550392][ T9974] netlink: 'syz.3.1875': attribute type 29 has an invalid length.
[  235.567065][ T9974] netlink: 'syz.3.1875': attribute type 29 has an invalid length.
[  235.846145][ T9982] IPVS: length: 225 != 8
[  236.474106][ T9996] loop2: detected capacity change from 0 to 4096
[  236.503235][ T9996] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  236.738221][ T9996] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  236.787111][ T9996] ntfs3: loop2: ino=1f, "file2" failed to open parent directory r=5 to update
[  236.929331][   T58] ntfs3: loop2: ino=1f, failed to open parent directory r=5 to update
[  237.264011][ T9989] loop1: detected capacity change from 0 to 32768
[  237.281004][ T9989] XFS: noikeep mount option is deprecated.
[  237.309051][T10014] xt_CT: You must specify a L4 protocol and not use inversions on it
[  237.312112][ T9989] XFS: ikeep mount option is deprecated.
[  237.365965][ T9989] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.589534][T10008] loop3: detected capacity change from 0 to 32768
[  237.618173][ T9989] XFS (loop1): Ending clean mount
[  237.672722][ T9989] XFS: noikeep mount option is deprecated.
[  237.866679][ T5787] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.520451][T10046] loop1: detected capacity change from 0 to 2048
[  238.541023][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1908'.
[  239.122868][T10064] sock: sock_timestamping_bind_phc: sock not bind to device
[  239.750512][T10088] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  240.016233][T10098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1934'.
[  240.845105][T10094] loop1: detected capacity change from 0 to 32768
[  240.914514][T10094] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  241.048426][T10126] loop3: detected capacity change from 0 to 4096
[  241.133210][ T5787] ocfs2: Unmounting device (7,1) on (node local)
[  241.174930][T10126] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  241.289422][T10126] ntfs3: loop3: ino=1e, "file1" The size of extended attributes must not exceed 64KiB
[  241.569800][T10110] loop2: detected capacity change from 0 to 40427
[  241.648943][T10110] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[  241.709768][T10110] F2FS-fs (loop2): invalid crc value
[  241.759157][T10110] F2FS-fs (loop2): Found nat_bits in checkpoint
[  241.997120][T10110] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  242.994603][T10180] loop1: detected capacity change from 0 to 64
[  243.387363][T10191] tmpfs: Bad value for 'mpol'
[  243.454365][T10195] loop1: detected capacity change from 0 to 1024
[  243.561255][T10195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  243.638231][T10195] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.763635][T10195] EXT4-fs error (device loop1): ext4_get_first_dir_block:3606: inode #12: comm syz.1.1978: directory missing '..'
[  243.836196][T10185] loop3: detected capacity change from 0 to 32768
[  243.851493][T10185] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1973 (10185)
[  243.915934][T10185] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  243.959967][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  243.969818][T10185] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  243.980513][T10185] BTRFS info (device loop3): force zlib compression, level 3
[  243.988159][T10185] BTRFS info (device loop3): force clearing of disk cache
[  243.996343][T10185] BTRFS info (device loop3): setting nodatasum
[  244.008497][T10185] BTRFS info (device loop3): allowing degraded mounts
[  244.039836][T10185] BTRFS info (device loop3): enabling disk space caching
[  244.062501][T10185] BTRFS info (device loop3): disk space caching is enabled
[  244.319786][T10185] BTRFS info (device loop3): auto enabling async discard
[  244.360476][T10185] BTRFS info (device loop3): rebuilding free space tree
[  244.437063][T10185] BTRFS info (device loop3): disabling free space tree
[  244.444107][T10185] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  244.506457][T10185] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  244.800934][T10185] BTRFS info (device loop3): balance: start -ssoft,profiles=NONE,drange=0..18446744073709551614,vrange=0..8,limit=0,limit=0..0
[  244.837354][T10185] BTRFS info (device loop3): balance: ended with status: 0
[  244.883246][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1995'.
[  244.973464][ T5792] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  245.043368][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1996'.
[  245.433305][T10264] loop1: detected capacity change from 0 to 512
[  245.498002][T10264] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  245.564971][T10264] FAT-fs (loop1): FAT read failed (blocknr 1568)
[  245.886694][T10274] ax25_connect(): syz.2.2006 uses autobind, please contact jreuter@yaina.de
[  246.153252][T10283] loop1: detected capacity change from 0 to 2048
[  246.200724][T10283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  246.656444][T10299] netlink: 'syz.2.2019': attribute type 2 has an invalid length.
[  246.684883][T10299] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2019'.
[  247.235632][T10322] loop2: detected capacity change from 0 to 64
[  247.443314][T10324] xt_connbytes: Forcing CT accounting to be enabled
[  247.477638][T10324] xt_bpf: check failed: parse error
[  247.720007][T10338] netlink: 'syz.2.2036': attribute type 21 has an invalid length.
[  248.250454][T10329] loop3: detected capacity change from 0 to 32768
[  248.286905][T10329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2032 (10329)
[  248.378168][T10329] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.408459][T10329] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  248.456142][T10329] BTRFS info (device loop3): enabling ssd optimizations
[  248.486734][T10329] BTRFS info (device loop3): using free space tree
[  248.593835][T10333] loop1: detected capacity change from 0 to 40427
[  248.621903][T10333] F2FS-fs (loop1): heap/no_heap options were deprecated
[  248.642849][T10333] F2FS-fs (loop1): invalid crc value
[  248.687437][T10329] BTRFS info (device loop3): auto enabling async discard
[  248.750099][T10333] F2FS-fs (loop1): Found nat_bits in checkpoint
[  248.750223][T10375] syz.0.2046 uses old SIOCAX25GETINFO
[  248.983156][ T5792] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  249.040152][T10333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  249.328330][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2052'.
[  250.320607][T10414] 8021q: VLANs not supported on wg2
[  250.486603][ T5888] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  250.697984][ T5888] usb 2-1: Using ep0 maxpacket: 8
[  250.708972][ T5888] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  250.730230][ T5888] usb 2-1: config 135 has an invalid descriptor of length 183, skipping remainder of the config
[  250.749240][ T5888] usb 2-1: config 135 has no interface number 0
[  250.755779][ T5888] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  250.801505][ T5888] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  250.835545][ T5888] usb 2-1: config 135 interface 230 has no altsetting 0
[  250.848690][ T5888] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  250.863390][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.896382][ T5888] usb 2-1: Product: syz
[  250.901175][ T5888] usb 2-1: Manufacturer: syz
[  250.918638][ T5888] usb 2-1: SerialNumber: syz
[  250.979031][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2073'.
[  251.032944][T10435] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  251.165295][ T5888] usb 2-1: Found UVC 0.00 device syz (18ec:3288)
[  251.176774][ T5888] usb 2-1: No valid video chain found.
[  251.203978][ T5888] usb 2-1: USB disconnect, device number 9
[  251.880797][T10463] ieee802154 phy0 wpan0: encryption failed: -22
[  251.886339][T10461] batadv1: entered promiscuous mode
[  251.918126][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'.
[  252.052013][T10468] netlink: 'syz.2.2089': attribute type 13 has an invalid length.
[  252.312466][T10477] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  252.455615][T10481] loop1: detected capacity change from 0 to 8
[  252.480682][T10481] SQUASHFS error: Failed to read block 0x636: -5
[  252.480756][T10481] SQUASHFS error: Unable to read metadata cache entry [634]
[  252.480789][T10481] SQUASHFS error: Unable to read metadata cache entry [634]
[  252.480803][T10481] SQUASHFS error: Unable to read directory block [629:0]
[  253.032468][   T28] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  253.217261][   T28] usb 3-1: Using ep0 maxpacket: 32
[  253.220268][   T28] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  253.220299][   T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.222930][   T28] usb 3-1: config 0 descriptor??
[  253.230185][   T28] gspca_main: nw80x-2.14.0 probing 055f:d001
[  253.641204][   T28] gspca_nw80x: reg_r err -71
[  253.645956][   T28] nw80x: probe of 3-1:0.0 failed with error -71
[  253.655878][   T28] usb 3-1: USB disconnect, device number 7
[  254.463241][T10541] loop3: detected capacity change from 0 to 256
[  254.467082][T10538] ipt_ECN: cannot use operation on non-tcp rule
[  254.854021][ T5788] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  255.076610][ T5788] usb 2-1: Using ep0 maxpacket: 32
[  255.101503][ T5788] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  255.123633][ T5788] usb 2-1: config 0 has no interface number 0
[  255.135145][ T5788] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  255.166554][ T5788] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  255.200583][ T5788] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  255.217142][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.231442][T10562] loop2: detected capacity change from 0 to 512
[  255.238451][ T5788] usb 2-1: Product: syz
[  255.242672][ T5788] usb 2-1: Manufacturer: syz
[  255.248922][T10562] EXT4-fs: Ignoring removed nomblk_io_submit option
[  255.256077][ T5788] usb 2-1: SerialNumber: syz
[  255.264921][T10562] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  255.273227][T10562] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  255.285051][ T5788] usb 2-1: config 0 descriptor??
[  255.286892][T10562] EXT4-fs (loop2): orphan cleanup on readonly fs
[  255.296298][ T5788] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  255.334351][T10562] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  255.344435][T10562] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  255.359470][T10562] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  255.379339][T10562] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2135: bg 0: block 40: padding at end of block bitmap is not set
[  255.402595][T10562] EXT4-fs (loop2): Remounting filesystem read-only
[  255.409978][T10562] EXT4-fs (loop2): 1 truncate cleaned up
[  255.436654][T10562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  255.519059][ T5788] usb 2-1: qt2_setup_urbs - submit read urb failed -90
[  255.542827][ T5788] quatech2: probe of 2-1:0.51 failed with error -90
[  255.572043][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.686086][T10569] netlink: 'syz.3.2138': attribute type 15 has an invalid length.
[  255.812232][ T5888] usb 2-1: USB disconnect, device number 10
[  255.864359][T10576] tmpfs: Group quota block hardlimit too large.
[  256.103083][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  256.110650][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  256.736818][   T28] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  256.854562][T10583] loop3: detected capacity change from 0 to 32768
[  256.931509][   T28] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  256.950576][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.970149][   T28] usb 1-1: Product: syz
[  256.974387][   T28] usb 1-1: Manufacturer: syz
[  257.002901][   T28] usb 1-1: SerialNumber: syz
[  257.037369][   T28] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  257.060257][T10606] loop2: detected capacity change from 0 to 4096
[  257.100886][ T5834] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  257.169298][T10606] NILFS (loop2): invalid segment: Checksum error in segment payload
[  257.216830][T10606] NILFS (loop2): trying rollback from an earlier position
[  257.276863][T10606] NILFS (loop2): recovery complete
[  257.807815][   T23] usb 1-1: USB disconnect, device number 8
[  257.888745][T10621] xt_TCPMSS: Only works on TCP SYN packets
[  258.134341][T10633] netlink: 'syz.2.2170': attribute type 10 has an invalid length.
[  258.184301][ T5834] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  258.202490][T10633] team0: Device veth1_macvtap failed to register rx_handler
[  258.212541][ T5834] ath9k_htc: Failed to initialize the device
[  258.230718][   T23] usb 1-1: ath9k_htc: USB layer deinitialized
[  258.506156][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2175'.
[  258.595602][T10647] gretap1: entered promiscuous mode
[  259.121949][T10667] batadv1: entered promiscuous mode
[  260.972633][T10708] loop2: detected capacity change from 0 to 32768
[  260.991155][T10708] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2205 (10708)
[  261.033396][T10708] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  261.057742][T10708] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  261.110716][T10708] BTRFS info (device loop2): enabling auto defrag
[  261.130558][T10708] BTRFS info (device loop2): doing ref verification
[  261.142188][T10708] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  261.166516][T10708] BTRFS info (device loop2): force lzo compression, level 0
[  261.174194][T10708] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  261.206515][T10708] BTRFS info (device loop2): trying to use backup root at mount time
[  261.239038][T10708] BTRFS info (device loop2): max_inline at 4096
[  261.245393][T10708] BTRFS info (device loop2): enabling ssd optimizations
[  261.266537][T10708] BTRFS info (device loop2): using spread ssd allocation scheme
[  261.274460][T10708] BTRFS info (device loop2): using free space tree
[  261.297772][T10708] workqueue: max_active 65524 requested for btrfs-worker is out of range, clamping between 1 and 512
[  261.329815][T10708] workqueue: max_active 65524 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[  261.361759][T10708] workqueue: max_active 65524 requested for btrfs-endio is out of range, clamping between 1 and 512
[  261.388379][T10708] workqueue: max_active 65524 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[  261.416757][T10708] workqueue: max_active 65524 requested for btrfs-rmw is out of range, clamping between 1 and 512
[  261.436657][T10708] workqueue: max_active 65524 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[  261.467438][T10708] workqueue: max_active 65524 requested for btrfs-compressed-write is out of range, clamping between 1 and 512
[  261.576677][T10708] BTRFS info (device loop2): auto enabling async discard
[  262.190017][ T5786] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  262.453983][T10763] netlink: 'syz.3.2225': attribute type 5 has an invalid length.
[  263.080651][T10757] loop1: detected capacity change from 0 to 32768
[  263.985835][T10807] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  263.987148][T10801] loop1: detected capacity change from 0 to 4096
[  264.021757][T10801] NILFS (loop1): invalid segment: Checksum error in segment payload
[  264.060810][T10801] NILFS (loop1): trying rollback from an earlier position
[  264.139795][T10801] NILFS (loop1): recovery complete
[  264.676821][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2256'.
[  264.839432][   T27] audit: type=1326 audit(1758279534.816:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10831 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  264.876720][T10833] netlink: 'syz.3.2258': attribute type 13 has an invalid length.
[  264.928206][   T27] audit: type=1326 audit(1758279534.816:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10831 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  265.004586][   T27] audit: type=1326 audit(1758279534.816:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10831 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  265.116611][   T27] audit: type=1326 audit(1758279534.816:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10831 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  265.163468][T10843] netlink: 'syz.3.2264': attribute type 5 has an invalid length.
[  265.203378][   T27] audit: type=1326 audit(1758279534.816:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10831 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f158ec29 code=0x7ffc0000
[  265.251831][T10845] netlink: 'syz.2.2265': attribute type 2 has an invalid length.
[  265.573687][T10857] loop1: detected capacity change from 0 to 1024
[  265.659410][T10857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.764043][T10864] netlink: 'syz.0.2273': attribute type 1 has an invalid length.
[  265.792198][T10857] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.2271: inode #12: comm syz.1.2271: iget: illegal inode #
[  265.861527][T10857] EXT4-fs (loop1): Remounting filesystem read-only
[  265.958739][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.667725][T10892] netlink: 'syz.0.2286': attribute type 21 has an invalid length.
[  266.716724][T10892] netlink: 'syz.0.2286': attribute type 1 has an invalid length.
[  267.025161][T10871] loop3: detected capacity change from 0 to 32768
[  267.132447][ T5804] Bluetooth: hci2: unexpected event for opcode 0x202f
[  267.447982][T10914] netlink: 'syz.0.2298': attribute type 29 has an invalid length.
[  267.550036][T10917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2299'.
[  267.627465][ T5788] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  267.830284][ T5788] usb 2-1: Using ep0 maxpacket: 16
[  267.850065][ T5788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  267.881453][ T5788] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  267.900085][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.921756][ T5788] usb 2-1: Product: syz
[  267.925998][ T5788] usb 2-1: Manufacturer: syz
[  267.956655][ T5788] usb 2-1: SerialNumber: syz
[  267.981800][ T5788] usb 2-1: config 0 descriptor??
[  268.001216][ T5788] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  268.016721][ T5788] gspca_stv06xx: st6422 sensor detected
[  268.489412][ T5788] STV06xx: probe of 2-1:0.0 failed with error -71
[  268.531914][ T5788] usb 2-1: USB disconnect, device number 11
[  268.754796][T10944] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2313'.
[  268.990340][T10948] Cannot find del_set index 4 as target
[  269.508204][T10960] loop2: detected capacity change from 0 to 4096
[  269.552921][T10960] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  269.769043][T10974] loop1: detected capacity change from 0 to 64
[  270.063703][   T27] audit: type=1326 audit(1758279540.046:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x7ffc0000
[  270.145539][T10981] loop2: detected capacity change from 0 to 2048
[  270.186597][   T27] audit: type=1326 audit(1758279540.046:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590e98ec29 code=0x7ffc0000
[  270.219704][   T27] audit: type=1326 audit(1758279540.046:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f590e98ec29 code=0x7ffc0000
[  270.252528][   T27] audit: type=1326 audit(1758279540.046:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f590e98ec63 code=0x7ffc0000
[  270.308914][T10981] Alternate GPT is invalid, using primary GPT.
[  270.324778][T10981]  loop2: p2 p3 p7
[  270.379357][   T27] audit: type=1326 audit(1758279540.086:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f590e98d6df code=0x7ffc0000
[  270.463405][   T27] audit: type=1326 audit(1758279540.126:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f590e98ecb7 code=0x7ffc0000
[  270.546537][   T27] audit: type=1326 audit(1758279540.126:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f590e98d590 code=0x7ffc0000
[  270.605097][T10992] netlink: 'syz.3.2337': attribute type 2 has an invalid length.
[  270.651982][   T27] audit: type=1326 audit(1758279540.126:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f590e98e82b code=0x7ffc0000
[  270.702756][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  270.720002][ T6436] udevd[6436]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  270.741194][ T5802] udevd[5802]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  270.768406][   T27] audit: type=1326 audit(1758279540.196:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f590e98d88a code=0x7ffc0000
[  270.834791][   T27] audit: type=1326 audit(1758279540.196:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f590e98e82b code=0x7ffc0000
[  270.907904][T11000] netlink: 'syz.3.2341': attribute type 2 has an invalid length.
[  270.954635][ T5802] udevd[5802]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  270.957309][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  270.981605][ T5805] udevd[5805]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  271.276759][ T5835] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  271.406104][T11018] loop2: detected capacity change from 0 to 2048
[  271.476128][ T5835] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  271.491501][T11018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.496663][ T5835] usb 1-1: config 0 has no interface number 0
[  271.544286][T11023] loop1: detected capacity change from 0 to 2048
[  271.568347][ T5835] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  271.635581][T11026] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  271.642468][ T5835] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  271.688495][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.716650][ T5835] usb 1-1: Product: syz
[  271.726797][ T5835] usb 1-1: Manufacturer: syz
[  271.744547][ T5835] usb 1-1: SerialNumber: syz
[  271.772670][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.780519][ T5835] usb 1-1: config 0 descriptor??
[  271.838229][ T5835] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[  272.046861][    C1] yurex 1-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  272.270400][   T23] usb 1-1: USB disconnect, device number 9
[  272.293583][   T23] yurex 1-1:0.50: USB YUREX #0 now disconnected
[  272.942856][T11028] loop3: detected capacity change from 0 to 40427
[  272.969472][T11028] F2FS-fs (loop3): Invalid log sectorsize (131081)
[  272.985293][T11028] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  273.026786][T11028] F2FS-fs (loop3): invalid crc value
[  273.046607][    T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  273.233051][T11028] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  273.251232][T11028] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  273.276732][    T8] usb 2-1: Using ep0 maxpacket: 8
[  273.288112][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.316691][    T8] usb 2-1: config 0 has no interfaces?
[  273.322275][    T8] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  273.361222][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.378610][    T8] usb 2-1: config 0 descriptor??
[  273.634146][    T8] usb 2-1: USB disconnect, device number 12
[  273.870077][T11073] IPv6: NLM_F_CREATE should be specified when creating new route
[  274.230652][T11085] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2379'.
[  274.561629][T11093] sp0: Synchronizing with TNC
[  275.099148][   T27] kauditd_printk_skb: 19 callbacks suppressed
[  275.099164][   T27] audit: type=1326 audit(1758279545.086:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.1.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f58f158ecb7 code=0x7ffc0000
[  275.139999][T11107] loop1: detected capacity change from 0 to 2048
[  275.172142][   T27] audit: type=1326 audit(1758279545.126:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.1.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58f158d590 code=0x7ffc0000
[  275.228113][T11107] Alternate GPT is invalid, using primary GPT.
[  275.234582][T11107]  loop1: p2 p3 p7
[  275.252925][   T27] audit: type=1326 audit(1758279545.126:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.1.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58f158e82b code=0x7ffc0000
[  275.289045][   T27] audit: type=1326 audit(1758279545.136:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.1.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f58f158d88a code=0x7ffc0000
[  275.392931][   T27] audit: type=1326 audit(1758279545.136:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.1.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58f158e82b code=0x7ffc0000
[  275.517481][   T27] audit: type=1326 audit(1758279545.136:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.1.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58f158e82b code=0x7ffc0000
[  275.600230][T11125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2399'.
[  275.620569][   T27] audit: type=1326 audit(1758279545.266:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.1.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f58f158d43a code=0x7ffc0000
[  275.756211][   T27] audit: type=1326 audit(1758279545.266:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.1.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f58f158d43a code=0x7ffc0000
[  275.822911][   T27] audit: type=1326 audit(1758279545.266:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.1.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f58f158e1a7 code=0x7ffc0000
[  275.861003][    T8] IPVS: starting estimator thread 0...
[  275.885593][   T27] audit: type=1326 audit(1758279545.266:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.1.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f58f158d43a code=0x7ffc0000
[  275.904254][ T5805] udevd[5805]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  275.925373][ T6436] udevd[6436]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  275.940596][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  275.941645][T11134] ==================================================================
[  275.958472][T11134] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x598/0x11f0
[  275.966325][T11134] Read of size 4 at addr ffff88802d0204a0 by task syz.1.2404/11134
[  275.974255][T11134] 
[  275.976635][T11134] CPU: 1 PID: 11134 Comm: syz.1.2404 Not tainted syzkaller #0
[  275.984128][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  275.994234][T11134] Call Trace:
[  275.997552][T11134]  <TASK>
[  276.000536][T11134]  dump_stack_lvl+0x16c/0x230
[  276.005263][T11134]  ? __lock_acquire+0x7c80/0x7c80
[  276.010333][T11134]  ? show_regs_print_info+0x20/0x20
[  276.015572][T11134]  ? load_image+0x3b0/0x3b0
[  276.020122][T11134]  ? __virt_addr_valid+0x469/0x540
[  276.025287][T11134]  print_report+0xac/0x220
[  276.029748][T11134]  ? xfrm_alloc_spi+0x598/0x11f0
[  276.034723][T11134]  kasan_report+0x117/0x150
[  276.039268][T11134]  ? xfrm_alloc_spi+0x598/0x11f0
[  276.044257][T11134]  xfrm_alloc_spi+0x598/0x11f0
[  276.049080][T11134]  ? xfrm_alloc_spi+0x2a1/0x11f0
[  276.054069][T11134]  ? verify_spi_info+0x120/0x120
[  276.059069][T11134]  ? xfrm_find_acq+0x79/0x90
[  276.063712][T11134]  xfrm_alloc_userspi+0x5d1/0xa90
[  276.068789][T11134]  ? end_current_label_crit_section+0x170/0x170
[  276.075081][T11134]  ? apparmor_capable+0x137/0x1a0
[  276.080260][T11134]  ? xfrm_dump_policy_done+0x90/0x90
[  276.085589][T11134]  ? __nla_parse+0x40/0x50
[  276.090060][T11134]  xfrm_user_rcv_msg+0x596/0x870
[  276.095043][T11134]  ? lockdep_hardirqs_on+0x98/0x150
[  276.100291][T11134]  ? xfrm_netlink_rcv+0x90/0x90
[  276.105186][T11134]  ? __local_bh_enable_ip+0x12e/0x1c0
[  276.110637][T11134]  ? __dev_queue_xmit+0x245/0x35a0
[  276.115801][T11134]  ? __mutex_trylock_common+0x153/0x250
[  276.121417][T11134]  netlink_rcv_skb+0x216/0x480
[  276.126232][T11134]  ? xfrm_netlink_rcv+0x90/0x90
[  276.131135][T11134]  ? netlink_ack+0x1110/0x1110
[  276.135967][T11134]  ? netlink_deliver_tap+0x2e/0x1b0
[  276.141230][T11134]  ? __lock_acquire+0x7c80/0x7c80
[  276.146308][T11134]  xfrm_netlink_rcv+0x79/0x90
[  276.151025][T11134]  netlink_unicast+0x751/0x8d0
[  276.155840][T11134]  netlink_sendmsg+0x8c1/0xbe0
[  276.160656][T11134]  ? netlink_getsockopt+0x580/0x580
[  276.165899][T11134]  ? aa_sock_msg_perm+0x94/0x150
[  276.170895][T11134]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  276.170929][T11134]  ? security_socket_sendmsg+0x80/0xa0
[  276.170952][T11134]  ? netlink_getsockopt+0x580/0x580
[  276.170979][T11134]  ____sys_sendmsg+0x5bf/0x950
[  276.171013][T11134]  ? __asan_memset+0x22/0x40
[  276.171039][T11134]  ? __sys_sendmsg_sock+0x30/0x30
[  276.171067][T11134]  ? __import_iovec+0x5f2/0x860
[  276.171099][T11134]  ? import_iovec+0x73/0xa0
[  276.171129][T11134]  ___sys_sendmsg+0x220/0x290
[  276.171158][T11134]  ? __sys_sendmsg+0x270/0x270
[  276.171213][T11134]  __se_sys_sendmsg+0x1a5/0x270
[  276.171243][T11134]  ? __x64_sys_sendmsg+0x80/0x80
[  276.171281][T11134]  ? lockdep_hardirqs_on+0x98/0x150
[  276.171312][T11134]  do_syscall_64+0x55/0xb0
[  276.171335][T11134]  ? clear_bhb_loop+0x40/0x90
[  276.171354][T11134]  ? clear_bhb_loop+0x40/0x90
[  276.171375][T11134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  276.171407][T11134] RIP: 0033:0x7f58f158ec29
[  276.171425][T11134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.171444][T11134] RSP: 002b:00007f58f23af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.171467][T11134] RAX: ffffffffffffffda RBX: 00007f58f17d5fa0 RCX: 00007f58f158ec29
[  276.171482][T11134] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003
[  276.171496][T11134] RBP: 00007f58f1611e41 R08: 0000000000000000 R09: 0000000000000000
[  276.171509][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.171521][T11134] R13: 00007f58f17d6038 R14: 00007f58f17d5fa0 R15: 00007fff2647a318
[  276.171545][T11134]  </TASK>
[  276.171552][T11134] 
[  276.171556][T11134] Allocated by task 7677:
[  276.171566][T11134]  kasan_set_track+0x4e/0x70
[  276.171586][T11134]  __kasan_slab_alloc+0x6c/0x80
[  276.171605][T11134]  slab_post_alloc_hook+0x6e/0x4d0
[  276.171639][T11134]  kmem_cache_alloc+0x11e/0x2e0
[  276.171663][T11134]  xfrm_state_alloc+0x22/0x2a0
[  276.171684][T11134]  __find_acq_core+0x7d8/0x19d0
[  276.171705][T11134]  xfrm_find_acq+0x6a/0x90
[  276.171727][T11134]  xfrm_alloc_userspi+0x57a/0xa90
[  276.171745][T11134]  xfrm_user_rcv_msg+0x596/0x870
[  276.171761][T11134]  netlink_rcv_skb+0x216/0x480
[  276.171783][T11134]  xfrm_netlink_rcv+0x79/0x90
[  276.171798][T11134]  netlink_unicast+0x751/0x8d0
[  276.171818][T11134]  netlink_sendmsg+0x8c1/0xbe0
[  276.171839][T11134]  ____sys_sendmsg+0x5bf/0x950
[  276.171863][T11134]  ___sys_sendmsg+0x220/0x290
[  276.171887][T11134]  __se_sys_sendmsg+0x1a5/0x270
[  276.171912][T11134]  do_syscall_64+0x55/0xb0
[  276.171933][T11134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  276.171961][T11134] 
[  276.171966][T11134] The buggy address belongs to the object at ffff88802d020400
[  276.171966][T11134]  which belongs to the cache xfrm_state of size 848
[  276.171982][T11134] The buggy address is located 160 bytes inside of
[  276.171982][T11134]  freed 848-byte region [ffff88802d020400, ffff88802d020750)
[  276.172003][T11134] 
[  276.172006][T11134] The buggy address belongs to the physical page:
[  276.172025][T11134] page:ffffea0000b40800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802d021800 pfn:0x2d020
[  276.172048][T11134] head:ffffea0000b40800 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  276.172065][T11134] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  276.172090][T11134] page_type: 0xffffffff()
[  276.172109][T11134] raw: 00fff00000000840 ffff88801aefa640 dead000000000122 0000000000000000
[  276.172127][T11134] raw: ffff88802d021800 000000008010000b 00000001ffffffff 0000000000000000
[  276.172137][T11134] page dumped because: kasan: bad access detected
[  276.172151][T11134] page_owner tracks the page as allocated
[  276.172157][T11134] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6104, tgid 6103 (syz.2.99), ts 100300583314, free_ts 100253039795
[  276.172211][T11134]  post_alloc_hook+0x1cd/0x210
[  276.172239][T11134]  get_page_from_freelist+0x195c/0x19f0
[  276.172268][T11134]  __alloc_pages+0x1e3/0x460
[  276.172295][T11134]  alloc_slab_page+0x5d/0x170
[  276.172323][T11134]  new_slab+0x87/0x2e0
[  276.172348][T11134]  ___slab_alloc+0xc6d/0x1300
[  276.172374][T11134]  kmem_cache_alloc+0x1b7/0x2e0
[  276.172398][T11134]  xfrm_state_alloc+0x22/0x2a0
[  276.172418][T11134]  __find_acq_core+0x7d8/0x19d0
[  276.172440][T11134]  xfrm_find_acq+0x6a/0x90
[  276.172461][T11134]  pfkey_getspi+0x64f/0xed0
[  276.172486][T11134]  pfkey_sendmsg+0xbed/0x1050
[  276.172510][T11134]  ____sys_sendmsg+0x5bf/0x950
[  276.172535][T11134]  ___sys_sendmsg+0x220/0x290
[  276.172559][T11134]  __se_sys_sendmsg+0x1a5/0x270
[  276.172585][T11134]  do_syscall_64+0x55/0xb0
[  276.172606][T11134] page last free stack trace:
[  276.172612][T11134]  free_unref_page_prepare+0x7ce/0x8e0
[  276.172646][T11134]  free_unref_page+0x32/0x2e0
[  276.172671][T11134]  __slab_free+0x35e/0x410
[  276.172699][T11134]  qlist_free_all+0x75/0xe0
[  276.172722][T11134]  kasan_quarantine_reduce+0x143/0x160
[  276.172748][T11134]  __kasan_slab_alloc+0x22/0x80
[  276.172767][T11134]  slab_post_alloc_hook+0x6e/0x4d0
[  276.172792][T11134]  __kmem_cache_alloc_node+0x13e/0x260
[  276.172818][T11134]  __kmalloc+0xa4/0x240
[  276.172842][T11134]  tomoyo_realpath_from_path+0xe3/0x5d0
[  276.172870][T11134]  tomoyo_path_number_perm+0x1ea/0x590
[  276.172896][T11134]  tomoyo_path_mknod+0x143/0x190
[  276.172912][T11134]  security_path_mknod+0xf0/0x150
[  276.172935][T11134]  path_openat+0xb38/0x3190
[  276.172963][T11134]  do_filp_open+0x1c5/0x3d0
[  276.172989][T11134]  do_sys_openat2+0x12c/0x1c0
[  276.173009][T11134] 
[  276.173013][T11134] Memory state around the buggy address:
[  276.173023][T11134]  ffff88802d020380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  276.173037][T11134]  ffff88802d020400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  276.173049][T11134] >ffff88802d020480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  276.173059][T11134]                                ^
[  276.173070][T11134]  ffff88802d020500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  276.173082][T11134]  ffff88802d020580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  276.173092][T11134] ==================================================================
[  276.173237][T11134] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  276.173249][T11134] CPU: 1 PID: 11134 Comm: syz.1.2404 Not tainted syzkaller #0
[  276.173269][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  276.173280][T11134] Call Trace:
[  276.173288][T11134]  <TASK>
[  276.173296][T11134]  dump_stack_lvl+0x16c/0x230
[  276.173322][T11134]  ? show_regs_print_info+0x20/0x20
[  276.173346][T11134]  ? load_image+0x3b0/0x3b0
[  276.173372][T11134]  panic+0x2c0/0x710
[  276.173403][T11134]  ? bpf_jit_dump+0xd0/0xd0
[  276.173432][T11134]  ? _raw_spin_unlock_irqrestore+0xa9/0x110
[  276.173452][T11134]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  276.173471][T11134]  ? _raw_spin_unlock+0x40/0x40
[  276.173488][T11134]  ? print_memory_metadata+0x314/0x400
[  276.173511][T11134]  ? xfrm_alloc_spi+0x598/0x11f0
[  276.173536][T11134]  check_panic_on_warn+0x84/0xa0
[  276.173559][T11134]  ? xfrm_alloc_spi+0x598/0x11f0
[  276.173583][T11134]  end_report+0x6f/0x140
[  276.173604][T11134]  kasan_report+0x128/0x150
[  276.173627][T11134]  ? xfrm_alloc_spi+0x598/0x11f0
[  276.173663][T11134]  xfrm_alloc_spi+0x598/0x11f0
[  276.173696][T11134]  ? xfrm_alloc_spi+0x2a1/0x11f0
[  276.173721][T11134]  ? verify_spi_info+0x120/0x120
[  276.173745][T11134]  ? xfrm_find_acq+0x79/0x90
[  276.173774][T11134]  xfrm_alloc_userspi+0x5d1/0xa90
[  276.173798][T11134]  ? end_current_label_crit_section+0x170/0x170
[  276.173827][T11134]  ? apparmor_capable+0x137/0x1a0
[  276.173846][T11134]  ? xfrm_dump_policy_done+0x90/0x90
[  276.173867][T11134]  ? __nla_parse+0x40/0x50
[  276.173896][T11134]  xfrm_user_rcv_msg+0x596/0x870
[  276.173917][T11134]  ? lockdep_hardirqs_on+0x98/0x150
[  276.173946][T11134]  ? xfrm_netlink_rcv+0x90/0x90
[  276.173963][T11134]  ? __local_bh_enable_ip+0x12e/0x1c0
[  276.173997][T11134]  ? __dev_queue_xmit+0x245/0x35a0
[  276.174022][T11134]  ? __mutex_trylock_common+0x153/0x250
[  276.174058][T11134]  netlink_rcv_skb+0x216/0x480
[  276.174083][T11134]  ? xfrm_netlink_rcv+0x90/0x90
[  276.174102][T11134]  ? netlink_ack+0x1110/0x1110
[  276.174132][T11134]  ? netlink_deliver_tap+0x2e/0x1b0
[  276.174157][T11134]  ? __lock_acquire+0x7c80/0x7c80
[  276.174185][T11134]  xfrm_netlink_rcv+0x79/0x90
[  276.174203][T11134]  netlink_unicast+0x751/0x8d0
[  276.174233][T11134]  netlink_sendmsg+0x8c1/0xbe0
[  276.174262][T11134]  ? netlink_getsockopt+0x580/0x580
[  276.174288][T11134]  ? aa_sock_msg_perm+0x94/0x150
[  276.174311][T11134]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  276.174335][T11134]  ? security_socket_sendmsg+0x80/0xa0
[  276.174354][T11134]  ? netlink_getsockopt+0x580/0x580
[  276.174379][T11134]  ____sys_sendmsg+0x5bf/0x950
[  276.174411][T11134]  ? __asan_memset+0x22/0x40
[  276.174435][T11134]  ? __sys_sendmsg_sock+0x30/0x30
[  276.174461][T11134]  ? __import_iovec+0x5f2/0x860
[  276.174492][T11134]  ? import_iovec+0x73/0xa0
[  276.174521][T11134]  ___sys_sendmsg+0x220/0x290
[  276.174549][T11134]  ? __sys_sendmsg+0x270/0x270
[  276.174600][T11134]  __se_sys_sendmsg+0x1a5/0x270
[  276.174635][T11134]  ? __x64_sys_sendmsg+0x80/0x80
[  276.174673][T11134]  ? lockdep_hardirqs_on+0x98/0x150
[  276.174705][T11134]  do_syscall_64+0x55/0xb0
[  276.174728][T11134]  ? clear_bhb_loop+0x40/0x90
[  276.174749][T11134]  ? clear_bhb_loop+0x40/0x90
[  276.174768][T11134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  276.174800][T11134] RIP: 0033:0x7f58f158ec29
[  276.174816][T11134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.174833][T11134] RSP: 002b:00007f58f23af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.174853][T11134] RAX: ffffffffffffffda RBX: 00007f58f17d5fa0 RCX: 00007f58f158ec29
[  276.174868][T11134] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003
[  276.174881][T11134] RBP: 00007f58f1611e41 R08: 0000000000000000 R09: 0000000000000000
[  276.174894][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.174905][T11134] R13: 00007f58f17d6038 R14: 00007f58f17d5fa0 R15: 00007fff2647a318
[  276.174928][T11134]  </TASK>
[  276.175251][T11134] Kernel Offset: disabled