last executing test programs:

2m56.989323223s ago: executing program 2 (id=3846):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

2m56.741063178s ago: executing program 2 (id=3851):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x19, &(0x7f00000002c0)="b206000000000000", 0x8)

2m56.527262735s ago: executing program 2 (id=3856):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
pread64(r0, &(0x7f0000000180)=""/187, 0xbb, 0xa3)

2m56.254479823s ago: executing program 2 (id=3860):
timer_create(0x3, 0x0, &(0x7f0000003200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000003280)={{0x77359400}}, &(0x7f00000032c0))

2m55.966891755s ago: executing program 2 (id=3865):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000040))

2m55.59607731s ago: executing program 2 (id=3870):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0})

2m50.407353338s ago: executing program 3 (id=3965):
r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x5, 0x400)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000480)=0x80008)

2m50.223361262s ago: executing program 3 (id=3968):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x0, 0xfff, 0x3231564e, 0x2, 0x4, [{0x5, 0x6}, {0x3ff, 0x3}, {0x1, 0xdbcefb6}, {0x8, 0x6e53}, {0x0, 0x10001}, {0x8, 0xe2}, {0x2, 0x6}, {0x6, 0x6}], 0x5, 0x9, 0xd253d16611fb2e39, 0x2, 0x6}})

2m50.012148102s ago: executing program 3 (id=3973):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, 0x0)

2m49.785658089s ago: executing program 3 (id=3977):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0)

2m49.60398643s ago: executing program 3 (id=3979):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[{0x10, 0x0, 0x66730368}, {0x10, 0x84, 0x2}], 0x20}, 0x8001)

2m49.315935311s ago: executing program 3 (id=3983):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000600)="$eJzs0L9rE2Ecx/H397knPypUjYpDBRuwGC9Uk7uqg1NwipADBxfBoCGNTTFR08tgSwtdpCDVDv4DOtVRBZ1EFJyLg+Cg59JNmqE4iINE7vJU8G/weQ33ue8H7p6HbzvshRng9+5ykwoJh/18RNDApIw6pUb52szfTW6MgotmXjf5zOREuLh0q9HptBbyF/Lk/imAH0n3twpfcFQxECrI593lZkNuBAwrdNVsQK5G8SFOnZ77iAk9zpHrOAwL61xS9KRQgwOlfvduKVxcOj3fbcy15lq3fX/mfPlsuXzOL92c77TKrxD3gSiesIIbkAkYc1dI1bm/pfcxLYjbVpEjxQHpOhtbzqkT0wOUu8MQ4V1hQOarbufVFU6SvRZfvsph4SlOwFSNMYUmOaiKXFYvxdOf9M+UIrvqOGeadzqza1eV/EpvVmQnK942qYKHX/SYiVfDId6zFjEVUY3YjNj+xqS8iU/Z26tejZ/PzXSM45DmXqPfX/DS8EF08Pgg4OdgPPmdSu6Vg7fmGxN82XuxLMuyLMuyLMuy/gN/AgAA//96xWPy")
listxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0)

2m49.00778766s ago: executing program 32 (id=3983):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000600)="$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")
listxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0)

2m39.296122493s ago: executing program 33 (id=3870):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0})

2m26.598483544s ago: executing program 7 (id=4218):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x2, 0x0, 0x0, 0x2000000], [0x81, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x400000], [0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x0, 0x2}, {0x63f}, {0xffffffe, 0xfffffff, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0xc, 0x4}, {0x1ff, 0x7f}, {0x7}, {0x0, 0x1}, {0x401}], '\x00', 0x1, 0x0, 0x0, 0xf8})

2m26.35007194s ago: executing program 7 (id=4222):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x3c, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x3}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0xfcd2, 0x1, 0x7f}]}]}, 0x3c}}, 0x4000)

2m26.089288334s ago: executing program 7 (id=4225):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a00190625bd7000fddbdf250a0000000000000008000a00ffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

2m25.798996293s ago: executing program 7 (id=4227):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200)
ioctl(r0, 0xffff454b, 0x0)

2m25.482608644s ago: executing program 7 (id=4231):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SEND(r0, 0xd0009411, &(0x7f00000021c0)={{r0}, 0x0, 0x0, 0xffffffffffffffff, 0xe, 0x1})

2m23.563602326s ago: executing program 7 (id=4254):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0})

2m7.395740434s ago: executing program 34 (id=4254):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0})

4.471367319s ago: executing program 6 (id=6140):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24)

4.202511797s ago: executing program 6 (id=6145):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000003400)=@nat={'nat\x00', 0x62, 0x5, 0x1bd0, 0x1170, 0x1170, 0xffffffff, 0x10c8, 0x0, 0x1b38, 0x1b38, 0xffffffff, 0x1b38, 0x1b38, 0x5, 0x0, {[{{@uncond, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @empty, @rand_addr=0x64010100, @gre_key=0x76e, @icmp_id=0x66}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00', {}, {}, 0x2f, 0x3}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @private=0xa010102, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0x878, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x4}, {0x0, 0x1}, {0x1}, {0xf, 0x2}, {0x40, 0x2}, {0xffff85e6, 0x2}, {0x2}, {0x10001, 0x1}, {0x1, 0x2}, {0x5}, {0x6, 0x3}], [{0x200, 0x7c6}, {0x9, 0x7}, {0x8, 0xffff}, {0xfffffffb, 0x7}, {0x0, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x800}, {0x0, 0x8}, {0x8, 0x746d}, {0x49, 0x1fc0}], 0x7, 0x8}, {[{0x8001}, {0x4, 0x3}, {0x84, 0x3}, {0x4}, {0x7}, {0xffff, 0x2}, {0x10001, 0x1}, {}, {0x17, 0x2}, {0x8, 0x3}, {0x4, 0x1}], [{0x1c77, 0x5}, {0x9, 0x4}, {0x9, 0xe}, {0xe, 0xffff}, {0x46, 0x401}, {0xcbd, 0xf6}, {0x9, 0x9}, {0x6d, 0xffffffff}, {0x1, 0x6}, {0xf0000000, 0x5}, {0x4, 0x69}], 0x2, 0x5}, {[{0x3, 0x2}, {0xe46b, 0x3}, {0x1ff, 0x3}, {0x0, 0x1}, {0xfff, 0x1}, {0x4, 0x3}, {0x633, 0x1}, {0x8, 0x3}, {0x2, 0x3}, {0xe, 0x1}, {0x426, 0x2}], [{0x0, 0x5}, {0x8, 0x9}, {0x45a46d11, 0x10001}, {0x4, 0x800}, {0xffffd61b, 0x7f}, {0xfffff800, 0x2}, {0x2, 0x80000000}, {0xfffffffe, 0x7}, {0x8, 0x6}, {0x200, 0x8001}, {0x589c, 0x7fff}], 0x7, 0x3}, {[{0x9, 0x3}, {0x9, 0x3}, {0x9d, 0x1}, {0x10000, 0x3}, {0x2}, {0x7, 0x3}, {0x10001, 0x1}, {0x8, 0x1}, {0x10001, 0x1}, {0x8}, {0x3831294d, 0x1}], [{0x6, 0x7}, {0x5, 0xfd}, {0x100, 0xd}, {0x9, 0x6}, {0x9, 0x7ff}, {0x1, 0x12bf}, {0x80000001, 0x7}, {0x1, 0x7}, {0xfffffffc, 0x3f9}, {0x4, 0x8000}, {0xd546, 0xee18}], 0x4, 0xb}, {[{0x4, 0x3}, {0x85, 0x1}, {0x6}, {0xffff2d0f, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x6d}, {0x3, 0x2}, {0x2, 0x3}], [{0x0, 0x6}, {0x65, 0x2}, {0x3, 0xffffffff}, {0x8}, {0x8001, 0x156}, {0x6, 0x2}, {0x1, 0x101}, {0x1, 0x3}, {0x1ff, 0x9}, {0x1, 0x7}, {0x0, 0x2}], 0x0, 0x3}, {[{0xe, 0x2}, {0xc8}, {}, {0x7ff}, {0x8, 0x3}, {0xb, 0x2}, {0x0, 0x1}, {0x6}, {0xfffffffd, 0x2}, {0x2, 0x2}, {0x7, 0x2}], [{0x1, 0x5}, {0x2, 0xc04}, {0x0, 0x7}, {0x10001, 0x80000001}, {0x2, 0x3}, {0x3, 0xfffffff8}, {0x6, 0xc5}, {0x3, 0xfffffbff}, {0x3, 0x8}, {0x0, 0x8}, {0x0, 0xa}], 0x1, 0xa}, {[{0x8, 0x3}, {0x6, 0x1}, {0xb8000000, 0x1}, {0x9, 0x2}, {0x7fffffff, 0x1}, {0x8000, 0x3}, {0x1, 0x3}, {0xab1f}, {0x9, 0x1}, {0x8, 0x1}, {0x7f}], [{0x80000001, 0xffffffff}, {0x6, 0x7}, {0xfff, 0x9}, {0x67, 0x2}, {0x846, 0xc6}, {0xcb}, {0x4, 0x4}, {0x6, 0x544d}, {0xd, 0x4}, {0x6, 0x4f2436ac}, {0x8, 0x1}], 0x7, 0x1}, {[{0x3, 0x3}, {0xff, 0x1}, {0x4, 0x1}, {0x1b, 0x2}, {0x8, 0x3}, {0x268, 0x3}, {0x9, 0x3}, {0x8}, {0x4, 0x3}, {0xff, 0x1}, {0x4, 0x3}], [{0x200, 0x4}, {0x1, 0x2}, {0x7, 0x100}, {0x6, 0x3ff}, {0x5}, {0x8001, 0x5}, {0xa5d, 0x800}, {0x7, 0xfffffff0}, {0xfffffff8, 0x5d7fc3bf}, {0xfffffffb}, {0xf7a, 0x2}], 0x8, 0x2}, {[{0xd6, 0x1}, {0xa, 0x1}, {0x2, 0x1}, {0x9, 0x2}, {0x2, 0x3}, {0x200, 0x1}, {0x2}, {0x4, 0x2}, {0x1}, {0x6, 0x2}, {0x400, 0x3}], [{0x9, 0x3}, {0x2, 0x6}, {0x8, 0x6}, {0x4, 0x100}, {0x3, 0x3}, {0x8c, 0x3}, {0x5, 0x3ff}, {0x8, 0x88}, {0x8000, 0x800}, {0x7f, 0x4}, {0x87, 0x9}], 0x3, 0x5}, {[{0x7}, {0xffffffff}, {0x5}, {0x3, 0x2}, {0xfffffffb, 0x1}, {0xf, 0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x4, 0x3}, {0xffffffff, 0x2}, {0xf770}], [{0x693, 0xf75}, {0x1, 0x6c}, {0x1000, 0x9}, {0x7fff, 0x2ef}, {0x6, 0x3}, {0x7, 0x10001}, {0x0, 0x1}, {0x7, 0x2}, {0xfffff001, 0xef}, {0x80000001, 0x8}, {0x6, 0x3}], 0x9, 0x2}, {[{0x88}, {0xfffffff7, 0x1}, {0xff, 0x3}, {0x6, 0x1}, {0x9}, {0xf, 0x2}, {0xb, 0x3}, {0x200}, {0x2, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x10001, 0x6}, {0x9, 0x9fa}, {0x1, 0xfffffff9}, {0x0, 0x27}, {0x9, 0x2}, {0x9}, {0x5, 0xffffffff}, {0x8}, {0xff, 0xaaae}, {0x4, 0x8}, {0x7, 0x4e24b56e}], 0x7, 0x1}], 0x2, 0x1}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1c30)

3.886188183s ago: executing program 6 (id=6151):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c)

3.660697902s ago: executing program 0 (id=6154):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)

3.622143987s ago: executing program 6 (id=6156):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000e00)='./file0\x00', 0x2008410, &(0x7f0000000180)=ANY=[], 0x1, 0x556e, &(0x7f000000b000)="$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")
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x1000)

3.254698035s ago: executing program 0 (id=6162):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@private1, 0x4e24, 0x0, 0x20, 0x4, 0x0, 0x20, 0x40, 0x87}, {@in6=@mcast1, 0x4d3, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x3ff, 0x0, 0x2, 0x0, 0x0, 0x1002, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x2, 0xfffffffffffffffc, 0x4}, {0x1ffe, 0x4, 0x3b6cc439}, 0x0, 0x0, 0xa, 0x4, 0x10, 0x2a}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}, @coaddr={0x14, 0xe, @in=@private=0xa010102}]}, 0x168}, 0x1, 0x0, 0x0, 0x8090}, 0x0)

3.015397083s ago: executing program 0 (id=6166):
r0 = memfd_secret(0x80000)
copy_file_range(r0, 0x0, r0, &(0x7f00000001c0)=0x100000000, 0x2, 0x0)

2.682630014s ago: executing program 0 (id=6171):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000200)={[{@undelete}, {@umask={'umask', 0x3d, 0x8}}, {}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@anchor={'anchor', 0x3d, 0xa}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@gid_forget}, {}, {@gid_forget}]}, 0x1, 0xc81, &(0x7f0000004240)="$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")
symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00')

2.677842842s ago: executing program 8 (id=6172):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x9c, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xffffffffffffffa5, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x3f, 0x8be6, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c810)

2.246887282s ago: executing program 8 (id=6178):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x2a1, &(0x7f0000000200)="$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")
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./bus\x00')

2.223741995s ago: executing program 4 (id=6179):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000012001fff00000000010000000d000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

2.170093385s ago: executing program 0 (id=6180):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRES64], 0x1, 0x61f5, &(0x7f00000075c0)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1)

1.986102749s ago: executing program 4 (id=6182):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newsa={0x19c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0x1, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(des3_ede)\x00'}, 0xc0, "6e000b000000002000000000190000000000feffff7f0000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x19c}}, 0x44050)

1.941971022s ago: executing program 5 (id=6183):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x8, 0x0, 0x1000, 0xb82, 0x400000, 0x1ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x8, 0x4006, 0x84, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x6, 0x5, 0x40424f, 0x3}})

1.931159105s ago: executing program 8 (id=6184):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.671155521s ago: executing program 5 (id=6186):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x177, &(0x7f0000000680)="$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")
llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x1b)

1.550847942s ago: executing program 8 (id=6187):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x35, 0x34f, &(0x7f0000000b00)="$eJzs3T9sG2UUAPDnXhKnESUekCqYDBsSqpogBpgSVUWqyABFFv8WLJryJzaVYmEpDHG8gComEAsSTGwdYOyMGBBiY2ClSKiAWOhWqRGHbJ/tc+xQZ3Boxe83RE/v+9597y6n3CVKvrzeiq1L83H51q2bsbhYiLm1c2txuxClOBFJ9OzFRB8tTM4DAPe422kaf6U9d5/9yVI/8uwHgPtX9/n/5qlhoniE4qsPzKIlAGDGpvz+//mJ2SszawsAmKGx5/9jI8MHfsw/N/idAADg/vXiK68+t74RcbFcXoyof9isNCvxzHB8/XK8HbXYjLOxHPsRvReF3ttC5+OzFzbOny13/FaKSqeiWYmot5qV3pvCetKtL8ZKLEcpq08H9UmnfqVbX46IvVZ3/agXmpX5WMrW/3kpNmM1luOhsfqICxvnV8vZASr1fn0roh2L/ZPo9H8mluPHN+JK1OJSdGqH/e+ulMvn0o2R+ua1YnceAAAAAAAAAAAAAAAAAAAAAADMwpnyQGmw/01abzU/uHhwQmlkf5xKbzjbH6jd2x8oLfZ357maHNwfaHR/nmZlLk78p2cOAAAAAAAAAAAAAAAAAAAA947GzkJUa7XN7cbO+1v5oJXLvPv9V9+ejP7QXFb6TjKsiiw5cpz+xNyRkxgskQ7K02RkThYkEf3Je9Vr1wcd5+cUB2cxVt4JimNDhaynaq126tFfP59U9Xcn2Otmkhi7LKNBIVs/N1R/sJNYjIj9w6oOD1bvMudGmqaHle9+Nl4VhYi5OHIbUwTf3Xzr4Scbp5/qZr7JNn14/Inll258+uUfW9VatHtXplZb2G7sp1McudPr+FCSu38K2XUuTLgTJgftYaa93dipJj/9+fIjH/9wYHIy+f5J85n3Dl/r64OZhV5QiCj1L8K/tTo/4eafHLx2Z3D3Hv0Td/qLter13V9+n7Yq90XCRh0AAAAAAAAAAAAAAAAAAHAscn8rfgRPvzC7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+A3//38uaI9lpgnutGJ8qLi53Th08ZPHeqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyP/RMAAP//rShzCQ==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

1.36237661s ago: executing program 1 (id=6189):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0xa, @empty, 0x3}, @in6={0xa, 0x4e21, 0x1, @empty, 0x4}], 0x38)

1.234850583s ago: executing program 5 (id=6190):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2808000, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f0000000500)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

1.176240191s ago: executing program 6 (id=6191):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, 0x0, 0x0, 0x4}, 0x1c)

1.126397359s ago: executing program 4 (id=6192):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x1fffffff, 0xd, 0x1})

1.080136446s ago: executing program 1 (id=6193):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

803.540913ms ago: executing program 5 (id=6194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x3a, 0x9, 0x70bd25, 0x25dfd3ff, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0)

803.364752ms ago: executing program 1 (id=6195):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000))

802.187207ms ago: executing program 4 (id=6196):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

679.047573ms ago: executing program 8 (id=6197):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000002400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB=',barrier,nls=iso8859-15,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x20, 0x6fe, &(0x7f0000000c00)="$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")
truncate(&(0x7f0000000180)='./file1\x00', 0xd)

566.081289ms ago: executing program 1 (id=6198):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

537.097035ms ago: executing program 5 (id=6199):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd23}, 0x94)

412.027616ms ago: executing program 4 (id=6200):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
execve(0x0, 0x0, 0x0)

316.183862ms ago: executing program 1 (id=6201):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2000000, 0x46, 0x0, 0x0, 0x0, 0x3}, 0xe)

219.276973ms ago: executing program 0 (id=6202):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003c40)=@ipv6_newroute={0x2c, 0x18, 0x186e0ea4341572c1, 0x70ad2b, 0x25dfdbfe, {0xa, 0x14, 0x19fbc67d06a2282, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x3300}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040844}, 0x80)

202.425904ms ago: executing program 5 (id=6203):
r0 = io_uring_setup(0x3142, &(0x7f0000000b80)={0x0, 0x7516, 0x80, 0x0, 0x157})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xa763, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1)

94.767717ms ago: executing program 4 (id=6204):
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file4\x00', 0xa18c14, &(0x7f00000000c0)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlate}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@uni_xlate}]}, 0x89, 0x2b7, &(0x7f0000000840)="$eJzs3b2KY1UcAPD/zSSZRIWksBLBC1pYhd19gg0ywmIqJYU2OrizIElYmEDAD4xb2QtWvoPv4APY+AYWloKdW4hXbnJvksnHZgJjRsbfr5h7cs7/n/ORM3NDIGc+eX00ePx0/OTZV79Go5FE5WE8jOdJtKMSpW8CALhLnmdZ/JHN7YutRj0islbxqHKE4QEA/4LZ/T/Jb+v77/8AwN3wwYcfvdft9c7eT9NGxOjbST9/M5Bf5+3dJ/FZDOMi7kUr/pq9TVh8WpD/fOVR7yyqaVp+GDBpRj9i9PHPxePu7xGz/PvRivZ6fr2ISmfirdF00s97zq+1eCmJ6GbJPORBtOLViKwWxZPML+8+6p09SDfzo1+Pt9/8oRj/3xfRiVb88mk8jWE8nj3FMv/r+2n6Tvb9n1/OZ9CPSKaT/uksbik7OcoLAgAAAAAAAAAAAAAAAAAAAADA/0InXWivnp9TngbY6Wxv33k+UHHCz3TlfJ17aZqWx/hM+rWY51fjtWpUb2/mAAAAAAAAAAAAAAAAAAAA8N8x/vyLwflweHF5pfBTlheaL4xZL1RXasqv9e/P2l4Y/BhxeNZ1CnFSDG2YbHSRlE1Xs/KMg/s6PSS4udnp4Dwqu9awOoz54L87fBHe2DLBwwvlztgVU+6uwXmyb+ka2zfJyq4rO7scJwdsyGzL0p3szKrf0B6rvzxorta0rp3e3LpQ+Yxri8W8mtXIX8mVmtoN/6asSW707w4AAAAAAAAAAAAAAAAAALBp+aXf+G2j8dmtDAkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjm75//8XhWiv16wXpkXyrKby4uDTy/GWbttHniYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB33D8BAAD//x6QS7s=")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x45)

93.294196ms ago: executing program 8 (id=6205):
syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2)

80.586607ms ago: executing program 6 (id=6206):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14)

0s ago: executing program 1 (id=6207):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x8000, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x3, 0xb0, 0x1d, 0x80, 0x9, 0x7})

kernel console output (not intermixed with test programs):

/11/22 14:59 (1000)
[  565.861953][T16668] loop4: detected capacity change from 0 to 32768
[  565.990064][T16668] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  566.297208][ T5948] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  566.400631][T16737] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  566.551417][T16737] CIFS mount error: No usable UNC path provided in device string!
[  566.551417][T16737] 
[  566.629731][T16737] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  567.099778][T16755] loop4: detected capacity change from 0 to 512
[  567.176026][T16755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  567.290304][T16755] ext4 filesystem being mounted at /828/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  567.361790][T16743] loop0: detected capacity change from 0 to 32768
[  567.461078][T16743] jfs_strtoUCS: char2uni returned -22.
[  567.498057][ T5948] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.511954][T16743] charset = utf8, char = 0xc5
[  567.760501][T16771] netlink: 'syz.4.4614': attribute type 13 has an invalid length.
[  568.099948][T16779] netlink: 'syz.1.4617': attribute type 5 has an invalid length.
[  568.111405][T16771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  568.158436][T16749] loop5: detected capacity change from 0 to 32768
[  568.206043][T16749] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4607 (16749)
[  568.272658][T16749] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  568.323191][T16749] BTRFS info (device loop5): using xxhash64 checksum algorithm
[  568.531982][ T6017] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  568.540543][T16749] BTRFS info (device loop5): enabling ssd optimizations
[  568.548585][T16749] BTRFS info (device loop5): turning on flush-on-commit
[  568.556287][T16749] BTRFS info (device loop5): turning on async discard
[  568.563214][T16749] BTRFS info (device loop5): enabling free space tree
[  568.570282][T16749] BTRFS info (device loop5): force zlib compression, level 3
[  568.577998][T16749] BTRFS info (device loop5): max_inline set to 4096
[  568.715627][ T6017] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[  568.734636][ T6017] usb 7-1: config 1 has no interface number 0
[  568.747347][ T6017] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  568.781380][ T6017] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  568.814219][ T6017] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  568.844549][ T6017] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  568.858131][ T6017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.879802][ T6017] usb 7-1: Product: syz
[  568.890609][ T6017] usb 7-1: Manufacturer: syz
[  568.896600][ T5953] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  568.916591][ T6017] usb 7-1: SerialNumber: syz
[  568.965445][T16781] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  569.220242][T16781] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  569.490795][ T6017] usb 7-1: Incompatible driver and firmware versions
[  569.532750][ T6017] usb 7-1: USB disconnect, device number 3
[  570.278915][T16853] netlink: 'syz.5.4646': attribute type 1 has an invalid length.
[  570.445595][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4650'.
[  570.471307][T16861] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4650'.
[  570.836168][T16873] loop6: detected capacity change from 0 to 2048
[  570.921168][T16873] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  570.988489][T16882] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  571.027979][T16873] NILFS error (device loop6): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  571.089402][T16873] Remounting filesystem read-only
[  571.472229][T16898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4666'.
[  571.557795][T16901] IPVS: set_ctl: invalid protocol: 86 100.1.1.2:20003
[  571.698748][T16855] loop8: detected capacity change from 0 to 32768
[  571.753286][T16855] ERROR: (device loop8): diNewExt: no free extents
[  571.753286][T16855] 
[  571.817112][T16895] "syz.1.4667" (16895) uses obsolete ecb(arc4) skcipher
[  571.838893][T16911] netlink: 788 bytes leftover after parsing attributes in process `syz.0.4673'.
[  571.848217][T16855] ERROR: (device loop8): remounting filesystem as read-only
[  571.875516][T16855] ialloc: diAlloc returned -5!
[  571.931806][T16913] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4674'.
[  571.975514][T16913] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4674'.
[  572.064463][T16915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4677'.
[  572.573826][T16933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  572.658735][T16938] netlink: 'syz.0.4687': attribute type 1 has an invalid length.
[  572.967892][T16951] loop4: detected capacity change from 0 to 2048
[  573.023495][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4694'.
[  573.065666][T16955] netlink: 'syz.8.4697': attribute type 1 has an invalid length.
[  573.082639][T16958] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  573.097072][T16955] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4697'.
[  573.113964][T16962] netlink: 'syz.6.4698': attribute type 2 has an invalid length.
[  573.179047][T16951] NILFS (loop4): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[  573.225525][T16951] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  573.316879][T16951] Remounting filesystem read-only
[  573.329352][T16951] NILFS (loop4): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[  573.382257][T16951] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16)
[  573.417008][T16970] loop6: detected capacity change from 0 to 512
[  573.458109][T16951] NILFS (loop4): error -5 truncating bmap (ino=16)
[  573.478679][T16970] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  573.655624][T16970] EXT4-fs (loop6): 1 orphan inode deleted
[  573.661451][T16970] EXT4-fs (loop6): 1 truncate cleaned up
[  573.661724][ T5948] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  573.680429][T16970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  573.838174][T16970] EXT4-fs error (device loop6): ext4_search_dir:1474: inode #12: block 7: comm syz.6.4702: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  573.874410][T16984] netlink: 'syz.5.4711': attribute type 10 has an invalid length.
[  573.928814][T16984] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4711'.
[  573.956742][T16988] netlink: 'syz.1.4710': attribute type 5 has an invalid length.
[  573.973959][T16980] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  573.975713][T16984] batadv0: entered promiscuous mode
[  574.027407][T16984] batadv0: entered allmulticast mode
[  574.058802][T16984] bridge0: port 3(batadv0) entered blocking state
[  574.068649][T16984] bridge0: port 3(batadv0) entered disabled state
[  574.095170][T16984] bridge0: port 3(batadv0) entered blocking state
[  574.102235][T16984] bridge0: port 3(batadv0) entered forwarding state
[  574.112890][T15128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.141555][T16994] loop8: detected capacity change from 0 to 2048
[  574.192316][T16996] xt_addrtype: ipv6 does not support BROADCAST matching
[  574.257952][T16994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  574.274553][   T76] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  574.285634][   T76] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  574.697882][T17017] loop6: detected capacity change from 0 to 1024
[  574.926103][T17026] comedi comedi1: dac02: I/O port conflict (0x3,8)
[  575.127292][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  575.133825][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  575.330046][T17041] loop5: detected capacity change from 0 to 64
[  575.353147][ T5997] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  575.549191][ T5997] usb 2-1: Using ep0 maxpacket: 16
[  575.581261][ T5997] usb 2-1: unable to get BOS descriptor or descriptor too short
[  575.612217][ T5997] usb 2-1: string descriptor 0 read error: -22
[  575.635083][ T5997] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  575.670088][ T5997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.737493][ T5997] usb 2-1: unit 5 not found!
[  575.756802][ T5997] usb 2-1: unit 3 not found!
[  575.778311][ T5997] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  575.816017][ T5997] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  576.065279][ T5997] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  576.084273][T17063] __nla_validate_parse: 2 callbacks suppressed
[  576.084297][T17063] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4746'.
[  576.127243][T17057] loop6: detected capacity change from 0 to 4096
[  576.135556][ T5997] usb 2-1: USB disconnect, device number 96
[  576.182263][T17057] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  576.553243][T17061] bridge0: port 3(batadv0) entered disabled state
[  576.560234][T17061] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.569635][T17061] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.720109][T17079] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4754'.
[  577.216008][T17096] loop8: detected capacity change from 0 to 256
[  577.269379][T17096] exfat: Deprecated parameter 'utf8'
[  577.358795][T17096] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  578.034536][T17061] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  578.181119][T17061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  578.746535][T17141] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4780'.
[  579.275987][ T5943] Bluetooth: hci2: unexpected Set CIG Parameters response data
[  579.285868][ T5943] Bluetooth: hci2: unexpected event for opcode 0x2062
[  579.533349][T17086] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  579.551578][T17114] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  579.611469][T17114] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  579.659100][T17168] loop6: detected capacity change from 0 to 64
[  579.684658][   T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.704885][   T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.734478][   T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.779531][ T3011] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.791262][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4795'.
[  580.155408][T17186] pimreg: entered allmulticast mode
[  580.162149][T17188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  580.595635][T17208] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4813'.
[  580.606334][ T2339] pvrusb2: request_firmware fatal error with code=-110
[  580.634791][ T2339] pvrusb2: Failure uploading firmware1
[  580.640506][ T2339] pvrusb2: Device initialization was not successful.
[  580.668007][T17208] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  580.670901][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  580.760107][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  580.804622][ T8931] pvrusb2: Device being rendered inoperable
[  580.864072][   T30] audit: type=1326 audit(1774038066.281:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17215 comm="syz.6.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  580.971689][   T30] audit: type=1326 audit(1774038066.300:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17215 comm="syz.6.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  581.050119][   T30] audit: type=1326 audit(1774038066.300:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17215 comm="syz.6.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  581.193891][   T30] audit: type=1326 audit(1774038066.319:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17215 comm="syz.6.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  581.230690][T17228] sock: sock_timestamping_bind_phc: sock not bind to device
[  581.328072][   T30] audit: type=1326 audit(1774038066.337:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17215 comm="syz.6.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  581.452128][   T30] audit: type=1326 audit(1774038066.384:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17215 comm="syz.6.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1ddb5cfce code=0x7ffc0000
[  581.516781][T17235] loop8: detected capacity change from 0 to 512
[  581.617393][   T30] audit: type=1326 audit(1774038066.384:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17215 comm="syz.6.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1ddb5cfce code=0x7ffc0000
[  581.749115][T17235] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  581.771357][   T30] audit: type=1326 audit(1774038066.412:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17215 comm="syz.6.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1ddb5cfce code=0x7ffc0000
[  581.794939][   T30] audit: type=1326 audit(1774038066.412:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17215 comm="syz.6.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1ddb5cfce code=0x7ffc0000
[  581.795538][T17242] netlink: 'syz.5.4829': attribute type 10 has an invalid length.
[  581.818389][   T30] audit: type=1326 audit(1774038066.412:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17215 comm="syz.6.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1ddb5cfce code=0x7ffc0000
[  581.860447][T17247] loop1: detected capacity change from 0 to 512
[  581.879396][T17235] EXT4-fs (loop8): 1 truncate cleaned up
[  581.919364][T17235] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  581.973237][T17247] EXT4-fs: Ignoring removed nobh option
[  581.986686][T17235] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.4826: Logical block already allocated
[  581.991320][T17242] veth1_macvtap: left promiscuous mode
[  582.008041][T17235] EXT4-fs (loop8): Remounting filesystem read-only
[  582.028639][T17249] comedi comedi0: Minor 7 could not be opened
[  582.037000][T17247] EXT4-fs (loop1): Test dummy encryption mode enabled
[  582.085403][T17247] EXT4-fs error (device loop1): __ext4_iget:5378: inode #11: block 1: comm syz.1.4828: invalid block
[  582.101122][T17242] team0: Device veth1_macvtap failed to register rx_handler
[  582.182241][T17247] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  582.182776][T17247] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4828: couldn't read orphan inode 11 (err -117)
[  582.192110][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  582.192140][    C0] EXT4-fs (loop1): initial error at time 1774038067: __ext4_iget:5378: inode 11: block 1
[  582.192188][    C0] EXT4-fs (loop1): last error at time 1774038067: __ext4_iget:5378: inode 11: block 1
[  582.283761][T17247] loop1: lost filesystem error report for type 5 error -117
[  582.315294][T16422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.334148][T17247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  582.556390][T17262] loop6: detected capacity change from 0 to 164
[  582.702116][T17262] iso9660: Corrupted directory entry in block 2 of inode 1920
[  582.753862][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.899163][T17264] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4835'.
[  583.135991][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4846'.
[  583.193434][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4846'.
[  583.203350][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4847'.
[  583.490902][   T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.630869][T17288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4850'.
[  583.848152][   T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.971469][T17319] cgroup: none used incorrectly
[  584.000856][T17324] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  584.089793][T17305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4856'.
[  584.659664][T17350] loop6: detected capacity change from 0 to 128
[  584.679345][T17346] delete_channel: no stack
[  584.723444][   T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.174432][   T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.271133][T17369] loop5: detected capacity change from 0 to 1024
[  585.308783][T17367] vti0: entered promiscuous mode
[  585.336115][T17367] vti0: entered allmulticast mode
[  585.567087][T17337] hfsplus: b-tree write err: -5, ino 25
[  585.613038][T17337] hfsplus: b-tree write err: -5, ino 4
[  585.653594][T17337] hfsplus: b-tree write err: -5, ino 2
[  585.814174][   T49] bridge_slave_1: left allmulticast mode
[  585.884589][   T49] bridge_slave_1: left promiscuous mode
[  585.924500][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.005733][   T49] bridge_slave_0: left allmulticast mode
[  586.011888][   T49] bridge_slave_0: left promiscuous mode
[  586.062091][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.143637][T17387] loop8: detected capacity change from 0 to 64
[  586.270322][T17356] loop4: detected capacity change from 0 to 32768
[  586.376978][T17365] loop0: detected capacity change from 0 to 32768
[  586.416912][T17356] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  586.468952][T17365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4870 (17365)
[  586.589610][T17371] loop1: detected capacity change from 0 to 32768
[  586.606985][T17371] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4873 (17371)
[  586.618061][T17365] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  586.633889][T17406] Cannot find del_set index 4 as target
[  586.670950][T17356] XFS (loop4): Ending clean mount
[  586.694009][T17365] BTRFS info (device loop0): using sha256 checksum algorithm
[  586.699430][T17371] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  586.719011][T17408] netlink: 'syz.6.4885': attribute type 13 has an invalid length.
[  586.750933][T17371] BTRFS info (device loop1): using xxhash64 checksum algorithm
[  586.759036][T17371] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  586.918092][ T5948] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  587.110945][T17365] BTRFS info (device loop0): enabling ssd optimizations
[  587.160626][T17365] BTRFS info (device loop0): turning on async discard
[  587.172752][T17371] BTRFS info (device loop1): rebuilding free space tree
[  587.189766][T17365] BTRFS info (device loop0): enabling free space tree
[  587.261291][T17371] BTRFS info (device loop1): disabling free space tree
[  587.293807][T17371] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  587.321803][T17371] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  587.456814][T17371] BTRFS info (device loop1): setting nodatasum
[  587.498989][T17371] BTRFS info (device loop1): allowing degraded mounts
[  587.500565][ T5933] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  587.533380][T17371] BTRFS info (device loop1): turning on async discard
[  587.589347][T17371] BTRFS info (device loop1): enabling disk space caching
[  587.649404][T17371] BTRFS info (device loop1): force clearing of disk cache
[  587.679830][T17449] loop4: detected capacity change from 0 to 4096
[  587.683642][T17371] BTRFS info (device loop1): force zlib compression, level 3
[  587.742769][T17449] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  587.820392][T17449] ntfs3(loop4): ino=3, mi_enum_attr
[  588.034494][T17371] BTRFS info (device loop1): balance: start -f -susage=4221952851975
[  588.101802][T17371] BTRFS info (device loop1): balance: ended with status: 0
[  588.259775][T17458] xt_SECMARK: invalid mode: 2
[  588.270015][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  588.345272][ T5935] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  588.546677][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  588.589752][T17440] loop8: detected capacity change from 0 to 32768
[  588.609682][   T49] bond0 (unregistering): Released all slaves
[  588.621111][T17440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4889 (17440)
[  588.691250][T17440] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  588.763367][T17440] BTRFS info (device loop8): using sha256 checksum algorithm
[  588.973876][T17440] BTRFS info (device loop8): enabling ssd optimizations
[  589.016819][T17440] BTRFS info (device loop8): turning on async discard
[  589.070847][T17440] BTRFS info (device loop8): enabling free space tree
[  589.078516][T17408] 8021q: adding VLAN 0 to HW filter on device team0
[  589.233234][T17408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  589.434237][T16422] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  589.906352][   T30] kauditd_printk_skb: 56 callbacks suppressed
[  589.906378][   T30] audit: type=1326 audit(1774038074.746:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  589.921924][T17495] m1Ie5nè‹: entered promiscuous mode
[  590.059330][   T30] audit: type=1326 audit(1774038074.746:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  590.193439][   T30] audit: type=1326 audit(1774038074.746:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  590.209582][T17509] xt_hashlimit: overflow, try lower: 18446744073709551607/511
[  590.290309][   T30] audit: type=1326 audit(1774038074.746:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  590.422275][   T30] audit: type=1326 audit(1774038074.746:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  590.562550][   T30] audit: type=1326 audit(1774038074.746:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  590.601920][T17521] program syz.6.4911 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  590.693238][   T30] audit: type=1326 audit(1774038074.746:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  590.836011][   T30] audit: type=1326 audit(1774038074.746:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  590.936920][   T30] audit: type=1326 audit(1774038074.746:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.5.4905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  591.055878][   T49] hsr_slave_0: left promiscuous mode
[  591.097999][   T49] hsr_slave_1: left promiscuous mode
[  591.156245][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  591.184257][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  591.287368][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  591.299042][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  591.386913][T17544] loop1: detected capacity change from 0 to 4096
[  591.442473][T17544] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  591.480842][   T49] veth1_macvtap: left promiscuous mode
[  591.533203][   T49] veth0_macvtap: left promiscuous mode
[  591.560695][   T49] veth1_vlan: left promiscuous mode
[  591.589633][   T49] veth0_vlan: left promiscuous mode
[  592.295832][T17570] loop4: detected capacity change from 0 to 4096
[  592.341733][T17570] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  592.442334][T17570] ntfs3(loop4): ino=19, mi_enum_attr
[  592.481205][T17570] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  592.793751][T17590] loop0: detected capacity change from 0 to 256
[  592.834681][T17590] exfat: Deprecated parameter 'utf8'
[  592.854448][T17590] exfat: Deprecated parameter 'namecase'
[  592.906080][T17590] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  593.161402][T17597] loop4: detected capacity change from 0 to 64
[  593.229002][   T49] team0 (unregistering): Port device team_slave_1 removed
[  593.312328][   T49] team0 (unregistering): Port device team_slave_0 removed
[  593.562760][T17607] loop4: detected capacity change from 0 to 64
[  593.703928][T17538] netdevsim netdevsim5: Firmware load for './file0/file0/..' refused, path contains '..' component
[  593.709058][T17577] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  594.277014][T17618] loop1: detected capacity change from 0 to 4096
[  594.356400][T17618] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  594.414341][T17629] bridge0: port 3(batadv0) entered disabled state
[  594.430515][T17604] loop8: detected capacity change from 0 to 32768
[  594.514159][T17604] JBD2: Ignoring recovery information on journal
[  594.515105][T17618] ntfs3(loop1): ino=19, mi_enum_attr
[  594.564895][T17629] bridge_slave_0: left allmulticast mode
[  594.616521][T17629] bridge_slave_0: left promiscuous mode
[  594.670567][T17629] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.692001][T17604] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode.
[  594.735264][T17629] bridge_slave_1: left allmulticast mode
[  594.785314][T17618] ntfs3(loop1): failed to convert "c46c" to cp850
[  594.795276][T17629] bridge_slave_1: left promiscuous mode
[  594.801200][T17629] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.843466][T17618] ntfs3(loop1): ino=20, mi_enum_attr
[  594.867668][T17604] ocfs2: Unmounting device (7,8) on (node local)
[  594.904019][T17642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4959'.
[  594.950920][T17629] bond0: (slave bond_slave_0): Releasing backup interface
[  595.021222][T17629] bond0: (slave bond_slave_1): Releasing backup interface
[  595.125296][T17629] team0: Port device C removed
[  595.202562][T17629] team0: Port device team_slave_1 removed
[  595.234681][T17629] batman_adv: batadv0: Removing interface: batadv_slave_0
[  595.322635][T17629] batman_adv: batadv0: Removing interface: batadv_slave_1
[  595.364605][T17629] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  595.633101][T17614] loop0: detected capacity change from 0 to 32768
[  595.696480][T17614] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4952 (17614)
[  595.807731][T17614] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  595.844348][T17614] BTRFS info (device loop0): using xxhash64 checksum algorithm
[  595.892181][T17614] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  596.277062][T17614] BTRFS info (device loop0): rebuilding free space tree
[  596.430306][T17614] BTRFS info (device loop0): disabling free space tree
[  596.437268][T17614] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  596.488893][T17695] loop4: detected capacity change from 0 to 4096
[  596.558248][T17695] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  596.564268][T17614] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  596.632842][T17699] loop6: detected capacity change from 0 to 8
[  596.646359][   T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.662312][T17614] BTRFS info (device loop0): setting nodatasum
[  596.668631][T17614] BTRFS info (device loop0): allowing degraded mounts
[  596.673477][T17695] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  596.723906][T17699] SQUASHFS error: Unable to read inode 0xa7
[  596.739846][T17614] BTRFS info (device loop0): turning on async discard
[  596.740480][T17695] ntfs3(loop4): mft corrupted
[  596.780083][T17695] ntfs3(loop4): Failed to load $Extend (-22).
[  596.781278][T17614] BTRFS info (device loop0): enabling disk space caching
[  596.787495][T17695] ntfs3(loop4): Failed to initialize $Extend.
[  596.857470][T17614] BTRFS info (device loop0): force clearing of disk cache
[  596.897758][T17614] BTRFS info (device loop0): force zlib compression, level 3
[  597.085460][T17695] ntfs3(loop4): ino=1e, mi_enum_attr
[  597.139284][T17695] ntfs3(loop4): ino=1e, mi_enum_attr
[  597.202434][T17695] ntfs3(loop4): ino=1e, mi_enum_attr
[  597.222312][T17614] BTRFS info (device loop0): balance: start -f -susage=4221952851975
[  597.282729][T17614] BTRFS info (device loop0): balance: ended with status: 0
[  597.355475][   T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.448804][T17708] loop6: detected capacity change from 0 to 4096
[  597.524515][ T5933] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  597.568052][T17719] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  597.594716][T17708] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[  597.595528][T17721] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  597.997141][   T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.224558][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4995'.
[  598.266046][T17742] kAFS: No cell specified
[  598.972679][   T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.121296][T17762] loop1: detected capacity change from 0 to 512
[  599.291458][T17762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  599.379448][T17762] ext4 filesystem being mounted at /887/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  599.398301][T17736] loop8: detected capacity change from 0 to 32768
[  599.417256][T17736] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4993 (17736)
[  599.495225][T17736] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  599.555501][T17736] BTRFS info (device loop8): using sha256 checksum algorithm
[  599.736012][T17797] loop5: detected capacity change from 0 to 64
[  599.739181][   T49] bridge_slave_1: left allmulticast mode
[  599.774785][T17736] BTRFS info (device loop8): enabling ssd optimizations
[  599.781878][T17736] BTRFS info (device loop8): turning on async discard
[  599.818462][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.826862][   T49] bridge_slave_1: left promiscuous mode
[  599.838216][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.859121][T17736] BTRFS info (device loop8): enabling free space tree
[  599.985056][   T49] bridge_slave_0: left allmulticast mode
[  600.049010][   T49] bridge_slave_0: left promiscuous mode
[  600.085361][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.303915][T16422] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  600.610745][T17822] loop0: detected capacity change from 0 to 1024
[  600.829329][T17830] loop6: detected capacity change from 0 to 512
[  600.876313][T17830] EXT4-fs: Ignoring removed nomblk_io_submit option
[  600.962471][   T12] hfsplus: b-tree write err: -5, ino 25
[  600.968296][   T12] hfsplus: b-tree write err: -5, ino 4
[  600.990894][T17833] x_tables: duplicate underflow at hook 3
[  601.010294][T17830] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  601.029533][   T12] hfsplus: b-tree write err: -5, ino 2
[  601.067109][T17830] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  601.111609][T17837] loop8: detected capacity change from 0 to 8
[  601.163625][T17830] EXT4-fs (loop6): orphan cleanup on readonly fs
[  601.196578][T17830] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  601.248944][T17830] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  601.318672][T17830] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  601.365607][T17840] loop0: detected capacity change from 0 to 256
[  601.373148][T17830] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5026: bg 0: block 40: padding at end of block bitmap is not set
[  601.421282][T17830] loop6: lost filesystem error report for type 5 error -117
[  601.421727][T17830] EXT4-fs (loop6): Remounting filesystem read-only
[  601.436286][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  601.436315][    C0] EXT4-fs (loop6): initial error at time 1774038085: ext4_validate_block_bitmap:441
[  601.436347][    C0] EXT4-fs (loop6): last error at time 1774038085: ext4_validate_block_bitmap:441
[  601.545935][T17840] FAT-fs (loop0): Directory bread(block 64) failed
[  601.570137][T17840] FAT-fs (loop0): Directory bread(block 65) failed
[  601.598135][T17840] FAT-fs (loop0): Directory bread(block 66) failed
[  601.637473][T17840] FAT-fs (loop0): Directory bread(block 67) failed
[  601.650036][T17840] FAT-fs (loop0): Directory bread(block 68) failed
[  601.665996][T17830] EXT4-fs (loop6): 1 truncate cleaned up
[  601.673682][T17830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  601.699428][T17840] FAT-fs (loop0): Directory bread(block 69) failed
[  601.706086][T17840] FAT-fs (loop0): Directory bread(block 70) failed
[  601.767397][T17840] FAT-fs (loop0): Directory bread(block 71) failed
[  601.794245][T17840] FAT-fs (loop0): Directory bread(block 72) failed
[  601.801116][T17840] FAT-fs (loop0): Directory bread(block 73) failed
[  601.923103][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  601.978494][T15128] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  601.998750][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  602.048846][T17855] loop5: detected capacity change from 0 to 1024
[  602.058195][   T49] bond0 (unregistering): Released all slaves
[  602.097153][T17821] loop4: detected capacity change from 0 to 32768
[  602.133724][T17821] BTRFS info: device /dev/loop4 (7:4) using temp-fsid f895e504-38de-4a83-a27e-19aa5e778535
[  602.170292][T17855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  602.191140][T17821] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5022 (17821)
[  602.217231][T17821] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  602.228311][T17821] BTRFS info (device loop4): using crc32c checksum algorithm
[  602.238570][T17851] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[  602.248675][T17851] netdevsim netdevsim8 netdevsim0: left allmulticast mode
[  602.281782][T17855] EXT4-fs error (device loop5): ext4_empty_dir:3107: inode #11: block 623: comm syz.5.5038: Attempting to read directory block (623) that is past i_size (638464)
[  602.416164][T17864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  602.625491][T17821] BTRFS info (device loop4): enabling ssd optimizations
[  602.632913][T17821] BTRFS info (device loop4): turning on flush-on-commit
[  602.649854][T17821] BTRFS info (device loop4): enabling free space tree
[  602.656918][T17821] BTRFS info (device loop4): enabling auto defrag
[  602.665073][T17821] BTRFS info (device loop4): use lzo compression, level 1
[  602.673492][T17821] BTRFS info (device loop4): max_inline set to 4096
[  602.796714][ T5953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.852787][T17888] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5044'.
[  602.937045][T17892] xt_policy: neither incoming nor outgoing policy selected
[  602.983835][T17891] nftables ruleset with unbound chain
[  603.113337][ T5948] BTRFS info (device loop4): last unmount of filesystem f895e504-38de-4a83-a27e-19aa5e778535
[  603.419469][T17906] netlink: 'syz.8.5053': attribute type 21 has an invalid length.
[  603.606820][T17904] netlink: 'syz.6.5052': attribute type 15 has an invalid length.
[  603.633458][T17904] netlink: 666 bytes leftover after parsing attributes in process `syz.6.5052'.
[  603.897331][   T49] hsr_slave_0: left promiscuous mode
[  603.968837][T17928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  604.025182][   T49] hsr_slave_1: left promiscuous mode
[  604.062061][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  604.069575][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  604.151616][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  604.202654][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  604.216335][T17934] netlink: 'syz.8.5063': attribute type 2 has an invalid length.
[  604.264588][   T30] audit: type=1326 audit(1774038088.167:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17940 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  604.296579][T17934] netlink: 'syz.8.5063': attribute type 1 has an invalid length.
[  604.323557][   T49] veth1_macvtap: left promiscuous mode
[  604.344398][   T49] veth0_macvtap: left promiscuous mode
[  604.385641][   T49] veth1_vlan: left promiscuous mode
[  604.398648][   T30] audit: type=1326 audit(1774038088.167:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17940 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  604.406957][   T49] veth0_vlan: left promiscuous mode
[  604.556901][   T30] audit: type=1326 audit(1774038088.195:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17940 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  604.648320][   T30] audit: type=1326 audit(1774038088.214:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17940 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  604.733439][   T30] audit: type=1326 audit(1774038088.214:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17940 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  604.856911][   T30] audit: type=1326 audit(1774038088.214:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17940 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  604.941752][T17959] nbd: couldn't find device at index -2145452028
[  604.988712][   T30] audit: type=1326 audit(1774038088.223:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17940 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  605.071420][   T30] audit: type=1326 audit(1774038088.223:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17940 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  605.170834][   T30] audit: type=1326 audit(1774038088.223:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17940 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  605.289254][T17968] loop6: detected capacity change from 0 to 2048
[  605.303701][T17968] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  605.583817][T17978] netlink: 'syz.5.5083': attribute type 2 has an invalid length.
[  605.790905][   T49] team0 (unregistering): Port device team_slave_1 removed
[  605.846902][   T49] team0 (unregistering): Port device team_slave_0 removed
[  606.135252][T17990] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5089'.
[  606.441265][T17984] loop5: detected capacity change from 0 to 32768
[  607.409335][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5108'.
[  608.391855][T18072] netlink: 'syz.8.5122': attribute type 3 has an invalid length.
[  608.402244][T18074] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  608.466014][ T8931] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  608.654489][T18035] loop0: detected capacity change from 0 to 32768
[  608.663638][ T8931] usb 6-1: Using ep0 maxpacket: 16
[  608.667326][T18083] comedi comedi3: multiq3: I/O port conflict (0xfffffffffffffffc,16)
[  608.694026][ T8931] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  608.713357][ T8931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  608.732309][T18084] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5128'.
[  608.765815][ T8931] usb 6-1: config 0 has no interface number 0
[  608.831933][ T8931] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  608.882212][ T8931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.904085][ T8931] usb 6-1: Product: syz
[  608.914833][ T8931] usb 6-1: Manufacturer: syz
[  608.933121][ T8931] usb 6-1: SerialNumber: syz
[  608.992156][ T8931] usb 6-1: config 0 descriptor??
[  609.044352][T18092] openvswitch: netlink: IP tunnel dst address not specified
[  609.100047][T18093] netlink: 'syz.6.5132': attribute type 3 has an invalid length.
[  609.142619][T18093] netlink: 'syz.6.5132': attribute type 1 has an invalid length.
[  609.187456][T18093] netlink: 216 bytes leftover after parsing attributes in process `syz.6.5132'.
[  609.219546][ T8931] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08d3)
[  609.266364][ T8931] uvcvideo 6-1:0.105: No valid video chain found.
[  609.437600][ T8931] usb 6-1: USB disconnect, device number 88
[  610.236596][   T30] audit: type=1326 audit(1774038093.750:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18133 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  610.254093][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5148'.
[  610.320993][   T30] audit: type=1326 audit(1774038093.779:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18133 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  610.416054][   T30] audit: type=1326 audit(1774038093.779:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18133 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  610.587196][   T30] audit: type=1326 audit(1774038093.779:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18133 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  610.644452][   T30] audit: type=1326 audit(1774038093.779:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18133 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  610.668089][T18139] loop8: detected capacity change from 0 to 4096
[  610.727918][   T30] audit: type=1326 audit(1774038093.779:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18133 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  610.763381][T18148] loop6: detected capacity change from 0 to 1024
[  610.816159][   T30] audit: type=1326 audit(1774038093.797:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18133 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  610.866177][   T30] audit: type=1326 audit(1774038093.797:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18133 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  610.890183][   T30] audit: type=1326 audit(1774038093.797:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18133 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  610.945633][   T30] audit: type=1326 audit(1774038093.975:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.0.5151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7bb9c799 code=0x7ffc0000
[  611.133136][T18149] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.142032][T18149] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.553130][T18149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  611.592089][T18149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  611.910864][T18179] loop1: detected capacity change from 0 to 1024
[  611.948533][T18179] hfsplus: cannot replace xattr
[  612.117546][T17317] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.170295][T17317] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.217682][T17317] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.275546][T17317] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.649075][T18210] loop0: detected capacity change from 0 to 64
[  613.095674][ T6018] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  613.202290][T18233] AppArmor: change_hat: Invalid input '0'
[  613.328480][ T6018] usb 7-1: unable to get BOS descriptor or descriptor too short
[  613.373955][ T6018] usb 7-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  613.415681][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.463544][ T6018] usb 7-1: Product: syz
[  613.471876][ T6018] usb 7-1: Manufacturer: syz
[  613.489645][ T6018] usb 7-1: SerialNumber: syz
[  613.576698][ T6018] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  613.744031][ T6018] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  613.768582][ T6018] usb 7-1: 0:3 : does not exist
[  613.800374][ T6018] usb 7-1: 0:4 : does not exist
[  613.828221][T18260] loop8: detected capacity change from 0 to 512
[  613.844275][ T6018] usb 7-1: unit 3 not found!
[  613.860474][T18260] EXT4-fs: inline encryption not supported
[  613.874147][ T6018] usb 7-1: unit 13 not found!
[  613.912207][T18260] EXT4-fs: Ignoring removed mblk_io_submit option
[  613.957695][T18260] EXT4-fs: Ignoring removed oldalloc option
[  614.014731][T18260] EXT4-fs (loop8): Test dummy encryption mode enabled
[  614.072445][T18260] EXT4-fs (loop8): orphan cleanup on readonly fs
[  614.080125][ T6018] usb 7-1: USB disconnect, device number 4
[  614.111832][T18260] EXT4-fs error (device loop8): ext4_orphan_get:1391: comm syz.8.5199: inode #13: comm syz.8.5199: iget: illegal inode #
[  614.188941][T18260] loop8: lost filesystem error report for type 5 error -117
[  614.192297][T18260] EXT4-fs (loop8): Remounting filesystem read-only
[  614.199683][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  614.199710][    C1] EXT4-fs (loop8): initial error at time 1774038097: ext4_orphan_get:1391
[  614.199741][    C1] EXT4-fs (loop8): last error at time 1774038097: ext4_orphan_get:1391
[  614.323952][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  614.371150][T18260] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  614.511977][T18282] loop4: detected capacity change from 0 to 64
[  614.632071][T16422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.923945][T18293] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  615.001780][T18293] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  615.327740][T18303] netlink: 'syz.8.5218': attribute type 12 has an invalid length.
[  615.354314][T18268] loop1: detected capacity change from 0 to 32768
[  615.366078][T18301] loop4: detected capacity change from 0 to 1024
[  615.394457][T18268] (syz.1.5203,18268,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  615.417256][T18301] EXT4-fs: inline encryption not supported
[  615.435658][T18268] (syz.1.5203,18268,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  615.483007][T18301] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  615.577476][T18301] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.5217: Freeing blocks not in datazone - block = 0, count = 4096
[  615.600232][T18268] JBD2: Ignoring recovery information on journal
[  615.658878][T18308] netlink: zone id is out of range
[  615.685512][T18268] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  615.725812][T18301] loop4: lost filesystem error report for type 5 error -117
[  615.730852][T18301] EXT4-fs (loop4): Remounting filesystem read-only
[  615.738668][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  615.738705][    C1] EXT4-fs (loop4): initial error at time 1774038098: ext4_free_blocks:6724
[  615.738740][    C1] EXT4-fs (loop4): last error at time 1774038098: ext4_free_blocks:6724
[  615.771002][T18283] loop5: detected capacity change from 0 to 32768
[  615.782224][T18308] netlink: zone id is out of range
[  615.787375][T18308] netlink: zone id is out of range
[  615.817200][T18308] netlink: zone id is out of range
[  615.838300][T18308] netlink: zone id is out of range
[  615.855432][T18308] netlink: zone id is out of range
[  615.875529][T18301] EXT4-fs (loop4): 1 orphan inode deleted
[  615.882369][T18308] netlink: zone id is out of range
[  615.883455][T18301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  615.907064][T18308] netlink: zone id is out of range
[  615.908678][ T2971] EXT4-fs (loop4): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  615.939408][T18283] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  615.939408][T18283] 
[  615.954058][T18308] netlink: zone id is out of range
[  615.972722][ T2971] __quota_error: 8 callbacks suppressed
[  615.972745][ T2971] Quota error (device loop4): write_blk: dquota write failed
[  616.004021][T18308] netlink: zone id is out of range
[  616.030454][T18285] loop6: detected capacity change from 0 to 32768
[  616.063026][ T2971] Quota error (device loop4): remove_free_dqentry: Can't write block (2) with free entries
[  616.121467][ T2971] EXT4-fs (loop4): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  616.154869][ T2971] Quota error (device loop4): write_blk: dquota write failed
[  616.182859][ T5948] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.210052][ T2971] Quota error (device loop4): free_dqentry: Can't move quota data block (2) to free list
[  616.269204][ T2971] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  616.312737][ T2971] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  616.524139][ T5935] ocfs2: Unmounting device (7,1) on (node local)
[  617.547000][T18356] ieee802154 phy0 wpan0: encryption failed: -22
[  617.558899][T18359] xt_hashlimit: max too large, truncated to 1048576
[  617.586884][T18359] Timeout policy `syz1' can only be used by L3 protocol number 9
[  617.955870][T18372] loop8: detected capacity change from 0 to 512
[  618.038995][T18372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  618.099549][T18372] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  618.180227][T18389] netlink: 'syz.1.5250': attribute type 1 has an invalid length.
[  618.264172][T18372] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz.8.5242: invalid size
[  618.288904][T18372] EXT4-fs (loop8): Remounting filesystem read-only
[  618.308917][T18392] loop6: detected capacity change from 0 to 256
[  618.368407][T18392] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  618.500841][T17317] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  618.528756][T17317] Quota error (device loop8): write_blk: dquota write failed
[  618.547980][T18398] loop0: detected capacity change from 0 to 1764
[  618.567360][T17317] Quota error (device loop8): free_dqentry: Can't write quota data block 5
[  618.568900][T16422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.610489][T17317] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  618.674748][T17317] Quota error (device loop8): write_blk: dquota write failed
[  618.706797][   T30] audit: type=1326 audit(1774038101.672:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18404 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20079c799 code=0x7ffc0000
[  618.730008][T17317] Quota error (device loop8): free_dqentry: Can't write quota data block 5
[  618.974443][T18413] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.5256'.
[  620.489212][T18478] Cannot find add_set index 2 as target
[  620.601282][T17091] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  620.644846][T18434] loop4: detected capacity change from 0 to 32768
[  620.665740][ T6018] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  620.712756][T18434] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  620.794186][T17091] usb 7-1: Using ep0 maxpacket: 16
[  620.806232][T17091] usb 7-1: too many configurations: 112, using maximum allowed: 8
[  620.835261][T17091] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  620.844764][T17091] usb 7-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0
[  620.866010][T17091] usb 7-1: Product: syz
[  620.870683][ T6018] usb 9-1: Using ep0 maxpacket: 32
[  620.922208][T17091] usb 7-1: Manufacturer: syz
[  620.935175][ T6018] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  620.946164][T18434] XFS (loop4): Ending clean mount
[  620.963847][T17091] r8152-cfgselector 7-1: Unknown version 0x0000
[  620.974236][T18501] loop1: detected capacity change from 0 to 256
[  620.986184][ T6018] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.995071][T17091] r8152-cfgselector 7-1: config 0 descriptor??
[  621.001792][ T6018] usb 9-1: Product: syz
[  621.006372][ T6018] usb 9-1: Manufacturer: syz
[  621.016157][ T6018] usb 9-1: SerialNumber: syz
[  621.035446][ T6018] usb 9-1: config 0 descriptor??
[  621.045862][T18501] exfat: Deprecated parameter 'namecase'
[  621.104007][T18501] exfat: Deprecated parameter 'utf8'
[  621.225191][ T5948] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  621.240576][T17091] r8152-cfgselector 7-1: bad CDC descriptors
[  621.253553][T18501] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  621.318402][T17091] r8152-cfgselector 7-1: USB disconnect, device number 5
[  621.518553][ T6018] airspy 9-1:0.0: usb_control_msg() failed -71 request 0a
[  621.559502][ T6018] airspy 9-1:0.0: Could not detect board
[  621.576358][T18511] net_ratelimit: 345 callbacks suppressed
[  621.576381][T18511] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  621.583279][ T6018] airspy 9-1:0.0: probe with driver airspy failed with error -71
[  621.593423][ T6018] usb 9-1: USB disconnect, device number 2
[  621.934776][T18521] loop5: detected capacity change from 0 to 1024
[  622.279910][T17125] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[  622.300628][T18536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  622.308581][T18536] IPv6: NLM_F_CREATE should be set when creating new route
[  622.315968][T18536] IPv6: NLM_F_CREATE should be set when creating new route
[  622.403839][T18540] libceph: resolve '96' (ret=-3): failed
[  622.433629][T18530] loop4: detected capacity change from 0 to 4096
[  622.483425][T17125] usb 6-1: Using ep0 maxpacket: 32
[  622.502044][T17125] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  622.525487][T18530] ntfs3(loop4): ino=3, Correct links count -> 2.
[  622.552251][T17125] usb 6-1: config 0 has no interface number 0
[  622.569778][T18545] loop8: detected capacity change from 0 to 64
[  622.592482][T17125] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 65519, setting to 1024
[  622.655629][T17125] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  622.701253][T17125] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  622.739641][T17125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.748740][T17125] usb 6-1: Product: syz
[  622.787448][T17125] usb 6-1: Manufacturer: syz
[  622.809059][T17125] usb 6-1: SerialNumber: syz
[  622.826799][T18530] ntfs3(loop4): ino=1a, mi_enum_attr
[  622.832146][T18530] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  622.841180][T17125] usb 6-1: config 0 descriptor??
[  622.884618][T18521] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  622.902843][T18553] nft_compat: unsupported protocol 0
[  622.919093][T17125] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  622.997176][T17125] em28xx 6-1:0.132: Video interface 132 found: bulk
[  623.050002][T18557] loop8: detected capacity change from 0 to 764
[  623.213732][T17125] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  623.371083][T17125] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  623.413374][T17125] em28xx 6-1:0.132: board has no eeprom
[  623.502481][T17125] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  623.536632][T17125] em28xx 6-1:0.132: analog set to bulk mode.
[  623.573981][   T29] em28xx 6-1:0.132: Registering V4L2 extension
[  623.614723][T17125] usb 6-1: USB disconnect, device number 89
[  623.689671][T17125] em28xx 6-1:0.132: Disconnecting em28xx
[  623.917790][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  623.917814][   T30] audit: type=1800 audit(1774038106.545:187): pid=18570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.5322" name="/" dev="sockfs" ino=47772 res=0 errno=0
[  624.028018][T18582] loop6: detected capacity change from 0 to 1764
[  624.244574][T18551] loop0: detected capacity change from 0 to 32768
[  624.280918][   T29] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  624.288599][   T29] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  624.331046][   T29] em28xx 6-1:0.132: No AC97 audio processor
[  624.366149][T18587] loop4: detected capacity change from 0 to 4096
[  624.422239][   T29] usb 6-1: Decoder not found
[  624.461587][   T29] em28xx 6-1:0.132: failed to create media graph
[  624.488621][   T29] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  624.562299][   T29] em28xx 6-1:0.132: Remote control support is not available for this card.
[  624.611387][T17125] em28xx 6-1:0.132: Closing input extension
[  624.840242][T17125] em28xx 6-1:0.132: Freeing device
[  624.873997][   T30] audit: type=1326 audit(1774038107.443:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.6.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  624.883752][T18612] openvswitch: netlink: Tunnel attr 183 out of range max 16
[  624.960075][   T30] audit: type=1326 audit(1774038107.480:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.6.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  625.060840][   T30] audit: type=1326 audit(1774038107.480:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.6.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  625.134224][   T30] audit: type=1326 audit(1774038107.480:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.6.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  625.253366][   T30] audit: type=1326 audit(1774038107.480:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18610 comm="syz.6.5336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  625.306030][T18621] libceph: resolve '400' (ret=-3): failed
[  625.596172][   T30] audit: type=1400 audit(1774038108.116:193): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=18632 comm="syz.5.5345"
[  625.802024][T18641] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5348'.
[  625.844405][T18641] netlink: 'syz.8.5348': attribute type 3 has an invalid length.
[  625.957915][ T6018] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  626.155455][ T6018] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  626.182481][ T6018] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  626.225185][ T6018] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  626.237688][T18651] loop4: detected capacity change from 0 to 2048
[  626.255779][ T6018] usb 2-1: config 220 has no interface number 2
[  626.273953][ T6018] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  626.310263][T18651] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  626.334317][ T6018] usb 2-1: config 220 interface 0 has no altsetting 0
[  626.349232][ T6018] usb 2-1: config 220 interface 76 has no altsetting 0
[  626.407944][ T6018] usb 2-1: config 220 interface 1 has no altsetting 0
[  626.427753][ T6018] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  626.462673][ T6018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.470896][ T6018] usb 2-1: Product: syz
[  626.515791][ T6018] usb 2-1: Manufacturer: syz
[  626.520449][ T6018] usb 2-1: SerialNumber: syz
[  626.640070][T18631] loop6: detected capacity change from 0 to 32768
[  626.671175][T18660] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  626.712772][T18631] read_mapping_page failed!
[  626.770489][T18631] ERROR: (device loop6): txCommit: 
[  626.770489][T18631] 
[  626.811012][ T6018] usb 2-1: selecting invalid altsetting 0
[  626.867966][ T6018] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  626.875408][ T6018] uvcvideo 2-1:220.0: No valid video chain found.
[  626.960384][ T6018] usb 2-1: selecting invalid altsetting 0
[  626.969606][T18639] loop0: detected capacity change from 0 to 32768
[  626.973966][ T6018] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  626.989648][ T2971] read_mapping_page failed!
[  626.994641][ T2971] ERROR: (device loop6): txCommit: 
[  626.994641][ T2971] 
[  627.045874][ T2971] jfs_write_inode: jfs_commit_inode failed!
[  627.062919][ T6018] usb 2-1: USB disconnect, device number 97
[  627.095964][T18639] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  627.275982][T18639] XFS (loop0): Ending clean mount
[  627.330277][T18639] XFS (loop0): Quotacheck needed: Please wait.
[  627.471500][T18639] XFS (loop0): Quotacheck: Done.
[  627.724123][ T5933] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  628.505816][T18725] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5384'.
[  628.731622][T18731] bond2: entered promiscuous mode
[  628.772593][T18732] loop6: detected capacity change from 0 to 4096
[  628.800693][T18731] 8021q: adding VLAN 0 to HW filter on device bond2
[  628.834151][T18732] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  629.060663][T18742] loop8: detected capacity change from 0 to 4096
[  629.108742][T18751] loop0: detected capacity change from 0 to 512
[  629.122760][T18742] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  629.183307][T18742] ntfs3(loop8): ino=3, mi_enum_attr
[  629.197244][T18755] ip6tnl1: entered promiscuous mode
[  629.224508][T18755] ip6tnl1: entered allmulticast mode
[  629.255785][T18751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  629.326888][T18751] ext4 filesystem being mounted at /872/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  629.350039][T18764] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5400'.
[  629.588416][ T5933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  630.175549][T18780] loop8: detected capacity change from 0 to 4096
[  630.426775][T18802] netlink: 'syz.4.5415': attribute type 8 has an invalid length.
[  630.619772][ T6018] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  630.855640][ T6018] usb 2-1: Using ep0 maxpacket: 8
[  630.879422][ T6018] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  630.913290][ T6018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.955051][ T6018] usb 2-1: Product: syz
[  630.959266][ T6018] usb 2-1: Manufacturer: syz
[  630.999398][ T6018] usb 2-1: SerialNumber: syz
[  631.023603][ T6018] usb 2-1: config 0 descriptor??
[  631.076685][ T6018] gspca_main: se401-2.14.0 probing 047d:5003
[  631.462448][T18838] loop4: detected capacity change from 0 to 2048
[  631.486264][ T6018] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  631.532359][ T6018] se401 2-1:0.0: probe with driver se401 failed with error -71
[  631.546534][T18838] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  631.560219][ T6018] usb 2-1: USB disconnect, device number 98
[  631.602469][T18838] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  631.651308][T18838] UDF-fs: Scanning with blocksize 512 failed
[  631.726474][T18838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  631.763730][   T29] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  631.945496][   T29] usb 6-1: Using ep0 maxpacket: 32
[  631.988271][   T29] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  632.022801][   T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  632.050365][   T29] usb 6-1: config 0 has no interface number 0
[  632.061295][T18816] loop0: detected capacity change from 0 to 32768
[  632.084623][   T29] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  632.090626][T18816] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5421 (18816)
[  632.141256][T18858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5436'.
[  632.145828][   T29] usb 6-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  632.216009][T18816] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  632.253998][   T29] usb 6-1: config 0 interface 196 has no altsetting 0
[  632.255678][T18816] BTRFS info (device loop0): using sha256 checksum algorithm
[  632.315662][   T29] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  632.375653][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.430766][   T29] usb 6-1: Product: syz
[  632.435180][   T29] usb 6-1: Manufacturer: syz
[  632.448056][   T29] usb 6-1: SerialNumber: syz
[  632.460321][   T29] usb 6-1: config 0 descriptor??
[  632.472901][T18842] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  632.511873][T18874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5441'.
[  632.588364][T18816] BTRFS info (device loop0): enabling ssd optimizations
[  632.595382][T18816] BTRFS info (device loop0): turning on async discard
[  632.608985][T18869] loop1: detected capacity change from 0 to 2048
[  632.633937][T18874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5441'.
[  632.689081][T18869] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  632.706599][T18816] BTRFS info (device loop0): enabling free space tree
[  632.729668][   T29] ipheth 6-1:0.196: Unable to find endpoints
[  632.797119][   T29] usb 6-1: USB disconnect, device number 90
[  633.159282][ T5933] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  633.418769][T18907] SET target dimension over the limit!
[  634.041771][T18931] loop6: detected capacity change from 0 to 1764
[  634.137002][T18935] netlink: 'syz.8.5462': attribute type 13 has an invalid length.
[  634.211615][T18931] iso9660: Corrupted directory entry in block 2 of inode 1920
[  634.668634][T18951] IPv6: sit1: Disabled Multicast RS
[  634.794005][T18957] xt_CT: You must specify a L4 protocol and not use inversions on it
[  634.948497][T18963] openvswitch: netlink: VXLAN extension message has 16 unknown bytes.
[  635.391865][T18983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5483'.
[  635.687725][T18997] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  635.933679][T19008] loop6: detected capacity change from 0 to 1024
[  636.100337][T19018] binder: 19016:19018 ioctl c00c620f 200000000440 returned -22
[  636.165801][T17329] hfsplus: b-tree write err: -5, ino 25
[  636.205306][T17329] hfsplus: b-tree write err: -5, ino 4
[  636.274389][T17329] hfsplus: b-tree write err: -5, ino 2
[  637.046352][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5511'.
[  637.507430][T19023] loop5: detected capacity change from 0 to 32768
[  637.584556][T19023] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5498 (19023)
[  637.669204][T19023] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  637.733118][T19023] BTRFS info (device loop5): using sha256 checksum algorithm
[  637.946290][T19023] BTRFS info (device loop5): enabling ssd optimizations
[  637.988479][T19023] BTRFS info (device loop5): turning on async discard
[  638.046060][T19023] BTRFS info (device loop5): enabling free space tree
[  638.061472][T19097] netlink: 'syz.4.5521': attribute type 3 has an invalid length.
[  638.250760][ T5953] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  638.475995][T19112] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  638.754475][T19119] xt_limit: Overflow, try lower: 268435456/134217728
[  639.121077][ T5943] Bluetooth: hci5: unexpected event for opcode 0x200d
[  639.686367][T19154] netlink: 'syz.4.5543': attribute type 2 has an invalid length.
[  639.750892][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5543'.
[  640.003154][T19164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5547'.
[  640.301568][T19168] loop6: detected capacity change from 0 to 4096
[  640.350474][   T30] audit: type=1326 audit(1774038121.921:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.1.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  640.384887][T19174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5551'.
[  640.463524][   T30] audit: type=1326 audit(1774038121.921:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.1.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  640.580554][   T30] audit: type=1326 audit(1774038121.921:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.1.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  640.646988][T19132] loop8: detected capacity change from 0 to 32768
[  640.677832][T19132] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5534 (19132)
[  640.699456][   T30] audit: type=1326 audit(1774038121.921:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.1.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  640.815002][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  640.828922][T19132] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  640.841500][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  640.863903][   T30] audit: type=1326 audit(1774038121.931:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.1.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  640.889930][T19132] BTRFS info (device loop8): using sha256 checksum algorithm
[  640.969375][   T30] audit: type=1326 audit(1774038121.931:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.1.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  641.012162][   T30] audit: type=1326 audit(1774038121.931:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.1.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  641.059671][   T30] audit: type=1326 audit(1774038121.931:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.1.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  641.104199][T19150] loop0: detected capacity change from 0 to 32768
[  641.167251][   T30] audit: type=1326 audit(1774038121.931:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.1.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  641.237044][T19203] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5557'.
[  641.282549][   T30] audit: type=1326 audit(1774038121.931:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19171 comm="syz.1.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  641.321921][T19132] BTRFS info (device loop8): checking UUID tree
[  641.382991][T19132] BTRFS info (device loop8): setting nodatasum
[  641.404120][T19132] BTRFS info (device loop8): setting nodatacow
[  641.456963][T19132] BTRFS info (device loop8): enabling ssd optimizations
[  641.504659][T19132] BTRFS info (device loop8): turning on async discard
[  641.511525][T19132] BTRFS info (device loop8): enabling free space tree
[  641.547219][T17091] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[  641.760730][T17091] usb 6-1: Using ep0 maxpacket: 32
[  641.776167][T17091] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  641.819074][T17091] usb 6-1: config 0 has no interface number 0
[  641.852968][T17091] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  641.880984][T16422] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  641.893666][T17091] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  641.929525][T17091] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  641.971711][T17091] usb 6-1: config 0 interface 196 has no altsetting 0
[  642.003923][T17091] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  642.038391][T17091] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.075162][T17091] usb 6-1: Product: syz
[  642.092199][T17091] usb 6-1: Manufacturer: syz
[  642.137237][T17091] usb 6-1: SerialNumber: syz
[  642.214921][T17091] usb 6-1: config 0 descriptor??
[  642.252832][T19205] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  642.294969][T19233] ip6tnl2: entered promiscuous mode
[  642.349818][T19235] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  642.363406][T19233] ip6tnl2: entered allmulticast mode
[  642.486397][T17091] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  642.521880][T17091] ipheth 6-1:0.196: probe with driver ipheth failed with error -71
[  642.626438][T17091] usb 6-1: USB disconnect, device number 91
[  643.231225][T19270] loop8: detected capacity change from 0 to 1024
[  643.314092][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5588'.
[  643.342844][T19270] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  643.404729][T19278] loop0: detected capacity change from 0 to 4096
[  643.690445][T16422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.031287][T19310] usb usb8: usbfs: process 19310 (syz.4.5605) did not claim interface 1 before use
[  644.399261][T19329] loop6: detected capacity change from 0 to 256
[  644.553095][T19332] loop0: detected capacity change from 0 to 2048
[  644.616166][T19332] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  644.693930][T19340] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  644.745459][T19335] bond2: option updelay: invalid value (18446744072924056005)
[  644.768884][T19335] bond2: option updelay: allowed values 0 - 2147483647
[  644.820281][T19335] bond2 (unregistering): Released all slaves
[  644.836118][T19348] loop1: detected capacity change from 0 to 8
[  644.853350][T19348] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  644.904136][T19348] cramfs: Error -3 while decompressing!
[  644.911980][T19348] cramfs: ffffffff9a3b0d08(26)->ffff88806f3ed000(4096)
[  644.932691][T19351] loop4: detected capacity change from 0 to 1024
[  644.974378][T19348] cramfs: Error -3 while decompressing!
[  645.009353][T19348] cramfs: ffffffff9a3b0d22(26)->ffff88804b1f5000(4096)
[  645.066484][T19348] cramfs: Error -3 while decompressing!
[  645.072090][T19348] cramfs: ffffffff9a3b0d3c(16)->ffff88804980b000(4096)
[  645.112106][T19348] cramfs: Error -3 while decompressing!
[  645.138898][T19348] cramfs: ffffffff9a3b0d08(26)->ffff88806f3ed000(4096)
[  645.168764][T17317] hfsplus: b-tree write err: -5, ino 25
[  645.175293][T17317] hfsplus: b-tree write err: -5, ino 4
[  645.205319][T17317] hfsplus: b-tree write err: -5, ino 2
[  645.391387][T19367] new mount options do not match the existing superblock, will be ignored
[  645.590619][T19369] loop6: detected capacity change from 0 to 4096
[  645.669568][T19376] SET target dimension over the limit!
[  646.295091][T17091] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  646.489664][T17091] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  646.525981][T17091] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.570121][T17091] usb 9-1: config 0 descriptor??
[  646.806161][T17091] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  646.830799][T19362] loop0: detected capacity change from 0 to 32768
[  646.903677][T19362] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  647.022800][T17091] [drm:udl_init] *ERROR* Selecting channel failed
[  647.024522][  T790] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[  647.068897][T17091] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2
[  647.078169][T17091] [drm] Initialized udl on minor 2
[  647.081833][T19362] XFS (loop0): Ending clean mount
[  647.094056][T17091] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  647.109794][T17091] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  647.121388][ T6473] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  647.134345][T17091] usb 9-1: USB disconnect, device number 3
[  647.135142][T19422] netlink: 'syz.6.5654': attribute type 3 has an invalid length.
[  647.144525][ T6473] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  647.180083][T19362] XFS (loop0): Quotacheck needed: Please wait.
[  647.293545][  T790] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  647.324075][T19424] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  647.331130][  T790] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  647.353004][T19362] XFS (loop0): Quotacheck: Done.
[  647.353077][T19424] block device autoloading is deprecated and will be removed.
[  647.387172][  T790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.441701][  T790] gspca_main: stv0680-2.14.0 probing 041e:4007
[  647.490086][ T5933] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  647.920805][T19441] loop8: detected capacity change from 0 to 512
[  647.967765][T19441] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[  647.984541][T19441] System zones: 0-2, 18-18, 34-34
[  648.074567][T19441] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  648.115050][T19441] EXT4-fs (loop8): Remounting filesystem read-only
[  648.128818][T19441] EXT4-fs (loop8): 1 truncate cleaned up
[  648.134651][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  648.134677][    C0] EXT4-fs (loop8): initial error at time 1774038129: ext4_mb_generate_buddy:1315
[  648.134709][    C0] EXT4-fs (loop8): last error at time 1774038129: ext4_mb_generate_buddy:1315
[  648.186587][   T76] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  648.208295][   T76] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  648.226857][T19441] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  648.267532][   T76] Quota error (device loop8): write_blk: dquota write failed
[  648.283651][T19455] loop4: detected capacity change from 0 to 128
[  648.293376][   T76] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries
[  648.303508][   T76] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  648.320923][T19441] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  648.368906][   T76] Quota error (device loop8): write_blk: dquota write failed
[  648.381281][   T76] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list
[  648.398427][T19455] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  648.409654][   T76] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[  648.419916][   T76] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  648.430088][T19455] FAT-fs (loop4): Filesystem has been set read-only
[  648.457507][   T76] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  648.475682][T19455] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  648.505160][   T76] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  648.519260][ T5940] Bluetooth: hci3: command 0x0406 tx timeout
[  648.529051][T19455] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  648.560845][T19455] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  648.600546][  T790] stv0680 6-1:4.0: STV(e): camera ping failed!!
[  648.623937][T19455] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  648.635907][T19455] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  648.653216][T19455] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  648.653765][T16422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.667814][T19455] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  648.680585][T19455] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  648.689575][T19455] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  648.709826][T19455] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  648.738057][   T30] audit: type=1800 audit(1774038129.731:204): pid=19455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5669" name="file2" dev="loop4" ino=1048739 res=0 errno=0
[  648.832232][  T790] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  648.850643][  T790] stv0680 6-1:4.0: last error: 61,  command = 0x28
[  648.871000][  T790] usb 6-1: USB disconnect, device number 92
[  648.901116][ T5940] Bluetooth: hci7: hardware error 0x08
[  649.014405][T19473] netlink: 'syz.6.5678': attribute type 2 has an invalid length.
[  649.215007][T19481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5683'.
[  649.533748][   T30] audit: type=1326 audit(1774038130.507:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19492 comm="syz.6.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  649.919198][T19509] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5696'.
[  649.928192][T19509] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  650.289819][T19526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5704'.
[  650.331524][T19526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5704'.
[  651.126716][T19560] xt_CT: You must specify a L4 protocol and not use inversions on it
[  651.160644][ T5940] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[  651.355555][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5726'.
[  651.470353][T19576] loop5: detected capacity change from 0 to 16
[  651.842961][T19594] loop5: detected capacity change from 0 to 1024
[  651.945968][T19594] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  652.016728][T19594] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8040e019, mo2=0000]
[  652.081299][T19594] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.5735: lblock 2 mapped to illegal pblock 2 (length 1)
[  652.119431][T19594] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  652.121013][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  652.136768][    C0] EXT4-fs (loop5): initial error at time 1774038132: ext4_map_blocks:776: inode 3: block 2
[  652.147023][    C0] EXT4-fs (loop5): last error at time 1774038132: ext4_map_blocks:776: inode 3: block 2
[  652.176727][T19594] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.5735: lblock 0 mapped to illegal pblock 48 (length 1)
[  652.234770][T19594] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  652.235119][T19594] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.5735: Failed to acquire dquot type 0
[  652.364055][T19607] xt_policy: output policy not valid in PREROUTING and INPUT
[  652.367265][T19594] loop5: lost filesystem error report for type 5 error -117
[  652.441487][T19594] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  652.500716][T19594] loop5: lost filesystem error report for type 5 error -117
[  652.506143][T19594] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.5735: mark_inode_dirty error
[  652.586251][T19594] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  652.586690][T19594] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[  652.649123][T19594] EXT4-fs (loop5): 1 orphan inode deleted
[  652.711387][   T49] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  652.726390][T19594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  652.771799][   T49] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  652.794768][   T49] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0
[  652.910288][  T790] IPVS: starting estimator thread 0...
[  653.052137][T19624] IPVS: using max 26 ests per chain, 62400 per kthread
[  653.053268][T19627] loop4: detected capacity change from 0 to 256
[  653.165701][ T5953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  653.203761][   T49] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  653.248202][T19627] FAT-fs (loop4): Directory bread(block 64) failed
[  653.267667][   T49] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  653.279938][   T49] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0
[  653.295729][T19627] FAT-fs (loop4): Directory bread(block 65) failed
[  653.329850][T19627] FAT-fs (loop4): Directory bread(block 66) failed
[  653.336422][T19627] FAT-fs (loop4): Directory bread(block 67) failed
[  653.342724][   T49] loop5: lost filesystem error report for type 5 error -117
[  653.346175][ T5953] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0
[  653.375757][T19627] FAT-fs (loop4): Directory bread(block 68) failed
[  653.382350][T19627] FAT-fs (loop4): Directory bread(block 69) failed
[  653.414503][ T5953] loop5: lost filesystem error report for type 5 error -117
[  653.461980][T19627] FAT-fs (loop4): Directory bread(block 70) failed
[  653.466533][ T5953] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  653.495601][T19627] FAT-fs (loop4): Directory bread(block 71) failed
[  653.508780][T19627] FAT-fs (loop4): Directory bread(block 72) failed
[  653.525185][T19627] FAT-fs (loop4): Directory bread(block 73) failed
[  653.539003][ T5953] loop5: lost filesystem error report for type 5 error -117
[  653.539308][ T5953] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error
[  653.583514][ T5953] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  654.016649][T19658] 8021q: adding VLAN 0 to HW filter on device bond0
[  654.078474][T19658] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  654.114704][T19658] bond0: (slave gre0): Error -95 calling set_mac_address
[  654.144469][T19663] xt_CONNSECMARK: invalid mode: 0
[  654.216936][T19668] netlink: 'syz.6.5769': attribute type 33 has an invalid length.
[  654.225089][T19668] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5769'.
[  654.272673][T19668] `: renamed from veth0_macvtap (while UP)
[  654.286470][T19670] loop0: detected capacity change from 0 to 128
[  654.317507][T19668] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  654.338331][T19670] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  654.462868][T19676] loop1: detected capacity change from 0 to 256
[  654.500587][T19670] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  654.514508][T19640] loop8: detected capacity change from 0 to 32768
[  654.565917][T19640] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5759 (19640)
[  654.603528][T19670] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (30846!=65535)
[  654.633241][T19676] FAT-fs (loop1): Directory bread(block 64) failed
[  654.669906][T19676] FAT-fs (loop1): Directory bread(block 65) failed
[  654.690567][T19640] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  654.708081][T19676] FAT-fs (loop1): Directory bread(block 66) failed
[  654.747141][T19676] FAT-fs (loop1): Directory bread(block 67) failed
[  654.768366][T19640] BTRFS info (device loop8): using sha256 checksum algorithm
[  654.794188][T19676] FAT-fs (loop1): Directory bread(block 68) failed
[  654.800772][T19676] FAT-fs (loop1): Directory bread(block 69) failed
[  654.817318][T19676] FAT-fs (loop1): Directory bread(block 70) failed
[  654.823917][T19676] FAT-fs (loop1): Directory bread(block 71) failed
[  654.880663][T19676] FAT-fs (loop1): Directory bread(block 72) failed
[  654.934694][T19676] FAT-fs (loop1): Directory bread(block 73) failed
[  655.010290][ T5933] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  655.077734][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  655.077758][   T30] audit: type=1800 audit(1774038135.689:214): pid=19676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5773" name="file1" dev="loop1" ino=1048740 res=0 errno=0
[  655.123599][T19640] BTRFS info (device loop8): enabling ssd optimizations
[  655.158005][T19640] BTRFS info (device loop8): turning on async discard
[  655.165005][T19640] BTRFS info (device loop8): enabling free space tree
[  655.468169][T16422] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  655.629779][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5787'.
[  656.251347][ T1204] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  656.457159][T19743] loop6: detected capacity change from 0 to 8192
[  656.495269][ T1204] usb 2-1: Using ep0 maxpacket: 8
[  656.536251][ T1204] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  656.571598][T19743] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF
[  656.580537][ T1204] usb 2-1: config 0 has no interface number 0
[  656.586781][ T1204] usb 2-1: config 0 interface 1 has no altsetting 0
[  656.643726][T19743] FAT-fs (loop6): Filesystem has been set read-only
[  656.662752][ T1204] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  656.688482][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.740860][ T1204] usb 2-1: Product: syz
[  656.745064][ T1204] usb 2-1: Manufacturer: syz
[  656.749673][ T1204] usb 2-1: SerialNumber: syz
[  656.841822][ T1204] usb 2-1: config 0 descriptor??
[  657.065415][T19768] loop8: detected capacity change from 0 to 4096
[  657.104341][ T1204] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  657.124633][T19768] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  657.250858][T19768] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  657.342974][  T790] usb 2-1: USB disconnect, device number 99
[  657.450046][   T30] audit: type=1326 audit(1774038137.915:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  657.567195][   T30] audit: type=1326 audit(1774038137.915:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  657.690291][   T30] audit: type=1326 audit(1774038137.943:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  657.778563][   T30] audit: type=1326 audit(1774038137.943:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  657.862240][   T30] audit: type=1326 audit(1774038137.943:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  657.975717][   T30] audit: type=1326 audit(1774038137.943:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  658.054716][   T30] audit: type=1326 audit(1774038137.943:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  658.125399][T19811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  658.168916][   T30] audit: type=1326 audit(1774038137.961:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  658.278369][   T30] audit: type=1326 audit(1774038137.961:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.6.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb1ddb9c799 code=0x7ffc0000
[  658.302087][ T6473] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  658.398279][T19826] loop8: detected capacity change from 0 to 128
[  658.536791][ T6473] usb 1-1: Using ep0 maxpacket: 32
[  658.550023][ T6473] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  658.574181][ T6473] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  658.601083][ T6473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.656004][ T6473] usb 1-1: Product: syz
[  658.660218][ T6473] usb 1-1: Manufacturer: syz
[  658.685920][ T6473] usb 1-1: SerialNumber: syz
[  658.702623][ T6473] usb 1-1: config 0 descriptor??
[  658.720325][ T6473] usb 1-1: bad CDC descriptors
[  658.737273][ T6473] usb 1-1: unsupported MDLM descriptors
[  658.896798][T19841] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  658.940971][ T6473] usb 1-1: USB disconnect, device number 79
[  659.980307][T19886] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5850'.
[  660.030370][T19886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  660.169890][T19896] fuse: Bad value for 'group_id'
[  660.184869][T19896] fuse: Bad value for 'group_id'
[  660.541958][T19910] loop4: detected capacity change from 0 to 8
[  660.606800][T19912] loop6: detected capacity change from 0 to 1024
[  660.645675][T19910] SQUASHFS error: Failed to read block 0x8f: -5
[  660.677964][   T30] audit: type=1800 audit(1774038140.936:224): pid=19910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5862" name="file1" dev="loop4" ino=5 res=0 errno=0
[  660.750057][T19912] hfsplus: invalid xattr key length: 0
[  660.835022][T17091] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  661.006036][T17091] usb 2-1: Using ep0 maxpacket: 16
[  661.041228][T17091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  661.101377][T17091] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[  661.123906][T17091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.155711][T17091] usb 2-1: Product: syz
[  661.161049][T17091] usb 2-1: Manufacturer: syz
[  661.165933][T17091] usb 2-1: SerialNumber: syz
[  661.240573][T17091] usb 2-1: config 0 descriptor??
[  661.255540][T17091] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected
[  661.313542][T17091] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  661.369982][T19937] sctp: [Deprecated]: syz.8.5875 (pid 19937) Use of struct sctp_assoc_value in delayed_ack socket option.
[  661.369982][T19937] Use struct sctp_sack_info instead
[  661.493936][  T790] usb 2-1: USB disconnect, device number 100
[  661.506577][  T790] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  661.541923][T19942] loop0: detected capacity change from 0 to 2048
[  661.546759][T19944] loop4: detected capacity change from 0 to 128
[  661.563207][  T790] kobil_sct 2-1:0.0: device disconnected
[  661.576571][T19942] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  661.604793][T19944] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  661.638048][T19946] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5880'.
[  661.650569][T19942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  661.650588][T19944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  661.787942][T19952] netlink: 'syz.6.5883': attribute type 21 has an invalid length.
[  662.329459][T19969] xt_socket: unknown flags 0x50
[  663.206014][   T30] audit: type=1326 audit(1774038143.293:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20008 comm="syz.1.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  663.289529][   T30] audit: type=1326 audit(1774038143.293:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20008 comm="syz.1.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  663.345912][   T30] audit: type=1326 audit(1774038143.293:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20008 comm="syz.1.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  663.368972][T20011] loop5: detected capacity change from 0 to 256
[  663.518715][   T30] audit: type=1326 audit(1774038143.321:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20008 comm="syz.1.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  663.622616][   T30] audit: type=1326 audit(1774038143.321:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20008 comm="syz.1.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  663.699785][   T30] audit: type=1326 audit(1774038143.321:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20008 comm="syz.1.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  663.778607][T20030] loop8: detected capacity change from 0 to 64
[  663.796711][   T30] audit: type=1326 audit(1774038143.321:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20008 comm="syz.1.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  663.919658][   T30] audit: type=1326 audit(1774038143.321:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20008 comm="syz.1.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff24ff9c799 code=0x7ffc0000
[  663.989414][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5925'.
[  664.700063][T20071] loop6: detected capacity change from 0 to 256
[  665.257749][T20092] netlink: 'syz.5.5952': attribute type 1 has an invalid length.
[  666.029701][ T5940] Bluetooth: hci4: unexpected event for opcode 0x200c
[  666.061380][T20081] loop0: detected capacity change from 0 to 32768
[  666.068795][T20121] bond0: (slave bond_slave_1): Releasing backup interface
[  666.117000][T20081] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 7b9857d6-0e12-4e62-9ee5-044e7c059571
[  666.179702][T20081] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5945 (20081)
[  666.259713][T20081] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  666.295281][T20131] loop1: detected capacity change from 0 to 256
[  666.333294][T20081] BTRFS info (device loop0): using crc32c checksum algorithm
[  666.480101][T20131] FAT-fs (loop1): Directory bread(block 64) failed
[  666.518852][T20131] FAT-fs (loop1): Directory bread(block 65) failed
[  666.526146][T20131] FAT-fs (loop1): Directory bread(block 66) failed
[  666.533261][T20081] BTRFS info (device loop0): turning off barriers
[  666.541833][T20081] BTRFS info (device loop0): enabling free space tree
[  666.548791][T20131] FAT-fs (loop1): Directory bread(block 67) failed
[  666.556394][T20081] BTRFS info (device loop0): use zstd compression, level 3
[  666.564506][T20131] FAT-fs (loop1): Directory bread(block 68) failed
[  666.564919][T20102] loop5: detected capacity change from 0 to 32768
[  666.571099][T20131] FAT-fs (loop1): Directory bread(block 69) failed
[  666.571220][T20131] FAT-fs (loop1): Directory bread(block 70) failed
[  666.571255][T20131] FAT-fs (loop1): Directory bread(block 71) failed
[  666.571358][T20131] FAT-fs (loop1): Directory bread(block 72) failed
[  666.571393][T20131] FAT-fs (loop1): Directory bread(block 73) failed
[  666.683610][T20102] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5957 (20102)
[  666.771326][T20102] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  666.822087][T20102] BTRFS info (device loop5): using xxhash64 checksum algorithm
[  666.833609][ T5933] BTRFS info (device loop0): last unmount of filesystem 7b9857d6-0e12-4e62-9ee5-044e7c059571
[  666.867239][T20102] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  666.897911][T20156] loop6: detected capacity change from 0 to 64
[  666.987579][T20163] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5977'.
[  667.269575][T20102] BTRFS info (device loop5): rebuilding free space tree
[  667.454199][T20102] BTRFS info (device loop5): disabling free space tree
[  667.474924][T20102] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  667.484695][T20102] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  667.544562][T20102] BTRFS info (device loop5): setting nodatasum
[  667.565372][T20102] BTRFS info (device loop5): allowing degraded mounts
[  667.611504][T20102] BTRFS info (device loop5): turning on async discard
[  667.674266][T20102] BTRFS info (device loop5): enabling disk space caching
[  667.717363][T20102] BTRFS info (device loop5): force clearing of disk cache
[  667.755242][T20102] BTRFS info (device loop5): force zlib compression, level 3
[  667.929813][T20154] syz.4.5974 (20154): drop_caches: 2
[  668.020523][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5984'.
[  668.104347][T20165] loop1: detected capacity change from 0 to 32768
[  668.137952][T20192] netlink: 'syz.6.5985': attribute type 2 has an invalid length.
[  668.146806][T20165] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5976 (20165)
[  668.228572][ T5953] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  668.274572][T20165] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  668.303054][T20192] : entered promiscuous mode
[  668.330089][T20165] BTRFS info (device loop1): using sha256 checksum algorithm
[  668.369501][T20203] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  668.632326][T20165] BTRFS info (device loop1): enabling ssd optimizations
[  668.681815][T20165] BTRFS info (device loop1): turning on async discard
[  668.726657][T20219] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5990'.
[  668.747003][T20165] BTRFS info (device loop1): enabling free space tree
[  668.793015][T20224] QAT: failed to copy from user cfg_data.
[  669.125140][ T5935] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  670.361024][T20278] loop5: detected capacity change from 0 to 512
[  670.421927][T20278] EXT4-fs: Ignoring removed nomblk_io_submit option
[  670.450748][T20280] netlink: 'syz.6.6021': attribute type 29 has an invalid length.
[  670.496820][T20283] IPv6: NLM_F_REPLACE set, but no existing node found!
[  670.507146][T20285] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  670.523086][T20278] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  670.532831][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6021'.
[  670.553877][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  670.555838][T20278] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #11: comm syz.5.6020: corrupted inode contents
[  670.560379][    C0] EXT4-fs (loop5): initial error at time 1774038150: mb_free_blocks:2047: inode 11: block 64
[  670.582458][    C0] EXT4-fs (loop5): last error at time 1774038150: mb_free_blocks:2047: inode 11: block 64
[  670.661003][T20278] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  670.661504][T20278] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #11: comm syz.5.6020: mark_inode_dirty error
[  670.726696][T20278] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  670.727253][T20278] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6020: invalid indirect mapped block 1 (level 1)
[  670.820875][T20278] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  670.828547][T20278] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #11: comm syz.5.6020: corrupted inode contents
[  670.866162][T20278] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  670.904946][T20278] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  670.950336][T20278] loop5: lost filesystem error report for type 5 error -117
[  670.960686][T20278] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #11: comm syz.5.6020: corrupted inode contents
[  671.060563][T20278] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  671.061026][T20278] EXT4-fs error (device loop5): ext4_truncate:4587: inode #11: comm syz.5.6020: mark_inode_dirty error
[  671.147280][T20278] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  671.147862][T20278] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  671.217021][T20278] loop5: lost filesystem error report for type 5 error -117
[  671.217639][T20278] EXT4-fs (loop5): 1 truncate cleaned up
[  671.297941][T20278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  671.417499][T20278] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  671.497981][T20310] loop6: detected capacity change from 0 to 64
[  671.543271][T20310] hfs: unable to locate alternate MDB
[  671.562646][T20310] hfs: continuing without an alternate MDB
[  671.582732][ T5953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  671.930493][T20290] loop1: detected capacity change from 0 to 32768
[  672.062245][T20290] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  672.374326][T20290] XFS (loop1): Ending clean mount
[  672.416454][T20290] XFS (loop1): Quotacheck needed: Please wait.
[  672.552635][T20290] XFS (loop1): Quotacheck: Done.
[  672.562607][T20354] loop8: detected capacity change from 0 to 64
[  672.818357][ T5935] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  672.872997][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6058'.
[  673.153555][T17091] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[  673.194860][ T6473] usb 5-1: new full-speed USB device number 103 using dummy_hcd
[  673.366908][T17091] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  673.376154][T17091] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.396951][ T6473] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  673.408571][ T6473] usb 5-1: config 0 has no interface number 0
[  673.421460][ T6473] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  673.436409][T17091] usb 6-1: config 0 descriptor??
[  673.452718][ T6473] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  673.466621][T17091] cp210x 6-1:0.0: cp210x converter detected
[  673.494203][ T6473] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  673.530722][ T6473] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  673.547664][ T6473] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  673.572017][ T6473] usb 5-1: Product: syz
[  673.584157][ T6473] usb 5-1: SerialNumber: syz
[  673.634590][ T6473] usb 5-1: config 0 descriptor??
[  673.672089][ T6473] cm109 5-1:0.8: invalid payload size 0, expected 4
[  673.694576][T17091] usb 6-1: cp210x converter now attached to ttyUSB0
[  673.713729][ T6473] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input43
[  673.800135][T20391] autofs4:pid:20391:validate_dev_ioctl: path string terminator missing for cmd(0xc0189377)
[  673.921168][ T6473] usb 6-1: USB disconnect, device number 93
[  673.976118][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  673.989994][T20395] loop6: detected capacity change from 0 to 4096
[  674.022796][ T6473] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  674.060649][ T6473] cp210x 6-1:0.0: device disconnected
[  674.073713][T20399] loop8: detected capacity change from 0 to 64
[  674.156216][T20401] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  674.195578][T17125] usb 5-1: USB disconnect, device number 103
[  674.206908][T20395] NILFS (loop6): unable to set label with more than 80 bytes
[  674.262948][T20372] loop0: detected capacity change from 0 to 32768
[  674.316214][T17125] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  674.389499][T20372] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  674.557359][T20372] XFS (loop0): Ending clean mount
[  674.806145][ T5933] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  674.942634][T20423] netlink: 'syz.1.6084': attribute type 2 has an invalid length.
[  674.995154][T20423] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6084'.
[  675.250692][T20427] loop6: detected capacity change from 0 to 4096
[  675.389221][T20427] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  675.547076][T17091] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[  675.672215][T20443] netlink: 'syz.0.6093': attribute type 21 has an invalid length.
[  675.704587][T20443] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6093'.
[  675.733942][T17091] usb 6-1: Using ep0 maxpacket: 32
[  675.741946][T20443] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6093'.
[  675.762219][T17091] usb 6-1: unable to get BOS descriptor or descriptor too short
[  675.797665][T17091] usb 6-1: config 7 has an invalid interface number: 187 but max is 0
[  675.825177][T17091] usb 6-1: config 7 has no interface number 0
[  675.850699][T17091] usb 6-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  675.891244][T17091] usb 6-1: config 7 interface 187 has no altsetting 0
[  675.954037][T17091] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  675.985416][T17091] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.016888][T17091] usb 6-1: Product: syz
[  676.042393][T17091] usb 6-1: Manufacturer: syz
[  676.047209][T17091] usb 6-1: SerialNumber: syz
[  676.153992][T20426] loop4: detected capacity change from 0 to 32768
[  676.181828][T20426] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6085 (20426)
[  676.256701][T20426] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  676.268514][T20426] BTRFS info (device loop4): using sha256 checksum algorithm
[  676.361056][T17091] usb 6-1: Unknown endpoint type found, address 0x07
[  676.368061][T17091] usb 6-1: Unknown endpoint type found, address 0x03
[  676.405381][T17091] usb 6-1: Not enough endpoints found in device, aborting!
[  676.466225][T20426] BTRFS info (device loop4): enabling ssd optimizations
[  676.515018][T20426] BTRFS info (device loop4): turning on async discard
[  676.544268][T17091] usb 6-1: USB disconnect, device number 94
[  676.566587][T20426] BTRFS info (device loop4): enabling free space tree
[  676.747079][ T5948] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  677.456538][T20513] loop4: detected capacity change from 0 to 1024
[  677.518467][T20514] bridge1: entered promiscuous mode
[  677.535599][T20513] hfsplus: b-tree write err: -5, ino 2
[  677.718042][T17329] hfsplus: b-tree write err: -5, ino 25
[  677.723792][T17329] hfsplus: b-tree write err: -5, ino 4
[  677.749723][T17329] hfsplus: b-tree write err: -5, ino 2
[  677.792241][T17329] hfsplus: b-tree write err: -5, ino 26
[  678.546981][T20557] openvswitch: netlink: IP tunnel dst address not specified
[  678.828955][T20562] loop4: detected capacity change from 0 to 8192
[  679.556300][T20596] random: crng reseeded on system resumption
[  679.650818][T20598] loop5: detected capacity change from 0 to 1024
[  679.744687][T20598] hfsplus: bad catalog file entry
[  679.884169][T17329] hfsplus: bad catalog file entry
[  680.185133][T20618] program syz.1.6170 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  680.303129][T20624] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6172'.
[  680.358551][T20624] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6172'.
[  680.397914][T20624] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6172'.
[  680.407871][T20621] loop0: detected capacity change from 0 to 2048
[  680.430678][T20621] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  680.482139][T20621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  680.646082][T20632] netlink: 'syz.5.6176': attribute type 8 has an invalid length.
[  680.720717][T20635] loop8: detected capacity change from 0 to 128
[  680.727561][T20594] loop6: detected capacity change from 0 to 40427
[  680.759485][T20594] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  680.807709][T20594] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  680.888915][T20594] F2FS-fs (loop6): invalid crc value
[  681.313779][T20594] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  681.346719][T20656] loop5: detected capacity change from 0 to 16
[  681.379339][T20594] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  681.393402][T20656] erofs (device loop5): mounted with root inode @ nid 36.
[  681.418024][T20594] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  681.470750][T20662] loop8: detected capacity change from 0 to 256
[  681.570886][T20662] FAT-fs (loop8): Directory bread(block 64) failed
[  681.601713][T20662] FAT-fs (loop8): Directory bread(block 65) failed
[  681.613032][T20662] FAT-fs (loop8): Directory bread(block 66) failed
[  681.631997][T20662] FAT-fs (loop8): Directory bread(block 67) failed
[  681.677541][T20662] FAT-fs (loop8): Directory bread(block 68) failed
[  681.717453][T20662] FAT-fs (loop8): Directory bread(block 69) failed
[  681.724111][T20662] FAT-fs (loop8): Directory bread(block 70) failed
[  681.773170][T20667] loop5: detected capacity change from 0 to 256
[  681.813100][T20662] FAT-fs (loop8): Directory bread(block 71) failed
[  681.865651][T20662] FAT-fs (loop8): Directory bread(block 72) failed
[  681.894215][T20662] FAT-fs (loop8): Directory bread(block 73) failed
[  682.203831][T20676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  682.222930][T20638] loop0: detected capacity change from 0 to 32768
[  682.378591][T20679] loop8: detected capacity change from 0 to 1024
[  682.390292][T20638] jfs_create: dtInsert returned -EIO
[  682.417990][T20638] ERROR: (device loop0): jfs_create: 
[  682.417990][T20638] 
[  682.550838][   T30] audit: type=1326 audit(1774038161.381:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20684 comm="syz.4.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3299c799 code=0x7ffc0000
[  682.678310][   T30] audit: type=1326 audit(1774038161.390:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20684 comm="syz.4.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3299c799 code=0x7ffc0000
[  682.770550][   T30] audit: type=1326 audit(1774038161.390:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20684 comm="syz.4.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3299c799 code=0x7ffc0000
[  682.837695][   T49] hfsplus: b-tree write err: -5, ino 25
[  682.848073][   T30] audit: type=1326 audit(1774038161.390:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20684 comm="syz.4.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7ffb3299c799 code=0x7ffc0000
[  682.850060][T17317] 
[  682.873379][T17317] ======================================================
[  682.879857][   T30] audit: type=1326 audit(1774038161.390:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20684 comm="syz.4.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3299c799 code=0x7ffc0000
[  682.880479][T17317] WARNING: possible circular locking dependency detected
[  682.880493][T17317] syzkaller #0 Not tainted
[  682.914573][T17317] ------------------------------------------------------
[  682.921813][T17317] kworker/u8:1/17317 is trying to acquire lock:
[  682.928069][T17317] ffff888034f9c950 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a9/0x280
[  682.937678][T17317] 
[  682.937678][T17317] but task is already holding lock:
[  682.945222][T17317] ffff888034f9eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  682.955478][T17317] 
[  682.955478][T17317] which lock already depends on the new lock.
[  682.955478][T17317] 
[  682.966012][T17317] 
[  682.966012][T17317] the existing dependency chain (in reverse order) is:
[  682.975026][T17317] 
[  682.975026][T17317] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  682.983563][T17317]        percpu_down_read_internal+0x48/0x1c0
[  682.989825][T17317]        ext4_writepages+0x205/0x3b0
[  682.995141][T17317]        do_writepages+0x32e/0x550
[  683.000593][T17317]        __writeback_single_inode+0x133/0x11a0
[  683.006801][T17317]        writeback_single_inode+0x4ac/0xdc0
[  683.012703][T17317]        write_inode_now+0x1c2/0x290
[  683.017998][T17317]        iput+0x8c1/0xe80
[  683.022333][T17317]        ext4_xattr_block_set+0x1fd4/0x2ad0
[  683.028248][T17317]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  683.034686][T17317]        __ext4_expand_extra_isize+0x30d/0x400
[  683.040853][T17317]        __ext4_mark_inode_dirty+0x45c/0x730
[  683.046838][T17317]        ext4_evict_inode+0x7a1/0xeb0
[  683.052333][T17317]        evict+0x61e/0xb10
[  683.056799][T17317]        ext4_orphan_cleanup+0xc38/0x1470
[  683.062530][T17317]        ext4_fill_super+0x59ff/0x6320
[  683.068007][T17317]        get_tree_bdev_flags+0x431/0x4f0
[  683.073641][T17317]        vfs_get_tree+0x92/0x2a0
[  683.078583][T17317]        do_new_mount+0x341/0xd30
[  683.083713][T17317]        __se_sys_mount+0x31d/0x420
[  683.089185][T17317]        do_syscall_64+0x14d/0xf80
[  683.094315][T17317]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.100765][T17317] 
[  683.100765][T17317] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  683.108360][T17317]        down_read+0x47/0x2e0
[  683.113070][T17317]        ext4_setattr+0x888/0x1c60
[  683.118379][T17317]        notify_change+0xc1a/0xf40
[  683.123612][T17317]        chown_common+0x466/0x6b0
[  683.128772][T17317]        do_fchownat+0x14c/0x250
[  683.133724][T17317]        __x64_sys_chown+0x82/0xa0
[  683.138843][T17317]        do_syscall_64+0x14d/0xf80
[  683.144041][T17317]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.150462][T17317] 
[  683.150462][T17317] -> #0 (jbd2_handle){++++}-{0:0}:
[  683.157864][T17317]        __lock_acquire+0x15a5/0x2cf0
[  683.163248][T17317]        lock_acquire+0xf0/0x2e0
[  683.168195][T17317]        wait_transaction_locked+0x1c2/0x280
[  683.174269][T17317]        start_this_handle+0x7dc/0x2290
[  683.179831][T17317]        jbd2__journal_start+0x2c0/0x5b0
[  683.185464][T17317]        __ext4_journal_start_sb+0x203/0x620
[  683.191464][T17317]        ext4_do_writepages+0xf94/0x46e0
[  683.197152][T17317]        ext4_writepages+0x241/0x3b0
[  683.202450][T17317]        do_writepages+0x32e/0x550
[  683.207571][T17317]        __writeback_single_inode+0x133/0x11a0
[  683.213824][T17317]        writeback_sb_inodes+0x992/0x1a20
[  683.219751][T17317]        __writeback_inodes_wb+0x111/0x240
[  683.225566][T17317]        wb_writeback+0x46a/0xb70
[  683.230611][T17317]        wb_workfn+0xb4c/0xf50
[  683.235815][T17317]        process_scheduled_works+0xb6e/0x18c0
[  683.241903][T17317]        worker_thread+0xa53/0xfc0
[  683.247080][T17317]        kthread+0x388/0x470
[  683.251753][T17317]        ret_from_fork+0x51e/0xb90
[  683.256876][T17317]        ret_from_fork_asm+0x1a/0x30
[  683.262168][T17317] 
[  683.262168][T17317] other info that might help us debug this:
[  683.262168][T17317] 
[  683.272562][T17317] Chain exists of:
[  683.272562][T17317]   jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem
[  683.272562][T17317] 
[  683.286226][T17317]  Possible unsafe locking scenario:
[  683.286226][T17317] 
[  683.293716][T17317]        CPU0                    CPU1
[  683.299111][T17317]        ----                    ----
[  683.304730][T17317]   rlock(&sbi->s_writepages_rwsem);
[  683.310014][T17317]                                lock(&ei->xattr_sem);
[  683.317066][T17317]                                lock(&sbi->s_writepages_rwsem);
[  683.324878][T17317]   lock(jbd2_handle);
[  683.329216][T17317] 
[  683.329216][T17317]  *** DEADLOCK ***
[  683.329216][T17317] 
[  683.337537][T17317] 4 locks held by kworker/u8:1/17317:
[  683.342908][T17317]  #0: ffff88801feb0948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  683.354523][T17317]  #1: ffffc9000652fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  683.367013][T17317]  #2: ffff888034f800e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
[  683.377768][T17317]  #3: ffff888034f9eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  683.388246][T17317] 
[  683.388246][T17317] stack backtrace:
[  683.394134][T17317] CPU: 0 UID: 0 PID: 17317 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  683.394162][T17317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  683.394179][T17317] Workqueue: writeback wb_workfn (flush-8:0)
[  683.394213][T17317] Call Trace:
[  683.394224][T17317]  <TASK>
[  683.394235][T17317]  dump_stack_lvl+0xe8/0x150
[  683.394268][T17317]  print_circular_bug+0x2e1/0x300
[  683.394306][T17317]  check_noncircular+0x12e/0x150
[  683.394344][T17317]  __lock_acquire+0x15a5/0x2cf0
[  683.394378][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.394405][T17317]  ? do_raw_spin_lock+0x12b/0x2f0
[  683.394429][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.394459][T17317]  lock_acquire+0xf0/0x2e0
[  683.394487][T17317]  ? wait_transaction_locked+0x1a9/0x280
[  683.394525][T17317]  ? wait_transaction_locked+0x1a9/0x280
[  683.394555][T17317]  wait_transaction_locked+0x1c2/0x280
[  683.394584][T17317]  ? wait_transaction_locked+0x1a9/0x280
[  683.394615][T17317]  ? __pfx_wait_transaction_locked+0x10/0x10
[  683.394645][T17317]  ? __pfx_autoremove_wake_function+0x10/0x10
[  683.394669][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.394697][T17317]  ? __pfx_stack_trace_save+0x10/0x10
[  683.394724][T17317]  start_this_handle+0x7dc/0x2290
[  683.394755][T17317]  ? process_scheduled_works+0xb6e/0x18c0
[  683.394792][T17317]  ? __pfx_start_this_handle+0x10/0x10
[  683.394828][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.394857][T17317]  ? rcu_is_watching+0x15/0xb0
[  683.394892][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.394920][T17317]  ? trace_kmem_cache_alloc+0x29/0xf0
[  683.394942][T17317]  ? jbd2__journal_start+0x1db/0x5b0
[  683.394968][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.394994][T17317]  ? kmem_cache_alloc_noprof+0x307/0x650
[  683.395017][T17317]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  683.395042][T17317]  jbd2__journal_start+0x2c0/0x5b0
[  683.395070][T17317]  __ext4_journal_start_sb+0x203/0x620
[  683.395103][T17317]  ext4_do_writepages+0xf94/0x46e0
[  683.395151][T17317]  ? __pfx_ext4_do_writepages+0x10/0x10
[  683.395191][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.395221][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.395249][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.395278][T17317]  ext4_writepages+0x241/0x3b0
[  683.395310][T17317]  ? __pfx_ext4_writepages+0x10/0x10
[  683.395349][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.395375][T17317]  ? do_raw_spin_unlock+0xf5/0x210
[  683.395397][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.395424][T17317]  ? __pfx_ext4_writepages+0x10/0x10
[  683.395455][T17317]  do_writepages+0x32e/0x550
[  683.395490][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.395515][T17317]  ? reacquire_held_locks+0x104/0x190
[  683.395580][T17317]  ? writeback_sb_inodes+0x477/0x1a20
[  683.395613][T17317]  __writeback_single_inode+0x133/0x11a0
[  683.395645][T17317]  ? do_raw_spin_unlock+0xf5/0x210
[  683.395669][T17317]  writeback_sb_inodes+0x992/0x1a20
[  683.395713][T17317]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  683.395761][T17317]  ? __pfx_down_read_trylock+0x10/0x10
[  683.395783][T17317]  ? __pfx___up_read+0x10/0x10
[  683.395803][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.395832][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.395860][T17317]  __writeback_inodes_wb+0x111/0x240
[  683.395895][T17317]  wb_writeback+0x46a/0xb70
[  683.395926][T17317]  ? queue_io+0x271/0x4a0
[  683.395958][T17317]  ? __pfx_wb_writeback+0x10/0x10
[  683.395986][T17317]  ? do_raw_spin_lock+0x12b/0x2f0
[  683.396016][T17317]  wb_workfn+0xb4c/0xf50
[  683.396049][T17317]  ? __pfx_wb_workfn+0x10/0x10
[  683.396074][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.396100][T17317]  ? do_raw_spin_lock+0x12b/0x2f0
[  683.396128][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.396156][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.396183][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.396211][T17317]  ? process_scheduled_works+0xa8d/0x18c0
[  683.396239][T17317]  ? process_scheduled_works+0xa8d/0x18c0
[  683.396269][T17317]  process_scheduled_works+0xb6e/0x18c0
[  683.396314][T17317]  ? __pfx_process_scheduled_works+0x10/0x10
[  683.396346][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.396373][T17317]  ? assign_work+0x3d5/0x5e0
[  683.396404][T17317]  worker_thread+0xa53/0xfc0
[  683.396442][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.396475][T17317]  kthread+0x388/0x470
[  683.396497][T17317]  ? __pfx_worker_thread+0x10/0x10
[  683.396530][T17317]  ? __pfx_kthread+0x10/0x10
[  683.396553][T17317]  ret_from_fork+0x51e/0xb90
[  683.396588][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.396615][T17317]  ? __pfx_ret_from_fork+0x10/0x10
[  683.396643][T17317]  ? srso_alias_return_thunk+0x5/0xfbef5
[  683.396669][T17317]  ? __switch_to+0xc7d/0x1450
[  683.396696][T17317]  ? __pfx_kthread+0x10/0x10
[  683.396717][T17317]  ret_from_fork_asm+0x1a/0x30
[  683.396760][T17317]  </TASK>
[  683.405689][   T30] audit: type=1326 audit(1774038161.390:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20684 comm="syz.4.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3299c799 code=0x7ffc0000
[  683.409925][   T49] hfsplus: b-tree write err: -5, ino 4
[  683.425613][   T30] audit: type=1326 audit(1774038161.390:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20684 comm="syz.4.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffb3299c799 code=0x7ffc0000
[  683.426386][   T49] hfsplus: b-tree write err: -5, ino 2
[  683.429649][   T30] audit: type=1326 audit(1774038161.390:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20684 comm="syz.4.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffb3299c799 code=0x7ffc0000
[  683.437205][   T49] hfsplus: b-tree write err: -5, ino 20
[  683.476779][T20696] loop4: detected capacity change from 0 to 256