last executing test programs:

2.347539019s ago: executing program 3 (id=8927):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x72}, 0x8)

2.113198724s ago: executing program 3 (id=8931):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]})
io_setup(0x5, &(0x7f00000000c0))

1.835983s ago: executing program 3 (id=8936):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1b0000001a007f029e741683c28f7b331d00000000390000000000", 0x1b}], 0x1}, 0x24000080)

1.798797531s ago: executing program 2 (id=8937):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b)

1.682295843s ago: executing program 3 (id=8939):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00')
pread64(r0, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002)

1.523764726s ago: executing program 3 (id=8942):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

1.507068607s ago: executing program 2 (id=8943):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a11, 0x51240}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.261431892s ago: executing program 0 (id=8945):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4)

1.181580994s ago: executing program 0 (id=8947):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2}, 0x16, @in, 0x0, 0x1}}, 0xe8)

992.411708ms ago: executing program 0 (id=8949):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)

941.033449ms ago: executing program 1 (id=8950):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000440))

871.047271ms ago: executing program 1 (id=8951):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfffe, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000140)={0x6, 0x0, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x42303159})

837.398792ms ago: executing program 3 (id=8952):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000a300000000000000000000008500000029000000850000005000000095"], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="151b00ba8d13cdea2aac8a25ec05", 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

741.811183ms ago: executing program 1 (id=8953):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4810c, 0x780}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)

729.803374ms ago: executing program 2 (id=8954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0x1c, 0x20, 0x20, 0xf, 0x0, 0x2, 0xff, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

564.335077ms ago: executing program 2 (id=8955):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

502.445939ms ago: executing program 0 (id=8956):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000009c0)='ns/ipc\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00')

435.47847ms ago: executing program 2 (id=8957):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x0)

409.651001ms ago: executing program 1 (id=8958):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x402, 0x80)
write$FUSE_DIRENT(r0, &(0x7f0000002200)={0x6b}, 0x10)

247.777274ms ago: executing program 0 (id=8959):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0xd28, 0x8})

217.245025ms ago: executing program 1 (id=8960):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

180.379236ms ago: executing program 2 (id=8961):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4004, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

100.375388ms ago: executing program 0 (id=8962):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000080))

0s ago: executing program 1 (id=8963):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x6d, 0x0, &(0x7f0000001040))

kernel console output (not intermixed with test programs):

0 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[  954.292004][T21172] REISERFS warning (device loop2):  reiserfs_fill_super: corrupt root inode, run fsck
[  956.983434][T21212] loop2: detected capacity change from 0 to 8192
[  957.032206][T21212] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  957.039687][T21212] UDF-fs: Scanning with blocksize 512 failed
[  957.089311][T21212] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  957.125272][T21212] UDF-fs: Scanning with blocksize 1024 failed
[  957.147394][T21212] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  957.170799][T21212] UDF-fs: Scanning with blocksize 2048 failed
[  957.235202][T21212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  957.427640][T21214] loop1: detected capacity change from 0 to 256
[  957.474638][T21214] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  957.515652][T21214] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  957.536481][T21214] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  957.544328][T21214] UDF-fs: Scanning with blocksize 512 failed
[  957.597716][T21214] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  957.638378][T21214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  957.888773][T21218] loop2: detected capacity change from 0 to 128
[  958.452164][T21220] loop1: detected capacity change from 0 to 16384
[  958.497126][T21220] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  958.533680][T21220] UDF-fs: Scanning with blocksize 512 failed
[  958.573146][T21220] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  958.593877][T21220] UDF-fs: Scanning with blocksize 1024 failed
[  958.627229][T21220] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  958.634746][T21220] UDF-fs: Scanning with blocksize 2048 failed
[  958.680501][T21220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  958.764661][T21222] loop2: detected capacity change from 0 to 16384
[  958.785212][T21222] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  958.794100][T21222] UDF-fs: Scanning with blocksize 512 failed
[  958.846105][T21222] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  958.872480][T21222] UDF-fs: Scanning with blocksize 1024 failed
[  958.932919][T21222] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  958.954263][T21222] UDF-fs: Scanning with blocksize 2048 failed
[  959.010445][T21222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  959.576019][T21226] loop2: detected capacity change from 0 to 8192
[  960.457709][T21238] loop3: detected capacity change from 0 to 128
[  960.790426][T21242] loop3: detected capacity change from 0 to 128
[  960.849623][T21242] vxfs: WRONG superblock magic 7b3185b5 at 1
[  960.878097][T21242] vxfs: WRONG superblock magic 7b318cb5 at 8
[  960.912607][T21242] vxfs: can't find superblock.
[  961.916946][T21246] loop3: detected capacity change from 0 to 32768
[  961.994649][T21246] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  962.144052][T21246] XFS (loop3): Ending clean mount
[  962.324098][ T5773] XFS (loop3): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  962.571124][T21224] Process accounting paused
[  962.884887][T21256] loop3: detected capacity change from 0 to 256
[  962.913940][T21256] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  962.954304][T21256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  963.429983][T21260] loop1: detected capacity change from 0 to 2048
[  963.525141][T21260]  loop1: p1 p2 p3
[  963.930179][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  963.972839][ T9054] udevd[9054]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  963.983185][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  964.510014][T21264] loop2: detected capacity change from 0 to 8192
[  965.633625][T21266] loop2: detected capacity change from 0 to 32768
[  965.753761][T21266] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  965.845093][T21266] XFS (loop2): Ending clean mount
[  965.959774][ T5770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  966.001063][ T5815] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  966.198948][T21258] loop3: detected capacity change from 0 to 131072
[  966.208735][ T5815] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  966.236994][T21258] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  966.268314][T21258] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  966.277850][T21258] REISERFS (device loop3): using ordered data mode
[  966.288472][ T5815] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  966.300314][T21258] reiserfs: using flush barriers
[  966.342532][T21258] REISERFS (device loop3): journal params: device loop3, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30
[  966.372934][T21258] syz.3.6993: vmalloc error: size 2269184, failed to allocated page array size 4432, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null)
[  966.373161][ T5815] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  966.398536][T21258] ,cpuset=syz3,mems_allowed=0-1
[  966.404073][T21258] CPU: 0 PID: 21258 Comm: syz.3.6993 Not tainted syzkaller #0
[  966.411592][T21258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  966.421991][T21258] Call Trace:
[  966.425333][T21258]  <TASK>
[  966.428431][T21258]  dump_stack_lvl+0x18c/0x250
[  966.433369][T21258]  ? show_regs_print_info+0x20/0x20
[  966.438737][T21258]  ? load_image+0x420/0x420
[  966.443361][T21258]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  966.449906][T21258]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  966.456489][T21258]  warn_alloc+0x246/0x340
[  966.460945][T21258]  ? zone_watermark_ok_safe+0x230/0x230
[  966.466568][T21258]  ? _raw_spin_unlock+0x28/0x40
[  966.471604][T21258]  ? __kasan_kmalloc+0x8f/0xa0
[  966.476469][T21258]  __vmalloc_node_range+0x661/0x1320
[  966.481848][T21258]  ? __asan_memset+0x22/0x40
[  966.486517][T21258]  ? free_vm_area+0x50/0x50
[  966.491090][T21258]  ? lockdep_init_map_type+0x9c/0x8e0
[  966.496571][T21258]  ? lockdep_softirqs_off+0x440/0x440
[  966.502052][T21258]  ? allocate_cnodes+0x3d/0x3b0
[  966.507008][T21258]  vzalloc+0x79/0x90
[  966.510976][T21258]  ? allocate_cnodes+0x3d/0x3b0
[  966.515914][T21258]  allocate_cnodes+0x3d/0x3b0
[  966.520651][T21258]  journal_init+0x17cc/0x2350
[  966.525403][T21258]  reiserfs_fill_super+0xdf4/0x20e0
[  966.530684][T21258]  ? snprintf+0xe9/0x140
[  966.534988][T21258]  ? reiserfs_kill_sb+0x140/0x140
[  966.540077][T21258]  ? down_write+0x16e/0x200
[  966.544642][T21258]  ? down_read_killable+0x340/0x340
[  966.549920][T21258]  ? setup_bdev_super+0x56b/0x660
[  966.555014][T21258]  mount_bdev+0x21c/0x2c0
[  966.559403][T21258]  ? kfree+0x31/0x1a0
[  966.563477][T21258]  ? reiserfs_kill_sb+0x140/0x140
[  966.568571][T21258]  ? get_tree_bdev+0x520/0x520
[  966.573407][T21258]  ? vfs_parse_fs_param+0x420/0x420
[  966.578755][T21258]  legacy_get_tree+0xea/0x180
[  966.583501][T21258]  ? remove_save_link+0x3e0/0x3e0
[  966.588613][T21258]  vfs_get_tree+0x8c/0x280
[  966.593115][T21258]  do_new_mount+0x24a/0xa40
[  966.597727][T21258]  __se_sys_mount+0x2e7/0x3d0
[  966.602472][T21258]  ? __x64_sys_mount+0xc0/0xc0
[  966.607303][T21258]  ? lockdep_hardirqs_on+0x98/0x150
[  966.612560][T21258]  ? __x64_sys_mount+0x20/0xc0
[  966.617394][T21258]  do_syscall_64+0x55/0xb0
[  966.621957][T21258]  ? clear_bhb_loop+0x40/0x90
[  966.626788][T21258]  ? clear_bhb_loop+0x40/0x90
[  966.631522][T21258]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  966.637565][T21258] RIP: 0033:0x7f253799f0ca
[  966.642158][T21258] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  966.661933][T21258] RSP: 002b:00007f253886be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  966.670423][T21258] RAX: ffffffffffffffda RBX: 00007f253886bee0 RCX: 00007f253799f0ca
[  966.678491][T21258] RDX: 000020000000ffc0 RSI: 0000200000010000 RDI: 00007f253886bea0
[  966.686533][T21258] RBP: 000020000000ffc0 R08: 00007f253886bee0 R09: 0000000000000000
[  966.694565][T21258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000010000
[  966.702613][T21258] R13: 00007f253886bea0 R14: 000000000000ffb7 R15: 0000200000010040
[  966.710752][T21258]  </TASK>
[  966.721381][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.729855][ T5815] usb 1-1: Product: syz
[  966.734126][ T5815] usb 1-1: Manufacturer: syz
[  966.739310][ T5815] usb 1-1: SerialNumber: syz
[  966.754540][T21258] Mem-Info:
[  966.757967][T21258] active_anon:29192 inactive_anon:0 isolated_anon:0
[  966.757967][T21258]  active_file:11264 inactive_file:41789 isolated_file:0
[  966.757967][T21258]  unevictable:768 dirty:211 writeback:0
[  966.757967][T21258]  slab_reclaimable:11927 slab_unreclaimable:92351
[  966.757967][T21258]  mapped:25488 shmem:23262 pagetables:701
[  966.757967][T21258]  sec_pagetables:0 bounce:0
[  966.757967][T21258]  kernel_misc_reclaimable:0
[  966.757967][T21258]  free:1323481 free_pcp:6170 free_cma:0
[  966.823070][T21258] Node 0 active_anon:116068kB inactive_anon:0kB active_file:45056kB inactive_file:167356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101952kB dirty:844kB writeback:0kB shmem:90512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10320kB pagetables:2804kB sec_pagetables:0kB all_unreclaimable? no
[  966.864335][T21258] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  966.903978][T21258] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  966.943052][T21258] lowmem_reserve[]: 0 2521 2522 2522 2522
[  966.949087][T21258] Node 0 DMA32 free:1372308kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:115028kB inactive_anon:0kB active_file:45056kB inactive_file:166832kB unevictable:1536kB writepending:844kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:17568kB local_pcp:9376kB free_cma:0kB
[  967.006332][T21258] lowmem_reserve[]: 0 0 0 0 0
[  967.011665][T21258] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  967.072652][T21258] lowmem_reserve[]: 0 0 0 0 0
[  967.084635][T21258] Node 1 Normal free:3905500kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8608kB local_pcp:3776kB free_cma:0kB
[  967.119677][ T5815] usb 1-1: 0:1 : does not exist
[  967.134455][ T5815] usb 1-1: BAAD SPEAKER p_chmask mismatch
[  967.156057][T21258] lowmem_reserve[]: 0 0 0 0 0
[  967.160899][T21258] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  967.201187][ T5815] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  967.219733][T21258] Node 0 DMA32: 11*4kB (UE) 111*8kB (UE) 269*16kB (UE) 215*32kB (UE) 245*64kB (UME) 326*128kB (UME) 167*256kB (UME) 77*512kB (UME) 20*1024kB (UM) 6*2048kB (UME) 290*4096kB (M) = 1372308kB
[  967.250880][ T5815] usb 1-1: USB disconnect, device number 53
[  967.273844][T21258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  967.298770][ T9054] udevd[9054]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  967.305502][T21258] Node 1 Normal: 275*4kB (UME) 50*8kB (UME) 44*16kB (UME) 238*32kB (UME) 76*64kB (UME) 17*128kB (UME) 2*256kB (UM) 0*512kB 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3905500kB
[  967.393347][T21258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  967.416619][T21258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  967.444586][T21258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  967.476085][T21258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  967.504003][T21258] 71852 total pagecache pages
[  967.519203][T21258] 0 pages in swap cache
[  967.527844][T21258] Free swap  = 124472kB
[  967.545158][T21258] Total swap = 124996kB
[  967.549411][T21258] 2097051 pages RAM
[  967.574758][T21258] 0 pages HighMem/MovableOnly
[  967.590601][T21258] 416953 pages reserved
[  967.603502][T21258] 0 pages cma reserved
[  967.612978][T21258] REISERFS warning (device loop3): journal-2004 journal_init: Journal cnode memory allocation failed (2267712 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large.
[  967.639598][T21258] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  968.529236][T21283] loop1: detected capacity change from 0 to 32768
[  968.607619][T21283] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  968.703481][T21283] XFS (loop1): Ending clean mount
[  968.838250][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  969.019789][T21281] loop2: detected capacity change from 0 to 65536
[  969.095052][T21281] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel.
[  970.873046][T21295] loop3: detected capacity change from 0 to 65536
[  970.955866][T21295] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  971.010401][T21304] loop2: detected capacity change from 0 to 65536
[  971.037532][T21295] XFS (loop3): Ending clean mount
[  971.087611][T21304] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel.
[  971.202595][ T5773] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  971.794967][T21325] loop2: detected capacity change from 0 to 2048
[  973.039685][T21327] loop2: detected capacity change from 0 to 32768
[  973.112043][T21327]  loop2: p9 p11 p16
[  973.495531][T21323] loop3: detected capacity change from 0 to 65536
[  973.601042][T21323] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel.
[  973.648226][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory
[  973.649738][ T6944] udevd[6944]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory
[  973.687160][ T9054] udevd[9054]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory
[  974.303373][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  974.309959][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  975.032936][T21352] netlink: 45 bytes leftover after parsing attributes in process `syz.3.7020'.
[  975.106810][T21331] loop2: detected capacity change from 0 to 65536
[  975.172233][T21331] XFS (loop2): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  975.354007][T21362] loop3: detected capacity change from 0 to 4096
[  975.401478][T21331] XFS (loop2): Ending clean mount
[  975.408123][T21363] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  975.644765][ T5770] XFS (loop2): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1
[  976.193711][T21369] loop3: detected capacity change from 0 to 256
[  977.010166][T21383] netlink: 'syz.3.7031': attribute type 33 has an invalid length.
[  977.029231][T21383] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7031'.
[  977.055300][T21383] `: renamed from team0 (while UP)
[  977.289855][T21385] loop2: detected capacity change from 0 to 4096
[  977.311532][T21387] comedi comedi0: aio_aio12_8: I/O port conflict (0x3,32)
[  977.334907][T21385] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  977.470320][T21385] ntfs3: loop2: ino=5, "/" directory corrupted
[  977.500293][T21385] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  977.537294][T21389] loop1: detected capacity change from 0 to 4096
[  977.563880][T21389] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  977.663985][T21389] ntfs: volume version 3.1.
[  977.836743][T21395] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  977.895066][T21393] loop3: detected capacity change from 0 to 4096
[  978.060992][T21393] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  978.678607][T21411] loop3: detected capacity change from 0 to 1024
[  978.885893][   T13] hfsplus: b-tree write err: -5, ino 25
[  978.891779][   T13] hfsplus: b-tree write err: -5, ino 4
[  978.947458][   T13] hfsplus: b-tree write err: -5, ino 2
[  978.993319][T21419] loop2: detected capacity change from 0 to 64
[  979.097835][T21419] Trying to free block not in datazone
[  979.104147][T21419] minix_free_block (loop2:21): bit already cleared
[  979.618736][T21435] Illegal XDP return value 4294967282 on prog  (id 470) dev N/A, expect packet loss!
[  979.675907][T21439] netlink: 'syz.1.7058': attribute type 1 has an invalid length.
[  979.712615][T21439] netlink: 'syz.1.7058': attribute type 3 has an invalid length.
[  979.731154][T21439] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7058'.
[  980.078602][T21450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7064'.
[  980.117460][T21450] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7064'.
[  980.141974][T21450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7064'.
[  980.451702][T21460] netlink: 'syz.1.7070': attribute type 32 has an invalid length.
[  980.484833][T21460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7070'.
[  980.509713][T21460] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  981.028095][T21484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7080'.
[  981.676342][T21505] netlink: 'syz.0.7088': attribute type 12 has an invalid length.
[  981.695033][T21505] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7088'.
[  982.412922][T21533] loop1: detected capacity change from 0 to 16
[  982.469663][T21533] erofs: (device loop1): mounted with root inode @ nid 36.
[  982.507807][T21533] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  982.805287][T21541] bond0: entered promiscuous mode
[  982.819448][T21541] bond_slave_0: entered promiscuous mode
[  982.838910][T21541] bond_slave_1: entered promiscuous mode
[  983.931348][T21587] netlink: 'syz.2.7129': attribute type 33 has an invalid length.
[  983.972371][T21587] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7129'.
[  983.981523][T21587] `: renamed from team0 (while UP)
[  984.424286][T21603] netlink: 'syz.2.7137': attribute type 11 has an invalid length.
[  985.147581][T21631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7157'.
[  985.559017][T21643] 9pnet: Found fid 0 not clunked
[  986.281607][T21673] CIFS mount error: No usable UNC path provided in device string!
[  986.281607][T21673] 
[  986.302538][T21673] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  986.505319][T21679] (unnamed net_device) (uninitialized): option lacp_active: invalid value (8)
[  986.989886][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7180'.
[  987.347190][T21706] loop3: detected capacity change from 0 to 256
[  987.369463][T21702] bond1: entered promiscuous mode
[  987.375126][T21702] 8021q: adding VLAN 0 to HW filter on device bond1
[  987.384452][T21706] exfat: Deprecated parameter 'utf8'
[  987.404237][T21706] exfat: Deprecated parameter 'utf8'
[  987.409776][T21706] exfat: Deprecated parameter 'utf8'
[  987.517069][T21706] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  988.285588][T21726] overlayfs: disabling nfs_export due to verity=require
[  988.301670][T21726] overlayfs: conflicting options: userxattr,verity=require
[  988.863311][T21746] loop2: detected capacity change from 0 to 256
[  989.505099][T21765] cgroup: Invalid name
[  989.713056][T21772] openvswitch: netlink: Message has 4 unknown bytes.
[  989.790626][T21776] netlink: 'syz.2.7222': attribute type 7 has an invalid length.
[  989.804105][T21776] netlink: 'syz.2.7222': attribute type 8 has an invalid length.
[  989.813533][T21776] netlink: 'syz.2.7222': attribute type 15 has an invalid length.
[  990.321127][T21795] netlink: 'syz.0.7231': attribute type 11 has an invalid length.
[  990.329398][T15922] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  990.339380][T21795] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.7231'.
[  990.440433][ T5774] usb 4-1: new low-speed USB device number 50 using dummy_hcd
[  990.539028][T15922] usb 3-1: Using ep0 maxpacket: 16
[  990.551808][T15922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  990.582947][T15922] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4f.d1
[  990.605731][T15922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  990.629260][T15922] usb 3-1: Product: syz
[  990.640583][T15922] usb 3-1: Manufacturer: syz
[  990.659141][ T5774] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  990.671310][T15922] usb 3-1: SerialNumber: syz
[  990.682109][ T5774] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  990.706782][T15922] usb 3-1: config 0 descriptor??
[  990.715341][ T5774] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  990.743715][T15922] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  990.811186][ T5774] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  990.846041][T15922] em28xx 3-1:0.0: DVB interface 0 found: isoc
[  990.855997][T21807] netlink: 'syz.1.7238': attribute type 7 has an invalid length.
[  990.876241][T21807] netlink: 'syz.1.7238': attribute type 8 has an invalid length.
[  990.899509][ T5774] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  990.930466][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  990.953606][ T5774] hub 4-1:1.0: bad descriptor, ignoring hub
[  990.984323][ T5774] hub: probe of 4-1:1.0 failed with error -5
[  991.002326][ T5774] cdc_wdm 4-1:1.0: skipping garbage
[  991.012005][ T5774] cdc_wdm 4-1:1.0: invalid descriptor buffer length
[  991.025140][ T5774] cdc_wdm: probe of 4-1:1.0 failed with error -22
[  991.049537][T15922] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  991.154629][T15922] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  991.188789][T15922] em28xx 3-1:0.0: board has no eeprom
[  991.305812][T15922] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  991.316010][T15922] em28xx 3-1:0.0: dvb set to isoc mode.
[  991.350493][T15922] usb 3-1: USB disconnect, device number 49
[  991.360878][T15922] em28xx 3-1:0.0: Disconnecting em28xx
[  991.367336][ T5774] em28xx 3-1:0.0: Binding DVB extension
[  991.376240][   T23] usb 4-1: USB disconnect, device number 50
[  991.561438][ T5774] em28xx 3-1:0.0: Registering input extension
[  991.605441][T15922] em28xx 3-1:0.0: Closing input extension
[  991.714079][T15922] em28xx 3-1:0.0: Freeing device
[  992.387843][T21843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7254'.
[  992.850730][T21861] netlink: 'syz.3.7262': attribute type 4 has an invalid length.
[  992.903340][T21861] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7262'.
[  992.920755][T21864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7263'.
[  993.176636][ T5814] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  993.400562][ T5814] usb 3-1: unable to get BOS descriptor or descriptor too short
[  993.413299][ T5814] usb 3-1: config 129 has an invalid interface number: 135 but max is 0
[  993.433902][ T5814] usb 3-1: config 129 has an invalid interface number: 5 but max is 0
[  993.475360][ T5814] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  993.515313][ T5814] usb 3-1: config 129 has no interface number 0
[  993.522000][ T5814] usb 3-1: config 129 has no interface number 1
[  993.528368][ T5814] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  993.542136][ T5814] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  993.553454][ T5814] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  993.592033][ T5814] usb 3-1: config 129 interface 135 has no altsetting 0
[  993.610245][ T5814] usb 3-1: config 129 interface 5 has no altsetting 0
[  993.634600][ T5814] usb 3-1: string descriptor 0 read error: -22
[  993.647040][ T5814] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  993.656272][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  993.721958][ T5814] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  993.741375][ T5814] usb 3-1: MIDIStreaming interface descriptor not found
[  993.769503][T21886] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  994.090669][  T173] usb 3-1: USB disconnect, device number 50
[  994.233679][T21899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7282'.
[  994.249288][   T27] audit: type=1326 audit(1784075505.493:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.1.7280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fb59de59 code=0x7ffc0000
[  994.328924][   T27] audit: type=1326 audit(1784075505.493:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.1.7280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fb59de59 code=0x7ffc0000
[  994.427386][   T27] audit: type=1326 audit(1784075505.512:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.1.7280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fb59de59 code=0x7ffc0000
[  994.500866][   T27] audit: type=1326 audit(1784075505.530:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.1.7280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fb59de59 code=0x7ffc0000
[  994.576762][   T27] audit: type=1326 audit(1784075505.530:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.1.7280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f80fb59de59 code=0x7ffc0000
[  994.642992][   T27] audit: type=1326 audit(1784075505.530:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.1.7280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fb59de59 code=0x7ffc0000
[  994.724468][   T27] audit: type=1326 audit(1784075505.530:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.1.7280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fb59de59 code=0x7ffc0000
[  994.796893][T21911] Process accounting resumed
[  994.802133][   T27] audit: type=1326 audit(1784075505.530:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.1.7280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f80fb59de59 code=0x7ffc0000
[  994.881511][   T27] audit: type=1326 audit(1784075505.530:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.1.7280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f80fb59de59 code=0x7ffc0000
[  994.990316][T21916] autofs4:pid:21916:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2147483646), cmd(0xc0189375)
[  995.036910][T21916] autofs4:pid:21916:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[  995.187473][T21923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7293'.
[  995.673563][T21939] 8021q: adding VLAN 0 to HW filter on device bond1
[  995.952986][T21955] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7308'.
[  996.273832][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7313'.
[  996.684531][ T5814] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  996.910130][ T5814] usb 4-1: config index 0 descriptor too short (expected 65230, got 72)
[  996.943783][ T5814] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  996.964441][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.993164][ T5814] usb 4-1: Product: syz
[  996.997426][ T5814] usb 4-1: Manufacturer: syz
[  997.023796][ T5814] usb 4-1: SerialNumber: syz
[  997.049853][ T5814] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  997.082671][T15922] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  997.293160][T21997] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  997.331317][T22000] loop1: detected capacity change from 0 to 8
[  997.331718][    C1] usb 4-1: ath9k_htc: invalid pkt_len (fe77)
[  997.473345][T21998] netlink: 'syz.2.7328': attribute type 3 has an invalid length.
[  997.486408][T21998] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  997.558433][ T5815] usb 4-1: USB disconnect, device number 51
[  997.674280][T22003] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  997.723186][T22006] loop1: detected capacity change from 0 to 64
[  997.762174][T22006] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  998.256169][T15922] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  998.271264][   T27] audit: type=1326 audit(1784075509.253:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22020 comm="syz.0.7339" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[  998.287378][T15922] ath9k_htc: Failed to initialize the device
[  998.360308][ T5815] usb 4-1: ath9k_htc: USB layer deinitialized
[  998.877680][T22043] loop3: detected capacity change from 0 to 64
[  999.180208][T22052] netlink: 'syz.3.7355': attribute type 21 has an invalid length.
[  999.217047][T22052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7355'.
[  999.670528][T22069] loop2: detected capacity change from 0 to 164
[  999.688257][T15922] usb 4-1: new low-speed USB device number 52 using dummy_hcd
[  999.837591][   T28] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  999.851554][T22073] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7366'.
[  999.917754][T15922] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  999.927284][T15922] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  999.948126][T15922] usb 4-1: config 0 has no interface number 0
[  999.973305][T15922] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  999.997143][T15922] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1000.007190][T15922] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1000.047254][T15922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.056725][T22079] misc userio: No port type given on /dev/userio
[ 1000.083919][   T28] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1000.093076][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.102808][T15922] usb 4-1: config 0 descriptor??
[ 1000.127165][   T28] usb 2-1: Product: syz
[ 1000.134172][   T28] usb 2-1: Manufacturer: syz
[ 1000.146874][   T28] usb 2-1: SerialNumber: syz
[ 1000.174837][   T28] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1000.209173][   T23] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1000.590847][T15922] usb 4-1: USB disconnect, device number 52
[ 1000.749929][   T28] usb 2-1: USB disconnect, device number 51
[ 1000.765157][T22092] netlink: 'syz.0.7374': attribute type 15 has an invalid length.
[ 1001.327768][   T23] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1001.350519][   T23] ath9k_htc: Failed to initialize the device
[ 1001.387783][   T28] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1002.188873][T22141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7399'.
[ 1003.161693][   T23] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[ 1003.227740][T22172] geneve2: entered promiscuous mode
[ 1003.410220][   T23] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[ 1003.428919][   T23] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1003.450248][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1003.466828][   T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1003.494905][   T23] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1003.525549][   T23] usb 2-1: Product: syz
[ 1003.536653][   T23] usb 2-1: Manufacturer: syz
[ 1003.558254][   T23] usb 2-1: SerialNumber: syz
[ 1003.584405][   T23] usb 2-1: config 0 descriptor??
[ 1003.603323][   T23] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1003.609341][   T23] hub: probe of 2-1:0.0 failed with error -5
[ 1003.625095][   T23] usb 2-1: selecting invalid altsetting 0
[ 1003.827290][T22187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7421'.
[ 1004.017137][   T23] usb 2-1: USB disconnect, device number 52
[ 1004.118631][T22176] loop3: detected capacity change from 0 to 32768
[ 1004.396883][T22200] x_tables: unsorted underflow at hook 2
[ 1004.512674][T22204] xt_addrtype: ipv6 BLACKHOLE matching not supported
[ 1004.845756][T22212] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1004.885619][T22214] loop3: detected capacity change from 0 to 64
[ 1005.216202][T22224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7440'.
[ 1005.607550][T22239] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7446'.
[ 1005.932500][   T27] kauditd_printk_skb: 7 callbacks suppressed
[ 1005.932519][   T27] audit: type=1326 audit(1784075516.428:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22250 comm="syz.0.7452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1005.999115][   T27] audit: type=1326 audit(1784075516.456:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22250 comm="syz.0.7452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1006.067039][   T27] audit: type=1326 audit(1784075516.456:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22250 comm="syz.0.7452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1006.116061][   T27] audit: type=1326 audit(1784075516.456:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22250 comm="syz.0.7452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1006.222211][   T27] audit: type=1326 audit(1784075516.456:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22250 comm="syz.0.7452" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1007.502547][T22305] loop3: detected capacity change from 0 to 256
[ 1007.511096][T22308] loop1: detected capacity change from 0 to 24
[ 1007.549199][T22308] MTD: Attempt to mount non-MTD device "/dev/loop1"
[ 1007.567198][T22309] warning: `syz.2.7479' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1007.585352][T22308] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1007.623695][T22305] FAT-fs (loop3): Directory bread(block 64) failed
[ 1007.652872][T22308] VFS: Lookup of 'file0' in romfs loop1 would have caused loop
[ 1007.661682][T22305] FAT-fs (loop3): Directory bread(block 65) failed
[ 1007.681232][T22305] FAT-fs (loop3): Directory bread(block 66) failed
[ 1007.698908][T22305] FAT-fs (loop3): Directory bread(block 67) failed
[ 1007.742670][T22305] FAT-fs (loop3): Directory bread(block 68) failed
[ 1007.781755][T22305] FAT-fs (loop3): Directory bread(block 69) failed
[ 1007.788513][T22305] FAT-fs (loop3): Directory bread(block 70) failed
[ 1007.833398][T22305] FAT-fs (loop3): Directory bread(block 71) failed
[ 1007.867852][T22305] FAT-fs (loop3): Directory bread(block 72) failed
[ 1007.874596][T22305] FAT-fs (loop3): Directory bread(block 73) failed
[ 1007.898004][T22311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7480'.
[ 1008.442768][   T23] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1008.668422][   T23] usb 2-1: Using ep0 maxpacket: 32
[ 1008.695333][   T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1008.724112][   T23] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1008.748775][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1008.777421][   T23] usb 2-1: Product: syz
[ 1008.781730][   T23] usb 2-1: Manufacturer: syz
[ 1008.820121][   T23] usb 2-1: SerialNumber: syz
[ 1008.836973][   T23] usb 2-1: config 0 descriptor??
[ 1008.855205][   T23] usb 2-1: bad CDC descriptors
[ 1008.856051][   T23] usb 2-1: unsupported MDLM descriptors
[ 1008.986449][T22347] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7497'.
[ 1009.120696][ T5815] usb 2-1: USB disconnect, device number 53
[ 1010.228304][T22380] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7512'.
[ 1010.406357][T22383] loop3: detected capacity change from 0 to 4096
[ 1010.466593][T22383] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 1010.588258][T22392] loop2: detected capacity change from 0 to 512
[ 1010.626337][T22383] ntfs3: loop3: failed to convert "c46c" to cp862
[ 1010.633896][T22392] EXT4-fs: Ignoring removed bh option
[ 1010.738245][T22392] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[ 1010.825650][T22392] EXT4-fs (loop2): 1 truncate cleaned up
[ 1010.839703][T22392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1010.934573][   T27] audit: type=1326 audit(1784075521.105:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22399 comm="syz.3.7521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1011.023501][   T27] audit: type=1326 audit(1784075521.105:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22399 comm="syz.3.7521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1011.047557][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1011.056657][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1011.099683][   T27] audit: type=1326 audit(1784075521.133:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22399 comm="syz.3.7521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1011.212553][   T27] audit: type=1326 audit(1784075521.133:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22399 comm="syz.3.7521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1011.308875][   T27] audit: type=1326 audit(1784075521.133:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22399 comm="syz.3.7521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1011.404866][   T27] audit: type=1326 audit(1784075521.133:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22399 comm="syz.3.7521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1011.494115][   T27] audit: type=1326 audit(1784075521.133:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22399 comm="syz.3.7521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1011.572570][   T27] audit: type=1326 audit(1784075521.133:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22399 comm="syz.3.7521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1011.590361][T22417] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1011.636092][   T27] audit: type=1326 audit(1784075521.133:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22399 comm="syz.3.7521" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1012.076076][T22435] netlink: 23 bytes leftover after parsing attributes in process `syz.2.7539'.
[ 1012.093194][T22432] netlink: 'syz.1.7537': attribute type 1 has an invalid length.
[ 1012.148578][T22432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7537'.
[ 1012.839790][T22454] loop2: detected capacity change from 0 to 64
[ 1013.184223][T22459] loop2: detected capacity change from 0 to 2048
[ 1013.254929][T22459] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1013.282933][T22459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1013.317323][T22442] loop1: detected capacity change from 0 to 32768
[ 1013.388922][T22442] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1013.517533][T22442] XFS (loop1): Ending clean mount
[ 1013.732441][T22442] XFS (loop1): Quotacheck needed: Please wait.
[ 1013.799843][   T23] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1013.861647][T22442] XFS (loop1): Quotacheck: Done.
[ 1013.996617][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1014.014825][   T23] usb 3-1: config 127 has an invalid interface number: 138 but max is 0
[ 1014.037956][   T23] usb 3-1: config 127 has no interface number 0
[ 1014.052859][   T23] usb 3-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40
[ 1014.094454][   T23] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40
[ 1014.103983][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1014.112249][   T23] usb 3-1: Product: syz
[ 1014.116697][   T23] usb 3-1: Manufacturer: syz
[ 1014.121886][   T23] usb 3-1: SerialNumber: syz
[ 1014.133008][T22459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1014.432098][   T23] usb 3-1: probing VID:PID(0424:012C)   
[ 1014.439409][   T23] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0F
[ 1014.455683][   T23] usb 3-1: vub300 testing BULK OUT EndPoint(1) 09
[ 1014.493885][   T23] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1014.538984][   T23] vub300: probe of 3-1:127.138 failed with error -22
[ 1014.557930][   T23] usb 3-1: USB disconnect, device number 51
[ 1015.036470][T22499] netlink: 'syz.0.7567': attribute type 29 has an invalid length.
[ 1015.073763][T22499] netlink: 'syz.0.7567': attribute type 29 has an invalid length.
[ 1016.473101][T22549] loop2: detected capacity change from 0 to 4096
[ 1016.550441][T22556] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1016.618974][T22558] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7595'.
[ 1016.792611][   T27] audit: type=1326 audit(1784075526.577:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22563 comm="syz.0.7598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1016.886710][   T27] audit: type=1326 audit(1784075526.605:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22563 comm="syz.0.7598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1016.926352][T22558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1016.958640][   T27] audit: type=1326 audit(1784075526.614:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22563 comm="syz.0.7598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1017.029130][T22558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1017.071086][   T27] audit: type=1326 audit(1784075526.614:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22563 comm="syz.0.7598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1017.090091][T22558] bond0 (unregistering): Released all slaves
[ 1017.126568][   T27] audit: type=1326 audit(1784075526.614:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22563 comm="syz.0.7598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1017.172691][T22562] 
: renamed from bond_slave_0 (while UP)
[ 1017.308122][T22571] mmap: syz.2.7602 (22571): VmData 49217536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[ 1017.655860][T22584] usb usb8: usbfs: process 22584 (syz.3.7608) did not claim interface 0 before use
[ 1018.192805][T22604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7616'.
[ 1018.449335][T22614] netlink: 'syz.3.7622': attribute type 2 has an invalid length.
[ 1018.470617][T22614] netlink: 'syz.3.7622': attribute type 1 has an invalid length.
[ 1018.478839][T22614] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7622'.
[ 1018.834973][T22625] ieee802154 phy0 wpan0: encryption failed: -90
[ 1019.276753][T22647] netlink: 'syz.2.7637': attribute type 29 has an invalid length.
[ 1019.294532][T22645] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7638'.
[ 1019.324549][T22645] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7638'.
[ 1019.384327][T22645] bond0: (slave bond_slave_0): Releasing backup interface
[ 1019.409490][T22645] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1019.444926][T22647] netlink: 'syz.2.7637': attribute type 29 has an invalid length.
[ 1019.574455][T22654] loop3: detected capacity change from 0 to 256
[ 1019.993091][  T173] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1020.055247][T22669] 9pnet_fd: Insufficient options for proto=fd
[ 1020.194564][  T173] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1020.215114][  T173] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1020.225325][  T173] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1020.243404][  T173] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1020.251268][  T173] usb 1-1: config 1 interface 0 has no altsetting 1
[ 1020.260953][  T173] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1020.270649][  T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.279720][  T173] usb 1-1: Product: syz
[ 1020.286762][  T173] usb 1-1: Manufacturer: syz
[ 1020.287614][T22675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7648'.
[ 1020.293032][  T173] usb 1-1: SerialNumber: syz
[ 1020.341401][T22675] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1020.557684][  T173] smsusb:smsusb_probe: board id=8, interface number 0
[ 1020.564555][  T173] usb 1-1: selecting invalid altsetting 0
[ 1020.597956][  T173] smsusb:smsusb_probe: usb_set_interface failed, rc -22
[ 1020.610436][  T173] smsusb: probe of 1-1:1.0 failed with error -22
[ 1020.629214][  T173] usb 1-1: USB disconnect, device number 54
[ 1020.673589][T22683] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7653'.
[ 1020.923519][T22693] loop3: detected capacity change from 0 to 512
[ 1020.949523][T22693] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1020.975657][T22693] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1021.040347][T22693] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.7657: invalid indirect mapped block 32768 (level 2)
[ 1021.132109][T22693] EXT4-fs (loop3): Remounting filesystem read-only
[ 1021.186892][T22693] EXT4-fs (loop3): 1 orphan inode deleted
[ 1021.192850][T22693] EXT4-fs (loop3): 1 truncate cleaned up
[ 1021.214056][T22693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1021.445077][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1021.780572][T22719] tmpfs: Bad value for 'mpol'
[ 1021.825343][T22721] loop2: detected capacity change from 0 to 512
[ 1021.951540][T22721] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.7671: bg 0: block 169: padding at end of block bitmap is not set
[ 1022.006807][T22721] Quota error (device loop2): write_blk: dquota write failed
[ 1022.017508][T22721] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1022.031185][T22721] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.7671: Failed to acquire dquot type 0
[ 1022.034100][T22729] netlink: 'syz.1.7673': attribute type 29 has an invalid length.
[ 1022.073540][T22729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7673'.
[ 1022.077384][T22721] EXT4-fs (loop2): 1 truncate cleaned up
[ 1022.115298][T22721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1022.180344][T22721] ext4 filesystem being mounted at /1898/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1022.296583][T22721] Quota error (device loop2): write_blk: dquota write failed
[ 1022.323600][T22721] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[ 1022.335647][T22721] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.7671: Failed to acquire dquot type 0
[ 1022.523209][T22735] loop3: detected capacity change from 0 to 4096
[ 1022.553997][T22735] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 1022.564468][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1022.703773][T22735] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[ 1023.179004][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7685'.
[ 1023.292649][T22759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7688'.
[ 1023.313966][T22758] loop1: detected capacity change from 0 to 2048
[ 1023.321100][T22759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7688'.
[ 1023.423829][T22758] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1023.601188][T22765] loop3: detected capacity change from 0 to 1024
[ 1023.633304][T22765] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1023.703616][T22765] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #3: block 5: comm syz.3.7692: lblock 5 mapped to illegal pblock 5 (length 1)
[ 1023.727377][T22763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1023.812550][T22765] Quota error (device loop3): write_blk: dquota write failed
[ 1023.826607][T22765] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[ 1023.827054][T22763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1023.836311][T22765] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 1023.855404][T22765] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.7692: Failed to acquire dquot type 0
[ 1023.868294][T22765] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 5: comm syz.3.7692: lblock 5 mapped to illegal pblock 5 (length 1)
[ 1023.923776][T22763] bond0 (unregistering): Released all slaves
[ 1023.953480][T22765] Quota error (device loop3): do_insert_tree: Can't read tree quota block 5
[ 1023.978822][T22765] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 1023.992717][T22765] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.7692: Failed to acquire dquot type 0
[ 1024.035189][T22765] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.7692: Freeing blocks not in datazone - block = 0, count = 4096
[ 1024.070948][T22765] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 5: comm syz.3.7692: lblock 5 mapped to illegal pblock 5 (length 1)
[ 1024.120993][T22765] Quota error (device loop3): do_insert_tree: Can't read tree quota block 5
[ 1024.169041][T22765] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 1024.179087][T22765] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.7692: Failed to acquire dquot type 0
[ 1024.209149][T22765] EXT4-fs (loop3): 1 orphan inode deleted
[ 1024.216784][T22765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1024.319292][T22765] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 5: comm syz.3.7692: lblock 5 mapped to illegal pblock 5 (length 1)
[ 1024.341871][T22765] Quota error (device loop3): find_next_id: Can't read quota tree block 5
[ 1024.440979][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1024.473567][T22779] netlink: 'syz.1.7698': attribute type 2 has an invalid length.
[ 1025.632560][T22818] __nla_validate_parse: 53 callbacks suppressed
[ 1025.632620][T22818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7716'.
[ 1026.085461][T22833] netlink: 'syz.1.7724': attribute type 27 has an invalid length.
[ 1026.124606][T22831] loop3: detected capacity change from 0 to 4096
[ 1026.125086][T22833] netlink: 'syz.1.7724': attribute type 3 has an invalid length.
[ 1026.167961][T22833] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7724'.
[ 1026.183683][T22831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1026.292028][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1026.762768][T22851] netlink: 'syz.1.7732': attribute type 9 has an invalid length.
[ 1027.262897][T22868] loop2: detected capacity change from 0 to 128
[ 1027.288312][T22869] netlink: 'syz.0.7741': attribute type 64 has an invalid length.
[ 1027.306675][T22868] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[ 1027.350250][T22868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1027.440293][T22868] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 187 marked as free, partition length is 32)
[ 1027.646905][T22877] ip6erspan0: entered promiscuous mode
[ 1027.652477][T22877] ip6erspan0: entered allmulticast mode
[ 1028.057936][T22890] (null): rxe_set_mtu: Set mtu to 1024
[ 1028.071135][T22893] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7751'.
[ 1028.803360][T22890] infiniband syz0: set down
[ 1028.808980][T22890] infiniband syz0: added bond_slave_0
[ 1028.995016][T22890] RDS/IB: syz0: added
[ 1029.001266][T22890] smc: adding ib device syz0 with port count 1
[ 1029.007938][T22890] smc:    ib device syz0 port 1 has pnetid 
[ 1029.122202][T22922] No such timeout policy "syz0"
[ 1029.873085][T22946] loop2: detected capacity change from 0 to 512
[ 1029.883554][T22947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7780'.
[ 1029.949828][T22946] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.7779: Invalid inode bitmap blk 4 in block_group 0
[ 1029.990354][T22946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1030.063750][T22946] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[ 1030.103130][T22946] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.7779: Invalid inode bitmap blk 4 in block_group 0
[ 1030.157477][T22946] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[ 1030.187586][T22954] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7782'.
[ 1030.269824][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1030.289689][T22954] bond0 (unregistering): (slave 
3
0
): Releasing backup interface
[ 1030.325461][T22954] 
: left promiscuous mode
[ 1030.377172][T22954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1030.398570][T22954] bond_slave_1: left promiscuous mode
[ 1030.414814][T22954] bond0 (unregistering): Released all slaves
[ 1030.590845][   T27] audit: type=1326 audit(1784075539.485:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22960 comm="syz.2.7785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45af59de59 code=0x7ffc0000
[ 1030.672600][   T27] audit: type=1326 audit(1784075539.485:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22960 comm="syz.2.7785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f45af59de59 code=0x7ffc0000
[ 1030.754840][   T27] audit: type=1326 audit(1784075539.485:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22960 comm="syz.2.7785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45af59de59 code=0x7ffc0000
[ 1030.854413][T22966] loop2: detected capacity change from 0 to 2048
[ 1030.864562][   T27] audit: type=1326 audit(1784075539.485:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22960 comm="syz.2.7785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45af59de59 code=0x7ffc0000
[ 1030.959389][T22966] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1031.009770][T22966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1031.196359][T22973] loop1: detected capacity change from 0 to 2048
[ 1031.229339][T22973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1031.615205][T22983] loop1: detected capacity change from 0 to 256
[ 1032.593347][T23014] loop3: detected capacity change from 0 to 16
[ 1032.646772][T23014] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1033.098937][T23029] loop1: detected capacity change from 0 to 512
[ 1033.175900][T23029] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1033.216475][T23029] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[ 1033.273943][T23029] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1033.317253][T23029] System zones: 0-2, 18-18, 34-35
[ 1033.362044][T23029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1033.576141][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1034.153299][T23051] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7826'.
[ 1034.188908][T23049] loop2: detected capacity change from 0 to 256
[ 1034.349203][T23051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1034.388087][T23051] bond0 (unregistering): Released all slaves
[ 1034.439103][T23061] loop3: detected capacity change from 0 to 64
[ 1034.964024][T23074] netlink: 'syz.2.7840': attribute type 10 has an invalid length.
[ 1035.073282][T23074] `: Device veth1_macvtap failed to register rx_handler
[ 1035.643867][T23093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7848'.
[ 1036.129817][T23109] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7857'.
[ 1036.664326][T23127] netlink: 'syz.2.7865': attribute type 3 has an invalid length.
[ 1037.025703][T23139] loop3: detected capacity change from 0 to 164
[ 1037.400158][T23147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7875'.
[ 1037.416951][T23131] loop1: detected capacity change from 0 to 32768
[ 1037.426809][T23131] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.7867 (23131)
[ 1037.436373][    T8] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 1037.472271][T23131] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1037.511402][T23131] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[ 1037.520222][T23131] BTRFS info (device loop1): setting nodatasum
[ 1037.530557][T23131] BTRFS info (device loop1): force zlib compression, level 3
[ 1037.541376][T23131] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[ 1037.556176][T23131] BTRFS info (device loop1): use lzo compression, level 0
[ 1037.575677][T23131] BTRFS info (device loop1): turning on flush-on-commit
[ 1037.582828][T23131] BTRFS info (device loop1): enabling auto defrag
[ 1037.593717][T23131] BTRFS info (device loop1): max_inline at 4096
[ 1037.603740][T23131] BTRFS info (device loop1): using free space tree
[ 1037.671035][    T8] usb 1-1: Using ep0 maxpacket: 32
[ 1037.692247][    T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1037.720231][    T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1037.756579][    T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1037.767089][    T8] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1037.775538][    T8] usb 1-1: Product: syz
[ 1037.794997][    T8] usb 1-1: Manufacturer: syz
[ 1037.807679][    T8] hub 1-1:4.0: USB hub found
[ 1037.818375][T23131] BTRFS info (device loop1): enabling ssd optimizations
[ 1038.077519][    T8] hub 1-1:4.0: 2 ports detected
[ 1038.284044][    T8] hub 1-1:4.0: hub_hub_status failed (err = -71)
[ 1038.312367][    T8] hub 1-1:4.0: config failed, can't get hub status (err -71)
[ 1038.392123][    T8] usb 1-1: USB disconnect, device number 55
[ 1038.488194][T23183] loop2: detected capacity change from 0 to 256
[ 1038.595996][T23183] FAT-fs (loop2): Directory bread(block 64) failed
[ 1038.621066][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1038.640778][T23183] FAT-fs (loop2): Directory bread(block 65) failed
[ 1038.648869][T23183] FAT-fs (loop2): Directory bread(block 66) failed
[ 1038.667093][T23183] FAT-fs (loop2): Directory bread(block 67) failed
[ 1038.678830][T23183] FAT-fs (loop2): Directory bread(block 68) failed
[ 1038.687158][T23183] FAT-fs (loop2): Directory bread(block 69) failed
[ 1038.695414][T23183] FAT-fs (loop2): Directory bread(block 70) failed
[ 1038.710921][T23183] FAT-fs (loop2): Directory bread(block 71) failed
[ 1038.717662][T23183] FAT-fs (loop2): Directory bread(block 72) failed
[ 1038.727480][T23183] FAT-fs (loop2): Directory bread(block 73) failed
[ 1038.991013][T23189] bridge3: entered promiscuous mode
[ 1039.350915][T23196] loop2: detected capacity change from 0 to 1024
[ 1039.358625][T23196] EXT4-fs: Ignoring removed bh option
[ 1039.412015][T23196] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 1039.473864][T23196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1039.855017][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1039.985075][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1039.991683][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1040.403407][ T5815] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1040.632168][ T5815] usb 3-1: Using ep0 maxpacket: 8
[ 1040.640241][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1040.662885][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1040.693926][ T5815] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1040.717876][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1040.729685][ T5815] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1040.740713][ T5815] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1040.751392][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.763716][ T5815] usb 3-1: config 0 descriptor??
[ 1040.769991][T23218] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1040.985219][  T173] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1041.190712][  T173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[ 1041.220189][  T173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[ 1041.244871][  T173] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[ 1041.262955][  T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.282244][  T173] usb 1-1: Product: syz
[ 1041.286935][  T173] usb 1-1: Manufacturer: syz
[ 1041.291684][  T173] usb 1-1: SerialNumber: syz
[ 1041.317194][  T173] usb 1-1: config 0 descriptor??
[ 1041.328408][  T173] usb 1-1: Found UVC 0.00 device syz (18ec:3288)
[ 1041.343754][  T173] usb 1-1: No valid video chain found.
[ 1041.374689][  T173] usb 3-1: USB disconnect, device number 52
[ 1041.380693][ T5778] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[ 1041.593135][    T8] usb 1-1: USB disconnect, device number 56
[ 1041.741178][T23245] loop1: detected capacity change from 0 to 32768
[ 1041.766958][T23245] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[ 1041.845010][T23245] XFS (loop1): Ending clean mount
[ 1041.981496][ T5769] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[ 1042.037794][   T28] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[ 1042.253159][   T28] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[ 1042.274838][   T28] usb 4-1: config 8 has no interface number 0
[ 1042.296222][   T28] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[ 1042.330781][   T28] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1042.345816][   T28] usb 4-1: config 8 interface 177 has no altsetting 0
[ 1042.353822][   T28] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[ 1042.386842][   T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1042.414460][T23251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1042.511322][T23268] loop1: detected capacity change from 0 to 16
[ 1042.552725][T23268] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1042.670629][T23268] syz.1.7917: attempt to access beyond end of device
[ 1042.670629][T23268] loop1: rw=524288, sector=527032, nr_sectors = 8 limit=16
[ 1042.688497][   T28] usb 4-1: string descriptor 0 read error: -71
[ 1042.703000][   T28] ir_toy 4-1:8.177: required endpoints not found
[ 1042.719780][   T28] usb 4-1: USB disconnect, device number 53
[ 1042.726035][T23268] syz.1.7917: attempt to access beyond end of device
[ 1042.726035][T23268] loop1: rw=524288, sector=296, nr_sectors = 8 limit=16
[ 1042.741735][T23268] syz.1.7917: attempt to access beyond end of device
[ 1042.741735][T23268] loop1: rw=524288, sector=1049344, nr_sectors = 8 limit=16
[ 1042.764454][T23268] syz.1.7917: attempt to access beyond end of device
[ 1042.764454][T23268] loop1: rw=524288, sector=688, nr_sectors = 8 limit=16
[ 1042.783480][T23268] syz.1.7917: attempt to access beyond end of device
[ 1042.783480][T23268] loop1: rw=524288, sector=525096, nr_sectors = 8 limit=16
[ 1042.821953][T23268] syz.1.7917: attempt to access beyond end of device
[ 1042.821953][T23268] loop1: rw=524288, sector=712, nr_sectors = 8 limit=16
[ 1042.863233][T23268] syz.1.7917: attempt to access beyond end of device
[ 1042.863233][T23268] loop1: rw=524288, sector=525136, nr_sectors = 8 limit=16
[ 1042.898179][T23268] syz.1.7917: attempt to access beyond end of device
[ 1042.898179][T23268] loop1: rw=524288, sector=712, nr_sectors = 8 limit=16
[ 1042.933236][T23268] syz.1.7917: attempt to access beyond end of device
[ 1042.933236][T23268] loop1: rw=524288, sector=19320, nr_sectors = 8 limit=16
[ 1042.969063][T23268] syz.1.7917: attempt to access beyond end of device
[ 1042.969063][T23268] loop1: rw=524288, sector=6227189760, nr_sectors = 8 limit=16
[ 1043.239417][T23281] loop2: detected capacity change from 0 to 164
[ 1043.652821][T23294] netlink: 'syz.1.7931': attribute type 49 has an invalid length.
[ 1043.853919][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7936'.
[ 1043.885206][T23294] ip6gretap0: entered promiscuous mode
[ 1043.898884][T23294] ip6gretap0: entered allmulticast mode
[ 1043.935202][T23301] netlink: 'syz.0.7935': attribute type 10 has an invalid length.
[ 1044.026031][T23301] team0: Device veth1_macvtap failed to register rx_handler
[ 1044.446799][T23315] unsupported nlmsg_type 40
[ 1044.603414][T23320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7945'.
[ 1044.671547][T23321] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1045.232397][   T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1045.361674][T23343] bond0: entered promiscuous mode
[ 1045.458859][   T10] usb 2-1: Using ep0 maxpacket: 16
[ 1045.475319][T23352] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7956'.
[ 1045.505759][   T10] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[ 1045.518221][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.569698][   T10] usb 2-1: Product: syz
[ 1045.580566][   T10] usb 2-1: Manufacturer: syz
[ 1045.603430][   T10] usb 2-1: SerialNumber: syz
[ 1045.636665][   T10] usb 2-1: config 0 descriptor??
[ 1045.814012][T23363] overlay: Unknown parameter 'subj_role'
[ 1045.890842][   T10] speedtch 2-1:0.0: speedtch_bind: data interface not found!
[ 1045.934059][   T10] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1046.127573][T15922] usb 2-1: USB disconnect, device number 54
[ 1047.104780][T23395] gre1: entered promiscuous mode
[ 1047.782834][T23387] loop3: detected capacity change from 0 to 32768
[ 1047.866955][T23387] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1047.918265][T23425] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[ 1048.276590][T23387] XFS (loop3): Ending clean mount
[ 1048.295640][T23387] XFS (loop3): Quotacheck needed: Please wait.
[ 1048.401161][T23387] XFS (loop3): Quotacheck: Done.
[ 1048.581560][T23424] loop2: detected capacity change from 0 to 32768
[ 1048.628697][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1048.648519][T23424] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[ 1049.029783][T23424] XFS (loop2): Ending clean mount
[ 1049.302648][ T5770] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[ 1049.481936][T23433] loop1: detected capacity change from 0 to 32768
[ 1050.156947][T23462] bond0: entered promiscuous mode
[ 1050.227724][T23462] bond0: entered allmulticast mode
[ 1050.256079][T23462] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1050.711959][T23479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8007'.
[ 1051.159208][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8014'.
[ 1051.241731][T23496] loop1: detected capacity change from 0 to 764
[ 1051.675807][T23510] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8019'.
[ 1051.903208][T23514] loop2: detected capacity change from 0 to 764
[ 1051.997423][T23514] Symlink component flag not implemented
[ 1052.003716][T23514] Symlink component flag not implemented
[ 1052.703653][T23542] xt_cluster: node mask cannot exceed total number of nodes
[ 1052.777764][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8036'.
[ 1052.885237][T23550] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[ 1053.386194][ T5814] usb 2-1: new full-speed USB device number 55 using dummy_hcd
[ 1053.586423][ T5814] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1053.622999][ T5814] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 42769, setting to 64
[ 1053.636895][ T5814] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1053.654575][ T5814] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1053.668585][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.692322][T23546] loop2: detected capacity change from 0 to 32768
[ 1053.696159][ T5814] usb 2-1: Product: syz
[ 1053.703086][ T5814] usb 2-1: Manufacturer: syz
[ 1053.726498][ T5814] usb 2-1: SerialNumber: syz
[ 1053.764917][T23546] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1053.765241][ T5814] usb 2-1: config 0 descriptor??
[ 1053.801963][ T5814] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found
[ 1054.040406][ T5814] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1054.067741][ T5814] snd_usb_toneport: probe of 2-1:0.0 failed with error -22
[ 1054.126662][T23546] XFS (loop2): Ending clean mount
[ 1054.223578][ T5770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1054.253757][    T8] usb 4-1: new low-speed USB device number 54 using dummy_hcd
[ 1054.304643][   T10] usb 2-1: USB disconnect, device number 55
[ 1054.488464][    T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1054.503440][    T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1054.552668][    T8] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1054.570548][    T8] usb 4-1: string descriptor 0 read error: -22
[ 1054.578443][    T8] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[ 1054.592598][    T8] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[ 1054.635647][    T8] usb 4-1: 0:2 : does not exist
[ 1054.680135][    T8] usb-storage 4-1:1.1: USB Mass Storage device detected
[ 1054.837352][    T8] usb_set_interface error
[ 1054.859205][    T8] snd-usb-us122l: probe of 4-1:1.1 failed with error -22
[ 1054.925030][    T8] usb 4-1: USB disconnect, device number 54
[ 1055.236074][   T28] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1055.438795][   T28] usb 3-1: Using ep0 maxpacket: 16
[ 1055.456292][   T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1055.501706][   T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11
[ 1055.528612][   T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024
[ 1055.564251][   T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1055.582470][T23622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8068'.
[ 1055.597372][   T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1055.610408][T23622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8068'.
[ 1055.629557][   T28] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1055.630885][T23622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8068'.
[ 1055.672232][   T28] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1055.681946][   T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.717762][   T28] usb 3-1: config 0 descriptor??
[ 1055.882382][   T28] rc_core: IR keymap rc-hauppauge not found
[ 1055.898375][   T28] Registered IR keymap rc-empty
[ 1055.904149][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1055.985698][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1056.045059][   T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1056.075457][   T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input71
[ 1056.171437][    C1] mceusb 3-1:0.0: Error: urb status = -75
[ 1056.200960][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1056.262063][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1056.324546][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1056.369029][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1056.389284][T23643] loop3: detected capacity change from 0 to 512
[ 1056.423517][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1056.468522][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1056.483104][T23643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1056.507767][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1056.550582][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1056.595513][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1056.646867][   T28] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1056.718079][   T28] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[ 1056.765001][   T28] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1056.823656][   T28] usb 3-1: USB disconnect, device number 53
[ 1056.891007][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1057.539463][T23672] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1058.504853][   T27] audit: type=1326 audit(1784075565.592:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.3.8104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1058.635273][   T27] audit: type=1326 audit(1784075565.592:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.3.8104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1058.728635][   T27] audit: type=1326 audit(1784075565.639:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.3.8104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1058.847281][   T27] audit: type=1326 audit(1784075565.639:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.3.8104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1058.969004][   T27] audit: type=1326 audit(1784075565.639:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.3.8104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1059.050635][   T27] audit: type=1326 audit(1784075565.639:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.3.8104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1059.131465][   T27] audit: type=1326 audit(1784075565.639:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.3.8104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1059.210971][   T27] audit: type=1326 audit(1784075565.649:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.3.8104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1059.305156][   T27] audit: type=1326 audit(1784075565.649:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23707 comm="syz.3.8104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f253799de59 code=0x7ffc0000
[ 1059.334856][T23727] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1059.779349][T23750] netlink: 'syz.1.8119': attribute type 4 has an invalid length.
[ 1059.807628][T23750] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8119'.
[ 1060.399258][    T8] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1060.602300][    T8] usb 2-1: Using ep0 maxpacket: 32
[ 1060.620867][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1060.664860][    T8] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1060.664896][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1060.664920][    T8] usb 2-1: Product: syz
[ 1060.664939][    T8] usb 2-1: Manufacturer: syz
[ 1060.664957][    T8] usb 2-1: SerialNumber: syz
[ 1060.672739][    T8] usb 2-1: config 0 descriptor??
[ 1060.758834][    T8] usb 2-1: bad CDC descriptors
[ 1060.763046][    T8] usb 2-1: unsupported MDLM descriptors
[ 1061.051598][   T28] usb 2-1: USB disconnect, device number 56
[ 1061.186647][T23792] netlink: 'syz.0.8137': attribute type 6 has an invalid length.
[ 1061.315835][T23795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8139'.
[ 1061.330744][T23795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8139'.
[ 1061.351226][T23796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8138'.
[ 1061.729381][T23808] loop2: detected capacity change from 0 to 256
[ 1061.744120][T23806] loop3: detected capacity change from 0 to 2048
[ 1061.783620][T23806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1061.813394][T23810] netlink: 'syz.1.8146': attribute type 4 has an invalid length.
[ 1061.855503][T23810] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8146'.
[ 1062.118083][T23816] loop1: detected capacity change from 0 to 1024
[ 1062.367469][T23821] loop2: detected capacity change from 0 to 512
[ 1062.428416][T23821] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1062.480268][T23821] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002]
[ 1062.526846][T23821] System zones: 1-12
[ 1062.598010][T23821] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.8151: bad orphan inode 16
[ 1062.651363][T23821] ext4_test_bit(bit=15, block=4) = 0
[ 1062.665893][T23821] EXT4-fs (loop2): 1 orphan inode deleted
[ 1062.684477][T23821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1062.747441][T23821] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.8151: reserved inode found cleared - inode=9
[ 1062.825246][T23831] No such timeout policy "syz0"
[ 1062.907930][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1063.170982][T23839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1063.179223][T23839] IPv6: NLM_F_CREATE should be set when creating new route
[ 1063.187119][T23839] IPv6: NLM_F_CREATE should be set when creating new route
[ 1063.858971][T23862] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8169'.
[ 1064.111733][T23871] loop3: detected capacity change from 0 to 64
[ 1064.857235][T23890] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8184' sets config #1
[ 1064.918453][T23894] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8185'.
[ 1064.948207][T23894] tc_dump_action: action bad kind
[ 1064.980732][T23866] loop1: detected capacity change from 0 to 32768
[ 1065.046967][T23866] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1065.206763][T23866] XFS (loop1): Ending clean mount
[ 1065.317690][ T5769] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1065.929469][T23929] No such timeout policy "syz0"
[ 1066.738167][T23947] loop2: detected capacity change from 0 to 8192
[ 1066.905715][T23933] loop3: detected capacity change from 0 to 32768
[ 1066.955896][T23933] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.8201 (23933)
[ 1067.055748][T23933] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1067.086254][T23933] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1067.110064][T23933] BTRFS info (device loop3): enabling ssd optimizations
[ 1067.156017][T23933] BTRFS info (device loop3): not using ssd optimizations
[ 1067.163183][T23933] BTRFS info (device loop3): turning off barriers
[ 1067.246119][T23933] BTRFS info (device loop3): using free space tree
[ 1067.627905][T23986] snd_dummy snd_dummy.0: control 0:7841:0:syz0:0 is already present
[ 1067.710826][ T5773] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1068.504314][T24003] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1069.044972][T23991] loop1: detected capacity change from 0 to 32768
[ 1069.095346][T23991] (syz.1.8222,23991,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1069.138791][T23991] (syz.1.8222,23991,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1069.226802][T23991] JBD2: Ignoring recovery information on journal
[ 1069.373509][T23991] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1070.015657][ T5769] ocfs2: Unmounting device (7,1) on (node local)
[ 1070.056773][T24043] veth0_to_batadv: entered promiscuous mode
[ 1070.062805][T24043] veth0_to_batadv: entered allmulticast mode
[ 1070.142308][T24045] sg_write: data in/out 196864/1 bytes for SCSI command 0xaa-- guessing data in;
[ 1070.142308][T24045]    program syz.0.8247 not setting count and/or reply_len properly
[ 1070.416408][T24051] binder: 24048:24051 ioctl c018620c 200000000100 returned -22
[ 1070.499530][T24053] x_tables: unsorted underflow at hook 4
[ 1070.946986][T24070] loop2: detected capacity change from 0 to 1764
[ 1071.053741][T24070] iso9660: Corrupted directory entry in block 14 of inode 1920
[ 1071.554554][T24088] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8267'.
[ 1071.617988][T24092] loop2: detected capacity change from 0 to 164
[ 1071.713880][T24092] Unsupported NM flag settings (240)
[ 1072.074994][T24078] loop1: detected capacity change from 0 to 32768
[ 1072.113398][T24078] JBD2: Ignoring recovery information on journal
[ 1072.202849][T24109] loop2: detected capacity change from 0 to 256
[ 1072.274048][T24078] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1072.313854][T24109] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[ 1072.407185][T24078] (syz.1.8262,24078,0):ocfs2_find_entry:1075 ERROR: status = -117
[ 1072.449475][T24078] (syz.1.8262,24078,0):ocfs2_find_entry:1075 ERROR: status = -117
[ 1072.457405][T24078] (syz.1.8262,24078,0):ocfs2_symlink:2068 ERROR: status = -117
[ 1072.546311][T24118] netlink: 'syz.3.8280': attribute type 1 has an invalid length.
[ 1072.647924][ T5769] ocfs2: Unmounting device (7,1) on (node local)
[ 1072.980173][T24128] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8285'.
[ 1072.997360][T24128] IPv6: Can't replace route, no match found
[ 1073.516668][T24146] tc_dump_action: action bad kind
[ 1073.951535][T24158] xfrm0: entered allmulticast mode
[ 1074.150763][T24161] loop3: detected capacity change from 0 to 164
[ 1074.207260][T24161] Unsupported NM flag settings (240)
[ 1074.233537][T24164] xt_hashlimit: max too large, truncated to 1048576
[ 1074.411587][T24144] loop2: detected capacity change from 0 to 32768
[ 1074.442640][T24144] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1074.480799][T24144] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[ 1074.532455][T24144] BTRFS info (device loop2): using free space tree
[ 1074.724709][T24144] BTRFS info (device loop2): enabling ssd optimizations
[ 1074.736723][T24144] BTRFS info (device loop2): auto enabling async discard
[ 1075.068619][ T5770] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1076.179792][T24223] netlink: 'syz.1.8321': attribute type 24 has an invalid length.
[ 1076.374059][T24208] loop3: detected capacity change from 0 to 32768
[ 1076.512821][T24208] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1076.789552][T24208] XFS (loop3): Ending clean mount
[ 1076.798151][T24217] loop2: detected capacity change from 0 to 32768
[ 1076.805924][T24208] XFS (loop3): Quotacheck needed: Please wait.
[ 1076.852922][T24217] (syz.2.8311,24217,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1076.901591][T24217] (syz.2.8311,24217,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1076.967722][T24208] XFS (loop3): Quotacheck: Done.
[ 1077.031717][T24217] JBD2: Ignoring recovery information on journal
[ 1077.109302][T24217] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1077.182125][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1077.568699][ T5770] ocfs2: Unmounting device (7,2) on (node local)
[ 1078.146367][T24259] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073661448198)
[ 1078.177823][T24259] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[ 1078.296032][T24263] netlink: 'syz.1.8337': attribute type 2 has an invalid length.
[ 1078.316885][T24263] netlink: 'syz.1.8337': attribute type 1 has an invalid length.
[ 1078.600130][T24271] netlink: 'syz.2.8342': attribute type 10 has an invalid length.
[ 1079.161395][   T28] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1079.280848][T24292] netlink: 'syz.0.8350': attribute type 4 has an invalid length.
[ 1079.306709][T24292] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.8350'.
[ 1079.370806][   T28] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1079.417693][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.425889][   T28] usb 2-1: Product: syz
[ 1079.471152][   T28] usb 2-1: Manufacturer: syz
[ 1079.475899][   T28] usb 2-1: SerialNumber: syz
[ 1079.567424][   T28] usb 2-1: config 0 descriptor??
[ 1079.582532][   T28] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 057
[ 1080.029975][   T28]  (null): failure reading functionality
[ 1080.051764][   T28] i2c i2c-1: failure reading functionality
[ 1080.058320][ T5814] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1080.089111][   T28] i2c i2c-1: connected i2c-tiny-usb device
[ 1080.100375][   T28] usb 2-1: USB disconnect, device number 57
[ 1080.163841][T24317] x_tables: unsorted entry at hook 3
[ 1080.281618][ T5814] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1080.304766][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1080.317210][ T5814] usb 3-1: Product: syz
[ 1080.321523][ T5814] usb 3-1: Manufacturer: syz
[ 1080.326223][ T5814] usb 3-1: SerialNumber: syz
[ 1080.352440][ T5814] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1080.383601][T21814] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1080.643928][    C1] usb 3-1: ath: unknown panic pattern!
[ 1080.739488][T24326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8366'.
[ 1080.750761][T24326] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1080.846867][   T28] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[ 1080.859280][  T173] usb 3-1: USB disconnect, device number 54
[ 1080.899999][T24328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8367'.
[ 1080.909450][T24328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8367'.
[ 1080.911466][T24320] loop3: detected capacity change from 0 to 32768
[ 1080.925086][T24328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8367'.
[ 1080.945344][T24320] (syz.3.8364,24320,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1080.969009][T24320] (syz.3.8364,24320,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1080.997874][T24320] JBD2: Ignoring recovery information on journal
[ 1081.074281][   T28] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1081.108836][   T28] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1081.165471][   T28] usb 1-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40
[ 1081.177871][T24320] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1081.198114][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.220430][   T28] usb 1-1: Product: syz
[ 1081.230210][   T28] usb 1-1: Manufacturer: syz
[ 1081.255501][   T28] usb 1-1: SerialNumber: syz
[ 1081.274493][T24324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1081.415949][ T5773] ocfs2: Unmounting device (7,3) on (node local)
[ 1081.553976][T21814] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1081.579915][T21814] ath9k_htc: Failed to initialize the device
[ 1081.603457][  T173] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1081.687684][T24342] loop2: detected capacity change from 0 to 256
[ 1081.816715][   T28] usbhid 1-1:1.0: can't add hid device: -71
[ 1081.843299][   T28] usbhid: probe of 1-1:1.0 failed with error -71
[ 1081.869013][   T28] usb 1-1: USB disconnect, device number 57
[ 1082.079014][T24348] loop3: detected capacity change from 0 to 512
[ 1082.145722][T24348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1082.168771][T24348] ext4 filesystem being mounted at /2093/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1082.225984][T24355] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8379'.
[ 1082.437000][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1082.764136][   T28] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1082.988523][   T28] usb 2-1: Using ep0 maxpacket: 32
[ 1083.000373][   T28] usb 2-1: too many configurations: 17, using maximum allowed: 8
[ 1083.053165][   T28] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1083.061364][   T28] usb 2-1: config 0 has no interface number 0
[ 1083.084879][   T28] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1083.116485][   T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1083.146604][   T28] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1083.155144][   T28] usb 2-1: config 0 has no interface number 0
[ 1083.164634][   T28] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1083.185621][   T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1083.218797][   T28] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1083.227302][   T28] usb 2-1: config 0 has no interface number 0
[ 1083.233491][   T28] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1083.265716][   T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1083.305190][   T28] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1083.341466][   T28] usb 2-1: config 0 has no interface number 0
[ 1083.347722][   T28] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1083.385165][   T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1083.407999][   T28] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1083.422367][   T28] usb 2-1: config 0 has no interface number 0
[ 1083.458929][   T28] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1083.491594][   T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1083.507972][T24392] sctp: [Deprecated]: syz.3.8397 (pid 24392) Use of int in maxseg socket option.
[ 1083.507972][T24392] Use struct sctp_assoc_value instead
[ 1083.543700][   T28] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1083.564248][   T28] usb 2-1: config 0 has no interface number 0
[ 1083.575061][   T28] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1083.619115][   T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1083.650472][   T28] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1083.682507][   T28] usb 2-1: config 0 has no interface number 0
[ 1083.709039][   T28] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1083.735657][   T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1083.781532][   T28] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1083.800585][   T28] usb 2-1: config 0 has no interface number 0
[ 1083.819970][   T28] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1083.839321][T24399] ieee802154 phy0 wpan0: encryption failed: -22
[ 1083.847122][   T28] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1083.878881][   T28] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[ 1083.893267][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.919535][   T28] usb 2-1: Product: syz
[ 1083.923848][   T28] usb 2-1: Manufacturer: syz
[ 1083.934409][   T28] usb 2-1: SerialNumber: syz
[ 1083.951630][   T28] usb 2-1: config 0 descriptor??
[ 1083.959312][   T28] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz)
[ 1084.205378][   T28] etas_es58x 2-1:0.2: could not parse product info: ''
[ 1084.869722][   T28] usb 2-1: USB disconnect, device number 58
[ 1084.887193][   T28] etas_es58x 2-1:0.2: Disconnecting syz syz
[ 1085.511603][T24471] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8413'.
[ 1086.265880][T24497] netlink: 'syz.2.8423': attribute type 19 has an invalid length.
[ 1086.317480][T24497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8423'.
[ 1086.516269][   T27] audit: type=1326 audit(1784075591.793:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24505 comm="syz.0.8427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1086.612569][   T27] audit: type=1326 audit(1784075591.793:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24505 comm="syz.0.8427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1086.651501][T24510] loop1: detected capacity change from 0 to 256
[ 1086.730582][   T27] audit: type=1326 audit(1784075591.840:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24505 comm="syz.0.8427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1086.754763][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1086.884435][   T27] audit: type=1326 audit(1784075591.840:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24505 comm="syz.0.8427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1087.006797][   T27] audit: type=1326 audit(1784075591.840:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24505 comm="syz.0.8427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1087.133777][   T27] audit: type=1326 audit(1784075591.849:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24505 comm="syz.0.8427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1087.207503][T24527] netlink: 'syz.0.8435': attribute type 3 has an invalid length.
[ 1087.245107][   T27] audit: type=1326 audit(1784075591.849:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24505 comm="syz.0.8427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1087.339818][   T27] audit: type=1326 audit(1784075591.849:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24505 comm="syz.0.8427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1087.453730][T24534] netlink: 'syz.1.8438': attribute type 3 has an invalid length.
[ 1087.461895][   T27] audit: type=1326 audit(1784075591.849:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24505 comm="syz.0.8427" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8e1dd9de59 code=0x7ffc0000
[ 1088.117492][T24561] loop2: detected capacity change from 0 to 128
[ 1088.145456][T24561] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[ 1088.184407][T24563] loop3: detected capacity change from 0 to 512
[ 1088.218290][T24561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1088.262659][T24563] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 1088.323552][T24563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[ 1088.331894][T24563] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1088.421564][T24563] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.8451: iget: bad i_size value: 12154761577498
[ 1088.512135][T24563] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.8451: couldn't read orphan inode 13 (err -117)
[ 1088.565228][T24563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1088.688163][T24563] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.8451: dx entry: limit 65535 != root limit 120
[ 1088.740224][T24563] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.8451: Corrupt directory, running e2fsck is recommended
[ 1088.875805][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1089.415302][T15922] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1089.650943][T15922] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1089.681859][T15922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1089.719318][T15922] usb 1-1: config 0 descriptor??
[ 1089.859182][T24613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8473'.
[ 1089.983822][T15922] usb 1-1: Cannot read MAC address
[ 1089.989199][T15922] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71
[ 1090.017534][T24618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8476'.
[ 1090.027595][T24618] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[ 1090.045344][T15922] usb 1-1: USB disconnect, device number 58
[ 1090.162283][    T8] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1090.364958][    T8] usb 2-1: Using ep0 maxpacket: 16
[ 1090.398768][    T8] usb 2-1: config 0 has no interfaces?
[ 1090.408085][    T8] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1090.438277][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.457472][    T8] usb 2-1: Product: syz
[ 1090.466283][    T8] usb 2-1: Manufacturer: syz
[ 1090.480163][    T8] usb 2-1: SerialNumber: syz
[ 1090.488488][    T8] r8152-cfgselector 2-1: config 0 descriptor??
[ 1090.751483][    T8] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[ 1090.789504][T24642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8488'.
[ 1090.799994][T24642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8488'.
[ 1090.813745][T24642] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8488'.
[ 1090.823277][T24448] usb 2-1: config 0 descriptor??
[ 1090.942195][   T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1090.983985][    T8] usb 2-1: USB disconnect, device number 59
[ 1090.985733][T24448] usb 2-1: can't set config #0, error -71
[ 1091.146348][   T10] usb 3-1: Using ep0 maxpacket: 16
[ 1091.158550][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1091.183965][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1091.210172][   T10] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[ 1091.233166][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1091.258899][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.286351][   T10] usb 3-1: Product: syz
[ 1091.299769][   T10] usb 3-1: Manufacturer: syz
[ 1091.304548][   T10] usb 3-1: SerialNumber: syz
[ 1091.326784][T24654] cgroup: Name too long
[ 1091.571364][   T10] usb 3-1: 0:2 : does not exist
[ 1091.610076][   T10] usb 3-1: USB disconnect, device number 55
[ 1091.662040][ T9054] udevd[9054]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1091.695955][  T173] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[ 1091.923065][  T173] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[ 1091.936567][  T173] usb 4-1: config 1 has no interface number 0
[ 1091.956865][  T173] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1091.986529][  T173] usb 4-1: config 1 interface 105 has no altsetting 0
[ 1091.997457][  T173] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1092.022068][  T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.030178][  T173] usb 4-1: Product: syz
[ 1092.035099][  T173] usb 4-1: Manufacturer: syz
[ 1092.039799][  T173] usb 4-1: SerialNumber: syz
[ 1092.268748][   T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1092.291668][  T173] aqc111: probe of 4-1:1.105 failed with error -22
[ 1092.429265][T24678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1092.436594][T24678] IPv6: NLM_F_CREATE should be set when creating new route
[ 1092.443986][T24678] IPv6: NLM_F_CREATE should be set when creating new route
[ 1092.451339][T24678] IPv6: NLM_F_CREATE should be set when creating new route
[ 1092.499676][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1092.509270][   T10] usb 2-1: config 11 has an invalid interface number: 104 but max is 0
[ 1092.528747][   T10] usb 2-1: config 11 has no interface number 0
[ 1092.545891][   T10] usb 2-1: config 11 interface 104 has no altsetting 0
[ 1092.565721][   T28] usb 4-1: USB disconnect, device number 55
[ 1092.570474][   T10] usb 2-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=e9.15
[ 1092.598838][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.618137][   T10] usb 2-1: Product: syz
[ 1092.630953][   T10] usb 2-1: Manufacturer: syz
[ 1092.667920][   T10] usb 2-1: SerialNumber: syz
[ 1092.949645][   T10] rndis_wlan 2-1:11.104: invalid descriptor buffer length
[ 1092.969415][   T10] usb 2-1: bad CDC descriptors
[ 1092.980401][   T10] rndis_host 2-1:11.104: invalid descriptor buffer length
[ 1092.993011][   T10] usb 2-1: bad CDC descriptors
[ 1092.998956][   T10] cdc_acm 2-1:11.104: invalid descriptor buffer length
[ 1093.022056][   T10] usb 2-1: USB disconnect, device number 60
[ 1093.093919][T24693] loop2: detected capacity change from 0 to 65
[ 1093.108806][T24693] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[ 1093.939770][T24719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8526'.
[ 1093.971819][T24719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8526'.
[ 1093.998716][T24719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8526'.
[ 1094.909677][T24758] netlink: 424 bytes leftover after parsing attributes in process `syz.0.8545'.
[ 1094.930075][T24758] netlink: 'syz.0.8545': attribute type 1 has an invalid length.
[ 1095.276732][T24769] binder: 24767:24769 ioctl c00c620f 0 returned -14
[ 1095.915686][T24790] loop2: detected capacity change from 0 to 1024
[ 1096.077582][T24790] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[ 1096.116654][T24790] hfsplus: xattr searching failed
[ 1096.165073][T24790] bio_check_eod: 276 callbacks suppressed
[ 1096.165096][T24790] syz.2.8561: attempt to access beyond end of device
[ 1096.165096][T24790] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024
[ 1096.213171][T24790] Buffer I/O error on dev loop2, logical block 458752, async page read
[ 1096.224183][T24790] hfsplus: unable to mark blocks free: error -5
[ 1096.244827][T24790] hfsplus: can't free extent
[ 1096.503774][T24779] loop1: detected capacity change from 0 to 32768
[ 1096.590927][T24779] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[ 1096.628361][T24779] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1096.699468][T24809] loop3: detected capacity change from 0 to 1764
[ 1096.778022][T24779] XFS (loop1): Ending clean mount
[ 1096.881708][T24779] XFS (loop1): Quotacheck needed: Please wait.
[ 1097.031158][T24779] XFS (loop1): Quotacheck: Done.
[ 1097.220616][ T5769] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1097.936083][T24845] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8576'.
[ 1097.980763][T24845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8576'.
[ 1098.372530][T24860] netlink: 'syz.0.8592': attribute type 7 has an invalid length.
[ 1098.808509][T24876] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8598'.
[ 1098.829235][T24876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8598'.
[ 1099.452116][T24893] program syz.3.8608 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1100.309382][T24922] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8620'.
[ 1100.325896][T24922] ..0·: renamed from hsr0 (while UP)
[ 1100.342056][T24922] ..0·: entered allmulticast mode
[ 1100.353472][T24922] hsr_slave_0: entered allmulticast mode
[ 1100.391930][T24922] hsr_slave_1: entered allmulticast mode
[ 1100.399186][T24922] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check.
[ 1101.352384][T24955] loop3: detected capacity change from 0 to 512
[ 1101.457895][T24955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1101.571068][T24955] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.8636: checksumming directory block 0
[ 1101.807512][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1102.036851][T24980] netlink: 19 bytes leftover after parsing attributes in process `syz.3.8643'.
[ 1102.489536][T24997] loop3: detected capacity change from 0 to 1024
[ 1103.358174][T25026] loop2: detected capacity change from 0 to 1024
[ 1103.566505][T25033] netlink: 'syz.3.8672': attribute type 12 has an invalid length.
[ 1103.900000][T25042] loop3: detected capacity change from 0 to 1024
[ 1103.907956][T25042] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1104.036846][T25042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1104.176381][T25042] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 40: comm syz.3.8676: bad entry in directory: rec_len is smaller than minimal - offset=8960, inode=0, rec_len=0, size=1024 fake=0
[ 1104.364422][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1104.955737][T25075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8691'.
[ 1105.669080][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1105.684719][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1106.655530][T25115] netlink: 'syz.2.8709': attribute type 2 has an invalid length.
[ 1106.676277][T25104] loop3: detected capacity change from 0 to 32768
[ 1107.189112][T25127] loop3: detected capacity change from 0 to 2048
[ 1107.307446][T25127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1107.395273][T25127] ext4 filesystem being mounted at /2187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1107.686414][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1107.853235][T25146] netlink: 'syz.1.8724': attribute type 7 has an invalid length.
[ 1107.883980][T25146] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8724'.
[ 1108.110586][T25154] xt_policy: too many policy elements
[ 1108.122807][T25156] x_tables: duplicate underflow at hook 4
[ 1108.502359][T25168] binder: Bad value for 'max'
[ 1108.563407][T25166] loop2: detected capacity change from 0 to 4096
[ 1108.775120][T25173] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1108.912919][T25177] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[ 1109.032677][T25181] netlink: 'syz.1.8739': attribute type 9 has an invalid length.
[ 1109.101489][T25181] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.8739'.
[ 1109.607084][T25199] loop1: detected capacity change from 0 to 64
[ 1109.905856][T25207] loop1: detected capacity change from 0 to 512
[ 1109.977489][T25207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1110.011571][T25207] ext4 filesystem being mounted at /2137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1110.257401][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1110.464205][T21814] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 1110.576654][T25205] loop2: detected capacity change from 0 to 32768
[ 1110.623427][T25205] JBD2: Ignoring recovery information on journal
[ 1110.671701][T21814] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1110.731391][T21814] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1110.789363][T21814] usb 1-1: Product: syz
[ 1110.793771][T21814] usb 1-1: SerialNumber: syz
[ 1110.828399][T25205] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1110.839891][T21814] usb 1-1: config 0 descriptor??
[ 1111.093291][T21814] hso 1-1:0.0: Can't find BULK IN endpoint
[ 1111.233509][ T5770] ocfs2: Unmounting device (7,2) on (node local)
[ 1111.328965][T21814] usb 1-1: USB disconnect, device number 59
[ 1111.853223][T25258] netlink: 'syz.2.8773': attribute type 3 has an invalid length.
[ 1112.262782][T25271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8780'.
[ 1112.296000][T25271] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1112.387710][    T8] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[ 1112.609293][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1112.634856][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2048, setting to 64
[ 1112.653325][    T8] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[ 1112.681464][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.693110][    T8] usb 3-1: config 0 descriptor??
[ 1112.783322][T21814] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1112.847496][    T8] rc_core: IR keymap rc-xbox-dvd not found
[ 1112.855979][    T8] Registered IR keymap rc-empty
[ 1112.866921][    T8] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1112.885287][    T8] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input75
[ 1113.019814][T21814] usb 1-1: Using ep0 maxpacket: 32
[ 1113.027251][   T28] usb 3-1: USB disconnect, device number 56
[ 1113.027274][    C0] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[ 1113.042088][T21814] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1113.083495][T21814] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1113.112263][T21814] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1113.140344][T21814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.173304][T21814] usb 1-1: config 0 descriptor??
[ 1113.447385][T21814] usbhid 1-1:0.0: can't add hid device: -71
[ 1113.453487][T21814] usbhid: probe of 1-1:0.0 failed with error -71
[ 1113.490204][T21814] usb 1-1: USB disconnect, device number 60
[ 1113.599279][T25299] bond4: entered promiscuous mode
[ 1113.617809][T25299] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1113.859704][T25309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8796'.
[ 1114.130925][T25317] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8803'.
[ 1114.343726][T25323] loop3: detected capacity change from 0 to 1024
[ 1114.386380][T25323] EXT4-fs: inline encryption not supported
[ 1114.458847][T25323] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1114.475609][T25328] i2c i2c-0: Invalid block write size 252
[ 1114.507864][T25323] EXT4-fs (loop3): 1 truncate cleaned up
[ 1114.544167][T25323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1114.759384][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1114.761093][T25313] loop2: detected capacity change from 0 to 32768
[ 1114.852995][T25313] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1114.885088][T25331] ieee802154 phy0 wpan0: encryption failed: -90
[ 1114.989002][T25313] XFS (loop2): Ending clean mount
[ 1115.268497][T25341] loop3: detected capacity change from 0 to 8192
[ 1115.365553][T25341]  loop3: p1[EZD] p2 p3 p4
[ 1115.372580][ T5770] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1115.375159][T25341] loop3: partition table partially beyond EOD, truncated
[ 1115.425765][T25341] loop3: p1 size 32768 extends beyond EOD, truncated
[ 1115.478544][T25341] loop3: p2 start 930308 is beyond EOD, truncated
[ 1115.509358][T25341] loop3: p3 start 117772289 is beyond EOD, truncated
[ 1115.552805][T25341] loop3: p4 size 262144 extends beyond EOD, truncated
[ 1116.105831][T25356] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8817'.
[ 1116.156330][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8817'.
[ 1116.186030][ T9054] udevd[9054]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[ 1116.192048][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[ 1116.215034][T25356] tc_dump_action: action bad kind
[ 1117.628364][T25408] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8842'.
[ 1118.017654][T25419] loop1: detected capacity change from 0 to 512
[ 1118.125554][T25419] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.8847: corrupted in-inode xattr: e_name out of bounds
[ 1118.229272][T25419] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.8847: couldn't read orphan inode 15 (err -117)
[ 1118.284430][T25419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1118.417938][T25419] EXT4-fs error (device loop1): ext4_xattr_set_entry:1672: inode #2: comm syz.1.8847: corrupted xattr entries
[ 1118.563125][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1118.706307][T25433] netlink: 'syz.0.8854': attribute type 5 has an invalid length.
[ 1118.734427][T25416] loop3: detected capacity change from 0 to 32768
[ 1118.847013][T25416] JBD2: Ignoring recovery information on journal
[ 1118.945200][T25416] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1119.041186][T25441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8856'.
[ 1119.137701][T25416] (syz.3.8846,25416,1):ocfs2_mknod:502 ERROR: status = -31
[ 1119.145196][T25416] (syz.3.8846,25416,1):ocfs2_mkdir:659 ERROR: status = -31
[ 1119.348608][ T5773] ocfs2: Unmounting device (7,3) on (node local)
[ 1119.593231][   T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1119.821435][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1119.840854][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1119.861709][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1119.876562][   T10] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1119.910983][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1119.936337][   T10] usb 2-1: Product: syz
[ 1119.944134][   T10] usb 2-1: Manufacturer: syz
[ 1119.952573][   T10] usb 2-1: SerialNumber: syz
[ 1119.976937][   T10] usb 2-1: selecting invalid altsetting 1
[ 1120.010791][   T10] usb 2-1: unit 6 not found!
[ 1120.054617][   T10] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[ 1120.153180][ T9054] udevd[9054]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1120.292155][   T10] usb 2-1: USB disconnect, device number 61
[ 1121.274673][T25470] loop2: detected capacity change from 0 to 32768
[ 1121.427820][T25470] JBD2: Ignoring recovery information on journal
[ 1121.447246][T25497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8883'.
[ 1121.569109][T25470] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1121.779784][T25470] (syz.2.8870,25470,0):ocfs2_mknod:502 ERROR: status = -31
[ 1121.802215][T25470] (syz.2.8870,25470,0):ocfs2_mkdir:659 ERROR: status = -31
[ 1121.974862][ T5770] ocfs2: Unmounting device (7,2) on (node local)
[ 1122.308215][T25516] loop1: detected capacity change from 0 to 4096
[ 1122.346359][T25516] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[ 1122.392340][T25520] loop3: detected capacity change from 0 to 1024
[ 1122.490464][T25516] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[ 1122.505660][ T9054] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1122.693616][T25524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8891'.
[ 1122.725543][T25524] bridge_slave_1: left allmulticast mode
[ 1122.731282][T25524] bridge_slave_1: left promiscuous mode
[ 1122.820537][T25524] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1122.943010][T25524] bridge_slave_0: left allmulticast mode
[ 1122.965888][T25529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1122.978285][T25524] bridge_slave_0: left promiscuous mode
[ 1122.999916][T25524] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1123.744280][T25549] netlink: 'syz.0.8907': attribute type 3 has an invalid length.
[ 1124.142120][T25559] tc_dump_action: action bad kind
[ 1124.382688][T25569] netlink: 'syz.2.8918': attribute type 3 has an invalid length.
[ 1125.686832][T25618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8942'.
[ 1125.695830][T25618] bridge_slave_1: left allmulticast mode
[ 1125.725701][T25618] bridge_slave_1: left promiscuous mode
[ 1125.746590][T25618] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1125.762729][T25618] bridge_slave_0: left allmulticast mode
[ 1125.768644][T25618] bridge_slave_0: left promiscuous mode
[ 1125.778077][T25618] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1126.094356][T25621] bond0: entered allmulticast mode
[ 1126.214320][T25635] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.8949'.
[ 1126.464070][T25643] ip6gretap0: entered promiscuous mode
[ 1127.098569][T25659] ==================================================================
[ 1127.106746][T25659] BUG: KASAN: slab-use-after-free in skb_release_head_state+0x3b/0x240
[ 1127.115203][T25659] Read of size 8 at addr ffff88807b15e558 by task syz.0.8962/25659
[ 1127.123217][T25659] 
[ 1127.125603][T25659] CPU: 1 PID: 25659 Comm: syz.0.8962 Not tainted syzkaller #0
[ 1127.133117][T25659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1127.143246][T25659] Call Trace:
[ 1127.146597][T25659]  <TASK>
[ 1127.149589][T25659]  dump_stack_lvl+0x18c/0x250
[ 1127.154358][T25659]  ? read_lock_is_recursive+0x20/0x20
[ 1127.159833][T25659]  ? show_regs_print_info+0x20/0x20
[ 1127.165090][T25659]  ? load_image+0x420/0x420
[ 1127.169641][T25659]  ? _raw_spin_lock_irqsave+0xc0/0x100
[ 1127.175192][T25659]  ? __virt_addr_valid+0x10c/0x380
[ 1127.180355][T25659]  ? __virt_addr_valid+0x10c/0x380
[ 1127.185518][T25659]  ? __virt_addr_valid+0x10c/0x380
[ 1127.190678][T25659]  print_report+0xa8/0x210
[ 1127.195250][T25659]  ? skb_release_head_state+0x3b/0x240
[ 1127.200806][T25659]  kasan_report+0x117/0x150
[ 1127.205369][T25659]  ? wq_worker_last_func+0x40/0x40
[ 1127.210598][T25659]  ? skb_release_head_state+0x3b/0x240
[ 1127.216114][T25659]  skb_release_head_state+0x3b/0x240
[ 1127.221451][T25659]  kfree_skb_reason+0xd7/0x170
[ 1127.226286][T25659]  __hci_req_sync+0x67e/0x960
[ 1127.231213][T25659]  ? __mutex_lock+0x30d/0xc80
[ 1127.235937][T25659]  ? hci_req_sync_complete+0x280/0x280
[ 1127.241448][T25659]  ? mutex_lock_nested+0x20/0x20
[ 1127.246427][T25659]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1127.252091][T25659]  ? mutex_unlock+0x10/0x10
[ 1127.256626][T25659]  ? hci_inquiry+0x600/0x600
[ 1127.261355][T25659]  hci_req_sync+0xa2/0xc0
[ 1127.265720][T25659]  hci_inquiry+0x38e/0x600
[ 1127.270180][T25659]  ? hci_remove_remote_oob_data+0x250/0x250
[ 1127.276114][T25659]  ? remove_advertising_complete+0x240/0x410
[ 1127.282198][T25659]  ? hci_sock_ioctl+0x51e/0x9f0
[ 1127.287097][T25659]  sock_do_ioctl+0xfc/0x310
[ 1127.291650][T25659]  ? sock_show_fdinfo+0xb0/0xb0
[ 1127.296540][T25659]  sock_ioctl+0x5be/0x7e0
[ 1127.300919][T25659]  ? sock_poll+0x3e0/0x3e0
[ 1127.305388][T25659]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1127.310383][T25659]  ? security_file_ioctl+0x80/0xa0
[ 1127.315533][T25659]  ? sock_poll+0x3e0/0x3e0
[ 1127.319983][T25659]  __se_sys_ioctl+0xfd/0x170
[ 1127.324617][T25659]  do_syscall_64+0x55/0xb0
[ 1127.329070][T25659]  ? clear_bhb_loop+0x40/0x90
[ 1127.333861][T25659]  ? clear_bhb_loop+0x40/0x90
[ 1127.338567][T25659]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1127.344499][T25659] RIP: 0033:0x7f8e1dd9de59
[ 1127.349026][T25659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1127.368676][T25659] RSP: 002b:00007f8e1ebea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1127.377148][T25659] RAX: ffffffffffffffda RBX: 00007f8e1e025fa0 RCX: 00007f8e1dd9de59
[ 1127.385581][T25659] RDX: 0000200000000080 RSI: 00000000800448f0 RDI: 0000000000000004
[ 1127.393674][T25659] RBP: 00007f8e1de33e6f R08: 0000000000000000 R09: 0000000000000000
[ 1127.401678][T25659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1127.409684][T25659] R13: 00007f8e1e026038 R14: 00007f8e1e025fa0 R15: 00007ffec95b7b08
[ 1127.417696][T25659]  </TASK>
[ 1127.420746][T25659] 
[ 1127.423095][T25659] Allocated by task 51:
[ 1127.427297][T25659]  kasan_set_track+0x4e/0x70
[ 1127.431927][T25659]  __kasan_slab_alloc+0x6c/0x80
[ 1127.436807][T25659]  slab_post_alloc_hook+0x6a/0x4d0
[ 1127.441963][T25659]  kmem_cache_alloc+0x17e/0x2c0
[ 1127.446847][T25659]  skb_clone+0x1eb/0x370
[ 1127.451253][T25659]  hci_cmd_work+0x25d/0x620
[ 1127.455848][T25659]  process_scheduled_works+0xa60/0x1600
[ 1127.461444][T25659]  worker_thread+0xa5e/0xfe0
[ 1127.466083][T25659]  kthread+0x2fa/0x390
[ 1127.470187][T25659]  ret_from_fork+0x48/0x80
[ 1127.474641][T25659]  ret_from_fork_asm+0x11/0x20
[ 1127.479476][T25659] 
[ 1127.481823][T25659] Freed by task 5778:
[ 1127.485820][T25659]  kasan_set_track+0x4e/0x70
[ 1127.490448][T25659]  kasan_save_free_info+0x28/0x40
[ 1127.495511][T25659]  ____kasan_slab_free+0x126/0x1f0
[ 1127.500655][T25659]  slab_free_freelist_hook+0x130/0x1a0
[ 1127.506138][T25659]  kmem_cache_free+0xf8/0x290
[ 1127.510859][T25659]  hci_cmd_work+0x230/0x620
[ 1127.515430][T25659]  process_scheduled_works+0xa60/0x1600
[ 1127.521013][T25659]  worker_thread+0xa5e/0xfe0
[ 1127.525645][T25659]  kthread+0x2fa/0x390
[ 1127.529735][T25659]  ret_from_fork+0x48/0x80
[ 1127.534194][T25659]  ret_from_fork_asm+0x11/0x20
[ 1127.538988][T25659] 
[ 1127.541325][T25659] The buggy address belongs to the object at ffff88807b15e500
[ 1127.541325][T25659]  which belongs to the cache skbuff_head_cache of size 240
[ 1127.555953][T25659] The buggy address is located 88 bytes inside of
[ 1127.555953][T25659]  freed 240-byte region [ffff88807b15e500, ffff88807b15e5f0)
[ 1127.569776][T25659] 
[ 1127.572155][T25659] The buggy address belongs to the physical page:
[ 1127.578684][T25659] page:ffffea0001ec5780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b15e
[ 1127.588867][T25659] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 1127.596454][T25659] page_type: 0xffffffff()
[ 1127.600833][T25659] raw: 00fff00000000800 ffff88801da4e000 dead000000000100 dead000000000122
[ 1127.609444][T25659] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000
[ 1127.618064][T25659] page dumped because: kasan: bad access detected
[ 1127.624521][T25659] page_owner tracks the page as allocated
[ 1127.630262][T25659] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x132820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_MEMALLOC|__GFP_HARDWALL), pid 5859, tgid 5859 (syz-executor), ts 91952961702, free_ts 91897013083
[ 1127.651317][T25659]  post_alloc_hook+0x1c1/0x200
[ 1127.656129][T25659]  get_page_from_freelist+0x2181/0x22a0
[ 1127.661702][T25659]  __alloc_pages+0x1f0/0x460
[ 1127.666316][T25659]  alloc_slab_page+0x5d/0x180
[ 1127.671022][T25659]  new_slab+0x87/0x2d0
[ 1127.675125][T25659]  ___slab_alloc+0xc5c/0x12f0
[ 1127.679832][T25659]  kmem_cache_alloc_node+0x12e/0x310
[ 1127.685415][T25659]  __alloc_skb+0x103/0x2c0
[ 1127.689874][T25659]  __netdev_alloc_skb+0x10c/0x500
[ 1127.694935][T25659]  __ieee80211_beacon_get+0xd5d/0x1520
[ 1127.700570][T25659]  ieee80211_beacon_get_tim+0xbf/0x580
[ 1127.706073][T25659]  mac80211_hwsim_beacon_tx+0x3bd/0x770
[ 1127.711649][T25659]  __iterate_interfaces+0x225/0x4c0
[ 1127.716960][T25659]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[ 1127.724030][T25659]  mac80211_hwsim_beacon+0xbb/0x1b0
[ 1127.729262][T25659]  __hrtimer_run_queues+0x525/0xc10
[ 1127.734586][T25659] page last free stack trace:
[ 1127.739289][T25659]  free_unref_page_prepare+0x7d7/0x8f0
[ 1127.744788][T25659]  free_unref_page+0x32/0x2e0
[ 1127.749503][T25659]  __unfreeze_partials+0x1cf/0x210
[ 1127.754646][T25659]  put_cpu_partial+0x17c/0x250
[ 1127.759440][T25659]  __slab_free+0x319/0x400
[ 1127.763884][T25659]  qlist_free_all+0x75/0xd0
[ 1127.768423][T25659]  kasan_quarantine_reduce+0x143/0x160
[ 1127.774097][T25659]  __kasan_slab_alloc+0x22/0x80
[ 1127.778980][T25659]  slab_post_alloc_hook+0x6a/0x4d0
[ 1127.784131][T25659]  kmem_cache_alloc+0x17e/0x2c0
[ 1127.789051][T25659]  getname_flags+0xbb/0x500
[ 1127.793595][T25659]  vfs_fstatat+0x111/0x1b0
[ 1127.798047][T25659]  __x64_sys_newfstatat+0x149/0x1f0
[ 1127.803367][T25659]  do_syscall_64+0x55/0xb0
[ 1127.807829][T25659]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1127.813774][T25659] 
[ 1127.816132][T25659] Memory state around the buggy address:
[ 1127.821796][T25659]  ffff88807b15e400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1127.829887][T25659]  ffff88807b15e480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc
[ 1127.837971][T25659] >ffff88807b15e500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1127.846051][T25659]                                                     ^
[ 1127.853012][T25659]  ffff88807b15e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[ 1127.861102][T25659]  ffff88807b15e600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 1127.869308][T25659] ==================================================================
[ 1127.940772][T25659] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1127.948069][T25659] CPU: 0 PID: 25659 Comm: syz.0.8962 Not tainted syzkaller #0
[ 1127.955660][T25659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1127.965771][T25659] Call Trace:
[ 1127.969103][T25659]  <TASK>
[ 1127.972090][T25659]  dump_stack_lvl+0x18c/0x250
[ 1127.976944][T25659]  ? show_regs_print_info+0x20/0x20
[ 1127.982221][T25659]  ? load_image+0x420/0x420
[ 1127.986899][T25659]  panic+0x2ca/0x720
[ 1127.990866][T25659]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1127.997193][T25659]  ? bpf_jit_dump+0xd0/0xd0
[ 1128.001780][T25659]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[ 1128.007830][T25659]  ? _raw_spin_unlock+0x40/0x40
[ 1128.012752][T25659]  ? skb_release_head_state+0x3b/0x240
[ 1128.018303][T25659]  check_panic_on_warn+0x84/0xa0
[ 1128.023403][T25659]  ? skb_release_head_state+0x3b/0x240
[ 1128.028933][T25659]  end_report+0x6f/0x130
[ 1128.033240][T25659]  kasan_report+0x128/0x150
[ 1128.037821][T25659]  ? wq_worker_last_func+0x40/0x40
[ 1128.043253][T25659]  ? skb_release_head_state+0x3b/0x240
[ 1128.048836][T25659]  skb_release_head_state+0x3b/0x240
[ 1128.054222][T25659]  kfree_skb_reason+0xd7/0x170
[ 1128.059061][T25659]  __hci_req_sync+0x67e/0x960
[ 1128.063801][T25659]  ? __mutex_lock+0x30d/0xc80
[ 1128.068539][T25659]  ? hci_req_sync_complete+0x280/0x280
[ 1128.074059][T25659]  ? mutex_lock_nested+0x20/0x20
[ 1128.079056][T25659]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1128.084740][T25659]  ? mutex_unlock+0x10/0x10
[ 1128.089295][T25659]  ? hci_inquiry+0x600/0x600
[ 1128.093941][T25659]  hci_req_sync+0xa2/0xc0
[ 1128.098312][T25659]  hci_inquiry+0x38e/0x600
[ 1128.102789][T25659]  ? hci_remove_remote_oob_data+0x250/0x250
[ 1128.108745][T25659]  ? remove_advertising_complete+0x240/0x410
[ 1128.114812][T25659]  ? hci_sock_ioctl+0x51e/0x9f0
[ 1128.119706][T25659]  sock_do_ioctl+0xfc/0x310
[ 1128.124247][T25659]  ? sock_show_fdinfo+0xb0/0xb0
[ 1128.129171][T25659]  sock_ioctl+0x5be/0x7e0
[ 1128.133630][T25659]  ? sock_poll+0x3e0/0x3e0
[ 1128.138084][T25659]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1128.143149][T25659]  ? security_file_ioctl+0x80/0xa0
[ 1128.148417][T25659]  ? sock_poll+0x3e0/0x3e0
[ 1128.152893][T25659]  __se_sys_ioctl+0xfd/0x170
[ 1128.157641][T25659]  do_syscall_64+0x55/0xb0
[ 1128.162123][T25659]  ? clear_bhb_loop+0x40/0x90
[ 1128.166840][T25659]  ? clear_bhb_loop+0x40/0x90
[ 1128.171655][T25659]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1128.177616][T25659] RIP: 0033:0x7f8e1dd9de59
[ 1128.182136][T25659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1128.201795][T25659] RSP: 002b:00007f8e1ebea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1128.210258][T25659] RAX: ffffffffffffffda RBX: 00007f8e1e025fa0 RCX: 00007f8e1dd9de59
[ 1128.218258][T25659] RDX: 0000200000000080 RSI: 00000000800448f0 RDI: 0000000000000004
[ 1128.226260][T25659] RBP: 00007f8e1de33e6f R08: 0000000000000000 R09: 0000000000000000
[ 1128.234379][T25659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1128.242390][T25659] R13: 00007f8e1e026038 R14: 00007f8e1e025fa0 R15: 00007ffec95b7b08
[ 1128.250427][T25659]  </TASK>
[ 1128.254069][T25659] Kernel Offset: disabled
[ 1128.258422][T25659] Rebooting in 86400 seconds..