last executing test programs:

1m56.079286785s ago: executing program 2 (id=13343):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c0000007a006bcd9e3fe3dc6e08000007200000010000204da60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1931fe71197ef", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m55.946381523s ago: executing program 2 (id=13345):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)=ANY=[@ANYBLOB="240000003a0007010000fbffffffffff027c0000040000000c000180060006"], 0x24}}, 0x0)

1m55.739601564s ago: executing program 2 (id=13351):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xfb, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x82, 0x6, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x154}}, 0x4c0c8)

1m55.586009833s ago: executing program 2 (id=13354):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1m55.250695674s ago: executing program 2 (id=13358):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x0, 0x317, 0x0, 0xeb, 0x10001, 0x6a0}, 0x1c)

1m55.065819024s ago: executing program 2 (id=13360):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860188a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m54.604537671s ago: executing program 32 (id=13360):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860188a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.859926395s ago: executing program 1 (id=15187):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3.530291805s ago: executing program 1 (id=15193):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xfffffffd, 0x1})

3.250306681s ago: executing program 1 (id=15199):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000440)={[{@clear_cache}, {@user_subvol_rm}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x101}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000001380)=ANY=[], 0xe6f, 0x0)

2.802141007s ago: executing program 3 (id=15207):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000024c0)={0x814, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x804, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @nested={0x7e4, 0x1e, 0x0, 0x1, [@nested={0x591, 0x60, 0x0, 0x1, [@generic="6bc4c174d64011cd6b50ff3c1347a8ca709ab141cb14b9697d227d89a60799bc232e8b3af8b542d494764b328b79396f5331", @nested={0x4a1, 0xd5, 0x0, 0x1, [@nested={0x2c, 0x139, 0x0, 0x1, [@typed={0x5, 0x3, 0x0, 0x0, @binary='6'}, @typed={0x14, 0x112, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0xc, 0x71, 0x0, 0x0, @u64=0x2}]}, @typed={0x8, 0xb8, 0x0, 0x0, @fd}, @nested={0x315, 0x21, 0x0, 0x1, [@generic="0bbc1709e740c97cfa7f34eeb3b2a660cb55ded69100834ce9f0d2e693dd02797dd6e9178d186cc467c6a9d9b309fc7ad884fd30287a9a54095e61acdfe85aad20a775b0920ee333de5605c0bf711ada5739deae1ac6d9e76ad97d4f00114234b8a4b5", @nested={0x4, 0x29}, @generic="64d5541770251a0741b9d3f0e7816ea76c8385fd34bab8353e7eb2a7103085d314d01a1519f0524ddb028cbe01bc13183486998f4d94891d10fe8489fc8b2e", @generic="c55e3e347d4e865d63c24f1a10c00ba98d6edd42b4c7c8c9200f8d097107fc17efc607e5521e9f97c8e68e340f0134629eb85c6caa10", @typed={0x19, 0xa9, 0x0, 0x0, @str='\\.{^x)^({,@]:\xfb}-i.)-\x00'}, @typed={0x71, 0xd5, 0x0, 0x0, @binary="b6a45de63544645e0c9caacb0d1541e954b2fe9a4824b0f39ffa9fe28d7ec51a5c934c9b0fa6138d76e855b8df3ac1857c650c3712b2c7cd0461ab63c1e0fcc8b3bf6e65d9a1337304f0a34a9bb3214a190effffff7f00000000b7053f2eb4be3910d1de93d0faf6e3bbbfd42f"}, @generic="ab3f1360d3b9f8f56f26e77a228d134ba6142c864cd0cad0cfb355c0b5812a5b33261a32ddedc3a99705bb25501b44c147140821f8bbaf909f41d45910df3af4498a00facc321add820328e42a6cf02a10283741637e6e692eb4a39fe4617f75bd67f70bf739d7d551f65684dc2a5f10672221513127593349fcd3014575f1ccb5805f4d1166e914170f710cb6c9c82355d0b8dad29588c699230aac6231aeacacdb1c1916a860792d5e05e895a279ca45e2f61b0b2ea45bc5fa75b8b276e5830a0d2aefc593e042399ed34c50f12c083ef9ef1b7d", @typed={0x8, 0x128, 0x0, 0x0, @pid}, @generic="9fed3dabf3c944a219d7920d950bd11790225f608f8cc5b8ad587ae2fe830acddcc7a1946075ff8271309a0934964782aea71d16ed1970cbc52214dca53dde33b186aedbb2faacc5ac0b78c5d189385ad54852e962a7ac1a758aa2aa9d94bc7bd45eee7e3c0222f0884486ed824dfe28585d2740745bf84b19090a9b0b41b4c936812f8d25ec907f46a7d83c37d7998d62f1d087a106e456d09686b7de8f3cc6fdde0d06f758843d99f71ef61e7c7c47c89cff29f71ba266613541773a6e2e31c65fcfff071a90b7"]}, @generic="d424b7875bb14d2955305c4a5fdff6de600a4af2c1b8e49dedb61b5977c960a46da7c9fa7406da4cac756b83ab1dfe034f55c6afd7ecb49d685b0be886559b8de5e4d4832066cdece4ec2791080a0e23f08fe6f000d67ef09e3099c5013af4fedc13546a67642a182e7edf56760efdc808061790a7db09", @generic="05122cf414f2617e8fa3475a3a9c3cf0c62154d9f40b0f06145cb2bd1ba0a1899b721dcc2ba70722e98a75cb0dcdf2bf3b9a46a204785a5b7e775a1d611ea2e21ec52fec268675104a895186e19c201f877b314c17118ed6edf2cb54d421c2d8d3bf6be14a8066d726154f6976c7ed6b4e9bbddb80fbf2042f930a2031f378b7588bc55364ce3e98e98120302e74c3009ebaf60a6ce0438aa417d46c17363e6d40ce5615a8bf01b5db03", @nested={0x1d, 0x79, 0x0, 0x1, [@generic="82e5138aae3ac5dad4716b40bf77ce9537bdcbe31a59f92d56"]}, @typed={0x8, 0x18, 0x0, 0x0, @fd}, @typed={0x8, 0x56, 0x0, 0x0, @uid}]}, @generic="2e5989b82a57050f649fabf954f96c70cbe0a8925b21922406b1be8ad2c4e18c97b1ccffb8525b485536290ec11562748f26d9e9ecbcbef3566a3844800a2c7faa640f69fd66270ededc403a1ef5918bc3df05a96ebd0a50549d503c78c3bd269d6d08b29e133cbd1caa1ff318d8ca9370416d1ee3783c75125e1fa85559b7bf813703b6305d1d18422ef490e4ac0d8cfd9ece54b80c4b316561fd95780995964ab7e44af71016c7a0eeb087284d51", @typed={0x8, 0xb2, 0x0, 0x0, @uid}]}, @nested={0x1c, 0xd1, 0x0, 0x1, [@typed={0xc, 0xb0, 0x0, 0x0, @u64=0x87cd}, @nested={0x4, 0x15}, @typed={0x8, 0x113, 0x0, 0x0, @fd}]}, @nested={0xc1, 0x1d, 0x0, 0x1, [@nested={0x4, 0xec}, @generic="e132267ad6d61c5951830e095658b9d7d9930ffe442164d77a06993dd67539f2b50aacd9e7dac3d6aec7d516cc77dffd9119f3effae7dd8f34ed6252407aa386cd9c3fb1d7e328a38839e9a0543c7242c47ac50751516e2d49a8890a7145516ba1e2e5caed15ad134971c7a524230634871428d5a5e1dbc4dc266aa28760f5cb72b3c4e197c88e7ace47bc3a483dcb36276e82de87507765e4e358cdfca433a0268eebe16b1cd356166bc23105e1d285ad33816488", @nested={0x4, 0x5b}]}, @nested={0x15d, 0x10f, 0x0, 0x1, [@nested={0x4, 0xd}, @typed={0x69, 0x34, 0x0, 0x0, @binary="fc97868e88733d7f7dc175138fba0350155c900480e948fb786b4616b37a295195462d7b43a7515b630e1b3ac1785c7c7c0eb0f609ef71a0cb52b9ee15262c4467cbad008a85a53822528faac877c04a2befec02f2db3097710e0af8e861844682ed547137"}, @generic="05ae26ca5095b47b49c7c510afeb5b2f82e69ca0d5498c4c043d769a41869df532705830b8dec8dc211d9b038f2552ae31a4bf5774574c1587cb39597a1863b89731f9a8f6cb0a105d997a687ba37c416c4d33c8037073a885c3876cac6687e9a73e97588eb71432465460cad07b65a03119dbdfc5f0600a911ba67582ff6da412f37c892e40f0b786a3731a114dae5ba74d06b8a95dd44993f49970c3f5d977d8d58dc814165bafbf0047d37bf3ba0657412bcfc2df8bb155bf56fbf6bd1f95e6f376260accbfa68996003a5a3597bce5d336c7f708c9b147cfd1d8936d162c8d858970fb15be0cb1"]}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x10}]}]}]}, 0x814}], 0x1}, 0x0)

2.386066681s ago: executing program 3 (id=15213):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a0080201400000400050000081e0e0009"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

2.06875563s ago: executing program 3 (id=15217):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x2c, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

1.71833946s ago: executing program 3 (id=15224):
syz_socket_connect_nvme_tcp()
syz_read_part_table(0x105b, &(0x7f0000002100)="$eJzsz7FtwkAYBeB3jmPHRaR0abNU5kkovAIdC7ACDUswC5V1yGA39AghfZ9OundPp1/6w1Md6l8yzKlJl8/M51j+k0zd9642y7fTR7IpSZs++Xpb2vckP2PWZ5+U9m5+uV11uxbtOEz1ms5DfveP3g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXsElAAD//4EoDrc=")

1.415967138s ago: executing program 5 (id=15229):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)

1.311999474s ago: executing program 4 (id=15230):
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

1.118951725s ago: executing program 4 (id=15232):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000001e00)=0x8001)

1.115484755s ago: executing program 1 (id=15233):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x3d, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f00000002c0)=0x10)

1.055643658s ago: executing program 0 (id=15234):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="9b03397272edd9fd7b0b7345d3ed", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c)

895.550688ms ago: executing program 5 (id=15235):
r0 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22, 0xffffffff}}, 0x10)

895.413458ms ago: executing program 4 (id=15236):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0)

886.097949ms ago: executing program 0 (id=15237):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xb, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000004b40)={0x1, @vbi={0x0, 0x0, 0x56595559}})

758.767676ms ago: executing program 3 (id=15238):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000500)="5800000014001923fc834b80040d8c5620067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080cefffff88287da26daf0f", 0x58}], 0x1)

731.347038ms ago: executing program 4 (id=15239):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)

686.77804ms ago: executing program 0 (id=15240):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1ff, @none, 0xb, 0x1}, 0x4)

679.035401ms ago: executing program 5 (id=15241):
r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0})

579.133337ms ago: executing program 1 (id=15242):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000180)={'wlan1\x00'})

521.62968ms ago: executing program 4 (id=15243):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000300)={0x0, 0x0, 0x0})

516.319841ms ago: executing program 5 (id=15244):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0, @in=@remote, 0xfffc, 0x0, 0x0, 0x4, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, @in6=@mcast1, 0x33, 0x3, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000)

478.302223ms ago: executing program 0 (id=15245):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x14, 0x4)

348.7789ms ago: executing program 1 (id=15246):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc)

326.916381ms ago: executing program 4 (id=15247):
syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11c1, &(0x7f0000001240)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)

326.450351ms ago: executing program 3 (id=15248):
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x4}}}}}}}, 0x0)
syz_emit_ethernet(0x4f, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a12600", 0x19, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x13, 0x0, 0x0, {[@window={0x3, 0x3}]}}, {'`'}}}}}}}, 0x0)

323.108381ms ago: executing program 5 (id=15249):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$eJzs3U1rE08cB/Dv7KZN+m/pf7UVwYNINWAvovUiXiIlL8KTqE0KxSWitviAYBVPIvbu3aNXX4N4UQTP9eRJPHiqBxmZh2SfN6lmd1P9fsCy2dmZ/e3OzlPALIjon7Xa3n11/ov6JwAXLvDsIuAAaAA1AEdwtLHV29zY9LudvIJcHK+bXAImp0gcs9brpmVtwOawPPWphrnwPiqGlPLS56qDoMrp1i/d6M4Tuieo29apExsVxZfl8f6zfJsBsF1EMBMlv6bEHvZwD/OlhUNERBNJmPHdseP8nJ2/Ow7QtIOJSpu48f937VUdQOFkbmpo/NerLClUvf+vk4L1nl7CqXSnv0pMK+t17PNU7PM0zNMTmV2KYatKHYszs77hd8+s3fQ7Dp6gZYUOW9R/O/bxtCLR1hNFL6WsTXMMSpvJPESkzyhn9TVMqWtYMfHfBRCJfyH3jAUQ78QHcUV4eInOYP5Xk0JVk64pL1ZTJv6z2SXqq/TUUbDdRqvVciKHHNInOWbPYA25ygbcrDNO2zIjXxB4w+LUuQ7HcpmrOzck10JqrhW9vQwnI9diJJe6mvUN/232qUohXojLYglf8Qbt0PzfUfE1kWyZoYc+aDWiaYYCfcdV64zWbEitaXsiPXJsfdp9aPYnm8vgLiYbrPUjv0+jfXiO67iA+Tv3H9xwfb97W21c89XjqjcGe27N2Q2/O/UUCCdNyga2gz11SC1xcH9QKjOw5bEWqPqPlCTVsHrf+3tUKxtW4KM/jUf1A4XeutkRrmJ/G/2uazwFtt+P50HqTxsiST+llCU2oh17Z+JJ1XRLVK6g0kc7PmWqQwebqlJh1n/BeqVmJnvqj5c6Tx/xiwBbolRz7MEKLsgrzYwcwH85K7i0YjNXcMk1V2LNqNdcJ08Dp0Y/o2fj/EuINj7iKr//JyIiIiIiIiIiIiIiIiIiIiIiIiI6aMr4zzBVXyMRERERERERERERERERERERERERERER0UG32oD53Wv03/+L0d7/G38Vi2t+Enws7//d6YHv/yUq3q8AAAD///B/c8c=")
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b)

247.488506ms ago: executing program 0 (id=15250):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000009180)={0x0, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000091c0)=0x10)

62.402157ms ago: executing program 0 (id=15251):
r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x5, "dece905616409637e240ea66048e50a19b0c1d5938f8aa76c74ef915397c4190ab11f0bb294e5df033e8f245374c355b0d945fa775fae27bca39ceb73e9ba8a8", {0x4, 0x10}})

0s ago: executing program 5 (id=15252):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000001c0))

kernel console output (not intermixed with test programs):

und, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  836.594082][ T4494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.630279][ T4494] usb 4-1: config 0 descriptor??
[  836.635586][ T4496] usb 2-1: Using ep0 maxpacket: 8
[  836.642268][ T4496] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  836.651627][ T4496] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  836.662142][ T4496] usb 2-1: config 6 has no interface number 0
[  836.668631][ T4496] usb 2-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  836.717168][ T4496] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  836.738458][ T4496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.759990][T10530] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.764736][ T4496] usb 2-1: Product: syz
[  836.797020][ T4496] usb 2-1: Manufacturer: syz
[  836.801686][ T4496] usb 2-1: SerialNumber: syz
[  836.835002][ T4496] hso 2-1:6.2: Failed to find INT IN ep
[  836.872662][ T4494] usb 4-1: string descriptor 0 read error: -71
[  836.885696][ T4494] usb-storage 4-1:0.168: USB Mass Storage device detected
[  836.925852][ T4494] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2
[  836.994435][ T4494] usb 4-1: USB disconnect, device number 63
[  837.024425][T10530] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.042062][ T4496] usb 2-1: USB disconnect, device number 61
[  837.148582][T10530] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.297780][T10530] bond0: (slave netdevsim0): Releasing backup interface
[  837.317414][T10530] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.792055][T32502] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  837.804178][T32502] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  837.812917][T32502] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  837.822606][T32502] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  837.833213][T32502] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  837.840845][T32502] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  838.034135][  T313] tmpfs: Bad value for 'mpol'
[  838.220408][ T4496] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  838.423700][ T4496] usb 1-1: Using ep0 maxpacket: 16
[  838.441100][ T4496] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  838.458832][ T4496] usb 1-1: config 0 descriptor has 1 excess byte, ignoring
[  838.483594][ T4496] usb 1-1: config 0 has no interface number 0
[  838.492005][ T4496] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  838.523905][ T4496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.535519][ T4496] usb 1-1: Product: syz
[  838.539731][ T4496] usb 1-1: Manufacturer: syz
[  838.569107][ T4496] usb 1-1: SerialNumber: syz
[  838.577806][  T318] netlink: 'syz.3.13375': attribute type 21 has an invalid length.
[  838.596899][ T4496] usb 1-1: config 0 descriptor??
[  838.597850][  T318] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13375'.
[  838.652469][  T318] netlink: 'syz.3.13375': attribute type 5 has an invalid length.
[  838.679844][  T318] netlink: 'syz.3.13375': attribute type 6 has an invalid length.
[  838.715249][  T318] netlink: 3 bytes leftover after parsing attributes in process `syz.3.13375'.
[  838.727615][  T301] lo speed is unknown, defaulting to 1000
[  838.807250][ T4496] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  838.818902][ T4496] usb 1-1: No valid video chain found.
[  838.845414][  T301] bond0 speed is unknown, defaulting to 1000
[  838.852375][  T301] lo speed is unknown, defaulting to 1000
[  838.865262][ T4496] usb 1-1: USB disconnect, device number 59
[  839.001259][  T344] xt_CT: You must specify a L4 protocol and not use inversions on it
[  839.237191][  T353] loop1: detected capacity change from 0 to 8
[  839.264781][  T353] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  839.300088][T30387] udevd[30387]: incorrect cramfs checksum on /dev/loop1
[  839.312560][  T353] cramfs: Error -3 while decompressing!
[  839.333774][  T353] cramfs: ffffffff96d881e8(26)->ffff888050c90000(4096)
[  839.340712][  T353] cramfs: Error 2 while decompressing!
[  839.368014][  T353] cramfs: ffffffff96d88202(26)->ffff8880433aa000(4096)
[  839.395871][  T353] cramfs: Error -3 while decompressing!
[  839.433221][  T353] cramfs: ffffffff96d8821c(16)->ffff8880433a8000(4096)
[  839.451684][  T353] cramfs: Error -3 while decompressing!
[  839.458024][ T4494] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  839.478193][  T353] cramfs: ffffffff96d881e8(26)->ffff888050c90000(4096)
[  839.673803][ T4494] usb 5-1: Using ep0 maxpacket: 8
[  839.693924][ T4494] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  839.766294][ T4494] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  839.798133][ T4494] usb 5-1: config 0 interface 0 has no altsetting 0
[  839.845571][ T4494] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  839.890672][ T4494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.903816][ T4284] Bluetooth: hci0: command 0x0409 tx timeout
[  839.909342][ T4494] usb 5-1: Product: syz
[  839.932207][ T4494] usb 5-1: Manufacturer: syz
[  839.959946][ T4494] usb 5-1: SerialNumber: syz
[  840.011293][ T4494] usb 5-1: config 0 descriptor??
[  840.072781][ T4494] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found
[  840.252459][  T301] chnl_net:caif_netlink_parms(): no params data found
[  840.272727][ T4494] snd_usb_toneport 5-1:0.0: cannot get proper max packet size
[  840.286947][ T4494] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected
[  840.343942][ T4494] snd_usb_toneport: probe of 5-1:0.0 failed with error -22
[  840.543674][ T4494] usb 5-1: USB disconnect, device number 62
[  840.882877][  T301] bridge0: port 1(bridge_slave_0) entered blocking state
[  840.924281][  T301] bridge0: port 1(bridge_slave_0) entered disabled state
[  840.932569][  T301] device bridge_slave_0 entered promiscuous mode
[  841.004438][  T301] bridge0: port 2(bridge_slave_1) entered blocking state
[  841.026874][  T301] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.045000][  T301] device bridge_slave_1 entered promiscuous mode
[  841.332206][  T422] netlink: 'syz.0.13416': attribute type 1 has an invalid length.
[  841.414710][T10530] team0: Port device wlan1 removed
[  841.467872][  T301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  841.496867][  T301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  841.628649][  T301] team0: Port device team_slave_0 added
[  841.689236][  T436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13421'.
[  841.926763][  T301] team0: Port device team_slave_1 added
[  841.947571][  T443] device netdevsim0 left promiscuous mode
[  841.983690][T32502] Bluetooth: hci0: command 0x041b tx timeout
[  842.101912][  T301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  842.124010][  T301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  842.232610][  T301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  842.326189][  T301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  842.333175][  T301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  842.491960][  T301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  842.808512][T10530] device hsr_slave_0 left promiscuous mode
[  842.828060][T10530] device hsr_slave_1 left promiscuous mode
[  842.853806][T10530] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  842.861378][T10530] batman_adv: batadv0: Removing interface: batadv_slave_0
[  842.902677][T10530] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  842.944132][T10530] batman_adv: batadv0: Removing interface: batadv_slave_1
[  842.972662][T10530] device bridge_slave_1 left promiscuous mode
[  843.002109][T10530] bridge0: port 2(bridge_slave_1) entered disabled state
[  843.043105][T10530] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.085849][  T486] xt_hashlimit: max too large, truncated to 1048576
[  843.190594][T10530] device veth1_macvtap left promiscuous mode
[  843.203967][T10530] device veth0_macvtap left promiscuous mode
[  843.213029][T10530] device veth1_vlan left promiscuous mode
[  843.332061][  T472] loop4: detected capacity change from 0 to 32768
[  843.389025][  T472] JBD2: Ignoring recovery information on journal
[  843.509246][  T472] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  843.704546][ T4271] ocfs2: Unmounting device (7,4) on (node local)
[  843.921224][T10530] bond4 (unregistering): Released all slaves
[  844.067001][T32502] Bluetooth: hci0: command 0x040f tx timeout
[  844.083204][T10530] bond3 (unregistering): Released all slaves
[  844.163836][  T511] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  844.269790][ T1133] block nbd0: Attempted send on invalid socket
[  844.276240][ T1133] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  844.397673][T10530] bond2 (unregistering): Released all slaves
[  844.617152][  T518] ipt_CLUSTERIP: bad local_nodes[0] 0
[  844.627522][T10530] bond1 (unregistering): Released all slaves
[  845.247414][T10530] team0 (unregistering): Port device team_slave_1 removed
[  845.299944][T10530] team0 (unregistering): Port device team_slave_0 removed
[  845.348323][T10530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  845.397972][T10530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  845.406860][T25070] infiniband syz1: ib_query_port failed (-19)
[  845.729711][T10530] bond0 (unregistering): Released all slaves
[  845.852051][  T301] device hsr_slave_0 entered promiscuous mode
[  845.859489][  T301] device hsr_slave_1 entered promiscuous mode
[  845.868316][  T301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  845.875956][  T301] Cannot create hsr debugfs directory
[  845.881460][  T474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13438'.
[  845.899637][  T498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13444'.
[  845.933772][  T498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13444'.
[  845.974122][  T498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13444'.
[  845.993765][   T14] bond0 speed is unknown, defaulting to 1000
[  846.000219][  T522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13454'.
[  846.153727][T32502] Bluetooth: hci0: command 0x0419 tx timeout
[  846.273593][ T4496] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  846.457379][  T538] netlink: 'syz.0.13461': attribute type 26 has an invalid length.
[  846.522847][ T4496] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  846.551622][ T4496] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  846.603980][ T4496] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  846.630962][ T4496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.643914][  T301] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  846.669163][ T4496] usb 2-1: config 0 descriptor??
[  846.675321][  T301] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  846.716084][  T301] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  846.740161][  T301] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  846.926994][ T4496] usb 2-1: USB disconnect, device number 62
[  846.943945][ T4493] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  846.952590][  T301] 8021q: adding VLAN 0 to HW filter on device bond0
[  846.980053][T14031] udevd[14031]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  846.987705][  T301] 8021q: adding VLAN 0 to HW filter on device team0
[  847.022103][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  847.032921][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  847.064648][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  847.118338][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  847.134504][T10530] bridge0: port 1(bridge_slave_0) entered blocking state
[  847.141688][T10530] bridge0: port 1(bridge_slave_0) entered forwarding state
[  847.149440][ T4493] usb 4-1: Using ep0 maxpacket: 16
[  847.157074][ T4493] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  847.172971][ T4493] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  847.192561][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  847.200833][ T4493] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  847.219976][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  847.228359][ T4493] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  847.242695][T10530] bridge0: port 2(bridge_slave_1) entered blocking state
[  847.249909][T10530] bridge0: port 2(bridge_slave_1) entered forwarding state
[  847.258292][ T4493] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  847.268624][ T4493] usb 4-1: config 0 has no interface number 0
[  847.278106][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  847.286252][ T4493] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  847.314045][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  847.333260][ T4493] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  847.346004][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  847.363677][ T4493] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  847.374797][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  847.392667][ T4493] usb 4-1: config 0 interface 125 has no altsetting 1
[  847.407538][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  847.435607][ T4493] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  847.450364][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  847.458748][ T4493] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.474581][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  847.475265][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  847.475902][ T4493] usb 4-1: Product: syz
[  847.475922][ T4493] usb 4-1: Manufacturer: syz
[  847.475936][ T4493] usb 4-1: SerialNumber: syz
[  847.494829][  T301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  847.494853][  T301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  847.504767][ T4493] usb 4-1: config 0 descriptor??
[  847.512826][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  847.513944][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  847.514952][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  847.515690][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  847.517438][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  847.700260][  T579] xt_hashlimit: size too large, truncated to 1048576
[  847.700280][  T579] xt_hashlimit: max too large, truncated to 1048576
[  847.940546][ T4493] usb 4-1: USB disconnect, device number 64
[  848.192225][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  848.206747][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  848.227599][  T301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  848.293849][ T4494] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  848.497508][ T4494] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  848.523983][ T4494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.532033][ T4494] usb 5-1: Product: syz
[  848.583650][ T4494] usb 5-1: Manufacturer: syz
[  848.588303][ T4494] usb 5-1: SerialNumber: syz
[  848.629643][ T4494] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  848.688773][ T4494] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  849.125687][ T4339] usb 5-1: USB disconnect, device number 63
[  849.321599][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  849.354786][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  849.423317][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  849.438403][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  849.468458][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  849.494163][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  849.532703][  T301] device veth0_vlan entered promiscuous mode
[  849.589810][  T301] device veth1_vlan entered promiscuous mode
[  849.666247][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  849.706971][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  849.738717][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  849.747085][ T4494] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  849.761764][ T4494] ath9k_htc: Failed to initialize the device
[  849.783120][ T4339] usb 5-1: ath9k_htc: USB layer deinitialized
[  849.786577][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  849.862060][  T301] device veth0_macvtap entered promiscuous mode
[  849.881164][  T301] device veth1_macvtap entered promiscuous mode
[  849.957192][  T301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  849.964956][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  849.974355][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  850.005700][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  850.034470][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  850.066203][  T301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  850.084475][  T301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  850.106282][  T301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  850.172361][  T301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  850.193641][ T4339] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  850.202783][  T301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  850.231888][  T301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  850.258161][  T301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  850.279234][  T301] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  850.315942][  T301] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  850.335562][  T301] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  850.348647][  T301] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  850.368050][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  850.391189][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  850.399712][ T4339] usb 5-1: Using ep0 maxpacket: 32
[  850.412410][ T4339] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  850.454207][ T4339] usb 5-1: config 0 has no interface number 0
[  850.460343][ T4339] usb 5-1: config 0 interface 6 has no altsetting 0
[  850.525340][ T4339] usb 5-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=ab.5a
[  850.544240][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.582845][ T4339] usb 5-1: Product: syz
[  850.592967][ T4339] usb 5-1: Manufacturer: syz
[  850.614110][ T4339] usb 5-1: SerialNumber: syz
[  850.642548][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.652090][ T4339] usb 5-1: config 0 descriptor??
[  850.660721][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.703055][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  850.787348][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.844893][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.881084][ T4339] cdc_subset: probe of 5-1:0.6 failed with error -22
[  850.881498][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  850.914186][  T682] netlink: 'syz.3.13510': attribute type 4 has an invalid length.
[  850.938198][  T681] loop1: detected capacity change from 0 to 2048
[  851.025499][  T684] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  851.083626][  T681] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1
[  851.149482][ T4339] usb 5-1: USB disconnect, device number 64
[  851.203732][  T681] Remounting filesystem read-only
[  851.293736][  T690] loop5: detected capacity change from 0 to 4096
[  851.385642][  T697] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  851.467794][  T690] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  851.543700][  T690] Remounting filesystem read-only
[  851.603810][ T4496] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  851.808842][ T4496] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  851.860028][ T4496] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  851.884084][ T4496] usb 4-1: config 1 has no interface number 0
[  851.890229][ T4496] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  851.997602][ T4496] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  852.025177][ T4496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.033253][ T4496] usb 4-1: Product: syz
[  852.061208][ T4496] usb 4-1: Manufacturer: syz
[  852.083097][ T4496] usb 4-1: SerialNumber: syz
[  852.126854][ T4496] usb 4-1: selecting invalid altsetting 1
[  852.533791][ T4496] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS
[  852.543929][ T4496] cdc_ncm 4-1:1.1: bind() failure
[  852.582672][ T4496] usb 4-1: USB disconnect, device number 65
[  852.687992][  T751] qrtr: Invalid version 0
[  853.514297][   T26] audit: type=1326 audit(2000000266.430:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=788 comm="syz.0.13552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  853.533651][  T793] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13553'.
[  853.592548][   T26] audit: type=1326 audit(2000000266.430:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=788 comm="syz.0.13552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  853.614943][    C1] vkms_vblank_simulate: vblank timer overrun
[  853.733727][   T26] audit: type=1326 audit(2000000266.430:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=788 comm="syz.0.13552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  853.796379][  T802] device netdevsim0 left promiscuous mode
[  853.817281][   T26] audit: type=1326 audit(2000000266.430:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=788 comm="syz.0.13552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  854.045071][  T812] netlink: 'syz.0.13560': attribute type 10 has an invalid length.
[  854.158277][  T812] team0: Port device wlan1 removed
[  854.261983][  T820] loop4: detected capacity change from 0 to 1024
[  854.289238][  T818] loop1: detected capacity change from 0 to 4096
[  854.328443][  T820] hfsplus: Filesystem is marked locked, mounting read-only.
[  854.349659][  T818] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  854.408418][   T26] audit: type=1326 audit(2000000267.320:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=827 comm="syz.0.13568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  854.430803][    C1] vkms_vblank_simulate: vblank timer overrun
[  854.481372][  T818] ntfs3: loop1: failed to convert "c46c" to cp1251
[  854.547148][   T26] audit: type=1326 audit(2000000267.350:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=827 comm="syz.0.13568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  854.709008][   T26] audit: type=1326 audit(2000000267.350:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=827 comm="syz.0.13568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  854.731365][    C1] vkms_vblank_simulate: vblank timer overrun
[  854.835457][   T26] audit: type=1326 audit(2000000267.350:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=827 comm="syz.0.13568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  854.977386][   T26] audit: type=1326 audit(2000000267.350:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=827 comm="syz.0.13568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  854.999734][    C1] vkms_vblank_simulate: vblank timer overrun
[  855.008728][  T845] loop4: detected capacity change from 0 to 8
[  855.094668][  T845] SQUASHFS error: zlib decompression failed, data probably corrupt
[  855.102678][  T845] SQUASHFS error: Failed to read block 0x13e: -5
[  855.143652][   T26] audit: type=1326 audit(2000000267.350:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=827 comm="syz.0.13568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  855.165997][    C1] vkms_vblank_simulate: vblank timer overrun
[  855.221639][  T845] SQUASHFS error: Unable to read metadata cache entry [13c]
[  855.257012][  T845] SQUASHFS error: Unable to read directory block [13c:26]
[  856.204347][  T914] netlink: 'syz.0.13599': attribute type 10 has an invalid length.
[  856.276801][  T914] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13599'.
[  856.741297][  T941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13607'.
[  856.791290][  T941] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13607'.
[  856.833650][  T941] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13607'.
[  857.153084][  T957] tmpfs: Bad value for 'mpol'
[  857.500264][  T968] loop1: detected capacity change from 0 to 64
[  857.632024][  T973] loop4: detected capacity change from 0 to 164
[  857.961084][  T988] xt_TCPMSS: Only works on TCP SYN packets
[  858.160054][  T996] loop5: detected capacity change from 0 to 256
[  858.290386][  T996] FAT-fs (loop5): Directory bread(block 64) failed
[  858.299424][  T996] FAT-fs (loop5): Directory bread(block 65) failed
[  858.324904][  T996] FAT-fs (loop5): Directory bread(block 66) failed
[  858.341790][  T996] FAT-fs (loop5): Directory bread(block 67) failed
[  858.352870][  T996] FAT-fs (loop5): Directory bread(block 68) failed
[  858.366959][  T996] FAT-fs (loop5): Directory bread(block 69) failed
[  858.377614][  T996] FAT-fs (loop5): Directory bread(block 70) failed
[  858.388161][  T996] FAT-fs (loop5): Directory bread(block 71) failed
[  858.399488][  T996] FAT-fs (loop5): Directory bread(block 72) failed
[  858.409492][  T996] FAT-fs (loop5): Directory bread(block 73) failed
[  859.423459][ T1059] loop1: detected capacity change from 0 to 256
[  859.458413][ T1059] exfat: Deprecated parameter 'utf8'
[  859.478565][ T1059] exfat: Deprecated parameter 'namecase'
[  859.550385][ T1059] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  859.912393][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  859.912410][   T26] audit: type=1326 audit(2000000272.820:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1076 comm="syz.3.13660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  860.061262][   T26] audit: type=1326 audit(2000000272.860:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1076 comm="syz.3.13660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  860.183934][   T26] audit: type=1326 audit(2000000272.860:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1076 comm="syz.3.13660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  860.203035][ T1054] loop5: detected capacity change from 0 to 32768
[  860.293618][   T26] audit: type=1326 audit(2000000272.860:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1076 comm="syz.3.13660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  860.347881][ T1054] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt
[  860.347881][ T1054] 
[  860.403774][ T1054] xtLookup: xtSearch returned -5
[  860.409007][ T1054] free_index: error reading directory table
[  860.429320][ T1054] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt
[  860.429320][ T1054] 
[  860.460131][ T1054] xtLookup: xtSearch returned -5
[  860.493855][ T1054] free_index: error reading directory table
[  860.554130][ T1054] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt
[  860.554130][ T1054] 
[  860.595368][ T1054] xtLookup: xtSearch returned -5
[  860.613940][ T1054] free_index: error reading directory table
[  860.984553][ T1118] netlink: 'syz.1.13680': attribute type 11 has an invalid length.
[  861.729361][ T1153] MPI: mpi too large (107144 bits)
[  861.744646][ T1155] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13694'.
[  861.806966][ T1160] netlink: 'syz.5.13697': attribute type 12 has an invalid length.
[  862.568212][ T1194] x_tables: duplicate underflow at hook 4
[  862.907916][ T1205] loop4: detected capacity change from 0 to 4096
[  862.968439][ T1214] netlink: 676 bytes leftover after parsing attributes in process `syz.3.13722'.
[  863.189433][ T4271] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  863.228772][ T1220] loop1: detected capacity change from 0 to 4096
[  863.231086][ T4271] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  863.333896][ T1226] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  863.334921][ T1220] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  863.364100][ T1229] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13727'.
[  863.411845][ T1220] NILFS (loop1): mounting fs with errors
[  863.499289][ T1220] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6
[  863.626690][   T26] audit: type=1326 audit(2000000276.540:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1236 comm="syz.5.13731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  863.697622][   T26] audit: type=1326 audit(2000000276.550:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1236 comm="syz.5.13731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  863.825136][   T26] audit: type=1326 audit(2000000276.550:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1236 comm="syz.5.13731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  863.918790][   T26] audit: type=1326 audit(2000000276.550:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1236 comm="syz.5.13731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  864.023728][ T4491] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  864.235869][ T4491] usb 4-1: Using ep0 maxpacket: 16
[  864.248545][ T4491] usb 4-1: config 0 has no interfaces?
[  864.275337][ T4491] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  864.290029][ T1268] tmpfs: Bad value for 'size'
[  864.298385][ T4491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.324412][ T4491] usb 4-1: Product: syz
[  864.333972][ T4491] usb 4-1: Manufacturer: syz
[  864.343832][ T4491] usb 4-1: SerialNumber: syz
[  864.354970][ T4491] r8152-cfgselector 4-1: config 0 descriptor??
[  864.581712][ T4491] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  864.796669][ T4491] usb 4-1: USB disconnect, device number 66
[  865.337812][ T1330] 9pnet_fd: Insufficient options for proto=fd
[  865.390668][ T1332] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13769'.
[  865.417445][ T1332] netlink: 'syz.5.13769': attribute type 3 has an invalid length.
[  865.472880][ T1332] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13769'.
[  865.493843][ T1332] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13769'.
[  866.043805][ T4494] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  866.214747][ T1370] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  866.233740][ T4494] usb 1-1: Using ep0 maxpacket: 32
[  866.242152][ T4494] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  866.273680][ T4494] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  866.313612][ T4494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.348064][ T4494] usb 1-1: config 0 descriptor??
[  866.354890][ T4494] usb 1-1: bad CDC descriptors
[  866.463806][ T4339] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  866.503514][ T1383] tmpfs: Bad value for 'mpol'
[  866.565017][ T4494] usb 1-1: USB disconnect, device number 60
[  866.664620][ T4339] usb 6-1: Using ep0 maxpacket: 16
[  866.671627][ T4339] usb 6-1: config 0 has an invalid interface number: 104 but max is 1
[  866.700425][ T4339] usb 6-1: config 0 has an invalid interface number: 104 but max is 1
[  866.731164][ T4339] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  866.760877][ T4339] usb 6-1: config 0 has no interface number 0
[  866.771016][ T4339] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 48, changing to 9
[  866.809040][ T4339] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 8240, setting to 1024
[  866.837218][ T4339] usb 6-1: config 0 interface 104 has no altsetting 1
[  866.844854][ T1396] netlink: 'syz.1.13799': attribute type 21 has an invalid length.
[  866.857526][ T4339] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  866.863653][ T1396] netlink: 'syz.1.13799': attribute type 6 has an invalid length.
[  866.872028][ T4339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.897145][ T4339] usb 6-1: Product: syz
[  866.900662][ T1398] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13801'.
[  866.901338][ T4339] usb 6-1: Manufacturer: syz
[  866.922781][ T4339] usb 6-1: SerialNumber: syz
[  866.929925][ T4339] usb 6-1: config 0 descriptor??
[  866.937387][ T4339] asix: probe of 6-1:0.104 failed with error -22
[  867.123654][T25070] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  867.152430][ T4339] usb 6-1: USB disconnect, device number 2
[  867.348502][T25070] usb 4-1: Using ep0 maxpacket: 32
[  867.357629][T25070] usb 4-1: unable to get BOS descriptor or descriptor too short
[  867.374826][T25070] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  867.399551][T25070] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  867.437217][T25070] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  867.464806][T25070] usb 4-1: string descriptor 0 read error: -22
[  867.471193][T25070] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  867.480787][T25070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.519567][T25070] usb 4-1: 0:2 : does not exist
[  867.740803][ T4496] usb 4-1: USB disconnect, device number 67
[  867.835535][T25070] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  868.045530][T25070] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  868.061448][T25070] usb 2-1: config 0 has no interface number 0
[  868.068818][T25070] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  868.078689][ T1437] dlm: no local IP address has been set
[  868.103807][ T1437] dlm: cannot start dlm midcomms -107
[  868.122704][T25070] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  868.132673][T25070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.149971][T25070] usb 2-1: Product: syz
[  868.158035][T25070] usb 2-1: Manufacturer: syz
[  868.162827][T25070] usb 2-1: SerialNumber: syz
[  868.182155][T25070] usb 2-1: config 0 descriptor??
[  868.213832][T25070] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  868.444989][ T1447] loop5: detected capacity change from 0 to 256
[  868.450256][    C0] yurex 2-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  868.660312][T25070] usb 2-1: USB disconnect, device number 63
[  868.677488][T25070] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  868.736861][ T1458] xt_hashlimit: max too large, truncated to 1048576
[  869.179520][ T1479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13839'.
[  869.293640][ T1479] netlink: 'syz.5.13839': attribute type 1 has an invalid length.
[  870.065920][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  870.072327][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  870.453473][ T1535] loop5: detected capacity change from 0 to 764
[  870.794808][ T1550] loop1: detected capacity change from 0 to 256
[  870.860303][ T1550] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  871.420963][ T1571] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.13875'.
[  871.540553][ T1580] loop4: detected capacity change from 0 to 1024
[  871.614524][ T1580] EXT4-fs: Ignoring removed oldalloc option
[  871.620480][ T1580] EXT4-fs: Ignoring removed orlov option
[  871.683972][ T1580] EXT4-fs: Ignoring removed oldalloc option
[  871.689952][ T1580] EXT4-fs: Ignoring removed nomblk_io_submit option
[  871.811062][ T1580] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  871.852746][ T1580] EXT4-fs error (device loop4): ext4_xattr_set_entry:1617: inode #13: comm syz.4.13878: corrupted xattr entries
[  872.051904][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  873.157943][ T1601] loop1: detected capacity change from 0 to 32768
[  873.199933][ T1601] (syz.1.13886,1601,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  873.277897][ T1601] (syz.1.13886,1601,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  873.310334][ T1648] netlink: 'syz.5.13904': attribute type 5 has an invalid length.
[  873.364191][ T1648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13904'.
[  873.431989][ T1601] JBD2: Ignoring recovery information on journal
[  873.495315][ T1660] overlayfs: failed to resolve './file0': -2
[  873.609438][ T1601] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  873.807249][ T1672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  873.831442][ T1672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  873.868607][ T1672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  873.870931][ T4277] ocfs2: Unmounting device (7,1) on (node local)
[  874.213684][ T4339] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  874.403607][ T4339] usb 2-1: Using ep0 maxpacket: 8
[  874.411051][ T4339] usb 2-1: unable to get BOS descriptor or descriptor too short
[  874.413343][ T1689] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  874.435093][ T4339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  874.488048][ T1689] Error parsing options; rc = [-22]
[  874.503696][ T4339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  874.541477][ T4339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  874.577896][ T4339] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  874.608257][ T4339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  874.653640][ T4339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  874.663207][ T1697] loop4: detected capacity change from 0 to 128
[  874.683864][ T4339] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  874.699070][ T1699] loop5: detected capacity change from 0 to 512
[  874.719203][ T4339] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  874.733610][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.753632][ T4339] usb 2-1: Product: syz
[  874.757844][ T4339] usb 2-1: Manufacturer: syz
[  874.772640][ T4339] usb 2-1: SerialNumber: syz
[  874.783714][ T4339] usb 2-1: config 0 descriptor??
[  874.788880][ T1699] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  874.802465][ T1677] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  874.814012][ T1699] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  874.906075][ T1699] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  875.056056][ T1699] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  875.071773][ T4339] usb 2-1: USB disconnect, device number 64
[  875.084652][ T1699] System zones: 0-2, 18-18, 34-35
[  875.164244][ T1699] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  875.305115][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  875.633267][  T301] EXT4-fs (loop5): unmounting filesystem.
[  876.073115][ T1737] loop4: detected capacity change from 0 to 2048
[  876.174053][ T1737] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  876.981156][ T1776] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13954'.
[  877.010001][ T1780] netlink: 10 bytes leftover after parsing attributes in process `syz.3.13956'.
[  877.206517][ T1788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13959'.
[  877.207672][ T1787] netlink: 'syz.1.13958': attribute type 6 has an invalid length.
[  877.259721][ T1787] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.13958'.
[  877.288973][ T1790] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  877.305307][T25070] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  877.494165][T25070] usb 1-1: Using ep0 maxpacket: 32
[  877.504098][T25070] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[  877.530249][T25070] usb 1-1: config 0 has no interface number 0
[  877.553680][T25070] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  877.593648][T25070] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 26159, setting to 1024
[  877.623637][T25070] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  877.671825][T25070] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  877.674959][ T1801] openvswitch: netlink: Key type 29 is not supported
[  877.710830][ T1804] netlink: 'syz.3.13964': attribute type 10 has an invalid length.
[  877.712288][T25070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.753741][T25070] usb 1-1: Product: syz
[  877.757948][T25070] usb 1-1: Manufacturer: syz
[  877.782771][T25070] usb 1-1: SerialNumber: syz
[  877.798546][T25070] usb 1-1: config 0 descriptor??
[  877.813286][ T1775] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  877.853757][ T1775] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  878.194468][ T4494] usb 1-1: USB disconnect, device number 61
[  878.310459][ T1816] usb usb8: usbfs: process 1816 (syz.3.13970) did not claim interface 8 before use
[  878.422385][ T1794] loop4: detected capacity change from 0 to 32768
[  878.577435][ T1825] overlayfs: missing 'workdir'
[  878.826264][ T1834] loop5: detected capacity change from 0 to 1764
[  880.179136][ T1888] loop1: detected capacity change from 0 to 4096
[  880.277628][ T1896] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  880.366016][ T1888] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  880.452016][ T1888] Remounting filesystem read-only
[  881.243362][ T1927] loop5: detected capacity change from 0 to 2048
[  881.309323][ T1932] loop1: detected capacity change from 0 to 512
[  881.382467][ T1932] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  881.406001][ T1927] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  881.436603][ T1938] netlink: 'syz.3.14018': attribute type 21 has an invalid length.
[  881.460985][ T1927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  881.466024][ T1932] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  881.500681][ T1938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14018'.
[  881.558795][ T1938] netlink: 'syz.3.14018': attribute type 1 has an invalid length.
[  881.559327][ T1932] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  881.720010][ T1932] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  881.773838][ T1948] delete_channel: no stack
[  881.803809][ T1932] System zones: 0-2, 18-18, 34-35
[  881.824672][ T1932] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  882.174527][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  882.401722][ T1977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14033'.
[  882.564382][ T1985] device sit0 entered promiscuous mode
[  882.613742][T11532] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  882.625774][ T1985] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14036'.
[  882.824700][T11532] usb 2-1: config 8 has an invalid interface number: 177 but max is 0
[  882.833281][T11532] usb 2-1: config 8 has no interface number 0
[  882.860676][T11532] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  882.933734][T11532] usb 2-1: config 8 interface 177 has no altsetting 0
[  882.940583][T11532] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  882.957281][ T1996] loop4: detected capacity change from 0 to 4096
[  882.985219][   T26] audit: type=1326 audit(2000000295.900:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.3.14043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  883.018683][ T1996] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  883.030096][T11532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.073664][   T26] audit: type=1326 audit(2000000295.920:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.3.14043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  883.081042][ T1973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  883.114079][ T1996] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096)
[  883.180191][ T2008] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14045'.
[  883.203880][   T26] audit: type=1326 audit(2000000295.920:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.3.14043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  883.234794][ T2009] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  883.347197][   T26] audit: type=1326 audit(2000000295.920:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2001 comm="syz.3.14043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  883.446821][ T2016] loop5: detected capacity change from 0 to 8
[  883.515847][T11532] usb 2-1: string descriptor 0 read error: -71
[  883.543933][    C0] ir_toy 2-1:8.177: out urb status: -71
[  883.571221][ T2016] SQUASHFS error: Unable to read directory block [1d0:0]
[  883.826668][ T2031] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14053'.
[  884.053665][T11532] ir_toy 2-1:8.177: could not write reset command: -110
[  884.060910][T11532] ir_toy: probe of 2-1:8.177 failed with error -110
[  884.130072][T11532] usb 2-1: USB disconnect, device number 65
[  884.351715][ T2052] 9p: Unknown access argument z: -22
[  884.453658][ T4496] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  884.648194][ T2072] netlink: 'syz.5.14070': attribute type 1 has an invalid length.
[  884.657537][ T2072] netlink: 228 bytes leftover after parsing attributes in process `syz.5.14070'.
[  884.665835][ T4496] usb 4-1: unable to get BOS descriptor or descriptor too short
[  884.679128][ T2073] loop4: detected capacity change from 0 to 1024
[  884.686387][ T4496] usb 4-1: not running at top speed; connect to a high speed hub
[  884.711466][ T4496] usb 4-1: config 12 has an invalid interface number: 184 but max is 0
[  884.730160][ T4496] usb 4-1: config 12 has no interface number 0
[  884.743956][ T4496] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  884.776864][ T4496] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2
[  884.779443][ T2073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  884.803646][ T4496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.811873][ T4496] usb 4-1: Product: syz
[  884.822033][ T4496] usb 4-1: Manufacturer: syz
[  884.827390][ T4496] usb 4-1: SerialNumber: syz
[  884.957438][ T2086] netlink: 'syz.0.14075': attribute type 13 has an invalid length.
[  884.966082][ T2086] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14075'.
[  884.996635][ T2086] syz_tun: refused to change device tx_queue_len
[  885.003073][ T2086] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  885.069530][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  885.080441][ T4496] usb 4-1: USB disconnect, device number 68
[  885.266386][ T2096] misc userio: No port type given on /dev/userio
[  885.349796][ T4417] udevd[4417]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  885.949604][ T2124] netlink: 3 bytes leftover after parsing attributes in process `syz.4.14093'.
[  885.989958][ T2124] 0�X���: renamed from caif0
[  886.025422][ T2124] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  886.423691][ T4496] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  886.643609][ T4496] usb 4-1: Using ep0 maxpacket: 32
[  886.652732][ T4496] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  886.678574][ T2151] loop5: detected capacity change from 0 to 8192
[  886.685293][ T2158] trusted_key: encrypted_key: insufficient parameters specified
[  886.698163][ T4496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.701668][ T2151] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  886.707052][ T4496] usb 4-1: Product: syz
[  886.721677][ T4496] usb 4-1: Manufacturer: syz
[  886.741324][ T2151] FAT-fs (loop5): error, clusters badly computed (1 != 0)
[  886.741741][ T4496] usb 4-1: SerialNumber: syz
[  886.758642][ T2151] FAT-fs (loop5): Filesystem has been set read-only
[  886.759326][ T4496] usb 4-1: config 0 descriptor??
[  886.767168][ T2151] FAT-fs (loop5): error, clusters badly computed (2 != 1)
[  886.824205][ T2151] FAT-fs (loop5): error, clusters badly computed (3 != 2)
[  886.832439][ T2151] FAT-fs (loop5): error, clusters badly computed (4 != 3)
[  886.846201][   T26] audit: type=1326 audit(2000000299.760:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2160 comm="syz.4.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  886.911043][ T2163] ieee802154 phy0 wpan0: encryption failed: -22
[  886.933401][   T26] audit: type=1326 audit(2000000299.800:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2160 comm="syz.4.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  886.986697][ T4496] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device:
[  886.993821][T11532] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  887.010170][ T4496] eb aa 3b 80 9b e4 7a f0 
[  887.033214][   T26] audit: type=1326 audit(2000000299.800:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2160 comm="syz.4.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  887.059199][ T4496] snd-usb-6fire: probe of 4-1:0.0 failed with error -5
[  887.132799][   T26] audit: type=1326 audit(2000000299.800:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2160 comm="syz.4.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  887.194807][T11532] usb 1-1: not running at top speed; connect to a high speed hub
[  887.206600][T11532] usb 1-1: config 95 has an invalid interface number: 1 but max is 0
[  887.255570][ T4496] usb 4-1: USB disconnect, device number 69
[  887.256479][T11532] usb 1-1: config 95 has no interface number 0
[  887.316907][T11532] usb 1-1: config 95 interface 1 has no altsetting 0
[  887.341293][T11532] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[  887.361235][T11532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.382510][T11532] usb 1-1: Product: syz
[  887.386926][T11532] usb 1-1: Manufacturer: syz
[  887.391541][T11532] usb 1-1: SerialNumber: syz
[  887.393874][ T2177] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  887.442663][ T2177] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  887.454670][ T2175] loop5: detected capacity change from 0 to 4096
[  887.473357][ T2177] device tunl0 left promiscuous mode
[  887.479327][ T2175] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  887.498517][ T2177] device sit0 left promiscuous mode
[  887.533858][ T2175] ntfs3: loop5: failed to convert "c46c" to euc-jp
[  887.590388][ T2177] device syz_tun left promiscuous mode
[  887.666009][ T2177] bridge0: port 1(bridge_slave_0) entered blocking state
[  887.673165][ T2177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  887.729195][T11532] usb 1-1: USB disconnect, device number 62
[  887.737953][ T2177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  887.779387][ T2177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  887.862458][ T2177] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  887.923817][ T4491] usb 2-1: new full-speed USB device number 66 using dummy_hcd
[  888.051611][T14031] udevd[14031]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  888.131537][ T4491] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  888.147608][ T4491] usb 2-1: config 0 has no interface number 0
[  888.174177][ T4491] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  888.191942][ T4491] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.200395][ T4491] usb 2-1: Product: syz
[  888.211115][ T4491] usb 2-1: Manufacturer: syz
[  888.216998][ T4491] usb 2-1: SerialNumber: syz
[  888.254559][ T4491] usb 2-1: config 0 descriptor??
[  888.274222][ T4491] hub 2-1:0.132: bad descriptor, ignoring hub
[  888.295346][ T4491] hub: probe of 2-1:0.132 failed with error -5
[  888.351819][ T4491] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input55
[  888.458533][   T26] audit: type=1326 audit(2000000301.370:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2198 comm="syz.5.14130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  888.524166][   T26] audit: type=1326 audit(2000000301.370:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2198 comm="syz.5.14130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  888.599557][   T26] audit: type=1326 audit(2000000301.430:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2198 comm="syz.5.14130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  888.725922][   T26] audit: type=1326 audit(2000000301.440:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2198 comm="syz.5.14130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  888.756127][ T2208] loop5: detected capacity change from 0 to 1024
[  888.804606][   T26] audit: type=1326 audit(2000000301.440:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2198 comm="syz.5.14130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  888.807440][ T2208] EXT4-fs: Ignoring removed nomblk_io_submit option
[  888.876051][ T4455] usb 2-1: USB disconnect, device number 66
[  888.893844][ T2208] EXT4-fs: Ignoring removed nomblk_io_submit option
[  888.900876][ T2208] EXT4-fs: Ignoring removed i_version option
[  888.934545][ T2208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  889.003220][ T2208] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  889.094098][  T301] EXT4-fs (loop5): unmounting filesystem.
[  889.301141][ T2229] loop5: detected capacity change from 0 to 1024
[  889.481448][   T46] hfsplus: b-tree write err: -5, ino 4
[  889.699446][ T2247] netlink: 720 bytes leftover after parsing attributes in process `syz.1.14153'.
[  890.327114][ T2268] loop4: detected capacity change from 0 to 8192
[  890.389621][ T2268] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  890.466636][ T2268] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  890.476982][ T2268] REISERFS (device loop4): using ordered data mode
[  890.484161][ T2268] reiserfs: using flush barriers
[  890.501750][ T2268] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  890.564629][ T2268] REISERFS (device loop4): checking transaction log (loop4)
[  890.588353][ T2268] REISERFS (device loop4): Using r5 hash to sort names
[  890.610319][ T2268] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  890.691909][ T2268] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  890.868376][ T2293] loop5: detected capacity change from 0 to 4096
[  890.919506][ T2293] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  891.024567][   T26] audit: type=1326 audit(2000000303.930:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2301 comm="syz.0.14179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  891.071655][   T26] audit: type=1326 audit(2000000303.930:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2301 comm="syz.0.14179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  891.132506][   T26] audit: type=1326 audit(2000000303.960:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2301 comm="syz.0.14179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  891.160112][   T26] audit: type=1326 audit(2000000303.960:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2301 comm="syz.0.14179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  891.191304][   T26] audit: type=1326 audit(2000000303.960:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2301 comm="syz.0.14179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  891.758326][ T2327] ubi30: attaching mtd0
[  891.763664][ T2327] ubi30 error: ubi_attach_mtd_dev: bad VID header (10535) or data offsets (10599)
[  891.778435][ T2325] loop1: detected capacity change from 0 to 1024
[  891.838391][ T2325] EXT4-fs: Ignoring removed nomblk_io_submit option
[  891.856778][ T2331] loop5: detected capacity change from 0 to 256
[  891.900220][ T2325] EXT4-fs: Ignoring removed nomblk_io_submit option
[  891.930120][ T2325] EXT4-fs: Ignoring removed i_version option
[  891.946180][ T2184] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  891.971472][ T2325] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  891.991242][ T2325] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  892.070004][ T2333] loop4: detected capacity change from 0 to 4096
[  892.087232][ T2333] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  892.135363][ T2184] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  892.147701][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  892.151058][ T2184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.171408][ T2184] usb 4-1: config 0 descriptor??
[  892.201786][ T2338] devpts: called with bogus options
[  892.271266][ T2333] ntfs3: loop4: ino=0, attr_set_size
[  892.532011][ T2349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14201'.
[  892.560318][ T2351] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14202'.
[  892.584183][ T2351] 0�X���: renamed from caif0
[  892.593358][ T2184] ath6kl: Failed to submit usb control message: -71
[  892.600758][ T2184] ath6kl: unable to send the bmi data to the device: -71
[  892.610660][ T2351] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  892.812797][ T2361] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  892.823649][ T2184] ath6kl: Unable to send get target info: -71
[  892.833179][ T2361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  892.852440][ T2184] ath6kl: Failed to init ath6kl core: -71
[  892.946050][ T2184] ath6kl_usb: probe of 4-1:0.0 failed with error -71
[  892.966424][ T2184] usb 4-1: USB disconnect, device number 70
[  892.973027][ T2366] SET target dimension over the limit!
[  893.239165][ T2381] netlink: 'syz.5.14213': attribute type 6 has an invalid length.
[  893.363372][ T2383] loop4: detected capacity change from 0 to 128
[  893.373710][ T4496] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  893.443914][ T2383] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  893.575079][ T4496] usb 1-1: Using ep0 maxpacket: 32
[  893.582130][ T4496] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  893.605776][ T4496] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  893.668024][ T4496] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  893.706118][ T4496] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  893.740086][ T4496] usb 1-1: config 1 has no interface number 0
[  893.755178][ T4496] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  893.773612][ T4496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  893.812312][ T4496] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  894.000423][ T4496] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values
[  894.013518][ T4496] snd_usb_pod 1-1:1.1: invalid control EP
[  894.046860][ T2415] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  894.052742][ T4496] snd_usb_pod 1-1:1.1: cannot start listening: -22
[  894.089529][ T4496] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  894.114985][ T4496] snd_usb_pod: probe of 1-1:1.1 failed with error -22
[  894.223408][ T4496] usb 1-1: USB disconnect, device number 63
[  894.352416][ T2432] loop5: detected capacity change from 0 to 764
[  895.440694][ T2492] netlink: 'syz.5.14258': attribute type 27 has an invalid length.
[  895.474222][ T2492] netlink: 164 bytes leftover after parsing attributes in process `syz.5.14258'.
[  895.695453][ T2504] netlink: 2 bytes leftover after parsing attributes in process `syz.5.14264'.
[  896.293608][ T4455] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  896.314048][T11532] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  896.434828][ T2551] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.14282'.
[  896.493776][ T4455] usb 5-1: Using ep0 maxpacket: 16
[  896.514648][T11532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4
[  896.546074][ T4455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  896.569670][T11532] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  896.590108][ T4455] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  896.599410][T11532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.614355][ T4455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.622440][T11532] usb 6-1: Product: syz
[  896.634366][T11532] usb 6-1: Manufacturer: syz
[  896.645781][T11532] usb 6-1: SerialNumber: syz
[  896.652156][ T4455] usb 5-1: config 0 descriptor??
[  896.672229][T11532] usb 6-1: config 0 descriptor??
[  896.682144][ T4455] xbox_remote_probe: Unexpected endpoint_in
[  896.689745][T11532] hub 6-1:0.0: bad descriptor, ignoring hub
[  896.696881][ T4455] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  896.705429][T11532] hub: probe of 6-1:0.0 failed with error -5
[  896.714882][T11532] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input58
[  896.800512][ T2564] netlink: 'syz.0.14288': attribute type 4 has an invalid length.
[  896.891106][T11532] usb 5-1: USB disconnect, device number 65
[  896.908198][ T2566] Cannot find map_set index 33 as target
[  897.168442][ T2577] xt_cgroup: xt_cgroup: no path or classid specified
[  897.452197][ T2584] binder: 2582:2584 ioctl 40046210 0 returned -14
[  897.462493][ T2588] Non-string source
[  897.975093][ T2611] overlayfs: conflicting options: userxattr,redirect_dir=on
[  898.474819][ T2645] netlink: 830 bytes leftover after parsing attributes in process `syz.1.14321'.
[  898.524160][ T2647] x_tables: duplicate entry at hook 2
[  898.665641][   T26] audit: type=1326 audit(2000000311.580:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2654 comm="syz.1.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a239bf79 code=0x7ffc0000
[  898.693675][T11532] usb 1-1: new full-speed USB device number 64 using dummy_hcd
[  898.702509][ T4455] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  898.719966][   T26] audit: type=1326 audit(2000000311.580:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2654 comm="syz.1.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f23a239bf79 code=0x7ffc0000
[  898.751478][   T26] audit: type=1326 audit(2000000311.580:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2654 comm="syz.1.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a239bf79 code=0x7ffc0000
[  898.755023][ T2657] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14326'.
[  898.783067][   T26] audit: type=1326 audit(2000000311.580:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2654 comm="syz.1.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f23a239bf79 code=0x7ffc0000
[  898.783107][   T26] audit: type=1326 audit(2000000311.580:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2654 comm="syz.1.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f23a239bf79 code=0x7ffc0000
[  898.847612][ T2660] netlink: 'syz.1.14327': attribute type 21 has an invalid length.
[  898.868242][ T2662] netlink: 'syz.5.14328': attribute type 32 has an invalid length.
[  898.899224][ T4455] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  898.909248][T11532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4
[  898.926945][ T4455] usb 4-1: config 0 has no interface number 0
[  898.938435][ T4455] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  898.952860][ T4455] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  898.985401][T11532] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  899.004239][T11532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.012940][ T4455] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  899.012969][ T4455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.012988][ T4455] usb 4-1: Product: syz
[  899.013001][ T4455] usb 4-1: Manufacturer: syz
[  899.013015][ T4455] usb 4-1: SerialNumber: syz
[  899.020370][ T4455] usb 4-1: config 0 descriptor??
[  899.055679][T11532] usb 1-1: Product: syz
[  899.063875][T11532] usb 1-1: Manufacturer: syz
[  899.068552][T11532] usb 1-1: SerialNumber: syz
[  899.079967][ T2642] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  899.090942][T11532] usb 1-1: config 0 descriptor??
[  899.096980][ T4455] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  899.107744][T11532] hub 1-1:0.0: bad descriptor, ignoring hub
[  899.116036][T11532] hub: probe of 1-1:0.0 failed with error -5
[  899.122910][ T4455] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  899.136426][T11532] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input59
[  899.552843][T11532] usb 4-1: USB disconnect, device number 71
[  899.590139][T11532] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  899.624907][T11532] cyberjack 4-1:0.69: device disconnected
[  899.654249][ T2691] netlink: 168 bytes leftover after parsing attributes in process `syz.5.14339'.
[  899.678850][ T2686] loop1: detected capacity change from 0 to 8192
[  899.710889][ T2686] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  899.726510][ T2686] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  899.736762][ T2686] REISERFS (device loop1): using ordered data mode
[  899.743298][ T2686] reiserfs: using flush barriers
[  899.763644][ T2686] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  899.824403][ T2686] REISERFS (device loop1): checking transaction log (loop1)
[  899.850075][ T2686] REISERFS (device loop1): Using r5 hash to sort names
[  899.866801][ T2686] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  899.893160][ T2702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14343'.
[  899.901797][ T2686] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  900.308952][ T2718] xt_CT: You must specify a L4 protocol and not use inversions on it
[  900.450675][T11532] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  900.633797][T11532] usb 5-1: Using ep0 maxpacket: 32
[  900.640677][T11532] usb 5-1: config 0 has an invalid interface number: 225 but max is 0
[  900.650814][ T2735] loop1: detected capacity change from 0 to 128
[  900.657758][T11532] usb 5-1: config 0 has no interface number 0
[  900.690199][T11532] usb 5-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79
[  900.709124][ T2735] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  900.722683][T11532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.737733][ T2735] FAT-fs (loop1): Filesystem has been set read-only
[  900.746910][T11532] usb 5-1: Product: syz
[  900.759811][T11532] usb 5-1: Manufacturer: syz
[  900.772368][T11532] usb 5-1: SerialNumber: syz
[  900.798574][T11532] usb 5-1: config 0 descriptor??
[  901.022521][T11532] mos7840 5-1:0.225: required endpoints missing
[  901.041329][ T2743] sctp: [Deprecated]: syz.1.14357 (pid 2743) Use of struct sctp_assoc_value in delayed_ack socket option.
[  901.041329][ T2743] Use struct sctp_sack_info instead
[  901.239223][T11532] usb 5-1: USB disconnect, device number 66
[  901.459416][ T2184] usb 6-1: USB disconnect, device number 3
[  901.684741][ T2763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14367'.
[  901.693709][ T2184] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  901.727524][ T2763] openvswitch: netlink: Flow key attr not present in new flow.
[  901.773868][ T2765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14378'.
[  901.798785][ T2765] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  901.815564][ T2765] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  901.839049][ T2765] device bridge4 entered promiscuous mode
[  901.887425][ T2184] usb 6-1: unable to get BOS descriptor or descriptor too short
[  901.927720][ T2184] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  901.947258][ T2184] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  901.976046][ T2184] usb 6-1: config 1 interface 0 has no altsetting 1
[  901.995340][ T2184] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  902.029733][ T2184] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.053820][ T4496] usb 4-1: new full-speed USB device number 72 using dummy_hcd
[  902.053990][ T2184] usb 6-1: Product: syz
[  902.076498][ T2184] usb 6-1: Manufacturer: syz
[  902.083973][ T2184] usb 6-1: SerialNumber: syz
[  902.095908][ T2184] smsusb:smsusb_probe: board id=8, interface number 0
[  902.141639][ T2789] netlink: 'syz.0.14375': attribute type 5 has an invalid length.
[  902.173733][ T2789] netlink: 'syz.0.14375': attribute type 11 has an invalid length.
[  902.265810][ T4496] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  902.283588][ T4496] usb 4-1: config 0 has no interface number 0
[  902.299248][ T4496] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  902.301503][ T2184] smsusb:smsusb_probe: Device initialized with return code -19
[  902.315996][ T4496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.349591][ T4496] usb 4-1: Product: syz
[  902.364223][ T4496] usb 4-1: Manufacturer: syz
[  902.370143][ T2800] netlink: 'syz.0.14380': attribute type 2 has an invalid length.
[  902.378407][ T4496] usb 4-1: SerialNumber: syz
[  902.414930][ T4496] usb 4-1: config 0 descriptor??
[  902.455727][ T2800] device .*! entered promiscuous mode
[  902.457948][ T4455] usb 1-1: USB disconnect, device number 64
[  902.461820][ T4496] hub 4-1:0.132: bad descriptor, ignoring hub
[  902.480691][ T4496] hub: probe of 4-1:0.132 failed with error -5
[  902.542992][ T4496] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input60
[  902.566965][ T2808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14382'.
[  902.652918][T11532] usb 6-1: USB disconnect, device number 4
[  902.793398][ T2816] delete_channel: no stack
[  903.033834][ T4339] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  903.223729][ T4339] usb 1-1: Using ep0 maxpacket: 8
[  903.233360][ T4339] usb 1-1: config 6 has an invalid interface number: 2 but max is 0
[  903.251767][ T4339] usb 1-1: config 6 has no interface number 0
[  903.258075][ T4339] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  903.291177][ T4339] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  903.318024][ T4339] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  903.351779][ T4339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.372019][ T4339] usb 1-1: Product: syz
[  903.388202][ T4339] usb 1-1: Manufacturer: syz
[  903.403167][ T4339] usb 1-1: SerialNumber: syz
[  903.404345][ T2847] xt_NFQUEUE: number of total queues is 0
[  903.441254][ T4339] hso 1-1:6.2: Failed to find INT IN ep
[  903.629155][ T2851] loop4: detected capacity change from 0 to 1024
[  903.673513][ T2840] loop1: detected capacity change from 0 to 32768
[  903.675027][ T4339] usb 1-1: USB disconnect, device number 65
[  903.707565][ T2855] netlink: 'syz.3.14401': attribute type 21 has an invalid length.
[  903.721903][ T2840] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  903.730924][ T2855] netlink: 'syz.3.14401': attribute type 1 has an invalid length.
[  903.790515][ T2840] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  903.835847][   T26] audit: type=1326 audit(2000000316.750:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2858 comm="syz.5.14402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  903.903744][ T2840] (syz.1.14393,2840,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9
[  903.906392][   T26] audit: type=1326 audit(2000000316.780:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2858 comm="syz.5.14402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  903.942927][ T2840] (syz.1.14393,2840,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  903.953438][ T2840] (syz.1.14393,2840,0):ocfs2_mknod:298 ERROR: status = -2
[  903.960870][ T2840] (syz.1.14393,2840,0):ocfs2_mknod:502 ERROR: status = -2
[  903.975823][ T2840] (syz.1.14393,2840,0):ocfs2_create:676 ERROR: status = -2
[  903.983146][   T26] audit: type=1326 audit(2000000316.780:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2858 comm="syz.5.14402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  904.005597][    C0] vkms_vblank_simulate: vblank timer overrun
[  904.018508][   T26] audit: type=1326 audit(2000000316.780:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2858 comm="syz.5.14402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6c79bf79 code=0x7ffc0000
[  904.040931][    C0] vkms_vblank_simulate: vblank timer overrun
[  904.186958][ T4277] ocfs2: Unmounting device (7,1) on (node local)
[  904.253181][ T2874] netlink: 'syz.1.14409': attribute type 2 has an invalid length.
[  904.284034][ T2874] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14409'.
[  904.890794][ T2893] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14417'.
[  905.603055][ T2924] netlink: 744 bytes leftover after parsing attributes in process `syz.1.14433'.
[  905.643423][   T26] audit: type=1326 audit(2000000318.550:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2930 comm="syz.4.14436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  905.704925][   T26] audit: type=1326 audit(2000000318.590:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2930 comm="syz.4.14436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  905.777235][   T26] audit: type=1326 audit(2000000318.590:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2930 comm="syz.4.14436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  905.844551][T11532] usb 4-1: USB disconnect, device number 72
[  906.028714][T11532] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  906.191822][ T2956] netlink: 'syz.1.14448': attribute type 46 has an invalid length.
[  906.203377][ T2956] netlink: 'syz.1.14448': attribute type 19 has an invalid length.
[  906.224029][T11532] usb 4-1: Using ep0 maxpacket: 32
[  906.244396][T11532] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  906.252821][T11532] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  906.275496][ T2956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14448'.
[  906.285615][T11532] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  906.323735][T11532] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  906.348333][T11532] usb 4-1: config 1 has no interface number 0
[  906.372315][T11532] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  906.391705][T11532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.440355][T11532] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  906.460351][ T2966] device sit0 left promiscuous mode
[  906.588058][ T4494] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  906.639215][T11532] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values
[  906.657900][T11532] snd_usb_pod 4-1:1.1: invalid control EP
[  906.673877][T11532] snd_usb_pod 4-1:1.1: cannot start listening: -22
[  906.697201][T11532] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  906.712683][T11532] snd_usb_pod: probe of 4-1:1.1 failed with error -22
[  906.784253][ T4494] usb 5-1: Using ep0 maxpacket: 16
[  906.791180][ T4494] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  906.854477][ T4494] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  906.861344][ T4455] usb 4-1: USB disconnect, device number 73
[  906.873780][ T4494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.903884][ T4494] usb 5-1: Product: syz
[  906.908211][ T4494] usb 5-1: Manufacturer: syz
[  906.936861][ T4494] usb 5-1: SerialNumber: syz
[  906.950536][ T4494] usb 5-1: config 0 descriptor??
[  906.979679][ T4494] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  906.994061][ T4494] gspca_stv06xx: st6422 sensor detected
[  907.007039][T11532] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[  907.198803][T11532] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  907.212067][T11532] usb 1-1: config 0 has no interface number 0
[  907.235887][ T2999] ipt_CLUSTERIP: Please specify destination IP
[  907.249563][T11532] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  907.269084][T11532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.304639][T11532] usb 1-1: Product: syz
[  907.309077][T11532] usb 1-1: Manufacturer: syz
[  907.328765][T11532] usb 1-1: SerialNumber: syz
[  907.350051][T11532] usb 1-1: config 0 descriptor??
[  907.361766][T11532] hub 1-1:0.132: bad descriptor, ignoring hub
[  907.373775][ T3004] loop5: detected capacity change from 0 to 512
[  907.380124][T11532] hub: probe of 1-1:0.132 failed with error -5
[  907.406677][T11532] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input61
[  907.475931][ T3004] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  907.495065][ T4494] STV06xx: probe of 5-1:0.0 failed with error -71
[  907.530435][ T3004] EXT4-fs (loop5): 1 truncate cleaned up
[  907.536355][ T3004] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  907.536822][ T4494] usb 5-1: USB disconnect, device number 67
[  907.603797][ T3011] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14473'.
[  907.648294][ T3004] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.14471: Logical block already allocated
[  907.782460][ T3015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14476'.
[  907.789328][  T301] EXT4-fs (loop5): unmounting filesystem.
[  907.915143][ T4339] usb 1-1: USB disconnect, device number 66
[  907.983761][ T3021] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  907.993805][T11532] usb 2-1: new full-speed USB device number 67 using dummy_hcd
[  908.185207][T11532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4
[  908.208480][T11532] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  908.238273][T11532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.270715][T11532] usb 2-1: Product: syz
[  908.283634][T11532] usb 2-1: Manufacturer: syz
[  908.301312][T11532] usb 2-1: SerialNumber: syz
[  908.319788][T11532] usb 2-1: config 0 descriptor??
[  908.345227][T11532] hub 2-1:0.0: bad descriptor, ignoring hub
[  908.363614][T11532] hub: probe of 2-1:0.0 failed with error -5
[  908.402177][T11532] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input62
[  908.563232][ T3042] netlink: 'syz.0.14489': attribute type 10 has an invalid length.
[  908.592425][ T3042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14489'.
[  908.602341][ T3042] device dummy0 entered promiscuous mode
[  908.608972][ T3042] bridge0: port 3(dummy0) entered blocking state
[  908.616591][ T3042] bridge0: port 3(dummy0) entered disabled state
[  908.736585][ T4494] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  908.799118][ T3046] loop4: detected capacity change from 0 to 4096
[  908.806057][T11532] usb 2-1: USB disconnect, device number 67
[  908.841902][ T3046] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  908.935678][ T4494] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  908.965312][ T4494] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  909.001183][ T4494] usb 6-1: config 0 descriptor??
[  909.263881][ T4455] usb 1-1: new low-speed USB device number 67 using dummy_hcd
[  909.415053][ T4494] ath6kl: Failed to submit usb control message: -71
[  909.422543][ T4494] ath6kl: unable to send the bmi data to the device: -71
[  909.436654][ T4494] ath6kl: Unable to send get target info: -71
[  909.451762][ T4494] ath6kl: Failed to init ath6kl core: -71
[  909.463518][ T4455] usb 1-1: string descriptor 0 read error: -22
[  909.469981][ T4455] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  909.506200][ T4455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  909.531000][ T4455] usb 1-1: config 0 descriptor??
[  909.552231][ T4455] usbtest 1-1:0.0: FX2 device
[  909.569277][ T4455] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt)
[  909.756282][ T4455] usb 1-1: USB disconnect, device number 67
[  909.969888][ T3075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14505'.
[  910.042187][ T4494] ath6kl_usb: probe of 6-1:0.0 failed with error -71
[  910.079363][ T4494] usb 6-1: USB disconnect, device number 5
[  910.543739][T11532] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  910.743776][T11532] usb 2-1: Using ep0 maxpacket: 16
[  910.757336][T11532] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  910.787100][T11532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.817459][T11532] usb 2-1: Product: syz
[  910.839773][T11532] usb 2-1: Manufacturer: syz
[  910.844901][T11532] usb 2-1: SerialNumber: syz
[  910.871822][T11532] usb 2-1: config 0 descriptor??
[  910.889472][T11532] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  910.932910][T11532] usb 2-1: Detected FT232H
[  911.307232][T11532] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  911.322347][T11532] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  911.342592][ T3133] CIFS: VFS: Malformed UNC in devname
[  911.363235][T11532] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  911.385778][T11532] usb 2-1: USB disconnect, device number 68
[  911.440417][T11532] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  911.474606][T11532] ftdi_sio 2-1:0.0: device disconnected
[  911.703423][ T3151] netlink: 'syz.5.14539': attribute type 10 has an invalid length.
[  911.800486][ T3153] netlink: 'syz.4.14542': attribute type 11 has an invalid length.
[  911.853177][ T3153] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14542'.
[  911.973772][ T3159] netlink: 292 bytes leftover after parsing attributes in process `syz.1.14545'.
[  912.086831][ T3167] loop4: detected capacity change from 0 to 64
[  912.629726][ T3192] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 3192 comm: syz.5.14561)
[  912.841637][ T3199] binfmt_misc: register: failed to install interpreter file ./file0
[  913.274615][ T3218] loop5: detected capacity change from 0 to 256
[  914.539824][ T3275] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  914.666595][ T3281] netlink: 168 bytes leftover after parsing attributes in process `syz.4.14605'.
[  914.750082][ T3283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14607'.
[  914.772888][ T3283] netlink: 'syz.1.14607': attribute type 1 has an invalid length.
[  915.181352][ T3299] netlink: 830 bytes leftover after parsing attributes in process `syz.4.14616'.
[  915.326686][ T3307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14618'.
[  915.396087][ T3307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14618'.
[  915.692963][ T3319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14624'.
[  915.963377][ T3301] loop1: detected capacity change from 0 to 32768
[  916.029176][ T3301] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  916.145516][ T4310] kworker/dying (4310) used greatest stack depth: 15536 bytes left
[  916.263782][ T4493] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  916.338870][T14031] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  916.455567][ T4493] usb 6-1: Using ep0 maxpacket: 16
[  916.465245][ T4493] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  916.528026][ T4493] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.553759][ T4493] usb 6-1: Product: syz
[  916.557977][ T4493] usb 6-1: Manufacturer: syz
[  916.572804][ T4493] usb 6-1: SerialNumber: syz
[  916.603478][ T4493] r8152-cfgselector 6-1: config 0 descriptor??
[  917.034940][ T4493] r8152-cfgselector 6-1: Unknown version 0x0000
[  917.054099][ T4493] r8152-cfgselector 6-1: USB disconnect, device number 6
[  917.074842][ T3346] loop4: detected capacity change from 0 to 32768
[  917.814009][ T3382] Error parsing options; rc = [-22]
[  918.186111][ T3390] netlink: 'syz.0.14655': attribute type 1 has an invalid length.
[  918.222437][ T3390] netlink: 'syz.0.14655': attribute type 12 has an invalid length.
[  918.245843][ T3390] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14655'.
[  918.366415][ T3378] loop1: detected capacity change from 0 to 32768
[  918.887300][ T3408] loop4: detected capacity change from 0 to 4096
[  918.923509][ T3414] loop1: detected capacity change from 0 to 256
[  918.923734][ T3408] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  918.994567][ T3414] FAT-fs (loop1): Directory bread(block 64) failed
[  919.024263][ T3414] FAT-fs (loop1): Directory bread(block 65) failed
[  919.031218][ T3414] FAT-fs (loop1): Directory bread(block 66) failed
[  919.052101][ T3414] FAT-fs (loop1): Directory bread(block 67) failed
[  919.072258][ T3414] FAT-fs (loop1): Directory bread(block 68) failed
[  919.134023][ T3414] FAT-fs (loop1): Directory bread(block 69) failed
[  919.140692][ T3414] FAT-fs (loop1): Directory bread(block 70) failed
[  919.148096][ T3408] ntfs3: loop4: failed to convert "c46c" to macroman
[  919.178753][ T3414] FAT-fs (loop1): Directory bread(block 71) failed
[  919.224034][ T3414] FAT-fs (loop1): Directory bread(block 72) failed
[  919.234107][ T3414] FAT-fs (loop1): Directory bread(block 73) failed
[  919.414053][ T3424] loop4: detected capacity change from 0 to 512
[  919.543124][ T3424] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  919.574781][ T3424] ext4 filesystem being mounted at /3023/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  919.664874][ T3430] rdma_rxe: rxe creation allowed on top of a real device only
[  919.901496][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  920.203499][ T3448] loop5: detected capacity change from 0 to 1024
[  920.227842][ T3452] VFS: could not find a valid V7 on nullb0.
[  920.246656][ T3448] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  920.964886][ T3483] netlink: 17 bytes leftover after parsing attributes in process `syz.4.14700'.
[  921.359912][T11532] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  921.386304][ T3498] xt_hashlimit: max too large, truncated to 1048576
[  921.553801][T11532] usb 2-1: Using ep0 maxpacket: 32
[  921.568997][T11532] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  921.602951][T11532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.639084][T11532] usb 2-1: Product: syz
[  921.643305][T11532] usb 2-1: Manufacturer: syz
[  921.673797][T11532] usb 2-1: SerialNumber: syz
[  921.689642][T11532] usb 2-1: config 0 descriptor??
[  921.716514][T11532] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  921.858408][   T26] audit: type=1326 audit(2000000334.770:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3513 comm="syz.3.14715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  921.904138][   T26] audit: type=1326 audit(2000000334.770:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3513 comm="syz.3.14715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  921.941656][T11532] gspca_ov534_9: reg_w failed -71
[  921.955167][   T26] audit: type=1326 audit(2000000334.770:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3513 comm="syz.3.14715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  921.978296][   T26] audit: type=1326 audit(2000000334.770:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3513 comm="syz.3.14715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  922.003265][   T26] audit: type=1326 audit(2000000334.770:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3513 comm="syz.3.14715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  922.033892][ T4493] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  922.214988][ T3528] vivid-000: disconnect
[  922.220160][ T3527] vivid-000: reconnect
[  922.233777][ T4493] usb 5-1: Using ep0 maxpacket: 16
[  922.242841][ T4493] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  922.280618][ T4493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.300836][ T4493] usb 5-1: Product: syz
[  922.305216][ T4493] usb 5-1: Manufacturer: syz
[  922.322515][ T4493] usb 5-1: SerialNumber: syz
[  922.333023][ T4493] r8152-cfgselector 5-1: config 0 descriptor??
[  922.466797][T11532] gspca_ov534_9: Unknown sensor 0000
[  922.466865][T11532] ov534_9: probe of 2-1:0.0 failed with error -22
[  922.502860][T11532] usb 2-1: USB disconnect, device number 69
[  922.580797][ T3542] loop5: detected capacity change from 0 to 512
[  922.649435][ T3542] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  922.689616][ T3542] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  922.749860][ T4493] r8152-cfgselector 5-1: Unknown version 0x0000
[  922.757420][ T4493] r8152-cfgselector 5-1: bad CDC descriptors
[  922.765370][ T4493] r8152-cfgselector 5-1: Unknown version 0x0000
[  922.791499][ T4493] r8152-cfgselector 5-1: USB disconnect, device number 68
[  922.834124][ T3550] netlink: 'syz.1.14730': attribute type 21 has an invalid length.
[  922.973150][  T301] EXT4-fs (loop5): unmounting filesystem.
[  923.322243][ T3568] device veth5 entered promiscuous mode
[  923.894410][ T3591] loop4: detected capacity change from 0 to 1024
[  924.393989][ T4493] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  924.530294][ T3631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14769'.
[  924.588622][ T4493] usb 4-1: config 1 has an invalid interface number: 253 but max is 1
[  924.616546][ T4493] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  924.646452][ T4493] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  924.665886][ T4493] usb 4-1: config 1 has no interface number 2
[  924.672488][ T3637] xt_CT: You must specify a L4 protocol and not use inversions on it
[  924.701462][   T26] audit: type=1326 audit(2000000337.610:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3639 comm="syz.4.14773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  924.733053][ T4493] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  924.767370][ T4493] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  924.793613][ T4493] usb 4-1: config 1 interface 1 has no altsetting 0
[  924.802317][   T26] audit: type=1326 audit(2000000337.640:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3639 comm="syz.4.14773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  924.836345][ T4493] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  924.845683][ T3642] netlink: 244 bytes leftover after parsing attributes in process `syz.1.14774'.
[  924.873501][ T4493] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.892105][   T26] audit: type=1326 audit(2000000337.640:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3639 comm="syz.4.14773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  924.924406][ T3647] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14777'.
[  924.925199][ T4493] usb 4-1: Product: syz
[  924.944675][ T4493] usb 4-1: Manufacturer: syz
[  924.964606][ T4493] usb 4-1: SerialNumber: syz
[  924.969945][   T26] audit: type=1326 audit(2000000337.640:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3639 comm="syz.4.14773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  925.017580][ T4493] cdc_ncm 4-1:1.253: CDC Union missing and no IAD found
[  925.030997][ T4493] cdc_ncm 4-1:1.253: bind() failure
[  925.502576][T11532] usb 4-1: USB disconnect, device number 74
[  925.583710][ T4493] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  925.750193][ T3658] loop1: detected capacity change from 0 to 32768
[  925.785511][ T4493] usb 5-1: config 2 interface 0 has no altsetting 0
[  925.794930][ T3658] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  925.810790][ T4493] usb 5-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6
[  925.848867][ T4493] usb 5-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3
[  925.880692][ T4493] usb 5-1: Product: syz
[  925.897993][ T4493] usb 5-1: Manufacturer: syz
[  925.902667][ T4493] usb 5-1: SerialNumber: syz
[  925.958180][ T4493] usb 5-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state
[  925.996762][ T4493] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  926.046469][ T4493] dvbdev: DVB: registering new adapter (Hauppauge Mercury)
[  926.066573][ T4493] usb 5-1: media controller created
[  926.090949][T14031] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  926.161717][ T4493] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  926.242496][ T4493] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  926.262550][ T4493] error writing reg: 0xff, val: 0x00
[  926.262892][ T3697] overlayfs: unrecognized mount option "smackfstransmute=l-\]\" or missing value
[  926.327286][ T4493] dvb_usb_mxl111sf: probe of 5-1:2.0 failed with error -22
[  926.527932][ T4493] usb 5-1: USB disconnect, device number 69
[  926.869571][ T3719] loop1: detected capacity change from 0 to 1024
[  926.934634][ T3719] hfsplus: invalid length 256 has been corrected to 255
[  926.973893][ T3719] hfsplus: invalid length 256 has been corrected to 255
[  927.070481][T13148] hfsplus: b-tree write err: -5, ino 4
[  927.079148][T13148] hfsplus: invalid length 256 has been corrected to 255
[  927.628827][ T3745] comedi comedi3: comedi_config --init_data is deprecated
[  928.392353][ T3780] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  928.599344][ T3785] ALSA: mixer_oss: invalid OSS volume ''
[  928.676440][ T3792] netlink: 'syz.5.14848': attribute type 2 has an invalid length.
[  928.703757][ T3794] netlink: 'syz.0.14849': attribute type 9 has an invalid length.
[  928.865761][ T3798] loop4: detected capacity change from 0 to 256
[  928.972758][ T3798] FAT-fs (loop4): Directory bread(block 64) failed
[  928.989351][ T3798] FAT-fs (loop4): Directory bread(block 65) failed
[  929.021031][ T3798] FAT-fs (loop4): Directory bread(block 66) failed
[  929.051627][ T3798] FAT-fs (loop4): Directory bread(block 67) failed
[  929.070844][ T3798] FAT-fs (loop4): Directory bread(block 68) failed
[  929.085915][ T3798] FAT-fs (loop4): Directory bread(block 69) failed
[  929.133320][ T3798] FAT-fs (loop4): Directory bread(block 70) failed
[  929.148578][ T3810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14857'.
[  929.153702][ T3798] FAT-fs (loop4): Directory bread(block 71) failed
[  929.179284][ T3798] FAT-fs (loop4): Directory bread(block 72) failed
[  929.196672][ T3798] FAT-fs (loop4): Directory bread(block 73) failed
[  929.205838][ T3810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14857'.
[  929.283619][ T3810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14857'.
[  929.336261][ T3801] lo speed is unknown, defaulting to 1000
[  929.409466][ T3801] lo speed is unknown, defaulting to 1000
[  930.247214][ T3847] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14874'.
[  930.446626][ T3857] loop5: detected capacity change from 0 to 128
[  930.470193][ T3857] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  930.523428][ T3857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  930.622012][ T3865] loop4: detected capacity change from 0 to 1024
[  930.650088][ T3865] EXT4-fs: inline encryption not supported
[  930.704059][ T3865] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  930.776434][ T3871] xt_CT: You must specify a L4 protocol and not use inversions on it
[  930.807686][ T3865] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  930.869346][ T3865] loop4: Can't mount, would change RO state
[  931.056632][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  931.258022][ T3888] loop1: detected capacity change from 0 to 256
[  931.307889][ T3888] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  931.432236][ T3888] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008)
[  931.444119][ T3894] No such timeout policy "syz1"
[  931.478491][ T3888] exFAT-fs (loop1): Filesystem has been set read-only
[  931.505929][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  931.512267][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  931.534630][ T4491] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  931.763006][ T4491] usb 5-1: unable to get BOS descriptor or descriptor too short
[  931.780836][ T4491] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  931.812669][ T4491] usb 5-1: New USB device found, idVendor=04b8, idProduct=ef02, bcdDevice= 0.3f
[  931.836726][ T4491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.870131][ T4491] usb 5-1: Product: syz
[  931.878798][ T4491] usb 5-1: Manufacturer: syz
[  931.896546][ T4491] usb 5-1: SerialNumber: syz
[  931.941875][ T3914] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  932.003792][ T3914] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  932.051177][ T3914] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  932.080629][ T3914] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  932.123826][ T4491] usb 5-1: USB disconnect, device number 70
[  932.168054][ T3914] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  932.233997][ T3914] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  932.253732][ T3914] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  932.264152][ T3914] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  932.274394][ T3914] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  932.332695][ T3914] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  932.594907][ T3937] QAT: failed to copy from user.
[  932.626347][ T3915] loop5: detected capacity change from 0 to 32768
[  932.706467][ T3915] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  932.764607][ T3915] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  932.964814][ T3949] netlink: 168 bytes leftover after parsing attributes in process `syz.4.14919'.
[  933.162727][  T301] ocfs2: Unmounting device (7,5) on (node local)
[  933.812437][ T3979] device batadv0 entered promiscuous mode
[  933.870984][ T3981] xt_recent: Unsupported userspace flags (000000de)
[  934.176867][ T3996] loop1: detected capacity change from 0 to 128
[  934.225400][T11532] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  934.426437][T11532] usb 5-1: Using ep0 maxpacket: 32
[  934.437328][T11532] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  934.472246][T11532] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  934.535442][T11532] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  934.554458][T11532] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  934.562863][T11532] usb 5-1: Product: syz
[  934.618966][T11532] usb 5-1: Manufacturer: syz
[  934.646788][T11532] hub 5-1:4.0: USB hub found
[  934.851829][T11532] hub 5-1:4.0: 2 ports detected
[  935.054756][T11532] hub 5-1:4.0: hub_hub_status failed (err = -71)
[  935.063088][T11532] hub 5-1:4.0: config failed, can't get hub status (err -71)
[  935.134630][T11532] usb 5-1: USB disconnect, device number 71
[  935.239848][ T4012] loop1: detected capacity change from 0 to 32768
[  935.272608][ T4012] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  935.554751][T14031] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  936.031492][ T4063] loop4: detected capacity change from 0 to 1764
[  936.100836][ T4063] iso9660: Corrupted directory entry in block 2 of inode 1920
[  936.650876][ T4091] IPVS: length: 218 != 24
[  936.893607][T11532] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  937.035592][ T4110] netlink: 'syz.5.14992': attribute type 11 has an invalid length.
[  937.095494][T11532] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  937.125950][T11532] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  937.144175][T11532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.186918][ T4115] loop4: detected capacity change from 0 to 128
[  937.247872][T11532] gspca_main: stv0680-2.14.0 probing 041e:4007
[  937.767973][ T4139] xt_CT: You must specify a L4 protocol and not use inversions on it
[  937.784063][ T4138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15007'.
[  937.877414][ T4141] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (32)
[  938.146988][ T4155] loop5: detected capacity change from 0 to 64
[  938.302140][ T4157] xt_HMARK: spi-set and port-set can't be combined
[  938.310858][T11532] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  938.330464][ T4159] rtc_cmos 00:00: Alarms can be up to one day in the future
[  938.512232][T11532] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  938.535432][T11532] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  938.544856][   T26] audit: type=1326 audit(2000000351.460:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4166 comm="syz.1.15021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a239bf79 code=0x7ffc0000
[  938.551353][T11532] usb 4-1: USB disconnect, device number 75
[  938.617824][   T26] audit: type=1326 audit(2000000351.500:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4166 comm="syz.1.15021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f23a239bf79 code=0x7ffc0000
[  938.641542][ T4165] device batadv0 entered promiscuous mode
[  938.699361][ T4165] net_ratelimit: 2359 callbacks suppressed
[  938.699381][ T4165] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  938.713878][   T26] audit: type=1326 audit(2000000351.500:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4166 comm="syz.1.15021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a239bf79 code=0x7ffc0000
[  938.793862][ T4173] loop1: detected capacity change from 0 to 1024
[  938.816502][ T4176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15026'.
[  938.843615][   T26] audit: type=1326 audit(2000000351.500:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4166 comm="syz.1.15021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a239bf79 code=0x7ffc0000
[  938.852612][ T4173] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  938.887335][ T4176] netlink: 'syz.5.15026': attribute type 1 has an invalid length.
[  938.898810][ T4173] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  938.944121][ T4173] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.15024: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0)
[  939.030696][ T4173] EXT4-fs (loop1): no journal found
[  939.073866][ T4173] EXT4-fs (loop1): can't get journal size
[  939.102723][ T4173] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  939.352875][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15033'.
[  939.363125][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  939.719650][ T4214] netlink: 'syz.1.15044': attribute type 19 has an invalid length.
[  939.744205][ T4214] netlink: 5 bytes leftover after parsing attributes in process `syz.1.15044'.
[  939.941192][ T4221] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15047'.
[  939.993662][ T4221] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15047'.
[  940.030995][ T4221] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15047'.
[  940.213937][ T4233] netlink: 'syz.3.15053': attribute type 1 has an invalid length.
[  940.246801][ T4233] netlink: 228 bytes leftover after parsing attributes in process `syz.3.15053'.
[  940.570355][   T26] audit: type=1326 audit(2000000353.480:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.3.15063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  940.651945][   T26] audit: type=1326 audit(2000000353.480:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.3.15063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  940.767469][   T26] audit: type=1326 audit(2000000353.540:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.3.15063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  940.874662][   T26] audit: type=1326 audit(2000000353.540:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.3.15063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  940.961734][   T26] audit: type=1326 audit(2000000353.540:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.3.15063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  941.203841][T11532] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  941.396047][T11532] usb 6-1: config 0 has an invalid interface number: 58 but max is 0
[  941.423778][T11532] usb 6-1: config 0 has no interface number 0
[  941.447287][T11532] usb 6-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  941.486738][T11532] usb 6-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64
[  941.522105][T11532] usb 6-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81
[  941.539278][T11532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  941.564804][T11532] usb 6-1: Product: syz
[  941.569022][T11532] usb 6-1: Manufacturer: syz
[  941.573872][T11532] usb 6-1: SerialNumber: syz
[  941.596866][T11532] usb 6-1: config 0 descriptor??
[  941.602600][ T4283] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  941.853033][T11532] kaweth 6-1:0.58: Firmware present in device.
[  942.035566][T11532] kaweth 6-1:0.58: Error reading configuration (-71), no net device created
[  942.054617][T11532] kaweth: probe of 6-1:0.58 failed with error -5
[  942.074834][T11532] usb 6-1: USB disconnect, device number 7
[  942.605568][   T26] audit: type=1326 audit(2000000355.520:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.0.15103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6587f9bf79 code=0x7ffc0000
[  943.208404][ T4410] loop4: detected capacity change from 0 to 22
[  943.238504][ T4410] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  943.275606][ T4410] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  943.484625][ T4421] loop1: detected capacity change from 0 to 256
[  943.536371][ T4421] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  943.577917][ T4421] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  943.598617][ T4421] FAT-fs (loop1): Filesystem has been set read-only
[  943.616482][ T4421] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  943.726709][ T4421] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  943.765667][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15123'.
[  944.300947][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  944.300963][   T26] audit: type=1326 audit(2000000357.210:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4446 comm="syz.4.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  944.343830][ T4494] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  944.349271][   T26] audit: type=1326 audit(2000000357.210:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4446 comm="syz.4.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  944.383791][   T26] audit: type=1326 audit(2000000357.260:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4446 comm="syz.4.15134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fc46e59bf79 code=0x7ffc0000
[  944.545399][ T4494] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  944.569882][ T4494] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  944.613054][ T4494] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  944.626031][ T4494] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  944.626086][ T4458] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15139'.
[  944.636048][ T4494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.672189][ T4494] usb 1-1: config 0 descriptor??
[  944.716772][ T4458] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15139'.
[  944.894340][ T4494] usb 1-1: USB disconnect, device number 68
[  945.047274][   T26] audit: type=1326 audit(2000000357.960:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.3.15146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  945.103110][   T26] audit: type=1326 audit(2000000357.960:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.3.15146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  945.125618][    C0] vkms_vblank_simulate: vblank timer overrun
[  945.179764][   T26] audit: type=1326 audit(2000000357.960:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.3.15146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  945.252285][   T26] audit: type=1326 audit(2000000357.960:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.3.15146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  945.274680][    C0] vkms_vblank_simulate: vblank timer overrun
[  945.326215][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15149'.
[  945.333652][   T26] audit: type=1326 audit(2000000358.010:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.3.15146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  945.357591][    C0] vkms_vblank_simulate: vblank timer overrun
[  945.413040][ T4464] loop5: detected capacity change from 0 to 32768
[  945.419640][   T26] audit: type=1326 audit(2000000358.010:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.3.15146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  945.442073][    C0] vkms_vblank_simulate: vblank timer overrun
[  945.466384][ T4464] (syz.5.15142,4464,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  945.489742][ T4464] (syz.5.15142,4464,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  945.536683][   T26] audit: type=1326 audit(2000000358.010:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.3.15146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514cd9bf79 code=0x7ffc0000
[  945.559129][    C0] vkms_vblank_simulate: vblank timer overrun
[  945.582476][ T4464] JBD2: Ignoring recovery information on journal
[  945.732936][ T4464] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  945.956567][ T4501] xt_TCPMSS: Only works on TCP SYN packets
[  946.078440][  T301] ocfs2: Unmounting device (7,5) on (node local)
[  946.138292][ T4505] loop4: detected capacity change from 0 to 1764
[  946.938201][T11532] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  947.004271][ T4542] loop1: detected capacity change from 0 to 512
[  947.051106][ T4544] loop4: detected capacity change from 0 to 64
[  947.102288][ T4548] netlink: 'syz.0.15179': attribute type 21 has an invalid length.
[  947.145235][T11532] usb 6-1: config 0 has an invalid interface number: 20 but max is 0
[  947.156066][T11532] usb 6-1: config 0 has no interface number 0
[  947.165577][T11532] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  947.168004][ T4542] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  947.183437][T11532] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  947.187831][ T4544] Trying to free block not in datazone
[  947.198386][T11532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.208700][T11532] usb 6-1: Product: syz
[  947.212897][T11532] usb 6-1: Manufacturer: syz
[  947.218042][T11532] usb 6-1: SerialNumber: syz
[  947.228324][T11532] usb 6-1: config 0 descriptor??
[  947.234876][ T4548] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15179'.
[  947.243710][ T4544] Trying to free block not in datazone
[  947.244569][ T4527] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  947.262043][T11532] usb-storage 6-1:0.20: USB Mass Storage device detected
[  947.271483][T11532] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  947.279483][ T4544] Trying to free block not in datazone
[  947.293976][ T4544] Trying to free block not in datazone
[  947.334021][ T4544] minix_free_block (loop4:6): bit already cleared
[  947.382138][ T4544] Trying to free block not in datazone
[  947.393862][ T4544] Trying to free block not in datazone
[  947.401250][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  947.487252][T11532] scsi host1: usb-storage 6-1:0.20
[  947.694132][ T4494] usb 6-1: USB disconnect, device number 8
[  948.116312][ T4580] IPv6: Can't replace route, no match found
[  948.408133][ T4590] loop5: detected capacity change from 0 to 1024
[  948.567027][   T46] hfsplus: b-tree write err: -5, ino 4
[  949.043201][ T4615] loop4: detected capacity change from 0 to 256
[  949.083962][ T4613] netlink: 'syz.3.15207': attribute type 1 has an invalid length.
[  949.097557][ T4615] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  949.148581][ T4615] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  949.198201][ T4615] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  949.568285][ T4628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  949.944300][ T4642] openvswitch: netlink: Key type 316 is out of range max 32
[  950.226946][ T4598] loop1: detected capacity change from 0 to 32768
[  950.283697][ T4598] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  950.411889][ T4657] loop5: detected capacity change from 0 to 128
[  950.601844][T14031] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  951.479286][ T4697] loop5: detected capacity change from 0 to 64
[  951.533790][ T4697] hfs: unable to locate alternate MDB
[  951.539743][ T4697] hfs: continuing without an alternate MDB
[  951.686015][   T68] 
[  951.688400][   T68] ======================================================
[  951.695421][   T68] WARNING: possible circular locking dependency detected
[  951.702452][   T68] syzkaller #0 Not tainted
[  951.706867][   T68] ------------------------------------------------------
[  951.713887][   T68] kworker/u4:4/68 is trying to acquire lock:
[  951.719868][   T68] ffff888056d3cef8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0
[  951.730702][   T68] 
[  951.730702][   T68] but task is already holding lock:
[  951.738071][   T68] ffff8880557fe0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[  951.747595][   T68] 
[  951.747595][   T68] which lock already depends on the new lock.
[  951.747595][   T68] 
[  951.758006][   T68] 
[  951.758006][   T68] the existing dependency chain (in reverse order) is:
[  951.767028][   T68] 
[  951.767028][   T68] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}:
[  951.775234][   T68]        __mutex_lock+0x12d/0xaf0
[  951.780288][   T68]        hfs_find_init+0x15b/0x1d0
[  951.785417][   T68]        hfs_extend_file+0x35d/0x13f0
[  951.790807][   T68]        hfs_bmap_reserve+0x103/0x420
[  951.796200][   T68]        hfs_cat_create+0x204/0x8e0
[  951.801420][   T68]        hfs_mkdir+0x68/0xe0
[  951.806026][   T68]        vfs_mkdir+0x387/0x570
[  951.810802][   T68]        do_mkdirat+0x1d8/0x440
[  951.815668][   T68]        __x64_sys_mkdirat+0x85/0x90
[  951.820967][   T68]        do_syscall_64+0x4c/0xa0
[  951.825926][   T68]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  951.832358][   T68] 
[  951.832358][   T68] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[  951.841600][   T68]        __lock_acquire+0x2d07/0x7d10
[  951.846989][   T68]        lock_acquire+0x1bb/0x4a0
[  951.852031][   T68]        __mutex_lock+0x12d/0xaf0
[  951.857074][   T68]        hfs_extend_file+0xfb/0x13f0
[  951.862375][   T68]        hfs_bmap_reserve+0x103/0x420
[  951.867760][   T68]        __hfs_ext_write_extent+0x1fa/0x470
[  951.873668][   T68]        hfs_ext_write_extent+0x17b/0x200
[  951.879400][   T68]        hfs_write_inode+0xd8/0xa20
[  951.884611][   T68]        __writeback_single_inode+0x75b/0x1160
[  951.890788][   T68]        writeback_sb_inodes+0xb30/0x1850
[  951.896523][   T68]        wb_writeback+0x482/0xd50
[  951.901561][   T68]        wb_workfn+0x423/0xee0
[  951.906357][   T68]        process_one_work+0x8a2/0x1160
[  951.911835][   T68]        worker_thread+0xaa2/0x1270
[  951.917050][   T68]        kthread+0x29d/0x330
[  951.921731][   T68]        ret_from_fork+0x1f/0x30
[  951.926683][   T68] 
[  951.926683][   T68] other info that might help us debug this:
[  951.926683][   T68] 
[  951.936921][   T68]  Possible unsafe locking scenario:
[  951.936921][   T68] 
[  951.944382][   T68]        CPU0                    CPU1
[  951.949773][   T68]        ----                    ----
[  951.955147][   T68]   lock(&tree->tree_lock#2/1);
[  951.960023][   T68]                                lock(&HFS_I(tree->inode)->extents_lock);
[  951.968537][   T68]                                lock(&tree->tree_lock#2/1);
[  951.975935][   T68]   lock(&HFS_I(tree->inode)->extents_lock);
[  951.981927][   T68] 
[  951.981927][   T68]  *** DEADLOCK ***
[  951.981927][   T68] 
[  951.990074][   T68] 3 locks held by kworker/u4:4/68:
[  951.995188][   T68]  #0: ffff888145655938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  952.005831][   T68]  #1: ffffc900015a7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  952.017695][   T68]  #2: ffff8880557fe0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[  952.027656][   T68] 
[  952.027656][   T68] stack backtrace:
[  952.033552][   T68] CPU: 1 PID: 68 Comm: kworker/u4:4 Not tainted syzkaller #0
[  952.040929][   T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  952.050997][   T68] Workqueue: writeback wb_workfn (flush-7:5)
[  952.057012][   T68] Call Trace:
[  952.060293][   T68]  <TASK>
[  952.063225][   T68]  dump_stack_lvl+0x188/0x24e
[  952.067915][   T68]  ? load_image+0x400/0x400
[  952.072426][   T68]  ? show_regs_print_info+0x12/0x12
[  952.077642][   T68]  ? print_circular_bug+0x12b/0x1a0
[  952.082862][   T68]  check_noncircular+0x296/0x330
[  952.087811][   T68]  ? look_up_lock_class+0x75/0x140
[  952.092935][   T68]  ? add_chain_block+0x940/0x940
[  952.097886][   T68]  ? lockdep_lock+0xf1/0x1f0
[  952.102491][   T68]  ? unwind_next_frame+0x1880/0x20b0
[  952.107786][   T68]  ? _find_first_zero_bit+0xcf/0x100
[  952.113079][   T68]  __lock_acquire+0x2d07/0x7d10
[  952.117942][   T68]  ? ret_from_fork+0x1f/0x30
[  952.122565][   T68]  ? ret_from_fork+0x1f/0x30
[  952.125794][ T4692] loop4: detected capacity change from 0 to 8192
[  952.127151][   T68]  ? verify_lock_unused+0x140/0x140
[  952.138661][   T68]  ? stack_trace_save+0xa6/0xf0
[  952.143527][   T68]  ? stack_trace_snprint+0xf0/0xf0
[  952.148656][   T68]  ? check_noncircular+0x189/0x330
[  952.153788][   T68]  ? add_chain_block+0x940/0x940
[  952.158741][   T68]  lock_acquire+0x1bb/0x4a0
[  952.163251][   T68]  ? hfs_extend_file+0xfb/0x13f0
[  952.168193][   T68]  ? __might_sleep+0xd0/0xd0
[  952.172774][   T68]  ? read_lock_is_recursive+0x10/0x10
[  952.178145][   T68]  __mutex_lock+0x12d/0xaf0
[  952.182644][   T68]  ? hfs_extend_file+0xfb/0x13f0
[  952.187577][   T68]  ? verify_lock_unused+0x140/0x140
[  952.192769][   T68]  ? hfs_extend_file+0xfb/0x13f0
[  952.197698][   T68]  ? mutex_lock_nested+0x10/0x10
[  952.202630][   T68]  ? __stack_depot_save+0x421/0x460
[  952.207828][   T68]  hfs_extend_file+0xfb/0x13f0
[  952.212593][   T68]  ? hfs_ext_write_extent+0x14e/0x200
[  952.217972][   T68]  ? hfs_write_inode+0xd8/0xa20
[  952.222838][   T68]  ? hfs_get_block+0xc50/0xc50
[  952.227618][   T68]  ? trace_raw_output_contention_end+0xd0/0xd0
[  952.233772][   T68]  ? rcu_is_watching+0x11/0xa0
[  952.238531][   T68]  ? trace_contention_end+0x5f/0x170
[  952.243822][   T68]  ? memset+0x1e/0x40
[  952.247797][   T68]  ? hfs_brec_find+0x197/0x500
[  952.252553][   T68]  hfs_bmap_reserve+0x103/0x420
[  952.257401][   T68]  __hfs_ext_write_extent+0x1fa/0x470
[  952.262766][   T68]  hfs_ext_write_extent+0x17b/0x200
[  952.267955][   T68]  ? verify_lock_unused+0x140/0x140
[  952.273144][   T68]  ? hfs_ext_keycmp+0x310/0x310
[  952.277990][   T68]  ? writeback_sb_inodes+0x46b/0x1850
[  952.283357][   T68]  hfs_write_inode+0xd8/0xa20
[  952.288029][   T68]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  952.293395][   T68]  ? __writeback_single_inode+0x4ae/0x1160
[  952.299193][   T68]  ? __lock_acquire+0x7d10/0x7d10
[  952.304209][   T68]  ? do_raw_spin_lock+0x128/0x2f0
[  952.309222][   T68]  ? __rwlock_init+0x140/0x140
[  952.313976][   T68]  __writeback_single_inode+0x75b/0x1160
[  952.319603][   T68]  writeback_sb_inodes+0xb30/0x1850
[  952.324805][   T68]  ? queue_io+0x5a0/0x5a0
[  952.329134][   T68]  ? rcu_is_watching+0x11/0xa0
[  952.333893][   T68]  wb_writeback+0x482/0xd50
[  952.338391][   T68]  ? percpu_ref_tryget+0x250/0x250
[  952.343495][   T68]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  952.349475][   T68]  ? _raw_spin_unlock_irq+0x1f/0x40
[  952.354665][   T68]  wb_workfn+0x423/0xee0
[  952.358905][   T68]  ? inode_wait_for_writeback+0x220/0x220
[  952.364655][   T68]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  952.370628][   T68]  ? read_lock_is_recursive+0x10/0x10
[  952.375992][   T68]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  952.381874][   T68]  ? _raw_spin_unlock+0x40/0x40
[  952.386712][   T68]  ? _raw_spin_unlock_irq+0x1f/0x40
[  952.391898][   T68]  ? process_one_work+0x7b0/0x1160
[  952.397000][   T68]  process_one_work+0x8a2/0x1160
[  952.401934][   T68]  ? worker_detach_from_pool+0x240/0x240
[  952.407557][   T68]  ? _raw_spin_lock_irq+0xb7/0xf0
[  952.412575][   T68]  ? _raw_spin_lock_irqsave+0x100/0x100
[  952.418109][   T68]  ? kthread_data+0x4b/0xc0
[  952.422607][   T68]  worker_thread+0xaa2/0x1270
[  952.427283][   T68]  kthread+0x29d/0x330
[  952.431337][   T68]  ? worker_clr_flags+0x1a0/0x1a0
[  952.436368][   T68]  ? kthread_blkcg+0xd0/0xd0
[  952.440976][   T68]  ret_from_fork+0x1f/0x30
[  952.445402][   T68]  </TASK>
[  952.452568][   T68] hfs: new node 0 already hashed?
[  952.458161][   T68] ------------[ cut here ]------------
[  952.463794][   T68] WARNING: CPU: 0 PID: 68 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400
[  952.472594][   T68] Modules linked in:
[  952.476607][   T68] CPU: 0 PID: 68 Comm: kworker/u4:4 Not tainted syzkaller #0
[  952.484012][   T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  952.494125][   T68] Workqueue: writeback wb_workfn (flush-7:5)
[  952.500148][   T68] RIP: 0010:hfs_bnode_create+0x37a/0x400
[  952.505843][   T68] Code: aa a2 8a 89 ee e8 56 3b d6 07 e9 ab fd ff ff e8 4c 51 37 ff 48 89 df e8 04 8b eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 36 3b d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c
[  952.525508][   T68] RSP: 0018:ffffc900015a6e80 EFLAGS: 00010246
[  952.531605][   T68] RAX: 000000000000001f RBX: ffff8880557fe0e0 RCX: e289edab6444e500
[  952.539657][   T68] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  952.547691][   T68] RBP: 0000000000000000 R08: ffffc900015a6b07 R09: 1ffff920002b4d60
[  952.555728][   T68] R10: dffffc0000000000 R11: fffff520002b4d61 R12: 0000000000000000
[  952.563744][   T68] R13: ffff8880557fe000 R14: ffff888026e5d800 R15: dffffc0000000000
[  952.571744][   T68] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  952.580735][   T68] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  952.587375][   T68] CR2: 00007fbf819b6000 CR3: 0000000023c56000 CR4: 00000000003506f0
[  952.595405][   T68] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  952.603396][   T68] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  952.611429][   T68] Call Trace:
[  952.614742][   T68]  <TASK>
[  952.617683][   T68]  hfs_bmap_alloc+0x53d/0x5d0
[  952.622385][   T68]  ? hfs_bmap_reserve+0x420/0x420
[  952.627470][   T68]  ? rcu_is_watching+0x11/0xa0
[  952.632253][   T68]  hfs_btree_inc_height+0xfd/0xac0
[  952.637428][   T68]  ? hfs_brec_insert+0x6f6/0xbd0
[  952.642384][   T68]  ? hfs_brec_insert+0xbd0/0xbd0
[  952.647379][   T68]  ? do_raw_spin_unlock+0x11d/0x230
[  952.652587][   T68]  hfs_brec_insert+0x744/0xbd0
[  952.657413][   T68]  ? hfs_brec_keylen+0x350/0x350
[  952.662374][   T68]  __hfs_ext_write_extent+0x2a1/0x470
[  952.667812][   T68]  hfs_ext_write_extent+0x17b/0x200
[  952.673031][   T68]  ? verify_lock_unused+0x140/0x140
[  952.678292][   T68]  ? hfs_ext_keycmp+0x310/0x310
[  952.683155][   T68]  ? writeback_sb_inodes+0x46b/0x1850
[  952.688587][   T68]  hfs_write_inode+0xd8/0xa20
[  952.693285][   T68]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  952.698713][   T68]  ? __writeback_single_inode+0x4ae/0x1160
[  952.704573][   T68]  ? __lock_acquire+0x7d10/0x7d10
[  952.709616][   T68]  ? do_raw_spin_lock+0x128/0x2f0
[  952.714685][   T68]  ? __rwlock_init+0x140/0x140
[  952.719462][   T68]  __writeback_single_inode+0x75b/0x1160
[  952.725150][   T68]  writeback_sb_inodes+0xb30/0x1850
[  952.730373][   T68]  ? queue_io+0x5a0/0x5a0
[  952.734759][   T68]  ? rcu_is_watching+0x11/0xa0
[  952.739541][   T68]  wb_writeback+0x482/0xd50
[  952.744093][   T68]  ? percpu_ref_tryget+0x250/0x250
[  952.749220][   T68]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  952.755259][   T68]  ? _raw_spin_unlock_irq+0x1f/0x40
[  952.760466][   T68]  wb_workfn+0x423/0xee0
[  952.764768][   T68]  ? inode_wait_for_writeback+0x220/0x220
[  952.770506][   T68]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  952.776572][   T68]  ? read_lock_is_recursive+0x10/0x10
[  952.781960][   T68]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  952.787906][   T68]  ? _raw_spin_unlock+0x40/0x40
[  952.792761][   T68]  ? _raw_spin_unlock_irq+0x1f/0x40
[  952.797990][   T68]  ? process_one_work+0x7b0/0x1160
[  952.803104][   T68]  process_one_work+0x8a2/0x1160
[  952.808070][   T68]  ? worker_detach_from_pool+0x240/0x240
[  952.813732][   T68]  ? _raw_spin_lock_irq+0xb7/0xf0
[  952.818761][   T68]  ? _raw_spin_lock_irqsave+0x100/0x100
[  952.824331][   T68]  ? kthread_data+0x4b/0xc0
[  952.828842][   T68]  worker_thread+0xaa2/0x1270
[  952.833551][   T68]  kthread+0x29d/0x330
[  952.837629][   T68]  ? worker_clr_flags+0x1a0/0x1a0
[  952.842639][   T68]  ? kthread_blkcg+0xd0/0xd0
[  952.847262][   T68]  ret_from_fork+0x1f/0x30
[  952.851688][   T68]  </TASK>
[  952.854724][   T68] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  952.861999][   T68] CPU: 0 PID: 68 Comm: kworker/u4:4 Not tainted syzkaller #0
[  952.869357][   T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  952.879397][   T68] Workqueue: writeback wb_workfn (flush-7:5)
[  952.885375][   T68] Call Trace:
[  952.888662][   T68]  <TASK>
[  952.891576][   T68]  dump_stack_lvl+0x188/0x24e
[  952.896247][   T68]  ? memcpy+0x3c/0x60
[  952.900222][   T68]  ? show_regs_print_info+0x12/0x12
[  952.905403][   T68]  ? load_image+0x400/0x400
[  952.909896][   T68]  panic+0x2e5/0x730
[  952.913791][   T68]  ? bpf_jit_dump+0xd0/0xd0
[  952.918381][   T68]  ? ret_from_fork+0x1f/0x30
[  952.922958][   T68]  __warn+0x2f8/0x4f0
[  952.926925][   T68]  ? hfs_bnode_create+0x37a/0x400
[  952.931935][   T68]  ? hfs_bnode_create+0x37a/0x400
[  952.936946][   T68]  report_bug+0x2ba/0x4f0
[  952.941267][   T68]  ? hfs_bnode_create+0x37a/0x400
[  952.946275][   T68]  handle_bug+0x3a/0x70
[  952.950452][   T68]  exc_invalid_op+0x16/0x40
[  952.954941][   T68]  asm_exc_invalid_op+0x16/0x20
[  952.959779][   T68] RIP: 0010:hfs_bnode_create+0x37a/0x400
[  952.965408][   T68] Code: aa a2 8a 89 ee e8 56 3b d6 07 e9 ab fd ff ff e8 4c 51 37 ff 48 89 df e8 04 8b eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 36 3b d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c
[  952.985021][   T68] RSP: 0018:ffffc900015a6e80 EFLAGS: 00010246
[  952.991073][   T68] RAX: 000000000000001f RBX: ffff8880557fe0e0 RCX: e289edab6444e500
[  952.999030][   T68] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  953.006985][   T68] RBP: 0000000000000000 R08: ffffc900015a6b07 R09: 1ffff920002b4d60
[  953.014953][   T68] R10: dffffc0000000000 R11: fffff520002b4d61 R12: 0000000000000000
[  953.022924][   T68] R13: ffff8880557fe000 R14: ffff888026e5d800 R15: dffffc0000000000
[  953.030890][   T68]  hfs_bmap_alloc+0x53d/0x5d0
[  953.035564][   T68]  ? hfs_bmap_reserve+0x420/0x420
[  953.040578][   T68]  ? rcu_is_watching+0x11/0xa0
[  953.045333][   T68]  hfs_btree_inc_height+0xfd/0xac0
[  953.050431][   T68]  ? hfs_brec_insert+0x6f6/0xbd0
[  953.055357][   T68]  ? hfs_brec_insert+0xbd0/0xbd0
[  953.060281][   T68]  ? do_raw_spin_unlock+0x11d/0x230
[  953.065470][   T68]  hfs_brec_insert+0x744/0xbd0
[  953.070258][   T68]  ? hfs_brec_keylen+0x350/0x350
[  953.075186][   T68]  __hfs_ext_write_extent+0x2a1/0x470
[  953.080544][   T68]  hfs_ext_write_extent+0x17b/0x200
[  953.085726][   T68]  ? verify_lock_unused+0x140/0x140
[  953.090919][   T68]  ? hfs_ext_keycmp+0x310/0x310
[  953.095769][   T68]  ? writeback_sb_inodes+0x46b/0x1850
[  953.101134][   T68]  hfs_write_inode+0xd8/0xa20
[  953.105797][   T68]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  953.111156][   T68]  ? __writeback_single_inode+0x4ae/0x1160
[  953.116951][   T68]  ? __lock_acquire+0x7d10/0x7d10
[  953.121961][   T68]  ? do_raw_spin_lock+0x128/0x2f0
[  953.126997][   T68]  ? __rwlock_init+0x140/0x140
[  953.131760][   T68]  __writeback_single_inode+0x75b/0x1160
[  953.137379][   T68]  writeback_sb_inodes+0xb30/0x1850
[  953.142568][   T68]  ? queue_io+0x5a0/0x5a0
[  953.146885][   T68]  ? rcu_is_watching+0x11/0xa0
[  953.151634][   T68]  wb_writeback+0x482/0xd50
[  953.156125][   T68]  ? percpu_ref_tryget+0x250/0x250
[  953.161227][   T68]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  953.167200][   T68]  ? _raw_spin_unlock_irq+0x1f/0x40
[  953.172382][   T68]  wb_workfn+0x423/0xee0
[  953.176649][   T68]  ? inode_wait_for_writeback+0x220/0x220
[  953.182357][   T68]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  953.188324][   T68]  ? read_lock_is_recursive+0x10/0x10
[  953.193682][   T68]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  953.199555][   T68]  ? _raw_spin_unlock+0x40/0x40
[  953.204388][   T68]  ? _raw_spin_unlock_irq+0x1f/0x40
[  953.209565][   T68]  ? process_one_work+0x7b0/0x1160
[  953.214670][   T68]  process_one_work+0x8a2/0x1160
[  953.219616][   T68]  ? worker_detach_from_pool+0x240/0x240
[  953.225234][   T68]  ? _raw_spin_lock_irq+0xb7/0xf0
[  953.230239][   T68]  ? _raw_spin_lock_irqsave+0x100/0x100
[  953.235768][   T68]  ? kthread_data+0x4b/0xc0
[  953.240257][   T68]  worker_thread+0xaa2/0x1270
[  953.244932][   T68]  kthread+0x29d/0x330
[  953.248992][   T68]  ? worker_clr_flags+0x1a0/0x1a0
[  953.254007][   T68]  ? kthread_blkcg+0xd0/0xd0
[  953.258596][   T68]  ret_from_fork+0x1f/0x30
[  953.263009][   T68]  </TASK>
[  953.266358][   T68] Kernel Offset: disabled
[  953.270814][   T68] Rebooting in 86400 seconds..