last executing test programs:

30.646168001s ago: executing program 4 (id=25270):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000440)={0x7, 0x3})

30.575408103s ago: executing program 4 (id=25272):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000687a5a20720c11007509010203010902240001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)={0x20, 0x13, 0x3, "6f33f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

28.558766758s ago: executing program 4 (id=25317):
r0 = socket(0x2, 0x2, 0x1)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x4, @empty, 0x7}, 0x1c)

28.495274979s ago: executing program 4 (id=25321):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

28.176025088s ago: executing program 4 (id=25328):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)

27.788870128s ago: executing program 4 (id=25337):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@utf8no}, {@fat=@usefree}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@rodir}]}, 0x3, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)

27.641210722s ago: executing program 32 (id=25337):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@utf8no}, {@fat=@usefree}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@rodir}]}, 0x3, 0x27b, &(0x7f0000000640)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)

2.476947563s ago: executing program 1 (id=25932):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

969.131694ms ago: executing program 5 (id=25961):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
bind$vsock_stream(r0, &(0x7f0000000080)={0x1e, 0x0, 0x2711, @host}, 0x10)

955.813504ms ago: executing program 0 (id=25963):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000b8000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002b7c0011800b00010074617267657400006c00028059000100c8e0cd3d5494dadc537f998026210d81ca78da5d8527e5f18b2a33319f4564294f793cb1043098e5b74e2512d5c40c53b2056a8fd7eb876bddddf3e0709b8f7a2b0e481cd3002bf5ec60ec7f5d5164d3cbc1c2a46100000004000300080002"], 0x100}}, 0x0)

883.367946ms ago: executing program 5 (id=25964):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000180)={0x13})

826.516458ms ago: executing program 0 (id=25967):
timer_create(0x3, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000380))

784.378429ms ago: executing program 5 (id=25969):
r0 = syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x2)
ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x413)

722.979601ms ago: executing program 0 (id=25971):
r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0)

707.825571ms ago: executing program 2 (id=25972):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0xfffffff7, 0x1, 0x0, 0x0)

673.657832ms ago: executing program 5 (id=25973):
r0 = syz_open_dev$video(&(0x7f0000000100), 0x49, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000), {0xfffffff7, 0x2, 0x34343459, 0x2, 0xfffffffa, 0x0, 0x0, 0x4}})

631.919323ms ago: executing program 0 (id=25975):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1)

556.136325ms ago: executing program 2 (id=25976):
unshare(0x22020400)
epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}], 0x1, 0x9450)

556.011325ms ago: executing program 1 (id=25977):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0xffffffffffffffff, 0x8be6, 0x25}}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x69b}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c808)

545.439365ms ago: executing program 5 (id=25978):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {0xffff9d83}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x9, 0x3d, 0x5, 0x1, 0x53, 0x202, 0x1, 0x4})

538.381266ms ago: executing program 3 (id=25979):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000004600))

467.478108ms ago: executing program 2 (id=25980):
r0 = getpid()
setpriority(0x1, r0, 0x10000)

453.280868ms ago: executing program 0 (id=25981):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@can_newroute={0x1c, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x80}]}, 0x1c}}, 0x0)

452.481068ms ago: executing program 3 (id=25982):
r0 = socket(0x10, 0x80002, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000029c0)=@newtaction={0x1170, 0x13, 0x53b, 0x0, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_sample={0x50, 0x8, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x3350, 0x5, 0x9, 0xa}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}, {0x1108, 0x1, [@m_police={0x1104, 0xc, 0x0, 0x0, {{0xb}, {0x10a0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x1}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x39fc, 0x0, 0x6653, 0x9, 0x6, {0x9, 0x1, 0x2, 0x4, 0x5, 0x167e}, {0x6, 0x0, 0x8001, 0x1000, 0x5, 0x7}, 0x4, 0x8, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf1, 0x7, 0x213, 0xf, 0xdec, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0x7, 0xf, 0x0, 0x4, 0x6, 0x4, 0x225, 0x5, 0x8, 0x5, 0x1, 0x4, 0x200, 0x7, 0x1, 0xde96, 0x9, 0x2, 0x6, 0x5, 0x7, 0x2eab, 0xc0, 0x7, 0x3d, 0x2, 0xda, 0x2, 0x2, 0x7, 0x91, 0x1, 0x80000001, 0x79b1, 0x356d, 0xffff, 0x0, 0x2, 0x8, 0x100, 0xc7, 0x1, 0x4, 0x634da637, 0xdd, 0x1, 0x6, 0x1, 0x7f, 0x2, 0x7, 0xf11, 0x6, 0xfffffff8, 0x2, 0x9, 0x7, 0x5, 0x1, 0xaf3a, 0xc000, 0x4308, 0x4, 0x1, 0x2, 0x0, 0x3, 0xe, 0x4, 0x4, 0x7ff, 0x6, 0x1, 0x6, 0x9, 0x2, 0x2, 0x7, 0x91d7, 0x101, 0xfffffff9, 0xf853, 0x0, 0x40, 0x9, 0xa, 0x0, 0x2, 0x8, 0x700, 0x6, 0x6567, 0x4, 0x111, 0x2, 0x8, 0x47, 0x7ff, 0x5, 0x8000, 0xaa7d, 0x3, 0x9, 0x4, 0x0, 0x80, 0x2, 0x6, 0x3, 0x2, 0x3, 0x6, 0x1, 0xa, 0x3, 0x5, 0x80, 0x97, 0xd9, 0x258, 0xffff, 0x14a, 0x23, 0x2, 0x100, 0x1, 0xfff, 0x1000, 0x6, 0x5, 0x6, 0x3, 0x100, 0x4, 0x6, 0x0, 0x3ff, 0x4, 0x7f, 0x401, 0x40, 0x1ff, 0x9, 0xd0, 0x9, 0x3, 0x8001, 0xfffffffe, 0x8, 0x9, 0x1ff, 0x8, 0x5, 0x8, 0x0, 0x6a4, 0x98, 0xffff, 0x7f, 0x8, 0xffffffff, 0x5, 0x3, 0x5d1, 0xe896, 0x8, 0xf, 0x6, 0x5, 0x2, 0x7, 0x9, 0xf8000000, 0x4, 0xa4c72997, 0x7ff, 0x5, 0x3, 0x8, 0x4, 0x54, 0x6, 0x400, 0x4, 0x1000, 0x8, 0xec5, 0x3fb, 0x6, 0x0, 0x6, 0x3, 0xfffffe00, 0xa1, 0xdb7, 0x1, 0x5, 0x2, 0x8, 0x6e, 0x7, 0x8000, 0x8, 0x4, 0x7, 0x2, 0x3, 0x7, 0x1, 0x4, 0x401, 0x5, 0x8, 0x0, 0x5dcd, 0x2, 0x8, 0x8001, 0x80000001, 0x1, 0x6ff, 0x8, 0xffffffff, 0x5, 0xe, 0x5, 0x1, 0x3ff, 0x9, 0xe, 0x4, 0x9, 0x1000, 0x80000001, 0x3, 0xaea, 0x1, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x9, 0xfffffffd, 0x50e4, 0x8, 0x5, 0x2, 0x4, 0xfffffff9, 0xd449, 0x8, 0x10, 0xc, 0x4, 0x41, 0x6, 0xf6, 0x6, 0xc0, 0x2, 0x2a, 0x0, 0x80000001, 0x8, 0x2, 0x7, 0x50, 0x424, 0x9, 0x0, 0xf, 0x1ff, 0x7, 0x0, 0x10001, 0xfffffffb, 0x4, 0x1, 0xffffff28, 0x4, 0xffffffff, 0x4, 0x9, 0x3, 0x4, 0xbf0e, 0x7, 0x0, 0x7, 0x5, 0x9, 0x4, 0x4, 0x7, 0xffffffff, 0x1, 0xeda2, 0x4d, 0x3, 0xad44, 0x5, 0x7cb, 0x2, 0x9, 0xa, 0x80000000, 0x6, 0x9, 0x2, 0x2, 0x7, 0x6293, 0x7ff, 0xfd, 0x7, 0x3, 0x4, 0x7, 0x100, 0x5, 0x5, 0x6, 0x3, 0x1, 0x3, 0x9, 0x2, 0x9, 0x101, 0xaf1, 0x7, 0x4, 0x0, 0x2, 0xb83d, 0x4, 0xf, 0xc4, 0x100, 0x9, 0xbf8, 0x101, 0x8001, 0x5, 0x10000, 0xbca9, 0x8000000, 0x1, 0x5, 0x9, 0x0, 0x3, 0x40, 0xa3, 0x3, 0x0, 0x0, 0x7, 0x7ff, 0x6, 0x3, 0x401, 0x5, 0x8, 0x8176, 0xc, 0x7, 0x4, 0x7, 0x4, 0x10, 0x7f, 0x1, 0x30, 0x81, 0x35b, 0x0, 0xfffffffc, 0xad9, 0x6, 0xfff, 0x10001, 0xcd, 0xa, 0x200, 0x9, 0xd, 0x1, 0x8, 0x8, 0x1ff, 0x10000, 0x4, 0x4e4, 0xea, 0x5, 0x6, 0xc1, 0x1000, 0x200, 0x0, 0xc, 0x3, 0xfffffbff, 0x9, 0x2, 0x3, 0xfffffe00, 0x6858, 0x1, 0x5, 0x4, 0x5, 0x2, 0x0, 0x2, 0x3a, 0x1, 0x0, 0x8000, 0xfffffffe, 0x7fffffff, 0x9, 0x1c, 0xfffffffa, 0x7, 0x8001, 0x9, 0x6, 0x1, 0x7ff, 0xfffffff8, 0x7, 0x41a095e4, 0x7f, 0x9, 0xe047, 0x2b30041c, 0x1, 0x6, 0xf, 0x10000, 0xc, 0x10000, 0x90f, 0x80000001, 0x80000000, 0xe3a, 0x1, 0x5, 0x8, 0x80, 0x29b1ba22, 0x7, 0x1, 0xfffffff2, 0x40, 0x4, 0x2, 0x7, 0x100, 0x0, 0x7, 0x8294, 0x9af, 0x4, 0x101, 0x10, 0x8, 0x3, 0x8, 0x3, 0x6852, 0xff, 0x100, 0x9, 0x5, 0x3, 0x2, 0x6, 0x6298, 0x0, 0x3, 0xe, 0x1, 0x5, 0xffff8000, 0x80000000, 0x5, 0x9, 0x4, 0x8, 0x7, 0x0, 0x13400, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x800}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2de, 0x3, 0x0, 0x10, 0x6, 0x8, 0xfff, 0x7, 0xfffffffa, 0x101, 0x3, 0x8001, 0xffff4241, 0x5, 0x1, 0x8, 0x6, 0x3ff, 0x100, 0x5, 0x5, 0x7, 0x6, 0xffffffff, 0x8, 0xe0, 0x8, 0x100, 0x8, 0xa, 0x0, 0x0, 0x5, 0x9, 0x1, 0x5ee, 0x2, 0x6, 0x1, 0x0, 0x2, 0x0, 0x52a1, 0x9, 0x80000001, 0x3, 0x6, 0x0, 0x5, 0xffff, 0x1, 0x7f, 0x6, 0xa, 0x2, 0x3ff, 0x7, 0x4, 0x1, 0x2, 0x2, 0xfffffff9, 0x9, 0x8, 0x232, 0x1, 0x6, 0x3, 0x349, 0xc5b8, 0xd6ae, 0x7, 0x6, 0xa, 0x6, 0xb, 0xe9, 0x4, 0xb, 0x8000, 0x40, 0x4, 0x6, 0x80000001, 0x1, 0x10, 0xa08, 0x3, 0x2, 0x10, 0x7c3, 0xd, 0x3, 0x28fe, 0xc, 0x8, 0x6, 0x4, 0x2115, 0xb351, 0xffff, 0x7fffffff, 0xffe00000, 0x1, 0x9, 0x769e, 0x7, 0x2, 0x9, 0x8, 0x451e, 0x4, 0x4, 0x100, 0x101, 0x3664, 0x396, 0x7, 0x9, 0x1, 0x8eb, 0x7, 0x4, 0x7, 0x8001, 0x1, 0x7, 0x2f, 0x9, 0x3, 0x6, 0x0, 0x7ff, 0x9, 0x81, 0xae3c, 0x100, 0x8, 0x5, 0x6, 0x68, 0x5, 0x4, 0xf9b1, 0x1000, 0x9bc4, 0x3, 0x2, 0xffffffff, 0x4, 0x3ff, 0x5, 0x4, 0x10000, 0x0, 0xd, 0x6, 0x8, 0x81, 0x6, 0x201, 0x5, 0x5f, 0x3, 0x45, 0x4, 0xbb, 0x182c, 0x6, 0xaac7, 0x8, 0x0, 0x3, 0x9, 0x1000, 0xfffffffd, 0x5, 0x42c51822, 0x4, 0x4, 0xffffffff, 0x5, 0x9, 0xdc, 0x7fffffff, 0x3, 0x9, 0xffff, 0x5269, 0xf, 0x1, 0x2, 0x4f, 0xce3d, 0x7, 0x5, 0x0, 0x7fffffff, 0x9, 0x80000000, 0xe, 0xfffffe38, 0x0, 0xa4b, 0xfffff001, 0x7, 0x800, 0x53ce511c, 0x3, 0x100, 0x6, 0xffffff7c, 0x2, 0x6, 0x4, 0x1, 0x9, 0x4, 0xa, 0x6, 0xe, 0x8, 0x7e000000, 0x1000, 0x8e, 0x5, 0x1, 0x0, 0x9da, 0x4, 0x9f37, 0x5, 0x4, 0xee4, 0x9, 0x1, 0xecaf, 0x5, 0x5, 0x3, 0x0, 0x7, 0x0, 0xfffffff8, 0x0, 0x8, 0x3, 0x6, 0x3, 0x613, 0x2, 0x9de3, 0x7, 0x7, 0x82, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x7, 0x4, 0x0, 0x3, 0x39, 0xe02, 0xffff, 0x6, 0x1, 0x9, 0x401, 0x6562, 0x9, 0xffff8000, 0x6, 0x2e4c, 0x9491, 0xaa, 0x2, 0xff000000, 0xe417, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x80000000, 0x1, 0x3, 0x8, 0x2, 0x7fffffff, 0x7, 0x8000, 0x40, 0x4, 0x2, 0x1, 0x10000, 0xd6, 0x8, 0x2, 0x10001, 0x8, 0x0, 0x0, 0x81, 0xffffffff, 0x7, 0x9, 0xffffffff, 0x871, 0x1, 0x3d, 0xfffffffe, 0xf, 0xa2, 0x1, 0x5b3, 0x8, 0x0, 0x6, 0xfffffffe, 0x4, 0x8001, 0x2, 0x6, 0x9, 0x5, 0x1000, 0x7, 0xb4, 0x6, 0xf8e, 0x6, 0x8, 0x5, 0xc4, 0x47, 0xe, 0x81, 0x7, 0x3, 0x3ff, 0x3, 0x7, 0x1, 0xb, 0x39, 0x0, 0x200, 0x80, 0x0, 0x5, 0x5, 0x7, 0x8001, 0x8, 0xc, 0x0, 0x148, 0xffff, 0x9, 0x6e, 0x7, 0x3, 0xeca, 0x3, 0x1, 0x3ff, 0x9, 0x9, 0x5, 0x8, 0x3, 0x7ff, 0x2e, 0x8e8, 0x1ff, 0x6, 0x7, 0x3e2, 0x9, 0x2, 0x6, 0x3, 0x5, 0x5, 0x2, 0x6, 0x5, 0xe, 0x7, 0x39e, 0x7, 0x5114, 0x0, 0x5, 0x1, 0x1, 0x5f9d, 0x200, 0x6, 0x0, 0x6, 0x2, 0x401, 0x7, 0x200, 0xffff69d7, 0xfffffff8, 0x6, 0x1, 0x5, 0x7fff, 0x8, 0x9, 0x1ff, 0x1, 0xffb, 0x100, 0x5, 0x6, 0x401, 0x2, 0x8000, 0x1, 0x4, 0x1, 0xb6, 0x3, 0x7, 0x8, 0x3, 0x7fff, 0x10000, 0x5, 0xfffff864, 0x2, 0x3, 0x3, 0x200, 0x1ff, 0x100, 0x7, 0x6, 0xffff8001, 0x0, 0x4, 0xfff, 0x2, 0xffff, 0x3, 0x81, 0x5, 0xfffffffa, 0x3ff, 0x9, 0x10001, 0x6, 0x3b82, 0x0, 0x0, 0x7fffffff, 0x5, 0x4, 0x200, 0x4000, 0x5, 0x1, 0x3, 0xfffffffe, 0x160, 0xf358, 0x101, 0x8ef0, 0xa1, 0x80, 0x7, 0xe80, 0x5cbc, 0x800, 0x2, 0x800, 0x3, 0xc33, 0x10, 0xcad, 0x3, 0x7, 0x7, 0x2c348edc, 0x0, 0x63d66b08, 0x7fff, 0x1, 0x5129, 0x6, 0xe0a, 0x8, 0x1000, 0x4, 0x7ff, 0x7, 0x2, 0x8, 0x6, 0x1, 0x6, 0xffff, 0x2, 0x2, 0x9, 0x3ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]]}, {0x39, 0x6, "a92761771f64f8565b85dfcd1c812620e2f115a99810709d659a308036c39be12b454cbb8474c35b9fb8975bc88bf6d05c4c852a9f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1170}, 0x1, 0x0, 0x0, 0x10048c81}, 0x60004)

444.148208ms ago: executing program 1 (id=25983):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
writev(r0, &(0x7f0000000e80)=[{&(0x7f00000000c0)="e2fa0e81ceb3dc4c43c215dc4dade38ff8c84acefa41ae002d4b61ce7602ee69ca59662a7ca071443645c1dc73113beeb9b5a73cd0415b0b37839aa6c68111a458fae5cf2c3a6a3bb8f9e0c32740df61cef926d51a7eff7b9b3f306d", 0x5c}], 0x1)

440.219578ms ago: executing program 5 (id=25984):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000001380)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@discard_size={'discard', 0x3d, 0x4}}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@noquota}, {@discard}]}, 0x1, 0x6142, &(0x7f0000009100)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)

403.448889ms ago: executing program 3 (id=25985):
r0 = socket$inet6(0xa, 0x6, 0x0)
shutdown(r0, 0x0)

368.53829ms ago: executing program 1 (id=25986):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000680)={0xe, 0x1, 0x0, "0b8c4800", 0x52424752})

334.442861ms ago: executing program 0 (id=25987):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x3, 0x5fa8, &(0x7f000000d000)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

313.371122ms ago: executing program 2 (id=25988):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

293.001772ms ago: executing program 3 (id=25989):
r0 = socket(0x1e, 0x4, 0x0)
sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@id, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@id, 0x80, 0x0}}], 0x2, 0x0)

243.397823ms ago: executing program 1 (id=25990):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

159.819436ms ago: executing program 2 (id=25991):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xfc, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x7, 0x1, 0x4a21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@remote, 0x4d6, 0x3c}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x40000}, {0x5, 0x7fffffffffffffff, 0x8000000000000000, 0x1}, {}, 0x70bd2c, 0x34fe, 0x2, 0x0, 0x0, 0x50}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040854}, 0x20048800)

159.381636ms ago: executing program 3 (id=25992):
r0 = syz_socket_connect_nvme_tcp()
close(r0)

78.754908ms ago: executing program 2 (id=25993):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})

74.087668ms ago: executing program 1 (id=25994):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

0s ago: executing program 3 (id=25995):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000280)={0x1, 0x939b, @status={[0x1, 0x81, 0x40, 0x7, 0x0, 0x80000001]}, [0xffffffffffff7fff, 0x3d, 0xfffffffc, 0xffffffffffffffff, 0x3, 0x4, 0x7, 0xfffffffffffffffa, 0x1e, 0x2, 0xfffffffffffff801, 0x5, 0x8100, 0xfffffffffffffffb, 0x101, 0x2, 0xe, 0x4d, 0x90000000000, 0x0, 0x10000000, 0xffffffffffffffff, 0x0, 0xa, 0x3, 0xfc, 0x3, 0x4, 0x40, 0xc62a, 0x8, 0x2, 0x7, 0xed5, 0xfffffffffffffff3, 0x2a, 0xfffffffffffffff8, 0x4, 0x7, 0x7, 0x6, 0x401, 0xfffffffffffffffe, 0x53f, 0x18000, 0x7, 0x4, 0x3d, 0x5, 0x1, 0x0, 0x95, 0x7fffffffffffffff, 0x800000000b3af, 0x400, 0x9, 0x100, 0xf6, 0xffffffffffffffff, 0x4, 0x4, 0x9, 0xfffffffffffffffa, 0x5]})

kernel console output (not intermixed with test programs):

[ 1327.617384][ T4973] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[ 1327.682796][ T4973] usb 5-1: Product: syz
[ 1327.691659][ T4973] usb 5-1: Manufacturer: syz
[ 1327.696290][ T4973] usb 5-1: SerialNumber: syz
[ 1327.776874][ T4973] hso 5-1:6.2: Failed to find INT IN ep
[ 1327.966488][ T4973] usb 5-1: USB disconnect, device number 96
[ 1328.051902][T22217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23450'.
[ 1328.235012][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23455'.
[ 1328.311301][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23455'.
[ 1328.384693][   T26] audit: type=1326 audit(2000000802.958:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.0.23460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9ab8e9dd9 code=0x0
[ 1328.406646][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1328.539670][   T26] audit: type=1326 audit(2000000803.022:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.0.23460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7ff9ab8e9dd9 code=0x0
[ 1328.561851][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1328.970874][T22283] loop1: detected capacity change from 0 to 512
[ 1329.071284][T22283] FAT-fs (loop1): FAT read failed (blocknr 194)
[ 1329.759712][T22342] loop2: detected capacity change from 0 to 2048
[ 1329.911549][T22342] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359
[ 1329.956194][T22342] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1330.296407][T22326] loop4: detected capacity change from 0 to 32768
[ 1330.408852][T22326] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.23499 (22326)
[ 1330.472481][T22326] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1330.516406][T22326] BTRFS info (device loop4): force zlib compression, level 3
[ 1330.554328][T22326] BTRFS info (device loop4): force clearing of disk cache
[ 1330.604992][T22326] BTRFS info (device loop4): setting nodatasum
[ 1330.650538][T22326] BTRFS info (device loop4): use zlib compression, level 3
[ 1330.679635][T22326] BTRFS info (device loop4): allowing degraded mounts
[ 1330.712139][T22385] __nla_validate_parse: 4 callbacks suppressed
[ 1330.712156][T22385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23523'.
[ 1330.757157][T22326] BTRFS info (device loop4): enabling disk space caching
[ 1330.799338][T22326] BTRFS info (device loop4): disk space caching is enabled
[ 1330.833621][T22326] BTRFS info (device loop4): has skinny extents
[ 1330.858041][T22387] xt_HMARK: spi-set and port-set can't be combined
[ 1331.042786][T22359] loop1: detected capacity change from 0 to 32768
[ 1331.201676][T22326] BTRFS info (device loop4): enabling ssd optimizations
[ 1331.225194][T22359] JBD2: Ignoring recovery information on journal
[ 1331.234088][T22326] BTRFS info (device loop4): clearing free space tree
[ 1331.241238][T22326] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1331.281572][T22326] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1331.436319][T22359] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1331.528856][T22359] (syz.1.23512,22359,0):ocfs2_reflink_ioctl:4454 ERROR: status = -14
[ 1331.621030][T22326] BTRFS info (device loop4): balance: start -f -svrange=0..18446744073709551612,limit=6,limit=6..0,stripes=0..511
[ 1331.643659][ T5009] ocfs2: Unmounting device (7,1) on (node local)
[ 1331.803841][T22326] BTRFS info (device loop4): balance: ended with status: 0
[ 1331.909957][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23541'.
[ 1332.135867][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1332.322498][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1332.369185][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1332.478418][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1332.725351][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1332.786587][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1332.927383][T22485] device bridge10 entered promiscuous mode
[ 1332.927749][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1333.054583][T22490] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.23545'.
[ 1333.117982][T22495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23565'.
[ 1333.157229][T22495] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1333.218641][T22475] loop1: detected capacity change from 0 to 32768
[ 1333.330714][T22475] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.23556 (22475)
[ 1333.380382][T22516] tmpfs: Bad value for 'mpol'
[ 1333.443921][T22475] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1333.481773][T22475] BTRFS info (device loop1): force zlib compression, level 3
[ 1333.485128][T22524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1333.489948][T22475] BTRFS info (device loop1): force clearing of disk cache
[ 1333.496473][T22524] IPv6: NLM_F_CREATE should be set when creating new route
[ 1333.496506][T22524] IPv6: NLM_F_CREATE should be set when creating new route
[ 1333.507284][T22523] loop0: detected capacity change from 0 to 256
[ 1333.525127][T22475] BTRFS info (device loop1): setting nodatasum
[ 1333.535356][T22528] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.23578'.
[ 1333.563926][T22475] BTRFS info (device loop1): use zlib compression, level 3
[ 1333.623144][T22475] BTRFS info (device loop1): allowing degraded mounts
[ 1333.630942][T22523] FAT-fs (loop0): Directory bread(block 64) failed
[ 1333.638549][T22475] BTRFS info (device loop1): enabling disk space caching
[ 1333.656727][T22523] FAT-fs (loop0): Directory bread(block 65) failed
[ 1333.663746][T22475] BTRFS info (device loop1): disk space caching is enabled
[ 1333.674844][T22530] loop4: detected capacity change from 0 to 2048
[ 1333.681569][T22523] FAT-fs (loop0): Directory bread(block 66) failed
[ 1333.714835][T22475] BTRFS info (device loop1): has skinny extents
[ 1333.744609][T22523] FAT-fs (loop0): Directory bread(block 67) failed
[ 1333.782926][T22530] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1333.797024][T22523] FAT-fs (loop0): Directory bread(block 68) failed
[ 1333.803592][T22523] FAT-fs (loop0): Directory bread(block 69) failed
[ 1333.814414][T22530] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[ 1333.839654][T22530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1333.867052][T22523] FAT-fs (loop0): Directory bread(block 70) failed
[ 1333.899918][T22523] FAT-fs (loop0): Directory bread(block 71) failed
[ 1333.906561][T22523] FAT-fs (loop0): Directory bread(block 72) failed
[ 1334.005041][T22523] FAT-fs (loop0): Directory bread(block 73) failed
[ 1334.172801][T22475] BTRFS info (device loop1): enabling ssd optimizations
[ 1334.184336][T22573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23595'.
[ 1334.193650][T22573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23595'.
[ 1334.256225][T22475] BTRFS info (device loop1): clearing free space tree
[ 1334.271326][T22475] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1334.290317][T22475] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1334.627142][T22475] BTRFS info (device loop1): balance: start -f -svrange=0..18446744073709551612,limit=6,limit=6..0,stripes=0..511
[ 1334.650928][T22590] loop2: detected capacity change from 0 to 4096
[ 1334.757538][T22475] BTRFS info (device loop1): balance: ended with status: 0
[ 1334.811769][T22606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23609'.
[ 1334.843034][T22608] netlink: 'syz.0.23611': attribute type 11 has an invalid length.
[ 1334.845521][T22590] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 1334.890642][T22590] ntfs3: loop2: Failed to load $Extend.
[ 1335.086298][T22618] netlink: 'syz.0.23615': attribute type 21 has an invalid length.
[ 1335.086352][T22618] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23615'.
[ 1336.220794][T22681] loop2: detected capacity change from 0 to 8
[ 1336.282638][T22654] loop4: detected capacity change from 0 to 32768
[ 1336.428798][T22654] ERROR: (device loop4): dbAlloc: the hint is outside the map
[ 1336.428798][T22654] 
[ 1336.504789][T22654] ERROR: (device loop4): remounting filesystem as read-only
[ 1336.526013][T22654] ialloc: diAlloc returned -5!
[ 1336.861774][T22727] netlink: 736 bytes leftover after parsing attributes in process `syz.2.23669'.
[ 1336.935260][T22735] loop0: detected capacity change from 0 to 64
[ 1337.017892][T22744] device veth1 entered promiscuous mode
[ 1337.102437][T22749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23678'.
[ 1337.137115][T22752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23681'.
[ 1337.175726][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1337.192355][ T4972] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1337.199005][T22752] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1337.381975][T22771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23689'.
[ 1337.431804][ T4972] usb 5-1: Using ep0 maxpacket: 32
[ 1337.581340][ T4972] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1337.656163][ T4972] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7
[ 1337.682633][T22797] netlink: 'syz.2.23702': attribute type 1 has an invalid length.
[ 1337.790013][T22807] IPv6: sit5: Disabled Multicast RS
[ 1337.823865][ T4972] usb 5-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40
[ 1337.841158][ T4972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1337.873328][ T4972] usb 5-1: Product: syz
[ 1337.877541][ T4972] usb 5-1: Manufacturer: syz
[ 1337.897849][T22813] libceph: resolve '0.0' (ret=-3): failed
[ 1337.914276][ T4972] usb 5-1: SerialNumber: syz
[ 1337.984762][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23715'.
[ 1338.140246][T22836] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23721'.
[ 1338.154437][T22836] batman_adv: Cannot find parent device
[ 1338.275600][ T4972] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1338.298581][ T4972] usb 5-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8215 device_setup=1 to enable and report any issues to g@b4.vu
[ 1338.362469][ T4972] usb 5-1: USB disconnect, device number 97
[ 1338.470971][ T4970] usb 1-1: new full-speed USB device number 104 using dummy_hcd
[ 1338.600866][T22849] loop1: detected capacity change from 0 to 4096
[ 1338.625218][ T4869] udevd[4869]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1338.821066][ T4970] usb 1-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1338.923855][ T4970] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1338.961945][ T4970] usb 1-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0
[ 1338.997531][ T4970] usb 1-1: Product: syz
[ 1339.035146][T22842] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1339.055935][ T4970] usbhid 1-1:15.0: fixing wrong optional hid class descriptors count
[ 1339.089936][ T4970] usbhid 1-1:15.0: can't add hid device: -22
[ 1339.133458][T22878] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[ 1339.154153][ T4970] usbhid: probe of 1-1:15.0 failed with error -22
[ 1339.289733][T22887] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[ 1339.292630][ T4970] usb 1-1: USB disconnect, device number 104
[ 1339.316188][T22889] tmpfs: Bad value for 'mpol'
[ 1339.540634][T22905] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2)
[ 1339.614298][T22908] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.23757'.
[ 1339.688311][T22915] netlink: 68 bytes leftover after parsing attributes in process `syz.4.23760'.
[ 1340.080344][T22941] netlink: 'syz.2.23771': attribute type 41 has an invalid length.
[ 1340.144132][ T4970] usb 1-1: new full-speed USB device number 105 using dummy_hcd
[ 1340.246180][T22954] loop1: detected capacity change from 0 to 128
[ 1340.307873][T22954] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1340.350355][T22954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1340.526665][ T4970] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1340.563743][ T4970] usb 1-1: not running at top speed; connect to a high speed hub
[ 1340.638652][ T4970] usb 1-1: config 64 has an invalid interface number: 120 but max is 1
[ 1340.656692][ T4970] usb 1-1: config 64 has an invalid interface number: 91 but max is 1
[ 1340.664903][ T4970] usb 1-1: config 64 has no interface number 0
[ 1340.689314][T22982] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore
[ 1340.698639][ T4970] usb 1-1: config 64 has no interface number 1
[ 1340.713666][ T4970] usb 1-1: config 64 interface 91 has no altsetting 0
[ 1340.731449][T22982] overlayfs: missing 'lowerdir'
[ 1340.880448][ T4970] usb 1-1: New USB device found, idVendor=1199, idProduct=9012, bcdDevice=f9.4a
[ 1340.907556][ T4970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1340.941735][ T4970] usb 1-1: Product: syz
[ 1340.962785][ T4970] usb 1-1: Manufacturer: syz
[ 1340.988964][ T4970] usb 1-1: SerialNumber: syz
[ 1341.336933][T22971] loop2: detected capacity change from 0 to 32768
[ 1341.347555][ T4970] usb 1-1: unknown number of interfaces: 2
[ 1341.373397][ T4970] usb 1-1: USB disconnect, device number 105
[ 1341.475084][T22971] JBD2: Ignoring recovery information on journal
[ 1341.547871][T23024] netlink: 372 bytes leftover after parsing attributes in process `syz.4.23806'.
[ 1341.563158][T23024] netlink: 'syz.4.23806': attribute type 3 has an invalid length.
[ 1341.571327][T23024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23806'.
[ 1341.691232][T22971] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1341.829466][T22971] (syz.2.23785,22971,1):ocfs2_reflink_ioctl:4454 ERROR: status = -14
[ 1341.962333][ T5013] ocfs2: Unmounting device (7,2) on (node local)
[ 1342.244190][T23059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23821'.
[ 1342.272790][T23059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23821'.
[ 1342.310270][T23048] loop0: detected capacity change from 0 to 8192
[ 1342.343931][T23062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23824'.
[ 1342.447874][T23048] attempt to access beyond end of device
[ 1342.447874][T23048] loop0: rw=0, want=57848, limit=8192
[ 1342.500629][T23065] loop2: detected capacity change from 0 to 2048
[ 1342.507417][T23048] Buffer I/O error on dev loop0, logical block 57847, async page read
[ 1342.576946][T23048] attempt to access beyond end of device
[ 1342.576946][T23048] loop0: rw=0, want=57848, limit=8192
[ 1342.600364][T23065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1342.624050][T23048] Buffer I/O error on dev loop0, logical block 57847, async page read
[ 1342.669487][   T26] audit: type=1800 audit(2000000818.268:91): pid=23048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23817" name="file2" dev="loop0" ino=1048752 res=0 errno=0
[ 1342.921407][T23088] libceph: resolve '96.' (ret=-3): failed
[ 1343.194364][T23109] loop1: detected capacity change from 0 to 2048
[ 1343.320704][T23109] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1343.545498][T23142] netlink: 'syz.0.23863': attribute type 21 has an invalid length.
[ 1343.578233][T23142] netlink: 'syz.0.23863': attribute type 6 has an invalid length.
[ 1343.612823][T23142] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23863'.
[ 1343.631302][T23144] netlink: 14 bytes leftover after parsing attributes in process `syz.2.23861'.
[ 1343.727815][T23160] netlink: 292 bytes leftover after parsing attributes in process `syz.2.23869'.
[ 1344.059276][ T2420] pvrusb2: request_firmware fatal error with code=-110
[ 1344.066174][ T2420] pvrusb2: Failure uploading firmware1
[ 1344.096211][ T2420] pvrusb2: Device initialization was not successful.
[ 1344.123086][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1344.170356][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1344.199023][ T4775] pvrusb2: Device being rendered inoperable
[ 1344.270543][T23196] loop4: detected capacity change from 0 to 4096
[ 1344.319756][ T4970] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1344.571493][ T4970] usb 3-1: Using ep0 maxpacket: 16
[ 1344.616365][T23236] autofs4:pid:23236:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374)
[ 1344.645362][T23236] autofs4:pid:23236:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[ 1344.791333][T23248] netlink: 'syz.4.23914': attribute type 1 has an invalid length.
[ 1344.819679][T23252] netlink: 268 bytes leftover after parsing attributes in process `syz.0.23915'.
[ 1344.833008][ T4970] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[ 1344.850509][ T4970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1344.859236][T23248] netlink: 224 bytes leftover after parsing attributes in process `syz.4.23914'.
[ 1344.870002][ T4970] usb 3-1: Product: syz
[ 1344.874208][ T4970] usb 3-1: Manufacturer: syz
[ 1344.878833][ T4970] usb 3-1: SerialNumber: syz
[ 1344.912118][ T4970] usb 3-1: config 0 descriptor??
[ 1345.186934][ T4970] speedtch 3-1:0.0: speedtch_bind: data interface not found!
[ 1345.195008][ T4970] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1345.298528][ T4775] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1345.375822][T19936] usb 3-1: USB disconnect, device number 95
[ 1345.609654][T23294] xt_hashlimit: size too large, truncated to 1048576
[ 1345.623535][T23296] binder: 23295:23296 ioctl 400c620e 200000000340 returned -22
[ 1345.661918][ T4775] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[ 1345.683244][ T4775] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1345.726202][ T4775] usb 2-1: config 0 has no interface number 0
[ 1345.771391][ T4775] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1345.802768][ T4775] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1345.982777][T23312] Process accounting resumed
[ 1345.990760][ T4775] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1346.005446][ T4775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1346.026427][ T4775] usb 2-1: Product: syz
[ 1346.040241][ T4775] usb 2-1: Manufacturer: syz
[ 1346.062289][ T4775] usb 2-1: SerialNumber: syz
[ 1346.070124][ T4775] usb 2-1: config 0 descriptor??
[ 1346.526592][ T4970] usb 2-1: USB disconnect, device number 60
[ 1346.614619][T23365] netlink: 'syz.4.23970': attribute type 1 has an invalid length.
[ 1346.833448][T23381] xt_bpf: check failed: parse error
[ 1347.573303][T23447] loop0: detected capacity change from 0 to 64
[ 1348.144397][T23500] netlink: 'syz.4.24033': attribute type 12 has an invalid length.
[ 1348.165816][T23503] netlink: 'syz.3.24036': attribute type 6 has an invalid length.
[ 1348.188829][T23500] __nla_validate_parse: 2 callbacks suppressed
[ 1348.188853][T23500] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.24033'.
[ 1348.212969][T23503] netlink: 'syz.3.24036': attribute type 7 has an invalid length.
[ 1348.247054][T23503] netlink: 'syz.3.24036': attribute type 8 has an invalid length.
[ 1348.317509][T23512] netlink: 'syz.2.24041': attribute type 1 has an invalid length.
[ 1348.411445][T23518] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1348.653894][T23541] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1348.753544][T23551] loop2: detected capacity change from 0 to 512
[ 1348.783724][T23556] xt_bpf: check failed: parse error
[ 1348.805545][T23558] netlink: 'syz.3.24063': attribute type 1 has an invalid length.
[ 1348.834249][T23558] netlink: 'syz.3.24063': attribute type 1 has an invalid length.
[ 1348.836654][T23551] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1348.851620][T23558] netlink: 'syz.3.24063': attribute type 1 has an invalid length.
[ 1348.952078][T23551] EXT4-fs (loop2): 1 truncate cleaned up
[ 1348.999723][T23551] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,minixdf,nodiscard,quota,,errors=continue. Quota mode: writeback.
[ 1349.069610][T23585] cifs: Unknown parameter 'no'‘a�£Nð[G¶zob,erèèµ;%j¸¼
[ 1349.069610][T23585] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.�W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷'
[ 1349.180735][T23588] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 1349.203315][T23588] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 1349.228818][T23597] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[ 1349.269400][T23597] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[ 1349.308761][T23603] netlink: 128 bytes leftover after parsing attributes in process `syz.4.24084'.
[ 1349.343683][T23603] netlink: 3 bytes leftover after parsing attributes in process `syz.4.24084'.
[ 1349.390310][ T4972] usb 1-1: new full-speed USB device number 106 using dummy_hcd
[ 1349.455183][T23612] netlink: 72 bytes leftover after parsing attributes in process `syz.4.24088'.
[ 1349.480151][T23612] netlink: 72 bytes leftover after parsing attributes in process `syz.4.24088'.
[ 1349.722884][T23623] loop4: detected capacity change from 0 to 8192
[ 1349.735294][ T4972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1349.770934][ T4972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1349.791725][ T4866] udevd[4866]: inotify_add_watch(7, /dev/nbd1p4, 10) failed: No such file or directory
[ 1349.796891][ T4972] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1349.812458][ T4972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1349.821138][T23623] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[ 1349.839243][T23623] REISERFS (device loop4): using ordered data mode
[ 1349.860925][ T4972] usb 1-1: config 0 descriptor??
[ 1349.885381][T23623] reiserfs: using flush barriers
[ 1349.912561][T23623] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1349.931174][ T4972] hub 1-1:0.0: USB hub found
[ 1349.936322][T23623] REISERFS (device loop4): checking transaction log (loop4)
[ 1349.950328][T23623] REISERFS (device loop4): Using r5 hash to sort names
[ 1349.977970][ T4970] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1350.136258][ T4972] hub 1-1:0.0: 1 port detected
[ 1350.248013][ T4964] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1350.341511][ T4972] hub 1-1:0.0: hub_hub_status failed (err = -71)
[ 1350.347932][ T4972] hub 1-1:0.0: config failed, can't get hub status (err -71)
[ 1350.355618][ T4970] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10
[ 1350.385353][ T4970] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024
[ 1350.413529][ T4970] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1350.493748][ T4972] usbhid 1-1:0.0: can't add hid device: -71
[ 1350.507609][ T4972] usbhid: probe of 1-1:0.0 failed with error -71
[ 1350.547650][ T4972] usb 1-1: USB disconnect, device number 106
[ 1350.574449][ T4970] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[ 1350.586269][ T4970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1350.606614][ T4970] usb 2-1: Product: syz
[ 1350.613217][ T4970] usb 2-1: Manufacturer: syz
[ 1350.617962][ T4970] usb 2-1: SerialNumber: syz
[ 1350.639067][ T4964] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1350.647679][ T4970] usb 2-1: config 0 descriptor??
[ 1350.705672][ T4970] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected
[ 1350.713241][ T4970] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[ 1350.722982][ T4964] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1350.746089][ T4964] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1350.762042][T23667] loop2: detected capacity change from 0 to 128
[ 1350.770566][ T4970] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[ 1350.782912][ T4964] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1350.797351][ T4970] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[ 1350.805082][ T4970] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[ 1350.828876][T23667] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[ 1350.831736][ T4970] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[ 1350.859981][ T4970] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[ 1350.870304][T23667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1350.890203][ T4970] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1350.910865][ T4970] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83
[ 1350.927859][T23675] netlink: 76 bytes leftover after parsing attributes in process `syz.4.24119'.
[ 1350.937338][ T4970] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3
[ 1350.944959][ T4970] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[ 1350.974719][ T4964] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[ 1350.988488][ T4964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1351.015604][ T4970] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86
[ 1351.024219][ T4964] usb 4-1: Product: syz
[ 1351.030826][ T4964] usb 4-1: Manufacturer: syz
[ 1351.035447][ T4964] usb 4-1: SerialNumber: syz
[ 1351.046226][ T4970] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[ 1351.077269][ T4970] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1351.106053][ T4970] usb 2-1: USB disconnect, device number 61
[ 1351.126110][ T4970] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1351.152597][ T4970] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1351.186109][ T4970] keyspan 2-1:0.0: device disconnected
[ 1351.431595][ T4964] usb 4-1: Can't get UAC3 power state for id 10
[ 1351.441223][T23703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24133'.
[ 1351.494553][T23699] loop2: detected capacity change from 0 to 4096
[ 1351.515449][ T4964] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[ 1351.543000][ T4964] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[ 1351.586337][ T4964] usb 4-1: USB disconnect, device number 94
[ 1351.672986][T23699] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1352.012942][T23746] device syz_tun entered promiscuous mode
[ 1352.023093][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1352.054683][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1352.060998][T23744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.24153'.
[ 1352.409900][ T4970] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1352.633992][ T4970] usb 2-1: Using ep0 maxpacket: 16
[ 1352.672201][T23796] loop0: detected capacity change from 0 to 256
[ 1352.745946][ T4970] usb 2-1: config 0 has no interfaces?
[ 1352.795595][T23796] FAT-fs (loop0): Directory bread(block 64) failed
[ 1352.812254][T23796] FAT-fs (loop0): Directory bread(block 65) failed
[ 1352.838495][T23796] FAT-fs (loop0): Directory bread(block 66) failed
[ 1352.855480][T23796] FAT-fs (loop0): Directory bread(block 67) failed
[ 1352.894779][ T4970] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1352.903856][ T4970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1352.920042][T23796] FAT-fs (loop0): Directory bread(block 68) failed
[ 1352.950626][ T4970] usb 2-1: Product: syz
[ 1352.960527][ T4970] usb 2-1: Manufacturer: syz
[ 1352.978571][ T4970] usb 2-1: SerialNumber: syz
[ 1352.979814][T23796] FAT-fs (loop0): Directory bread(block 69) failed
[ 1352.985045][ T4970] r8152-cfgselector 2-1: config 0 descriptor??
[ 1353.033418][T23780] loop4: detected capacity change from 0 to 32768
[ 1353.057968][T23796] FAT-fs (loop0): Directory bread(block 70) failed
[ 1353.088061][T23796] FAT-fs (loop0): Directory bread(block 71) failed
[ 1353.116723][T23796] FAT-fs (loop0): Directory bread(block 72) failed
[ 1353.164749][T23796] FAT-fs (loop0): Directory bread(block 73) failed
[ 1353.248989][T23780] XFS (loop4): Mounting V5 Filesystem
[ 1353.258464][ T4970] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[ 1353.384632][T23780] XFS (loop4): Ending clean mount
[ 1353.448931][T19936] usb 2-1: USB disconnect, device number 62
[ 1353.585002][ T5019] XFS (loop4): Unmounting Filesystem
[ 1354.001272][T23845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24200'.
[ 1354.329946][T23861] loop0: detected capacity change from 0 to 128
[ 1354.519053][ T5010] sysv_free_block: flc_count > flc_size
[ 1354.524643][ T5010] sysv_free_block: flc_count > flc_size
[ 1354.538870][T23876] device vti0 entered promiscuous mode
[ 1354.581783][ T5010] sysv_free_block: flc_count > flc_size
[ 1354.619280][ T5010] sysv_free_block: flc_count > flc_size
[ 1354.624860][ T5010] sysv_free_block: flc_count > flc_size
[ 1354.650428][ T5010] sysv_free_block: flc_count > flc_size
[ 1354.667206][ T5010] sysv_free_block: flc_count > flc_size
[ 1354.691087][T23890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24220'.
[ 1354.696037][ T5010] sysv_free_block: flc_count > flc_size
[ 1354.721978][T23890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24220'.
[ 1354.744378][ T5010] sysv_free_block: flc_count > flc_size
[ 1354.760863][ T5010] sysv_free_block: flc_count > flc_size
[ 1354.760913][T23894] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[ 1354.772075][T23890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24220'.
[ 1354.784773][ T5010] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1354.831499][T23893] loop4: detected capacity change from 0 to 4096
[ 1354.926645][T23893] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1355.050364][T23912] x_tables: unsorted entry at hook 2
[ 1355.172205][T23920] netlink: 220 bytes leftover after parsing attributes in process `syz.2.24235'.
[ 1355.586210][T23950] loop1: detected capacity change from 0 to 256
[ 1355.695662][T23960] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1355.715787][T23948] loop0: detected capacity change from 0 to 4096
[ 1355.777967][T23950] FAT-fs (loop1): Directory bread(block 64) failed
[ 1355.802661][T23950] FAT-fs (loop1): Directory bread(block 65) failed
[ 1355.831980][T23948] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1355.849261][T23950] FAT-fs (loop1): Directory bread(block 66) failed
[ 1355.856078][T23950] FAT-fs (loop1): Directory bread(block 67) failed
[ 1355.906061][T23950] FAT-fs (loop1): Directory bread(block 68) failed
[ 1355.912648][T23950] FAT-fs (loop1): Directory bread(block 69) failed
[ 1356.021269][T23950] FAT-fs (loop1): Directory bread(block 70) failed
[ 1356.061565][T23950] FAT-fs (loop1): Directory bread(block 71) failed
[ 1356.103904][T23950] FAT-fs (loop1): Directory bread(block 72) failed
[ 1356.146796][T23950] FAT-fs (loop1): Directory bread(block 73) failed
[ 1356.162689][T23985] overlayfs: conflicting options: nfs_export=on,index=off
[ 1356.240485][T23987] loop0: detected capacity change from 0 to 64
[ 1356.596216][T24011] validate_nla: 1 callbacks suppressed
[ 1356.596232][T24011] netlink: 'syz.3.24280': attribute type 1 has an invalid length.
[ 1356.650876][T24011] netlink: 244 bytes leftover after parsing attributes in process `syz.3.24280'.
[ 1356.794897][T24023] netlink: 144 bytes leftover after parsing attributes in process `syz.4.24285'.
[ 1356.905221][T24029] netlink: 'syz.0.24289': attribute type 1 has an invalid length.
[ 1356.967517][T24029] netlink: 200 bytes leftover after parsing attributes in process `syz.0.24289'.
[ 1357.184615][T24048] loop4: detected capacity change from 0 to 64
[ 1357.210493][ T4775] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1357.242373][T24048] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[ 1357.277636][T24048] hfs: filesystem is marked locked, mounting read-only.
[ 1357.316837][T24056] xt_TCPMSS: Only works on TCP SYN packets
[ 1357.332070][   T23] usb 3-1: new full-speed USB device number 96 using dummy_hcd
[ 1357.471605][ T4775] usb 2-1: Using ep0 maxpacket: 32
[ 1357.507129][T24068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24308'.
[ 1357.547327][T24068] netlink: 276 bytes leftover after parsing attributes in process `syz.0.24308'.
[ 1357.610800][ T4775] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1357.639261][ T4775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1357.676902][ T4775] usb 2-1: config 0 descriptor??
[ 1357.722866][   T23] usb 3-1: config 8 has an invalid interface number: 223 but max is 0
[ 1357.734885][ T4775] as10x_usb: device has been detected
[ 1357.759374][   T23] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[ 1357.768649][ T4775] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1357.796138][   T23] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1357.817708][ T4775] usb 2-1: DVB: registering adapter 4 frontend 0 (nBox DVB-T Dongle)...
[ 1357.834950][   T23] usb 3-1: config 8 has no interface number 0
[ 1357.847260][   T23] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[ 1357.878801][ T4775] as10x_usb: error during firmware upload part1
[ 1357.890894][ T4775] Registered device nBox DVB-T Dongle
[ 1357.898969][   T23] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1357.947643][   T26] audit: type=1326 audit(2000000834.673:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24093 comm="syz.0.24321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ab8e9dd9 code=0x7ffc0000
[ 1358.010846][ T4775] usb 2-1: USB disconnect, device number 63
[ 1358.041273][ T4775] Unregistered device nBox DVB-T Dongle
[ 1358.046625][   T26] audit: type=1326 audit(2000000834.694:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24093 comm="syz.0.24321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ab8e9dd9 code=0x7ffc0000
[ 1358.050099][ T4775] as10x_usb: device has been disconnected
[ 1358.106485][T24103] ubi31: attaching mtd0
[ 1358.112587][T24103] ubi31: scanning is finished
[ 1358.151669][T24103] ubi31: empty MTD device detected
[ 1358.179851][   T23] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[ 1358.203579][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1358.230629][   T23] usb 3-1: Product: syz
[ 1358.244910][   T23] usb 3-1: Manufacturer: syz
[ 1358.249903][   T23] usb 3-1: SerialNumber: syz
[ 1358.288651][T24103] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1358.328497][T24103] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1358.375843][T24103] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1358.394125][T24103] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1358.429190][T24103] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1358.456138][T24103] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1358.484598][T24103] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 248240089
[ 1358.514497][T24120] netlink: 'syz.4.24333': attribute type 13 has an invalid length.
[ 1358.527789][T24103] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1358.554009][T24111] ubi31: background thread "ubi_bgt31d" started, PID 24111
[ 1358.570436][   T23] usb 3-1: USB disconnect, device number 96
[ 1359.143397][T24165] kAFS: Can only specify source 'none' with -o dyn
[ 1359.151010][T24161] __nla_validate_parse: 4 callbacks suppressed
[ 1359.151026][T24161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24354'.
[ 1359.198208][T24161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24354'.
[ 1359.265998][T24171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24358'.
[ 1359.287036][T24171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24358'.
[ 1359.325736][   T23] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 1359.596371][   T23] usb 3-1: Using ep0 maxpacket: 32
[ 1359.643752][ T4964] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1359.709862][T24208] loop0: detected capacity change from 0 to 8
[ 1359.736149][   T23] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[ 1359.751582][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1359.800501][   T23] usb 3-1: config 0 descriptor??
[ 1359.829263][T24208] SQUASHFS error: Unable to read inode 0xa7
[ 1359.866772][ T4964] usb 4-1: Using ep0 maxpacket: 16
[ 1359.868121][   T23] gspca_main: sq930x-2.14.0 probing 041e:403c
[ 1359.909074][T24217] netlink: 'syz.4.24381': attribute type 4 has an invalid length.
[ 1359.947203][T24219] netlink: 'syz.1.24383': attribute type 21 has an invalid length.
[ 1359.955366][T24219] netlink: 100 bytes leftover after parsing attributes in process `syz.1.24383'.
[ 1359.992264][ T4964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1360.025377][ T4964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11
[ 1360.078210][ T4964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024
[ 1360.106339][ T4964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1360.153404][ T4964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1360.203406][ T4964] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1360.228637][T24237] loop1: detected capacity change from 0 to 1024
[ 1360.249210][ T4964] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1360.252954][T24240] ieee802154 phy1 wpan1: encryption failed: -22
[ 1360.276317][ T4964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1360.285738][   T23] gspca_sq930x: ucbus_write failed -71
[ 1360.301422][   T23] sq930x: probe of 3-1:0.0 failed with error -71
[ 1360.315302][ T4964] usb 4-1: config 0 descriptor??
[ 1360.336029][   T23] usb 3-1: USB disconnect, device number 97
[ 1360.542469][ T4964] rc_core: IR keymap rc-hauppauge not found
[ 1360.552235][ T4964] Registered IR keymap rc-empty
[ 1360.567636][ T4964] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1360.583709][T24252] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1360.621292][ T4964] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1360.650266][ T4964] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1360.688780][ T4964] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input83
[ 1360.730822][T24258] loop0: detected capacity change from 0 to 512
[ 1360.759701][ T4964] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1360.770287][    C0] mceusb 4-1:0.0: Error: urb status = -75
[ 1360.785186][T24258] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[ 1360.798730][ T4964] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1360.828478][ T4964] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1360.837357][T24267] loop4: detected capacity change from 0 to 256
[ 1360.849578][T24258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002]
[ 1360.892986][T24258] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.24400: invalid indirect mapped block 2683928664 (level 1)
[ 1360.914583][T24258] EXT4-fs (loop0): Remounting filesystem read-only
[ 1360.927857][ T4964] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1360.931263][T24258] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.24400: bg 0: block 361: padding at end of block bitmap is not set
[ 1360.963459][T24258] EXT4-fs (loop0): Remounting filesystem read-only
[ 1360.975681][T24258] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[ 1361.007264][T24258] EXT4-fs (loop0): Remounting filesystem read-only
[ 1361.022328][ T4964] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1361.026032][T24258] EXT4-fs (loop0): 1 truncate cleaned up
[ 1361.059316][T24258] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,grpquota,nomblk_io_submit,data_err=ignore,errors=remount-ro,noblock_validity,noauto_da_alloc,. Quota mode: writeback.
[ 1361.059847][ T4964] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1361.079728][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1361.179580][T24258] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #2: block 5: comm syz.0.24400: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[ 1361.199510][ T4964] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1361.241829][T24258] EXT4-fs (loop0): Remounting filesystem read-only
[ 1361.259614][T24258] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.24400: directory missing '.'
[ 1361.264636][ T4964] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1361.337386][ T4964] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1361.376209][ T4964] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1361.405783][ T4964] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[ 1361.413811][ T4964] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1361.497099][ T4964] usb 4-1: USB disconnect, device number 95
[ 1361.544571][T24312] delete_channel: no stack
[ 1361.682427][T24322] loop2: detected capacity change from 0 to 64
[ 1361.703861][T24325] rdma_rxe: rxe creation allowed on top of a real device only
[ 1361.797494][T24333] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1361.927018][T24344] libceph: resolve '400' (ret=-3): failed
[ 1362.301629][T24380] netlink: 'syz.4.24459': attribute type 1 has an invalid length.
[ 1362.398126][T24387] program syz.0.24462 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1362.524164][T24397] device netdevsim0 left promiscuous mode
[ 1362.530391][T24397] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1363.382123][T24472] dlm: dev_write: no op 0 74000000000000
[ 1363.391155][T24474] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24504'.
[ 1363.418606][T24474] tc_dump_action: action bad kind
[ 1363.499560][T24485] netlink: 'syz.4.24509': attribute type 4 has an invalid length.
[ 1363.515108][T24485] netlink: 152 bytes leftover after parsing attributes in process `syz.4.24509'.
[ 1363.516642][   T23] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1363.531309][T24485] .`: renamed from bond0
[ 1363.744148][ T4787] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 1363.762564][ T4970] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[ 1363.790650][   T23] usb 4-1: Using ep0 maxpacket: 32
[ 1363.902784][   T23] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1363.921294][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1363.986293][ T4787] usb 3-1: Using ep0 maxpacket: 8
[ 1364.013423][   T23] usb 4-1: config 0 descriptor??
[ 1364.065752][   T23] as10x_usb: device has been detected
[ 1364.082424][   T23] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1364.098498][ T4970] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1364.147679][   T23] usb 4-1: DVB: registering adapter 4 frontend 0 (nBox DVB-T Dongle)...
[ 1364.161047][ T4970] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1364.189269][ T4970] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[ 1364.219671][ T4787] usb 3-1: config 6 has an invalid interface number: 85 but max is 0
[ 1364.229812][   T23] as10x_usb: error during firmware upload part1
[ 1364.237037][   T23] Registered device nBox DVB-T Dongle
[ 1364.237827][ T4787] usb 3-1: config 6 has no interface number 0
[ 1364.293054][   T23] usb 4-1: USB disconnect, device number 96
[ 1364.312399][ T4787] usb 3-1: config 6 interface 85 has no altsetting 0
[ 1364.312805][ T4970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1364.361167][ T4970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1364.367432][   T23] Unregistered device nBox DVB-T Dongle
[ 1364.380839][   T23] as10x_usb: device has been disconnected
[ 1364.397958][ T4970] usb 2-1: SerialNumber: syz
[ 1364.534206][ T4787] usb 3-1: New USB device found, idVendor=2ca3, idProduct=0031, bcdDevice=44.be
[ 1364.545439][ T4787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1364.553588][ T4787] usb 3-1: Product: syz
[ 1364.597369][ T4787] usb 3-1: Manufacturer: syz
[ 1364.608511][ T4787] usb 3-1: SerialNumber: syz
[ 1364.650020][T24510] loop4: detected capacity change from 0 to 32768
[ 1364.694728][ T4970] rndis_wlan 2-1:253.0: RNDIS init failed, -71
[ 1364.704281][ T4970] rndis_wlan: probe of 2-1:253.0 failed with error -71
[ 1364.750752][ T4970] rndis_host 2-1:253.0: RNDIS init failed, -71
[ 1364.766793][T24510] ea_get: invalid extended attribute
[ 1364.785492][ T4970] rndis_host: probe of 2-1:253.0 failed with error -71
[ 1364.792979][T24510] ffff88805a715670: 04 00 00 00                                      ....
[ 1364.815317][ T4970] usb 2-1: USB disconnect, device number 64
[ 1364.993792][ T4787] usb-storage 3-1:6.85: USB Mass Storage device detected
[ 1365.041638][ T4787] usb-storage 3-1:6.85: Quirks match for vid 2ca3 pid 0031: 2000000
[ 1365.125169][T24534] device gtp1 entered promiscuous mode
[ 1365.152176][T24537] netlink: 'syz.3.24534': attribute type 1 has an invalid length.
[ 1365.161087][T24537] netlink: 'syz.3.24534': attribute type 2 has an invalid length.
[ 1365.164951][ T4787] usb 3-1: USB disconnect, device number 98
[ 1365.284244][T24548] netlink: 'syz.4.24540': attribute type 10 has an invalid length.
[ 1366.029253][T24611] ipt_CLUSTERIP: Please specify destination IP
[ 1366.289074][ T4970] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1366.403163][T24645] device ip6gretap10 entered promiscuous mode
[ 1366.530584][ T4970] usb 5-1: Using ep0 maxpacket: 16
[ 1366.541824][T24656] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1366.642716][ T4970] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1366.666678][ T4970] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1366.716354][ T4970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1366.755062][ T4970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1366.791795][ T4970] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1366.842013][T24681] device wlan0 entered promiscuous mode
[ 1366.847694][T24681] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1366.912855][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1366.934411][ T4970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1366.958080][ T4970] usb 5-1: SerialNumber: syz
[ 1367.033697][T24690] netlink: 11 bytes leftover after parsing attributes in process `syz.1.24611'.
[ 1367.052365][T24694] netlink: 'syz.3.24613': attribute type 4 has an invalid length.
[ 1367.080615][T24694] netlink: 152 bytes leftover after parsing attributes in process `syz.3.24613'.
[ 1367.116237][T24694] .`: renamed from bond0
[ 1367.427845][ T4970] usb 5-1: USB disconnect, device number 98
[ 1367.611804][T24733] loop2: detected capacity change from 0 to 512
[ 1367.777760][T24740] loop1: detected capacity change from 0 to 2048
[ 1367.799138][T24733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002]
[ 1367.826677][T24733] System zones: 1-20
[ 1367.850787][T24747] xt_hashlimit: overflow, try lower: 3/0
[ 1367.866426][T24733] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,debug,lazytime,,errors=continue. Quota mode: writeback.
[ 1367.891993][T24740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1368.312941][T24771] netlink: 'syz.0.24650': attribute type 4 has an invalid length.
[ 1368.333099][T24771] netlink: 152 bytes leftover after parsing attributes in process `syz.0.24650'.
[ 1368.347226][T24771] .`: renamed from bond0
[ 1368.383467][T24775] netlink: 'syz.0.24652': attribute type 9 has an invalid length.
[ 1368.413203][   T23] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1368.453019][T24777] loop4: detected capacity change from 0 to 4096
[ 1368.475060][T24777] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 1368.508957][T24777] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid.
[ 1368.519752][T24777] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount.
[ 1368.542770][T24777] ntfs: (device loop4): read_ntfs_boot_sector(): Using backup boot sector.
[ 1368.572662][T24777] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1368.581599][T24777] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 1368.603643][T24777] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1368.612776][T24777] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[ 1368.651186][T24777] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 1368.660345][T24777] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 1368.694149][T24785] netlink: 5 bytes leftover after parsing attributes in process `syz.0.24657'.
[ 1368.705957][T24777] ntfs: volume version 3.1.
[ 1368.712892][T24785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1368.805024][   T23] usb 2-1: config 0 has an invalid interface number: 120 but max is 0
[ 1368.825450][   T23] usb 2-1: config 0 has no interface number 0
[ 1368.842791][   T23] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1368.871571][   T23] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[ 1368.898266][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1368.948536][   T23] usb 2-1: config 0 descriptor??
[ 1369.014657][   T23] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input84
[ 1369.047522][T24801] xt_hashlimit: max too large, truncated to 1048576
[ 1369.072664][T24797] loop4: detected capacity change from 0 to 4096
[ 1369.145396][T24797] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[ 1369.281809][   T23] usb 2-1: USB disconnect, device number 65
[ 1369.655081][T24829] netlink: 'syz.2.24677': attribute type 4 has an invalid length.
[ 1369.680765][T24829] netlink: 152 bytes leftover after parsing attributes in process `syz.2.24677'.
[ 1369.705023][T24829] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1369.735891][T24835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24681'.
[ 1369.764861][T24835] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24681'.
[ 1370.056968][T24864] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1370.629485][T24936] No such timeout policy "syz1"
[ 1370.798410][T24954] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1370.837625][T24962] netlink: 256 bytes leftover after parsing attributes in process `syz.2.24727'.
[ 1370.931770][T24972] netlink: 'syz.0.24731': attribute type 21 has an invalid length.
[ 1371.042239][   T23] usb 2-1: new low-speed USB device number 66 using dummy_hcd
[ 1371.293938][T25009] mip6: mip6_rthdr_init_state: spi is not 0: 655360
[ 1371.431005][T25024] SET target dimension over the limit!
[ 1371.442752][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1371.511735][T25026] loop4: detected capacity change from 0 to 1764
[ 1371.573712][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1371.583818][T25038] netlink: 'syz.0.24754': attribute type 21 has an invalid length.
[ 1371.632514][T25036] loop2: detected capacity change from 0 to 1764
[ 1371.676672][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1371.757704][T25036] iso9660: Corrupted directory entry in block 14 of inode 1920
[ 1371.871413][   T23] usb 2-1: string descriptor 0 read error: -22
[ 1371.887689][   T23] usb 2-1: New USB device found, idVendor=054c, idProduct=0095, bcdDevice=a5.6a
[ 1371.927276][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1372.225673][   T23] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[ 1372.234781][ T4964] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 1372.256527][   T23] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1372.297362][   T23] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1372.320396][T25109] netlink: 11 bytes leftover after parsing attributes in process `syz.2.24774'.
[ 1372.334879][T25109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24774'.
[ 1372.428777][   T23] usb 2-1: USB disconnect, device number 66
[ 1372.441352][   T23] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1372.465146][   T23] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1372.490229][   T23] visor 2-1:1.0: device disconnected
[ 1372.636712][T25149] netlink: 168 bytes leftover after parsing attributes in process `syz.2.24781'.
[ 1372.685822][T25148] netlink: 5 bytes leftover after parsing attributes in process `syz.4.24782'.
[ 1372.694097][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[ 1372.728032][T25148] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1372.741290][ T4964] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1372.768880][T25148] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1372.781132][ T4964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1372.800164][T25148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1372.815761][ T4964] usb 1-1: Product: syz
[ 1372.819949][ T4964] usb 1-1: Manufacturer: syz
[ 1372.834300][ T4964] usb 1-1: SerialNumber: syz
[ 1372.860270][T25163] netlink: 'syz.2.24786': attribute type 12 has an invalid length.
[ 1372.860593][ T4964] usb 1-1: config 0 descriptor??
[ 1372.884612][T25167] device sit0 entered promiscuous mode
[ 1372.928129][T25167] netlink: 'syz.3.24787': attribute type 1 has an invalid length.
[ 1372.940189][ T4964] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 107
[ 1372.981559][T25167] netlink: 1 bytes leftover after parsing attributes in process `syz.3.24787'.
[ 1373.119520][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1373.166713][ T4964]  (null): failure setting delay to 10us
[ 1373.172468][ T4964] i2c-tiny-usb: probe of 1-1:0.0 failed with error -5
[ 1373.223142][ T4964] usb 1-1: USB disconnect, device number 107
[ 1373.433255][T25222] loop4: detected capacity change from 0 to 1024
[ 1373.569021][T25238] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[ 1373.586629][ T5051] hfsplus: b-tree write err: -5, ino 25
[ 1373.592373][ T5051] hfsplus: b-tree write err: -5, ino 4
[ 1373.615018][ T5051] hfsplus: b-tree write err: -5, ino 2
[ 1373.623803][ T5051] hfsplus: b-tree write err: -5, ino 26
[ 1373.631323][T25238] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[ 1373.751580][T25259] kAFS: unable to lookup cell '
[ 1373.751580][T25259] $)-.ÌײfÍY¹Ç�²a×ïÅ2sˆ
[ 1373.751580][T25259] '
[ 1373.859364][T25271] ieee802154 phy1 wpan1: encryption failed: -22
[ 1373.998795][T25287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24826'.
[ 1374.365254][T25337] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1374.421451][T25337] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1374.453952][T25337] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1374.654539][T25375] loop2: detected capacity change from 0 to 256
[ 1374.759777][T25377] loop4: detected capacity change from 0 to 512
[ 1374.797384][T25375] FAT-fs (loop2): Directory bread(block 64) failed
[ 1374.840166][T25375] FAT-fs (loop2): Directory bread(block 65) failed
[ 1374.854941][T25377] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1374.881231][T25375] FAT-fs (loop2): Directory bread(block 66) failed
[ 1374.882872][T25377] ext4 filesystem being mounted at /4596/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1374.923723][T25377] __quota_error: 12 callbacks suppressed
[ 1374.923741][T25377] Quota error (device loop4): find_tree_dqentry: Getting block too big (514 >= 6)
[ 1374.940672][T25377] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[ 1374.948889][T25375] FAT-fs (loop2): Directory bread(block 67) failed
[ 1374.950328][T25377] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.24855: Failed to acquire dquot type 0
[ 1374.999075][T25375] FAT-fs (loop2): Directory bread(block 68) failed
[ 1375.023729][T25375] FAT-fs (loop2): Directory bread(block 69) failed
[ 1375.042471][T25375] FAT-fs (loop2): Directory bread(block 70) failed
[ 1375.049087][T25375] FAT-fs (loop2): Directory bread(block 71) failed
[ 1375.075414][T25375] FAT-fs (loop2): Directory bread(block 72) failed
[ 1375.083354][T25375] FAT-fs (loop2): Directory bread(block 73) failed
[ 1375.329668][T25414] netlink: 'syz.1.24864': attribute type 19 has an invalid length.
[ 1375.347988][T25414] netlink: 5 bytes leftover after parsing attributes in process `syz.1.24864'.
[ 1375.823546][ T4787] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 1375.831343][   T23] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 1376.031976][T25493] device wlan0 entered promiscuous mode
[ 1376.187608][ T4787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1376.194232][T25505] netlink: 'syz.3.24894': attribute type 21 has an invalid length.
[ 1376.206372][ T4787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1376.234983][ T4787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1376.251984][   T23] usb 1-1: config 7 descriptor has 1 excess byte, ignoring
[ 1376.259773][   T23] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2
[ 1376.308332][ T4787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1376.342720][ T4787] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1376.371225][ T4787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1376.400213][ T4787] usb 3-1: config 0 descriptor??
[ 1376.494538][   T23] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[ 1376.532246][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1376.569445][   T23] usb 1-1: Product: syz
[ 1376.582442][   T23] usb 1-1: Manufacturer: syz
[ 1376.604187][T25537] netlink: 'syz.3.24904': attribute type 3 has an invalid length.
[ 1376.609676][   T23] usb 1-1: SerialNumber: syz
[ 1376.636741][ T4787] hdpvr 3-1:0.0: firmware version 0x12 dated ¾
[ 1376.698731][   T23] rndis_wlan 1-1:7.0: skipping garbage
[ 1376.704991][   T23] usb 1-1: bad CDC descriptors
[ 1376.713048][   T23] rndis_host 1-1:7.0: skipping garbage
[ 1376.745631][   T23] usb 1-1: bad CDC descriptors
[ 1376.766119][   T23] option 1-1:7.0: GSM modem (1-port) converter detected
[ 1376.829703][ T4787] hdpvr 3-1:0.0: device init failed
[ 1376.834979][ T4787] hdpvr: probe of 3-1:0.0 failed with error -12
[ 1376.910824][ T4787] usb 3-1: USB disconnect, device number 99
[ 1376.949060][ T4775] usb 1-1: USB disconnect, device number 108
[ 1376.958996][ T4775] option 1-1:7.0: device disconnected
[ 1377.576178][T25632] netlink: 56 bytes leftover after parsing attributes in process `syz.3.24930'.
[ 1377.640591][T25632] netlink: 56 bytes leftover after parsing attributes in process `syz.3.24930'.
[ 1377.761911][ T4970] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1378.106695][ T4970] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1378.123814][ T4970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1378.155382][ T4970] usb 5-1: config 0 has no interface number 0
[ 1378.163145][ T4970] usb 5-1: config 0 interface 1 has no altsetting 0
[ 1378.190026][ T4970] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1378.221912][ T4970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1378.252896][ T4970] usb 5-1: config 0 descriptor??
[ 1378.384154][T25679] loop1: detected capacity change from 0 to 764
[ 1378.512028][ T4964] usb 5-1: USB disconnect, device number 99
[ 1378.563538][ T4960] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1378.908385][ T4960] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[ 1378.929852][ T4960] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[ 1378.992065][ T4960] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1379.029635][ T4960] usb 4-1: config 0 has no interface number 0
[ 1379.045118][T25731] x_tables: unsorted underflow at hook 3
[ 1379.045783][ T4960] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30
[ 1379.082044][ T4960] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[ 1379.110052][ T4960] usb 4-1: config 0 interface 255 has no altsetting 0
[ 1379.123062][ T4960] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[ 1379.133498][T25736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24960'.
[ 1379.143340][ T4960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1379.165136][ T4960] usb 4-1: config 0 descriptor??
[ 1379.216756][ T4960] usb-storage 4-1:0.255: USB Mass Storage device detected
[ 1379.245770][ T4775] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1379.263772][ T4960] usb-storage 4-1:0.255: Quirks match for vid 1908 pid 1315: 20000
[ 1379.408397][T25741] loop2: detected capacity change from 0 to 4096
[ 1379.419340][ T4964] usb 4-1: USB disconnect, device number 97
[ 1379.504803][ T4775] usb 2-1: Using ep0 maxpacket: 16
[ 1379.645369][ T4775] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1379.844824][T25763] loop2: detected capacity change from 0 to 1024
[ 1379.878319][ T4775] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1379.884043][T25745] loop4: detected capacity change from 0 to 32768
[ 1379.898026][ T4775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1379.915885][T25763] hfsplus: invalid length 32517 has been corrected to 255
[ 1379.968124][ T4775] usb 2-1: Product: syz
[ 1379.980142][ T4775] usb 2-1: Manufacturer: syz
[ 1379.984790][ T4775] usb 2-1: SerialNumber: syz
[ 1380.008975][ T4775] usb 2-1: config 0 descriptor??
[ 1380.051967][ T4775] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[ 1380.102355][ T4775] usb 2-1: Detected FT232RL
[ 1380.156147][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1380.297608][ T4775] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1380.334860][ T4775] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1380.373687][ T4775] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[ 1380.408095][ T4775] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1380.441389][T25818] netlink: 'syz.3.24978': attribute type 13 has an invalid length.
[ 1380.456459][ T4775] usb 2-1: USB disconnect, device number 67
[ 1380.489258][ T4775] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1380.518803][T25818] gretap0: refused to change device tx_queue_len
[ 1380.554095][T25818] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1380.558207][ T4775] ftdi_sio 2-1:0.0: device disconnected
[ 1380.605117][T25835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24983'.
[ 1380.628635][T25835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24983'.
[ 1380.899224][T25861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1380.983185][T25854] loop2: detected capacity change from 0 to 4096
[ 1381.210261][ T4775] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[ 1381.453156][ T4775] usb 1-1: Using ep0 maxpacket: 32
[ 1381.601935][ T4775] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1381.626788][T25917] loop1: detected capacity change from 0 to 4096
[ 1381.721406][T25917] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[ 1381.858419][   T23] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 1381.898395][T25917] ntfs3: loop1: failed to convert "c46c" to ascii
[ 1381.928914][ T4775] usb 1-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40
[ 1381.975752][ T4775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1382.000213][ T4775] usb 1-1: Product: syz
[ 1382.010558][ T4775] usb 1-1: Manufacturer: syz
[ 1382.015498][ T4775] usb 1-1: SerialNumber: syz
[ 1382.114813][   T23] usb 3-1: Using ep0 maxpacket: 8
[ 1382.121626][T25975] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1382.139877][T25975] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1382.165919][T25975] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1382.180856][T25975] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1382.214825][T25983] loop4: detected capacity change from 0 to 2048
[ 1382.279020][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1382.311589][T25983] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1382.394928][ T4775] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1382.402121][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1382.431778][ T4775] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc
[ 1382.437994][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64
[ 1382.482366][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1382.548429][ T4775] usb 1-1: USB disconnect, device number 109
[ 1382.562006][   T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1382.613917][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1382.645805][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8669, setting to 64
[ 1382.659145][T26043] netlink: 'syz.4.25039': attribute type 3 has an invalid length.
[ 1382.824646][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1382.870140][   T23] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1382.889496][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1382.897528][   T23] usb 3-1: Product: syz
[ 1382.944291][   T23] usb 3-1: Manufacturer: syz
[ 1382.948941][   T23] usb 3-1: SerialNumber: syz
[ 1382.992550][   T23] usb 3-1: config 0 descriptor??
[ 1383.042484][T25931] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1383.198735][T26114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25057'.
[ 1383.374032][ T4970] usb 3-1: USB disconnect, device number 100
[ 1383.412584][T26139] usb usb7: usbfs: process 26139 (syz.4.25065) did not claim interface 0 before use
[ 1383.527284][T26147] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0
[ 1383.556439][T26147] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0
[ 1383.578405][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1383.608968][T26147] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0
[ 1383.946044][T26187] netlink: 140 bytes leftover after parsing attributes in process `syz.2.25080'.
[ 1384.060292][T26201] 9p: Unknown access argument Ø
[ 1384.514866][T26254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25105'.
[ 1384.574593][T26254] netlink: 56 bytes leftover after parsing attributes in process `syz.2.25105'.
[ 1384.667059][T26261] loop4: detected capacity change from 0 to 4096
[ 1384.733681][T26261] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[ 1384.818285][T26261] ntfs3: loop4: Failed to load $Extend.
[ 1384.832432][T26285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25113'.
[ 1385.080320][T26303] netlink: 132 bytes leftover after parsing attributes in process `syz.1.25119'.
[ 1385.144302][T26308] loop0: detected capacity change from 0 to 64
[ 1385.244095][T26308] attempt to access beyond end of device
[ 1385.244095][T26308] loop0: rw=0, want=268435470, limit=64
[ 1385.292946][   T23] usb 3-1: new full-speed USB device number 101 using dummy_hcd
[ 1385.305870][T26308] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 1385.318207][T26308] Trying to free block not in datazone
[ 1385.404209][T26323] device gtp1 entered promiscuous mode
[ 1385.625421][T26344] netlink: 180 bytes leftover after parsing attributes in process `syz.1.25131'.
[ 1385.645093][T26347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25132'.
[ 1385.656733][   T23] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1385.657212][ T4970] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1385.679788][   T23] usb 3-1: config 0 has no interface number 0
[ 1385.695263][T26344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25131'.
[ 1385.715420][   T23] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 51720, setting to 64
[ 1385.720254][T26344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25131'.
[ 1385.870994][   T23] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1385.887908][   T23] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1385.921123][   T23] usb 3-1: Product: syz
[ 1385.940980][   T23] usb 3-1: SerialNumber: syz
[ 1385.985512][   T23] usb 3-1: config 0 descriptor??
[ 1386.001870][T26298] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1386.036725][   T23] cm109 3-1:0.8: invalid payload size 64, expected 4
[ 1386.048044][ T4970] usb 4-1: config 227 has an invalid interface number: 20 but max is 0
[ 1386.070641][ T4970] usb 4-1: config 227 has no interface number 0
[ 1386.076139][   T23] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input86
[ 1386.116004][ T4970] usb 4-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[ 1386.166799][ T4970] usb 4-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024
[ 1386.214995][ T4970] usb 4-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024
[ 1386.273744][ T4970] usb 4-1: config 227 interface 20 altsetting 5 endpoint 0x7 has an invalid bInterval 128, changing to 11
[ 1386.309466][    C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1386.315303][ T4970] usb 4-1: config 227 interface 20 altsetting 5 has a duplicate endpoint with address 0x7, skipping
[ 1386.354244][ T4970] usb 4-1: config 227 interface 20 altsetting 5 bulk endpoint 0xA has invalid maxpacket 32
[ 1386.391466][ T4970] usb 4-1: config 227 interface 20 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[ 1386.407610][T26392] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1386.422601][ T4970] usb 4-1: config 227 interface 20 has no altsetting 0
[ 1386.480110][   T23] usb 3-1: USB disconnect, device number 101
[ 1386.486637][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1386.486666][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1386.577128][   T23] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1386.616308][ T4970] usb 4-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b
[ 1386.638624][ T4970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1386.712939][ T4970] usb 4-1: Product: syz
[ 1386.737239][ T4970] usb 4-1: Manufacturer: syz
[ 1386.764869][ T4970] usb 4-1: SerialNumber: syz
[ 1386.802960][T26324] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1386.862928][T26444] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
[ 1386.879193][T26324] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1387.251359][ T4970] ipaq 4-1:227.20: PocketPC PDA converter detected
[ 1387.287624][ T4970] usb 4-1: active config #227 != 1 ??
[ 1387.367259][ T4970] usb 4-1: USB disconnect, device number 98
[ 1387.462817][T26501] xt_hashlimit: size too large, truncated to 1048576
[ 1387.498580][T26501] xt_hashlimit: overflow, try lower: 9223372036854775807/9
[ 1387.811003][T26519] loop4: detected capacity change from 0 to 4096
[ 1387.883309][T26540] loop1: detected capacity change from 0 to 256
[ 1387.911795][T26519] ntfs: volume version 3.1.
[ 1387.968366][T26540] FAT-fs (loop1): Directory bread(block 64) failed
[ 1387.985738][T26540] FAT-fs (loop1): Directory bread(block 65) failed
[ 1387.985848][T26540] FAT-fs (loop1): Directory bread(block 66) failed
[ 1387.985880][T26540] FAT-fs (loop1): Directory bread(block 67) failed
[ 1387.985940][T26540] FAT-fs (loop1): Directory bread(block 68) failed
[ 1387.985968][T26540] FAT-fs (loop1): Directory bread(block 69) failed
[ 1387.986032][T26540] FAT-fs (loop1): Directory bread(block 70) failed
[ 1387.986061][T26540] FAT-fs (loop1): Directory bread(block 71) failed
[ 1387.986124][T26540] FAT-fs (loop1): Directory bread(block 72) failed
[ 1387.986862][T26540] FAT-fs (loop1): Directory bread(block 73) failed
[ 1388.198174][   T26] audit: type=1800 audit(2000000867.128:94): pid=26540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.25185" name="file1" dev="loop1" ino=1048757 res=0 errno=0
[ 1388.258998][   T26] audit: type=1400 audit(2000000867.193:95): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=26565 comm="syz.0.25192"
[ 1388.595045][   T23] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 1388.752255][T26595] loop4: detected capacity change from 0 to 2048
[ 1388.809694][T26595] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1388.863084][   T23] usb 3-1: Using ep0 maxpacket: 16
[ 1388.909883][T26608] netlink: 'syz.3.25205': attribute type 11 has an invalid length.
[ 1389.030544][   T23] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1389.056461][   T23] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1389.066603][T26618] overlayfs: failed to resolve 'obj_user=/­': -2
[ 1389.120500][   T23] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1389.156893][   T23] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1389.284984][T26583] loop1: detected capacity change from 0 to 32768
[ 1389.365619][   T23] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1389.383988][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1389.403417][   T23] usb 3-1: Product: syz
[ 1389.411203][   T23] usb 3-1: Manufacturer: syz
[ 1389.424682][   T23] usb 3-1: SerialNumber: syz
[ 1389.445682][   T23] usb 3-1: config 0 descriptor??
[ 1389.520221][T26583] XFS (loop1): Mounting V5 Filesystem
[ 1389.556616][T26583] XFS (loop1): Ending clean mount
[ 1389.590092][ T4970] usb 5-1: new full-speed USB device number 100 using dummy_hcd
[ 1389.609495][ T5009] XFS (loop1): Unmounting Filesystem
[ 1389.722061][   T23] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input87
[ 1389.741459][ T3545] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[ 1389.808731][ T3545] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[ 1389.907947][ T4868] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[ 1389.910099][ T4960] usb 3-1: USB disconnect, device number 102
[ 1389.944487][ T4970] usb 5-1: config 0 has an invalid interface number: 3 but max is 2
[ 1389.952527][ T4970] usb 5-1: config 0 has an invalid interface number: 176 but max is 2
[ 1389.967740][ T3545] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[ 1389.979615][ T4970] usb 5-1: config 0 has no interface number 1
[ 1389.994323][ T4970] usb 5-1: config 0 has no interface number 2
[ 1390.019440][ T4970] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[ 1390.055057][ T4970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1390.078993][ T4970] usb 5-1: config 0 descriptor??
[ 1390.084522][T26698] __nla_validate_parse: 1 callbacks suppressed
[ 1390.084537][T26698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25228'.
[ 1390.121230][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1390.327098][ T4970] qcserial 5-1:0.3: Qualcomm USB modem converter detected
[ 1390.517307][ T4970] usb 5-1: USB disconnect, device number 100
[ 1390.534961][ T4970] qcserial 5-1:0.3: device disconnected
[ 1390.954024][T26791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25247'.
[ 1390.988245][T26791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25247'.
[ 1391.096926][T26804] dlm: non-version read from control device 8192
[ 1391.146165][T26806] netlink: 'syz.2.25253': attribute type 10 has an invalid length.
[ 1391.195074][T26806] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1391.233705][T26814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25255'.
[ 1391.249271][T26806] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1391.266397][T26814] netlink: 'syz.0.25255': attribute type 1 has an invalid length.
[ 1391.294408][T26806] infiniband syz1: set active
[ 1391.314930][T26806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1391.373241][ T4787] lo speed is unknown, defaulting to 1000
[ 1391.385490][T26823] netlink: 'syz.3.25258': attribute type 1 has an invalid length.
[ 1391.456813][T26760] loop1: detected capacity change from 0 to 32768
[ 1391.496607][T26760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.25241 (26760)
[ 1391.593797][T26760] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1391.612103][T26850] netlink: 'syz.4.25267': attribute type 1 has an invalid length.
[ 1391.613737][T26851] netlink: 399 bytes leftover after parsing attributes in process `syz.0.25268'.
[ 1391.646501][T26760] BTRFS info (device loop1): using free space tree
[ 1391.673468][T26760] BTRFS info (device loop1): has skinny extents
[ 1391.826814][ T4960] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1392.009791][T26760] BTRFS info (device loop1): enabling ssd optimizations
[ 1392.022616][ T4970] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 1392.078221][ T4960] usb 4-1: Using ep0 maxpacket: 16
[ 1392.156480][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1392.251944][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1392.255279][ T4970] usb 5-1: Using ep0 maxpacket: 32
[ 1392.339437][ T4960] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1392.366027][ T4960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1392.404787][ T4970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1392.415987][T26923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1392.422518][ T4960] usb 4-1: Product: syz
[ 1392.445065][ T4960] usb 4-1: Manufacturer: syz
[ 1392.450024][ T4960] usb 4-1: SerialNumber: syz
[ 1392.466187][ T4960] usb 4-1: config 0 descriptor??
[ 1392.513101][ T4960] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1392.591014][ T4970] usb 5-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75
[ 1392.610016][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1392.636087][ T4970] usb 5-1: Product: syz
[ 1392.654628][ T4970] usb 5-1: Manufacturer: syz
[ 1392.673030][ T4970] usb 5-1: SerialNumber: syz
[ 1392.704586][ T4970] usb 5-1: config 0 descriptor??
[ 1392.842864][T26954] device bond6 entered promiscuous mode
[ 1392.869222][T26954] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1392.907782][ T4960] gspca_spca508: reg_read err -71
[ 1392.926956][ T4960] gspca_spca508: reg_read err -71
[ 1392.945618][ T4960] gspca_spca508: reg_read err -71
[ 1392.972967][ T4960] gspca_spca508: reg_read err -71
[ 1392.991446][ T4960] gspca_spca508: reg write: error -71
[ 1392.997039][ T4960] spca508: probe of 4-1:0.0 failed with error -71
[ 1393.000756][T27008] netlink: 72 bytes leftover after parsing attributes in process `syz.2.25293'.
[ 1393.019674][ T4970] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro FD v0 fw v0.0.0 (2 channels)
[ 1393.075902][T27016] ieee802154 phy1 wpan1: encryption failed: -22
[ 1393.088993][ T4960] usb 4-1: USB disconnect, device number 99
[ 1393.215440][ T4970] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[ 1393.234767][ T4970] peak_usb 5-1:0.0: unable to tell PCAN-USB Pro FD driver is loaded (err -71)
[ 1393.312037][ T4970] peak_usb: probe of 5-1:0.0 failed with error -71
[ 1393.358562][ T4970] usb 5-1: USB disconnect, device number 101
[ 1393.412622][T27014] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 1393.676163][T27014] usb 1-1: Using ep0 maxpacket: 32
[ 1393.825842][T27014] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 1393.839217][T27014] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1393.865765][T27104] loop4: detected capacity change from 0 to 512
[ 1393.886292][T27014] usb 1-1: config 0 has no interface number 0
[ 1393.906988][T27014] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1393.922346][T27112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25324'.
[ 1393.947044][T27104] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1393.961243][T27112] netlink: 31 bytes leftover after parsing attributes in process `syz.1.25324'.
[ 1393.972244][T27112] netlink: 'syz.1.25324': attribute type 3 has an invalid length.
[ 1393.993964][T27112] netlink: 'syz.1.25324': attribute type 2 has an invalid length.
[ 1394.003507][T27104] EXT4-fs (loop4): 1 truncate cleaned up
[ 1394.010331][T27104] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: none.
[ 1394.025240][T27112] netlink: 31 bytes leftover after parsing attributes in process `syz.1.25324'.
[ 1394.060815][T27104] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1394.138695][T27014] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1394.167652][T27014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1394.210637][T27014] usb 1-1: Product: syz
[ 1394.243948][T27014] usb 1-1: Manufacturer: syz
[ 1394.248587][T27014] usb 1-1: SerialNumber: syz
[ 1394.293988][T27014] usb 1-1: config 0 descriptor??
[ 1394.310059][ T5019] .`: (slave syz_tun): Releasing backup interface
[ 1394.354544][T27014] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1394.520687][ T4960] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1394.566188][T27014] usb 1-1: qt2_setup_urbs - submit read urb failed -8
[ 1394.593762][T27014] quatech2: probe of 1-1:0.51 failed with error -8
[ 1394.686936][    T9] .`: (slave netdevsim0): Releasing backup interface
[ 1394.748152][ T4960] usb 2-1: Using ep0 maxpacket: 16
[ 1394.810580][ T4970] usb 1-1: USB disconnect, device number 110
[ 1394.860861][T27014] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1394.865505][ T4960] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1394.906380][ T4960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1394.944753][ T4960] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[ 1394.993223][ T4960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1395.086186][T27191] lo speed is unknown, defaulting to 1000
[ 1395.164057][ T4960] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 1395.174451][ T4960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1395.189546][ T4960] usb 2-1: Product: syz
[ 1395.194886][ T4960] usb 2-1: Manufacturer: syz
[ 1395.199845][ T4960] usb 2-1: SerialNumber: syz
[ 1395.248340][ T4960] usb 2-1: config 0 descriptor??
[ 1395.286295][ T4960] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[ 1395.298754][T27014] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1395.415264][T27014] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7
[ 1395.479272][ T4960] usb 2-1: USB disconnect, device number 68
[ 1395.557216][T27247] loop2: detected capacity change from 0 to 16
[ 1395.591719][T27254] netlink: 64 bytes leftover after parsing attributes in process `syz.0.25353'.
[ 1395.601918][T27254] netlink: 64 bytes leftover after parsing attributes in process `syz.0.25353'.
[ 1395.629783][T27014] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1395.648482][T27247] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1395.680524][T27014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1395.718572][T27014] usb 4-1: Product: syz
[ 1395.731968][T27014] usb 4-1: Manufacturer: syz
[ 1395.736653][T27014] usb 4-1: SerialNumber: syz
[ 1395.783030][T27265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25355'.
[ 1395.940368][T27279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25359'.
[ 1396.009906][T27284] openvswitch: netlink: Message has 8 unknown bytes.
[ 1396.038376][T27290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25362'.
[ 1396.051065][T27014] usb 4-1: selecting invalid altsetting 1
[ 1396.057450][T27014] usb 4-1: unit 3 not found!
[ 1396.114847][T27014] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[ 1396.155362][T27014] usb 4-1: selecting invalid altsetting 1
[ 1396.171999][T27014] usb 4-1: unit 3 not found!
[ 1396.226085][T27014] snd-usb-audio: probe of 4-1:1.1 failed with error -22
[ 1396.250974][T27014] usb 4-1: selecting invalid altsetting 1
[ 1396.284213][T27014] usb 4-1: unit 3 not found!
[ 1396.386552][T27014] snd-usb-audio: probe of 4-1:1.2 failed with error -22
[ 1396.442066][T27014] usb 4-1: USB disconnect, device number 100
[ 1396.459815][T27357] netlink: 280 bytes leftover after parsing attributes in process `syz.1.25369'.
[ 1396.702523][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1396.783223][T27191] chnl_net:caif_netlink_parms(): no params data found
[ 1396.823758][T27414] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1396.936371][T27014] Bluetooth: hci4: command 0x0409 tx timeout
[ 1397.555706][T27191] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1397.596869][T27191] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1397.625043][T27191] device bridge_slave_0 entered promiscuous mode
[ 1397.652117][T27191] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1397.698343][T27191] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1397.707483][T27563] loop0: detected capacity change from 0 to 2048
[ 1397.732234][T27191] device bridge_slave_1 entered promiscuous mode
[ 1397.776884][T27563] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1397.957539][T27191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1398.046786][T27191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1398.239677][T27191] team0: Port device team_slave_0 added
[ 1398.268240][T27191] team0: Port device team_slave_1 added
[ 1398.358661][T27666] misc userio: Invalid payload size
[ 1398.398249][T27191] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1398.419234][T27191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1398.445156][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1398.472017][ T4960] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1398.507746][T27191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1398.621527][T27191] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1398.628574][T27191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1398.687121][T27191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1398.695806][ T4960] usb 2-1: Using ep0 maxpacket: 32
[ 1398.760801][T26926] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 1398.855008][T27014] Bluetooth: hci4: command 0x041b tx timeout
[ 1398.891542][ T4960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7
[ 1398.922145][ T4960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7
[ 1398.969410][T27191] device hsr_slave_0 entered promiscuous mode
[ 1398.985034][T26926] usb 3-1: Using ep0 maxpacket: 32
[ 1399.025172][T27191] device hsr_slave_1 entered promiscuous mode
[ 1399.065885][T27704] loop0: detected capacity change from 0 to 32768
[ 1399.096851][T26926] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[ 1399.106317][T26926] usb 3-1: config 0 has no interface number 0
[ 1399.112495][T26926] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1399.124750][ T4960] usb 2-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.05
[ 1399.139923][T26926] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1399.170611][T27704] ERROR: (device loop0): dbAllocAG: Corrupt dmapctl page
[ 1399.170611][T27704] 
[ 1399.172035][ T4960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1399.208180][T26926] usb 3-1: config 0 interface 85 has no altsetting 0
[ 1399.220411][ T4960] usb 2-1: Product: syz
[ 1399.224624][ T4960] usb 2-1: Manufacturer: syz
[ 1399.240619][ T4960] usb 2-1: SerialNumber: syz
[ 1399.256298][T27704] ERROR: (device loop0): remounting filesystem as read-only
[ 1399.265919][T27704] jfs_mkdir: dtInsert returned -EIO
[ 1399.271163][T27704] ERROR: (device loop0): jfs_mkdir: 
[ 1399.271163][T27704] 
[ 1399.354036][T27785] netlink: 68 bytes leftover after parsing attributes in process `syz.3.25427'.
[ 1399.367269][ T4960] snd-usb-audio: probe of 2-1:1.0 failed with error -2
[ 1399.382999][ T4960] snd-usb-audio: probe of 2-1:1.1 failed with error -2
[ 1399.395489][T26926] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1399.400176][T27785] netlink: 96 bytes leftover after parsing attributes in process `syz.3.25427'.
[ 1399.420060][T26926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1399.436041][T27785] tc_dump_action: action bad kind
[ 1399.461594][T26926] usb 3-1: Product: syz
[ 1399.472351][T26926] usb 3-1: Manufacturer: syz
[ 1399.494955][T26926] usb 3-1: SerialNumber: syz
[ 1399.558723][T26926] usb 3-1: config 0 descriptor??
[ 1399.560770][ T4960] snd-usb-audio: probe of 2-1:1.2 failed with error -2
[ 1399.612285][ T4960] usb 2-1: USB disconnect, device number 69
[ 1399.847856][ T9247] udevd[9247]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1399.959913][    T9] device hsr_slave_1 left promiscuous mode
[ 1400.003013][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1400.038574][T26926] appletouch 3-1:0.85: Failed to request geyser raw mode
[ 1400.052404][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1400.059952][T26926] appletouch: probe of 3-1:0.85 failed with error -5
[ 1400.076047][    T9] bridge0: port 3(.`) entered disabled state
[ 1400.083063][    T9] device bridge_slave_1 left promiscuous mode
[ 1400.089880][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1400.099151][    T9] device bridge_slave_0 left promiscuous mode
[ 1400.113070][T26926] usb 3-1: USB disconnect, device number 103
[ 1400.131808][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1400.304882][    T9] bond7 (unregistering): Released all slaves
[ 1400.315744][    T9] bond6 (unregistering): Released all slaves
[ 1400.328322][    T9] bond5 (unregistering): Released all slaves
[ 1400.340772][    T9] bond4 (unregistering): Released all slaves
[ 1400.497962][    T9] bond3 (unregistering): Released all slaves
[ 1400.511988][    T9] bond2 (unregistering): Released all slaves
[ 1400.532947][    T9] bond1 (unregistering): Released all slaves
[ 1400.603208][    T9] team0 (unregistering): Port device macvlan1 removed
[ 1400.629068][    T9] .` (unregistering): (slave macvlan0): Releasing backup interface
[ 1400.659929][    T9] team0 (unregistering): Port device virt_wifi0 removed
[ 1400.739703][    T9] team0 (unregistering): Port device team_slave_1 removed
[ 1400.764119][    T9] team0 (unregistering): Port device team_slave_0 removed
[ 1400.779516][    T9] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1400.799380][    T9] device bond_slave_1 left promiscuous mode
[ 1400.806080][T26926] Bluetooth: hci4: command 0x040f tx timeout
[ 1400.827602][    T9] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1400.837172][    T9] device bond_slave_0 left promiscuous mode
[ 1400.930560][    T9] team0 (unregistering): Port device bridge0 removed
[ 1400.963780][T27920] loop2: detected capacity change from 0 to 32768
[ 1400.983562][    T9] .` (unregistering): Released all slaves
[ 1401.046282][T27920] jfs_strtoUCS: char2uni returned -22.
[ 1401.051791][T27920] charset = cp864, char = 0x9f
[ 1401.291815][T27964] ieee802154 phy1 wpan1: encryption failed: -22
[ 1401.344589][T27191] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1401.373872][T27191] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1401.410352][T27191] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1401.434880][T27191] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1401.584826][T26926] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1401.678027][T27014] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 1401.684880][T27191] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1401.733937][T12169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1401.764967][T12169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1401.816071][T27191] 8021q: adding VLAN 0 to HW filter on device team0
[ 1401.837747][T26926] usb 2-1: Using ep0 maxpacket: 8
[ 1401.849585][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1401.878547][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1401.898822][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1401.905973][ T8272] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1401.967446][T27014] usb 1-1: Using ep0 maxpacket: 16
[ 1401.972876][T26926] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1401.990997][T26926] usb 2-1: config 179 has no interface number 0
[ 1401.998827][T28000] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1402.006589][T26926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1402.012074][T28000] bond0: (slave lo): Error: Device can not be enslaved while up
[ 1402.049268][T26926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1402.086290][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1402.095139][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1402.100531][T26926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1402.114464][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1402.115064][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1402.130192][ T8272] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1402.137717][T26926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1402.157070][T26926] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1402.163607][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1402.182567][T27014] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1402.189982][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1402.219845][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1402.221299][T26926] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1402.238706][T26926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1402.250458][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1402.265497][T27014] usb 1-1: config 7 has an invalid interface number: 192 but max is 0
[ 1402.268998][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1402.277091][T27014] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1402.292832][T27960] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1402.312716][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1402.347344][T27191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1402.367822][T27191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1402.412654][T27014] usb 1-1: config 7 has no interface number 0
[ 1402.414119][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1402.430753][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1402.434958][T27014] usb 1-1: config 7 interface 192 has no altsetting 0
[ 1402.441134][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1402.485373][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1402.494192][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1402.504071][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1402.620063][T27014] usb 1-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.39
[ 1402.633789][T27014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1402.651531][T27014] usb 1-1: Product: syz
[ 1402.665254][T27014] usb 1-1: Manufacturer: syz
[ 1402.673053][T27014] usb 1-1: SerialNumber: syz
[ 1402.732149][T26926] Bluetooth: hci4: command 0x0419 tx timeout
[ 1402.858789][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1402.881504][T26981] usb 2-1: USB disconnect, device number 70
[ 1402.890333][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1402.899669][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1402.932441][T27191] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1402.982728][T27014] usb 1-1: bad CDC descriptors
[ 1402.988747][T27014] usb 1-1: bad CDC descriptors
[ 1403.028382][T27014] usb 1-1: USB disconnect, device number 111
[ 1403.344180][T28086] usb usb8: usbfs: process 28086 (syz.2.25464) did not claim interface 0 before use
[ 1403.629303][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1403.653179][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1403.714944][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1403.744824][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1403.797038][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1403.829119][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1403.868024][T27191] device veth0_vlan entered promiscuous mode
[ 1403.963863][T27191] device veth1_vlan entered promiscuous mode
[ 1404.114485][T27191] device veth0_macvtap entered promiscuous mode
[ 1404.156220][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1404.167844][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1404.213365][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1404.253613][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1404.284638][  T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1404.328317][T27191] device veth1_macvtap entered promiscuous mode
[ 1404.407525][T27191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1404.446735][T27191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1404.491652][T27191] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1404.516911][T28180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25494'.
[ 1404.545269][ T2989] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1404.586696][T28182] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[ 1404.651464][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1404.680422][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1404.705289][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1404.776486][T27191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1404.799977][T27191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1404.812504][ T2989] usb 4-1: Using ep0 maxpacket: 8
[ 1404.837312][T27191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1404.879981][T27191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1404.926288][T27191] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1404.952666][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1404.969438][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1405.002515][T27191] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.026751][T27191] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.054759][T27191] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.070192][T27191] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.081881][ T2989] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1405.114436][ T2989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1405.140677][ T2989] usb 4-1: Product: syz
[ 1405.150413][ T2989] usb 4-1: Manufacturer: syz
[ 1405.153861][T28218] loop1: detected capacity change from 0 to 2048
[ 1405.171619][ T2989] usb 4-1: SerialNumber: syz
[ 1405.211103][ T2989] usb 4-1: config 0 descriptor??
[ 1405.281685][ T2989] gspca_main: se401-2.14.0 probing 047d:5003
[ 1405.321459][T28236] loop0: detected capacity change from 0 to 8
[ 1405.377450][T28218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1405.397105][ T5112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1405.415593][ T5112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1405.447227][T28236] SQUASHFS error: zstd decompression error: 2
[ 1405.470602][T28236] SQUASHFS error: zstd decompression failed, data probably corrupt
[ 1405.504113][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1405.529598][T28236] SQUASHFS error: Failed to read block 0x62b: -5
[ 1405.548206][ T4865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1405.583363][ T4865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1405.619430][T28236] SQUASHFS error: Unable to read metadata cache entry [629]
[ 1405.635466][ T8272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1405.668095][ T2989] gspca_se401: write req failed req 0x57 val 0x00 error -71
[ 1405.675674][ T2989] se401: probe of 4-1:0.0 failed with error -71
[ 1405.695355][T28236] SQUASHFS error: Unable to read directory block [629:ff26]
[ 1405.719401][ T2989] usb 4-1: USB disconnect, device number 101
[ 1406.254577][ T2989] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1406.387347][T28329] netlink: 44 bytes leftover after parsing attributes in process `syz.3.25524'.
[ 1406.590658][ T2989] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1406.619177][ T2989] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1406.715223][T28364] openvswitch: netlink: IP tunnel dst address not specified
[ 1406.719313][ T2989] usb 2-1: config 2 interface 0 has no altsetting 0
[ 1406.889140][ T2989] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[ 1406.918107][ T2989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1406.953795][T28385] netlink: 240 bytes leftover after parsing attributes in process `syz.3.25541'.
[ 1406.958400][ T2989] usb 2-1: Product: syz
[ 1407.000393][ T2989] usb 2-1: Manufacturer: syz
[ 1407.005035][ T2989] usb 2-1: SerialNumber: syz
[ 1407.121713][T27014] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[ 1407.393529][ T2989] usb 2-1: USB disconnect, device number 71
[ 1407.441642][T28423] loop0: detected capacity change from 0 to 1024
[ 1407.513116][T27014] usb 6-1: config index 0 descriptor too short (expected 539, got 27)
[ 1407.541153][T27014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1407.687286][  T150] hfsplus: b-tree write err: -5, ino 25
[ 1407.693265][  T150] hfsplus: b-tree write err: -5, ino 4
[ 1407.709217][  T150] hfsplus: b-tree write err: -5, ino 2
[ 1407.746198][T27014] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[ 1407.772427][T27014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1407.811981][T27014] usb 6-1: Product: syz
[ 1407.816182][T27014] usb 6-1: Manufacturer: syz
[ 1407.830451][T27014] usb 6-1: SerialNumber: syz
[ 1407.865863][T27014] usb 6-1: config 0 descriptor??
[ 1407.941400][T27014] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1407.967490][T27014] hub: probe of 6-1:0.0 failed with error -5
[ 1407.999078][T27014] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input91
[ 1408.011082][T28466] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[ 1408.044820][T27014] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[ 1408.118172][T27014] usbtouchscreen: probe of 6-1:0.0 failed with error -8
[ 1408.194071][T27014] usb 6-1: USB disconnect, device number 2
[ 1408.349819][T28532] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1408.425992][T28532] FAT-fs (loop7): unable to read boot sector
[ 1408.459360][T28547] netlink: 'syz.1.25576': attribute type 1 has an invalid length.
[ 1408.492246][T28547] netlink: 'syz.1.25576': attribute type 3 has an invalid length.
[ 1408.506426][T28547] netlink: 224 bytes leftover after parsing attributes in process `syz.1.25576'.
[ 1408.544966][T28547] NCSI netlink: No device for ifindex 2986344450
[ 1408.714050][T28574] netlink: 48 bytes leftover after parsing attributes in process `syz.2.25584'.
[ 1408.910880][T28587] loop5: detected capacity change from 0 to 4096
[ 1409.070138][T28587] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[ 1409.096175][T28607] Cannot find del_set index 0 as target
[ 1409.436329][T28647] loop0: detected capacity change from 0 to 64
[ 1409.789790][T28696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25626'.
[ 1409.847618][T28705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.25629'.
[ 1409.875740][T28705] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 1409.999594][T28723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1410.007043][T28723] IPv6: NLM_F_CREATE should be set when creating new route
[ 1410.014321][T28723] IPv6: NLM_F_CREATE should be set when creating new route
[ 1410.211023][T28750] loop1: detected capacity change from 0 to 16
[ 1410.304789][T28750] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1410.336651][ T5014] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000]
[ 1410.385212][T28750] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[8192]
[ 1410.431142][T27014] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[ 1410.524056][   T26] audit: type=1800 audit(2000000891.086:96): pid=28750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25643" name="file2" dev="loop1" ino=89 res=0 errno=0
[ 1410.839811][T28811] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[ 1410.840428][T27014] usb 6-1: config 128 interface 0 has no altsetting 0
[ 1410.868667][T27014] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[ 1410.878486][T27014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1411.071964][T28866] netlink: 'syz.2.25665': attribute type 1 has an invalid length.
[ 1411.087289][T28863] Unsupported ieee802154 address type: 0
[ 1411.092456][T28866] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.25665'.
[ 1411.129560][T27014] comedi comedi5: could not set alternate setting 3 in high speed
[ 1411.137899][T27014] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[ 1411.149954][T27014] usbduxsigma: probe of 6-1:128.0 failed with error -71
[ 1411.159099][T27014] usb 6-1: USB disconnect, device number 3
[ 1411.666717][T28931] netlink: 'syz.5.25685': attribute type 1 has an invalid length.
[ 1411.704232][T28931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25685'.
[ 1411.731839][T28931] netlink: 'syz.5.25685': attribute type 1 has an invalid length.
[ 1411.966687][T28967] tc_dump_action: action bad kind
[ 1412.030059][T28976] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.25702'.
[ 1412.046986][T28974] netlink: 76 bytes leftover after parsing attributes in process `syz.0.25701'.
[ 1412.131755][T28986] netlink: 'syz.3.25705': attribute type 5 has an invalid length.
[ 1412.508427][T29034] program syz.1.25725 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1412.527442][T29039] loop2: detected capacity change from 0 to 64
[ 1412.543739][T29043] libceph: resolve '0.' (ret=-3): failed
[ 1412.604488][T29050] nfs4: Bad value for 'source'
[ 1412.642994][T29039] MINIX-fs: mounting file system with errors, running fsck is recommended
[ 1412.716090][T29039] attempt to access beyond end of device
[ 1412.716090][T29039] loop2: rw=0, want=8194, limit=64
[ 1412.750113][T29068] netlink: 40 bytes leftover after parsing attributes in process `syz.5.25733'.
[ 1412.763881][T29039] Buffer I/O error on dev loop2, logical block 4096, async page read
[ 1412.805467][T29039] attempt to access beyond end of device
[ 1412.805467][T29039] loop2: rw=0, want=8194, limit=64
[ 1412.828849][T29074] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.25735'.
[ 1412.862907][T29039] Buffer I/O error on dev loop2, logical block 4096, async page read
[ 1412.909032][   T26] audit: type=1800 audit(2000000893.629:97): pid=29039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.25722" name="file2" dev="loop2" ino=6 res=0 errno=0
[ 1412.992188][T29098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25740'.
[ 1413.227492][T20065] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1413.266682][T29136] kAFS: unable to lookup cell '.,'
[ 1413.416662][T29152] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[ 1413.720923][T20065] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 1413.753953][T20065] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1413.797793][T29181] netlink: 'syz.2.25765': attribute type 28 has an invalid length.
[ 1413.806281][T20065] usb 6-1: Product: syz
[ 1413.817538][T20065] usb 6-1: Manufacturer: syz
[ 1413.822167][T20065] usb 6-1: SerialNumber: syz
[ 1413.879798][T20065] r8152-cfgselector 6-1: config 0 descriptor??
[ 1414.298169][T27014] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 1414.364147][T20065] r8152-cfgselector 6-1: Unknown version 0x0000
[ 1414.386436][T20065] r8152-cfgselector 6-1: USB disconnect, device number 4
[ 1414.589598][T29235] loop1: detected capacity change from 0 to 512
[ 1414.665248][T27014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1414.686467][T29235] EXT4-fs (loop1): 1 truncate cleaned up
[ 1414.692394][T27013] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 1414.709914][T29235] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[ 1414.801163][T29235] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.25783: bg 0: block 465: padding at end of block bitmap is not set
[ 1414.829666][T27014] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[ 1414.843522][T27014] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[ 1414.865199][T27014] usb 1-1: Manufacturer: syz
[ 1414.886507][T27014] usb 1-1: config 0 descriptor??
[ 1414.901785][T29235] EXT4-fs (loop1): Remounting filesystem read-only
[ 1414.932975][T29235] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[ 1414.951053][T27013] usb 3-1: Using ep0 maxpacket: 8
[ 1414.962484][T27014] usb 1-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[ 1414.979171][T27014] usb 1-1: No valid video chain found.
[ 1414.985359][T29235] EXT4-fs (loop1): Remounting filesystem read-only
[ 1415.006566][T29235] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.25783: invalid indirect mapped block 234881024 (level 0)
[ 1415.069586][T29235] EXT4-fs (loop1): Remounting filesystem read-only
[ 1415.081905][T27013] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[ 1415.101149][T27013] usb 3-1: config 0 has no interface number 0
[ 1415.181014][T27014] usb 1-1: USB disconnect, device number 112
[ 1415.287353][T27013] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1415.317274][T27013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1415.332531][T29285] netlink: 'syz.5.25796': attribute type 3 has an invalid length.
[ 1415.342669][T27013] usb 3-1: Product: syz
[ 1415.354294][T27013] usb 3-1: Manufacturer: syz
[ 1415.364303][T29285] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.25796'.
[ 1415.370226][T27013] usb 3-1: SerialNumber: syz
[ 1415.425792][T27013] usb 3-1: config 0 descriptor??
[ 1415.622038][T29311] netlink: 'syz.5.25805': attribute type 3 has an invalid length.
[ 1415.650428][T29311] netlink: 'syz.5.25805': attribute type 3 has an invalid length.
[ 1415.668871][T27013] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[ 1415.696214][T27013] usb 3-1: No valid video chain found.
[ 1415.868517][T27013] usb 3-1: USB disconnect, device number 104
[ 1415.967064][T29349] netlink: 'syz.5.25816': attribute type 5 has an invalid length.
[ 1416.007852][T29354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25818'.
[ 1416.184775][T29374] loop0: detected capacity change from 0 to 16
[ 1416.233453][T29374] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1416.279747][ T5014] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000]
[ 1416.325719][T29374] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[8192]
[ 1416.391693][T29385] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1416.399974][   T26] audit: type=1800 audit(2000000897.384:98): pid=29374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.25824" name="file2" dev="loop0" ino=89 res=0 errno=0
[ 1416.864055][T29433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25843'.
[ 1416.917384][T29433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25843'.
[ 1416.983036][T29433] netlink: 31 bytes leftover after parsing attributes in process `syz.2.25843'.
[ 1417.025927][T29433] netlink: 'syz.2.25843': attribute type 3 has an invalid length.
[ 1417.054996][T29452] loop1: detected capacity change from 0 to 64
[ 1417.077388][T29433] netlink: 'syz.2.25843': attribute type 2 has an invalid length.
[ 1417.085238][T29433] netlink: 31 bytes leftover after parsing attributes in process `syz.2.25843'.
[ 1417.130511][T29463] netlink: 'syz.3.25852': attribute type 1 has an invalid length.
[ 1417.147332][T29433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25843'.
[ 1417.179651][T29433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25843'.
[ 1417.184558][T29470] netlink: set zone limit has 4 unknown bytes
[ 1417.215469][T29463] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.25852'.
[ 1417.354217][T29484] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614)
[ 1417.403958][T29488] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð)
[ 1417.426020][T29484] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[ 1417.435988][T29494] netlink: 'syz.0.25860': attribute type 1 has an invalid length.
[ 1417.642673][T29517] nfs: Unknown parameter '/dev/ocfs2_control'
[ 1417.725226][T29519] loop0: detected capacity change from 0 to 2048
[ 1417.833112][T29519] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1417.881825][T29519] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[ 1417.963168][T29519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1417.994176][T29555] sctp: [Deprecated]: syz.5.25881 (pid 29555) Use of int in max_burst socket option.
[ 1417.994176][T29555] Use struct sctp_assoc_value instead
[ 1418.020376][T29519] UDF-fs: unknown compression code (0)
[ 1418.608881][T29625] ip6t_srh: unknown srh match flags  4001
[ 1418.905568][T29547] loop2: detected capacity change from 0 to 40427
[ 1418.940117][T29645] loop5: detected capacity change from 0 to 4096
[ 1418.964344][T29547] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1418.987134][T29547] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1419.030536][T29645] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[ 1419.042055][T29547] F2FS-fs (loop2): invalid crc value
[ 1419.068384][T29645] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[ 1419.087705][T29645] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[ 1419.102564][T29547] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1419.152727][T29645] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1419.249520][T29645] ntfs: volume version 3.1.
[ 1419.279090][T29547] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1419.286416][T29690] netlink: 'syz.1.25920': attribute type 1 has an invalid length.
[ 1419.299265][T29645] ntfs: (device loop5): map_mft_record_page(): Attempt to read mft record 0x8b1d, which is beyond the end of the mft.  This is probably a bug in the ntfs driver.
[ 1419.302654][T29547] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1419.340963][T29645] ntfs: (device loop5): map_mft_record(): Failed with error code 2.
[ 1419.364423][T29645] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x8b1d as bad.  Run chkdsk.
[ 1419.396488][T29690] netlink: 228 bytes leftover after parsing attributes in process `syz.1.25920'.
[ 1419.735115][T29721] netlink: 'syz.5.25929': attribute type 1 has an invalid length.
[ 1419.749327][T29725] ceph: No source
[ 1420.096203][ T2992] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1420.319778][ T2992] usb 2-1: Using ep0 maxpacket: 8
[ 1420.431808][ T2992] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1420.586163][ T2992] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1420.610511][ T2992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1420.660994][ T2992] usb 2-1: Product: syz
[ 1420.689319][ T2992] usb 2-1: Manufacturer: syz
[ 1420.719641][ T2992] usb 2-1: SerialNumber: syz
[ 1420.767827][ T2992] usb 2-1: config 0 descriptor??
[ 1420.829869][ T2992] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found
[ 1420.873146][T29788] bridge0: port 3(batadv0) entered blocking state
[ 1420.907944][T29797] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead
[ 1420.924240][T29788] bridge0: port 3(batadv0) entered disabled state
[ 1420.964999][    T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1420.975268][    T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1420.984605][T29788] device batadv0 entered promiscuous mode
[ 1420.987689][T29797] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[ 1421.018573][T29788] bridge0: port 3(batadv0) entered blocking state
[ 1421.020235][ T2992] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1421.026022][T29788] bridge0: port 3(batadv0) entered forwarding state
[ 1421.053504][ T2992] snd_usb_toneport: probe of 2-1:0.0 failed with error -22
[ 1421.211141][ T2989] usb 2-1: USB disconnect, device number 72
[ 1421.792142][T29891] __nla_validate_parse: 1 callbacks suppressed
[ 1421.792158][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25977'.
[ 1422.332168][T29946] 
[ 1422.334539][T29946] ======================================================
[ 1422.341563][T29946] WARNING: possible circular locking dependency detected
[ 1422.348603][T29946] syzkaller #0 Not tainted
[ 1422.353021][T29946] ------------------------------------------------------
[ 1422.360038][T29946] syz.1.25994/29946 is trying to acquire lock:
[ 1422.366205][T29946] ffff888024550c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[ 1422.377273][T29946] 
[ 1422.377273][T29946] but task is already holding lock:
[ 1422.384635][T29946] ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560
[ 1422.394310][T29946] 
[ 1422.394310][T29946] which lock already depends on the new lock.
[ 1422.394310][T29946] 
[ 1422.404716][T29946] 
[ 1422.404716][T29946] the existing dependency chain (in reverse order) is:
[ 1422.413735][T29946] 
[ 1422.413735][T29946] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[ 1422.421743][T29946]        __mutex_lock_common+0x1e3/0x2400
[ 1422.427476][T29946]        mutex_lock_nested+0x17/0x20
[ 1422.432772][T29946]        rfkill_register+0x33/0x980
[ 1422.437992][T29946]        hci_register_dev+0x452/0x970
[ 1422.443375][T29946]        vhci_create_device+0x32c/0x5c0
[ 1422.448982][T29946]        vhci_write+0x391/0x450
[ 1422.453846][T29946]        vfs_write+0x745/0xd60
[ 1422.458618][T29946]        ksys_write+0x152/0x260
[ 1422.463471][T29946]        do_syscall_64+0x4c/0xa0
[ 1422.468410][T29946]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1422.474920][T29946] 
[ 1422.474920][T29946] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[ 1422.482765][T29946]        __mutex_lock_common+0x1e3/0x2400
[ 1422.488587][T29946]        mutex_lock_nested+0x17/0x20
[ 1422.493908][T29946]        vhci_send_frame+0x88/0x100
[ 1422.499118][T29946]        hci_send_frame+0x1a9/0x2e0
[ 1422.504321][T29946]        hci_tx_work+0x9f9/0x1710
[ 1422.509441][T29946]        process_one_work+0x85f/0x1010
[ 1422.514907][T29946]        worker_thread+0xaa6/0x1290
[ 1422.520130][T29946]        kthread+0x436/0x520
[ 1422.524728][T29946]        ret_from_fork+0x1f/0x30
[ 1422.529675][T29946] 
[ 1422.529675][T29946] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[ 1422.538891][T29946]        __flush_work+0x116/0x210
[ 1422.543934][T29946]        hci_dev_do_close+0x1e7/0x1030
[ 1422.549403][T29946]        hci_unregister_dev+0x2d7/0x580
[ 1422.554956][T29946]        vhci_release+0x73/0xc0
[ 1422.559820][T29946]        __fput+0x234/0x930
[ 1422.564325][T29946]        task_work_run+0x125/0x1a0
[ 1422.569449][T29946]        do_exit+0x626/0x20c0
[ 1422.574131][T29946]        do_group_exit+0x12e/0x300
[ 1422.579257][T29946]        get_signal+0x6ca/0x12c0
[ 1422.584198][T29946]        arch_do_signal_or_restart+0xe7/0x12c0
[ 1422.589476][T29913] loop5: detected capacity change from 0 to 32768
[ 1422.590360][T29946]        exit_to_user_mode_loop+0x9e/0x130
[ 1422.602552][T29946]        exit_to_user_mode_prepare+0xee/0x180
[ 1422.608633][T29946]        syscall_exit_to_user_mode+0x16/0x40
[ 1422.614622][T29946]        do_syscall_64+0x58/0xa0
[ 1422.614978][T29921] loop0: detected capacity change from 0 to 32768
[ 1422.619553][T29946]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1422.619574][T29946] 
[ 1422.619574][T29946] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[ 1422.640112][T29946]        __mutex_lock_common+0x1e3/0x2400
[ 1422.645850][T29946]        mutex_lock_nested+0x17/0x20
[ 1422.651161][T29946]        bg_scan_update+0x44/0x3b0
[ 1422.656463][T29946]        process_one_work+0x85f/0x1010
[ 1422.661941][T29946]        worker_thread+0xaa6/0x1290
[ 1422.667161][T29946]        kthread+0x436/0x520
[ 1422.671862][T29946]        ret_from_fork+0x1f/0x30
[ 1422.676902][T29946] 
[ 1422.676902][T29946] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[ 1422.686736][T29946]        __lock_acquire+0x2c42/0x7d10
[ 1422.692138][T29946]        lock_acquire+0x19e/0x400
[ 1422.697173][T29946]        __flush_work+0x116/0x210
[ 1422.702236][T29946]        __cancel_work_timer+0x3f4/0x560
[ 1422.707880][T29946]        hci_request_cancel_all+0xcc/0x300
[ 1422.713881][T29946]        hci_dev_do_close+0x4e/0x1030
[ 1422.719464][T29946]        hci_rfkill_set_block+0x10a/0x190
[ 1422.725198][T29946]        rfkill_set_block+0x1c9/0x3d0
[ 1422.730582][T29946]        rfkill_fop_write+0x452/0x560
[ 1422.735957][T29946]        vfs_write+0x30b/0xd60
[ 1422.740855][T29946]        ksys_write+0x152/0x260
[ 1422.745804][T29946]        do_syscall_64+0x4c/0xa0
[ 1422.750864][T29946]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1422.757300][T29946] 
[ 1422.757300][T29946] other info that might help us debug this:
[ 1422.757300][T29946] 
[ 1422.767539][T29946] Chain exists of:
[ 1422.767539][T29946]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[ 1422.767539][T29946] 
[ 1422.783411][T29946]  Possible unsafe locking scenario:
[ 1422.783411][T29946] 
[ 1422.790867][T29946]        CPU0                    CPU1
[ 1422.796237][T29946]        ----                    ----
[ 1422.801605][T29946]   lock(rfkill_global_mutex);
[ 1422.806391][T29946]                                lock(&data->open_mutex);
[ 1422.813501][T29946]                                lock(rfkill_global_mutex);
[ 1422.815710][T29965] loop2: detected capacity change from 0 to 4096
[ 1422.820787][T29946]   lock((work_completion)(&hdev->bg_scan_update));
[ 1422.820804][T29946] 
[ 1422.820804][T29946]  *** DEADLOCK ***
[ 1422.820804][T29946] 
[ 1422.820808][T29946] 1 lock held by syz.1.25994/29946:
[ 1422.820819][T29946]  #0: ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560
[ 1422.820865][T29946] 
[ 1422.820865][T29946] stack backtrace:
[ 1422.820871][T29946] CPU: 1 PID: 29946 Comm: syz.1.25994 Not tainted syzkaller #0
[ 1422.820888][T29946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1422.820899][T29946] Call Trace:
[ 1422.820906][T29946]  <TASK>
[ 1422.820914][T29946]  dump_stack_lvl+0x188/0x250
[ 1422.820933][T29946]  ? load_image+0x400/0x400
[ 1422.820949][T29946]  ? show_regs_print_info+0x20/0x20
[ 1422.820970][T29946]  ? print_circular_bug+0x12b/0x1a0
[ 1422.906346][T29946]  check_noncircular+0x296/0x330
[ 1422.911295][T29946]  ? add_chain_block+0x940/0x940
[ 1422.916430][T29946]  ? lockdep_lock+0xf1/0x1f0
[ 1422.921122][T29946]  ? __lock_acquire+0x12e8/0x7d10
[ 1422.926273][T29946]  ? mark_lock+0x94/0x320
[ 1422.930611][T29946]  ? _find_first_zero_bit+0xce/0xf0
[ 1422.935825][T29946]  __lock_acquire+0x2c42/0x7d10
[ 1422.940699][T29946]  ? add_lock_to_list+0x18d/0x280
[ 1422.945736][T29946]  ? verify_lock_unused+0x140/0x140
[ 1422.950962][T29946]  lock_acquire+0x19e/0x400
[ 1422.955488][T29946]  ? __flush_work+0xfa/0x210
[ 1422.960094][T29946]  ? __lock_acquire+0x7d10/0x7d10
[ 1422.965151][T29946]  ? read_lock_is_recursive+0x10/0x10
[ 1422.970533][T29946]  ? start_flush_work+0x776/0x820
[ 1422.975573][T29946]  __flush_work+0x116/0x210
[ 1422.980085][T29946]  ? __flush_work+0xfa/0x210
[ 1422.984684][T29946]  ? flush_work+0x20/0x20
[ 1422.989025][T29946]  ? try_to_grab_pending+0xfa/0x7f0
[ 1422.994234][T29946]  ? mark_lock+0x94/0x320
[ 1422.998576][T29946]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1423.004575][T29946]  ? lock_chain_count+0x20/0x20
[ 1423.009441][T29946]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1423.015348][T29946]  ? _raw_spin_unlock+0x40/0x40
[ 1423.020214][T29946]  ? __cancel_work_timer+0x36a/0x560
[ 1423.025511][T29946]  __cancel_work_timer+0x3f4/0x560
[ 1423.030725][T29946]  ? cancel_work_sync+0x20/0x20
[ 1423.035590][T29946]  ? remove_wait_queue+0x120/0x120
[ 1423.040716][T29946]  ? cancel_work+0x20/0x20
[ 1423.045143][T29946]  ? lock_chain_count+0x20/0x20
[ 1423.050114][T29946]  hci_request_cancel_all+0xcc/0x300
[ 1423.055417][T29946]  hci_dev_do_close+0x4e/0x1030
[ 1423.060287][T29946]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1423.066193][T29946]  ? _raw_spin_unlock+0x40/0x40
[ 1423.071068][T29946]  hci_rfkill_set_block+0x10a/0x190
[ 1423.076281][T29946]  ? rcu_lock_release+0x20/0x20
[ 1423.081156][T29946]  rfkill_set_block+0x1c9/0x3d0
[ 1423.086051][T29946]  rfkill_fop_write+0x452/0x560
[ 1423.090909][T29946]  ? rfkill_fop_read+0x520/0x520
[ 1423.095866][T29946]  ? common_file_perm+0x140/0x1c0
[ 1423.100904][T29946]  ? fsnotify_perm+0x5d/0x560
[ 1423.105594][T29946]  ? security_file_permission+0x75/0xa0
[ 1423.111166][T29946]  ? rfkill_fop_read+0x520/0x520
[ 1423.116209][T29946]  vfs_write+0x30b/0xd60
[ 1423.120468][T29946]  ? file_end_write+0x250/0x250
[ 1423.125355][T29946]  ? __fget_files+0x40f/0x480
[ 1423.130139][T29946]  ? __fdget_pos+0x1e2/0x370
[ 1423.134742][T29946]  ? ksys_write+0x71/0x260
[ 1423.139213][T29946]  ksys_write+0x152/0x260
[ 1423.143557][T29946]  ? __ia32_sys_read+0x80/0x80
[ 1423.148331][T29946]  ? lockdep_hardirqs_on+0x94/0x140
[ 1423.153633][T29946]  do_syscall_64+0x4c/0xa0
[ 1423.158061][T29946]  ? clear_bhb_loop+0x30/0x80
[ 1423.162767][T29946]  ? clear_bhb_loop+0x30/0x80
[ 1423.167462][T29946]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1423.173377][T29946] RIP: 0033:0x7f88f7703dd9
[ 1423.177814][T29946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1423.197718][T29946] RSP: 002b:00007f88f595d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1423.206337][T29946] RAX: ffffffffffffffda RBX: 00007f88f797cfa0 RCX: 00007f88f7703dd9
[ 1423.214414][T29946] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[ 1423.222532][T29946] RBP: 00007f88f7799d69 R08: 0000000000000000 R09: 0000000000000000
[ 1423.230606][T29946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1423.238596][T29946] R13: 00007f88f797d038 R14: 00007f88f797cfa0 R15: 00007ffd0ea72b58
[ 1423.246605][T29946]  </TASK>
[ 1423.249709][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1423.329063][   T26] audit: type=1800 audit(2000000904.808:99): pid=29913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.25984" name="file1" dev="loop5" ino=7 res=0 errno=0
[ 1423.350627][T29965] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[ 1423.369781][T29965] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1423.370074][T29921] jfs_lookup: dtSearch returned -5
[ 1423.385048][T29965] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 1423.421013][T29965] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1423.499867][T29965] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1423.543120][T29965] ntfs: volume version 3.1.
[ 1423.578770][T29965] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[ 1423.630729][T29965] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[ 1423.660345][T29965] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[ 1423.691894][T29965] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[ 1429.949228][ T1420] ieee802154 phy1 wpan1: encryption failed: -22