last executing test programs:

2.173039797s ago: executing program 1 (id=14115):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getpeername(r0, 0x0, 0x0)

2.04756804s ago: executing program 1 (id=14118):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x1000000, &(0x7f00000018c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$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")
creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec)

1.882645324s ago: executing program 2 (id=14122):
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001c80)={'dummy0\x00', &(0x7f0000001140)=@ethtool_cmd={0x1f, 0x0, 0x2, 0xfff9, 0x8, 0x93, 0x3e, 0x4, 0x6, 0x0, 0x7fffffff, 0x40, 0x9, 0x6a, 0x9, 0x5, [0x3, 0x3]}})

1.735791507s ago: executing program 2 (id=14125):
r0 = socket$inet6(0xa, 0x6, 0x0)
sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000804)

1.543651872s ago: executing program 2 (id=14128):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)

1.349518107s ago: executing program 2 (id=14132):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x5, 0x0, 0x0, 0xe, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x3, 0x40000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9fb}}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x2, 0x1, 0x60000001}]}, 0x70}}, 0x0)

1.306386048s ago: executing program 1 (id=14133):
r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0xa102)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)

1.303592798s ago: executing program 3 (id=14135):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x2, 0x4)

1.171623612s ago: executing program 2 (id=14137):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8002, &(0x7f00000000c0)=ANY=[], 0x1, 0x62a7, &(0x7f0000012f40)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)

1.137940912s ago: executing program 3 (id=14138):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

1.057488864s ago: executing program 0 (id=14139):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
faccessat2(r0, &(0x7f0000000040)='\x00', 0x1, 0x1300)

1.000936006s ago: executing program 1 (id=14140):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000001900)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x0, 0xffffff83}}], 0x10}, 0x80)

920.863798ms ago: executing program 3 (id=14142):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

874.534839ms ago: executing program 0 (id=14143):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0x4, 0x101, 0x8, 0x200, 0x3d, 0x5c, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x400003, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xfffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0x2000003, 0x5, 0x2, 0x0, 0x2, 0x8, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffff9, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x400002, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xa, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}})

805.83461ms ago: executing program 1 (id=14144):
setregid(0xee00, 0x0)
setresgid(0x0, 0xee01, 0x0)

748.202002ms ago: executing program 4 (id=14145):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0xfffefffd, 0x4)

747.782482ms ago: executing program 3 (id=14146):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c1e0309000800a000", 0x33a)

680.381493ms ago: executing program 0 (id=14147):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x437, 0x800000, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x504c3, 0x26492}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)

631.681655ms ago: executing program 1 (id=14148):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB='noquota,iocharset=iso8859-7,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x6173, &(0x7f0000024440)="$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")
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')

601.195135ms ago: executing program 3 (id=14149):
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000240))

590.501376ms ago: executing program 4 (id=14150):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]})
munlockall()

498.105648ms ago: executing program 0 (id=14151):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001}})

446.522129ms ago: executing program 3 (id=14152):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x15555599})

393.15828ms ago: executing program 4 (id=14153):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x0, 0x111, 0x4b4, 0x1b8, 0xd4feffff, 0x310, 0x20a, 0x278, 0x310, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @mcast2, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x4c}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@local, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)

302.103913ms ago: executing program 0 (id=14154):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20)

301.867103ms ago: executing program 4 (id=14155):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)

188.355556ms ago: executing program 4 (id=14156):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000003c0)=[{0x11, '\x00', @data=0x4957e43b, 0x4}, {0x1c, '\x00', @data=0x800, 0x4}, {0x5, '\x00', @data=0x2, 0x3}, {0x22, '\x00', @st={0x4, [{0x2, @svalue=0x4}, {0x2, @uvalue=0xa}, {0x3, @svalue=0x61}, {0x0, @svalue=0xd3}]}}, {0x35, '\x00', @data=0x4bc, 0x6}]})

72.692708ms ago: executing program 0 (id=14157):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000254000000030a010400000000000000000100ffff0900030073797a3100000000280004800800024000000000140003006d6163766c616e31000000000000000008000140000000020900010073797a31"], 0xa4}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800)

25.197829ms ago: executing program 2 (id=14158):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ftruncate(r0, 0x7fffffffffffffff)

0s ago: executing program 4 (id=14159):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000101010100000000000000000a000000100002800c000280050001003a0000000c001980080002000808"], 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

 mounted filesystem without journal. Quota mode: writeback.
[  846.859730][T10628] usb 3-1: USB disconnect, device number 4
[  846.982603][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  847.064924][T29571] netlink: 84 bytes leftover after parsing attributes in process `syz.4.11501'.
[  847.100258][T29571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11501'.
[  847.139538][T29571] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11501'.
[  847.183598][T29571] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11501'.
[  847.554822][T29558] loop3: detected capacity change from 0 to 32768
[  848.479827][T29624] loop2: detected capacity change from 0 to 2048
[  848.531145][T29624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  848.560896][T29631] netlink: 320 bytes leftover after parsing attributes in process `syz.1.11529'.
[  848.585205][   T27] audit: type=1800 audit(800.404:419): pid=29624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11527" name="file1" dev="loop2" ino=1367 res=0 errno=0
[  849.407703][T29673] loop1: detected capacity change from 0 to 16
[  849.459873][T29673] erofs: (device loop1): mounted with root inode @ nid 36.
[  849.578107][T29681] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11552'.
[  851.142270][T29737] loop3: detected capacity change from 0 to 8192
[  851.254768][T29748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11584'.
[  852.511885][T29798] loop2: detected capacity change from 0 to 2048
[  852.571480][T29798] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  852.843110][T29811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11613'.
[  852.894213][T29813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11614'.
[  852.932510][T29813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11614'.
[  853.274187][T29825] ieee802154 phy1 wpan1: encryption failed: -90
[  853.733487][T29844] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11629'.
[  854.069561][T29857] bridge0: port 3(hsr_slave_1) entered blocking state
[  854.084164][T29857] bridge0: port 3(hsr_slave_1) entered disabled state
[  854.263278][T29863] loop2: detected capacity change from 0 to 1024
[  854.364860][T29863] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  854.557493][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  855.058068][T29902] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11655'.
[  855.352965][T29914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11663'.
[  855.367960][T29914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11663'.
[  855.386138][T29917] netlink: 'syz.2.11664': attribute type 2 has an invalid length.
[  855.520445][T29920] loop3: detected capacity change from 0 to 2048
[  855.537017][T29920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  855.827517][T29934] binder: 29933:29934 ioctl c018620b 0 returned -14
[  855.860084][T10793] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  855.946823][T29938] x_tables: duplicate underflow at hook 3
[  856.039416][T29930] syz.4.11671 (29930): drop_caches: 3
[  856.065793][T10793] usb 3-1: unable to get BOS descriptor or descriptor too short
[  856.074326][T10793] usb 3-1: not running at top speed; connect to a high speed hub
[  856.100071][T10793] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  856.115295][T10793] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2
[  856.128175][T10793] usb 3-1: string descriptor 0 read error: -22
[  856.134420][T10793] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86
[  856.143923][T10793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.390766][T10793] snd-usb-6fire 3-1:2.0: unknown device firmware state received from device:
[  856.404613][T10793] eb 2e 87 4b 9a 05 e6 5e 
[  856.423116][T10793] snd-usb-6fire: probe of 3-1:2.0 failed with error -5
[  856.640997][T10628] usb 3-1: USB disconnect, device number 5
[  857.197947][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  857.288984][T29995] netlink: 'syz.1.11701': attribute type 41 has an invalid length.
[  857.318638][T29995] netlink: 'syz.1.11701': attribute type 4 has an invalid length.
[  857.355016][T29995] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11701'.
[  857.394628][T29995] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  857.778600][T30019] loop2: detected capacity change from 0 to 2048
[  857.823838][T30019] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  858.719615][T30059] netlink: 'syz.4.11733': attribute type 2 has an invalid length.
[  860.390851][T10628] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  860.400113][T30129] loop1: detected capacity change from 0 to 4096
[  860.533173][T30129] ntfs3: loop1: ino=5, "/" directory corrupted
[  860.578775][T30137] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11772'.
[  860.606898][T10628] usb 3-1: config 0 has an invalid interface number: 143 but max is 0
[  860.633485][T10628] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  860.666575][T10628] usb 3-1: config 0 has no interface number 0
[  860.681531][T10628] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  860.718198][T10628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.754402][T10628] usb 3-1: Product: syz
[  860.758641][T10628] usb 3-1: Manufacturer: syz
[  860.763246][T10628] usb 3-1: SerialNumber: syz
[  860.772660][T30142] netlink: 'syz.3.11774': attribute type 36 has an invalid length.
[  860.806385][T10628] usb 3-1: config 0 descriptor??
[  860.820167][T30142] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  860.855875][T30142] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  861.001135][T30153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11781'.
[  861.049704][ T4321] usb 3-1: USB disconnect, device number 6
[  861.077123][T30153] netlink: set zone limit has 4 unknown bytes
[  861.101184][T30157] x_tables: duplicate underflow at hook 3
[  861.196199][T10628] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  861.324177][T30167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11787'.
[  861.333406][T30167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11787'.
[  861.348127][T30167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11787'.
[  861.359834][T30167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  861.407471][T10628] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  861.433584][T10628] usb 5-1: config 0 has no interface number 0
[  861.452669][T10628] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  861.482970][T10628] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  861.498836][T10628] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  861.515796][T30173] loop3: detected capacity change from 0 to 128
[  861.530846][T10628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.561462][T10628] usb 5-1: config 0 descriptor??
[  861.589180][T10628] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  861.810235][T30149] iowarrior 5-1:0.1: Error -90 while submitting URB
[  861.827186][T10628] usb 5-1: USB disconnect, device number 3
[  862.200577][T30202] SET target dimension over the limit!
[  862.427840][T30206] loop2: detected capacity change from 0 to 4096
[  862.505512][T30206] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  862.898398][T30234] loop2: detected capacity change from 0 to 64
[  863.235413][T30246] loop2: detected capacity change from 0 to 512
[  863.286663][T30246] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  863.318591][T30250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11828'.
[  863.347384][T30246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  863.389960][T30246] System zones: 1-12
[  863.412200][T30246] EXT4-fs (loop2): orphan cleanup on readonly fs
[  863.458542][T30246] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.11826: attempt to clear invalid blocks 1024 len 1
[  863.532253][T30246] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.11826: bg 0: block 361: padding at end of block bitmap is not set
[  863.614732][T30246] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  863.631424][T30259] loop3: detected capacity change from 0 to 1024
[  863.639934][T30246] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.11826: invalid indirect mapped block 1811939328 (level 0)
[  863.699476][T30246] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.11826: invalid indirect mapped block 2 (level 2)
[  863.715968][T30259] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.11832: lblock 2 mapped to illegal pblock 2 (length 1)
[  863.743112][T30259] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  863.777967][T30259] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.11832: lblock 0 mapped to illegal pblock 48 (length 1)
[  863.809775][T30246] EXT4-fs (loop2): 1 truncate cleaned up
[  863.817724][T30246] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  863.894399][T30259] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  863.928317][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  863.930458][T30259] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.11832: Failed to acquire dquot type 0
[  864.002622][T30259] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  864.076352][T30259] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.11832: mark_inode_dirty error
[  864.124672][T30259] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  864.158845][T30259] EXT4-fs (loop3): 1 orphan inode deleted
[  864.178940][T30264] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  864.195077][T30259] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  864.214215][T30264] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  864.287732][T30264] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0
[  864.339842][T30259] EXT4-fs (loop3): unmounting filesystem.
[  864.351686][   T27] audit: type=1326 audit(815.153:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30285 comm="syz.2.11843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  864.377438][T30259] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.11832: Invalid inode table block 1 in block_group 0
[  864.423849][T30259] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  864.482315][T30259] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz.3.11832: mark_inode_dirty error
[  864.491165][   T27] audit: type=1326 audit(815.153:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30285 comm="syz.2.11843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  864.542080][   T27] audit: type=1326 audit(815.153:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30285 comm="syz.2.11843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  864.685352][   T27] audit: type=1326 audit(815.153:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30285 comm="syz.2.11843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  864.761787][   T27] audit: type=1326 audit(815.153:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30285 comm="syz.2.11843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  865.398470][T30303] loop4: detected capacity change from 0 to 32768
[  865.443608][T30303] read_mapping_page failed!
[  865.466303][T30303] ERROR: (device loop4): txCommit: 
[  865.466303][T30303] 
[  865.514430][T30303] ERROR: (device loop4): remounting filesystem as read-only
[  865.808367][T30344] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2 out of range (51000000..2150000000)
[  865.842299][T30348] UBIFS error (pid: 30348): cannot open "(null)", error -22
[  865.966776][T30352] xt_l2tp: missing protocol rule (udp|l2tpip)
[  866.242996][T30358] loop2: detected capacity change from 0 to 4096
[  866.327378][ T6019] kernel write not supported for file /input/mice (pid: 6019 comm: kworker/0:11)
[  866.519994][ T6019] usb 2-1: new full-speed USB device number 107 using dummy_hcd
[  866.641144][T30378] loop4: detected capacity change from 0 to 128
[  866.739592][ T6019] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  866.759207][ T6019] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  866.803958][ T6019] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  866.823235][ T6019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.850755][ T6019] usb 2-1: Product: syz
[  866.861002][ T6019] usb 2-1: Manufacturer: syz
[  866.865633][ T6019] usb 2-1: SerialNumber: syz
[  867.099660][ T6019] usb 2-1: 0:2 : does not exist
[  867.105045][ T6019] usb 2-1: unit 9 not found!
[  867.145203][ T6019] usb 2-1: 4:0: cannot get min/max values for control 3 (id 4)
[  867.167935][ T6019] usb 2-1: 4:0: cannot get min/max values for control 9 (id 4)
[  867.167968][T30392] netlink: 'syz.4.11895': attribute type 12 has an invalid length.
[  867.205758][ T6019] usb 2-1: USB disconnect, device number 107
[  867.261882][T30396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11897'.
[  867.509019][ T4352] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  867.638248][T30412] x_tables: ip_tables: icmp match: only valid for protocol 1
[  867.711309][ T4352] usb 3-1: Using ep0 maxpacket: 8
[  867.725694][ T4352] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  867.747374][ T4352] usb 3-1: config 179 has no interface number 0
[  867.761441][ T4352] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  867.794794][ T4352] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  867.813988][ T4352] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  867.825758][ T4352] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  867.849686][ T4352] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  867.883766][ T4352] usb 3-1: config 179 interface 65 has no altsetting 0
[  867.891334][ T4352] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  867.901408][ T4352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.928459][ T4352] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input57
[  868.156428][ T4352] usb 3-1: USB disconnect, device number 7
[  868.156490][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  868.179304][ T4352] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  868.201641][ T6459] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  868.221912][T30434] loop1: detected capacity change from 0 to 64
[  868.414152][T30440] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  868.415397][ T6459] usb 5-1: Using ep0 maxpacket: 32
[  868.431381][ T6019] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  868.438419][ T6459] usb 5-1: unable to get BOS descriptor or descriptor too short
[  868.465855][ T6459] usb 5-1: config 7 has an invalid interface number: 187 but max is 0
[  868.481561][ T6459] usb 5-1: config 7 has no interface number 0
[  868.488880][ T6459] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x8A has invalid wMaxPacketSize 0
[  868.506404][ T6459] usb 5-1: config 7 interface 187 has no altsetting 0
[  868.516947][ T6459] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  868.532269][ T6459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.541574][ T6459] usb 5-1: Product: syz
[  868.551820][ T6459] usb 5-1: Manufacturer: syz
[  868.556796][ T6459] usb 5-1: SerialNumber: syz
[  868.631836][T30446] loop1: detected capacity change from 0 to 256
[  868.643712][ T6019] usb 4-1: Using ep0 maxpacket: 16
[  868.655516][ T6019] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  868.676046][ T6019] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  868.687936][ T6019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.690315][T30446] FAT-fs (loop1): Directory bread(block 64) failed
[  868.699653][ T6019] usb 4-1: Product: syz
[  868.712258][ T6019] usb 4-1: Manufacturer: syz
[  868.720081][ T6019] usb 4-1: SerialNumber: syz
[  868.731818][ T6019] r8152-cfgselector 4-1: config 0 descriptor??
[  868.745017][T30446] FAT-fs (loop1): Directory bread(block 65) failed
[  868.762786][T30446] FAT-fs (loop1): Directory bread(block 66) failed
[  868.788764][ T6459] usb 5-1: Unknown endpoint type found, address 0x07
[  868.795893][T30446] FAT-fs (loop1): Directory bread(block 67) failed
[  868.814529][ T6459] usb 5-1: Unknown endpoint type found, address 0x8a
[  868.828648][T30446] FAT-fs (loop1): Directory bread(block 68) failed
[  868.835730][ T6459] usb 5-1: Not enough endpoints found in device, aborting!
[  868.850091][T30446] FAT-fs (loop1): Directory bread(block 69) failed
[  868.871148][T30446] FAT-fs (loop1): Directory bread(block 70) failed
[  868.901614][T30446] FAT-fs (loop1): Directory bread(block 71) failed
[  868.915756][T30446] FAT-fs (loop1): Directory bread(block 72) failed
[  868.922910][T30446] FAT-fs (loop1): Directory bread(block 73) failed
[  868.956209][   T27] audit: type=1326 audit(819.458:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30449 comm="syz.2.11924" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  869.084332][   T27] audit: type=1326 audit(819.458:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30449 comm="syz.2.11924" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  869.140848][   T27] audit: type=1326 audit(819.458:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30449 comm="syz.2.11924" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  869.174843][T10628] usb 5-1: USB disconnect, device number 4
[  869.203078][ T6019] r8152-cfgselector 4-1: Unknown version 0x0000
[  869.216441][ T6019] r8152-cfgselector 4-1: USB disconnect, device number 7
[  869.233254][   T27] audit: type=1326 audit(819.458:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30449 comm="syz.2.11924" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  869.314771][   T27] audit: type=1326 audit(819.458:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30449 comm="syz.2.11924" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  869.724165][T30472] loop1: detected capacity change from 0 to 4096
[  869.786141][T30472] ntfs: volume version 3.1.
[  869.809672][T30472] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  869.855708][T30472] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  869.911373][T30472] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  869.956838][T30472] ntfs: (device loop1): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[  870.018360][T30472] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[  870.069767][T30472] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  870.463483][T30504] CIFS mount error: No usable UNC path provided in device string!
[  870.463483][T30504] 
[  870.504834][T30504] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  870.628093][T30512] ipt_CLUSTERIP: Please specify destination IP
[  871.281327][T30520] loop1: detected capacity change from 0 to 32768
[  871.312005][T30520] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  871.338816][T30520] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  871.370344][T30520] BTRFS info (device loop1): using free space tree
[  871.653129][T30520] BTRFS info (device loop1): enabling ssd optimizations
[  871.816735][ T4272] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  872.480464][ T4352] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  872.691382][ T4352] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  872.709374][T30604] netlink: 'syz.2.11991': attribute type 1 has an invalid length.
[  872.721962][ T4352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.725041][T30604] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11991'.
[  872.741765][ T4352] usb 4-1: config 0 descriptor??
[  872.793740][T30607] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11992'.
[  872.806887][T30607] netlink: 23 bytes leftover after parsing attributes in process `syz.4.11992'.
[  872.818762][T30607] netlink: 23 bytes leftover after parsing attributes in process `syz.4.11992'.
[  872.982903][ T4352] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[  873.018420][ T4352] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  873.227557][ T4352] [drm:udl_init] *ERROR* Selecting channel failed
[  873.252826][ T4352] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  873.268175][ T4352] [drm] Initialized udl on minor 2
[  873.283639][ T4352] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  873.294225][ T4352] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  873.312710][ T4352] usb 4-1: USB disconnect, device number 8
[  873.324910][ T6459] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  873.337371][ T6459] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  873.346781][ T6459] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  873.363832][T10628] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  873.492125][ T4321] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  873.570131][T10628] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  873.587410][T10628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.595438][T10628] usb 3-1: Product: syz
[  873.617908][T10628] usb 3-1: Manufacturer: syz
[  873.632506][T10628] usb 3-1: SerialNumber: syz
[  873.638758][T10628] usb 3-1: config 0 descriptor??
[  873.650137][T10628] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  873.697048][ T4321] usb 2-1: unable to get BOS descriptor or descriptor too short
[  873.713767][ T4321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  873.723998][ T4321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  873.744910][ T4321] usb 2-1: string descriptor 0 read error: -22
[  873.753628][ T4321] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  873.767980][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.808641][ T4321] usb 2-1: selecting invalid altsetting 1
[  873.819775][ T4321] usb 2-1: unit 3 not found!
[  873.931028][T30641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12009'.
[  874.027223][ T4321] usb 2-1: unit 0 not found!
[  874.086363][ T4684] udevd[4684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  874.093535][ T4321] usb 3-1: USB disconnect, device number 8
[  874.175331][ T4352] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  874.267975][ T6459] usb 2-1: USB disconnect, device number 108
[  874.312733][T30653] ieee802154 phy1 wpan1: encryption failed: -90
[  874.361778][T30655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12016'.
[  874.384407][ T4352] usb 4-1: unable to get BOS descriptor or descriptor too short
[  874.396064][ T4352] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  874.409354][ T4352] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  874.424161][ T4352] usb 4-1: string descriptor 0 read error: -22
[  874.434182][ T4352] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  874.443548][ T4352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.454494][T30639] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  874.463546][ T4352] cdc_acm: probe of 4-1:1.0 failed with error -22
[  874.472944][ T4352] usb-storage 4-1:1.1: USB Mass Storage device detected
[  874.710501][ T6459] usb 4-1: USB disconnect, device number 9
[  875.069361][ T4284] Bluetooth: hci1: unexpected event for opcode 0x0c47
[  875.572323][T30702] loop3: detected capacity change from 0 to 512
[  875.618912][T30702] EXT4-fs: Ignoring removed nomblk_io_submit option
[  875.742327][T30702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  875.945664][T30724] loop1: detected capacity change from 0 to 4096
[  875.969207][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  875.983666][   T27] audit: type=1326 audit(826.037:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30725 comm="syz.4.12048" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  875.988904][T30724] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  876.098179][   T27] audit: type=1326 audit(826.037:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30725 comm="syz.4.12048" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  876.172814][   T27] audit: type=1326 audit(826.037:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30725 comm="syz.4.12048" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  876.259144][T30732] trusted_key: encrypted_key: insufficient parameters specified
[  876.291198][   T27] audit: type=1326 audit(826.037:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30725 comm="syz.4.12048" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  876.418902][   T27] audit: type=1326 audit(826.037:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30725 comm="syz.4.12048" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  876.544595][   T27] audit: type=1326 audit(826.037:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30725 comm="syz.4.12048" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  876.657631][   T27] audit: type=1326 audit(826.037:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30725 comm="syz.4.12048" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  876.784191][   T27] audit: type=1326 audit(826.037:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30725 comm="syz.4.12048" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  876.785959][T30741] loop4: detected capacity change from 0 to 8192
[  876.993288][T30747] loop2: detected capacity change from 0 to 2048
[  877.041535][T30747] hpfs: hpfs_map_sector(): read error
[  877.099840][T30747] kAFS: unable to lookup cell '1±±±
[  877.099840][T30747] ±±	±±±ñÜÏñü/ñÂ/
[  877.099840][T30747] ñâ/	ñÒ/ñò¯ñʯ
[  877.099840][T30747] ñê¯	ñÚ¯ñúoñÆo
[  877.099840][T30747] ñæo	ñÖoñöïñÎï
[  877.099840][T30747] ñîï	ñÞïñþ‡†ø@ˆ†øPˆÃBâˆqdˆ�„8*ÄÑ!>âc!>â!>âS!>â3!>âs!>â!¾âK!¾â+!¾âk!¾â!¾â[!¾â;!¾â{!¾â!~âG!~â'!~âg!~â!Ž	ñË¿
[  877.099840][T30747] ñë¿	ñÛ¿ñûñÇ
[  877.099840][T30747] ñç	ñ×ñ÷ÿqlˆ†øWˆ‡øOˆÿ†ø_ˆC"'Âq#/Âñ#œ Â	#œ(‰#œ$ÂI#œ,ÂÉ#œ"Â)#œ*©#œ&Âi#œ.Âé#œ!Â#œ)™#œ%ÂY#œ-ÂÙ#œ#Â9#œ+¹#œ'Ây#œ/Âù#\ Â#\(Â…#\$ÂE#\,ÂÅ#\"Â%#\*Â¥#$Âe"\6Âå"\>Â"\1•"\9ÂU"\5ÂÕ"\=Â5"\3µ"\;Âu"\7Âõ"\?Â"Ü0Â�"Ü8ÂM"Ü4ÂÍ"Ü<Â-"Ü2­"Ü'
[  877.161814][    C1] vkms_vblank_simulate: vblank timer overrun
[  877.650668][T30764] loop3: detected capacity change from 0 to 4096
[  877.674388][T30764] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  877.761549][T30764] ntfs3: loop3: ntfs_evict_inode r=6 failed, -22.
[  877.776443][T30764] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  877.875960][T30764] ntfs3: loop3: ino=1e, "file1" attr_set_size
[  878.228698][T30792] device netdevsim0 entered promiscuous mode
[  878.881645][T30833] loop4: detected capacity change from 0 to 128
[  878.938495][T30833] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  878.972157][T30833] hpfs: filesystem error: improperly stopped
[  879.047823][T30833] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  879.055819][T30833] hpfs: You really don't want any checks? You are crazy...
[  879.102887][T30833] hpfs: Code page index out of array
[  879.113033][T30833] hpfs: code page support is disabled
[  879.118559][T30833] hpfs: hpfs_map_4sectors(): unaligned read
[  879.150685][T30833] hpfs: hpfs_map_4sectors(): unaligned read
[  879.171959][T30845] device team0 left promiscuous mode
[  879.177482][T30833] hpfs: filesystem error: unable to find root dir
[  879.203193][T30845] device team_slave_0 left promiscuous mode
[  879.217911][T30833] hpfs: hpfs_map_4sectors(): unaligned read
[  879.222412][T30847] loop3: detected capacity change from 0 to 2048
[  879.239964][T30845] device team_slave_1 left promiscuous mode
[  879.253729][T30845] infiniband syz2: set active
[  879.280414][T30847] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  879.285839][T30844] loop2: detected capacity change from 0 to 4096
[  879.297311][T30845] infiniband syz2: set active
[  879.305611][T30845] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.352449][T30844] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  879.383547][T30845] device geneve1 left promiscuous mode
[  879.400417][T30847] UDF-fs: unknown compression code (0)
[  879.455144][T30845] device netdevsim0 left promiscuous mode
[  879.500528][T30845] device ipip0 left promiscuous mode
[  879.552009][ T6459] vxcan1 speed is unknown, defaulting to 1000
[  879.571277][ T4352] vxcan1 speed is unknown, defaulting to 1000
[  879.727879][T30859] ieee802154 phy1 wpan1: encryption failed: -22
[  879.968672][T30871] loop2: detected capacity change from 0 to 16
[  880.004410][T30871] erofs: (device loop2): erofs_read_superblock: dirblkbits 1 isn't supported
[  880.237181][T30882] sctp: [Deprecated]: syz.2.12123 (pid 30882) Use of struct sctp_assoc_value in delayed_ack socket option.
[  880.237181][T30882] Use struct sctp_sack_info instead
[  880.439000][T30892] netlink: 'syz.2.12127': attribute type 32 has an invalid length.
[  880.478893][T30894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12130'.
[  880.806451][T30911] loop3: detected capacity change from 0 to 1024
[  880.822028][T30911] EXT4-fs: Ignoring removed bh option
[  880.931820][T30911] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  881.111276][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  881.248824][T30935] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  881.655022][T30950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12155'.
[  881.755427][T30954] loop4: detected capacity change from 0 to 1024
[  881.787393][T30954] EXT4-fs: Ignoring removed bh option
[  881.834164][T30954] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  882.037996][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  882.466728][ T6459] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  882.659158][ T6459] usb 4-1: Using ep0 maxpacket: 32
[  882.666096][ T6459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7
[  882.688197][ T6459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024
[  882.723520][ T6459] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  882.732599][ T6459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.751431][ T6459] usb 4-1: Product: syz
[  882.758720][ T6459] usb 4-1: Manufacturer: syz
[  882.763795][ T6459] usb 4-1: SerialNumber: syz
[  882.785012][ T6459] usb 4-1: config 0 descriptor??
[  882.827351][T30997] loop2: detected capacity change from 0 to 8192
[  883.017658][ T6459] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input58
[  883.086130][T31006] libceph: resolve '0' (ret=-3): failed
[  883.111703][   T27] audit: type=1326 audit(832.709:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.12183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  883.204559][   T27] audit: type=1326 audit(832.709:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.12183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  883.262183][ T6459] usb 4-1: USB disconnect, device number 10
[  883.329308][T31012] loop1: detected capacity change from 0 to 512
[  883.349258][   T27] audit: type=1326 audit(832.737:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.12183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  883.436659][T31012] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  883.459538][   T27] audit: type=1326 audit(832.737:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.12183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  883.546267][   T27] audit: type=1326 audit(832.737:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31007 comm="syz.4.12183" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  883.602161][T31012] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  883.747906][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  884.606733][T31072] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  884.641647][T31072] I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  884.651512][T31072] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  884.662051][T31072] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  884.672475][T31072] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  884.688045][T31072] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  884.704708][T31072] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  884.715595][T31072] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  884.735180][T31072] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  884.749321][T31072] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  884.767067][T31072] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  884.777028][T31072] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  884.786868][T31072] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  884.797879][T31072] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  884.815277][T31072] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  884.825823][T31072] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  884.843458][T31072] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  884.857412][T31072] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  884.867529][T31072] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  884.877951][T31042] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  884.884810][T31042] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  884.891426][T31042] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  884.897865][T31042] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  885.337722][T31102] loop3: detected capacity change from 0 to 256
[  885.886413][T31123] loop4: detected capacity change from 0 to 764
[  886.334899][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout
[  886.796103][T31167] infiniband syz1: set active
[  886.801244][T31167] infiniband syz1: set active
[  886.818889][T31167] device sit0 left promiscuous mode
[  886.825078][T31167] device syz_tun left promiscuous mode
[  886.888176][T31167] device xfrm0 left promiscuous mode
[  886.909581][T31170] loop4: detected capacity change from 0 to 2048
[  886.920167][T31167] device bond1 left promiscuous mode
[  886.930576][T31170] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  886.945897][T31167] device geneve2 left promiscuous mode
[  886.956792][ T4352] lo speed is unknown, defaulting to 1000
[  886.962630][ T6459] lo speed is unknown, defaulting to 1000
[  886.964660][T31170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  887.044142][T31170] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field
[  887.114858][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout
[  887.120916][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout
[  887.127267][ T4284] Bluetooth: hci2: command 0x0406 tx timeout
[  887.196888][T31178] loop3: detected capacity change from 0 to 4096
[  887.262317][T31178] EXT4-fs: Ignoring removed bh option
[  887.382468][T31178] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  887.609506][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  888.318878][T31200] loop4: detected capacity change from 0 to 40427
[  888.347587][T31200] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  888.347611][T31200] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  888.350812][T31206] loop3: detected capacity change from 0 to 32768
[  888.358325][T31200] F2FS-fs (loop4): invalid crc value
[  888.380725][T31206] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  888.384147][T31206] JBD2: Ignoring recovery information on journal
[  888.403675][T31200] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  888.496560][T31206] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  888.547267][T31232] sctp: [Deprecated]: syz.1.12287 (pid 31232) Use of int in max_burst socket option.
[  888.547267][T31232] Use struct sctp_assoc_value instead
[  888.715125][T31200] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  888.739358][T31200] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  888.748416][T31206] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1
[  888.794545][T31206] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  888.804931][T31206] OCFS2: File system is now read-only.
[  888.810435][T31206] (syz.3.12276,31206,0):ocfs2_search_chain:1783 ERROR: status = -30
[  888.820145][T31206] (syz.3.12276,31206,0):ocfs2_search_chain:1893 ERROR: status = -30
[  888.828727][T31206] (syz.3.12276,31206,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  888.838599][T31206] (syz.3.12276,31206,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  888.847730][T31206] (syz.3.12276,31206,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  888.856303][T31206] (syz.3.12276,31206,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  888.865005][T31206] (syz.3.12276,31206,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  888.874435][T31206] (syz.3.12276,31206,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  888.883890][T31206] (syz.3.12276,31206,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  888.894144][T31206] (syz.3.12276,31206,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  888.906505][T31206] (syz.3.12276,31206,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  888.915906][T31206] (syz.3.12276,31206,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  888.938562][T31206] (syz.3.12276,31206,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30
[  888.953020][T31206] (syz.3.12276,31206,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30
[  888.962557][T31206] (syz.3.12276,31206,0):ocfs2_mknod:357 ERROR: status = -30
[  888.981610][T31206] (syz.3.12276,31206,0):ocfs2_mknod:502 ERROR: status = -30
[  889.006211][T31206] (syz.3.12276,31206,0):ocfs2_mkdir:659 ERROR: status = -30
[  889.201065][ T4285] ocfs2: Unmounting device (7,3) on (node local)
[  889.280915][T31248] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12296'.
[  889.334016][T31177] Bluetooth: hci2: command 0x0c1a tx timeout
[  889.904058][T31272] Timeout policy `syz1' can only be used by L3 protocol number 33024
[  890.117706][  T127] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  890.149338][T31286] loop3: detected capacity change from 0 to 1024
[  890.211580][T31286] hfsplus: catalog record size mismatch (type 4, got 20, expected 10)
[  890.335233][  T127] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  890.356068][  T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.384714][  T127] usb 5-1: Product: syz
[  890.399222][  T127] usb 5-1: Manufacturer: syz
[  890.404008][T31294] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12316'.
[  890.419177][  T127] usb 5-1: SerialNumber: syz
[  890.433202][  T127] usb 5-1: config 0 descriptor??
[  890.435961][T31298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12319'.
[  890.438443][T31294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12316'.
[  890.494207][  T127] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  890.582959][T31302] loop1: detected capacity change from 0 to 128
[  890.704617][T31302] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  890.778730][T31310] netlink: 'syz.2.12323': attribute type 2 has an invalid length.
[  890.889567][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  890.946117][ T4321] usb 5-1: USB disconnect, device number 5
[  891.538587][ T4321] usb 2-1: new full-speed USB device number 109 using dummy_hcd
[  891.743653][ T4321] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  891.751972][ T4321] usb 2-1: config 0 has no interface number 0
[  891.768299][ T4321] usb 2-1: config 0 interface 41 has no altsetting 0
[  891.781810][ T4321] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  891.813826][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.828733][ T4321] usb 2-1: Product: syz
[  891.837540][ T4321] usb 2-1: Manufacturer: syz
[  891.847089][ T4321] usb 2-1: SerialNumber: syz
[  891.858273][T31362] loop3: detected capacity change from 0 to 512
[  891.863164][ T4321] usb 2-1: config 0 descriptor??
[  891.957542][T31362] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  891.988812][T31362] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.12350: corrupted inode contents
[  892.088040][T31362] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #16: comm syz.3.12350: mark_inode_dirty error
[  892.153973][T31362] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.12350: corrupted inode contents
[  892.184636][T31362] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.12350: mark_inode_dirty error
[  892.223133][T31362] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.12350: corrupted inode contents
[  892.255241][T31362] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  892.288522][T31362] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.12350: corrupted inode contents
[  892.308849][T31362] EXT4-fs error (device loop3): ext4_truncate:4325: inode #16: comm syz.3.12350: mark_inode_dirty error
[  892.321007][ T4321] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  892.331580][T31362] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  892.346049][T31362] EXT4-fs (loop3): 1 truncate cleaned up
[  892.361454][T31362] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  892.369365][ T4321] CoreChips: probe of 2-1:0.41 failed with error -71
[  892.388581][ T4321] usb 2-1: USB disconnect, device number 109
[  892.428293][   T47] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  892.449629][   T47] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1
[  892.463277][T31380] loop4: detected capacity change from 0 to 8
[  892.490986][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  892.535929][T31380] SQUASHFS error: Unable to read inode 0x0
[  892.995227][T31400] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12368'.
[  892.998747][T31396] loop4: detected capacity change from 0 to 2048
[  893.064361][T31396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  893.241050][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  893.366975][T31417] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12376'.
[  893.367154][T31414] loop3: detected capacity change from 0 to 4096
[  893.457071][T31414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  893.506917][T31423] netlink: 88 bytes leftover after parsing attributes in process `syz.4.12378'.
[  893.554080][T31414] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 16: comm syz.3.12373: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=1, rec_len=32769, size=4096 fake=1
[  893.625618][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  893.760825][T31433] tmpfs: Bad value for 'mpol'
[  893.793322][  T127] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  894.008583][  T127] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  894.031897][  T127] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  894.066493][  T127] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  894.095766][  T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.110199][  T127] usb 3-1: Product: syz
[  894.119261][  T127] usb 3-1: Manufacturer: syz
[  894.123984][  T127] usb 3-1: SerialNumber: syz
[  894.371541][  T127] usb 3-1: 0:2 : does not exist
[  894.376767][  T127] usb 3-1: unit 9 not found!
[  894.401453][  T127] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4)
[  894.414439][  T127] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4)
[  894.433015][  T127] usb 3-1: 4:0: cannot get min/max values for control 3 (id 4)
[  894.442478][T31459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  894.446774][  T127] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4)
[  894.470623][  T127] usb 3-1: 4:0: cannot get min/max values for control 6 (id 4)
[  894.488927][  T127] usb 3-1: 4:0: cannot get min/max values for control 7 (id 4)
[  894.508970][  T127] usb 3-1: 4:0: cannot get min/max values for control 8 (id 4)
[  894.519904][T10793] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  894.546855][  T127] usb 3-1: USB disconnect, device number 9
[  894.745854][T10793] usb 4-1: config 1 has an invalid interface number: 188 but max is 0
[  894.754179][T10793] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  894.779559][T31457] loop4: detected capacity change from 0 to 40427
[  894.789716][T10793] usb 4-1: config 1 has no interface number 0
[  894.796903][T10793] usb 4-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  894.816110][T10793] usb 4-1: config 1 interface 188 has no altsetting 0
[  894.821141][ T4684] udevd[4684]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  894.826451][T10793] usb 4-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b
[  894.853684][T31457] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  894.883005][T31457] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  894.900054][T10793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.915248][T31457] F2FS-fs (loop4): invalid crc value
[  894.923952][T10793] usb 4-1: Product: syz
[  894.929473][T10793] usb 4-1: Manufacturer: syz
[  894.936882][T10793] usb 4-1: SerialNumber: syz
[  894.953106][T31457] F2FS-fs (loop4): Found nat_bits in checkpoint
[  894.988335][T10793] usb 4-1: cannot find UAC_HEADER
[  895.056825][T10793] snd-usb-audio: probe of 4-1:1.188 failed with error -22
[  895.095028][ T4684] udevd[4684]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  895.154457][T31457] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  895.204570][T31457] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  895.289231][  T127] usb 4-1: USB disconnect, device number 11
[  896.023789][T31508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12419'.
[  896.329002][T31525] loop4: detected capacity change from 0 to 256
[  896.512633][   T27] audit: type=1326 audit(845.250:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31530 comm="syz.0.12432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4359e019 code=0x7ffc0000
[  896.623200][   T27] audit: type=1326 audit(845.278:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31530 comm="syz.0.12432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4359e019 code=0x7ffc0000
[  896.700646][   T27] audit: type=1326 audit(845.278:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31530 comm="syz.0.12432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4359e019 code=0x7ffc0000
[  896.822517][   T27] audit: type=1326 audit(845.278:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31530 comm="syz.0.12432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f4a4359e019 code=0x7ffc0000
[  896.847189][T31543] netlink: 193 bytes leftover after parsing attributes in process `syz.1.12437'.
[  896.891971][   T27] audit: type=1326 audit(845.278:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31530 comm="syz.0.12432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4359e019 code=0x7ffc0000
[  896.973918][   T27] audit: type=1326 audit(845.278:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31530 comm="syz.0.12432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4359e019 code=0x7ffc0000
[  897.086551][   T27] audit: type=1326 audit(845.297:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31530 comm="syz.0.12432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4a4359e019 code=0x7ffc0000
[  897.159190][   T27] audit: type=1326 audit(845.297:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31530 comm="syz.0.12432" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4a4359e019 code=0x7ffc0000
[  897.244367][T31555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12443'.
[  897.272161][T31555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12443'.
[  897.320653][T31561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12445'.
[  897.403971][T31519] loop3: detected capacity change from 0 to 32768
[  897.430781][T31519] /dev/loop3: Can't open blockdev
[  897.746898][  T127] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  897.762705][T31577] SET target dimension over the limit!
[  897.888204][T31583] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.12457'.
[  897.930831][T31583] netlink: zone id is out of range
[  897.936307][T31583] netlink: get zone limit has 8 unknown bytes
[  897.970983][  T127] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  898.012696][  T127] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  898.060305][  T127] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  898.101614][  T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.148994][T31566] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  898.278491][T31599] comedi comedi3: das16m1: I/O port conflict (0x500,8)
[  898.566605][T31613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12473'.
[  898.589359][  T127] usb 2-1: USB disconnect, device number 110
[  898.612143][T31613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12473'.
[  898.808448][T31623] loop4: detected capacity change from 0 to 64
[  899.423788][T31651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12490'.
[  899.451400][T31651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12490'.
[  899.814432][T31672] loop2: detected capacity change from 0 to 164
[  899.872271][T31672] Unsupported NM flag settings (240)
[  900.364048][T31695] netlink: 'syz.2.12513': attribute type 28 has an invalid length.
[  900.467432][T31701] netlink: 'syz.4.12516': attribute type 8 has an invalid length.
[  901.122031][T31733] bad cache= option: nonw
[  901.122031][T31733] 
[  901.138062][T31733] CIFS: VFS: bad cache= option: nonw
[  901.349782][T31744] SET target dimension over the limit!
[  901.490165][T31749] __nla_validate_parse: 1 callbacks suppressed
[  901.490182][T31749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12541'.
[  902.101611][T31765] xt_CT: No such helper "snmp"
[  902.740244][T31804] loop2: detected capacity change from 0 to 8
[  902.805697][T31804] SQUASHFS error: Unable to read inode 0xe3
[  903.069002][T31812] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2
[  903.097835][T31812] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€
[  903.501003][  T127] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  903.710931][  T127] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  903.710961][  T127] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  903.710980][  T127] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  903.710999][  T127] usb 5-1: config 1 has no interface number 0
[  903.711026][  T127] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  903.711045][  T127] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  903.711079][  T127] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  903.711100][  T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.734901][  T127] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  903.828155][T31856] loop1: detected capacity change from 0 to 1024
[  903.832827][T31856] EXT4-fs: Ignoring removed orlov option
[  903.832851][T31856] EXT4-fs: Ignoring removed mblk_io_submit option
[  903.835766][T31856] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  903.956845][  T127] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values
[  903.992451][  T127] snd_usb_pod 5-1:1.1: invalid control EP
[  904.019207][  T127] snd_usb_pod 5-1:1.1: cannot start listening: -22
[  904.040769][  T127] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  904.057493][  T127] snd_usb_pod: probe of 5-1:1.1 failed with error -22
[  904.174373][T10793] usb 5-1: USB disconnect, device number 6
[  904.180957][T31856] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  904.385301][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  904.432627][T31880] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  904.473954][T31883] netlink: 'syz.0.12603': attribute type 10 has an invalid length.
[  904.713764][T31896] netlink: 'syz.3.12610': attribute type 10 has an invalid length.
[  904.733893][T31896] device macvlan0 entered promiscuous mode
[  904.795422][T31896] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  905.400427][T31927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12626'.
[  905.430298][T31927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12626'.
[  905.451028][T31927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12626'.
[  905.477515][T31927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12626'.
[  905.516240][T31927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12626'.
[  905.533578][T31927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12626'.
[  905.564425][T31927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12626'.
[  905.600638][T31927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12626'.
[  905.628435][T31927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12626'.
[  905.838548][T31947] loop4: detected capacity change from 0 to 16
[  905.875991][T31947] erofs: (device loop4): mounted with root inode @ nid 36.
[  906.840118][T10793] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  907.064620][T10793] usb 2-1: Using ep0 maxpacket: 16
[  907.072482][T10793] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  907.107332][T10793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  907.143988][T10793] usb 2-1: config 0 has no interface number 0
[  907.184669][T10793] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  907.210536][T10793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.237715][T10793] usb 2-1: Product: syz
[  907.241923][T10793] usb 2-1: Manufacturer: syz
[  907.264409][T10793] usb 2-1: SerialNumber: syz
[  907.265821][T32017] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  907.282004][T10793] usb 2-1: config 0 descriptor??
[  907.294345][T10793] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[  907.330122][T10793] usb 2-1: No valid video chain found.
[  907.518927][T10793] usb 2-1: USB disconnect, device number 111
[  907.530798][T32030] kAFS: unable to lookup cell '.,'
[  907.669801][T32036] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  908.240198][T10793] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  908.240270][T32060] netlink: 'syz.1.12692': attribute type 5 has an invalid length.
[  908.285506][  T127] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  908.350459][ T4321] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  908.444648][T32066] netlink: 'syz.0.12694': attribute type 21 has an invalid length.
[  908.464424][T10793] usb 5-1: Using ep0 maxpacket: 8
[  908.484416][T10793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  908.496609][  T127] usb 3-1: Using ep0 maxpacket: 16
[  908.505519][T10793] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12
[  908.509124][  T127] usb 3-1: config 254 has an invalid interface number: 235 but max is 0
[  908.524758][T10793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.537394][  T127] usb 3-1: config 254 has no interface number 0
[  908.545354][T10793] usb 5-1: config 0 descriptor??
[  908.551416][  T127] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  908.563834][  T127] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  908.575679][ T4321] usb 4-1: Using ep0 maxpacket: 16
[  908.576568][T10793] usb 5-1: Found UVC 148.00 device <unnamed> (05a9:2630)
[  908.580900][  T127] usb 3-1: config 254 interface 235 has no altsetting 0
[  908.596583][ T4321] usb 4-1: config 0 has no interfaces?
[  908.606401][  T127] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  908.615798][  T127] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3
[  908.624160][T10793] usb 5-1: No valid video chain found.
[  908.625677][ T4321] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  908.678065][  T127] usb 3-1: Product: syz
[  908.682281][  T127] usb 3-1: Manufacturer: syz
[  908.686885][  T127] usb 3-1: SerialNumber: syz
[  908.692530][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.701425][ T4321] usb 4-1: Product: syz
[  908.705610][ T4321] usb 4-1: Manufacturer: syz
[  908.711198][ T4321] usb 4-1: SerialNumber: syz
[  908.724131][T32054] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  908.753310][ T4321] r8152-cfgselector 4-1: config 0 descriptor??
[  908.826797][T10793] usb 5-1: USB disconnect, device number 7
[  908.853051][T32077] Unknown options in mask b7f2
[  908.955232][T32054] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  908.965663][  T127] usbtest 3-1:254.235: Linux gadget zero
[  908.971868][  T127] usbtest 3-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt)
[  908.987000][ T4321] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  909.009353][   T57] usb 4-1: config 0 descriptor??
[  909.194352][ T4321] usb 3-1: USB disconnect, device number 10
[  909.235184][  T127] usb 4-1: USB disconnect, device number 12
[  909.236938][   T57] usb 4-1: can't set config #0, error -71
[  909.317702][T32081] loop1: detected capacity change from 0 to 32768
[  909.344046][T32081] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.12701 (32081)
[  909.376062][T32081] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  909.415468][T32081] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  909.426284][T32081] BTRFS info (device loop1): setting nodatasum
[  909.432485][T32081] BTRFS info (device loop1): enabling auto defrag
[  909.479453][T32081] BTRFS info (device loop1): disabling tree log
[  909.485773][T32081] BTRFS info (device loop1): using free space tree
[  909.501164][T32090] __nla_validate_parse: 161 callbacks suppressed
[  909.501179][T32090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12706'.
[  909.518318][T32090] netlink: 'syz.0.12706': attribute type 1 has an invalid length.
[  909.687566][T32113] netlink: 288 bytes leftover after parsing attributes in process `syz.0.12710'.
[  909.697236][T32081] BTRFS info (device loop1): enabling ssd optimizations
[  909.889111][ T4272] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  909.945593][T32124] device wlan0 entered promiscuous mode
[  909.976453][T32124] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  910.187711][ T4684] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (4684)
[  910.608261][T32150] netlink: 'syz.2.12726': attribute type 4 has an invalid length.
[  910.638070][T32150] netlink: 204 bytes leftover after parsing attributes in process `syz.2.12726'.
[  910.794246][T32156] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12729'.
[  911.083808][T32166] netlink: 'syz.2.12734': attribute type 1 has an invalid length.
[  911.231192][T32174] loop2: detected capacity change from 0 to 256
[  911.828174][T32194] loop2: detected capacity change from 0 to 4096
[  911.851991][T32194] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  911.868001][T32204] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  911.967315][T32194] ntfs3: loop2: failed to convert "c46c" to cp1250
[  913.053348][   T27] audit: type=1326 audit(860.729:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32253 comm="syz.1.12780" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b339e019 code=0x7ffc0000
[  913.143850][   T27] audit: type=1326 audit(860.729:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32253 comm="syz.1.12780" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b339e019 code=0x7ffc0000
[  913.251951][   T27] audit: type=1326 audit(860.757:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32253 comm="syz.1.12780" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f36b339e019 code=0x7ffc0000
[  913.350234][   T27] audit: type=1326 audit(860.757:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32253 comm="syz.1.12780" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b339e019 code=0x7ffc0000
[  913.447191][   T27] audit: type=1326 audit(860.757:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32253 comm="syz.1.12780" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b339e019 code=0x7ffc0000
[  913.484576][T32274] loop3: detected capacity change from 0 to 24
[  913.515175][T32274] /dev/loop3: Can't open blockdev
[  914.414114][T32308] loop2: detected capacity change from 0 to 512
[  914.444666][T32308] EXT4-fs: Ignoring removed bh option
[  914.475527][T32308] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  914.530750][T32308] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  914.584736][T32308] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  914.651244][T32308] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  914.722689][T32308] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  914.736998][T32308] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8842c118, mo2=0080]
[  914.749696][T32308] EXT4-fs (loop2): orphan cleanup on readonly fs
[  914.760891][T32308] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.12803: bg 0: block 34: padding at end of block bitmap is not set
[  914.784922][T32327] sctp: [Deprecated]: syz.4.12813 (pid 32327) Use of int in maxseg socket option.
[  914.784922][T32327] Use struct sctp_assoc_value instead
[  914.808427][T32308] Quota error (device loop2): write_blk: dquota write failed
[  914.822149][T32308] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  914.833120][T32308] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.12803: Failed to acquire dquot type 1
[  914.905006][T32308] EXT4-fs (loop2): 1 truncate cleaned up
[  914.968449][T32308] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  915.196824][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  915.231297][T32343] x_tables: duplicate entry at hook 3
[  915.335413][T32348] loop3: detected capacity change from 0 to 256
[  915.358108][T32348] /dev/loop3: Can't open blockdev
[  915.583754][T32362] xt_TCPMSS: Only works on TCP SYN packets
[  915.867275][T32373] loop3: detected capacity change from 0 to 2048
[  915.937775][T32375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12838'.
[  916.318126][T10471] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  916.531798][T10471] usb 5-1: Using ep0 maxpacket: 8
[  916.538513][T10471] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  916.591971][T10471] usb 5-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5
[  916.609644][T32410] loop1: detected capacity change from 0 to 8
[  916.625695][T10471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  916.676103][T10471] usb 5-1: config 0 descriptor??
[  916.690490][   T27] audit: type=1326 audit(864.135:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32411 comm="syz.0.12856" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4359e019 code=0x7ffc0000
[  916.766224][   T27] audit: type=1326 audit(864.145:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32411 comm="syz.0.12856" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f4a4359e019 code=0x7ffc0000
[  916.793020][   T27] audit: type=1326 audit(864.145:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32411 comm="syz.0.12856" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4359e019 code=0x7ffc0000
[  916.899940][T10471] usb 5-1: USB disconnect, device number 8
[  917.440467][T32444] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12874'.
[  917.665729][T32456] loop4: detected capacity change from 0 to 128
[  917.727829][T32456] EXT4-fs (loop4): Test dummy encryption mode enabled
[  917.804113][T32456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  917.959911][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  918.168893][T32480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12889'.
[  918.302032][T32489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12893'.
[  918.423961][T32494] loop3: detected capacity change from 0 to 256
[  918.655806][T32504] device batadv1 entered promiscuous mode
[  918.673566][T32508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12902'.
[  918.867909][ T4684] udevd[4684]: inotify_add_watch(7, /dev/nbd1p5, 10) failed: No such file or directory
[  919.651335][T32551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12922'.
[  919.813872][ T4288] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  920.091840][T32575] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12934'.
[  920.093695][T32574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12935'.
[  920.167181][T32577] usb usb8: usbfs: process 32577 (syz.1.12936) did not claim interface 0 before use
[  920.207385][T32579] 9p: Unknown access argument 18446744073709551615: -34
[  920.278485][T32583] loop3: detected capacity change from 0 to 256
[  920.279842][T32581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12938'.
[  920.437160][T32589] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12941'.
[  920.452509][T32588] loop4: detected capacity change from 0 to 512
[  921.394888][T32630] ieee802154 phy1 wpan1: encryption failed: -22
[  921.481979][T32634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12964'.
[  921.863645][T32653] loop3: detected capacity change from 0 to 256
[  921.917667][T32653] exfat: Deprecated parameter 'utf8'
[  921.923149][T32653] exfat: Deprecated parameter 'namecase'
[  921.949298][T32653] exfat: Deprecated parameter 'utf8'
[  921.954834][T32653] /dev/loop3: Can't open blockdev
[  922.194743][T32669] loop2: detected capacity change from 0 to 512
[  922.253504][T32669] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.12981: bad orphan inode 15
[  922.274004][T32669] ext4_test_bit(bit=14, block=18) = 1
[  922.278194][T32676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12983'.
[  922.284353][T32669] is_bad_inode(inode)=0
[  922.296896][T32669] NEXT_ORPHAN(inode)=1023
[  922.302142][T32669] max_ino=32
[  922.305366][T32669] i_nlink=0
[  922.323586][T32669] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2918: inode #15: comm syz.2.12981: corrupted xattr block 19
[  922.383274][T32669] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117)
[  922.468569][T32669] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  922.513539][T32680] loop4: detected capacity change from 0 to 4096
[  922.546618][T32680] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  922.814942][ T6459] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  922.840516][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  922.994120][T32698] ipt_CLUSTERIP: bad num_local_nodes 32
[  923.045141][ T6459] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 242
[  923.079760][ T6459] usb 3-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config
[  923.105207][ T6459] usb 3-1: config 0 has no interfaces?
[  923.119671][ T6459] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  923.144271][ T6459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.170899][ T6459] usb 3-1: config 0 descriptor??
[  923.400665][ T6459] usb 3-1: USB disconnect, device number 11
[  924.004866][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  924.276615][T32757] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13024'.
[  924.442867][T32765] loop2: detected capacity change from 0 to 736
[  924.753014][  T309] device batadv2 entered promiscuous mode
[  924.790305][  T311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13034'.
[  925.041156][  T323] netlink: 'syz.2.13040': attribute type 1 has an invalid length.
[  925.206096][  T329] netlink: 'syz.4.13043': attribute type 1 has an invalid length.
[  925.374133][  T341] program syz.3.13049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  925.827346][  T363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13059'.
[  925.870267][  T363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13059'.
[  926.913947][  T416] netlink: 'syz.2.13086': attribute type 3 has an invalid length.
[  927.007663][T10471] usb 2-1: new full-speed USB device number 112 using dummy_hcd
[  927.236085][T10471] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3
[  927.255984][T10471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.277553][T10471] usb 2-1: Product: syz
[  927.281858][T10471] usb 2-1: Manufacturer: syz
[  927.286471][T10471] usb 2-1: SerialNumber: syz
[  927.318818][T10471] usb 2-1: config 0 descriptor??
[  927.369314][T10471] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now attached
[  927.584549][T10471] usb 2-1: USB disconnect, device number 112
[  927.590911][T10471] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now disconnected
[  927.857399][  T446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13100'.
[  928.037818][  T454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13104'.
[  928.058268][  T454] netlink: 108 bytes leftover after parsing attributes in process `syz.0.13104'.
[  928.086834][  T454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13104'.
[  928.122773][  T454] netlink: 108 bytes leftover after parsing attributes in process `syz.0.13104'.
[  928.143221][  T454] netlink: 84 bytes leftover after parsing attributes in process `syz.0.13104'.
[  930.060055][  T544] netlink: 'syz.2.13148': attribute type 1 has an invalid length.
[  930.184689][  T551] netlink: zone id is out of range
[  930.357497][ T4288] Bluetooth: hci4: unexpected cc 0x0c05 length: 4 > 1
[  930.357531][ T4288] Bluetooth: hci4: unexpected event for opcode 0x0c05
[  930.636595][T10471] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  930.659576][  T542] loop1: detected capacity change from 0 to 32768
[  930.680644][  T542] JBD2: Ignoring recovery information on journal
[  930.776397][  T542] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  930.829110][T10471] usb 3-1: Using ep0 maxpacket: 32
[  930.833156][T10471] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  930.833183][T10471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.833203][T10471] usb 3-1: Product: syz
[  930.833217][T10471] usb 3-1: Manufacturer: syz
[  930.833231][T10471] usb 3-1: SerialNumber: syz
[  930.834965][T10471] usb 3-1: config 0 descriptor??
[  931.016238][ T4272] ocfs2: Unmounting device (7,1) on (node local)
[  931.269806][T10471] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a
[  931.269902][T10471] airspy 3-1:0.0: Could not detect board
[  931.269958][T10471] airspy: probe of 3-1:0.0 failed with error -71
[  931.283898][T10471] usb 3-1: USB disconnect, device number 12
[  931.886694][  T610] netlink: 'syz.0.13179': attribute type 32 has an invalid length.
[  931.974351][  T613] loop2: detected capacity change from 0 to 256
[  932.625932][ T6459] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  932.745318][  T650] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  932.777617][  T650] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  932.839385][ T6459] usb 4-1: config 4 has an invalid interface number: 128 but max is 0
[  932.869202][ T6459] usb 4-1: config 4 has no interface number 0
[  932.886860][ T6459] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  932.919811][ T6459] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  932.958547][ T6459] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  932.992279][ T6459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.022746][ T6459] hub 4-1:4.128: USB hub found
[  933.122092][  T662] --map-set only usable from mangle table
[  933.259904][ T6459] hub 4-1:4.128: 2 ports detected
[  933.265603][ T6459] hub 4-1:4.128: Using single TT (err -22)
[  933.479735][ T6459] hub 4-1:4.128: hub_hub_status failed (err = -71)
[  933.486414][ T6459] hub 4-1:4.128: config failed, can't get hub status (err -71)
[  933.531062][  T676] loop4: detected capacity change from 0 to 8
[  933.554543][ T6459] usb 4-1: USB disconnect, device number 13
[  933.566645][  T675] loop1: detected capacity change from 0 to 256
[  933.622034][  T676] SQUASHFS error: zlib decompression failed, data probably corrupt
[  933.635413][  T676] SQUASHFS error: Failed to read block 0x9b: -5
[  933.643513][  T676] SQUASHFS error: Unable to read metadata cache entry [99]
[  933.668283][  T675] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  933.689435][  T676] SQUASHFS error: Unable to read inode 0x127
[  933.700265][  T675] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  933.721724][  T675] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  933.762294][   T27] kauditd_printk_skb: 7 callbacks suppressed
[  933.762309][   T27] audit: type=1800 audit(880.110:466): pid=675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13212" name="file1" dev="loop1" ino=1048659 res=0 errno=0
[  933.762440][  T675] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001)
[  933.993547][  T686] loop2: detected capacity change from 0 to 64
[  934.109559][  T693] ax25_connect(): syz.4.13219 uses autobind, please contact jreuter@yaina.de
[  934.109993][  T691] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  934.230138][  T697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13221'.
[  934.427448][  T708] netlink: 'syz.0.13227': attribute type 7 has an invalid length.
[  934.462057][  T708] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13227'.
[  934.874045][  T730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13238'.
[  934.904563][  T731] ipt_CLUSTERIP: Please specify destination IP
[  935.431929][  T754] loop3: detected capacity change from 0 to 4096
[  935.705355][  T770] overlayfs: failed to resolve './file0': -2
[  935.868707][  T776] loop1: detected capacity change from 0 to 1024
[  935.883458][  T774] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  935.941939][  T774] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  936.005477][  T774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  936.294360][  T789] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.13265'.
[  936.299826][  T788] netlink: 124 bytes leftover after parsing attributes in process `syz.2.13266'.
[  936.780920][  T810] loop1: detected capacity change from 0 to 4096
[  936.894897][  T818] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  937.372661][  T842] device gre2 entered promiscuous mode
[  937.378515][  T842] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready
[  937.464592][T10471] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  937.672735][T10471] usb 2-1: Using ep0 maxpacket: 32
[  937.680577][T10471] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  937.708272][  T858] program syz.0.13298 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  937.720999][T10471] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  937.751312][T10471] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  937.772933][T10471] usb 2-1: config 1 has no interface number 0
[  937.793244][T10471] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  937.824367][T10471] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  937.866224][T10471] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  937.891915][T10471] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.930998][T10471] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  938.143603][T10471] snd_usb_pod 2-1:1.1: invalid control EP
[  938.150096][T10471] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  938.156793][T10471] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  938.191480][T10471] snd_usb_pod: probe of 2-1:1.1 failed with error -22
[  938.202383][  T878] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13309'.
[  938.288109][  T884] netlink: 'syz.2.13311': attribute type 10 has an invalid length.
[  938.337524][  T884] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  938.377430][T10471] usb 2-1: USB disconnect, device number 113
[  938.379602][  T884] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  938.414440][  T892] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  938.422330][  T884] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  938.450555][  T884] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  939.260587][  T943] xt_CONNSECMARK: invalid mode: 0
[  939.524951][  T956] netlink: 'syz.4.13340': attribute type 10 has an invalid length.
[  939.554030][  T956] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13340'.
[  939.584953][  T956] bridge0: port 5(dummy0) entered blocking state
[  939.605227][  T956] bridge0: port 5(dummy0) entered disabled state
[  939.617306][  T956] device dummy0 entered promiscuous mode
[  939.627620][  T956] bridge0: port 5(dummy0) entered blocking state
[  939.634134][  T956] bridge0: port 5(dummy0) entered forwarding state
[  939.650738][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  939.879357][    T7] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  939.993863][  T953] loop1: detected capacity change from 0 to 32768
[  940.060268][  T953] JBD2: Ignoring recovery information on journal
[  940.094730][    T7] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[  940.102981][    T7] usb 3-1: config 0 has no interface number 0
[  940.128951][  T953] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  940.188805][    T7] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  940.232069][  T953] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[  940.246180][    T7] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  940.287376][  T953] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  940.299091][    T7] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  940.317510][  T953] OCFS2: File system is now read-only.
[  940.333929][  T953] (syz.1.13339,953,1):ocfs2_search_chain:1783 ERROR: status = -30
[  940.360251][  T953] (syz.1.13339,953,1):ocfs2_search_chain:1893 ERROR: status = -30
[  940.371462][    T7] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  940.397171][  T953] (syz.1.13339,953,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  940.416828][  T953] (syz.1.13339,953,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  940.432763][    T7] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  940.442281][  T953] (syz.1.13339,953,1):ocfs2_claim_metadata:2040 ERROR: status = -30
[  940.454104][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.455912][  T985] binder: 984:985 ioctl 400c620e 200000000240 returned -22
[  940.470061][    T7] usb 3-1: Product: syz
[  940.474335][    T7] usb 3-1: Manufacturer: syz
[  940.479735][  T953] (syz.1.13339,953,0):ocfs2_claim_metadata:2053 ERROR: status = -30
[  940.502391][    T7] usb 3-1: SerialNumber: syz
[  940.507871][  T953] (syz.1.13339,953,0):ocfs2_dx_dir_attach_index:2329 ERROR: status = -30
[  940.523270][    T7] usb 3-1: config 0 descriptor??
[  940.528443][  T953] (syz.1.13339,953,0):ocfs2_expand_inline_dir:3022 ERROR: status = -30
[  940.546920][    T7] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  940.567438][    T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input60
[  940.616995][  T953] (syz.1.13339,953,0):ocfs2_extend_dir:3204 ERROR: status = -30
[  940.624686][  T953] (syz.1.13339,953,0):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -30
[  940.652876][  T953] (syz.1.13339,953,0):ocfs2_mknod:298 ERROR: status = -30
[  940.667124][  T953] (syz.1.13339,953,0):ocfs2_mknod:502 ERROR: status = -30
[  940.674928][  T953] (syz.1.13339,953,0):ocfs2_mkdir:659 ERROR: status = -30
[  940.783335][  T953] syz.1.13339 (953) used greatest stack depth: 18688 bytes left
[  940.829204][ T4272] (syz-executor,4272,1):ocfs2_read_blocks:239 ERROR: status = -12
[  940.854603][ T4272] (syz-executor,4272,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -12
[  940.865117][ T4272] (syz-executor,4272,0):_ocfs2_free_clusters:2605 ERROR: status = -12
[  940.876292][ T1001] loop4: detected capacity change from 0 to 16
[  940.912437][ T6459] usb 3-1: USB disconnect, device number 13
[  940.923752][ T6459] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  940.930209][ T4272] (syz-executor,4272,0):ocfs2_sync_local_to_main:1001 ERROR: status = -12
[  940.947883][ T1001] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[  940.969382][ T1001] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[  940.980035][ T4272] (syz-executor,4272,0):ocfs2_sync_local_to_main:1013 ERROR: status = -12
[  940.980063][ T4272] (syz-executor,4272,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -12
[  941.031663][ T1001] erofs: (device loop4): mounted with root inode @ nid 36.
[  941.074965][ T4272] ocfs2: Unmounting device (7,1) on (node local)
[  941.128079][ T1001] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  941.171821][ T1001] syz.4.13360: attempt to access beyond end of device
[  941.171821][ T1001] loop4: rw=0, sector=4294967295, nr_sectors = 2 limit=16
[  941.337939][ T1016] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13364'.
[  941.372785][ T1019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13365'.
[  941.460550][ T1028] netlink: 'syz.1.13367': attribute type 3 has an invalid length.
[  941.996437][ T1055] nft_compat: unsupported protocol 5
[  942.171321][ T1063] openvswitch: netlink: Missing key (keys=40, expected=80)
[  942.474009][ T1068] loop4: detected capacity change from 0 to 8192
[  942.517290][ T1068] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  942.532289][ T1068] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  942.542029][ T1068] REISERFS (device loop4): using ordered data mode
[  942.548667][ T1068] reiserfs: using flush barriers
[  942.561443][ T1068] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  942.580298][ T1068] REISERFS (device loop4): checking transaction log (loop4)
[  942.595300][ T1068] REISERFS (device loop4): Using r5 hash to sort names
[  942.602491][ T1068] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  943.079229][ T1092] loop2: detected capacity change from 0 to 4096
[  943.183909][ T1092] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  943.223707][ T1092] ntfs3: loop2: Failed to load $Extend.
[  943.812674][ T6459] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  944.027061][ T6459] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  944.068674][ T6459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.090037][ T6459] usb 3-1: config 0 descriptor??
[  944.110408][ T6459] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  944.126231][ T1136] netlink: 'syz.1.13419': attribute type 1 has an invalid length.
[  944.530530][ T6459] gp8psk: usb in 128 operation failed.
[  944.539681][ T6459] gp8psk: usb in 137 operation failed.
[  944.548751][ T6459] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  944.570610][ T6459] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  944.599939][ T6459] usb 3-1: USB disconnect, device number 14
[  944.648110][ T1159] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  944.730810][T10793] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  944.944455][T10793] usb 5-1: Using ep0 maxpacket: 32
[  944.953599][T10793] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  944.987236][T10793] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30
[  944.999420][T10793] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69
[  944.999452][T10793] usb 5-1: config 0 interface 0 has no altsetting 1
[  945.000772][T10793] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  945.000799][T10793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  945.000819][T10793] usb 5-1: SerialNumber: syz
[  945.008199][T10793] usb 5-1: config 0 descriptor??
[  945.068014][T10793] usb-storage 5-1:0.0: USB Mass Storage device detected
[  945.069537][T10793] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  945.358603][  T127] usb 5-1: USB disconnect, device number 9
[  945.568362][ T1199] netlink: 1033 bytes leftover after parsing attributes in process `syz.2.13450'.
[  945.700530][ T1206] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13452'.
[  945.708456][ T1204] xt_TCPMSS: Only works on TCP SYN packets
[  946.417197][ T1232] 9pnet: Found fid 0 not clunked
[  946.868119][ T1261] loop2: detected capacity change from 0 to 512
[  946.950474][ T1266] netlink: 'syz.0.13479': attribute type 10 has an invalid length.
[  947.003279][ T1261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  947.032542][ T1266] team0: Device vxcan1 is of different type
[  947.185245][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  947.361008][ T1286] netlink: 'syz.2.13485': attribute type 10 has an invalid length.
[  947.368958][ T1286] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13485'.
[  947.430429][ T1293] netlink: 'syz.4.13488': attribute type 1 has an invalid length.
[  947.540992][ T1298] comedi comedi0: comedi_config --init_data is deprecated
[  947.686096][ T1295] can: request_module (can-proto-3) failed.
[  947.822204][ T1309] netlink: 'syz.3.13495': attribute type 10 has an invalid length.
[  947.839222][ T1309] team0: Device vxcan1 is of different type
[  948.011580][ T1313] 8021q: adding VLAN 0 to HW filter on device bond6
[  948.373268][ T1335] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  948.390575][ T1335] overlayfs: missing 'lowerdir'
[  948.631379][ T1343] loop3: detected capacity change from 0 to 512
[  948.656524][ T1343] /dev/loop3: Can't open blockdev
[  948.951466][   T27] audit: type=1326 audit(894.317:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1354 comm="syz.1.13517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b339e019 code=0x7ffc0000
[  949.015392][   T27] audit: type=1326 audit(894.317:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1354 comm="syz.1.13517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b339e019 code=0x7ffc0000
[  949.109219][   T27] audit: type=1326 audit(894.354:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1354 comm="syz.1.13517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f36b339e019 code=0x7ffc0000
[  949.175681][   T27] audit: type=1326 audit(894.354:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1354 comm="syz.1.13517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b339e019 code=0x7ffc0000
[  949.243795][   T27] audit: type=1326 audit(894.354:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1354 comm="syz.1.13517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b339e019 code=0x7ffc0000
[  949.334623][   T27] audit: type=1400 audit(894.597:472): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=1362 comm="syz.0.13521"
[  949.340311][T10793] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  949.537662][ T1369] binder: 1368:1369 ioctl c00c620f 0 returned -14
[  949.581756][T10793] usb 3-1: Using ep0 maxpacket: 16
[  949.588814][T10793] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  949.613832][T10793] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  949.644479][T10793] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  949.674138][T10793] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  949.705958][T10793] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  949.740802][T10793] usb 3-1: config 1 interface 0 has no altsetting 0
[  949.745089][ T1353] loop3: detected capacity change from 0 to 32768
[  949.761926][T10793] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  949.787215][ T1353] /dev/loop3: Can't open blockdev
[  949.796111][T10793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.829853][T10793] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  949.940302][ T1383] netlink: 88 bytes leftover after parsing attributes in process `syz.3.13530'.
[  950.057225][T10793] scsi host1: usb-storage 3-1:1.0
[  950.276460][ T1389] syz.3.13532 (1389) used greatest stack depth: 16736 bytes left
[  950.357825][ T6459] usb 3-1: USB disconnect, device number 15
[  950.496207][ T1399] loop3: detected capacity change from 0 to 164
[  950.561484][ T1399] Unable to read rock-ridge attributes
[  950.570828][ T1399] Unable to read rock-ridge attributes
[  950.611229][ T1401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13538'.
[  950.614151][ T1399] iso9660: Corrupted directory entry in block 1 of inode 1792
[  950.827504][ T1409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13542'.
[  951.022423][ T1415] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13544'.
[  951.064943][ T1419] netlink: 'syz.4.13546': attribute type 1 has an invalid length.
[  951.236372][ T1424] netlink: 'syz.2.13549': attribute type 12 has an invalid length.
[  951.623381][   T27] audit: type=1326 audit(896.834:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1441 comm="syz.4.13559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  951.736861][   T27] audit: type=1326 audit(896.872:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1441 comm="syz.4.13559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  951.855231][   T27] audit: type=1326 audit(896.872:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1441 comm="syz.4.13559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  951.942925][   T27] audit: type=1326 audit(896.872:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1441 comm="syz.4.13559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  952.265824][ T1476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13575'.
[  953.090515][ T1516] netlink: zone id is out of range
[  953.120210][ T1515] loop4: detected capacity change from 0 to 2048
[  953.217469][ T1521] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  953.247215][ T1515] syz.4.13595: attempt to access beyond end of device
[  953.247215][ T1515] loop4: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048
[  953.308458][ T1515] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1)
[  953.336640][ T1525] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13599'.
[  953.478953][ T1527] vxcan1 speed is unknown, defaulting to 1000
[  953.766394][ T1527] lo speed is unknown, defaulting to 1000
[  953.830276][ T1546] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  953.952104][  T127] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[  954.000449][ T1527] wg1 speed is unknown, defaulting to 1000
[  954.069814][T10471] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  954.178156][  T127] usb 2-1: unable to get BOS descriptor or descriptor too short
[  954.193449][  T127] usb 2-1: not running at top speed; connect to a high speed hub
[  954.220188][  T127] usb 2-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 6821, setting to 64
[  954.239189][  T127] usb 2-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  954.260976][  T127] usb 2-1: config 1 interface 0 has no altsetting 0
[  954.294329][  T127] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  954.305228][T10471] usb 4-1: config 8 has an invalid interface number: 223 but max is 0
[  954.313431][T10471] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  954.336691][  T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.355648][T10471] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  954.365841][  T127] usb 2-1: Product: syz
[  954.373189][  T127] usb 2-1: Manufacturer: syz
[  954.377810][  T127] usb 2-1: SerialNumber: syz
[  954.386757][T10471] usb 4-1: config 8 has no interface number 0
[  954.401577][T10471] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  954.423509][ T1538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  954.440928][T10471] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  954.479145][T10471] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  954.510821][T10471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.529057][T10471] usb 4-1: Product: syz
[  954.539932][T10471] usb 4-1: Manufacturer: syz
[  954.550655][T10471] usb 4-1: SerialNumber: syz
[  954.675342][  T127] usbhid 2-1:1.0: can't add hid device: -71
[  954.689739][  T127] usbhid: probe of 2-1:1.0 failed with error -71
[  954.702374][  T127] usb 2-1: USB disconnect, device number 114
[  954.790692][T10471] usb 4-1: USB disconnect, device number 14
[  955.490828][ T1600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13635'.
[  955.499820][ T1600] openvswitch: netlink: Flow key attr not present in new flow.
[  955.923541][T10471] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  956.051501][ T1598] loop2: detected capacity change from 0 to 32768
[  956.141935][ T1598] JBD2: Ignoring recovery information on journal
[  956.152626][T10471] usb 5-1: Using ep0 maxpacket: 16
[  956.194584][T10471] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  956.251822][T10471] usb 5-1: config 0 has no interface number 0
[  956.308344][T10471] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  956.379562][ T1598] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  956.400211][T10471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.429864][T10471] usb 5-1: Product: syz
[  956.440687][T10471] usb 5-1: Manufacturer: syz
[  956.466873][T10471] usb 5-1: SerialNumber: syz
[  956.473412][ T1598] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[  956.503909][T10471] usb 5-1: config 0 descriptor??
[  956.529296][ T1598] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  956.550419][ T1598] OCFS2: File system is now read-only.
[  956.561925][ T1598] (syz.2.13636,1598,0):ocfs2_search_chain:1783 ERROR: status = -30
[  956.583260][ T1598] (syz.2.13636,1598,0):ocfs2_search_chain:1893 ERROR: status = -30
[  956.605757][ T1598] (syz.2.13636,1598,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  956.652581][   T27] audit: type=1107 audit(901.532:477): pid=1648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  956.655648][ T1598] (syz.2.13636,1598,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  956.719860][ T1598] (syz.2.13636,1598,1):ocfs2_claim_metadata:2040 ERROR: status = -30
[  956.735424][ T1598] (syz.2.13636,1598,1):ocfs2_claim_metadata:2053 ERROR: status = -30
[  956.745445][T10471] usb 5-1: selecting invalid altsetting 1
[  956.759886][T10471] speedtch 5-1:0.1: speedtch_bind: setting interface to  1 failed (-22)!
[  956.773175][ T1598] (syz.2.13636,1598,0):ocfs2_dx_dir_attach_index:2329 ERROR: status = -30
[  956.798608][T10471] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22!
[  956.812872][ T1598] (syz.2.13636,1598,0):ocfs2_expand_inline_dir:3022 ERROR: status = -30
[  956.837230][T10471] speedtch: probe of 5-1:0.1 failed with error -22
[  956.860725][T10471] usb 5-1: USB disconnect, device number 10
[  956.867215][ T1598] (syz.2.13636,1598,0):ocfs2_extend_dir:3204 ERROR: status = -30
[  956.886869][ T1598] (syz.2.13636,1598,0):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -30
[  956.898304][ T1598] (syz.2.13636,1598,0):ocfs2_mknod:298 ERROR: status = -30
[  956.920009][ T1598] (syz.2.13636,1598,0):ocfs2_mknod:502 ERROR: status = -30
[  956.932738][ T1598] (syz.2.13636,1598,0):ocfs2_mkdir:659 ERROR: status = -30
[  957.160380][ T4275] (syz-executor,4275,0):ocfs2_read_blocks:239 ERROR: status = -12
[  957.208266][ T4275] (syz-executor,4275,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -12
[  957.231208][ T4275] (syz-executor,4275,1):_ocfs2_free_clusters:2605 ERROR: status = -12
[  957.242000][ T4275] (syz-executor,4275,1):ocfs2_sync_local_to_main:1001 ERROR: status = -12
[  957.272562][ T4275] (syz-executor,4275,1):ocfs2_sync_local_to_main:1013 ERROR: status = -12
[  957.288985][ T1674] netlink: 'syz.3.13672': attribute type 3 has an invalid length.
[  957.315283][ T4275] (syz-executor,4275,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -12
[  957.347294][ T4275] ocfs2: Unmounting device (7,2) on (node local)
[  958.042764][ T1706] xt_hashlimit: overflow, rate too high: 0
[  958.093549][ T1705] vxcan1 speed is unknown, defaulting to 1000
[  958.170230][ T1712] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  958.476938][ T1705] lo speed is unknown, defaulting to 1000
[  958.696556][ T6459] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  958.799956][ T1705] wg1 speed is unknown, defaulting to 1000
[  958.911742][ T6459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  958.943598][ T6459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  958.971324][ T6459] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  958.999406][ T6459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.024183][ T6459] usb 5-1: Product: syz
[  959.040038][ T6459] usb 5-1: Manufacturer: syz
[  959.055222][ T6459] usb 5-1: SerialNumber: syz
[  959.075620][ T6459] usb 5-1: config 0 descriptor??
[  959.102058][ T1722] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  959.142186][ T6459] mcba_usb 5-1:0.0 can0: couldn't setup read URBs
[  959.175427][ T6459] mcba_usb 5-1:0.0 can0: couldn't start device: -90
[  959.263025][ T6459] mcba_usb: probe of 5-1:0.0 failed with error -90
[  959.424673][ T6459] usb 5-1: USB disconnect, device number 11
[  960.096292][ T1786] loop3: detected capacity change from 0 to 16
[  960.103387][ T1786] /dev/loop3: Can't open blockdev
[  960.317630][ T1794] loop4: detected capacity change from 0 to 256
[  960.595963][ T1806] loop1: detected capacity change from 0 to 256
[  961.020619][ T1823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13743'.
[  961.339825][   T27] audit: type=1400 audit(905.921:478): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=1838 comm="syz.4.13752"
[  961.625439][ T1851] xt_limit: Overflow, try lower: 65536/2147483648
[  961.728941][ T1857] kcapi: manufacturer command 1 unknown.
[  961.882759][ T1865] device ip6tnl0 entered promiscuous mode
[  962.103619][ T1878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13770'.
[  962.178187][ T1878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13770'.
[  962.403221][ T1891] xt_bpf: check failed: parse error
[  962.427083][ T1894] device team0 entered promiscuous mode
[  962.447367][ T1894] device team_slave_0 entered promiscuous mode
[  962.457959][ T1894] device team_slave_1 entered promiscuous mode
[  962.664235][ T1907] loop1: detected capacity change from 0 to 128
[  962.698569][ T1907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  962.854741][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  963.164105][ T1929] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  963.592601][ T1949] overlayfs: unrecognized mount option "\" or missing value
[  964.488078][ T6459] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  964.496368][ T1997] CIFS mount error: No usable UNC path provided in device string!
[  964.496368][ T1997] 
[  964.549361][ T1999] netlink: 'syz.4.13829': attribute type 1 has an invalid length.
[  964.557492][ T1997] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  964.608124][ T2003] tmpfs: Bad value for 'nr_blocks'
[  964.746115][ T6459] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  964.770721][ T6459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.808764][ T6459] usb 4-1: Product: syz
[  964.818350][ T6459] usb 4-1: Manufacturer: syz
[  964.823144][ T6459] usb 4-1: SerialNumber: syz
[  964.865403][ T6459] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  964.995747][ T6459] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  965.462390][T10793] usb 4-1: USB disconnect, device number 15
[  965.639736][ T2050] loop2: detected capacity change from 0 to 8
[  965.651083][ T2051] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õë�ï1:ºÃÃÓ­'Ä4,�Zz-#FÇ<æõ]%gCžÊ
[  965.651083][ T2051] SÃȘØÈžZ§6ŸÂ'
[  965.758825][ T2050] SQUASHFS error: Failed to read block 0x71: -5
[  965.797047][   T27] audit: type=1800 audit(910.095:479): pid=2050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13855" name="file0" dev="loop2" ino=1 res=0 errno=0
[  966.090706][ T4288] Bluetooth: hci2: command 0x0409 tx timeout
[  966.116544][ T2070] loop4: detected capacity change from 0 to 256
[  966.130042][ T2071] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«=
[  966.137998][ T2071] [U] J"—e:ÀÆ"


[  966.176354][ T6459] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  966.183433][ T6459] ath9k_htc: Failed to initialize the device
[  966.197635][ T2073] netlink: 'syz.1.13866': attribute type 10 has an invalid length.
[  966.206253][T10793] usb 4-1: ath9k_htc: USB layer deinitialized
[  966.251244][ T2073] wlan1: mtu less than device minimum
[  966.479636][ T2081] loop3: detected capacity change from 0 to 4096
[  966.805659][ T2098] netlink: 'syz.1.13879': attribute type 8 has an invalid length.
[  966.844409][ T2098] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.13879'.
[  967.063508][ T2108] infiniband syz1: set active
[  967.068356][ T2108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  967.089651][T10793] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  967.101908][ T4352] lo speed is unknown, defaulting to 1000
[  967.289688][T10793] usb 4-1: Using ep0 maxpacket: 16
[  967.309419][T10793] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  967.318502][T10793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.333577][T10793] usb 4-1: Product: syz
[  967.351577][T10793] usb 4-1: Manufacturer: syz
[  967.356209][T10793] usb 4-1: SerialNumber: syz
[  967.365532][ T2119] netlink: 'syz.1.13889': attribute type 4 has an invalid length.
[  967.376958][T10793] usb 4-1: config 0 descriptor??
[  967.393878][T10793] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  967.414551][ T2119] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.13889'.
[  967.817010][T10793] usb 4-1: clie_3_5_startup: get interface number failed: -71
[  967.853357][T10793] visor: probe of 4-1:0.0 failed with error -71
[  967.894533][T10793] usb 4-1: USB disconnect, device number 16
[  968.234603][ T2159] loop4: detected capacity change from 0 to 8
[  968.251645][ T2159] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  968.287852][ T4684] udevd[4684]: incorrect cramfs checksum on /dev/loop4
[  968.568734][ T2174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13915'.
[  968.782173][ T2182] Timeout policy `syz1' can only be used by L3 protocol number 246
[  968.961033][ T2189] netlink: 388 bytes leftover after parsing attributes in process `syz.1.13924'.
[  969.272663][ T2205] loop2: detected capacity change from 0 to 1764
[  969.472570][ T2213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13936'.
[  969.503231][ T2213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13936'.
[  969.518610][ T2213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13936'.
[  969.540115][ T2213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13936'.
[  969.549545][ T2213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13936'.
[  969.576837][ T2213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13936'.
[  969.991789][ T2237] netlink: 'syz.1.13948': attribute type 5 has an invalid length.
[  970.112947][ T2239] loop4: detected capacity change from 0 to 1024
[  970.182122][ T2239] hfsplus: invalid length 32517 has been corrected to 255
[  970.336330][ T1267] hfsplus: b-tree write err: -5, ino 20
[  970.348802][ T2221] loop3: detected capacity change from 0 to 32768
[  970.412290][ T4684] blk_print_req_error: 2 callbacks suppressed
[  970.412306][ T4684] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  970.762747][   T27] audit: type=1326 audit(914.737:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2260 comm="syz.2.13960" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  970.865194][   T27] audit: type=1326 audit(914.737:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2260 comm="syz.2.13960" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  970.950686][   T27] audit: type=1326 audit(914.765:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2260 comm="syz.2.13960" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  971.006570][ T2269] autofs4:pid:2269:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e)
[  971.036669][   T27] audit: type=1326 audit(914.765:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2260 comm="syz.2.13960" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  971.132295][   T27] audit: type=1326 audit(914.765:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2260 comm="syz.2.13960" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6cd9e019 code=0x7ffc0000
[  971.292536][ T2253] loop4: detected capacity change from 0 to 32768
[  971.347266][ T2281] program syz.1.13970 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  971.367149][ T2253] jfs_strtoUCS: char2uni returned -22.
[  971.377619][ T2253] charset = cp949, char = 0xd4
[  972.078078][ T2314] UBIFS error (pid: 2314): cannot open "ubi:0", error -19
[  972.098589][ T2316] loop2: detected capacity change from 0 to 128
[  972.219568][ T2322] SET target dimension over the limit!
[  972.299066][T10471] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  972.371090][   T27] audit: type=1326 audit(916.244:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2323 comm="syz.4.13991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  972.426318][   T27] audit: type=1326 audit(916.272:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2323 comm="syz.4.13991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  972.490992][   T27] audit: type=1326 audit(916.272:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2323 comm="syz.4.13991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  972.556112][   T27] audit: type=1326 audit(916.272:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2323 comm="syz.4.13991" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c939e019 code=0x7ffc0000
[  972.558904][T10471] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  972.622370][ T2336] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  972.683630][T10471] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  972.692216][T10471] usb 4-1: config 0 has no interface number 0
[  972.717453][T10471] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  972.758465][T10471] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  972.768432][T10471] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  972.788930][ T2343] __nla_validate_parse: 13 callbacks suppressed
[  972.788948][ T2343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14000'.
[  972.790106][T10471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.832591][T10471] usb 4-1: config 0 descriptor??
[  972.842409][ T2346] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  973.035923][ T2354] netlink: 248 bytes leftover after parsing attributes in process `syz.2.14007'.
[  973.308596][T10471] usb 4-1: USB disconnect, device number 17
[  973.579780][ T2386] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  974.411199][ T2435] xt_hashlimit: max too large, truncated to 1048576
[  974.822295][ T2465] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14049'.
[  975.014670][ T2469] autofs4:pid:2469:autofs_fill_super: called with bogus options
[  975.277875][ T2491] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14061'.
[  975.399664][ T2495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14063'.
[  975.439230][ T2495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14063'.
[  975.524463][ T2501] loop3: detected capacity change from 0 to 1024
[  975.634378][ T4684] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  975.809567][ T2518] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14073'.
[  975.821460][ T2518] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14073'.
[  976.266237][ T2544] VFS: could not find a valid V7 on nullb0.
[  976.343466][ T2546] loop1: detected capacity change from 0 to 256
[  976.392306][ T2548] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14085'.
[  976.415714][ T2546] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  976.643661][ T2522] loop4: detected capacity change from 0 to 32768
[  976.680967][ T2522] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.14072 (2522)
[  976.742964][ T2522] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  976.765011][ T2522] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  976.788206][ T2522] BTRFS info (device loop4): using free space tree
[  976.861792][T10793] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  977.029045][ T2522] BTRFS info (device loop4): enabling ssd optimizations
[  977.066722][T10793] usb 4-1: unable to get BOS descriptor or descriptor too short
[  977.090226][T10793] usb 4-1: not running at top speed; connect to a high speed hub
[  977.099214][T10793] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  977.118014][T10793] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  977.129456][T10793] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  977.147475][T10793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.155843][ T4273] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  977.158546][T10793] usb 4-1: Product: syz
[  977.170900][T10793] usb 4-1: Manufacturer: syz
[  977.175793][T10793] usb 4-1: SerialNumber: syz
[  977.189188][ T6459] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  977.387456][ T6459] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  977.395638][ T6459] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  977.428972][T10793] usb 4-1: unit 3 not found!
[  977.441670][T10793] usb 4-1: 5:0: failed to get current value for ch 0 (-71)
[  977.459692][ T6459] usb 3-1: config 0 interface 0 has no altsetting 0
[  977.475321][ T2577] loop1: detected capacity change from 0 to 32768
[  977.492838][ T6459] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  977.533826][ T6459] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  977.557567][T10793] usb 4-1: USB disconnect, device number 18
[  977.575064][ T6459] usb 3-1: Product: syz
[  977.585376][ T6459] usb 3-1: Manufacturer: syz
[  977.590116][ T6459] usb 3-1: SerialNumber: syz
[  977.603855][ T6459] usb 3-1: config 0 descriptor??
[  977.610628][ T6459] hub 3-1:0.0: bad descriptor, ignoring hub
[  977.622561][ T6459] hub: probe of 3-1:0.0 failed with error -5
[  977.635237][ T6459] usb 3-1: selecting invalid altsetting 0
[  977.963097][ T2615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14098'.
[  978.272402][   T14] usb 3-1: USB disconnect, device number 16
[  978.459017][ T2632] ipt_CLUSTERIP: no config found for 172.20.20.34, need 'new'
[  978.541713][ T2639] netlink: 'syz.3.14112': attribute type 2 has an invalid length.
[  978.680934][ T2645] dns_resolver: Unsupported content type (254)
[  978.796547][ T2651] loop1: detected capacity change from 0 to 128
[  978.865019][ T2651] FAT-fs (loop1): Directory bread(block 32) failed
[  978.913460][ T2651] FAT-fs (loop1): Directory bread(block 33) failed
[  978.920142][ T2651] FAT-fs (loop1): Directory bread(block 34) failed
[  979.009485][ T2651] FAT-fs (loop1): Directory bread(block 35) failed
[  979.018871][ T2651] FAT-fs (loop1): Directory bread(block 36) failed
[  979.048517][ T2651] FAT-fs (loop1): Directory bread(block 37) failed
[  979.055570][ T2651] FAT-fs (loop1): Directory bread(block 38) failed
[  979.068267][ T2651] FAT-fs (loop1): Directory bread(block 39) failed
[  979.083522][ T2651] FAT-fs (loop1): Directory bread(block 40) failed
[  979.090407][ T2651] FAT-fs (loop1): Directory bread(block 41) failed
[  979.198877][ T2675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14126'.
[  979.316058][ T2651] FAT-fs (loop1): Filesystem has been set read-only
[  979.605102][ T2694] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  979.654090][ T2696] program syz.1.14133 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  980.511965][ T2699] loop2: detected capacity change from 0 to 32768
[  980.560470][ T2699] 
[  980.560470][ T2699]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  980.560470][ T2699] 
[  980.708664][ T1267] 
[  980.708664][ T1267]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  980.708664][ T1267] 
[  980.729787][   T14] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  980.753878][ T1267] 
[  980.753878][ T1267]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  980.753878][ T1267] 
[  980.775206][ T4275] 
[  980.775206][ T4275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  980.775206][ T4275] 
[  980.791282][ T4275] 
[  980.791282][ T4275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  980.791282][ T4275] 
[  980.825599][  T109] 
[  980.825599][  T109]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  980.825599][  T109] 
[  980.865530][  T109] ==================================================================
[  980.873632][  T109] BUG: KASAN: use-after-free in txEnd+0x329/0x520
[  980.880067][  T109] Write of size 8 at addr ffff88807c394040 by task jfsCommit/109
[  980.887791][  T109] 
[  980.890121][  T109] CPU: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0
[  980.897332][  T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  980.907394][  T109] Call Trace:
[  980.910685][  T109]  <TASK>
[  980.913621][  T109]  dump_stack_lvl+0x188/0x24e
[  980.918323][  T109]  ? read_lock_is_recursive+0x10/0x10
[  980.923722][  T109]  ? show_regs_print_info+0x12/0x12
[  980.929027][  T109]  ? load_image+0x410/0x410
[  980.933547][  T109]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  980.939020][  T109]  ? __virt_addr_valid+0x188/0x540
[  980.944166][  T109]  ? __virt_addr_valid+0x467/0x540
[  980.949292][  T109]  ? txEnd+0x329/0x520
[  980.953376][  T109]  print_report+0xa8/0x210
[  980.957804][  T109]  kasan_report+0x10b/0x140
[  980.962326][  T109]  ? mutex_unlock+0x10/0x10
[  980.964996][ T2726] loop1: detected capacity change from 0 to 32768
[  980.966830][  T109]  ? txEnd+0x329/0x520
[  980.966857][  T109]  kasan_check_range+0x235/0x290
[  980.982280][  T109]  txEnd+0x329/0x520
[  980.986197][  T109]  jfs_lazycommit+0x5bf/0xa90
[  980.990889][  T109]  ? txFreelock+0x5a0/0x5a0
[  980.995408][  T109]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  981.001323][  T109]  ? do_task_dead+0xd0/0xd0
[  981.005939][  T109]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  981.011845][  T109]  ? __kthread_parkme+0x71/0x1c0
[  981.016882][  T109]  ? __kthread_parkme+0x15b/0x1c0
[  981.021924][  T109]  kthread+0x29d/0x330
[  981.026002][  T109]  ? txFreelock+0x5a0/0x5a0
[  981.030520][  T109]  ? kthread_blkcg+0xd0/0xd0
[  981.035122][  T109]  ret_from_fork+0x1f/0x30
[  981.039576][  T109]  </TASK>
[  981.042602][  T109] 
[  981.044932][  T109] Allocated by task 2699:
[  981.049329][  T109]  kasan_set_track+0x4b/0x70
[  981.053934][  T109]  __kasan_kmalloc+0x8e/0xa0
[  981.058537][  T109]  lmLogOpen+0x2c0/0xf90
[  981.062791][  T109]  jfs_mount_rw+0xfb/0x5a0
[  981.067221][  T109]  jfs_fill_super+0x57d/0xab0
[  981.071940][  T109]  mount_bdev+0x28a/0x3c0
[  981.076279][  T109]  legacy_get_tree+0xe6/0x180
[  981.081041][  T109]  vfs_get_tree+0x88/0x270
[  981.085468][  T109]  do_new_mount+0x247/0xa40
[  981.089981][  T109]  __se_sys_mount+0x2e3/0x3d0
[  981.094664][  T109]  do_syscall_64+0x4c/0xa0
[  981.099093][  T109]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  981.104997][  T109] 
[  981.107319][  T109] Freed by task 4275:
[  981.111303][  T109]  kasan_set_track+0x4b/0x70
[  981.115903][  T109]  kasan_save_free_info+0x27/0x40
[  981.120994][  T109]  ____kasan_slab_free+0x126/0x1f0
[  981.126131][  T109]  slab_free_freelist_hook+0x133/0x1b0
[  981.131598][  T109]  __kmem_cache_free+0xb6/0x200
[  981.136454][  T109]  lmLogClose+0x292/0x530
[  981.140802][  T109]  jfs_umount+0x288/0x360
[  981.145138][  T109]  jfs_put_super+0x88/0x190
[  981.149653][  T109]  generic_shutdown_super+0x130/0x340
[  981.155032][  T109]  kill_block_super+0x7c/0xe0
[  981.159716][  T109]  deactivate_locked_super+0x93/0xf0
[  981.165010][  T109]  cleanup_mnt+0x471/0x4f0
[  981.169507][  T109]  task_work_run+0x1d0/0x260
[  981.174106][  T109]  exit_to_user_mode_loop+0xe6/0x110
[  981.179483][  T109]  exit_to_user_mode_prepare+0xee/0x180
[  981.185044][  T109]  syscall_exit_to_user_mode+0x16/0x40
[  981.190508][  T109]  do_syscall_64+0x58/0xa0
[  981.194939][  T109]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  981.200841][  T109] 
[  981.203163][  T109] Last potentially related work creation:
[  981.208877][  T109]  kasan_save_stack+0x3a/0x60
[  981.213566][  T109]  __kasan_record_aux_stack+0xb2/0xc0
[  981.218944][  T109]  call_rcu+0x14f/0x950
[  981.223172][  T109]  process_one_work+0x8ab/0x1160
[  981.228121][  T109]  worker_thread+0xaf5/0x12a0
[  981.232804][  T109]  kthread+0x29d/0x330
[  981.236875][  T109]  ret_from_fork+0x1f/0x30
[  981.241308][  T109] 
[  981.243634][  T109] The buggy address belongs to the object at ffff88807c394000
[  981.243634][  T109]  which belongs to the cache kmalloc-1k of size 1024
[  981.257695][  T109] The buggy address is located 64 bytes inside of
[  981.257695][  T109]  1024-byte region [ffff88807c394000, ffff88807c394400)
[  981.270976][  T109] 
[  981.273302][  T109] The buggy address belongs to the physical page:
[  981.279798][  T109] page:ffffea0001f0e400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c390
[  981.289960][  T109] head:ffffea0001f0e400 order:3 compound_mapcount:0 compound_pincount:0
[  981.298293][  T109] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  981.306289][  T109] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0
[  981.314882][  T109] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  981.323471][  T109] page dumped because: kasan: bad access detected
[  981.329884][  T109] page_owner tracks the page as allocated
[  981.335597][  T109] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 3599, tgid 3599 (kworker/0:3), ts 64400508259, free_ts 64380238294
[  981.356184][  T109]  post_alloc_hook+0x173/0x1a0
[  981.361036][  T109]  get_page_from_freelist+0x206b/0x2180
[  981.366594][  T109]  __alloc_pages+0x1ec/0x4f0
[  981.371195][  T109]  alloc_slab_page+0x5d/0x180
[  981.375883][  T109]  new_slab+0x87/0x2d0
[  981.379965][  T109]  ___slab_alloc+0xbc5/0x1240
[  981.384650][  T109]  __kmem_cache_alloc_node+0x126/0x270
[  981.390118][  T109]  __kmalloc+0xa3/0x240
[  981.394293][  T109]  ___neigh_create+0x6f4/0x2450
[  981.399220][  T109]  ip6_finish_output2+0x150e/0x15c0
[  981.404431][  T109]  ndisc_send_skb+0xc04/0x1520
[  981.409259][  T109]  ndisc_send_ns+0xd4/0x160
[  981.413767][  T109]  addrconf_dad_work+0xa07/0x1500
[  981.418802][  T109]  process_one_work+0x8ab/0x1160
[  981.423746][  T109]  worker_thread+0xaf5/0x12a0
[  981.428436][  T109]  kthread+0x29d/0x330
[  981.432517][  T109] page last free stack trace:
[  981.437190][  T109]  free_unref_page_prepare+0x8e5/0x9e0
[  981.442666][  T109]  free_unref_page+0x2e/0x3f0
[  981.447356][  T109]  __unfreeze_partials+0x188/0x1e0
[  981.452477][  T109]  put_cpu_partial+0x17c/0x250
[  981.457248][  T109]  qlist_free_all+0x76/0xe0
[  981.461758][  T109]  kasan_quarantine_reduce+0x144/0x160
[  981.467224][  T109]  __kasan_slab_alloc+0x1e/0x80
[  981.472088][  T109]  slab_post_alloc_hook+0x4b/0x490
[  981.477216][  T109]  __kmem_cache_alloc_node+0x19d/0x270
[  981.482683][  T109]  kmalloc_trace+0x26/0xe0
[  981.487116][  T109]  wg_noise_handshake_begin_session+0xce/0xb90
[  981.493375][  T109]  wg_packet_send_handshake_response+0x134/0x2c0
[  981.499722][  T109]  wg_packet_handshake_receive_worker+0x6a3/0x1070
[  981.506403][  T109]  process_one_work+0x8ab/0x1160
[  981.511332][  T109]  worker_thread+0xaf5/0x12a0
[  981.515994][  T109]  kthread+0x29d/0x330
[  981.520055][  T109] 
[  981.522366][  T109] Memory state around the buggy address:
[  981.527993][  T109]  ffff88807c393f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  981.536037][  T109]  ffff88807c393f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  981.544082][  T109] >ffff88807c394000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  981.552132][  T109]                                            ^
[  981.558269][  T109]  ffff88807c394080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  981.566315][  T109]  ffff88807c394100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  981.574354][  T109] ==================================================================
[  981.638113][   T14] usb 4-1: Using ep0 maxpacket: 32
[  981.654659][   T14] usb 4-1: unable to get BOS descriptor or descriptor too short
[  981.670323][  T109] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  981.677547][  T109] CPU: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0
[  981.684749][  T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  981.694804][  T109] Call Trace:
[  981.698077][  T109]  <TASK>
[  981.700999][  T109]  dump_stack_lvl+0x188/0x24e
[  981.705681][  T109]  ? memcpy+0x3c/0x60
[  981.709659][  T109]  ? show_regs_print_info+0x12/0x12
[  981.714849][  T109]  ? load_image+0x410/0x410
[  981.719354][  T109]  panic+0x2d3/0x710
[  981.723240][  T109]  ? bpf_jit_dump+0xd0/0xd0
[  981.727753][  T109]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  981.733727][  T109]  ? _raw_spin_unlock+0x40/0x40
[  981.738580][  T109]  check_panic_on_warn+0x80/0xa0
[  981.743507][  T109]  ? txEnd+0x329/0x520
[  981.747568][  T109]  end_report+0x66/0x110
[  981.751800][  T109]  kasan_report+0x118/0x140
[  981.756400][  T109]  ? mutex_unlock+0x10/0x10
[  981.760901][  T109]  ? txEnd+0x329/0x520
[  981.764960][  T109]  kasan_check_range+0x235/0x290
[  981.769889][  T109]  txEnd+0x329/0x520
[  981.773774][  T109]  jfs_lazycommit+0x5bf/0xa90
[  981.778639][  T109]  ? txFreelock+0x5a0/0x5a0
[  981.783128][  T109]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  981.789012][  T109]  ? do_task_dead+0xd0/0xd0
[  981.793598][  T109]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  981.799481][  T109]  ? __kthread_parkme+0x71/0x1c0
[  981.804407][  T109]  ? __kthread_parkme+0x15b/0x1c0
[  981.809422][  T109]  kthread+0x29d/0x330
[  981.813479][  T109]  ? txFreelock+0x5a0/0x5a0
[  981.817971][  T109]  ? kthread_blkcg+0xd0/0xd0
[  981.822562][  T109]  ret_from_fork+0x1f/0x30
[  981.826984][  T109]  </TASK>
[  981.830233][  T109] Kernel Offset: disabled
[  981.834547][  T109] Rebooting in 86400 seconds..