last executing test programs:

1m57.912484295s ago: executing program 4 (id=11287):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x20, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0)

1m57.748065551s ago: executing program 4 (id=11291):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2})

1m57.486887189s ago: executing program 4 (id=11294):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f0000000b00)=[{0x10}, {0x10, 0x84, 0x8}], 0x20}, 0x0)

1m57.222286968s ago: executing program 4 (id=11299):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1m56.774256512s ago: executing program 4 (id=11304):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x20, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x7}]}}}]}, 0x40}}, 0x0)

1m56.212885701s ago: executing program 4 (id=11311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000019002400128009000100626f6e64000000001400028008000a000100000008000b0015b6"], 0x44}, 0x1, 0xba01}, 0x40010)

1m55.779572335s ago: executing program 32 (id=11311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000019002400128009000100626f6e64000000001400028008000a000100000008000b0015b6"], 0x44}, 0x1, 0xba01}, 0x40010)

3.97943509s ago: executing program 2 (id=12828):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)="9d27f085db33d8ad712a5790b74b8a6ec1f99302790554205d50dcfe1bdbafb40d04ba4f7c1a0dea4ff36e2b7bfe1dfe711b58465bd146939535ae99a263e264fdb3a4e2903762b9cc554395098b28d8da7c67da12da334cf7372c515bc06ab7220c008fd3ceab2a6012d47984a90a88b9", 0x71}], 0x1}, 0x40)

3.540807124s ago: executing program 5 (id=12835):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0xc03, &(0x7f0000008040)=ANY=[], 0x2, 0x5fbf, &(0x7f0000002080)="$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")
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

3.481260446s ago: executing program 2 (id=12836):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x50}}, 0x0)

3.124015097s ago: executing program 2 (id=12850):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x288, &(0x7f0000000200)="$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")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)

2.403176181s ago: executing program 2 (id=12848):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

2.048647673s ago: executing program 2 (id=12851):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0x2, 0x631b, &(0x7f0000001f80)="$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")
lchown(&(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0x0)

1.913170017s ago: executing program 0 (id=12852):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @private=0xa010101}, {0x1, @random="c4d6faaf980a"}, 0x3c, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 'xfrm0\x00'})

1.8245937s ago: executing program 1 (id=12853):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2000)
ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x80)

1.632234657s ago: executing program 5 (id=12854):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x490, 0x22b, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x1}, {0x4}, {0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x9}, {0x1}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {0x6, 0x0, 0x0, 0x1}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x874}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40, 0x1}, {}, {}, {0x0, 0x3, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x5}, {}, {0xfffd}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x92b}, {0x0, 0x8a}, {}, {}, {0x0, 0x0, 0xfc}]}}, @common=@unspec=@cluster={{0x30}, {0x5, 0xb, 0x5, 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xffff00], 'veth1_to_bridge\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x16}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)

1.631591597s ago: executing program 3 (id=12865):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r0, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0))

1.572736258s ago: executing program 0 (id=12855):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x2, &(0x7f00000004c0)=[{0x17, '\x00', @st={0x4, [{0x2, @uvalue=0x3}, {0x0, @svalue=0x5}, {0x0, @svalue=0xffffffff80000001}, {0x0, @uvalue=0x3}]}, 0x4}, {0x12, '\x00', @buffer={"556074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0xc}]})

1.562241689s ago: executing program 1 (id=12856):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0x108, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)

1.401322974s ago: executing program 3 (id=12857):
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
sync()

1.278506358s ago: executing program 0 (id=12858):
mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100)
mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='romfs\x00', 0x4800, 0x0)

1.22845304s ago: executing program 5 (id=12859):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x1, 0x153b, &(0x7f0000000a00)="$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")
mknod$loop(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xc000, 0x1)

1.127422103s ago: executing program 1 (id=12861):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040))

991.531038ms ago: executing program 3 (id=12862):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xfffffffffffffffb)

756.952245ms ago: executing program 1 (id=12863):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0xc06c4124, 0x40944f9c780000)

756.144305ms ago: executing program 0 (id=12874):
r0 = memfd_secret(0x0)
futimesat(r0, 0x0, 0x0)

694.964627ms ago: executing program 5 (id=12864):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x7c, 0xa}, 0x9c)

652.676149ms ago: executing program 3 (id=12866):
r0 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000001c0), &(0x7f0000000940)=0x4)

504.065924ms ago: executing program 1 (id=12867):
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
pwritev(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)='--', 0x2}], 0x1, 0x4, 0x0)

352.660319ms ago: executing program 5 (id=12868):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x18, 0x5f, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x41, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0)

351.869249ms ago: executing program 0 (id=12879):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000dc00128009000100766c616e00000000cc00028006000100000000001c0003800a00010000000000000000000c00010000000000000000000c00020000000000000000000c000200ffffffffff"], 0x10c}, 0x1, 0xba01}, 0x0)

324.14645ms ago: executing program 3 (id=12869):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4810)

195.298664ms ago: executing program 1 (id=12870):
unshare(0x24020400)
accept$unix(0xffffffffffffffff, 0x0, 0x0)

174.246304ms ago: executing program 2 (id=12871):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0)

154.86µs ago: executing program 0 (id=12872):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x490, 0x22b, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x1}, {0x4}, {0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x9}, {0x1}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {0x6, 0x0, 0x0, 0x1}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x874}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40, 0x1}, {}, {}, {0x0, 0x3, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x5}, {}, {0xfffd}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x92b}, {0x0, 0x8a}, {}, {}, {0x0, 0x0, 0xfc}]}}, @common=@unspec=@cluster={{0x30}, {0x5, 0xb, 0x5, 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xffff00], 'veth1_to_bridge\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x16}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)

45.32µs ago: executing program 3 (id=12873):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x141703)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x0, 0x80}, 0x0, 0x40003, 'id0\x00', 'timer0\x00', 0x0, 0xfffffffffffffffc, 0x0, 0x948b, 0x1})

0s ago: executing program 5 (id=12875):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$llc_int(r0, 0x6a, 0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

857.940125][T27960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10848'.
[  857.957425][T27955] loop4: detected capacity change from 0 to 4096
[  857.974223][T27955] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  858.108324][T27955] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  858.497820][T27978] loop3: detected capacity change from 0 to 512
[  858.654559][T27978] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  858.722333][T27987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10859'.
[  858.786034][T27989] nvme_fabrics: missing parameter 'transport=%s'
[  858.792852][T27989] nvme_fabrics: missing parameter 'nqn=%s'
[  858.817516][T27978] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.10858: bg 0: bad block bitmap checksum
[  859.072973][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  859.259286][T28001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10868'.
[  859.291697][T15695] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  859.301657][T28001] netlink: 332 bytes leftover after parsing attributes in process `syz.1.10868'.
[  859.489317][T27993] loop2: detected capacity change from 0 to 32768
[  859.501621][T15695] usb 5-1: Using ep0 maxpacket: 8
[  859.508660][T15695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  859.546643][T15695] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[  859.597298][T15695] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  859.643773][T15695] usb 5-1: config 0 interface 0 has no altsetting 0
[  859.668111][T15695] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  859.686565][T15695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.696225][T15695] usb 5-1: Product: syz
[  859.700592][T15695] usb 5-1: Manufacturer: syz
[  859.718493][T15695] usb 5-1: SerialNumber: syz
[  859.736750][T15695] usb 5-1: config 0 descriptor??
[  859.749614][T15695] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found
[  859.890305][T28014] loop1: detected capacity change from 0 to 256
[  859.932954][T28014] exfat: Deprecated parameter 'namecase'
[  859.958137][T15695] snd_usb_toneport 5-1:0.0: cannot get proper max packet size
[  859.976407][T15695] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected
[  859.995041][T28014] exfat: Deprecated parameter 'namecase'
[  860.007847][T15695] snd_usb_toneport: probe of 5-1:0.0 failed with error -22
[  860.067465][T28014] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  860.206500][T15695] usb 5-1: USB disconnect, device number 37
[  861.186066][T28055] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  861.560185][T28068] loop3: detected capacity change from 0 to 64
[  861.665008][ T8334] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  861.956750][T28083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10916'.
[  861.998733][T28083] netlink: 332 bytes leftover after parsing attributes in process `syz.3.10916'.
[  862.543396][T28094] nvme_fabrics: missing parameter 'transport=%s'
[  862.585561][T28094] nvme_fabrics: missing parameter 'nqn=%s'
[  862.682466][T28107] autofs4:pid:28107:autofs_fill_super: called with bogus options
[  862.765367][T28112] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  863.331137][T28134] QAT: failed to copy from user cfg_data.
[  863.515187][T28142] autofs4:pid:28142:autofs_fill_super: called with bogus options
[  863.835528][T28154] autofs4:pid:28154:autofs_fill_super: called with bogus options
[  864.734020][T28190] loop4: detected capacity change from 0 to 64
[  865.155611][T28203] loop1: detected capacity change from 0 to 2048
[  865.229310][T28203] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  865.376734][T28214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10971'.
[  865.444840][T28214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10971'.
[  865.507894][T28214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10971'.
[  865.545579][T28214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10971'.
[  866.195969][T28236] loop2: detected capacity change from 0 to 4096
[  866.268811][T28236] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  866.425310][   T27] audit: type=1800 audit(1780303713.641:442): pid=28236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10984" name="file1" dev="loop2" ino=33 res=0 errno=0
[  866.751961][T28263] netlink: 'syz.0.10997': attribute type 26 has an invalid length.
[  867.340974][T28285] loop4: detected capacity change from 0 to 2048
[  867.437113][T28285] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  868.045229][T28304] netlink: 'syz.4.11017': attribute type 9 has an invalid length.
[  868.274984][T28281] loop0: detected capacity change from 0 to 32768
[  868.346185][T28281] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  868.413060][T28281] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  868.436413][T28317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11023'.
[  868.447029][T28281] BTRFS info (device loop0): using free space tree
[  868.480190][T28318] loop2: detected capacity change from 0 to 2048
[  868.484518][T28317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11023'.
[  868.521987][T28318] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  868.577846][T28317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11023'.
[  868.631001][T28317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11023'.
[  868.783238][T28281] BTRFS info (device loop0): enabling ssd optimizations
[  868.913571][T28344] netlink: 'syz.4.11027': attribute type 26 has an invalid length.
[  868.922116][ T4283] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  869.601761][T28364] delete_channel: no stack
[  869.810254][T28374] loop2: detected capacity change from 0 to 512
[  869.842981][T28374] FAT-fs (loop2): Unrecognized mount option "shortnutf8=1" or missing value
[  870.043880][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  870.050239][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  870.171841][ T8394] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  870.395821][ T8394] usb 3-1: Using ep0 maxpacket: 8
[  870.403685][ T8394] usb 3-1: config 0 has an invalid interface number: 88 but max is 3
[  870.437950][ T8394] usb 3-1: config 0 has an invalid interface number: 250 but max is 3
[  870.458776][ T8394] usb 3-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config
[  870.499817][ T8394] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 4
[  870.519274][ T8394] usb 3-1: config 0 has no interface number 0
[  870.539571][ T8394] usb 3-1: config 0 has no interface number 1
[  870.559837][ T8394] usb 3-1: config 0 interface 88 has no altsetting 0
[  870.580043][ T8394] usb 3-1: config 0 interface 250 has no altsetting 0
[  870.626100][ T8394] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3
[  870.651659][ T8394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.700660][ T8394] usb 3-1: config 0 descriptor??
[  870.909681][ T8394] usb 3-1: string descriptor 0 read error: -71
[  870.954353][ T8394] usb 3-1: USB disconnect, device number 31
[  871.377222][T28400] loop4: detected capacity change from 0 to 32768
[  871.682674][T28400] XFS (loop4): Mounting V5 Filesystem
[  871.709685][T28442] delete_channel: no stack
[  871.814228][T28400] XFS (loop4): Ending clean mount
[  871.975814][ T4292] XFS (loop4): Unmounting Filesystem
[  872.356319][T28466] loop0: detected capacity change from 0 to 64
[  872.899000][T28481] delete_channel: no stack
[  873.741826][ T8394] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  873.943029][ T8394] usb 3-1: Using ep0 maxpacket: 32
[  873.955256][ T8394] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  873.995167][ T8394] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  874.027869][ T8394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.056122][ T8394] usb 3-1: Product: syz
[  874.071975][ T8394] usb 3-1: Manufacturer: syz
[  874.086890][ T8394] usb 3-1: SerialNumber: syz
[  874.104392][ T8394] usb 3-1: config 0 descriptor??
[  874.122683][ T8394] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  874.316138][T28538] loop3: detected capacity change from 0 to 256
[  874.327562][ T8394] usb 3-1: qt2_setup_urbs - submit read urb failed -8
[  874.343207][ T8394] quatech2: probe of 3-1:0.0 failed with error -8
[  874.410888][T28538] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  874.482677][T28538] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  874.528157][T28538] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  874.530744][ T5387] usb 3-1: USB disconnect, device number 32
[  874.571031][   T27] audit: type=1800 audit(1780303721.781:443): pid=28538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11117" name="file1" dev="loop3" ino=1048720 res=0 errno=0
[  874.933668][T28555] loop1: detected capacity change from 0 to 64
[  875.050307][T28559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11126'.
[  875.604774][T28569] loop4: detected capacity change from 0 to 4096
[  875.764239][T28569] ntfs3: loop4: ino=9, attr_set_size
[  875.929437][T28551] loop3: detected capacity change from 0 to 32768
[  875.984132][T28551] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.11122 (28551)
[  876.045452][T28551] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  876.097954][T28551] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  876.152659][T28551] BTRFS info (device loop3): using free space tree
[  876.202894][T28587] block device autoloading is deprecated and will be removed.
[  876.601822][T28620] loop0: detected capacity change from 0 to 512
[  876.611954][T28551] BTRFS info (device loop3): enabling ssd optimizations
[  876.638890][T28620] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  876.661643][T28620] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  876.691744][T28620] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  876.763940][T28620] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  876.808665][T28620] System zones: 0-2, 18-18, 34-35
[  876.847493][T28620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  876.938733][ T4287] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  876.994629][T28620] EXT4-fs (loop0): re-mounted. Quota mode: none.
[  877.605314][ T4283] EXT4-fs (loop0): unmounting filesystem.
[  877.975558][T28663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11167'.
[  878.047273][T28658] loop0: detected capacity change from 0 to 4096
[  878.154931][T28658] ntfs3: loop0: ino=9, attr_set_size
[  878.646282][T28677] loop3: detected capacity change from 0 to 1024
[  878.657141][T28679] loop1: detected capacity change from 0 to 256
[  878.701376][T28679] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  878.724864][T28677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  878.731745][T28679] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  878.772187][T28679] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  878.827623][   T27] audit: type=1800 audit(1780303726.041:444): pid=28679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11175" name="file1" dev="loop1" ino=1048721 res=0 errno=0
[  878.841257][T28661] loop4: detected capacity change from 0 to 32768
[  878.904014][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  878.936650][T28661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.11166 (28661)
[  879.073909][T28661] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  879.114795][T28661] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  879.145399][T28661] BTRFS info (device loop4): using free space tree
[  879.225527][T28688] loop3: detected capacity change from 0 to 512
[  879.256722][T28688] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  879.266149][T28688] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  879.307047][T28688] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  879.356164][T28688] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  879.374172][T28688] System zones: 0-2, 18-18, 34-35
[  879.401065][T28688] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  879.405811][T28673] loop0: detected capacity change from 0 to 32768
[  879.500547][T28688] EXT4-fs (loop3): re-mounted. Quota mode: none.
[  879.514767][T28661] BTRFS info (device loop4): enabling ssd optimizations
[  879.554856][T28673] XFS (loop0): Mounting V5 Filesystem
[  879.647151][T28673] XFS (loop0): Ending clean mount
[  879.655754][ T4292] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  879.680107][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  880.004116][T28726] loop3: detected capacity change from 0 to 256
[  880.094983][T28726] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  880.402558][ T4283] XFS (loop0): Unmounting Filesystem
[  881.399926][T28755] loop2: detected capacity change from 0 to 4096
[  881.778860][T28768] loop4: detected capacity change from 0 to 1024
[  881.872757][T28768] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  882.087628][ T4292] EXT4-fs (loop4): unmounting filesystem.
[  882.267984][T28745] loop1: detected capacity change from 0 to 32768
[  882.319562][T28745] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.11195 (28745)
[  882.407368][T28745] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  882.438551][T28745] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  882.468957][T28745] BTRFS info (device loop1): using free space tree
[  882.623811][T28801] loop3: detected capacity change from 0 to 512
[  882.645923][T28801] FAT-fs (loop3): Unrecognized mount option "shortnutf8=1" or missing value
[  882.664781][T28745] BTRFS info (device loop1): enabling ssd optimizations
[  882.875624][ T4291] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  882.941824][T28649] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  883.161614][T28649] usb 4-1: Using ep0 maxpacket: 8
[  883.169047][T28649] usb 4-1: config 0 has an invalid interface number: 88 but max is 3
[  883.186654][T28649] usb 4-1: config 0 has an invalid interface number: 250 but max is 3
[  883.205410][T28649] usb 4-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config
[  883.221518][T28817] loop2: detected capacity change from 0 to 1024
[  883.243931][T28649] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 4
[  883.262154][T28649] usb 4-1: config 0 has no interface number 0
[  883.280475][T28649] usb 4-1: config 0 has no interface number 1
[  883.288938][T28817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  883.303361][T28649] usb 4-1: config 0 interface 88 has no altsetting 0
[  883.314444][T28649] usb 4-1: config 0 interface 250 has no altsetting 0
[  883.321767][T28649] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3
[  883.341725][T28649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.372544][T28649] usb 4-1: config 0 descriptor??
[  883.490208][ T4293] EXT4-fs (loop2): unmounting filesystem.
[  883.595577][T28649] usb 4-1: string descriptor 0 read error: -71
[  883.627608][T28649] usb 4-1: USB disconnect, device number 48
[  883.753768][ T8394] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  883.878880][T28836] ipt_REJECT: ECHOREPLY no longer supported.
[  883.961794][ T8394] usb 5-1: Using ep0 maxpacket: 32
[  883.978775][ T8394] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  884.005966][ T8394] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  884.007965][T28838] loop0: detected capacity change from 0 to 4096
[  884.031700][ T8394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.055895][ T8394] usb 5-1: Product: syz
[  884.058522][T28840] loop1: detected capacity change from 0 to 2048
[  884.060212][ T8394] usb 5-1: Manufacturer: syz
[  884.074957][T28842] netlink: 'syz.2.11238': attribute type 27 has an invalid length.
[  884.077897][ T8394] usb 5-1: SerialNumber: syz
[  884.091036][ T8394] usb 5-1: config 0 descriptor??
[  884.100272][ T8394] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  884.143775][T28840]  loop1: p2 p3 < > p4 < p5 >
[  884.148591][T28840] loop1: partition table partially beyond EOD, truncated
[  884.172872][T28840] loop1: p3 start 4225 is beyond EOD, truncated
[  884.306950][ T8394] usb 5-1: qt2_setup_urbs - submit read urb failed -8
[  884.317018][ T8394] quatech2: probe of 5-1:0.0 failed with error -8
[  884.628199][ T8394] usb 5-1: USB disconnect, device number 38
[  887.705559][T28963] loop3: detected capacity change from 0 to 2048
[  887.788240][T28963]  loop3: p2 p3 < > p4 < p5 >
[  887.803475][ T5387] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  887.810699][T28963] loop3: partition table partially beyond EOD, truncated
[  887.852084][T28963] loop3: p3 start 4225 is beyond EOD, truncated
[  887.993614][ T5387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  888.019145][ T5387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  888.064261][ T5387] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  888.086434][ T5387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.104118][ T5387] usb 1-1: Product: syz
[  888.126778][ T5387] usb 1-1: Manufacturer: syz
[  888.151670][ T5387] usb 1-1: SerialNumber: syz
[  888.169748][ T5387] usb 1-1: config 0 descriptor??
[  888.187449][ T5387] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00
[  888.400494][T28989] loop4: detected capacity change from 0 to 128
[  888.429087][T28989] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  888.527700][T28989] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  888.596513][T28989] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05
[  888.623208][T28989] UDF-fs: error (device loop4): udf_count_free_bitmap: udf_count_free failed
[  888.673110][ T5387] usb 1-1: USB disconnect, device number 40
[  888.871645][ T4292] UDF-fs: error (device loop4): udf_read_inode: (ino 104) failed !bh
[  888.880305][ T4292] UDF-fs: error (device loop4): udf_read_inode: (ino 104) failed !bh
[  889.284604][T28994] loop2: detected capacity change from 0 to 32768
[  889.343020][T28994] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.11302 (28994)
[  889.561335][ T7491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.587815][T28994] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  889.604129][T28994] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  889.627192][T28994] BTRFS info (device loop2): using free space tree
[  889.749669][ T7491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.907207][ T7491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.921910][T28994] BTRFS info (device loop2): enabling ssd optimizations
[  890.165315][ T7491] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.259117][ T4293] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  890.513790][T29047] kernel profiling enabled (shift: 0)
[  890.680192][ T8334] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (8334)
[  891.051921][T29059] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  891.065484][T29059] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  891.076412][T29059] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  891.084875][T29059] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  891.094637][T29059] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  891.102100][T29059] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  892.185790][T29054] chnl_net:caif_netlink_parms(): no params data found
[  892.201397][T29084] xt_CT: No such helper "pptp"
[  892.285811][T29095] binder: 29093:29095 ioctl c00c6211 0 returned -14
[  892.371707][T26063] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  892.663757][T26063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  892.688132][T26063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  892.731652][T26063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  892.766169][T26063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  892.799170][T26063] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  892.822445][T26063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.902209][T26063] usb 3-1: Product: syz
[  892.911839][T26063] usb 3-1: Manufacturer: syz
[  892.916511][T26063] usb 3-1: SerialNumber: syz
[  892.957488][T26063] usb 3-1: config 0 descriptor??
[  893.171884][   T48] Bluetooth: hci3: command 0x0409 tx timeout
[  893.226168][T26063] adutux 3-1:0.0: Could not retrieve serial number
[  893.235897][T26063] adutux: probe of 3-1:0.0 failed with error -5
[  893.245645][T29054] bridge0: port 1(bridge_slave_0) entered blocking state
[  893.293630][T29054] bridge0: port 1(bridge_slave_0) entered disabled state
[  893.312619][T29054] device bridge_slave_0 entered promiscuous mode
[  893.437542][T29054] bridge0: port 2(bridge_slave_1) entered blocking state
[  893.446032][T29054] bridge0: port 2(bridge_slave_1) entered disabled state
[  893.456160][ T4330] usb 3-1: USB disconnect, device number 33
[  893.493512][T29054] device bridge_slave_1 entered promiscuous mode
[  893.670147][T29130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11350'.
[  893.679346][T26063] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  893.730103][T29054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  893.870708][T29054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  893.883041][T26063] usb 1-1: config 150 has an invalid interface number: 204 but max is 2
[  893.891460][T26063] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  893.929312][T26063] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3
[  893.952136][T26063] usb 1-1: config 150 has no interface number 0
[  893.958482][T26063] usb 1-1: config 150 interface 204 has no altsetting 0
[  894.053391][T26063] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  894.103029][T26063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.111095][T26063] usb 1-1: Product: syz
[  894.146363][T29054] team0: Port device team_slave_0 added
[  894.161584][T26063] usb 1-1: Manufacturer: syz
[  894.166355][T26063] usb 1-1: SerialNumber: syz
[  894.175518][T29054] team0: Port device team_slave_1 added
[  894.299164][T29054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  894.341656][T29054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  894.388340][T29148] loop3: detected capacity change from 0 to 512
[  894.422170][T29054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  894.442214][T26063] xr_serial 1-1:150.204: skipping garbage
[  894.448008][T26063] xr_serial 1-1:150.204: invalid descriptor buffer length
[  894.456386][T29148] EXT4-fs: Ignoring removed i_version option
[  894.484833][T26063] usb 1-1: USB disconnect, device number 41
[  894.492809][T29054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  894.499810][T29054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  894.531883][T29054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  894.550646][T29150] xt_TCPMSS: Only works on TCP SYN packets
[  894.666893][T29148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  894.715605][T29148] ext4 filesystem being mounted at /2204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  894.942018][T29166] comedi comedi0: Minor -1 is invalid!
[  894.973875][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  895.029686][T29054] device hsr_slave_0 entered promiscuous mode
[  895.122201][T29054] device hsr_slave_1 entered promiscuous mode
[  895.142772][T29054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  895.150486][T29054] Cannot create hsr debugfs directory
[  895.241738][   T48] Bluetooth: hci3: command 0x041b tx timeout
[  895.301909][T29172] loop1: detected capacity change from 0 to 2048
[  895.343368][T29172] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  895.422920][T29172] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  895.525232][T29172] UDF-fs: bad mount option "gad" or missing value
[  895.797429][ T7491] device hsr_slave_0 left promiscuous mode
[  895.811840][ T8088] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  895.851198][ T7491] device hsr_slave_1 left promiscuous mode
[  895.874313][ T7491] device hsr0 left promiscuous mode
[  895.893751][ T7491] bridge0: port 1(hsr0) entered disabled state
[  896.005770][ T7491] device veth1_macvtap left promiscuous mode
[  896.017563][ T8088] usb 3-1: Using ep0 maxpacket: 8
[  896.018801][ T7491] device veth0_macvtap left promiscuous mode
[  896.026084][ T8088] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  896.065213][ T8088] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  896.085524][ T8088] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  896.116160][ T8088] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  896.148192][ T8088] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  896.191306][ T8088] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  896.212400][ T8088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.248042][ T8088] usb 3-1: config 0 descriptor??
[  896.257698][T29184] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  896.270081][T29184] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  896.461939][ T5386] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  896.558230][ T8088] usb 3-1: USB disconnect, device number 34
[  896.559803][   T48] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  896.683624][ T5386] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  896.692359][ T5386] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  896.701180][ T5386] usb 2-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config
[  896.711926][ T5386] usb 2-1: config 0 has no interface number 0
[  896.720758][ T5386] usb 2-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28
[  896.730994][ T5386] usb 2-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3
[  896.739432][ T5386] usb 2-1: Product: syz
[  896.741445][ T7491] bond2 (unregistering): Released all slaves
[  896.743890][ T5386] usb 2-1: Manufacturer: syz
[  896.743910][ T5386] usb 2-1: SerialNumber: syz
[  896.746420][ T5386] usb 2-1: config 0 descriptor??
[  896.768574][ T5386] usb 2-1: Found UVC 0.00 device syz (006d:0800)
[  896.775339][ T5386] usb 2-1: No valid video chain found.
[  896.969611][ T8088] usb 2-1: USB disconnect, device number 34
[  897.266704][ T7491] bond1 (unregistering): Released all slaves
[  897.321792][   T48] Bluetooth: hci3: command 0x040f tx timeout
[  898.355774][T29237] loop1: detected capacity change from 0 to 256
[  898.434269][T29237] FAT-fs (loop1): Directory bread(block 64) failed
[  898.441122][T29237] FAT-fs (loop1): Directory bread(block 65) failed
[  898.449828][T29237] FAT-fs (loop1): Directory bread(block 66) failed
[  898.464628][T29237] FAT-fs (loop1): Directory bread(block 67) failed
[  898.471320][T29237] FAT-fs (loop1): Directory bread(block 68) failed
[  898.485952][T29237] FAT-fs (loop1): Directory bread(block 69) failed
[  898.495188][T29237] FAT-fs (loop1): Directory bread(block 70) failed
[  898.502048][T29237] FAT-fs (loop1): Directory bread(block 71) failed
[  898.508925][T29237] FAT-fs (loop1): Directory bread(block 72) failed
[  898.524461][T29237] FAT-fs (loop1): Directory bread(block 73) failed
[  898.552085][ T8088] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  898.752052][ T8088] usb 3-1: Using ep0 maxpacket: 16
[  898.766649][ T8088] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  898.789437][ T8088] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.797757][ T8088] usb 3-1: Product: syz
[  898.802047][ T8088] usb 3-1: Manufacturer: syz
[  898.806681][ T8088] usb 3-1: SerialNumber: syz
[  898.826570][ T8088] r8152-cfgselector 3-1: config 0 descriptor??
[  899.230635][ T7491] bond0 (unregistering): Released all slaves
[  899.262831][ T8088] r8152-cfgselector 3-1: Unknown version 0x0000
[  899.269256][ T8088] r8152-cfgselector 3-1: bad CDC descriptors
[  899.277512][ T8088] r8152-cfgselector 3-1: Unknown version 0x0000
[  899.305625][ T8088] r8152-cfgselector 3-1: USB disconnect, device number 35
[  899.396952][T29197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11376'.
[  899.407073][   T48] Bluetooth: hci3: command 0x0419 tx timeout
[  900.079527][T29054] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  900.112375][T29054] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  900.160466][T29054] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  900.232640][T29054] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  900.580459][T29054] 8021q: adding VLAN 0 to HW filter on device bond0
[  900.602758][T29273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11402'.
[  900.660950][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  900.692583][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  900.733878][T29054] 8021q: adding VLAN 0 to HW filter on device team0
[  900.772217][ T7514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  900.789781][ T7514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  900.830775][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.838090][ T7514] bridge0: port 1(bridge_slave_0) entered forwarding state
[  900.902336][ T7514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  900.929492][ T7491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  900.955391][ T7491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  900.996037][ T7491] bridge0: port 2(bridge_slave_1) entered blocking state
[  901.003270][ T7491] bridge0: port 2(bridge_slave_1) entered forwarding state
[  901.028539][T29288] loop0: detected capacity change from 0 to 512
[  901.071662][ T7491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  901.122430][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  901.138488][T29288] EXT4-fs: Ignoring removed i_version option
[  901.147949][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  901.190316][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  901.219869][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  901.232206][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  901.250990][T29054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  901.254525][T29288] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  901.262760][T29054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  901.337408][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  901.358734][T29288] ext4 filesystem being mounted at /2216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  901.369167][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  901.440963][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  901.486807][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  901.534519][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  901.558969][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  901.608522][ T4283] EXT4-fs (loop0): unmounting filesystem.
[  902.701914][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  902.732307][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  902.767779][T29054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  903.482886][ T4330] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  903.625979][T29341] loop2: detected capacity change from 0 to 32768
[  903.661431][T29368] comedi comedi0: Minor -1 is invalid!
[  903.681768][ T4330] usb 1-1: Using ep0 maxpacket: 8
[  903.689469][ T4330] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  903.709869][T29341] ERROR: (device loop2): diAllocAG: numfree > numinos
[  903.709869][T29341] 
[  903.721620][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  903.731330][ T4330] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  903.782859][T29341] ERROR: (device loop2): remounting filesystem as read-only
[  903.792087][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  903.826737][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  903.831802][T29341] ialloc: diAlloc returned -5!
[  903.847958][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  903.878007][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  903.928129][T29082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  903.932082][ T4330] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  903.950682][T29082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  903.962112][ T4330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.989267][ T4330] usb 1-1: config 0 descriptor??
[  904.002401][T29356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  904.009855][T29356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  904.013190][T29082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  904.102597][T29082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  904.127576][T29054] device veth0_vlan entered promiscuous mode
[  904.194684][T29054] device veth1_vlan entered promiscuous mode
[  904.334916][ T4330] usb 1-1: USB disconnect, device number 42
[  904.337414][   T48] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  904.407556][T29054] device veth0_macvtap entered promiscuous mode
[  904.419816][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  904.453976][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  904.466328][T29379] loop2: detected capacity change from 0 to 256
[  904.498209][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  904.519700][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  904.562442][T29379] FAT-fs (loop2): Directory bread(block 64) failed
[  904.569998][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  904.584387][T29379] FAT-fs (loop2): Directory bread(block 65) failed
[  904.595146][T29379] FAT-fs (loop2): Directory bread(block 66) failed
[  904.597311][T29054] device veth1_macvtap entered promiscuous mode
[  904.617057][T29379] FAT-fs (loop2): Directory bread(block 67) failed
[  904.626675][T29379] FAT-fs (loop2): Directory bread(block 68) failed
[  904.638617][T29379] FAT-fs (loop2): Directory bread(block 69) failed
[  904.649125][T29379] FAT-fs (loop2): Directory bread(block 70) failed
[  904.664932][T29379] FAT-fs (loop2): Directory bread(block 71) failed
[  904.672516][T29054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  904.685422][T29379] FAT-fs (loop2): Directory bread(block 72) failed
[  904.693740][T29379] FAT-fs (loop2): Directory bread(block 73) failed
[  904.715294][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  904.728750][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  904.754558][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  904.786400][T29054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  904.815710][T29054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  904.874317][T29054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  904.902893][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  904.920752][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  904.989907][T29054] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  905.217476][T29054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  905.246339][T29054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  905.273913][T29054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  905.595655][ T7491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.614170][ T7491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.658672][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  905.697675][ T7499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.738182][ T7499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.792232][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  905.839233][T29405] xt_TCPMSS: Only works on TCP SYN packets
[  906.281878][ T8088] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  906.461713][ T8088] usb 4-1: Using ep0 maxpacket: 8
[  906.468698][ T8088] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  906.521816][ T8088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  906.564421][ T8088] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  906.602242][ T8088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  906.648860][ T8088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  906.683061][ T8088] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  906.731655][ T8088] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.760903][ T8088] usb 4-1: config 0 descriptor??
[  906.797296][T29411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  906.805772][T29411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  907.071036][ T8088] usb 4-1: USB disconnect, device number 49
[  907.074016][   T48] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  907.151803][ T5389] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  907.353542][ T5389] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  907.372118][ T5389] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  907.380966][ T5389] usb 1-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config
[  907.411575][ T5389] usb 1-1: config 0 has no interface number 0
[  907.438710][ T5389] usb 1-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28
[  907.492409][ T5389] usb 1-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3
[  907.500593][ T5389] usb 1-1: Product: syz
[  907.529830][ T5389] usb 1-1: Manufacturer: syz
[  907.541615][ T5389] usb 1-1: SerialNumber: syz
[  907.566708][ T5389] usb 1-1: config 0 descriptor??
[  907.583096][ T5389] usb 1-1: Found UVC 0.00 device syz (006d:0800)
[  907.598796][ T5389] usb 1-1: No valid video chain found.
[  907.800699][T29457] xt_CT: No such helper "pptp"
[  907.857736][ T5389] usb 1-1: USB disconnect, device number 43
[  907.961024][T29468] loop5: detected capacity change from 0 to 2048
[  908.006252][T29468] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  908.034017][ T8088] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  908.053280][T29468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  908.114460][T29468] UDF-fs: bad mount option "gad" or missing value
[  908.247083][ T8088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  908.290893][ T8088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  908.325032][ T8088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  908.366039][ T8088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  908.429356][ T8088] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  908.472550][ T8088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.480622][ T8088] usb 4-1: Product: syz
[  908.513552][T29485] loop1: detected capacity change from 0 to 2048
[  908.529790][ T8088] usb 4-1: Manufacturer: syz
[  908.539728][ T8088] usb 4-1: SerialNumber: syz
[  908.573734][ T8088] usb 4-1: config 0 descriptor??
[  908.606371][T29485] GPT:first_usable_lbas don't match.
[  908.619530][T29485] GPT:34 != 290
[  908.631612][T29485] GPT: Use GNU Parted to correct GPT errors.
[  908.641913][T29485]  loop1: p1 p2 p3
[  908.808062][ T8088] adutux 4-1:0.0: Could not retrieve serial number
[  908.821747][ T8088] adutux: probe of 4-1:0.0 failed with error -5
[  908.939981][ T4330] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  909.051094][ T8088] usb 4-1: USB disconnect, device number 50
[  909.143478][ T4330] usb 2-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config
[  909.161846][ T4330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  909.183991][ T4330] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  909.219633][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  909.250143][ T4330] usb 2-1: Product: syz
[  909.268452][ T4330] usb 2-1: Manufacturer: syz
[  909.296970][ T4330] usb 2-1: SerialNumber: syz
[  909.532094][ T4330] usb 2-1: 0:2 : does not exist
[  909.537578][ T4330] usb 2-1: unit 9 not found!
[  909.560943][ T4330] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4)
[  909.654380][ T4330] usb 2-1: USB disconnect, device number 35
[  909.744865][T29514] netlink: 108 bytes leftover after parsing attributes in process `syz.5.11480'.
[  909.917741][ T8334] udevd[8334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  910.721761][T29542] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  910.791624][T26063] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  910.987959][T26063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  911.008228][T26063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  911.043353][T26063] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  911.069554][T26063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  911.096396][T26063] usb 4-1: Product: syz
[  911.106554][T26063] usb 4-1: Manufacturer: syz
[  911.124119][T26063] usb 4-1: SerialNumber: syz
[  911.146291][T26063] usb 4-1: config 0 descriptor??
[  911.180433][T26063] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00
[  911.451662][ T4330] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  911.653616][ T4330] usb 3-1: config index 0 descriptor too short (expected 7768, got 18)
[  911.656775][T26063] usb 4-1: USB disconnect, device number 51
[  911.691668][ T4330] usb 3-1: config 0 has an invalid interface number: 115 but max is 0
[  911.711482][ T4330] usb 3-1: config 0 has no interface number 0
[  911.745297][ T4330] usb 3-1: too many endpoints for config 0 interface 115 altsetting 116: 101, using maximum allowed: 30
[  911.785264][ T4330] usb 3-1: config 0 interface 115 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 101
[  911.826894][ T4330] usb 3-1: config 0 interface 115 has no altsetting 0
[  911.852763][ T4330] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  911.888566][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.917304][ T4330] usb 3-1: config 0 descriptor??
[  911.945394][ T4330] ftdi_sio 3-1:0.115: FTDI USB Serial Device converter detected
[  911.964284][ T4330] ftdi_sio ttyUSB0: unknown device type: 0x524d
[  912.194982][ T8089] usb 3-1: USB disconnect, device number 36
[  912.212856][ T8089] ftdi_sio 3-1:0.115: device disconnected
[  912.306919][T29560] loop5: detected capacity change from 0 to 32768
[  912.361479][T29560] ERROR: (device loop5): diAllocAG: numfree > numinos
[  912.361479][T29560] 
[  912.421062][T29560] ERROR: (device loop5): remounting filesystem as read-only
[  912.449201][T29560] ialloc: diAlloc returned -5!
[  912.724491][T29591] loop1: detected capacity change from 0 to 1764
[  913.131729][T29605] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  914.953010][   T27] audit: type=1326 audit(1780303762.171:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29668 comm="syz.0.11541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523159ce59 code=0x7ffc0000
[  915.048873][   T27] audit: type=1326 audit(1780303762.191:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29668 comm="syz.0.11541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f523159e6c7 code=0x7ffc0000
[  915.163076][   T27] audit: type=1326 audit(1780303762.191:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29668 comm="syz.0.11541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f523155d68e code=0x7ffc0000
[  915.272574][   T27] audit: type=1326 audit(1780303762.191:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29668 comm="syz.0.11541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f523155d68e code=0x7ffc0000
[  915.391804][   T27] audit: type=1326 audit(1780303762.191:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29668 comm="syz.0.11541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f523155d68e code=0x7ffc0000
[  915.491726][   T27] audit: type=1326 audit(1780303762.191:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29668 comm="syz.0.11541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f523155d68e code=0x7ffc0000
[  915.566743][   T27] audit: type=1326 audit(1780303762.191:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29668 comm="syz.0.11541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523159ce59 code=0x7ffc0000
[  915.691611][   T27] audit: type=1326 audit(1780303762.191:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29668 comm="syz.0.11541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f523159ce59 code=0x7ffc0000
[  915.940637][T29659] loop1: detected capacity change from 0 to 32768
[  915.986924][T29659] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  916.421309][ T8334] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  916.811612][T29694] loop0: detected capacity change from 0 to 32768
[  916.916668][T29718] loop2: detected capacity change from 0 to 4096
[  916.927290][T29694] ERROR: (device loop0): diAllocAG: numfree > numinos
[  916.927290][T29694] 
[  916.938561][T29694] ERROR: (device loop0): remounting filesystem as read-only
[  916.947125][T29694] ialloc: diAlloc returned -5!
[  917.043613][T29718] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  917.113671][T29718] ntfs3: loop2: Failed to load $Extend.
[  917.212736][T29727] loop5: detected capacity change from 0 to 1764
[  918.017725][T29747] loop2: detected capacity change from 0 to 2048
[  918.090994][T29747] GPT:first_usable_lbas don't match.
[  918.120818][T29747] GPT:34 != 290
[  918.130387][T29747] GPT: Use GNU Parted to correct GPT errors.
[  918.150852][T29747]  loop2: p1 p2 p3
[  918.277138][T29756] loop3: detected capacity change from 0 to 1764
[  918.471632][ T8089] usb 3-1: new full-speed USB device number 37 using dummy_hcd
[  918.664819][ T8089] usb 3-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config
[  918.709664][ T8089] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  918.755217][ T8089] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  918.791724][ T8089] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.811479][ T8089] usb 3-1: Product: syz
[  918.819924][ T8089] usb 3-1: Manufacturer: syz
[  918.841297][ T8089] usb 3-1: SerialNumber: syz
[  919.086737][ T8089] usb 3-1: 0:2 : does not exist
[  919.092178][ T8089] usb 3-1: unit 9 not found!
[  919.114408][ T8089] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4)
[  919.186556][ T8089] usb 3-1: USB disconnect, device number 37
[  919.286994][T29789] loop0: detected capacity change from 0 to 1764
[  919.398392][T29794] loop1: detected capacity change from 0 to 64
[  919.463550][ T8336] udevd[8336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  919.677230][T29802] netlink: 200 bytes leftover after parsing attributes in process `syz.5.11602'.
[  920.080289][T29818] MTD: Attempt to mount non-MTD device "/dev/nbd0"
[  920.100112][   T52] block nbd0: Attempted send on invalid socket
[  920.106822][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  920.161897][ T5386] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  920.373651][ T5386] usb 6-1: unable to get BOS descriptor or descriptor too short
[  920.384087][ T5386] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  920.415413][ T5386] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7
[  920.451964][ T5386] usb 6-1: string descriptor 0 read error: -22
[  920.471812][ T5386] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  920.516495][ T5386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.677166][T29841] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11619'.
[  920.707119][T29841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  920.973522][ T5386] usb 6-1: Can't set UAC3 power state to 1 for id 10
[  921.010584][ T5386] usb 6-1: 2:0: failed to get current value for ch 0 (-71)
[  921.056149][ T5386] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  921.088903][T29857] dlm: no locking on control device
[  921.111702][ T5386] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  921.147863][ T5386] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  921.191369][ T5386] usb 6-1: USB disconnect, device number 2
[  921.204123][ T8089] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  921.381256][T29833] loop3: detected capacity change from 0 to 32768
[  921.406352][ T8089] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  921.417620][ T8089] usb 2-1: config 0 has no interface number 0
[  921.429270][ T8089] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 22765, setting to 64
[  921.454176][T29833] ERROR: (device loop3): diAllocAG: numfree > numinos
[  921.454176][T29833] 
[  921.464909][ T8074] udevd[8074]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  921.467301][ T8089] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  921.521729][T29833] ERROR: (device loop3): remounting filesystem as read-only
[  921.529199][T29833] ialloc: diAlloc returned -5!
[  921.546159][ T8089] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  921.573583][ T8089] usb 2-1: Manufacturer: syz
[  921.591337][ T8089] usb 2-1: SerialNumber: syz
[  921.624997][ T8089] usb 2-1: config 0 descriptor??
[  921.630701][T29852] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  921.865143][ T8089] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71
[  921.886921][ T8089] usbtouchscreen: probe of 2-1:0.214 failed with error -71
[  921.915937][ T8089] usb 2-1: USB disconnect, device number 36
[  922.359011][T29863] loop0: detected capacity change from 0 to 32768
[  922.684478][T29889] loop2: detected capacity change from 0 to 128
[  922.753324][T29889] FAT-fs (loop2): Directory bread(block 414) failed
[  922.789010][T29889] FAT-fs (loop2): Directory bread(block 415) failed
[  922.818701][T29889] FAT-fs (loop2): Directory bread(block 416) failed
[  922.860390][T29889] FAT-fs (loop2): Directory bread(block 417) failed
[  922.880626][T29889] FAT-fs (loop2): Directory bread(block 418) failed
[  922.900888][T29889] FAT-fs (loop2): Directory bread(block 419) failed
[  922.928634][T29889] FAT-fs (loop2): Directory bread(block 420) failed
[  922.948909][T29889] FAT-fs (loop2): Directory bread(block 421) failed
[  923.247771][T29878] loop3: detected capacity change from 0 to 32768
[  923.299026][T29901] netlink: 216 bytes leftover after parsing attributes in process `syz.2.11646'.
[  923.524078][T29884] loop5: detected capacity change from 0 to 32768
[  923.609620][T29884] jfs_rename: dtInsert returned -EIO
[  923.731870][ T4330] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  923.877071][T29917] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11653'.
[  923.921740][ T4330] usb 1-1: Using ep0 maxpacket: 16
[  923.928990][ T4330] usb 1-1: config 0 has no interfaces?
[  923.954086][ T4330] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  924.001657][ T4330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.042259][ T4330] usb 1-1: Product: syz
[  924.046516][ T4330] usb 1-1: Manufacturer: syz
[  924.051357][ T4330] usb 1-1: SerialNumber: syz
[  924.089238][ T4330] r8152-cfgselector 1-1: config 0 descriptor??
[  924.165273][T29923] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11657'.
[  924.325472][ T4330] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  924.537218][ T4330] usb 1-1: USB disconnect, device number 44
[  925.722402][T29977] loop3: detected capacity change from 0 to 8
[  925.744099][T29981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11682'.
[  925.813506][T29981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11682'.
[  925.823713][T29977] SQUASHFS error: Failed to read block 0x6fc: -5
[  925.830121][T29977] SQUASHFS error: Unable to read metadata cache entry [6fa]
[  925.869982][T29981] netlink: 23 bytes leftover after parsing attributes in process `syz.2.11682'.
[  925.902852][T29981] netlink: 23 bytes leftover after parsing attributes in process `syz.2.11682'.
[  926.605536][T30010] loop1: detected capacity change from 0 to 256
[  926.647652][T30010] exfat: Deprecated parameter 'namecase'
[  926.677344][T30010] exfat: Deprecated parameter 'utf8'
[  926.710279][T30010] exfat: Deprecated parameter 'namecase'
[  926.740285][T30010] exfat: Deprecated parameter 'utf8'
[  927.065011][T30023] loop2: detected capacity change from 0 to 1024
[  927.494779][T30034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11704'.
[  927.552783][T30010] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  927.563037][T29999] syz.5.11689 (29999): drop_caches: 2
[  927.605359][T30010] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  928.098838][T30049] netlink: 'syz.1.11710': attribute type 8 has an invalid length.
[  929.997539][T30126] syz.0.11743: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  930.097610][T30126] CPU: 0 PID: 30126 Comm: syz.0.11743 Not tainted syzkaller #0
[  930.105426][T30126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  930.115798][T30126] Call Trace:
[  930.119114][T30126]  <TASK>
[  930.122075][T30126]  dump_stack_lvl+0x188/0x24e
[  930.126797][T30126]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  930.133430][T30126]  ? show_regs_print_info+0x12/0x12
[  930.138671][T30126]  ? load_image+0x400/0x400
[  930.143252][T30126]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  930.149722][T30126]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  930.156390][T30126]  warn_alloc+0x242/0x330
[  930.160844][T30126]  ? zone_watermark_ok_safe+0x270/0x270
[  930.166500][T30126]  ? __mutex_trylock_common+0x155/0x260
[  930.172136][T30126]  __vmalloc_node_range+0x11e/0x13b0
[  930.177474][T30126]  ? rcu_is_watching+0x11/0xa0
[  930.182373][T30126]  ? trace_contention_end+0x5f/0x170
[  930.187708][T30126]  ? __mutex_lock+0x1ab/0xaf0
[  930.192471][T30126]  ? __kmem_cache_free+0xb6/0x1f0
[  930.197583][T30126]  ? tomoyo_path_number_perm+0x205/0x650
[  930.203305][T30126]  ? tomoyo_path_number_perm+0x5a4/0x650
[  930.209271][T30126]  ? dvb_dvr_do_ioctl+0x75/0x220
[  930.214318][T30126]  ? tomoyo_path_number_perm+0x205/0x650
[  930.220009][T30126]  ? mutex_lock_nested+0x10/0x10
[  930.225002][T30126]  ? free_vm_area+0x50/0x50
[  930.229561][T30126]  ? dvb_dvr_do_ioctl+0x12a/0x220
[  930.234717][T30126]  vmalloc+0x75/0x80
[  930.238658][T30126]  ? dvb_dvr_do_ioctl+0x12a/0x220
[  930.243727][T30126]  dvb_dvr_do_ioctl+0x12a/0x220
[  930.248624][T30126]  dvb_usercopy+0x191/0x2b0
[  930.253177][T30126]  ? dvb_dvr_release+0x3d0/0x3d0
[  930.258161][T30126]  ? dvb_generic_ioctl+0xb0/0xb0
[  930.263168][T30126]  ? dvb_dvr_poll+0x230/0x230
[  930.267894][T30126]  dvb_dvr_ioctl+0x25/0x30
[  930.272365][T30126]  __se_sys_ioctl+0xfa/0x170
[  930.277088][T30126]  do_syscall_64+0x4c/0xa0
[  930.281634][T30126]  ? clear_bhb_loop+0x60/0xb0
[  930.286391][T30126]  ? clear_bhb_loop+0x60/0xb0
[  930.291122][T30126]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  930.297063][T30126] RIP: 0033:0x7f523159ce59
[  930.301514][T30126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  930.321255][T30126] RSP: 002b:00007f5232480028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  930.329724][T30126] RAX: ffffffffffffffda RBX: 00007f5231815fa0 RCX: 00007f523159ce59
[  930.337746][T30126] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  930.345761][T30126] RBP: 00007f5231632d6f R08: 0000000000000000 R09: 0000000000000000
[  930.352143][T30142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11749'.
[  930.353752][T30126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  930.370832][T30126] R13: 00007f5231816038 R14: 00007f5231815fa0 R15: 00007ffdfc09e748
[  930.379040][T30126]  </TASK>
[  931.085239][T30126] Mem-Info:
[  931.088435][T30126] active_anon:7073 inactive_anon:0 isolated_anon:0
[  931.088435][T30126]  active_file:7022 inactive_file:47964 isolated_file:0
[  931.088435][T30126]  unevictable:768 dirty:297 writeback:0
[  931.088435][T30126]  slab_reclaimable:20708 slab_unreclaimable:98217
[  931.088435][T30126]  mapped:30395 shmem:1381 pagetables:814
[  931.088435][T30126]  sec_pagetables:0 bounce:0
[  931.088435][T30126]  kernel_misc_reclaimable:0
[  931.088435][T30126]  free:1318715 free_pcp:10199 free_cma:0
[  931.276622][T30126] Node 0 active_anon:29592kB inactive_anon:0kB active_file:28088kB inactive_file:191652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121580kB dirty:1184kB writeback:0kB shmem:5188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11764kB pagetables:3356kB sec_pagetables:0kB all_unreclaimable? no
[  931.378428][T30126] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  931.483997][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  931.490424][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  931.491475][T30126] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  931.659645][T30126] lowmem_reserve[]: 0 2527 2528 2528 2528
[  931.679903][T30126] Node 0 DMA32 free:1351132kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:41892kB inactive_anon:0kB active_file:28088kB inactive_file:191652kB unevictable:1536kB writepending:1184kB present:3129332kB managed:2592960kB mlocked:0kB bounce:0kB free_pcp:16696kB local_pcp:6632kB free_cma:0kB
[  931.783653][T30126] lowmem_reserve[]: 0 0 1 1 1
[  931.788477][T30126] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB
[  931.886247][T30161] loop5: detected capacity change from 0 to 32768
[  931.901593][T30126] lowmem_reserve[]: 0 0 0 0 0
[  931.906538][T30126] Node 1 Normal free:3896716kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22392kB local_pcp:16984kB free_cma:0kB
[  932.004870][T30161] JBD2: Ignoring recovery information on journal
[  932.028016][T30194] loop1: detected capacity change from 0 to 512
[  932.039038][T30126] lowmem_reserve[]: 0 0 0 0 0
[  932.081064][T30126] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB
[  932.123159][T30126] Node 0 DMA32: 4*4kB (UME) 12*8kB (ME) 286*16kB (UE) 405*32kB (UM) 588*64kB (UME) 220*128kB (UME) 40*256kB (UME) 30*512kB (UME) 14*1024kB (UME) 3*2048kB (ME) 294*4096kB (UM) = 1333744kB
[  932.157479][T30161] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  932.197900][T30126] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  932.211816][T30161] (syz.5.11754,30161,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1
[  932.279858][T30194] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  932.290065][T30126] Node 1 Normal: 207*4kB (UE) 60*8kB (UE) 13*16kB (UME) 133*32kB (UME) 50*64kB (UME) 17*128kB (UME) 4*256kB (UE) 3*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3896716kB
[  932.312925][T30126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  932.323119][T30126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  932.332601][T30203] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 4 out of range (1000000..45000000)
[  932.355419][T30194] ext4 filesystem being mounted at /2366/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  932.361560][T30126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  932.376114][T30161] (syz.5.11754,30161,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  932.391182][T30161] (syz.5.11754,30161,1):ocfs2_mknod:298 ERROR: status = -2
[  932.417525][T30161] (syz.5.11754,30161,1):ocfs2_mknod:502 ERROR: status = -2
[  932.466457][T30126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  932.485451][T30175] loop2: detected capacity change from 0 to 32768
[  932.553780][T30126] 63563 total pagecache pages
[  932.567934][T30126] 0 pages in swap cache
[  932.590697][T30126] Free swap  = 124728kB
[  932.603367][T30126] Total swap = 124996kB
[  932.622920][T30126] 2097051 pages RAM
[  932.626808][T30126] 0 pages HighMem/MovableOnly
[  932.636256][ T4291] EXT4-fs (loop1): unmounting filesystem.
[  932.641953][T30126] 415210 pages reserved
[  932.647375][T30126] 0 pages cma reserved
[  932.652599][T29054] ocfs2: Unmounting device (7,5) on (node local)
[  933.360695][T30229] loop0: detected capacity change from 0 to 2048
[  933.415007][T30230] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  933.529656][   T27] audit: type=1800 audit(1780303780.741:453): pid=30229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11779" name="file1" dev="loop0" ino=2097152 res=0 errno=0
[  933.891874][T30243] loop5: detected capacity change from 0 to 128
[  934.179906][T30246] loop1: detected capacity change from 0 to 4096
[  934.206426][T30253] netlink: 'syz.3.11788': attribute type 1 has an invalid length.
[  934.227190][T30246] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  934.251316][T30256] loop5: detected capacity change from 0 to 64
[  934.312859][T30253] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.11788'.
[  934.378357][T30246] ntfs3: loop1: mft corrupted
[  935.622422][T30310] device wlan0 entered promiscuous mode
[  936.102684][T30326] ieee802154 phy0 wpan0: encryption failed: -22
[  937.610973][T30384] loop2: detected capacity change from 0 to 8
[  937.694273][T30333] loop5: detected capacity change from 0 to 32768
[  937.718810][T30384] SQUASHFS error: Unable to read directory block [1d0:0]
[  937.760755][T30333] XFS: attr2 mount option is deprecated.
[  937.868011][T30333] XFS (loop5): Mounting V5 Filesystem
[  938.009878][T30333] XFS (loop5): Ending clean mount
[  938.038907][T30333] XFS (loop5): Quotacheck needed: Please wait.
[  938.141760][ T5386] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  938.170254][T30333] XFS (loop5): Quotacheck: Done.
[  938.331780][ T5386] usb 4-1: Using ep0 maxpacket: 16
[  938.339156][ T5386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  938.396966][T29054] XFS (loop5): Unmounting Filesystem
[  938.417644][ T5386] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  938.439957][ T5386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.504906][ T5386] usb 4-1: Product: syz
[  938.509196][ T5386] usb 4-1: Manufacturer: syz
[  938.544756][ T5386] usb 4-1: SerialNumber: syz
[  938.566472][ T5386] usb 4-1: config 0 descriptor??
[  938.754535][T30420] loop2: detected capacity change from 0 to 2048
[  938.808018][ T5386] usb 4-1: USB disconnect, device number 52
[  938.808609][T30420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  938.969649][T30420] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a
[  939.047442][T30420] UDF-fs: error (device loop2): udf_rename: failed to find renamed entry again in directory (ino 1408)
[  939.142654][T30433] netlink: 'syz.1.11859': attribute type 2 has an invalid length.
[  939.177144][T30433] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11859'.
[  939.821804][ T8089] usb 4-1: new low-speed USB device number 53 using dummy_hcd
[  940.016690][ T8089] usb 4-1: unable to get BOS descriptor or descriptor too short
[  940.040208][ T8089] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  940.086479][ T8089] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  940.155545][ T8089] usb 4-1: string descriptor 0 read error: -22
[  940.196373][ T8089] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  940.215118][ T8089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.245960][T30448] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  940.266163][ T8089] cdc_acm: probe of 4-1:1.0 failed with error -22
[  940.295187][ T8089] usb-storage 4-1:1.1: USB Mass Storage device detected
[  940.666638][ T8089] usb 4-1: USB disconnect, device number 53
[  941.305702][T30520] netlink: 'syz.5.11888': attribute type 32 has an invalid length.
[  941.519805][T30531] loop3: detected capacity change from 0 to 8
[  941.627072][T30531] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  941.721748][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  941.781710][ T5389] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  941.986158][ T5389] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  942.026954][ T5389] usb 3-1: config 0 interface 0 has no altsetting 0
[  942.042924][ T5389] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  942.061823][ T5389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.080105][ T5389] usb 3-1: Product: syz
[  942.088895][ T5389] usb 3-1: Manufacturer: syz
[  942.117636][ T5389] usb 3-1: SerialNumber: syz
[  942.156956][ T5389] usb 3-1: config 0 descriptor??
[  942.183853][ T5389] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  942.249171][ T5389] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  942.302096][ T5389] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  942.322971][ T5389] usb 3-1: media controller created
[  942.414205][ T5389] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  942.757926][ T5389] DVB: Unable to find symbol tda10046_attach()
[  942.774321][ T5389] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  942.814374][ T5389] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  942.899923][T30578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11912'.
[  942.911688][ T8088] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  942.949430][T30578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11912'.
[  943.056586][ T5389] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71
[  943.077102][ T5389] usb 3-1: USB disconnect, device number 38
[  943.113627][ T8088] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  943.137156][T30580] loop5: detected capacity change from 0 to 764
[  943.147306][ T8088] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  943.180395][ T8088] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  943.189924][ T8088] usb 2-1: config 1 has no interface number 0
[  943.210123][ T8088] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  943.231326][T30580] Symlink component flag not implemented
[  943.248503][T30580] Symlink component flag not implemented (101)
[  943.269476][ T8088] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  943.318539][ T8088] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  943.334262][ T8088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.342927][ T8088] usb 2-1: Product: syz
[  943.347131][ T8088] usb 2-1: Manufacturer: syz
[  943.351933][ T8088] usb 2-1: SerialNumber: syz
[  943.812256][ T5389] usb 2-1: USB disconnect, device number 37
[  943.859571][T30602] xt_hashlimit: invalid rate
[  943.901362][T30599] xt_CT: No such helper "snmp"
[  944.144335][T30610] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  944.171658][T30610] overlayfs: missing 'lowerdir'
[  944.576152][T30630] xt_cgroup: path and classid specified
[  944.675309][T30633] netlink: 'syz.0.11938': attribute type 15 has an invalid length.
[  945.202754][   T27] audit: type=1326 audit(1780303792.421:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30654 comm="syz.5.11949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  945.321037][   T27] audit: type=1326 audit(1780303792.441:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30654 comm="syz.5.11949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  945.442677][   T27] audit: type=1326 audit(1780303792.451:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30654 comm="syz.5.11949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  945.552430][   T27] audit: type=1326 audit(1780303792.451:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30654 comm="syz.5.11949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  945.651727][   T27] audit: type=1326 audit(1780303792.491:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30654 comm="syz.5.11949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  945.726799][   T27] audit: type=1326 audit(1780303792.491:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30654 comm="syz.5.11949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  945.811579][   T27] audit: type=1326 audit(1780303792.491:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30654 comm="syz.5.11949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  945.909518][   T27] audit: type=1326 audit(1780303792.491:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30654 comm="syz.5.11949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  945.989866][T30685] loop0: detected capacity change from 0 to 512
[  946.021171][   T27] audit: type=1326 audit(1780303792.491:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30654 comm="syz.5.11949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  946.158373][T30685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  946.225589][T30685] ext4 filesystem being mounted at /2338/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  946.612344][ T5386] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  946.696575][T30716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11979'.
[  946.815750][ T5386] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  946.846477][ T5386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 200, setting to 64
[  946.874031][ T5386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  946.891242][ T5386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  946.903805][ T5386] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  946.940878][ T5386] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  946.976532][ T5386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.998528][ T5386] usb 1-1: config 0 descriptor??
[  947.009713][T30685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  947.237655][ T5386] usb 1-1: USB disconnect, device number 45
[  947.393614][T30740] loop5: detected capacity change from 0 to 2048
[  947.418560][T30741] loop1: detected capacity change from 0 to 2048
[  947.454188][T30745] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  947.488032][T30741]  loop1: p1 < > p3
[  947.505017][T30741] loop1: p3 size 134217728 extends beyond EOD, truncated
[  947.844668][ T4283] EXT4-fs (loop0): unmounting filesystem.
[  947.903094][ T8336] udevd[8336]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  947.951034][ T8334] udevd[8334]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  948.161686][T30759] libceph: resolve 'cϐ���' (ret=-3): failed
[  948.402592][   T27] audit: type=1326 audit(1780303795.621:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30769 comm="syz.2.12001" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac41d9ce59 code=0x7ffc0000
[  948.469596][T30773] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12003'.
[  948.697473][T30782] loop3: detected capacity change from 0 to 64
[  948.763842][T30786] netlink: 'syz.5.12009': attribute type 33 has an invalid length.
[  948.816606][T30786] netlink: 152 bytes leftover after parsing attributes in process `syz.5.12009'.
[  949.210603][T30800] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12016'.
[  949.784475][T30821] loop2: detected capacity change from 0 to 64
[  949.843765][T30821] syz.2.12027: attempt to access beyond end of device
[  949.843765][T30821] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64
[  949.891689][T30821] Buffer I/O error on dev loop2, logical block 512, async page read
[  949.934189][T30821] syz.2.12027: attempt to access beyond end of device
[  949.934189][T30821] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64
[  950.005795][T30821] Buffer I/O error on dev loop2, logical block 56576, async page read
[  950.303132][T30834] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  950.423788][T30802] loop1: detected capacity change from 0 to 32768
[  950.588724][T30845] loop2: detected capacity change from 0 to 128
[  950.666013][T30845] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  950.728801][T30845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  951.221202][T30861] loop1: detected capacity change from 0 to 2048
[  951.297442][T30861] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  951.700355][T30880] overlayfs: unrecognized mount option "\" or missing value
[  951.701752][T30879] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12053'.
[  952.224120][T30900] binder: 30897:30900 ioctl 400c620e 200000000240 returned -22
[  952.533778][T30914] loop1: detected capacity change from 0 to 16
[  952.567203][T30914] erofs: (device loop1): mounted with root inode @ nid 36.
[  952.741703][ T4330] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  952.961601][ T4330] usb 3-1: Using ep0 maxpacket: 16
[  952.968667][ T4330] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  953.021714][ T4330] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[  953.030787][ T4330] usb 3-1: config 1 has no interface number 1
[  953.077050][ T4330] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  953.106371][ T4330] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  953.161626][ T4330] usb 3-1: config 1 interface 105 has no altsetting 0
[  953.174920][ T4330] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  953.221605][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.229699][ T4330] usb 3-1: Product: syz
[  953.262388][ T4330] usb 3-1: Manufacturer: syz
[  953.267098][ T4330] usb 3-1: SerialNumber: syz
[  953.294749][T30910] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  953.522317][ T4330] aqc111: probe of 3-1:1.105 failed with error -22
[  953.738414][ T8088] usb 3-1: USB disconnect, device number 39
[  953.896326][T30964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12095'.
[  953.911738][ T4330] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  954.121708][ T4330] usb 1-1: Using ep0 maxpacket: 16
[  954.150708][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  954.179802][ T4330] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  954.199522][ T4330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.221631][ T4330] usb 1-1: Product: syz
[  954.225961][ T4330] usb 1-1: Manufacturer: syz
[  954.230634][ T4330] usb 1-1: SerialNumber: syz
[  954.257265][ T4330] usb 1-1: config 0 descriptor??
[  954.450144][T30958] loop3: detected capacity change from 0 to 32768
[  954.521408][ T4330] usb 1-1: USB disconnect, device number 46
[  955.285150][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  955.285167][   T27] audit: type=1326 audit(1780303802.501:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31002 comm="syz.5.12119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  955.367442][   T27] audit: type=1326 audit(1780303802.501:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31002 comm="syz.5.12119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5a5d9e6c7 code=0x7ffc0000
[  955.465185][   T27] audit: type=1326 audit(1780303802.541:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31002 comm="syz.5.12119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe5a5d5d68e code=0x7ffc0000
[  955.591098][   T27] audit: type=1326 audit(1780303802.541:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31002 comm="syz.5.12119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe5a5d5d68e code=0x7ffc0000
[  955.623966][   T27] audit: type=1326 audit(1780303802.541:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31002 comm="syz.5.12119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe5a5d5d68e code=0x7ffc0000
[  955.716851][   T27] audit: type=1326 audit(1780303802.541:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31002 comm="syz.5.12119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe5a5d5d68e code=0x7ffc0000
[  955.851797][   T27] audit: type=1326 audit(1780303802.541:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31002 comm="syz.5.12119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  956.401203][T31049] loop3: detected capacity change from 0 to 8
[  956.931976][T31070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12145'.
[  956.971852][T31071] IPv6: NLM_F_CREATE should be specified when creating new route
[  957.156679][T31077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12150'.
[  957.380280][T31085] loop0: detected capacity change from 0 to 64
[  957.705190][   T93] block nbd1: Attempted send on invalid socket
[  957.711634][   T93] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  957.741681][T31098] ADFS-fs (nbd1): error: unable to read block 3, try 0
[  958.423078][T31083] loop5: detected capacity change from 0 to 32768
[  958.509275][T31083] XFS (loop5): Mounting V5 Filesystem
[  958.673538][T31083] XFS (loop5): Ending clean mount
[  958.882285][T29054] XFS (loop5): Unmounting Filesystem
[  959.306692][T31152] netlink: 92 bytes leftover after parsing attributes in process `syz.3.12185'.
[  959.327675][T31152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  959.756725][   T27] audit: type=1326 audit(1780303806.971:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31169 comm="syz.2.12191" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac41d9ce59 code=0x7ffc0000
[  959.853242][   T27] audit: type=1326 audit(1780303807.011:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31169 comm="syz.2.12191" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac41d9ce59 code=0x7ffc0000
[  959.891922][T31174] x_tables: unsorted underflow at hook 2
[  959.911631][   T27] audit: type=1326 audit(1780303807.021:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31169 comm="syz.2.12191" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fac41d9ce59 code=0x7ffc0000
[  960.578010][T31196] tmpfs: Bad value for 'mpol'
[  960.685566][T31198] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  960.762595][T31198] overlayfs: missing 'lowerdir'
[  960.779809][T31204] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12210'.
[  961.041080][T31215] netlink: 216 bytes leftover after parsing attributes in process `syz.3.12215'.
[  962.139631][T31259] loop0: detected capacity change from 0 to 8
[  962.299316][T31264] loop2: detected capacity change from 0 to 2048
[  962.416428][T31269] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  962.860973][T31281] loop1: detected capacity change from 0 to 8
[  962.993841][T31281] SQUASHFS error: Failed to read block 0x6fc: -5
[  963.040478][T31281] SQUASHFS error: Unable to read metadata cache entry [6fa]
[  963.289558][T31263] loop5: detected capacity change from 0 to 32768
[  963.601824][ T5386] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  963.811637][ T5386] usb 2-1: Using ep0 maxpacket: 16
[  963.818764][ T5386] usb 2-1: config 0 has no interfaces?
[  963.844284][ T5386] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  963.867850][ T5386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  963.879216][T31315] loop0: detected capacity change from 0 to 64
[  963.892580][ T5386] usb 2-1: Product: syz
[  963.896824][ T5386] usb 2-1: Manufacturer: syz
[  963.901453][ T5386] usb 2-1: SerialNumber: syz
[  963.977636][ T5386] r8152-cfgselector 2-1: config 0 descriptor??
[  964.210502][ T5386] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  964.387450][T31329] loop5: detected capacity change from 0 to 256
[  964.425052][T31329] exfat: Deprecated parameter 'namecase'
[  964.431999][ T5386] usb 2-1: USB disconnect, device number 38
[  964.460248][T31329] exfat: Deprecated parameter 'utf8'
[  964.486180][T31329] exfat: Deprecated parameter 'namecase'
[  964.516149][T31329] exfat: Deprecated parameter 'utf8'
[  964.554449][T31329] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  964.598014][T31329] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  964.849789][T31324] syz.0.12267 (31324): drop_caches: 2
[  966.442452][T31398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12304'.
[  967.059475][T31420] loop3: detected capacity change from 0 to 512
[  967.164463][T31420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  967.231875][T31420] ext4 filesystem being mounted at /2411/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  967.475785][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  967.993378][T31431] loop2: detected capacity change from 0 to 32768
[  968.021653][ T4330] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  968.241931][ T4330] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  968.250922][ T4330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  968.299158][ T4330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  968.337265][ T4330] usb 4-1: config 1 has no interface number 0
[  968.363120][ T4330] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  968.411830][ T4330] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  968.468176][ T4330] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  968.516681][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.544034][ T4330] usb 4-1: Product: syz
[  968.548273][ T4330] usb 4-1: Manufacturer: syz
[  968.583888][ T4330] usb 4-1: SerialNumber: syz
[  968.917932][T31449] loop0: detected capacity change from 0 to 32768
[  968.924253][T31475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12340'.
[  968.956800][T31475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12340'.
[  968.966695][T31475] netlink: 23 bytes leftover after parsing attributes in process `syz.5.12340'.
[  968.981406][T31449] JBD2: Ignoring recovery information on journal
[  968.990683][T31475] netlink: 23 bytes leftover after parsing attributes in process `syz.5.12340'.
[  969.055708][ T5386] usb 4-1: USB disconnect, device number 54
[  969.201711][T31482] ieee802154 phy0 wpan0: encryption failed: -22
[  969.215213][T31449] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  969.327617][T31449] (syz.0.12328,31449,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1
[  969.379015][T31449] (syz.0.12328,31449,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  969.396786][T31449] (syz.0.12328,31449,0):ocfs2_mknod:298 ERROR: status = -2
[  969.411668][T31449] (syz.0.12328,31449,0):ocfs2_mknod:502 ERROR: status = -2
[  969.466786][ T4283] ocfs2: Unmounting device (7,0) on (node local)
[  969.814186][T31499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12352'.
[  970.083654][T31509] loop1: detected capacity change from 0 to 8
[  970.145575][T31509] SQUASHFS error: Unable to read directory block [1d0:0]
[  970.651166][T31527] loop5: detected capacity change from 0 to 2048
[  970.725803][T31533] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  970.798158][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  970.798177][   T27] audit: type=1800 audit(1780303818.011:483): pid=31527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12367" name="file1" dev="loop5" ino=2097152 res=0 errno=0
[  970.811641][ T4330] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  971.051619][ T4330] usb 3-1: Using ep0 maxpacket: 16
[  971.058680][ T4330] usb 3-1: config 0 has no interfaces?
[  971.075724][T31540] loop3: detected capacity change from 0 to 2048
[  971.090217][ T4330] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  971.111708][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  971.129308][T31540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  971.148589][ T4330] usb 3-1: Product: syz
[  971.158715][ T4330] usb 3-1: Manufacturer: syz
[  971.181956][ T4330] usb 3-1: SerialNumber: syz
[  971.186880][T31540] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a
[  971.209746][ T4330] r8152-cfgselector 3-1: config 0 descriptor??
[  971.236437][T31546] loop0: detected capacity change from 0 to 64
[  971.247357][T31540] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408)
[  971.441201][ T4330] usbip-host 3-1: 3-1 is not in match_busid table... skip!
[  971.723508][T26063] usb 3-1: USB disconnect, device number 40
[  971.914495][T31562] syz.1.12385 (31562): drop_caches: 2
[  971.938358][T31564] loop5: detected capacity change from 0 to 4096
[  971.964412][T31564] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512)
[  972.059311][T31564] ntfs3: loop5: mft corrupted
[  972.595045][T31552] loop0: detected capacity change from 0 to 32768
[  972.660014][T31552] XFS: attr2 mount option is deprecated.
[  972.828253][T31593] loop5: detected capacity change from 0 to 512
[  972.835003][T31552] XFS (loop0): Mounting V5 Filesystem
[  972.927180][T31593] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  972.941890][T31593] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  973.081011][T31552] XFS (loop0): Ending clean mount
[  973.106613][T31552] XFS (loop0): Quotacheck needed: Please wait.
[  973.186291][T29054] EXT4-fs (loop5): unmounting filesystem.
[  973.202288][T31552] XFS (loop0): Quotacheck: Done.
[  973.301327][ T4283] XFS (loop0): Unmounting Filesystem
[  973.582458][T31614] syz.2.12403 (31614): drop_caches: 2
[  974.314534][T31630] xt_CT: No such helper "snmp"
[  974.465516][T31647] netlink: 'syz.3.12420': attribute type 15 has an invalid length.
[  974.628521][T31655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12424'.
[  974.660780][T31655] device hsr0 left promiscuous mode
[  974.704670][T31655] bridge0: port 3(hsr0) entered disabled state
[  974.719540][T31657] syz.3.12421 (31657): drop_caches: 2
[  974.761370][T31655] device bridge_slave_1 left promiscuous mode
[  974.764486][T31661] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12425'.
[  974.777568][T31655] bridge0: port 2(bridge_slave_1) entered disabled state
[  974.797251][T31655] device bridge_slave_0 left promiscuous mode
[  974.819858][T31655] bridge0: port 1(bridge_slave_0) entered disabled state
[  975.175480][T31673] netlink: 'syz.1.12433': attribute type 33 has an invalid length.
[  975.211672][T31673] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12433'.
[  975.337490][ T4330] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  975.533855][ T4330] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  975.572144][ T4330] usb 1-1: config 0 interface 0 has no altsetting 0
[  975.589445][ T4330] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  975.616023][ T4330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  975.647718][ T4330] usb 1-1: Product: syz
[  975.657016][ T4330] usb 1-1: Manufacturer: syz
[  975.659139][T31692] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12441'.
[  975.662365][ T4330] usb 1-1: SerialNumber: syz
[  975.700152][ T4330] usb 1-1: config 0 descriptor??
[  975.729058][ T4330] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  975.800378][ T4330] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  975.823775][ T4330] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  975.837367][ T4330] usb 1-1: media controller created
[  975.921308][ T4330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  976.209578][T31710] loop3: detected capacity change from 0 to 64
[  976.241932][T31710] syz.3.12451: attempt to access beyond end of device
[  976.241932][T31710] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64
[  976.284662][T31710] Buffer I/O error on dev loop3, logical block 512, async page read
[  976.324831][ T4330] DVB: Unable to find symbol tda10046_attach()
[  976.329700][T31710] syz.3.12451: attempt to access beyond end of device
[  976.329700][T31710] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64
[  976.331061][ T4330] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  976.331079][ T4330] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  976.454690][T31710] Buffer I/O error on dev loop3, logical block 56576, async page read
[  976.559717][ T4330] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71
[  976.602196][ T4330] usb 1-1: USB disconnect, device number 47
[  976.660091][T31720] loop5: detected capacity change from 0 to 2048
[  976.735145][T31720]  loop5: p1 < > p3
[  976.741438][T31720] loop5: p3 size 134217728 extends beyond EOD, truncated
[  976.918412][T31730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12456'.
[  977.039014][   T27] audit: type=1326 audit(1780303824.251:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31731 comm="syz.5.12459" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  977.125792][ T8334] udevd[8334]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  977.137278][   T27] audit: type=1326 audit(1780303824.261:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31731 comm="syz.5.12459" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  977.149800][ T8336] udevd[8336]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  977.277174][   T27] audit: type=1326 audit(1780303824.261:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31731 comm="syz.5.12459" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  977.344039][T31741] loop1: detected capacity change from 0 to 64
[  977.369297][   T27] audit: type=1326 audit(1780303824.261:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31731 comm="syz.5.12459" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a5d9ce59 code=0x7ffc0000
[  977.558121][T31745] loop3: detected capacity change from 0 to 512
[  977.570300][T31748] xt_hashlimit: invalid rate
[  977.617638][T31745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  977.651235][T31745] ext4 filesystem being mounted at /2439/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  977.991958][T26063] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  978.203710][T26063] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  978.238645][T26063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 200, setting to 64
[  978.261163][T26063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  978.286766][T26063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  978.322664][T26063] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  978.356756][T26063] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  978.420694][T26063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  978.449618][T26063] usb 4-1: config 0 descriptor??
[  978.469179][T31745] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  978.540978][T31747] loop2: detected capacity change from 0 to 32768
[  978.575440][T31747] XFS: attr2 mount option is deprecated.
[  978.671069][T31747] XFS (loop2): Mounting V5 Filesystem
[  978.771849][ T8088] usb 4-1: USB disconnect, device number 55
[  978.829717][T31747] XFS (loop2): Ending clean mount
[  978.885435][T31747] XFS (loop2): Quotacheck needed: Please wait.
[  978.962803][T31747] XFS (loop2): Quotacheck: Done.
[  979.060451][ T4293] XFS (loop2): Unmounting Filesystem
[  979.172107][T31805] loop0: detected capacity change from 0 to 128
[  979.257853][T31805] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  979.307014][T31805] ext4 filesystem being mounted at /2423/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  979.452076][T31805] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.12498: reserved inode found cleared - inode=2
[  979.489942][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  979.662633][ T4283] EXT4-fs (loop0): unmounting filesystem.
[  980.554547][T31854] loop5: detected capacity change from 0 to 128
[  980.617814][T31854] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  980.650327][T31854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  980.871784][ T4330] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  981.061624][ T4330] usb 2-1: Using ep0 maxpacket: 16
[  981.069621][ T4330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  981.132752][ T4330] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  981.168273][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.191963][ T4330] usb 2-1: Product: syz
[  981.196204][ T4330] usb 2-1: Manufacturer: syz
[  981.221302][ T4330] usb 2-1: SerialNumber: syz
[  981.240463][ T4330] usb 2-1: config 0 descriptor??
[  981.479709][ T4330] usb 2-1: USB disconnect, device number 39
[  982.139585][T31881] loop0: detected capacity change from 0 to 32768
[  982.271619][ T4330] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  982.493547][ T4330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  982.535598][ T4330] usb 4-1: config 0 interface 0 has no altsetting 0
[  982.566698][ T4330] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  982.590034][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.641295][ T4330] usb 4-1: Product: syz
[  982.664982][ T4330] usb 4-1: Manufacturer: syz
[  982.669762][ T4330] usb 4-1: SerialNumber: syz
[  982.696313][ T4330] usb 4-1: config 0 descriptor??
[  982.705741][T31925] IPv6: NLM_F_CREATE should be specified when creating new route
[  982.728857][ T4330] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  982.778116][ T4330] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  982.830115][ T4330] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  982.834713][T31929] loop2: detected capacity change from 0 to 8
[  982.863954][ T4330] usb 4-1: media controller created
[  982.971318][ T4330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  983.268335][ T4330] DVB: Unable to find symbol tda10046_attach()
[  983.275404][ T4330] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  983.291457][ T4330] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  983.438675][T31947] loop2: detected capacity change from 0 to 64
[  983.509625][ T4330] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71
[  983.532142][ T4330] usb 4-1: USB disconnect, device number 56
[  983.919107][T31957] x_tables: unsorted underflow at hook 2
[  983.963425][T31959] dlm: no locking on control device
[  984.136946][T31939] loop1: detected capacity change from 0 to 32768
[  984.254961][T31939] XFS (loop1): Mounting V5 Filesystem
[  984.346763][T31981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12567'.
[  984.375841][T31939] XFS (loop1): Ending clean mount
[  984.592332][ T4291] XFS (loop1): Unmounting Filesystem
[  985.146352][   T27] audit: type=1326 audit(1780303832.361:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32001 comm="syz.3.12579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  985.257149][   T27] audit: type=1326 audit(1780303832.411:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32001 comm="syz.3.12579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  985.299721][   T27] audit: type=1326 audit(1780303832.411:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32001 comm="syz.3.12579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  985.398595][   T27] audit: type=1326 audit(1780303832.411:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32001 comm="syz.3.12579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  985.433635][T32011] netlink: 'syz.0.12582': attribute type 1 has an invalid length.
[  985.472337][   T27] audit: type=1326 audit(1780303832.411:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32001 comm="syz.3.12579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  985.511847][T32011] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.12582'.
[  985.558951][   T27] audit: type=1326 audit(1780303832.411:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32001 comm="syz.3.12579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  985.636671][   T27] audit: type=1326 audit(1780303832.411:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32001 comm="syz.3.12579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  985.723613][   T27] audit: type=1326 audit(1780303832.411:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32001 comm="syz.3.12579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  986.068922][T32036] netlink: 56 bytes leftover after parsing attributes in process `syz.5.12593'.
[  986.140102][T32041] loop2: detected capacity change from 0 to 8
[  986.170506][T32043] loop1: detected capacity change from 0 to 1024
[  986.259668][T32041] SQUASHFS error: Failed to read block 0x6fc: -5
[  986.291971][T32041] SQUASHFS error: Unable to read metadata cache entry [6fa]
[  986.958785][T32067] netlink: 'syz.5.12610': attribute type 28 has an invalid length.
[  987.002251][T32067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12610'.
[  988.258759][T32122] loop5: detected capacity change from 0 to 8
[  988.321806][T32122] SQUASHFS error: Failed to read block 0x6fc: -5
[  988.350039][T32122] SQUASHFS error: Unable to read metadata cache entry [6fa]
[  988.843009][T32112] loop2: detected capacity change from 0 to 32768
[  988.866711][T32112] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  988.950582][ T4293] ocfs2: Unmounting device (7,2) on (node local)
[  988.990750][T32146] Unsupported ieee802154 address type: 0
[  989.088282][T26063] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  989.301613][T26063] usb 4-1: Using ep0 maxpacket: 8
[  989.318534][T26063] usb 4-1: config 30 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  989.348918][T26063] usb 4-1: config 30 interface 0 has no altsetting 0
[  989.365855][T26063] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  989.385883][T26063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.416309][T26063] usb 4-1: Product: syz
[  989.420556][T26063] usb 4-1: Manufacturer: syz
[  989.441546][T26063] usb 4-1: SerialNumber: syz
[  989.489932][T26063] snd_usb_toneport 4-1:30.0: Line 6 TonePort UX2 found
[  989.689264][T26063] snd_usb_toneport 4-1:30.0: cannot get proper max packet size
[  989.716111][T26063] snd_usb_toneport 4-1:30.0: Line 6 TonePort UX2 now disconnected
[  989.752956][T26063] snd_usb_toneport: probe of 4-1:30.0 failed with error -22
[  989.906634][T26063] usb 4-1: USB disconnect, device number 57
[  989.928828][T32151] loop0: detected capacity change from 0 to 32768
[  991.099668][T32211] loop5: detected capacity change from 0 to 512
[  991.132116][T32211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  991.224843][T32211] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  991.241296][T32213] loop1: detected capacity change from 0 to 4096
[  991.248565][T32211] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  991.360509][T32211] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:337: inode #15: comm syz.5.12678: verity file corrupted; can't find descriptor
[  991.443401][T32211] EXT4-fs (loop5): Remounting filesystem read-only
[  991.491621][T32211] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size
[  991.714732][T29054] EXT4-fs (loop5): unmounting filesystem.
[  992.205447][T32249] libceph: resolve '96.' (ret=-3): failed
[  992.924272][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  992.930870][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  993.166547][T32289] Unsupported ieee802154 address type: 0
[  993.548205][T32303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12730'.
[  993.981405][T32319] loop2: detected capacity change from 0 to 512
[  994.041608][T32319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  994.117574][T32319] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  994.189694][T32319] ext4 filesystem being mounted at /2614/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  994.249758][   T27] audit: type=1326 audit(1780303841.461:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32332 comm="syz.3.12735" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  994.273975][    C1] vkms_vblank_simulate: vblank timer overrun
[  994.318382][T32319] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:337: inode #15: comm syz.2.12726: verity file corrupted; can't find descriptor
[  994.351897][   T27] audit: type=1326 audit(1780303841.471:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32332 comm="syz.3.12735" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  994.379725][T32336] loop0: detected capacity change from 0 to 128
[  994.416548][T32319] EXT4-fs (loop2): Remounting filesystem read-only
[  994.432690][T32319] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size
[  994.436176][T32336] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  994.441302][   T27] audit: type=1326 audit(1780303841.471:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32332 comm="syz.3.12735" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  994.537375][T32336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  994.591623][   T27] audit: type=1326 audit(1780303841.471:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32332 comm="syz.3.12735" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  994.690235][   T27] audit: type=1326 audit(1780303841.471:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32332 comm="syz.3.12735" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  994.715319][ T4293] EXT4-fs (loop2): unmounting filesystem.
[  994.780358][T32345] netlink: 'syz.1.12741': attribute type 49 has an invalid length.
[  994.788899][   T27] audit: type=1326 audit(1780303841.471:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32332 comm="syz.3.12735" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  994.814080][ T4330] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  994.891695][   T27] audit: type=1326 audit(1780303841.471:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32332 comm="syz.3.12735" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fde46b9ce59 code=0x7ffc0000
[  994.936211][T32349] libceph: resolve '96.' (ret=-3): failed
[  995.041771][ T4330] usb 6-1: Using ep0 maxpacket: 16
[  995.058385][ T4330] usb 6-1: config 0 has an invalid interface number: 66 but max is 0
[  995.086989][ T4330] usb 6-1: config 0 has no interface number 0
[  995.111390][ T4330] usb 6-1: config 0 interface 66 has no altsetting 0
[  995.155932][ T4330] usb 6-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa
[  995.187889][ T4330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.201641][ T4330] usb 6-1: Product: syz
[  995.205873][ T4330] usb 6-1: Manufacturer: syz
[  995.231619][ T4330] usb 6-1: SerialNumber: syz
[  995.262586][ T4330] usb 6-1: config 0 descriptor??
[  995.488578][ T4330] usb 6-1: selecting invalid altsetting 3
[  995.500102][ T4330] comedi comedi5: could not set alternate setting 3 in high speed
[  995.516628][ T4330] usbduxsigma 6-1:0.66: driver 'usbduxsigma' failed to auto-configure device.
[  995.525852][T32361] loop0: detected capacity change from 0 to 4096
[  995.533232][T32369] loop3: detected capacity change from 0 to 512
[  995.543703][T32369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  995.552301][T32361] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  995.567828][ T4330] usbduxsigma: probe of 6-1:0.66 failed with error -22
[  995.586323][ T4330] usb 6-1: USB disconnect, device number 3
[  995.631141][T32369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  995.672633][T32361] ntfs3: loop0: mft corrupted
[  995.676357][T32369] ext4 filesystem being mounted at /2487/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  995.782553][T32369] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:337: inode #15: comm syz.3.12751: verity file corrupted; can't find descriptor
[  995.842853][T32369] EXT4-fs (loop3): Remounting filesystem read-only
[  995.886695][T32369] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  996.043925][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  996.058100][T32383] netlink: 'syz.0.12757': attribute type 75 has an invalid length.
[  996.333377][T32394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12760'.
[  996.356627][T32386] loop2: detected capacity change from 0 to 4096
[  996.445150][T32396] xt_TPROXY: Can be used only with -p tcp or -p udp
[  996.968648][T32414] loop1: detected capacity change from 0 to 512
[  997.014979][T32414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  997.051960][T32416] loop0: detected capacity change from 0 to 1024
[  997.098173][T32416] EXT4-fs (loop0): orphan cleanup on readonly fs
[  997.120068][T32416] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  997.166703][T32416] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  997.183068][T32414] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  997.211664][T32416] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.12774: Failed to acquire dquot type 0
[  997.234781][T32414] ext4 filesystem being mounted at /2574/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  997.295511][T32416] EXT4-fs (loop0): 1 truncate cleaned up
[  997.315404][T32414] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.12772: verity file corrupted; can't find descriptor
[  997.341951][T32416] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  997.362419][T32416] EXT4-fs (loop0): unmounting filesystem.
[  997.400738][T32414] EXT4-fs (loop1): Remounting filesystem read-only
[  997.422933][T32414] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size
[  997.623729][ T4291] EXT4-fs (loop1): unmounting filesystem.
[  997.968459][T32412] loop3: detected capacity change from 0 to 32768
[  998.025883][T32412] 
[  998.025883][T32412]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  998.025883][T32412] 
[  998.242862][ T7489] 
[  998.242862][ T7489]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  998.242862][ T7489] 
[  998.258572][ T7489] 
[  998.258572][ T7489]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  998.258572][ T7489] 
[  998.304197][  T107] 
[  998.304197][  T107]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  998.304197][  T107] 
[  998.326795][ T4287] 
[  998.326795][ T4287]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  998.326795][ T4287] 
[  998.376890][ T4287] 
[  998.376890][ T4287]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  998.376890][ T4287] 
[  998.798418][T32431] loop0: detected capacity change from 0 to 32768
[  998.912239][T32463] MTD: Couldn't look up './bus': -15
[  999.461739][ T8089] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  999.641889][ T8089] usb 6-1: Using ep0 maxpacket: 8
[  999.649027][ T8089] usb 6-1: config 30 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  999.660645][ T8089] usb 6-1: config 30 interface 0 has no altsetting 0
[  999.681617][ T8089] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  999.721654][ T8089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.746211][T32457] loop1: detected capacity change from 0 to 32768
[  999.753116][ T8089] usb 6-1: Product: syz
[  999.757335][ T8089] usb 6-1: Manufacturer: syz
[  999.763929][ T8089] usb 6-1: SerialNumber: syz
[  999.782116][ T8089] snd_usb_toneport 6-1:30.0: Line 6 TonePort UX2 found
[  999.806594][T32457] JBD2: Ignoring recovery information on journal
[  999.907536][T32457] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  999.921759][ T4330] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  999.989020][T32457] (syz.1.12793,32457,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1
[ 1000.009357][ T8089] snd_usb_toneport 6-1:30.0: cannot get proper max packet size
[ 1000.017733][T32457] (syz.1.12793,32457,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[ 1000.027269][ T8089] snd_usb_toneport 6-1:30.0: Line 6 TonePort UX2 now disconnected
[ 1000.043246][ T8089] snd_usb_toneport: probe of 6-1:30.0 failed with error -22
[ 1000.062561][T32457] (syz.1.12793,32457,0):ocfs2_mknod:298 ERROR: status = -2
[ 1000.075686][T32457] (syz.1.12793,32457,0):ocfs2_mknod:502 ERROR: status = -2
[ 1000.111768][ T4330] usb 1-1: Using ep0 maxpacket: 16
[ 1000.125435][ T4330] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255
[ 1000.140834][T32496] tmpfs: Bad value for 'mpol'
[ 1000.148208][ T4330] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1000.181614][ T4330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.201731][ T4330] usb 1-1: Product: syz
[ 1000.205967][ T4330] usb 1-1: Manufacturer: syz
[ 1000.244172][ T4330] usb 1-1: SerialNumber: syz
[ 1000.263705][ T4856] usb 6-1: USB disconnect, device number 4
[ 1000.272665][ T4330] usb 1-1: config 0 descriptor??
[ 1000.280858][ T4291] ocfs2: Unmounting device (7,1) on (node local)
[ 1000.323129][T32483] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1000.368759][ T4330] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected
[ 1000.550118][    C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71)
[ 1000.556323][    C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71)
[ 1000.568632][ T4856] usb 1-1: USB disconnect, device number 48
[ 1000.580372][ T4856] mcba_usb 1-1:0.0 can0: device disconnected
[ 1000.923094][T32515] loop2: detected capacity change from 0 to 128
[ 1001.005528][T32515] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1001.071720][T32515] hpfs: filesystem error: improperly stopped
[ 1001.077793][T32515] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1001.107191][T32521] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 1001.127168][T32515] hpfs: You really don't want any checks? You are crazy...
[ 1001.141694][T32515] hpfs: Code page index out of array
[ 1001.151831][T32515] hpfs: code page support is disabled
[ 1001.176454][T32515] hpfs: hpfs_map_4sectors(): unaligned read
[ 1001.194190][T32523] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1001.206261][T32515] hpfs: hpfs_map_4sectors(): unaligned read
[ 1001.218000][T32515] hpfs: filesystem error: unable to find root dir
[ 1001.364903][T32527] loop5: detected capacity change from 0 to 2048
[ 1001.428399][T32530] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1001.778691][T32542] loop5: detected capacity change from 0 to 128
[ 1002.011849][T32549] netlink: 'syz.1.12833': attribute type 21 has an invalid length.
[ 1002.019848][T32549] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1002.333234][T32564] SET target dimension over the limit!
[ 1002.485560][T32568] loop2: detected capacity change from 0 to 128
[ 1002.595595][T32568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1002.658623][T32568] ext4 filesystem being mounted at /2642/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1002.690889][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1002.917603][T32568] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.12850: reserved inode found cleared - inode=2
[ 1003.018579][T32586] loop3: detected capacity change from 0 to 1024
[ 1003.077099][T32586] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1003.104401][T32586] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[ 1003.127453][ T4293] EXT4-fs (loop2): unmounting filesystem.
[ 1003.199493][T32586] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[ 1003.267278][T32586] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.12846: Failed to acquire dquot type 0
[ 1003.319888][T32586] EXT4-fs (loop3): 1 truncate cleaned up
[ 1003.348013][T32586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1003.397832][T32586] EXT4-fs (loop3): unmounting filesystem.
[ 1003.462918][T32596] netlink: 'syz.0.12860': attribute type 21 has an invalid length.
[ 1003.703546][T32555] loop5: detected capacity change from 0 to 32768
[ 1004.067312][T32614] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 1004.188892][T32618] x_tables: unsorted underflow at hook 2
[ 1004.442013][T32624] MTD: Couldn't look up './bus': -15
[ 1004.455837][T32626] loop5: detected capacity change from 0 to 256
[ 1004.508845][T32626] exfat: Deprecated parameter 'utf8'
[ 1004.571011][T32626] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[ 1005.101995][T32602] loop2: detected capacity change from 0 to 32768
[ 1005.156377][T32602] 
[ 1005.156377][T32602]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1005.156377][T32602] 
[ 1005.292583][T32644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12879'.
[ 1005.357091][T32644] netlink: 140 bytes leftover after parsing attributes in process `syz.0.12879'.
[ 1005.368817][ T7507] 
[ 1005.368817][ T7507]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1005.368817][ T7507] 
[ 1005.418662][ T7507] 
[ 1005.418662][ T7507]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1005.418662][ T7507] 
[ 1005.470327][ T4293] 
[ 1005.470327][ T4293]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1005.470327][ T4293] 
[ 1005.499820][ T4293] 
[ 1005.499820][ T4293]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1005.499820][ T4293] 
[ 1005.542536][  T107] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN
[ 1005.554323][  T107] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[ 1005.562875][  T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted syzkaller #0
[ 1005.570105][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1005.577870][T32652] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 1005.580168][  T107] RIP: 0010:lmLogSync+0x14b/0x9e0
[ 1005.597479][  T107] Code: 8d b8 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 03 6d e0 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 e7 6c e0 fe 49 8b 3f e8 cf 8c b8 fe
[ 1005.617111][  T107] RSP: 0018:ffffc90002d37c60 EFLAGS: 00010206
[ 1005.623190][  T107] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 0d190bbae8576f00
[ 1005.631171][  T107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1005.639145][  T107] RBP: ffffc90002d37d68 R08: ffffc90002d37bc7 R09: ffffc90002d37b84
[ 1005.647125][  T107] R10: dffffc0000000000 R11: fffff520005a6f79 R12: ffff888024063000
[ 1005.655111][  T107] R13: ffffc90002d37cc0 R14: ffff88807565b838 R15: 0000000000000030
[ 1005.663334][  T107] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1005.672444][  T107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1005.679032][  T107] CR2: 00007fde479456b8 CR3: 000000005ad3d000 CR4: 00000000003506e0
[ 1005.687013][  T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1005.694991][  T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1005.702982][  T107] Call Trace:
[ 1005.706275][  T107]  <TASK>
[ 1005.709216][  T107]  ? lmWriteRecord+0x1ac0/0x1ac0
[ 1005.714173][  T107]  ? __rwlock_init+0x140/0x140
[ 1005.719067][  T107]  jfs_syncpt+0x77/0x90
[ 1005.723230][  T107]  txEnd+0x2e1/0x520
[ 1005.727137][  T107]  jfs_lazycommit+0x5a0/0xa70
[ 1005.731825][  T107]  ? txFreelock+0x5a0/0x5a0
[ 1005.736336][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 1005.742329][  T107]  ? do_task_dead+0xd0/0xd0
[ 1005.746922][  T107]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1005.752838][  T107]  ? __kthread_parkme+0x162/0x1c0
[ 1005.758004][  T107]  kthread+0x29d/0x330
[ 1005.762078][  T107]  ? txFreelock+0x5a0/0x5a0
[ 1005.766605][  T107]  ? kthread_blkcg+0xd0/0xd0
[ 1005.771200][  T107]  ret_from_fork+0x1f/0x30
[ 1005.775649][  T107]  </TASK>
[ 1005.778675][  T107] Modules linked in:
[ 1005.782637][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1005.807120][  T107] ---[ end trace 0000000000000000 ]---
[ 1005.816093][  T107] RIP: 0010:lmLogSync+0x14b/0x9e0
[ 1005.821280][  T107] Code: 8d b8 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 03 6d e0 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 e7 6c e0 fe 49 8b 3f e8 cf 8c b8 fe
[ 1005.857919][  T107] RSP: 0018:ffffc90002d37c60 EFLAGS: 00010206
[ 1005.864334][  T107] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 0d190bbae8576f00
[ 1005.872799][  T107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1005.880868][  T107] RBP: ffffc90002d37d68 R08: ffffc90002d37bc7 R09: ffffc90002d37b84
[ 1005.889528][  T107] R10: dffffc0000000000 R11: fffff520005a6f79 R12: ffff888024063000
[ 1005.899639][  T107] R13: ffffc90002d37cc0 R14: ffff88807565b838 R15: 0000000000000030
[ 1005.915263][  T107] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1005.925848][  T107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1005.933049][  T107] CR2: 00007fe5a5fea2f8 CR3: 000000005ecc9000 CR4: 00000000003506f0
[ 1005.941159][  T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1005.950755][  T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1005.959302][  T107] Kernel panic - not syncing: Fatal exception
[ 1005.965550][  T107] Kernel Offset: disabled
[ 1005.969879][  T107] Rebooting in 86400 seconds..