last executing test programs:
1.975562754s ago: executing program 0 (id=3098):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)
1.821577613s ago: executing program 0 (id=3101):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x54, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0x4}]}, 0x54}}, 0x0)
1.650404673s ago: executing program 0 (id=3104):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0)
1.510756481s ago: executing program 1 (id=3105):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000180)={0x20, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x5, 0xd, 0x0, 0x1, [@generic="a9"]}, @typed={0x8, 0x136, 0x0, 0x0, @fd}]}, 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
1.500435382s ago: executing program 0 (id=3106):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90524fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
1.359247521s ago: executing program 1 (id=3107):
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040))
1.280251185s ago: executing program 0 (id=3108):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0xfd, 0x6216, &(0x7f000000cb40)="$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")
lsetxattr$security_ima(&(0x7f0000000240)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x17}, 0x2, 0x0)
1.208232309s ago: executing program 1 (id=3110):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004)
1.049735708s ago: executing program 1 (id=3113):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x3, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9e})
925.246485ms ago: executing program 3 (id=3114):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_STP_STATE={0x8}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c824}, 0x0)
878.647559ms ago: executing program 2 (id=3115):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xf}, {0xf}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x7, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
672.813051ms ago: executing program 2 (id=3116):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1})
622.982334ms ago: executing program 3 (id=3117):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fec0000000000e1208000f0100810401a80016ea1f00064003030006000600090000145c0461c1d67f6f94642a052cae406401a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
543.725018ms ago: executing program 1 (id=3118):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f000000880870fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
527.131269ms ago: executing program 2 (id=3119):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000280)="feaae6", 0x0}, 0x20)
490.191241ms ago: executing program 3 (id=3120):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1f7b74da83459de8}]}}}]}, 0x3c}}, 0x5821c98b097a09f2)
350.264749ms ago: executing program 2 (id=3121):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0)
339.77134ms ago: executing program 3 (id=3122):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
274.102894ms ago: executing program 1 (id=3123):
syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6c617a7974696d652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313235342c6661756c745f747970653d30303030303030303030303030303033323736372c6772706a71756f74613d2c6e6f666c7573685f6d657267652c6e6f636865636b706f696e745f6d657267652c61636c2c67635f6d657267652c636f6d70726573735f63616368652c616c6c6f635f6d6f64653d64656661756c742c6e6f696e6c696e655f78617474722c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c00cef235c93369e015a17ee2ff7fb3ad2b9406058804552c36be902e976d7836f82ef7fe1a91fd5fe53fa7c93ff6227910f46434ee3e5b851845bcaeb4a5731075f9887d22e18a989131940a04c4b9064af9cc9519dd7aa9078ad5ac798fbd81aa90dd19ce130ce6f37c3303199b6026122d39fdf5de1d4949e33dfbf7"], 0x4, 0x550c, &(0x7f00000089c0)="$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")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
204.015238ms ago: executing program 3 (id=3124):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00')
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="83", 0x1}], 0x1)
181.362379ms ago: executing program 2 (id=3125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
46.914327ms ago: executing program 2 (id=3126):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)="98bd80d1b51facd6bb49000000000000000300000000", 0x16}, 0x1, 0x0, 0x0, 0x24000085}, 0x24040090)
6.72467ms ago: executing program 0 (id=3127):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x5, '\x00', @buffer={"be97fa44a04f306e3b851e23d99db5c3f4d94447056ef1cffbb7e5fa02219005", 0x20}, 0x14}]})
0s ago: executing program 3 (id=3128):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2, @mcast2, 0x7800, 0x80, 0x5, 0x9}})
kernel console output (not intermixed with test programs):
p1: detected capacity change from 0 to 4096
[ 176.304620][ T8580] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[ 176.492383][ T8580] ntfs3: loop1: failed to convert "c46c" to macromanian
[ 176.668199][ T8590] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1218'.
[ 176.872396][ T51] Bluetooth: hci3: command tx timeout
[ 176.889821][ T8594] loop3: detected capacity change from 0 to 16
[ 176.900090][ T8577] loop0: detected capacity change from 0 to 32768
[ 176.917745][ T8577] (syz.0.1211,8577,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 176.944082][ T8594] erofs: (device loop3): mounted with root inode @ nid 36.
[ 176.965468][ T8594] erofs: (device loop3): z_erofs_read_folio: read error -95 @ 8200 of nid 36
[ 176.995849][ T8577] (syz.0.1211,8577,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 177.083909][ T8577] JBD2: Ignoring recovery information on journal
[ 177.252632][ T8577] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 177.503150][ T5771] ocfs2: Unmounting device (7,0) on (node local)
[ 177.931523][ T8616] delete_channel: no stack
[ 178.092333][ T8623] program syz.2.1231 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 178.162050][ T8626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1234'.
[ 178.260812][ T8628] bond0: Error: Cannot enslave bond to itself.
[ 178.514050][ T8640] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 178.549487][ T8640] overlayfs: conflicting options: metacopy=off,verity=require
[ 178.909010][ T8653] geneve2: entered allmulticast mode
[ 179.192467][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'.
[ 179.201459][ T8663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1251'.
[ 179.646759][ T5835] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[ 179.656257][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1259'.
[ 179.682229][ T8680] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1259'.
[ 179.691284][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1259'.
[ 179.712844][ T8680] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1259'.
[ 179.837298][ T5835] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 179.871359][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 179.880559][ T5835] usb 4-1: Product: syz
[ 179.902315][ T5835] usb 4-1: Manufacturer: syz
[ 179.906985][ T5835] usb 4-1: SerialNumber: syz
[ 179.923784][ T5835] r8152-cfgselector 4-1: config 0 descriptor??
[ 180.015124][ T8690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1263'.
[ 180.172408][ T5835] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[ 180.356416][ T23] usb 4-1: USB disconnect, device number 9
[ 180.754909][ T8713] netlink: 'syz.2.1275': attribute type 32 has an invalid length.
[ 180.897901][ T8718] mmap: syz.0.1284 (8718): VmData 49217536 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[ 181.151992][ T8726] netlink: 'syz.1.1280': attribute type 1 has an invalid length.
[ 181.505701][ T8746] netlink: 'syz.1.1288': attribute type 32 has an invalid length.
[ 181.651123][ T8751] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1293'.
[ 182.278089][ T8747] loop0: detected capacity change from 0 to 32768
[ 182.564197][ T8769] loop3: detected capacity change from 0 to 8192
[ 182.646677][ T8773] loop0: detected capacity change from 0 to 1024
[ 182.873883][ T1091] hfsplus: b-tree write err: -5, ino 4
[ 183.272275][ T8793] sock: sock_timestamping_bind_phc: sock not bind to device
[ 183.778784][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 183.918067][ T8818] loop3: detected capacity change from 0 to 2048
[ 183.932290][ T7540] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 183.998618][ T9] usb 2-1: Using ep0 maxpacket: 16
[ 184.027865][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 184.047496][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 184.072164][ T9] usb 2-1: Product: syz
[ 184.076475][ T9] usb 2-1: Manufacturer: syz
[ 184.088853][ T9] usb 2-1: SerialNumber: syz
[ 184.119480][ T9] usb 2-1: config 0 descriptor??
[ 184.132386][ T7540] usb 3-1: Using ep0 maxpacket: 16
[ 184.155594][ T9] visor 2-1:0.0: Sony Clie 3.5 converter detected
[ 184.161390][ T7540] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[ 184.180771][ T7540] usb 3-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config
[ 184.212002][ T7540] usb 3-1: config 0 has no interface number 0
[ 184.234859][ T7540] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 184.255276][ T7540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 184.278870][ T7540] usb 3-1: Product: syz
[ 184.290491][ T7540] usb 3-1: Manufacturer: syz
[ 184.302167][ T7540] usb 3-1: SerialNumber: syz
[ 184.334565][ T7540] usb 3-1: config 0 descriptor??
[ 184.431662][ T9] usb 2-1: clie_3_5_startup: get config number bad return length: 0
[ 184.456952][ T9] visor: probe of 2-1:0.0 failed with error -5
[ 184.589787][ T7540] usb 3-1: USB disconnect, device number 10
[ 184.658091][ T786] usb 2-1: USB disconnect, device number 8
[ 184.822490][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 185.012210][ T23] usb 4-1: Using ep0 maxpacket: 32
[ 185.021444][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[ 185.038836][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 185.048458][ T23] usb 4-1: Product: syz
[ 185.058328][ T23] usb 4-1: Manufacturer: syz
[ 185.065995][ T23] usb 4-1: SerialNumber: syz
[ 185.081676][ T23] usb 4-1: config 0 descriptor??
[ 185.299091][ T23] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device:
[ 185.321388][ T23] eb 9a 47 80 9b f8 7a f0
[ 185.331752][ T23] snd-usb-6fire: probe of 4-1:0.0 failed with error -5
[ 185.462432][ T1190] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 185.517448][ T5835] usb 4-1: USB disconnect, device number 10
[ 185.606988][ T8862] loop1: detected capacity change from 0 to 1024
[ 185.641880][ T8862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 185.662699][ T1190] usb 1-1: Using ep0 maxpacket: 32
[ 185.675237][ T1190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 185.693803][ T8862] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.1348: Attempting to read directory block (623) that is past i_size (638464)
[ 185.710811][ T1190] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[ 185.714040][ T8862] EXT4-fs (loop1): Remounting filesystem read-only
[ 185.748019][ T1190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 185.764604][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 185.782352][ T1190] usb 1-1: Product: syz
[ 185.786550][ T1190] usb 1-1: Manufacturer: syz
[ 185.791170][ T1190] usb 1-1: SerialNumber: syz
[ 185.830978][ T1190] usb 1-1: config 0 descriptor??
[ 185.871515][ T8871] netlink: 'syz.2.1352': attribute type 10 has an invalid length.
[ 185.887187][ T8871] team0: Device ipvlan1 failed to register rx_handler
[ 185.938306][ T8873] loop1: detected capacity change from 0 to 128
[ 186.106011][ T1190] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 186.216600][ T28] audit: type=1326 audit(1770679278.933:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 186.240983][ T28] audit: type=1326 audit(1770679278.933:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 186.275256][ T28] audit: type=1326 audit(1770679278.993:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 186.309843][ T23] usb 1-1: USB disconnect, device number 7
[ 186.323674][ T28] audit: type=1326 audit(1770679278.993:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 186.380342][ T28] audit: type=1326 audit(1770679278.993:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 186.731767][ T8897] netlink: 'syz.1.1363': attribute type 1 has an invalid length.
[ 186.746430][ T8897] netlink: 'syz.1.1363': attribute type 3 has an invalid length.
[ 186.772273][ T8897] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1363'.
[ 187.207097][ T8920] netlink: 'syz.3.1375': attribute type 12 has an invalid length.
[ 187.867210][ T8951] loop1: detected capacity change from 0 to 256
[ 188.162343][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1397'.
[ 188.437538][ T8975] overlay: Bad value for 'metacopy'
[ 188.735426][ T8991] netlink: 'syz.2.1410': attribute type 1 has an invalid length.
[ 188.954222][ T28] audit: type=1326 audit(1770679281.673:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d339af79 code=0x7ffc0000
[ 188.976510][ C0] vkms_vblank_simulate: vblank timer overrun
[ 188.998927][ T8997] kernel read not supported for file /½ Iqî"ûIvÃQhþµ “3žJÇÈyûxÐîÃüv÷Lª=QÿW-™. Gaǹ”óW£ (pid: 8997 comm: syz.2.1413)
[ 189.026485][ T28] audit: type=1326 audit(1770679281.703:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d339af79 code=0x7ffc0000
[ 189.087062][ T28] audit: type=1326 audit(1770679281.733:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f62d339af79 code=0x7ffc0000
[ 189.148656][ T28] audit: type=1326 audit(1770679281.733:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62d339ace2 code=0x7ffc0000
[ 189.206603][ T28] audit: type=1326 audit(1770679281.733:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62d339ace2 code=0x7ffc0000
[ 189.540445][ T9013] xt_connbytes: Forcing CT accounting to be enabled
[ 189.563356][ T9013] xt_NFQUEUE: number of total queues is 0
[ 189.603045][ T9022] No such timeout policy "syz0"
[ 189.780514][ T9030] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[ 190.279061][ T9055] loop0: detected capacity change from 0 to 1024
[ 190.731689][ T9075] loop3: detected capacity change from 0 to 512
[ 190.770585][ T9075] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 190.793426][ T9075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 190.906536][ T9075] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead
[ 190.926282][ T9084] TCP: TCP_TX_DELAY enabled
[ 191.083932][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 191.209522][ C1] sd 0:0:1:0: [sda] tag#4502 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 191.220032][ C1] sd 0:0:1:0: [sda] tag#4502 CDB: Read(6) 08 00 9f d1 fe de
[ 191.793261][ T9118] loop3: detected capacity change from 0 to 2048
[ 191.826133][ T9118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 192.115816][ T9134] Unsupported ieee802154 address type: 0
[ 192.474619][ T9148] kernel read not supported for file /½ Iqî"ûIvÃQhþµ “3žJÇÈyûxÐîÃüv÷Lª=QÿW-™. Gaǹ”óW£ (pid: 9148 comm: syz.0.1485)
[ 192.488309][ T28] kauditd_printk_skb: 2 callbacks suppressed
[ 192.488323][ T28] audit: type=1800 audit(1770679285.213:110): pid=9148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1485" name=BD16204971EE22FB4976C3015168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D5118FF572D05992E1A09476115C7B9949DF357A3 dev="mqueue" ino=17415 res=0 errno=0
[ 192.532651][ T5835] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 192.742659][ T5835] usb 2-1: Using ep0 maxpacket: 8
[ 192.754924][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 192.779899][ T5835] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 192.800002][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 192.842530][ T5835] usb 2-1: config 0 descriptor??
[ 192.850808][ T5835] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 192.944826][ T9165] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1494'.
[ 192.972326][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1494'.
[ 192.987350][ T9165] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1494'.
[ 193.001130][ T9165] netlink: 'syz.3.1494': attribute type 2 has an invalid length.
[ 193.016469][ T9165] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1494'.
[ 193.263524][ T5835] gspca_vc032x: reg_w err -71
[ 193.268305][ T5835] vc032x: probe of 2-1:0.0 failed with error -71
[ 193.302759][ T5835] usb 2-1: USB disconnect, device number 9
[ 193.483301][ T9183] loop3: detected capacity change from 0 to 4096
[ 193.587313][ T9183] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[ 194.306711][ T9219] netlink: 'syz.3.1520': attribute type 21 has an invalid length.
[ 194.398913][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.412204][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 195.085472][ T9255] netlink: 'syz.1.1539': attribute type 1 has an invalid length.
[ 195.116759][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'.
[ 195.146342][ T9259] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 195.301386][ T9265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1544'.
[ 195.777770][ T9284] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1553'.
[ 195.802236][ T9284] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[ 195.810583][ T9284] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 196.015067][ T9296] comedi comedi0: Minor 3 could not be opened
[ 196.402209][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 196.617954][ T23] usb 2-1: Using ep0 maxpacket: 16
[ 196.644540][ T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 196.672205][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 196.680323][ T23] usb 2-1: Product: syz
[ 196.702851][ T23] usb 2-1: Manufacturer: syz
[ 196.707504][ T23] usb 2-1: SerialNumber: syz
[ 196.739715][ T23] r8152-cfgselector 2-1: config 0 descriptor??
[ 197.192658][ T23] r8152-cfgselector 2-1: Unknown version 0x0000
[ 197.214340][ T23] r8152-cfgselector 2-1: USB disconnect, device number 10
[ 198.749497][ T9397] loop3: detected capacity change from 0 to 64
[ 198.813955][ T1190] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 198.960552][ T9403] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1609'.
[ 199.032505][ T1190] usb 2-1: Using ep0 maxpacket: 32
[ 199.057128][ T1190] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[ 199.083902][ T1190] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 199.113067][ T1190] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 199.132670][ T1190] usb 2-1: config 1 has no interface number 0
[ 199.144880][ T1190] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 199.155797][ T1190] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 199.169774][ T1190] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 199.179971][ T1190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 199.206079][ T1190] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[ 199.342901][ T9418] loop3: detected capacity change from 0 to 128
[ 199.388114][ T9418] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[ 199.423266][ T1190] snd_usb_pod 2-1:1.1: invalid control EP
[ 199.431459][ T1190] snd_usb_pod 2-1:1.1: cannot start listening: -22
[ 199.446493][ T9418] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 199.448985][ T1190] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[ 199.506312][ T1190] snd_usb_pod: probe of 2-1:1.1 failed with error -22
[ 199.640933][ T7540] usb 2-1: USB disconnect, device number 11
[ 199.834398][ T9433] nfs: Unknown parameter 'ntext'
[ 200.102865][ T9447] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[ 200.408970][ T28] audit: type=1326 audit(1770679549.126:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9453 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 200.464119][ T28] audit: type=1326 audit(1770679549.156:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9453 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 200.486794][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1632'.
[ 200.539402][ T28] audit: type=1326 audit(1770679549.156:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9453 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 200.611506][ T28] audit: type=1326 audit(1770679549.156:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9453 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 200.649265][ T9460] loop1: detected capacity change from 0 to 512
[ 200.660929][ T28] audit: type=1326 audit(1770679549.156:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9453 comm="syz.1.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 200.687581][ T9460] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 200.717033][ T9460] EXT4-fs: Ignoring removed bh option
[ 200.788796][ T9460] EXT4-fs error (device loop1): mb_free_blocks:1954: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 200.812490][ T9460] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #11: comm syz.1.1635: corrupted inode contents
[ 200.843858][ T9460] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #11: comm syz.1.1635: mark_inode_dirty error
[ 200.939066][ T9460] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1635: invalid indirect mapped block 1 (level 1)
[ 200.975523][ T9460] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #11: comm syz.1.1635: corrupted inode contents
[ 200.996102][ T9460] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[ 201.009151][ T9460] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #11: comm syz.1.1635: corrupted inode contents
[ 201.028511][ T9460] EXT4-fs error (device loop1): ext4_truncate:4294: inode #11: comm syz.1.1635: mark_inode_dirty error
[ 201.049816][ T9460] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[ 201.061981][ T9460] EXT4-fs (loop1): 1 truncate cleaned up
[ 201.075004][ T9460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 201.129757][ T9443] loop3: detected capacity change from 0 to 32768
[ 201.198227][ T9460] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.1635: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 201.217358][ T9443] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 201.247830][ T9443] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 201.326216][ T9443] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 201.347284][ T5835] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 201.355192][ T5835] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 201.397293][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 201.497847][ T5835] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 142ms
[ 201.539944][ T5835] gfs2: fsid=syz:syz.0: jid=0: Done
[ 201.556402][ T9443] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 201.592463][ T5084] Bluetooth: hci0: command 0x0406 tx timeout
[ 201.596216][ T5773] Bluetooth: hci1: command 0x0406 tx timeout
[ 201.604786][ T5773] Bluetooth: hci2: command 0x0406 tx timeout
[ 201.610961][ T5084] Bluetooth: hci3: command 0x0406 tx timeout
[ 202.179680][ T9443] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 202.442742][ T5774] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[ 202.502188][ T5774] CPU: 1 PID: 5774 Comm: syz-executor Not tainted syzkaller #0
[ 202.509799][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 202.519959][ T5774] Call Trace:
[ 202.523282][ T5774]
[ 202.526259][ T5774] dump_stack_lvl+0x18c/0x250
[ 202.531029][ T5774] ? show_regs_print_info+0x20/0x20
[ 202.536277][ T5774] ? load_image+0x400/0x400
[ 202.540828][ T5774] ? do_raw_spin_unlock+0x121/0x230
[ 202.546067][ T5774] gfs2_assert_warn_i+0x193/0x2c0
[ 202.551138][ T5774] gfs2_qd_dispose+0x4aa/0x5b0
[ 202.555970][ T5774] gfs2_quota_cleanup+0x410/0x720
[ 202.561040][ T5774] ? spin_lock_bucket+0x150/0x150
[ 202.566111][ T5774] ? __might_sleep+0xe0/0xe0
[ 202.570735][ T5774] ? gfs2_ail_empty_tr+0x2f0/0x2f0
[ 202.575879][ T5774] ? gfs2_quota_sync+0x591/0x5a0
[ 202.580855][ T5774] gfs2_make_fs_ro+0x2aa/0x320
[ 202.585650][ T5774] ? gfs2_dinode_out+0xb10/0xb10
[ 202.590628][ T5774] ? __lock_acquire+0x7d40/0x7d40
[ 202.595732][ T5774] ? __rwlock_init+0x150/0x150
[ 202.600533][ T5774] ? do_raw_spin_unlock+0x121/0x230
[ 202.605772][ T5774] gfs2_put_super+0x224/0x930
[ 202.610494][ T5774] ? gfs2_evict_inode+0x1350/0x1350
[ 202.615730][ T5774] generic_shutdown_super+0x134/0x2b0
[ 202.621160][ T5774] kill_block_super+0x44/0x90
[ 202.625855][ T5774] deactivate_locked_super+0x97/0x100
[ 202.631240][ T5774] cleanup_mnt+0x43b/0x4d0
[ 202.635675][ T5774] task_work_run+0x1d4/0x260
[ 202.640282][ T5774] ? task_work_cancel+0x220/0x220
[ 202.645358][ T5774] ? exit_to_user_mode_loop+0x3b/0x110
[ 202.650842][ T5774] exit_to_user_mode_loop+0xe6/0x110
[ 202.656155][ T5774] exit_to_user_mode_prepare+0xee/0x180
[ 202.661759][ T5774] syscall_exit_to_user_mode+0x1a/0x50
[ 202.667241][ T5774] do_syscall_64+0x61/0xa0
[ 202.671676][ T5774] ? clear_bhb_loop+0x40/0x90
[ 202.676372][ T5774] ? clear_bhb_loop+0x40/0x90
[ 202.681063][ T5774] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 202.686971][ T5774] RIP: 0033:0x7f62d339c1d7
[ 202.691407][ T5774] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 202.711041][ T5774] RSP: 002b:00007ffc810d7b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 202.719487][ T5774] RAX: 0000000000000000 RBX: 00007f62d3430b3b RCX: 00007f62d339c1d7
[ 202.727469][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc810d7c00
[ 202.735448][ T5774] RBP: 00007ffc810d7c00 R08: 00007ffc810d8c00 R09: 00000000ffffffff
[ 202.743432][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc810d8c90
[ 202.751413][ T5774] R13: 00007f62d3430b3b R14: 00000000000315ed R15: 00007ffc810d8cd0
[ 202.759408][ T5774]
[ 202.829995][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1659'.
[ 203.209272][ T9522] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 203.253890][ T9520] block device autoloading is deprecated and will be removed.
[ 203.267226][ T9520] syz.0.1663: attempt to access beyond end of device
[ 203.267226][ T9520] ram200: rw=2048, sector=18446744073709551608, nr_sectors = 8 limit=8192
[ 203.957414][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'.
[ 203.981914][ T9526] loop3: detected capacity change from 0 to 32768
[ 204.292012][ T9533] loop0: detected capacity change from 0 to 32768
[ 204.352348][ T9533] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 204.388968][ T9562] netlink: 'syz.3.1680': attribute type 1 has an invalid length.
[ 204.397434][ T9562] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1680'.
[ 204.489002][ T9533] XFS (loop0): Ending clean mount
[ 204.521286][ T9533] XFS (loop0): Quotacheck needed: Please wait.
[ 204.623025][ T9533] XFS (loop0): Quotacheck: Done.
[ 204.735343][ T9570] loop3: detected capacity change from 0 to 1764
[ 204.899051][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 205.633994][ T9598] binfmt_misc: register: failed to install interpreter file ./file0
[ 205.668978][ T9595] loop1: detected capacity change from 0 to 2048
[ 205.742141][ T9595] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[ 206.787885][ T9647] loop1: detected capacity change from 0 to 128
[ 206.958528][ T9654] loop0: detected capacity change from 0 to 256
[ 207.196894][ T9664] loop1: detected capacity change from 0 to 256
[ 207.415436][ T9670] xt_l2tp: wrong L2TP version: 0
[ 207.596661][ T9676] loop3: detected capacity change from 0 to 512
[ 207.642257][ T9676] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 207.679674][ T9676] EXT4-fs (loop3): 1 truncate cleaned up
[ 207.706993][ T9676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 207.924099][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 208.089775][ T9698] ip6tnl1: entered allmulticast mode
[ 208.296796][ T9710] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[ 208.382344][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'.
[ 208.862215][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 208.891858][ T5776] Bluetooth: hci3: Malformed Event: 0x02
[ 209.052156][ T23] usb 1-1: Using ep0 maxpacket: 8
[ 209.060491][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 209.067518][ T9740] bridge1: entered promiscuous mode
[ 209.089332][ T9740] bridge1: entered allmulticast mode
[ 209.102167][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 209.132520][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 209.172263][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 209.204226][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 209.234121][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 209.261254][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 209.282577][ T23] usb 1-1: config 0 descriptor??
[ 209.293154][ T9724] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 209.302866][ T9752] program syz.1.1771 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 209.336086][ T9752] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 209.411168][ T9756] loop3: detected capacity change from 0 to 64
[ 209.613810][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'.
[ 209.635109][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1777'.
[ 209.647227][ T9762] netlink: 'syz.3.1778': attribute type 3 has an invalid length.
[ 209.656141][ T9762] netlink: 'syz.3.1778': attribute type 1 has an invalid length.
[ 209.735176][ T9766] netlink: 'syz.3.1780': attribute type 1 has an invalid length.
[ 209.743480][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'.
[ 209.836083][ T5776] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[ 209.844891][ T7540] usb 1-1: USB disconnect, device number 8
[ 209.907508][ T9770] netlink: 'syz.2.1782': attribute type 7 has an invalid length.
[ 210.798426][ T9813] ip6erspan0: entered allmulticast mode
[ 211.055625][ T9825] loop3: detected capacity change from 0 to 64
[ 211.299350][ T9835] netlink: 'syz.3.1810': attribute type 12 has an invalid length.
[ 211.683776][ T9854] SET target dimension over the limit!
[ 213.056118][ T9918] loop3: detected capacity change from 0 to 4096
[ 213.081513][ T9918] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 213.318861][ T9918] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 213.359194][ T9918] ntfs3: loop3: Failed to load $Extend (-22).
[ 213.385101][ T9918] ntfs3: loop3: Failed to initialize $Extend.
[ 213.532738][ T9936] netlink: 4168 bytes leftover after parsing attributes in process `syz.0.1860'.
[ 213.562914][ T1190] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 213.792841][ T1190] usb 3-1: Using ep0 maxpacket: 8
[ 213.814858][ T1190] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 213.842180][ T1190] usb 3-1: config 179 has no interface number 0
[ 213.848527][ T1190] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 213.879582][ T1190] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 213.912742][ T1190] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 213.932516][ T1190] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 213.952869][ T1190] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 213.992601][ T1190] usb 3-1: config 179 interface 65 has no altsetting 0
[ 213.999517][ T1190] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 214.036131][ T1190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 214.079911][ T1190] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11
[ 214.095366][ T28] audit: type=1326 audit(1770679562.814:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 214.188340][ T28] audit: type=1326 audit(1770679562.814:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 214.239548][ T28] audit: type=1326 audit(1770679562.814:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 214.282657][ T5835] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 214.340334][ T28] audit: type=1326 audit(1770679562.814:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 214.405403][ T23] usb 3-1: USB disconnect, device number 11
[ 214.408807][ T28] audit: type=1326 audit(1770679562.814:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.0.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 214.427566][ T23] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 214.509036][ T5835] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 214.518740][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 214.539008][ T5835] usb 2-1: Product: syz
[ 214.549154][ T5835] usb 2-1: Manufacturer: syz
[ 214.559283][ T5835] usb 2-1: SerialNumber: syz
[ 214.576322][ T5835] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 214.608563][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 214.666322][ T9942] loop3: detected capacity change from 0 to 32768
[ 214.718975][ T9942] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 214.816625][ T9942] XFS (loop3): Ending clean mount
[ 214.846180][ T9942] XFS (loop3): Quotacheck needed: Please wait.
[ 214.928025][ T9942] XFS (loop3): Quotacheck: Done.
[ 215.071051][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 215.167975][ T23] usb 2-1: USB disconnect, device number 12
[ 215.682230][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 215.693176][ T9] ath9k_htc: Failed to initialize the device
[ 215.725597][ T23] usb 2-1: ath9k_htc: USB layer deinitialized
[ 215.766189][ T9992] netlink: 'syz.0.1884': attribute type 1 has an invalid length.
[ 215.819838][ T9996] C: renamed from lo (while UP)
[ 215.831818][ T9996] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 216.002826][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[ 216.053952][T10002] infiniband syz1: set active
[ 216.062531][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[ 216.082331][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[ 216.112810][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[ 216.132463][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[ 216.154716][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[ 216.188484][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[ 216.218647][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[ 216.243964][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[ 216.256715][T10014] loop3: detected capacity change from 0 to 64
[ 216.270643][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[ 216.369479][ T23] lo speed is unknown, defaulting to 1000
[ 216.652916][T10025] loop3: detected capacity change from 0 to 512
[ 216.708989][T10025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 216.756632][T10025] ext4 filesystem being mounted at /431/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 216.866566][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 217.684654][T10060] loop1: detected capacity change from 0 to 4096
[ 217.773295][T10070] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[ 217.852530][T10060] ntfs: (device loop1): parse_options(): NLS character set cp8ƒÓ O¥¿one_multiplier=0x0000000000000001gid=0 not found. Using previous one cp862.
[ 217.879805][T10060] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk.
[ 217.923909][T10060] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk.
[ 217.976217][T10060] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 218.002216][T10060] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk.
[ 218.060274][T10060] ntfs: volume version 3.1.
[ 218.537520][T10098] loop3: detected capacity change from 0 to 256
[ 218.607558][T10098] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d)
[ 218.685560][T10102] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 218.748011][T10104] bridge0: port 4(netdevsim2) entered blocking state
[ 218.764438][T10104] bridge0: port 4(netdevsim2) entered disabled state
[ 218.771641][T10104] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[ 218.805616][T10104] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[ 218.838113][T10104] bridge0: port 4(netdevsim2) entered blocking state
[ 218.846001][T10104] bridge0: port 4(netdevsim2) entered forwarding state
[ 219.152276][ T5835] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 219.353583][ T5835] usb 3-1: Using ep0 maxpacket: 8
[ 219.372530][ T5835] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 219.388835][ T5835] usb 3-1: config 179 has no interface number 0
[ 219.395816][ T5835] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 219.412315][ T5835] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 219.424470][ T5835] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 219.436698][ T5835] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 219.448445][ T5835] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 219.464716][ T5835] usb 3-1: config 179 interface 65 has no altsetting 0
[ 219.471650][ T5835] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 219.482160][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 219.508534][ T5835] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input12
[ 219.608725][ T5124] input input12: unable to receive magic message: -110
[ 219.662826][ T5124] input input12: unable to receive magic message: -32
[ 219.711898][T10106] loop0: detected capacity change from 0 to 32768
[ 219.740733][ T5124] input input12: unable to receive magic message: -32
[ 219.790087][T10106] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 219.798986][ T5124] input input12: unable to receive magic message: -32
[ 219.812182][T10106] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 219.847060][ T5124] input input12: unable to receive magic message: -32
[ 219.862321][ T5124] input input12: unable to receive magic message: -32
[ 219.901035][T10106] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 219.908830][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 219.919345][ T786] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 219.928567][ T786] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 219.979917][ T786] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 51ms
[ 219.999707][ T786] gfs2: fsid=syz:syz.0: jid=0: Done
[ 220.005227][T10106] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 220.074859][T10133] loop3: detected capacity change from 0 to 256
[ 220.093434][ T23] usb 2-1: Using ep0 maxpacket: 16
[ 220.099021][ T1190] usb 3-1: USB disconnect, device number 12
[ 220.105152][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 220.126899][ T23] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[ 220.136126][ T1190] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 220.145911][ T23] usb 2-1: config 0 has no interface number 0
[ 220.161767][T10133] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[ 220.189132][ T23] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 220.231206][ T23] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 220.266373][ T23] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 220.295642][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 220.323516][ T23] usb 2-1: Product: syz
[ 220.327746][ T23] usb 2-1: Manufacturer: syz
[ 220.347249][ T23] usb 2-1: SerialNumber: syz
[ 220.365604][ T23] usb 2-1: config 0 descriptor??
[ 220.371811][T10126] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 220.390059][T10126] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 220.558637][T10106] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 220.612578][T10126] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 220.640232][T10126] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 220.828394][ T5771] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[ 220.853192][ T23] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 220.862264][ T5771] CPU: 0 PID: 5771 Comm: syz-executor Not tainted syzkaller #0
[ 220.870891][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 220.881005][ T5771] Call Trace:
[ 220.883642][ T23] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[ 220.884306][ T5771]
[ 220.884317][ T5771] dump_stack_lvl+0x18c/0x250
[ 220.901624][ T5771] ? show_regs_print_info+0x20/0x20
[ 220.906887][ T5771] ? load_image+0x400/0x400
[ 220.911451][ T5771] ? do_raw_spin_unlock+0x121/0x230
[ 220.916723][ T5771] gfs2_assert_warn_i+0x193/0x2c0
[ 220.921815][ T5771] gfs2_qd_dispose+0x4aa/0x5b0
[ 220.926633][ T5771] gfs2_quota_cleanup+0x410/0x720
[ 220.929691][ T23] asix: probe of 2-1:0.251 failed with error -5
[ 220.931681][ T5771] ? spin_lock_bucket+0x150/0x150
[ 220.931709][ T5771] ? __might_sleep+0xe0/0xe0
[ 220.947640][ T5771] ? gfs2_ail_empty_tr+0x2f0/0x2f0
[ 220.952794][ T5771] ? gfs2_quota_sync+0x591/0x5a0
[ 220.957780][ T5771] gfs2_make_fs_ro+0x2aa/0x320
[ 220.962607][ T5771] ? gfs2_dinode_out+0xb10/0xb10
[ 220.967590][ T5771] ? __lock_acquire+0x7d40/0x7d40
[ 220.972665][ T5771] ? __rwlock_init+0x150/0x150
[ 220.977487][ T5771] ? do_raw_spin_unlock+0x121/0x230
[ 220.978133][ T23] usb 2-1: USB disconnect, device number 13
[ 220.982717][ T5771] gfs2_put_super+0x224/0x930
[ 220.982753][ T5771] ? gfs2_evict_inode+0x1350/0x1350
[ 220.982777][ T5771] generic_shutdown_super+0x134/0x2b0
[ 220.982800][ T5771] kill_block_super+0x44/0x90
[ 220.982820][ T5771] deactivate_locked_super+0x97/0x100
[ 220.982839][ T5771] cleanup_mnt+0x43b/0x4d0
[ 220.982867][ T5771] task_work_run+0x1d4/0x260
[ 221.023235][ T5771] ? task_work_cancel+0x220/0x220
[ 221.028339][ T5771] ? exit_to_user_mode_loop+0x3b/0x110
[ 221.033849][ T5771] exit_to_user_mode_loop+0xe6/0x110
[ 221.039184][ T5771] exit_to_user_mode_prepare+0xee/0x180
[ 221.044777][ T5771] syscall_exit_to_user_mode+0x1a/0x50
[ 221.050285][ T5771] do_syscall_64+0x61/0xa0
[ 221.054745][ T5771] ? clear_bhb_loop+0x40/0x90
[ 221.059473][ T5771] ? clear_bhb_loop+0x40/0x90
[ 221.064218][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 221.070159][ T5771] RIP: 0033:0x7f635fd9c1d7
[ 221.074631][ T5771] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 221.094283][ T5771] RSP: 002b:00007ffc33625268 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 221.102751][ T5771] RAX: 0000000000000000 RBX: 00007f635fe30b3b RCX: 00007f635fd9c1d7
[ 221.110788][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc33625320
[ 221.118794][ T5771] RBP: 00007ffc33625320 R08: 00007ffc33626320 R09: 00000000ffffffff
[ 221.126811][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc336263b0
[ 221.134823][ T5771] R13: 00007f635fe30b3b R14: 0000000000035dd8 R15: 00007ffc336263f0
[ 221.142854][ T5771]
[ 221.181116][T10146] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 221.222372][T10146] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 221.464345][T10150] loop3: detected capacity change from 0 to 512
[ 221.534847][T10150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 221.553628][T10150] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 221.568291][T10156] bridge1: entered promiscuous mode
[ 221.753582][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 221.762962][T10160] loop0: detected capacity change from 0 to 4096
[ 221.771246][T10160] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[ 221.861593][T10160] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 221.876868][T10164] bridge0: port 3(netdevsim2) entered blocking state
[ 221.898704][T10164] bridge0: port 3(netdevsim2) entered disabled state
[ 221.918160][T10164] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[ 221.935732][T10164] netdevsim netdevsim3 netdevsim2: entered promiscuous mode
[ 221.952194][ T5835] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 221.967272][T10164] bridge0: port 3(netdevsim2) entered blocking state
[ 221.974250][T10164] bridge0: port 3(netdevsim2) entered forwarding state
[ 222.092270][T10166] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 222.142195][ T5835] usb 2-1: Using ep0 maxpacket: 8
[ 222.149699][ T5835] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[ 222.174147][ T5835] usb 2-1: config 0 has no interface number 0
[ 222.194030][ T5835] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 222.213573][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 222.239678][ T5835] usb 2-1: Product: syz
[ 222.249466][ T5835] usb 2-1: Manufacturer: syz
[ 222.255788][ T5835] usb 2-1: SerialNumber: syz
[ 222.264186][ T5835] usb 2-1: config 0 descriptor??
[ 222.399875][T10175] __nla_validate_parse: 73 callbacks suppressed
[ 222.399890][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'.
[ 222.430309][T10177] CIFS: VFS: Malformed UNC in devname
[ 222.532439][ T5835] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[ 222.538915][ T5835] usb 2-1: Failed to initialize entity for entity 6
[ 222.574508][ T5835] usb 2-1: Failed to register entities (-22).
[ 222.766409][ T23] usb 2-1: USB disconnect, device number 14
[ 223.208982][T10207] loop0: detected capacity change from 0 to 512
[ 223.323519][T10207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 223.376445][T10217] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 223.394884][T10217] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 223.423718][T10207] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 223.620707][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 223.987689][T10237] usb usb2: check_ctrlrecip: process 10237 (syz.0.1997) requesting ep 01 but needs 81
[ 224.009809][T10237] usb usb2: usbfs: process 10237 (syz.0.1997) did not claim interface 0 before use
[ 224.028325][T10239] xt_limit: Overflow, try lower: 2147483649/3300
[ 224.427508][T10257] loop0: detected capacity change from 0 to 512
[ 224.460756][T10257] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 224.511507][T10257] EXT4-fs (loop0): 1 truncate cleaned up
[ 224.530148][T10257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 224.598711][T10257] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[ 224.662292][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 224.745335][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 224.854277][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2014'.
[ 224.875777][ T23] usb 3-1: config 0 has an invalid interface number: 83 but max is 0
[ 224.889046][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 224.908745][ T23] usb 3-1: config 0 has no interface number 0
[ 224.922254][ T23] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[ 224.934036][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2015'.
[ 224.943487][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 224.964188][ T23] usb 3-1: config 0 descriptor??
[ 225.001709][ T23] ttusbir 3-1:0.83: cannot find expected altsetting
[ 225.205076][ T786] usb 3-1: USB disconnect, device number 13
[ 225.361675][ T5776] Bluetooth: hci0: unexpected event for opcode 0x1804
[ 225.688151][T10305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2030'.
[ 225.801426][T10307] netlink: 'syz.0.2031': attribute type 5 has an invalid length.
[ 225.866508][T10311] process 'syz.2.2033' launched '.' with NULL argv: empty string added
[ 225.973343][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2034'.
[ 226.206774][T10326] loop1: detected capacity change from 0 to 256
[ 226.288450][T10326] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[ 226.360418][T10326] tmpfs: Bad value for 'mpol'
[ 226.890088][T10354] mmap: syz.3.2054 (10354) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 227.382170][ T5835] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 227.584246][ T5835] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 227.602660][ T5835] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 227.615041][ T5835] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 227.624656][ T5835] usb 3-1: config 1 has no interface number 1
[ 227.631140][ T5835] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 227.648598][ T5835] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 227.657761][ T5835] usb 3-1: New USB device strings: Mfr=20, Product=2, SerialNumber=3
[ 227.666001][ T5835] usb 3-1: Product: syz
[ 227.670972][ T5835] usb 3-1: Manufacturer: syz
[ 227.693740][ T5835] usb 3-1: SerialNumber: syz
[ 227.790995][T10388] loop0: detected capacity change from 0 to 2048
[ 227.801106][T10388] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485
[ 227.802409][ T1190] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 227.828762][T10388] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 228.008482][ T5835] usb 3-1: USB disconnect, device number 14
[ 228.044461][ T1190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 228.070541][ T1190] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 228.121168][ T1190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 228.139381][ T5758] udevd[5758]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 228.161465][ T1190] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[ 228.172419][ T1190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 228.180534][ T1190] usb 2-1: Product: syz
[ 228.185362][ T1190] usb 2-1: Manufacturer: syz
[ 228.189986][ T1190] usb 2-1: SerialNumber: syz
[ 228.268090][ T1190] usb 2-1: config 0 descriptor??
[ 228.284348][ T1190] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s)
[ 228.489974][ T1190] usb 2-1: USB disconnect, device number 15
[ 228.775131][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'.
[ 229.134291][T10428] netlink: 'syz.3.2091': attribute type 39 has an invalid length.
[ 229.168839][T10428] veth0_macvtap: left promiscuous mode
[ 229.434642][ T5776] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 229.443506][ T5776] Bluetooth: hci0: Injecting HCI hardware error event
[ 229.452190][ T5781] Bluetooth: hci0: hardware error 0x00
[ 229.656203][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2099'.
[ 229.781808][T10430] loop1: detected capacity change from 0 to 32768
[ 229.815495][T10430] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12
[ 230.048864][ T5758] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12
[ 230.317150][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 230.502194][ T23] usb 4-1: Using ep0 maxpacket: 8
[ 230.529442][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 230.552267][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 230.584269][ T23] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[ 230.622795][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 230.630852][ T23] usb 4-1: Product: syz
[ 230.649196][ T23] usb 4-1: Manufacturer: syz
[ 230.654656][ T23] usb 4-1: SerialNumber: syz
[ 230.672482][ T23] usb 4-1: config 0 descriptor??
[ 230.827503][T10489] netlink: 372 bytes leftover after parsing attributes in process `syz.2.2121'.
[ 230.901428][ T28] kauditd_printk_skb: 17 callbacks suppressed
[ 230.901441][ T28] audit: type=1326 audit(1770679579.614:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.0.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 230.971265][ T28] audit: type=1326 audit(1770679579.654:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.0.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 231.059155][ T28] audit: type=1326 audit(1770679579.654:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.0.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 231.081578][ C1] vkms_vblank_simulate: vblank timer overrun
[ 231.112681][ T28] audit: type=1326 audit(1770679579.654:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.0.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f635fd9c807 code=0x7ffc0000
[ 231.134951][ C1] vkms_vblank_simulate: vblank timer overrun
[ 231.158941][ T28] audit: type=1326 audit(1770679579.654:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.0.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f635fd5b84e code=0x7ffc0000
[ 231.181234][ C1] vkms_vblank_simulate: vblank timer overrun
[ 231.197894][ T1190] usb 4-1: USB disconnect, device number 11
[ 231.242168][ T28] audit: type=1326 audit(1770679579.664:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.0.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f635fd5b84e code=0x7ffc0000
[ 231.264451][ C1] vkms_vblank_simulate: vblank timer overrun
[ 231.292178][ T28] audit: type=1326 audit(1770679579.664:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.0.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f635fd5b84e code=0x7ffc0000
[ 231.314444][ C1] vkms_vblank_simulate: vblank timer overrun
[ 231.340344][ T28] audit: type=1326 audit(1770679579.664:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.0.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f635fd5b84e code=0x7ffc0000
[ 231.381559][T10485] loop1: detected capacity change from 0 to 32768
[ 231.388444][ T28] audit: type=1326 audit(1770679579.664:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.0.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 231.457958][ T28] audit: type=1326 audit(1770679579.664:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.0.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 231.461574][T10485]
[ 231.461574][T10485] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 231.461574][T10485]
[ 231.480340][ C1] vkms_vblank_simulate: vblank timer overrun
[ 231.591844][T10485] read_mapping_page failed!
[ 231.592462][ T5781] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 231.607013][T10485] ERROR: (device loop1): txCommit:
[ 231.607013][T10485]
[ 231.648384][T10485] ERROR: (device loop1): remounting filesystem as read-only
[ 231.919247][T10513] loop3: detected capacity change from 0 to 1024
[ 232.003779][ T998] hfsplus: b-tree write err: -5, ino 4
[ 232.142352][T10518] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 232.487847][T10537] loop1: detected capacity change from 0 to 64
[ 232.947039][T10558] netlink: 'syz.0.2155': attribute type 12 has an invalid length.
[ 233.470986][T10578] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 233.661049][T10584] netlink: 'syz.0.2168': attribute type 3 has an invalid length.
[ 233.674441][T10584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2168'.
[ 233.922463][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 234.134492][ T9] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[ 234.160048][ T9] usb 4-1: config 0 has no interface number 0
[ 234.184050][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[ 234.209525][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 234.222939][T10604] loop1: detected capacity change from 0 to 764
[ 234.232697][ T9] usb 4-1: Product: syz
[ 234.236900][ T9] usb 4-1: Manufacturer: syz
[ 234.249463][T10604] rock: corrupted directory entry. extent=32, offset=2044, size=237
[ 234.259791][ T9] usb 4-1: SerialNumber: syz
[ 234.290255][ T9] usb 4-1: config 0 descriptor??
[ 234.528703][ T9] usb 4-1: Found UVC 0.08 device syz (046d:0823)
[ 234.543408][ T9] usb 4-1: No valid video chain found.
[ 234.551752][ T9] usb 4-1: USB disconnect, device number 12
[ 234.948796][T10628] netlink: 'syz.0.2189': attribute type 7 has an invalid length.
[ 234.966992][T10628] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2189'.
[ 235.038301][T10614] loop1: detected capacity change from 0 to 32768
[ 235.715276][T10648] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 235.732710][T10644] loop0: detected capacity change from 0 to 4096
[ 235.761230][T10644] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[ 236.331173][T10658] 8021q: adding VLAN 0 to HW filter on device bond3
[ 236.353662][T10665] loop3: detected capacity change from 0 to 2048
[ 236.513994][T10665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 236.727535][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 236.773252][ T786] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 236.952435][ T786] usb 1-1: Using ep0 maxpacket: 8
[ 236.964992][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 236.978374][ T786] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[ 236.995392][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 237.019050][ T786] usb 1-1: Product: syz
[ 237.032507][ T786] usb 1-1: Manufacturer: syz
[ 237.042460][ T786] usb 1-1: SerialNumber: syz
[ 237.059234][ T786] usb 1-1: config 0 descriptor??
[ 237.073072][ T786] gspca_main: stk014-2.14.0 probing 05e1:0893
[ 237.089557][ T786] usb 1-1: selecting invalid altsetting 1
[ 237.156584][T10699] capability: warning: `syz.1.2222' uses 32-bit capabilities (legacy support in use)
[ 237.182757][T10701] kAFS: No cell specified
[ 237.273647][ T7540] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[ 237.294947][ T786] gspca_stk014: init reg: 0x00
[ 237.299937][ T786] stk014: probe of 1-1:0.0 failed with error -5
[ 237.488317][ T7540] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[ 237.507250][ T7540] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 237.532180][ T7540] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[ 237.545662][ T786] usb 1-1: USB disconnect, device number 9
[ 237.573698][ T7540] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[ 237.603103][ T7540] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 237.618419][ T7540] usb 4-1: config 0 interface 0 has no altsetting 0
[ 237.628432][ T7540] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 237.641797][ T7540] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 237.656756][ T7540] usb 4-1: Product: syz
[ 237.660968][ T7540] usb 4-1: Manufacturer: syz
[ 237.667313][ T7540] usb 4-1: SerialNumber: syz
[ 237.689349][ T7540] usb 4-1: config 0 descriptor??
[ 237.700875][T10692] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 237.719697][ T7540] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 237.750923][ T7540] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 238.014579][ T9] usb 4-1: USB disconnect, device number 13
[ 238.034114][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[ 238.205095][T10738] binder: 10736:10738 ioctl c018620c 2000000001c0 returned -22
[ 238.346169][T10744] bridge3: entered promiscuous mode
[ 238.351455][T10744] bridge3: entered allmulticast mode
[ 238.564640][T10752] delete_channel: no stack
[ 238.988283][T10776] loop1: detected capacity change from 0 to 256
[ 239.032631][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 239.091662][T10776] FAT-fs (loop1): Directory bread(block 64) failed
[ 239.113134][T10776] FAT-fs (loop1): Directory bread(block 65) failed
[ 239.119807][T10776] FAT-fs (loop1): Directory bread(block 66) failed
[ 239.135047][T10776] FAT-fs (loop1): Directory bread(block 67) failed
[ 239.141764][T10776] FAT-fs (loop1): Directory bread(block 68) failed
[ 239.158919][T10776] FAT-fs (loop1): Directory bread(block 69) failed
[ 239.172733][T10776] FAT-fs (loop1): Directory bread(block 70) failed
[ 239.181343][T10776] FAT-fs (loop1): Directory bread(block 71) failed
[ 239.188945][T10776] FAT-fs (loop1): Directory bread(block 72) failed
[ 239.196170][T10776] FAT-fs (loop1): Directory bread(block 73) failed
[ 239.262941][ T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[ 239.271084][ T9] usb 1-1: config 0 has no interface number 0
[ 239.309214][ T9] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 239.347597][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 239.373307][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 239.381359][ T9] usb 1-1: Product: syz
[ 239.397990][ T9] usb 1-1: Manufacturer: syz
[ 239.403678][ T9] usb 1-1: SerialNumber: syz
[ 239.418697][ T9] usb 1-1: config 0 descriptor??
[ 239.444989][ T9] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[ 239.681013][T10792] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2267'.
[ 239.893445][ T1190] usb 1-1: USB disconnect, device number 10
[ 239.904828][ T1190] yurex 1-1:0.50: USB YUREX #0 now disconnected
[ 239.960328][T10784] loop3: detected capacity change from 0 to 32768
[ 240.008220][T10784]
[ 240.008220][T10784] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 240.008220][T10784]
[ 240.061384][T10784] read_mapping_page failed!
[ 240.072297][T10784] ERROR: (device loop3): txCommit:
[ 240.072297][T10784]
[ 240.090230][T10784] ERROR: (device loop3): remounting filesystem as read-only
[ 240.487504][T10813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2278'.
[ 241.482288][T10849] netlink: 'syz.1.2295': attribute type 1 has an invalid length.
[ 241.500734][T10849] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2295'.
[ 241.525204][T10849] NCSI netlink: No device for ifindex 0
[ 241.554169][T10827] loop0: detected capacity change from 0 to 32768
[ 241.634501][T10827]
[ 241.634501][T10827] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 241.634501][T10827]
[ 241.731267][T10827] read_mapping_page failed!
[ 241.744039][T10855] loop1: detected capacity change from 0 to 2048
[ 241.750511][T10827] ERROR: (device loop0): txCommit:
[ 241.750511][T10827]
[ 241.773999][T10827] ERROR: (device loop0): remounting filesystem as read-only
[ 241.793745][T10855] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 241.835721][T10855] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 242.560496][T10876] JFS: discard option not supported on device
[ 242.587515][T10876] Mount JFS Failure: -22
[ 242.601823][T10876] jfs_mount failed w/return code = -22
[ 242.780745][T10885] netlink: 'syz.3.2311': attribute type 1 has an invalid length.
[ 242.802275][T10885] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2311'.
[ 242.816532][T10884] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 242.948196][T10890] loop3: detected capacity change from 0 to 2048
[ 242.982177][ T5835] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 243.013198][T10890] loop3: p1 < > p3
[ 243.018910][T10890] loop3: p3 size 54016 extends beyond EOD, truncated
[ 243.147598][ T5761] udevd[5761]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[ 243.164192][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[ 243.182113][ T5835] usb 1-1: Using ep0 maxpacket: 16
[ 243.207089][ T5835] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[ 243.237645][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 243.252311][ T5835] usb 1-1: Product: syz
[ 243.262547][ T5835] usb 1-1: Manufacturer: syz
[ 243.268415][ T5835] usb 1-1: SerialNumber: syz
[ 243.286565][ T5835] usb 1-1: config 0 descriptor??
[ 243.425333][ T786] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 243.523939][ T5835] speedtch 1-1:0.0: speedtch_bind: data interface not found!
[ 243.541695][ T5835] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 243.632207][ T786] usb 2-1: Using ep0 maxpacket: 16
[ 243.639492][ T786] usb 2-1: config 0 has an invalid interface number: 49 but max is 0
[ 243.663969][ T786] usb 2-1: config 0 has no interface number 0
[ 243.670144][ T786] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[ 243.696644][ T786] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 243.714808][ T786] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[ 243.737330][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 243.749524][ T1190] usb 1-1: USB disconnect, device number 11
[ 243.753995][ T786] usb 2-1: Product: syz
[ 243.768216][ T786] usb 2-1: Manufacturer: syz
[ 243.782202][ T786] usb 2-1: SerialNumber: syz
[ 243.801963][ T786] usb 2-1: config 0 descriptor??
[ 243.833490][T10898] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 244.077907][ T786] usb 2-1: USB disconnect, device number 16
[ 244.189796][T10932] loop3: detected capacity change from 0 to 1024
[ 244.215288][T10932] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 244.257509][T10932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 244.388557][T10932] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2334: missing EA_INODE flag
[ 244.463455][T10932] EXT4-fs (loop3): Remounting filesystem read-only
[ 244.571061][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 245.602352][ T786] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[ 245.630493][T10978] (null): rxe_set_mtu: Set mtu to 1024
[ 245.732212][ T7540] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 245.794184][ T786] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 245.822318][ T786] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 245.841733][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 245.851846][ T786] usb 2-1: Product: syz
[ 245.861972][ T786] usb 2-1: Manufacturer: syz
[ 245.870275][ T786] usb 2-1: SerialNumber: syz
[ 245.890607][T10978] infiniband !yz!: set active
[ 245.897280][ T786] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 245.897639][T10978] infiniband !yz!: added team_slave_0
[ 245.916733][ T7540] usb 4-1: Using ep0 maxpacket: 16
[ 245.928416][ T7540] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 245.947747][ T7540] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 245.972170][ T7540] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 245.994204][T10978] RDS/IB: !yz!: added
[ 245.998730][T10978] smc: adding ib device !yz! with port count 1
[ 246.011643][T10978] smc: ib device !yz! port 1 has pnetid
[ 246.018007][ T7540] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 246.048220][ T7540] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 246.078622][ T7540] usb 4-1: config 1 interface 0 has no altsetting 0
[ 246.108813][ T7540] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 246.141927][ T7540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 246.183842][ T7540] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[ 246.325045][ T786] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[ 246.409007][ T7540] scsi host1: usb-storage 4-1:1.0
[ 246.421753][ T786] usb 2-1: USB disconnect, device number 17
[ 246.643269][ T28] kauditd_printk_skb: 2 callbacks suppressed
[ 246.643285][ T28] audit: type=1326 audit(1770679595.344:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 246.659636][ T7540] usb 4-1: USB disconnect, device number 14
[ 246.694186][ T28] audit: type=1326 audit(1770679595.344:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 246.736816][ T28] audit: type=1326 audit(1770679595.414:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 246.770931][ T28] audit: type=1326 audit(1770679595.414:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 246.832184][ T28] audit: type=1326 audit(1770679595.414:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.0.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 246.996257][T10996] netlink: 'syz.0.2362': attribute type 2 has an invalid length.
[ 247.011469][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'.
[ 247.421485][T11010] x_tables: unsorted entry at hook 2
[ 247.722894][T11022] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[ 248.182418][ T7540] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 248.329070][T11053] syz.3.2388 uses old SIOCAX25GETINFO
[ 248.377845][ T7540] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 248.412457][ T7540] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 248.434262][ T7540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 248.458181][ T7540] usb 3-1: Product: syz
[ 248.489337][ T7540] usb 3-1: Manufacturer: syz
[ 248.502255][ T7540] usb 3-1: SerialNumber: syz
[ 248.519177][ T7540] usb 3-1: config 0 descriptor??
[ 248.561922][T11060] IPv6: sit1: Disabled Multicast RS
[ 248.617499][ T7540] snd-usb-audio: probe of 3-1:0.0 failed with error -22
[ 248.628646][T11064] netlink: 'syz.0.2392': attribute type 1 has an invalid length.
[ 248.661057][ T5758] udevd[5758]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 248.868571][ T1190] usb 3-1: USB disconnect, device number 15
[ 249.118583][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 249.322215][ T23] usb 1-1: Using ep0 maxpacket: 32
[ 249.329941][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 249.353397][ T23] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 249.372115][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 249.390473][ T23] usb 1-1: Product: syz
[ 249.400601][ T23] usb 1-1: Manufacturer: syz
[ 249.413404][ T23] usb 1-1: SerialNumber: syz
[ 249.462577][ T23] usb 1-1: config 0 descriptor??
[ 249.483150][ T23] cdc_ether: probe of 1-1:0.0 failed with error -22
[ 249.490225][ T23] usb 1-1: unsupported MDLM descriptors
[ 249.676599][ T786] usb 1-1: USB disconnect, device number 12
[ 249.992386][ T27] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 250.052352][ T7540] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 250.155414][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2419'.
[ 250.165665][T11118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 250.192269][ T27] usb 4-1: Using ep0 maxpacket: 8
[ 250.201009][ T27] usb 4-1: config 0 interface 0 has no altsetting 0
[ 250.210787][ T27] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 250.228252][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 250.250073][ T27] usb 4-1: Product: syz
[ 250.257470][ T27] usb 4-1: Manufacturer: syz
[ 250.258618][ T7540] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[ 250.273350][ T7540] usb 3-1: config 0 has no interface number 0
[ 250.280169][ T27] usb 4-1: SerialNumber: syz
[ 250.287935][ T7540] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 250.301765][ T27] usb 4-1: config 0 descriptor??
[ 250.336215][ T27] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[ 250.343356][ T7540] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 250.367610][ T7540] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 250.387925][ T7540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 250.412269][ T7540] usb 3-1: Product: syz
[ 250.416605][ T7540] usb 3-1: Manufacturer: syz
[ 250.421267][ T7540] usb 3-1: SerialNumber: syz
[ 250.430450][ T7540] usb 3-1: config 0 descriptor??
[ 250.437089][T11104] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 250.456886][ T7540] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 250.495433][ T7540] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 250.551276][ T27] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[ 250.582289][ T28] audit: type=1326 audit(1770679599.294:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 250.611106][ T27] snd_usb_toneport: probe of 4-1:0.0 failed with error -22
[ 250.655353][ T28] audit: type=1326 audit(1770679599.294:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 250.732976][ T28] audit: type=1326 audit(1770679599.304:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 250.812171][ T28] audit: type=1326 audit(1770679599.304:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11125 comm="syz.0.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635fd9af79 code=0x7ffc0000
[ 250.845606][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[ 250.848632][ T1190] usb 4-1: USB disconnect, device number 15
[ 250.977834][T11132] vti0: entered promiscuous mode
[ 251.068177][ T5835] usb 3-1: USB disconnect, device number 16
[ 251.111466][ T5835] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 251.133959][ T5835] cyberjack 3-1:0.69: device disconnected
[ 251.199811][T11138] loop0: detected capacity change from 0 to 4096
[ 251.241801][T11140] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 251.261186][ T28] audit: type=1326 audit(1770679599.974:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.1.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 251.283689][ C0] vkms_vblank_simulate: vblank timer overrun
[ 251.990800][T11165] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2442'.
[ 252.031804][T11165] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2442'.
[ 252.050888][T11165] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2442'.
[ 252.349509][T11179] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 252.832368][ T28] kauditd_printk_skb: 3 callbacks suppressed
[ 252.832384][ T28] audit: type=1326 audit(1770679601.544:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.1.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 252.892144][ T28] audit: type=1326 audit(1770679601.544:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.1.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 252.957180][ T28] audit: type=1326 audit(1770679601.544:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.1.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 253.059878][ T28] audit: type=1326 audit(1770679601.544:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.1.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 253.094223][T11173] loop3: detected capacity change from 0 to 32768
[ 253.132158][ T28] audit: type=1326 audit(1770679601.584:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.1.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 253.196823][ T28] audit: type=1326 audit(1770679601.584:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.1.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 253.286888][ T28] audit: type=1326 audit(1770679601.584:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.1.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 253.323997][T11202] loop0: detected capacity change from 0 to 4096
[ 253.373086][ T28] audit: type=1326 audit(1770679601.584:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.1.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 253.410119][T11210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2463'.
[ 253.430751][T11210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2463'.
[ 253.447894][ T28] audit: type=1326 audit(1770679601.584:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11197 comm="syz.1.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f03d0f9af79 code=0x7ffc0000
[ 253.474970][T11210] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2463'.
[ 254.072318][ T7540] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 254.087833][T11229] loop0: detected capacity change from 0 to 4096
[ 254.177087][T11234] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 254.252927][ T7540] usb 2-1: Using ep0 maxpacket: 16
[ 254.273662][ T7540] usb 2-1: config 0 has no interfaces?
[ 254.279613][T11229] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[ 254.290868][T11236] loop3: detected capacity change from 0 to 1024
[ 254.305033][ T7540] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 254.319203][T11229] Remounting filesystem read-only
[ 254.341844][ T7540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 254.353108][T11236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 254.381739][T11236] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.2476: reserved inode found cleared - inode=18
[ 254.394569][ T7540] usb 2-1: Product: syz
[ 254.418382][ T7540] usb 2-1: Manufacturer: syz
[ 254.433537][ T7540] usb 2-1: SerialNumber: syz
[ 254.461319][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 254.474327][ T7540] r8152-cfgselector 2-1: config 0 descriptor??
[ 254.705870][ T7540] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[ 254.809506][T11247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2479'.
[ 254.918500][ T23] usb 2-1: USB disconnect, device number 18
[ 254.936973][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2480'.
[ 254.955624][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2480'.
[ 254.982169][T11249] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2480'.
[ 255.760432][T11282] loop1: detected capacity change from 0 to 256
[ 255.809894][T11282] FAT-fs (loop1): Directory bread(block 64) failed
[ 255.836549][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 255.852231][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 255.884849][T11282] FAT-fs (loop1): Directory bread(block 65) failed
[ 255.891568][T11282] FAT-fs (loop1): Directory bread(block 66) failed
[ 255.942407][T11282] FAT-fs (loop1): Directory bread(block 67) failed
[ 255.952553][T11282] FAT-fs (loop1): Directory bread(block 68) failed
[ 255.959138][T11282] FAT-fs (loop1): Directory bread(block 69) failed
[ 256.002413][T11282] FAT-fs (loop1): Directory bread(block 70) failed
[ 256.009792][T11282] FAT-fs (loop1): Directory bread(block 71) failed
[ 256.029335][T11282] FAT-fs (loop1): Directory bread(block 72) failed
[ 256.036237][T11282] FAT-fs (loop1): Directory bread(block 73) failed
[ 256.198438][ T28] audit: type=1800 audit(1770679604.904:160): pid=11282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2496" name="file1" dev="loop1" ino=1048618 res=0 errno=0
[ 256.728373][T11310] loop0: detected capacity change from 0 to 1024
[ 256.867592][ T998] hfsplus: b-tree write err: -5, ino 4
[ 257.465897][T11340] loop0: detected capacity change from 0 to 256
[ 257.730423][T11348] overlay: Unknown parameter 'subj_role'
[ 258.558019][T11369] loop0: detected capacity change from 0 to 2048
[ 258.611565][T11369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 258.993924][T11381] loop0: detected capacity change from 0 to 256
[ 259.041044][T11381] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d)
[ 259.522844][T11405] bridge4: entered allmulticast mode
[ 259.667753][T11409] loop0: detected capacity change from 0 to 64
[ 259.711583][T11409] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[ 259.992938][T11416] ieee802154 phy0 wpan0: encryption failed: -22
[ 260.183154][T11421] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 260.284136][T11403] loop3: detected capacity change from 0 to 32768
[ 260.313070][T11403] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2555 (11403)
[ 260.343432][T11429] loop0: detected capacity change from 0 to 8
[ 260.354042][T11430] loop1: detected capacity change from 0 to 128
[ 260.382946][T11403] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 260.431754][T11403] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[ 260.441309][T11403] BTRFS info (device loop3): turning off barriers
[ 260.448097][T11403] BTRFS info (device loop3): max_inline at 0
[ 260.449896][T11430] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 260.454191][T11403] BTRFS info (device loop3): enabling all of the rescue options
[ 260.474073][T11403] BTRFS info (device loop3): ignoring data csums
[ 260.480447][T11403] BTRFS info (device loop3): ignoring bad roots
[ 260.486771][T11403] BTRFS info (device loop3): disabling log replay at mount time
[ 260.494642][T11403] BTRFS info (device loop3): force zlib compression, level 3
[ 260.504493][T11403] BTRFS info (device loop3): enabling ssd optimizations
[ 260.511478][T11403] BTRFS info (device loop3): using spread ssd allocation scheme
[ 260.519847][T11403] BTRFS info (device loop3): allowing degraded mounts
[ 260.526719][T11403] BTRFS info (device loop3): using free space tree
[ 260.533668][T11403] workqueue: max_active 2097161 requested for btrfs-worker is out of range, clamping between 1 and 512
[ 260.546581][T11403] workqueue: max_active 2097161 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[ 260.564557][T11430] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 260.608686][T11403] workqueue: max_active 2097161 requested for btrfs-endio is out of range, clamping between 1 and 512
[ 260.629535][T11430] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.2568: No space for directory leaf checksum. Please run e2fsck -D.
[ 260.669708][T11403] workqueue: max_active 2097161 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[ 260.733307][T11403] workqueue: max_active 2097161 requested for btrfs-rmw is out of range, clamping between 1 and 512
[ 260.752490][T11430] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.2568: checksumming directory block 0
[ 260.792247][T11403] workqueue: max_active 2097161 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[ 260.826702][T11403] workqueue: max_active 2097161 requested for btrfs-compressed-write is out of range, clamping between 1 and 512
[ 260.892742][ T5069] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x752e265ca9724eb47c3236b0e85f876d1222941063a0a0afe40232d9dc9ca6dd level 0
[ 260.932267][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 260.957371][T11403] BTRFS error (device loop3): failed to load root extent
[ 260.971108][ T1091] BTRFS warning (device loop3: state C): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1
[ 261.141545][T11403] BTRFS info (device loop3: state C): auto enabling async discard
[ 261.285508][ T5774] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 261.784092][T11481] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2584'.
[ 261.826147][T11485] loop1: detected capacity change from 0 to 128
[ 261.853068][T11485] FAT-fs (loop1): Directory bread(block 162) failed
[ 261.859729][T11485] FAT-fs (loop1): Directory bread(block 163) failed
[ 261.915034][T11485] FAT-fs (loop1): Directory bread(block 164) failed
[ 261.948468][T11485] FAT-fs (loop1): Directory bread(block 165) failed
[ 261.989797][T11485] FAT-fs (loop1): Directory bread(block 166) failed
[ 262.012214][T11485] FAT-fs (loop1): Directory bread(block 167) failed
[ 262.018963][T11485] FAT-fs (loop1): Directory bread(block 168) failed
[ 262.050545][T11485] FAT-fs (loop1): Directory bread(block 169) failed
[ 262.102416][T11485] FAT-fs (loop1): Directory bread(block 162) failed
[ 262.132989][T11485] FAT-fs (loop1): Directory bread(block 163) failed
[ 262.163619][T11485] syz.1.2586: attempt to access beyond end of device
[ 262.163619][T11485] loop1: rw=3, sector=226, nr_sectors = 6 limit=128
[ 262.215207][T11485] syz.1.2586: attempt to access beyond end of device
[ 262.215207][T11485] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128
[ 262.468530][T11499] loop3: detected capacity change from 0 to 4096
[ 262.637780][T11509] loop1: detected capacity change from 0 to 164
[ 262.723616][T11509] iso9660: Corrupted directory entry in block 4 of inode 1792
[ 263.155370][T11528] geneve2: entered promiscuous mode
[ 263.256933][T11531] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2609'.
[ 263.343000][ T23] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 263.532191][ T23] usb 2-1: Using ep0 maxpacket: 16
[ 263.544146][ T23] usb 2-1: config 0 has no interfaces?
[ 263.555541][ T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 263.566176][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 263.579096][T11545] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2615'.
[ 263.588758][ T23] usb 2-1: Product: syz
[ 263.593330][ T23] usb 2-1: Manufacturer: syz
[ 263.597957][ T23] usb 2-1: SerialNumber: syz
[ 263.610369][ T23] r8152-cfgselector 2-1: config 0 descriptor??
[ 263.856110][ T23] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[ 263.903782][T11554] loop3: detected capacity change from 0 to 8192
[ 263.953854][T11554] loop3: p1 < > p2 p4 < p5 >
[ 263.958593][T11554] loop3: partition table partially beyond EOD, truncated
[ 263.978114][T11554] loop3: p1 start 524299 is beyond EOD, truncated
[ 263.987829][T11554] loop3: p2 size 16128 extends beyond EOD, truncated
[ 264.017325][T11554] loop3: p5 size 16128 extends beyond EOD, truncated
[ 264.051496][ T998] usb 2-1: config 0 descriptor??
[ 264.077860][ T23] usb 2-1: USB disconnect, device number 19
[ 264.332239][ T5835] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 264.524030][ T5835] usb 4-1: Using ep0 maxpacket: 16
[ 264.541296][ T5835] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping
[ 264.569420][ T5835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 264.599044][ T5835] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[ 264.615115][ T5835] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 264.631662][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 264.640518][ T5835] usb 4-1: Product: syz
[ 264.650252][ T5835] usb 4-1: Manufacturer: syz
[ 264.655791][ T5835] usb 4-1: SerialNumber: syz
[ 264.869889][ T5835] usb 4-1: USB disconnect, device number 16
[ 265.292959][T11586] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2637'.
[ 265.338984][T11574] loop1: detected capacity change from 0 to 32768
[ 265.441027][T11574] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 265.582873][T11574] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 265.725158][T11574] XFS (loop1): Starting recovery (logdev: internal)
[ 265.794935][T11574] XFS (loop1): Ending recovery (logdev: internal)
[ 265.844894][T11574] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0.
[ 265.871211][T11574] XFS (loop1): Failed to initialize disk quotas.
[ 266.015118][T11574] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0.
[ 266.191434][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 266.988001][T11629] loop1: detected capacity change from 0 to 4096
[ 267.057146][T11634] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 267.110211][T11636] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2656'.
[ 267.138684][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2656'.
[ 267.166470][T11629] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=16, inode=18446736377128157186, rec_len=255, name_len=2
[ 267.226084][T11629] Remounting filesystem read-only
[ 267.340394][T11640] loop3: detected capacity change from 0 to 1024
[ 267.550403][ T11] hfsplus: b-tree write err: -5, ino 4
[ 267.687496][T11650] syz.3.2663 (11650): /proc/11649/oom_adj is deprecated, please use /proc/11649/oom_score_adj instead.
[ 267.702802][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 267.894414][ T9] usb 1-1: Using ep0 maxpacket: 8
[ 267.923188][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 267.943643][ T9] usb 1-1: config 179 has no interface number 0
[ 267.949994][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 267.984182][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 268.016841][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 268.052690][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 268.092154][ T9] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 268.124706][ T9] usb 1-1: config 179 interface 65 has no altsetting 0
[ 268.152344][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 268.161437][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 268.218925][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input14
[ 268.335415][ T5124] input input14: unable to receive magic message: -110
[ 268.411649][ T5124] input input14: unable to receive magic message: -32
[ 268.552950][ T5124] input input14: unable to receive magic message: -32
[ 268.583676][ T5124] input input14: unable to receive magic message: -32
[ 268.603130][ T5124] input input14: unable to receive magic message: -32
[ 268.701408][T11686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2681'.
[ 268.726941][ T9] usb 1-1: USB disconnect, device number 13
[ 268.732990][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 268.753488][ T9] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 269.764516][T11729] loop1: detected capacity change from 0 to 512
[ 269.803649][T11729] FAT-fs (loop1): Unrecognized mount option "umask=0NÜ5¦kß ÎNðÏÉç ¦0000000000000000000010" or missing value
[ 269.824434][T11724] loop3: detected capacity change from 0 to 4096
[ 269.846816][T11729] tmpfs: Bad value for 'mpol'
[ 269.872274][T11724] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[ 269.927572][T11724] ntfs3: loop3: $AttrDef is corrupted.
[ 270.433535][T11749] batadv1: entered promiscuous mode
[ 271.212453][ T5835] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 271.420695][ T5835] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 271.437023][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 271.452168][ T23] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 271.462119][ T5835] usb 3-1: Product: syz
[ 271.466319][ T5835] usb 3-1: Manufacturer: syz
[ 271.482332][ T5835] usb 3-1: SerialNumber: syz
[ 271.516142][ T5835] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 271.543249][ T1190] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 271.653976][ T23] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 271.678127][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 271.709842][ T23] usb 4-1: config 0 descriptor??
[ 271.831102][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'.
[ 272.045261][ T5835] usb 3-1: USB disconnect, device number 17
[ 272.152752][ T23] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f
[ 272.159947][ T23] hackrf 4-1:0.0: Could not detect board
[ 272.185274][ T23] hackrf: probe of 4-1:0.0 failed with error -71
[ 272.208043][ T23] usb 4-1: USB disconnect, device number 17
[ 272.315321][T11801] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0
[ 272.632372][ T1190] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 272.649707][ T1190] ath9k_htc: Failed to initialize the device
[ 272.667833][ T5835] usb 3-1: ath9k_htc: USB layer deinitialized
[ 272.677414][T11811] !yz!: rxe_set_mtu: Set mtu to 256
[ 272.794897][T11811] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 272.900084][T11815] loop3: detected capacity change from 0 to 512
[ 272.948644][T11815] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 273.010488][T11815] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[ 273.062330][T11815] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2744: bg 0: block 248: padding at end of block bitmap is not set
[ 273.126957][T11815] Quota error (device loop3): write_blk: dquota write failed
[ 273.180104][T11815] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 273.228311][T11815] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.2744: Failed to acquire dquot type 1
[ 273.277377][T11815] EXT4-fs (loop3): 1 truncate cleaned up
[ 273.307605][T11815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[ 273.338760][T11807] loop1: detected capacity change from 0 to 32768
[ 273.355250][T11807] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2740 (11807)
[ 273.413343][T11807] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 273.447559][T11807] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[ 273.474158][T11807] BTRFS info (device loop1): turning off barriers
[ 273.480686][T11807] BTRFS info (device loop1): max_inline at 0
[ 273.487655][T11815] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.2744: deleted inode referenced: 12
[ 273.514729][T11807] BTRFS info (device loop1): enabling all of the rescue options
[ 273.541245][T11807] BTRFS info (device loop1): ignoring data csums
[ 273.563098][T11807] BTRFS info (device loop1): ignoring bad roots
[ 273.591092][T11807] BTRFS info (device loop1): disabling log replay at mount time
[ 273.622256][T11807] BTRFS info (device loop1): force zlib compression, level 3
[ 273.630051][T11807] BTRFS info (device loop1): enabling ssd optimizations
[ 273.641512][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[ 273.663011][T11807] BTRFS info (device loop1): using spread ssd allocation scheme
[ 273.697038][T11807] BTRFS info (device loop1): allowing degraded mounts
[ 273.752371][T11807] BTRFS info (device loop1): using free space tree
[ 273.759049][T11807] workqueue: max_active 2097161 requested for btrfs-worker is out of range, clamping between 1 and 512
[ 273.820065][T11807] workqueue: max_active 2097161 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[ 273.942370][T11807] workqueue: max_active 2097161 requested for btrfs-endio is out of range, clamping between 1 and 512
[ 273.982365][T11807] workqueue: max_active 2097161 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[ 274.077547][T11807] workqueue: max_active 2097161 requested for btrfs-rmw is out of range, clamping between 1 and 512
[ 274.178531][T11807] workqueue: max_active 2097161 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[ 274.297467][T11807] workqueue: max_active 2097161 requested for btrfs-compressed-write is out of range, clamping between 1 and 512
[ 274.430178][ T59] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x752e265ca9724eb47c3236b0e85f876d1222941063a0a0afe40232d9dc9ca6dd level 0
[ 274.490106][T11874] loop0: detected capacity change from 0 to 512
[ 274.505892][T11807] BTRFS error (device loop1): failed to load root extent
[ 274.523783][ T1091] BTRFS warning (device loop1: state C): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1
[ 274.572778][T11807] BTRFS info (device loop1: state C): auto enabling async discard
[ 274.609712][T11874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 274.637267][T11874] ext4 filesystem being mounted at /693/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 274.662603][T11885] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0
[ 274.675597][T11874] Quota error (device loop0): write_blk: dquota write failed
[ 274.683861][T11874] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[ 274.693304][T11874] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[ 274.703333][T11874] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.2762: Failed to acquire dquot type 1
[ 274.722494][ T28] audit: type=1800 audit(1770679623.434:161): pid=11874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2762" name="file2" dev="loop0" ino=16 res=0 errno=0
[ 274.786453][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 274.899780][ T5767] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 274.925187][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2769'.
[ 274.954226][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'.
[ 275.587119][T11909] IPVS: Unknown mcast interface: lo
[ 276.092502][T11931] tmpfs: Bad value for 'mpol'
[ 276.707676][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'.
[ 276.714451][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 276.858321][T11967] loop1: detected capacity change from 0 to 4096
[ 276.869762][T11967] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[ 276.904885][T11967] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[ 276.922670][ T27] usb 1-1: Using ep0 maxpacket: 32
[ 276.940853][ T27] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[ 276.956874][ T27] usb 1-1: config 0 has no interface number 0
[ 276.982848][ T27] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[ 277.009949][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 277.027964][ T27] usb 1-1: Product: syz
[ 277.039435][ T27] usb 1-1: Manufacturer: syz
[ 277.051206][ T27] usb 1-1: SerialNumber: syz
[ 277.083662][ T27] usb 1-1: config 0 descriptor??
[ 277.251010][T11975] loop1: detected capacity change from 0 to 2048
[ 277.291208][T11975] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 277.340238][ T27] radio-si470x 1-1:0.35: this is not a si470x device.
[ 277.367633][T11979] loop3: detected capacity change from 0 to 16
[ 277.376755][ T28] audit: type=1800 audit(1770679626.094:162): pid=11975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2805" name="bus" dev="loop1" ino=1367 res=0 errno=0
[ 277.402829][T11979] erofs: (device loop3): mounted with root inode @ nid 36.
[ 277.440776][T11979] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[ 277.459158][T11979] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 39 of nid 36
[ 277.547665][ T27] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[ 277.581948][ T27] usb 1-1: USB disconnect, device number 14
[ 277.680986][T11983] netlink: 'syz.3.2809': attribute type 5 has an invalid length.
[ 278.282002][T12009] [U] ^R
[ 278.622362][T12022] netlink: 'syz.2.2827': attribute type 21 has an invalid length.
[ 278.662219][T12022] IPv6: NLM_F_CREATE should be specified when creating new route
[ 278.825683][T11999] loop3: detected capacity change from 0 to 32768
[ 278.932393][T11999] JBD2: Ignoring recovery information on journal
[ 279.096477][T12038] loop1: detected capacity change from 0 to 256
[ 279.122563][T11999] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 279.176277][T12041] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[ 279.209098][T11999] (syz.3.2817,11999,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=7755761508285415489, rec_len=30044, name_len=0
[ 279.263325][T11999] (syz.3.2817,11999,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2
[ 279.289687][T11999] (syz.3.2817,11999,0):ocfs2_mknod:298 ERROR: status = -2
[ 279.297296][T11999] (syz.3.2817,11999,0):ocfs2_mknod:502 ERROR: status = -2
[ 279.305021][T11999] (syz.3.2817,11999,0):ocfs2_create:676 ERROR: status = -2
[ 279.558762][ T5774] ocfs2: Unmounting device (7,3) on (node local)
[ 279.699480][T12054] loop1: detected capacity change from 0 to 1764
[ 279.767901][T12054] iso9660: Corrupted directory entry in block 14 of inode 1920
[ 280.120105][T12048] loop0: detected capacity change from 0 to 32768
[ 280.177514][T12048] (syz.0.2840,12048,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 280.208078][T12048] (syz.0.2840,12048,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 280.269142][T12048] JBD2: Ignoring recovery information on journal
[ 280.366017][T12048] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 280.447924][T12068] loop3: detected capacity change from 0 to 4096
[ 280.485175][T12068] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 280.579959][T12068] ntfs3: loop3: Inode r=19 is not in use!
[ 280.594704][T12068] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 280.672512][T12079] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2853'.
[ 280.754017][ T5771] ocfs2: Unmounting device (7,0) on (node local)
[ 280.840774][T12079] team0: Port device team_slave_0 removed
[ 280.872979][T12079] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 281.247537][T12094] loop3: detected capacity change from 0 to 1024
[ 281.318578][T12094] hfsplus: request for non-existent node 3 in B*Tree
[ 281.379269][T12094] hfsplus: request for non-existent node 3 in B*Tree
[ 281.409577][T12094] hfsplus: invalid length 28418 has been corrected to 255
[ 281.434315][T12094] hfsplus: invalid length 28418 has been corrected to 255
[ 281.493870][T12102] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[ 281.733778][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2869'.
[ 281.877500][T12117] loop3: detected capacity change from 0 to 1024
[ 282.007378][T12117] hfsplus: keylen 65060 too large
[ 282.021781][T12117] hfsplus: keylen 65060 too large
[ 282.952809][T12164] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2895'.
[ 282.961930][T12164] 6eth1_to_bond: renamed from gre0 (while UP)
[ 283.011824][T12164] A link change request failed with some changes committed already. Interface 6eth1_to_bond may have been left with an inconsistent configuration, please check.
[ 283.292284][T12175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2900'.
[ 283.349702][T12178] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 283.500822][T12176] loop3: detected capacity change from 0 to 4096
[ 283.528394][T12176] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 283.628492][T12176] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[ 283.846344][T12194] loop1: detected capacity change from 0 to 2048
[ 283.921548][T12199] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 284.317516][T12211] netlink: 'syz.2.2919': attribute type 9 has an invalid length.
[ 284.567240][T12219] loop0: detected capacity change from 0 to 4096
[ 284.612169][T12219] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[ 284.645298][ T28] audit: type=1326 audit(1770679633.364:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.2.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 284.737334][T12219] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[ 284.747351][ T28] audit: type=1326 audit(1770679633.364:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.2.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 284.812980][ T28] audit: type=1326 audit(1770679633.434:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.2.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 284.872421][ T28] audit: type=1326 audit(1770679633.434:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.2.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 284.942289][ T28] audit: type=1326 audit(1770679633.434:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.2.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 285.043489][ T28] audit: type=1326 audit(1770679633.434:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.2.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 285.099164][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2930'.
[ 285.115084][T12235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2930'.
[ 285.129185][ T28] audit: type=1326 audit(1770679633.434:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.2.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 285.180348][ T28] audit: type=1326 audit(1770679633.434:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.2.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 285.281883][ T28] audit: type=1326 audit(1770679633.434:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.2.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f739e39af79 code=0x7ffc0000
[ 285.495386][T12247] loop1: detected capacity change from 0 to 1024
[ 285.692843][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 285.799665][T12262] syz.0.2944 (12262): drop_caches: 0
[ 285.895589][ T8] usb 4-1: Using ep0 maxpacket: 32
[ 285.916967][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[ 285.944289][ T8] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[ 285.969699][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 285.999411][ T8] usb 4-1: Product: syz
[ 286.025017][ T8] usb 4-1: Manufacturer: syz
[ 286.029754][ T8] usb 4-1: SerialNumber: syz
[ 286.047160][ T8] usb 4-1: config 0 descriptor??
[ 286.066165][T12246] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 286.086884][ T8] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16
[ 286.136134][T12273] loop1: detected capacity change from 0 to 256
[ 286.142896][T12275] netlink: 'syz.0.2950': attribute type 4 has an invalid length.
[ 286.341829][T12246] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[ 286.348490][T12246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 286.422436][T12246] vhci_hcd vhci_hcd.0: Device attached
[ 286.448272][T12280] vhci_hcd: connection closed
[ 286.448764][ T27] usb 4-1: USB disconnect, device number 18
[ 286.450638][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[ 286.480190][ T998] vhci_hcd: stop threads
[ 286.488636][ T998] vhci_hcd: release socket
[ 286.504530][ T998] vhci_hcd: disconnect device
[ 287.079593][T12308] netlink: 9188 bytes leftover after parsing attributes in process `syz.1.2964'.
[ 287.144742][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'.
[ 287.702262][ T786] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 287.717316][T12309] loop0: detected capacity change from 0 to 32768
[ 287.770077][T12309] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 287.878107][T12309] XFS (loop0): Ending clean mount
[ 287.887246][ T786] usb 2-1: Using ep0 maxpacket: 8
[ 287.959914][ T786] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 287.972356][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 287.980424][ T786] usb 2-1: Product: syz
[ 288.013269][T12309] syz.0.2965: attempt to access beyond end of device
[ 288.013269][T12309] loop0: rw=4096, sector=3546894483, nr_sectors = 1 limit=32768
[ 288.020033][ T786] usb 2-1: Manufacturer: syz
[ 288.082698][ T786] usb 2-1: SerialNumber: syz
[ 288.107373][ T786] usb 2-1: config 0 descriptor??
[ 288.132939][ T786] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 288.170827][ T5771] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 288.570621][ T786] gspca_sonixj: reg_r err -71
[ 288.588249][ T786] sonixj: probe of 2-1:0.0 failed with error -71
[ 288.596503][T12359] overlayfs: workdir and upperdir must be separate subtrees
[ 288.610660][ T786] usb 2-1: USB disconnect, device number 20
[ 288.635285][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'.
[ 288.658336][T12361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 288.665630][T12361] IPv6: NLM_F_CREATE should be set when creating new route
[ 288.672969][T12361] IPv6: NLM_F_CREATE should be set when creating new route
[ 289.312434][T12391] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 289.503797][T12399] ipt_REJECT: TCP_RESET invalid for non-tcp
[ 289.615743][T12403] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3008'.
[ 289.632195][T12403] 0ªX¹¦D: renamed from macvtap0 (while UP)
[ 289.654651][T12403] 0ªX¹¦D: entered allmulticast mode
[ 289.659920][T12403] veth0_macvtap: entered allmulticast mode
[ 289.671254][T12403] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check.
[ 289.704596][T12407] ip6tnl2: entered allmulticast mode
[ 289.782658][T12410] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[ 289.943482][T12416] SET target dimension over the limit!
[ 290.081173][T12422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3015'.
[ 290.400006][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3022'.
[ 290.635198][T12443] loop0: detected capacity change from 0 to 4096
[ 290.911964][T12457] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3033'.
[ 291.211670][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 291.414433][ T8] usb 3-1: config index 0 descriptor too short (expected 133, got 72)
[ 291.448586][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 291.472620][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 291.480649][ T8] usb 3-1: Product: syz
[ 291.491545][ T8] usb 3-1: Manufacturer: syz
[ 291.497863][ T8] usb 3-1: SerialNumber: syz
[ 291.521753][ T8] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 291.548586][ T5835] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 291.568608][T12481] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 291.632962][ T1190] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 291.825116][ C0] usb 3-1: ath9k_htc: over RX MAX_PKT_NUM
[ 291.838303][ T1190] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 291.857803][ T1190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 291.878129][ T1190] usb 2-1: Product: syz
[ 291.883423][ T1190] usb 2-1: Manufacturer: syz
[ 291.888112][ T1190] usb 2-1: SerialNumber: syz
[ 291.897603][ T1190] usb 2-1: config 0 descriptor??
[ 291.909081][ T1190] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 292.043568][ T9] usb 3-1: USB disconnect, device number 18
[ 292.225521][T12495] loop3: detected capacity change from 0 to 8192
[ 292.283722][T12495] loop3: p1 < > p2 p3 < p5 p6 > p4
[ 292.289158][T12495] loop3: partition table partially beyond EOD, truncated
[ 292.297942][T12495] loop3: p1 start 100663296 is beyond EOD, truncated
[ 292.305531][T12495] loop3: p2 size 134217732 extends beyond EOD, truncated
[ 292.317418][T12495] loop3: p4 size 14876672 extends beyond EOD, truncated
[ 292.322865][ T1190] gspca_sunplus: reg_w_riv err -71
[ 292.333319][T12495] loop3: p5 size 134217732 extends beyond EOD, truncated
[ 292.342203][ T1190] sunplus: probe of 2-1:0.0 failed with error -71
[ 292.359549][ T1190] usb 2-1: USB disconnect, device number 21
[ 292.369760][T12495] loop3: p6 size 14876672 extends beyond EOD, truncated
[ 292.389587][T12501] netlink: 'syz.0.3054': attribute type 8 has an invalid length.
[ 292.553734][T12505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3056'.
[ 292.635587][ T5835] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 292.659229][ T5835] ath9k_htc: Failed to initialize the device
[ 292.682903][ T9] usb 3-1: ath9k_htc: USB layer deinitialized
[ 292.736485][ T5761] udevd[5761]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[ 292.750254][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[ 292.765476][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[ 292.778069][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[ 292.788451][T10134] udevd[10134]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[ 293.024313][T12517] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[ 293.242858][ T786] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[ 293.427536][ T786] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 293.434881][T12511] loop3: detected capacity change from 0 to 32768
[ 293.437722][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 293.468868][T12529] loop1: detected capacity change from 0 to 16
[ 293.472380][ T786] usb 3-1: Product: syz
[ 293.483073][ T786] usb 3-1: Manufacturer: syz
[ 293.488303][ T786] usb 3-1: SerialNumber: syz
[ 293.499782][ T786] usb 3-1: config 0 descriptor??
[ 293.507750][T12511] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 293.513616][ T786] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 293.536275][T12529] erofs: (device loop1): mounted with root inode @ nid 36.
[ 293.615794][T12529] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3 @ nid 89
[ 293.687079][T12529] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 293.740988][T12511] XFS (loop3): Ending clean mount
[ 293.769352][T12529] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 1 for nid 89
[ 293.789448][T12539] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3069'.
[ 293.798985][T12529] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 293.809098][T12529] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 293.822360][T12539] 0ªX¹¦D: renamed from macvtap0 (while UP)
[ 293.829389][T12529] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 293.843645][T12539] 0ªX¹¦D: entered allmulticast mode
[ 293.862310][ T28] audit: type=1800 audit(1770679642.574:172): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3068" name="file2" dev="loop1" ino=89 res=0 errno=0
[ 293.883593][T12539] veth0_macvtap: entered allmulticast mode
[ 293.889897][T12539] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check.
[ 293.935132][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 293.980608][ T786] gspca_sq930x: ucbus_write failed -71
[ 293.989407][ T786] sq930x: probe of 3-1:0.0 failed with error -71
[ 294.016430][ T786] usb 3-1: USB disconnect, device number 19
[ 294.752898][T12563] loop3: detected capacity change from 0 to 64
[ 296.168699][T12607] loop3: detected capacity change from 0 to 4096
[ 296.206750][T12607] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[ 296.238128][T12613] netlink: 'syz.0.3106': attribute type 4 has an invalid length.
[ 296.246657][T12613] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3106'.
[ 296.688358][T12627] loop1: detected capacity change from 0 to 512
[ 296.789552][T12627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 296.830491][T12627] ext4 filesystem being mounted at /710/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 297.059418][T12638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3117'.
[ 297.108498][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 297.256567][T12644] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3118'.
[ 297.348191][T12617] loop0: detected capacity change from 0 to 32768
[ 297.352705][T12646] SET target dimension over the limit!
[ 297.428730][T12617]
[ 297.428730][T12617] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 297.428730][T12617]
[ 297.490843][T12617] __jfs_setxattr: xattr_size = 67, new_size = 161
[ 297.618513][ T1091]
[ 297.618513][ T1091] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 297.618513][ T1091]
[ 297.636338][T12656] ieee802154 phy0 wpan0: encryption failed: -22
[ 297.649276][ T1091]
[ 297.649276][ T1091] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 297.649276][ T1091]
[ 297.666486][ T5771]
[ 297.666486][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 297.666486][ T5771]
[ 297.710570][ T5771]
[ 297.710570][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 297.710570][ T5771]
[ 297.738653][ T111] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN
[ 297.750421][ T111] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047]
[ 297.758850][ T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted syzkaller #0
[ 297.766058][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 297.776124][ T111] RIP: 0010:lmLogSync+0x112/0x9f0
[ 297.781180][ T111] Code: 2f 81 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 4c 58 d9 fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 30 58 d9 fe 49 8b 3f e8 68 0c af fe
[ 297.800875][ T111] RSP: 0018:ffffc900025f7c40 EFLAGS: 00010202
[ 297.806972][ T111] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000
[ 297.814961][ T111] RDX: ffff888018ffbc00 RSI: 0000000000000001 RDI: 0000000000000000
[ 297.822946][ T111] RBP: ffffc900025f7d48 R08: 0000000000000003 R09: 0000000000000000
[ 297.830922][ T111] R10: ffffc900025f7ca0 R11: fffff520004bef98 R12: ffff88801ef06000
[ 297.838923][ T111] R13: ffffc900025f7ca0 R14: ffff88802f99ca38 R15: 0000000000000040
[ 297.846929][ T111] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 297.855870][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 297.862478][ T111] CR2: 00007f71bb055000 CR3: 000000002f5e0000 CR4: 00000000003506f0
[ 297.870472][ T111] Call Trace:
[ 297.873764][ T111]
[ 297.876717][ T111] ? jfs_syncpt+0x25/0x90
[ 297.881070][ T111] ? lmWriteRecord+0x1ac0/0x1ac0
[ 297.886020][ T111] ? __rwlock_init+0x150/0x150
[ 297.890808][ T111] jfs_syncpt+0x7b/0x90
[ 297.894995][ T111] txEnd+0x2e5/0x520
[ 297.898919][ T111] jfs_lazycommit+0x5a4/0xa70
[ 297.903625][ T111] ? txFreelock+0x5a0/0x5a0
[ 297.908152][ T111] ? do_task_dead+0xd0/0xd0
[ 297.912673][ T111] ? __kthread_parkme+0x7a/0x1c0
[ 297.917617][ T111] kthread+0x2fa/0x390
[ 297.921703][ T111] ? txFreelock+0x5a0/0x5a0
[ 297.926229][ T111] ? kthread_blkcg+0xd0/0xd0
[ 297.930840][ T111] ret_from_fork+0x48/0x80
[ 297.935289][ T111] ? kthread_blkcg+0xd0/0xd0
[ 297.939888][ T111] ret_from_fork_asm+0x11/0x20
[ 297.944699][ T111]
[ 297.947746][ T111] Modules linked in:
[ 297.951701][ C0] vkms_vblank_simulate: vblank timer overrun
[ 297.990477][ T111] ---[ end trace 0000000000000000 ]---
[ 297.997146][ T111] RIP: 0010:lmLogSync+0x112/0x9f0
[ 298.005640][ T111] Code: 2f 81 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 4c 58 d9 fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 30 58 d9 fe 49 8b 3f e8 68 0c af fe
[ 298.046560][ T111] RSP: 0018:ffffc900025f7c40 EFLAGS: 00010202
[ 298.059609][ T111] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000
[ 298.082095][ T111] RDX: ffff888018ffbc00 RSI: 0000000000000001 RDI: 0000000000000000
[ 298.090155][ T111] RBP: ffffc900025f7d48 R08: 0000000000000003 R09: 0000000000000000
[ 298.099051][ T111] R10: ffffc900025f7ca0 R11: fffff520004bef98 R12: ffff88801ef06000
[ 298.107145][ T111] R13: ffffc900025f7ca0 R14: ffff88802f99ca38 R15: 0000000000000040
[ 298.115321][ T111] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 298.124453][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 298.131140][ T111] CR2: 00007f739e5e6358 CR3: 0000000063f6f000 CR4: 00000000003506f0
[ 298.139310][ T111] Kernel panic - not syncing: Fatal exception
[ 298.145945][ T111] Kernel Offset: disabled
[ 298.150271][ T111] Rebooting in 86400 seconds..