last executing test programs:
8m11.523336576s ago: executing program 1 (id=3828):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ffb}]})
setreuid(0xee01, 0xee00)
8m11.314438008s ago: executing program 1 (id=3831):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x200400c4)
8m11.049016523s ago: executing program 1 (id=3834):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x6, 0x2000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x6}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
8m10.795199368s ago: executing program 1 (id=3837):
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
8m10.462504568s ago: executing program 1 (id=3839):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfff8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
8m10.08644973s ago: executing program 1 (id=3844):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
8m9.527970822s ago: executing program 32 (id=3844):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
1.687312361s ago: executing program 2 (id=11005):
r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000300)="0100000000000004ff6943b80000000800000028f2000000008607000000d7b01f63dd95890000947132923301ec74fa98cb594ed9fabe9e", 0x418, r0)
1.624225295s ago: executing program 5 (id=11008):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x4, 0x3b7, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x64, 0x0, 0x7, 0x4, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}]}}}}})
1.501623862s ago: executing program 2 (id=11010):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000ff61f316e9000800010002081000418e00000004fcff", 0x58}], 0x1)
1.35937117s ago: executing program 4 (id=11012):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40003)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x9, {0x3, 0x8, 0x9, 0x200}})
1.359136191s ago: executing program 0 (id=11013):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1411, 0x1, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x0)
1.326968603s ago: executing program 5 (id=11014):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0xd)
1.308972984s ago: executing program 2 (id=11015):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x17c, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in=@rand_addr=0x64010101}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
1.187382651s ago: executing program 0 (id=11016):
r0 = syz_open_dev$vbi(&(0x7f0000001340), 0x1, 0x2)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000013c0)=@fd={0x7, 0xc, 0x4, 0x2000, 0x27, {0x77359400}, {0x1, 0xc, 0x0, 0xb2, 0x5, 0xf7, "230b6991"}, 0x7ff, 0x4, {}, 0x2})
1.172328921s ago: executing program 3 (id=11017):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a781)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000740)={0x80, 0x1, 0x2, 0x7, 0x0, 0x10000})
1.109973095s ago: executing program 4 (id=11018):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', 0x0})
1.000932561s ago: executing program 5 (id=11019):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={[{@nr_inodes={'nr_inodes', 0x3d, [0x2d]}}]})
923.408886ms ago: executing program 0 (id=11020):
open(&(0x7f0000000140)='./file0\x00', 0xc2, 0xcd)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='devices'}]})
923.187526ms ago: executing program 3 (id=11021):
r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r0, 0x0, 0x400000000000000, 0x7)
902.864397ms ago: executing program 2 (id=11022):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000001580), 0x4)
860.78725ms ago: executing program 4 (id=11023):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4800)
731.349787ms ago: executing program 5 (id=11024):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x7fffffffffffffff, 0x80000000})
731.145057ms ago: executing program 0 (id=11025):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x0, [0x8, 0x1, 0x9, 0x6, 0x0, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x50)
707.628318ms ago: executing program 2 (id=11026):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)
665.214211ms ago: executing program 3 (id=11027):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000004100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
563.327956ms ago: executing program 4 (id=11028):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x4b)
556.930417ms ago: executing program 5 (id=11029):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000b40), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000b80)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '&\\\x16}{', 0x3a, '', 0x3a, './file2/../file0', 0x3a, [0x4f, 0x50, 0x43, 0x43]}, 0x39)
519.72287ms ago: executing program 0 (id=11030):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz 020'], 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
428.905614ms ago: executing program 2 (id=11031):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c636f686572656e63793d66756c6c2c726573765f6c6576656c3d303030303030303030303030303030303030303000000000000000006f636b732c636f686572656e63793d66756c6c2c696e6f646536342c00bc223b43a5f0d5ec0cf95242"], 0x1, 0x4421, &(0x7f0000004500)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x2042023, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
381.686347ms ago: executing program 4 (id=11032):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b)
366.728198ms ago: executing program 3 (id=11033):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x80, 0x0, 0xffffffff, 0x17})
214.664427ms ago: executing program 0 (id=11034):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000050019"], 0xc8}}, 0x0)
214.369987ms ago: executing program 5 (id=11035):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a31000000000a000700726f755465000000140004800800014000000000080002"], 0x94}}, 0x20000004)
155.519691ms ago: executing program 3 (id=11036):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
52.622926ms ago: executing program 4 (id=11037):
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, 0x0)
0s ago: executing program 3 (id=11038):
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fallocate(r0, 0x0, 0x2, 0xffffffffffffffe9)
kernel console output (not intermixed with test programs):
lC3/../uevent} for writing: No such file or directory
[ 709.883235][T23143] XFS (loop4): Ending clean mount
[ 709.911117][T23147] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 709.951327][T23147] Node 1 Normal: 225*4kB (UM) 40*8kB (UME) 29*16kB (UME) 184*32kB (UME) 59*64kB (UE) 22*128kB (UME) 8*256kB (UE) 6*512kB (UM) 1*1024kB (E) 3*2048kB (UE) 946*4096kB (M) = 3901268kB
[ 709.971048][T23147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 710.002456][T23147] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 710.014484][T23147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 710.024664][T23147] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 710.027205][ T4282] XFS (loop4): Unmounting Filesystem
[ 710.034270][T23147] 59814 total pagecache pages
[ 710.045025][T23147] 0 pages in swap cache
[ 710.054631][T23147] Free swap = 124472kB
[ 710.059114][T23147] Total swap = 124996kB
[ 710.069239][T23147] 2097051 pages RAM
[ 710.077362][T23147] 0 pages HighMem/MovableOnly
[ 710.085264][T23147] 415205 pages reserved
[ 710.089486][T23147] 0 pages cma reserved
[ 710.346201][T23171] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new'
[ 710.482732][T23173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8534'.
[ 711.546715][T23208] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[ 712.885986][T23260] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[ 712.921353][T23260] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[ 713.228574][T23234] loop0: detected capacity change from 0 to 32768
[ 713.940745][T15106] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 714.102541][T23298] overlayfs: conflicting options: userxattr,redirect_dir=on
[ 714.140748][T15106] usb 1-1: Using ep0 maxpacket: 16
[ 714.156595][T15106] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 714.200547][T15106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 714.218820][T15106] usb 1-1: Product: syz
[ 714.224410][T15106] usb 1-1: Manufacturer: syz
[ 714.229206][T15106] usb 1-1: SerialNumber: syz
[ 714.256165][T15106] r8152-cfgselector 1-1: config 0 descriptor??
[ 714.530391][ T4358] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 714.715891][T15106] r8152-cfgselector 1-1: Unknown version 0x0000
[ 714.720878][ T4358] usb 3-1: Using ep0 maxpacket: 32
[ 714.734914][ T4358] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[ 714.744749][T15106] r8152-cfgselector 1-1: USB disconnect, device number 45
[ 714.769650][ T4358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 714.799140][ T4358] usb 3-1: Product: syz
[ 714.818849][ T4358] usb 3-1: Manufacturer: syz
[ 714.828990][ T4358] usb 3-1: SerialNumber: syz
[ 714.854654][T23321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8606'.
[ 714.855932][ T4358] usb 3-1: config 0 descriptor??
[ 714.902424][T23322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8607'.
[ 714.939226][T23324] netlink: 'syz.5.8608': attribute type 1 has an invalid length.
[ 714.947361][T23324] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8608'.
[ 714.968141][T23322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8607'.
[ 715.114442][ T4358] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device:
[ 715.132275][ T4358] 00 00 00 00 00 00 00 00
[ 715.137025][ T4358] snd-usb-6fire: probe of 3-1:0.0 failed with error -5
[ 715.361131][ T4358] usb 3-1: USB disconnect, device number 33
[ 715.581022][T23340] xt_connbytes: Forcing CT accounting to be enabled
[ 715.588012][T23340] set match dimension is over the limit!
[ 715.982630][T23328] loop4: detected capacity change from 0 to 32768
[ 716.043348][T23328] ERROR: (device loop4): diAllocAG: error reading iag
[ 716.043348][T23328]
[ 716.099247][T23328] ialloc: diAlloc returned -5!
[ 716.619732][T23373] netlink: 'syz.3.8631': attribute type 1 has an invalid length.
[ 716.852830][T23381] netlink: 'syz.2.8636': attribute type 5 has an invalid length.
[ 716.957956][T23384] xt_TCPMSS: Only works on TCP SYN packets
[ 717.380714][T23401] netlink: 340 bytes leftover after parsing attributes in process `syz.2.8646'.
[ 717.424614][T23401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8646'.
[ 717.511143][T23405] netlink: 'syz.0.8649': attribute type 2 has an invalid length.
[ 717.874513][T23420] cgroup: none used incorrectly
[ 718.355991][T23436] binder: 23435:23436 ioctl c00c6211 ffffffffffffffff returned -14
[ 718.583548][T23446] netlink: 'syz.4.8668': attribute type 6 has an invalid length.
[ 718.670686][T15106] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 718.860550][T15106] usb 4-1: Using ep0 maxpacket: 32
[ 718.868095][T15106] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 718.908843][T15106] usb 4-1: config 7 has an invalid interface number: 187 but max is 0
[ 718.947881][T15106] usb 4-1: config 7 has no interface number 0
[ 718.964520][T15106] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[ 718.981243][T15106] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0
[ 718.992575][T15106] usb 4-1: config 7 interface 187 has no altsetting 0
[ 719.002634][T15106] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[ 719.035835][T15106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 719.074296][T15106] usb 4-1: Product: syz
[ 719.088846][T15106] usb 4-1: Manufacturer: syz
[ 719.094476][T15106] usb 4-1: SerialNumber: syz
[ 719.311764][T15106] usb 4-1: Unknown endpoint type found, address 0x07
[ 719.318536][T15106] usb 4-1: Not enough endpoints found in device, aborting!
[ 719.543657][ T4481] usb 4-1: USB disconnect, device number 41
[ 719.726418][T23482] loop4: detected capacity change from 0 to 4096
[ 719.799024][T23482] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[ 719.816414][T23489] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 719.884804][T23482] NILFS (loop4): mounting fs with errors
[ 719.968277][T23493] loop0: detected capacity change from 0 to 764
[ 719.975853][T23495] netlink: 'syz.2.8690': attribute type 3 has an invalid length.
[ 720.000639][T23482] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6
[ 720.027000][T23493] rock: directory entry would overflow storage
[ 720.039733][T23493] rock: sig=0x4654, size=5, remaining=4
[ 720.192574][T23497] netlink: 'syz.5.8693': attribute type 6 has an invalid length.
[ 720.360454][ T26] audit: type=1326 audit(1770812043.900:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23503 comm="syz.4.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 720.479337][ T26] audit: type=1326 audit(1770812043.910:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23503 comm="syz.4.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 720.609803][T23507] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8698'.
[ 720.622460][ T26] audit: type=1326 audit(1770812043.910:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23503 comm="syz.4.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 720.656524][ T26] audit: type=1326 audit(1770812043.910:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23503 comm="syz.4.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 720.688419][ T26] audit: type=1326 audit(1770812043.910:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23503 comm="syz.4.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 720.712623][T23507] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8698'.
[ 720.722788][T23507] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8698'.
[ 720.742508][T23507] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 720.778873][ T26] audit: type=1326 audit(1770812044.230:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23508 comm="syz.4.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 720.887984][ T26] audit: type=1326 audit(1770812044.230:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23508 comm="syz.4.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 720.973339][T23517] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 721.018193][ T26] audit: type=1326 audit(1770812044.310:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23508 comm="syz.4.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 721.110734][ T26] audit: type=1326 audit(1770812044.310:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23508 comm="syz.4.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 721.193716][ T26] audit: type=1326 audit(1770812044.310:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23508 comm="syz.4.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 721.647950][T23542] device sit0 entered promiscuous mode
[ 721.718134][T23542] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8715'.
[ 721.980922][T23551] set match dimension is over the limit!
[ 722.004275][T23553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8719'.
[ 722.060422][ T4358] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 722.070421][T23525] loop3: detected capacity change from 0 to 32768
[ 722.140628][T23525] jfs_strtoUCS: char2uni returned -22.
[ 722.146169][T23525] charset = cp949, char = 0xd4
[ 722.250479][ T4358] usb 3-1: Using ep0 maxpacket: 16
[ 722.258236][ T4358] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 722.291752][ T4358] usb 3-1: config 0 has no interface number 0
[ 722.319300][ T4358] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[ 722.401115][ T4358] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[ 722.401164][T23560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8722'.
[ 722.446939][ T4358] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[ 722.470985][T23562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8723'.
[ 722.481094][ T4358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 722.532196][ T4358] usb 3-1: Product: syz
[ 722.544334][ T4358] usb 3-1: Manufacturer: syz
[ 722.554711][ T4358] usb 3-1: SerialNumber: syz
[ 722.582120][ T4358] usb 3-1: config 0 descriptor??
[ 722.899205][T15108] usb 3-1: USB disconnect, device number 34
[ 723.023851][T23578] netlink: 'syz.5.8729': attribute type 3 has an invalid length.
[ 723.078502][T23578] netlink: 'syz.5.8729': attribute type 1 has an invalid length.
[ 723.491492][T23589] /dev/loop5: Can't open blockdev
[ 723.573258][T23596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8735'.
[ 723.901534][T23606] loop0: detected capacity change from 0 to 2048
[ 723.948245][T23606] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 724.301605][T23621] xt_cluster: node mask cannot exceed total number of nodes
[ 724.572271][T23632] usb usb9: usbfs: process 23632 (syz.3.8754) did not claim interface 0 before use
[ 725.535471][T23671] SET target dimension over the limit!
[ 725.560722][T23673] IPv6: sit2: Disabled Multicast RS
[ 726.040483][ T4481] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 726.080612][ T4358] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 726.246492][ T4481] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 726.257097][ T4481] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 726.270457][ T4358] usb 6-1: Using ep0 maxpacket: 8
[ 726.279337][ T4358] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 726.311402][ T4481] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 726.322854][ T26] audit: type=1326 audit(1770812049.870:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.3.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 726.337146][ T4358] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[ 726.345225][ C0] vkms_vblank_simulate: vblank timer overrun
[ 726.370394][ T4481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 726.388786][ T4481] usb 3-1: SerialNumber: syz
[ 726.396464][T23703] loop4: detected capacity change from 0 to 512
[ 726.411686][ T4358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 726.422151][ T26] audit: type=1326 audit(1770812049.910:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.3.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 726.444526][ C0] vkms_vblank_simulate: vblank timer overrun
[ 726.444823][ T4358] usb 6-1: Product: syz
[ 726.444876][ T4358] usb 6-1: Manufacturer: syz
[ 726.444897][ T4358] usb 6-1: SerialNumber: syz
[ 726.515247][ T4358] usb 6-1: config 0 descriptor??
[ 726.528832][T23703] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 726.539589][ T26] audit: type=1326 audit(1770812049.910:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.3.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 726.561999][ C0] vkms_vblank_simulate: vblank timer overrun
[ 726.565514][ T4358] cdc_phonet 6-1:0.0: skipping garbage
[ 726.622407][T23703] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 726.637063][ T4481] usb 3-1: 0:2 : does not exist
[ 726.643818][ T26] audit: type=1326 audit(1770812049.910:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.3.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 726.650709][ T4358] cdc_phonet: probe of 6-1:0.0 failed with error -22
[ 726.673555][ T4481] usb 3-1: unit 5: unexpected type 0x03
[ 726.699895][ T4481] usb 3-1: USB disconnect, device number 35
[ 726.708267][T23703] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[ 726.731789][ T26] audit: type=1326 audit(1770812049.910:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.3.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 726.754390][T23703] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 726.780421][T23703] System zones: 0-2, 18-18, 34-35
[ 726.786389][T15108] usb 6-1: USB disconnect, device number 18
[ 726.827751][T23703] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 726.847922][ T26] audit: type=1326 audit(1770812049.910:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.3.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 726.881662][ T26] audit: type=1326 audit(1770812049.910:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.3.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 726.943489][ T26] audit: type=1326 audit(1770812049.910:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.3.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 726.981450][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 727.020086][ T26] audit: type=1326 audit(1770812049.910:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23700 comm="syz.3.8788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 727.073696][ T4282] EXT4-fs (loop4): unmounting filesystem.
[ 727.275368][T23716] loop0: detected capacity change from 0 to 4096
[ 727.377583][T23720] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 727.399280][T23716] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[ 727.430965][T23716] NILFS (loop0): mounting fs with errors
[ 727.539058][T23716] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6
[ 727.672788][T23729] libceph: resolve '0' (ret=-3): failed
[ 727.878612][ T26] audit: type=1400 audit(1770812051.420:390): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=23734 comm="syz.2.8804"
[ 728.132733][T23745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8807'.
[ 728.241631][T23743] loop2: detected capacity change from 0 to 4096
[ 728.287883][T23743] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[ 729.029860][T23773] Non-string source
[ 729.582219][T23786] loop3: detected capacity change from 0 to 4096
[ 729.619450][T23786] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[ 729.730928][T23786] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 730.014439][T23803] loop4: detected capacity change from 0 to 512
[ 730.064703][T23805] netlink: 'syz.3.8836': attribute type 1 has an invalid length.
[ 730.113374][T23805] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8836'.
[ 730.191481][T23803] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[ 730.199741][T23803] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[ 730.234576][T23811] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8838'.
[ 730.331816][T23803] EXT4-fs (loop4): 1 truncate cleaned up
[ 730.337591][T23803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 730.347371][T23813] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.8839'.
[ 730.366790][T23777] loop2: detected capacity change from 0 to 32768
[ 730.407893][T23803] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[ 730.446343][T23777] jfs_strtoUCS: char2uni returned -22.
[ 730.454306][T23777] charset = cp936, char = 0xd4
[ 730.581714][ T4282] EXT4-fs (loop4): unmounting filesystem.
[ 730.835659][T23827] loop0: detected capacity change from 0 to 256
[ 730.880637][T23826] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8847'.
[ 730.890012][T23826] netlink: 7 bytes leftover after parsing attributes in process `syz.5.8847'.
[ 731.526503][T23844] netlink: 'syz.5.8855': attribute type 1 has an invalid length.
[ 731.740010][T23850] loop3: detected capacity change from 0 to 2048
[ 731.880536][T23860] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 731.970003][T23850] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[ 732.059270][T23850] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16)
[ 732.095250][T23850] Remounting filesystem read-only
[ 732.116159][T23850] NILFS (loop3): error -5 truncating bmap (ino=16)
[ 732.205827][ T4268] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[ 732.823595][T23888] loop0: detected capacity change from 0 to 512
[ 732.878932][T23888] EXT4-fs error (device loop0): __ext4_fill_super:5423: inode #2: comm syz.0.8876: casefold flag without casefold feature
[ 732.893403][T23888] EXT4-fs (loop0): get root inode failed
[ 732.899100][T23888] EXT4-fs (loop0): mount failed
[ 732.941608][T23896] loop4: detected capacity change from 0 to 1024
[ 733.009731][T23896] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 733.037956][T23896] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 733.058542][T23896] EXT4-fs: Ignoring removed i_version option
[ 733.106192][T23896] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 733.150075][T23896] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 733.326817][ T4282] EXT4-fs (loop4): unmounting filesystem.
[ 733.771013][T23921] loop4: detected capacity change from 0 to 64
[ 733.821090][T23923] xt_hashlimit: size too large, truncated to 1048576
[ 733.858330][T23923] xt_hashlimit: max too large, truncated to 1048576
[ 734.176902][T23897] loop3: detected capacity change from 0 to 32768
[ 734.257643][T23938] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8899'.
[ 734.324175][T23897] XFS (loop3): Mounting V5 Filesystem
[ 734.501932][T23897] XFS (loop3): Ending clean mount
[ 734.528935][T23951] netlink: 'syz.2.8902': attribute type 1 has an invalid length.
[ 734.580004][T23951] netlink: 'syz.2.8902': attribute type 2 has an invalid length.
[ 734.688349][ T4268] XFS (loop3): Unmounting Filesystem
[ 734.983510][T23961] netlink: 'syz.2.8906': attribute type 3 has an invalid length.
[ 735.027280][T23961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8906'.
[ 735.349516][T23970] Error parsing options; rc = [-22]
[ 735.766950][ T52] block nbd0: Attempted send on invalid socket
[ 735.773273][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 736.058743][T23990] netlink: 'syz.3.8919': attribute type 15 has an invalid length.
[ 736.104235][T23994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8921'.
[ 736.472253][T24005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8927'.
[ 737.388304][T24006] loop0: detected capacity change from 0 to 32768
[ 737.608051][T24012] loop3: detected capacity change from 0 to 32768
[ 737.670962][T24034] device bridge3 entered promiscuous mode
[ 737.739421][T24037] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8943'.
[ 737.830845][T24012] XFS (loop3): Mounting V5 Filesystem
[ 737.997540][T24012] XFS (loop3): Ending clean mount
[ 738.219410][ T4268] XFS (loop3): Unmounting Filesystem
[ 739.183382][T24088] netlink: 'syz.4.8965': attribute type 2 has an invalid length.
[ 739.683632][T24106] tmpfs: Bad value for 'mpol'
[ 739.921069][T24116] futex_wake_op: syz.4.8979 tries to shift op by -1; fix this program
[ 740.323855][T24129] loop0: detected capacity change from 0 to 128
[ 740.344493][ T26] kauditd_printk_skb: 1 callbacks suppressed
[ 740.344510][ T26] audit: type=1326 audit(1770812063.890:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24128 comm="syz.3.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 740.383083][T24129] FAT-fs (loop0): Directory bread(block 11554) failed
[ 740.455297][T24129] FAT-fs (loop0): Directory bread(block 11555) failed
[ 740.460763][ T26] audit: type=1326 audit(1770812063.920:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24128 comm="syz.3.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 740.530963][ T26] audit: type=1326 audit(1770812063.920:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24128 comm="syz.3.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 740.542081][T24129] FAT-fs (loop0): Directory bread(block 11556) failed
[ 740.576265][T24136] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 740.585245][T24136] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[ 740.601093][ T26] audit: type=1326 audit(1770812063.930:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24128 comm="syz.3.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 740.603728][T24129] FAT-fs (loop0): Directory bread(block 11557) failed
[ 740.640863][T24136] overlayfs: missing 'lowerdir'
[ 740.700974][T24129] FAT-fs (loop0): Directory bread(block 11558) failed
[ 740.701255][ T26] audit: type=1326 audit(1770812063.940:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24128 comm="syz.3.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 740.718626][T24129] FAT-fs (loop0): Directory bread(block 11559) failed
[ 740.780938][T24129] FAT-fs (loop0): Directory bread(block 11560) failed
[ 740.791055][T24129] FAT-fs (loop0): Directory bread(block 11561) failed
[ 740.820174][T24129] FAT-fs (loop0): Directory bread(block 11562) failed
[ 740.840456][ T26] audit: type=1326 audit(1770812063.940:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24128 comm="syz.3.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 740.858102][T24129] FAT-fs (loop0): Directory bread(block 11563) failed
[ 740.947767][ T26] audit: type=1326 audit(1770812063.940:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24128 comm="syz.3.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 740.999217][T24145] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 741.048789][ T26] audit: type=1326 audit(1770812063.940:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24128 comm="syz.3.8986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 741.705310][T24165] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9002'.
[ 742.304142][T24183] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9010'.
[ 742.375125][T24151] loop2: detected capacity change from 0 to 40427
[ 742.377018][T24183] tc_dump_action: action bad kind
[ 742.424946][T24151] F2FS-fs (loop2): Invalid log sectorsize (131081)
[ 742.472202][T24151] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 742.519702][T24151] F2FS-fs (loop2): invalid crc value
[ 742.564857][T24151] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[ 742.839303][T24151] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[ 742.858872][T24201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9018'.
[ 742.879385][T24151] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 742.922450][T24151] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 743.258808][T24214] loop4: detected capacity change from 0 to 256
[ 743.265369][T15106] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 743.351643][T24214] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[ 743.496190][T15108] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 743.507932][T15106] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 743.527531][T15106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 743.545404][T15106] usb 4-1: Product: syz
[ 743.549804][T15106] usb 4-1: Manufacturer: syz
[ 743.557753][T15106] usb 4-1: SerialNumber: syz
[ 743.586330][T15106] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 743.654655][T15106] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 743.703022][T24222] vcan0 speed is unknown, defaulting to 1000
[ 743.712225][T15108] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[ 743.725934][T24221] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20003
[ 743.741496][T15108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 743.768722][T15108] pwc: Logitech/Cisco VT Camera webcam detected.
[ 743.829464][T24224] loop2: detected capacity change from 0 to 256
[ 743.968629][T15108] pwc: Failed to set LED on/off time (-71)
[ 743.983696][T15108] pwc: send_video_command error -71
[ 744.017813][T15108] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 744.046305][T15108] Philips webcam: probe of 1-1:127.0 failed with error -71
[ 744.053899][T24228] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9030'.
[ 744.080665][T15108] usb 1-1: USB disconnect, device number 46
[ 744.134627][ T36] usb 4-1: USB disconnect, device number 42
[ 744.210073][T24232] netlink: 'syz.2.9032': attribute type 1 has an invalid length.
[ 744.620524][ T4358] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 744.741052][T15106] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 744.748111][T15106] ath9k_htc: Failed to initialize the device
[ 744.770933][ T36] usb 4-1: ath9k_htc: USB layer deinitialized
[ 744.850867][ T4358] usb 5-1: Using ep0 maxpacket: 16
[ 744.867136][ T4358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 744.899288][ T4358] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 744.921460][ T4358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 744.929699][ T4358] usb 5-1: Product: syz
[ 744.934099][ T4358] usb 5-1: Manufacturer: syz
[ 744.938738][ T4358] usb 5-1: SerialNumber: syz
[ 744.964666][ T4358] usb 5-1: config 0 descriptor??
[ 744.988063][ T4358] hub 5-1:0.0: bad descriptor, ignoring hub
[ 745.007938][ T4358] hub: probe of 5-1:0.0 failed with error -5
[ 745.036596][ T4358] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28
[ 745.160525][ T36] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 745.246544][T24263] loop0: detected capacity change from 0 to 2048
[ 745.371281][T24266] xt_TCPMSS: Only works on TCP SYN packets
[ 745.380569][ T36] usb 4-1: Using ep0 maxpacket: 32
[ 745.388568][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 745.404386][T24267] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 745.410034][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 745.480548][ T36] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 745.530661][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 745.555217][ T36] usb 4-1: config 0 descriptor??
[ 745.564313][ T36] hub 4-1:0.0: USB hub found
[ 745.769616][ T36] hub 4-1:0.0: 1 port detected
[ 745.976567][ T36] hub 4-1:0.0: hub_hub_status failed (err = -71)
[ 745.993391][ T36] hub 4-1:0.0: config failed, can't get hub status (err -71)
[ 746.050141][ T36] usbhid 4-1:0.0: can't add hid device: -71
[ 746.064145][ T36] usbhid: probe of 4-1:0.0 failed with error -71
[ 746.121329][ T36] usb 4-1: USB disconnect, device number 43
[ 746.234865][T24291] overlayfs: workdir and upperdir must be separate subtrees
[ 746.306126][T24293] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.9063'.
[ 746.326808][T24293] netlink: zone id is out of range
[ 746.349090][T24293] netlink: del zone limit has 4 unknown bytes
[ 746.839913][T24308] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9071'.
[ 746.962091][T24314] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 747.062855][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[ 747.069280][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[ 747.310690][T24316] loop2: detected capacity change from 0 to 4096
[ 748.637886][T24369] netlink: 'syz.4.9100': attribute type 49 has an invalid length.
[ 748.691664][T24369] netlink: 'syz.4.9100': attribute type 49 has an invalid length.
[ 749.553601][ T4358] usb 5-1: USB disconnect, device number 33
[ 749.915156][T24415] sock: sock_timestamping_bind_phc: sock not bind to device
[ 750.144437][T24421] loop0: detected capacity change from 0 to 16
[ 750.201870][T24421] erofs: (device loop0): mounted with root inode @ nid 36.
[ 750.250645][T24421] erofs: (device loop0): erofs_find_target_block: corrupted dir block 0 @ nid 36
[ 750.679515][T24436] loop4: detected capacity change from 0 to 256
[ 750.762506][T24436] FAT-fs (loop4): Directory bread(block 64) failed
[ 750.769171][T24436] FAT-fs (loop4): Directory bread(block 65) failed
[ 750.828559][T24436] FAT-fs (loop4): Directory bread(block 66) failed
[ 750.869460][T24436] FAT-fs (loop4): Directory bread(block 67) failed
[ 750.910496][T24436] FAT-fs (loop4): Directory bread(block 68) failed
[ 750.917133][T24436] FAT-fs (loop4): Directory bread(block 69) failed
[ 750.950624][T24436] FAT-fs (loop4): Directory bread(block 70) failed
[ 750.957230][T24436] FAT-fs (loop4): Directory bread(block 71) failed
[ 750.983211][T24436] FAT-fs (loop4): Directory bread(block 72) failed
[ 750.989863][T24436] FAT-fs (loop4): Directory bread(block 73) failed
[ 751.048406][T24446] loop0: detected capacity change from 0 to 16
[ 751.111379][T24446] erofs: (device loop0): erofs_read_inode: unsupported chunk format 7fff of nid 36
[ 751.202528][T24444] loop2: detected capacity change from 0 to 4096
[ 751.277962][T24444] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[ 751.455634][T24452] xt_NFQUEUE: number of total queues is 0
[ 751.592579][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9144'.
[ 751.734990][T24461] ieee802154 phy0 wpan0: encryption failed: -22
[ 751.882950][T24468] device entered promiscuous mode
[ 752.109206][T15108] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 752.144640][T24480] loop0: detected capacity change from 0 to 164
[ 752.300381][T15108] usb 4-1: Using ep0 maxpacket: 16
[ 752.307381][T15108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 752.351437][T15108] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 752.379731][T15108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 752.433571][T15108] usb 4-1: Product: syz
[ 752.437820][T15108] usb 4-1: Manufacturer: syz
[ 752.463178][T15108] usb 4-1: SerialNumber: syz
[ 752.491655][T15108] usb 4-1: config 0 descriptor??
[ 752.522150][T15108] hub 4-1:0.0: bad descriptor, ignoring hub
[ 752.528228][T15108] hub: probe of 4-1:0.0 failed with error -5
[ 752.577831][T15108] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31
[ 752.948047][T24501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9165'.
[ 752.994653][T24501] tc_dump_action: action bad kind
[ 753.031006][ T4358] usb 4-1: USB disconnect, device number 44
[ 753.158984][ T26] audit: type=1326 audit(1770812076.700:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24508 comm="syz.2.9168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 753.181385][ C1] vkms_vblank_simulate: vblank timer overrun
[ 753.218181][ T26] audit: type=1326 audit(1770812076.740:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24508 comm="syz.2.9168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 753.281712][ T26] audit: type=1326 audit(1770812076.740:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24508 comm="syz.2.9168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 753.843994][T24533] netlink: 'syz.2.9180': attribute type 39 has an invalid length.
[ 753.870186][T24533] netlink: 'syz.2.9180': attribute type 33 has an invalid length.
[ 753.908331][T24533] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9180'.
[ 753.944810][T24535] netlink: 'syz.4.9181': attribute type 4 has an invalid length.
[ 754.671278][T24563] loop4: detected capacity change from 0 to 64
[ 755.446895][ T26] audit: type=1326 audit(1770812078.990:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24590 comm="syz.4.9209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 755.520413][ T26] audit: type=1326 audit(1770812079.020:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24590 comm="syz.4.9209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 755.617902][ T26] audit: type=1326 audit(1770812079.020:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24590 comm="syz.4.9209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 755.716348][ T26] audit: type=1326 audit(1770812079.020:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24590 comm="syz.4.9209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 755.814191][ T26] audit: type=1326 audit(1770812079.020:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24590 comm="syz.4.9209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 756.270417][ T36] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 756.474347][T24618] netlink: 'syz.0.9222': attribute type 24 has an invalid length.
[ 756.483803][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 756.511819][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 756.546487][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 756.559058][ T36] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[ 756.568714][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 756.586345][ T36] usb 5-1: config 0 descriptor??
[ 756.614318][ T36] usb 5-1: bad CDC descriptors
[ 756.628316][ T36] usb 5-1: bad CDC descriptors
[ 756.809465][T15108] usb 5-1: USB disconnect, device number 34
[ 756.885026][T24626] loop0: detected capacity change from 0 to 4096
[ 756.973804][T24626] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 757.008183][T24633] ip6t_srh: unknown srh match flags 4000
[ 757.047293][T24626] ntfs3: loop0: Failed to load $Extend.
[ 757.690609][T24654] loop2: detected capacity change from 0 to 16
[ 757.747699][T24654] erofs: (device loop2): mounted with root inode @ nid 36.
[ 758.248381][T24675] loop3: detected capacity change from 0 to 256
[ 758.462552][T24680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9252'.
[ 758.745721][T24688] loop4: detected capacity change from 0 to 1024
[ 758.785754][T24688] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only.
[ 759.442957][T24710] netlink: 'syz.0.9266': attribute type 10 has an invalid length.
[ 759.482790][T24710] device netdevsim0 left promiscuous mode
[ 759.691526][T24718] loop3: detected capacity change from 0 to 16
[ 759.740646][T24718] erofs: (device loop3): mounted with root inode @ nid 36.
[ 759.788393][T24718] overlayfs: upper fs is r/o, try multi-lower layers mount
[ 759.996085][T24725] cgroup: Invalid name
[ 760.214759][T24728] loop2: detected capacity change from 0 to 4096
[ 760.305921][T24701] loop4: detected capacity change from 0 to 32768
[ 760.318314][T24735] loop0: detected capacity change from 0 to 512
[ 760.356273][T24735] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 760.377384][T24701] (syz.4.9261,24701,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 760.386223][T24735] EXT4-fs: Ignoring removed bh option
[ 760.423802][T24701] (syz.4.9261,24701,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 760.487188][T24701] JBD2: Ignoring recovery information on journal
[ 760.505991][T24735] EXT4-fs error (device loop0): mb_free_blocks:1826: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 760.570810][T24735] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #11: comm syz.0.9277: corrupted inode contents
[ 760.683134][T24701] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 760.691256][T24735] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #11: comm syz.0.9277: mark_inode_dirty error
[ 760.738941][T24735] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.9277: invalid indirect mapped block 1 (level 1)
[ 760.783372][T24735] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #11: comm syz.0.9277: corrupted inode contents
[ 760.861775][T24735] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[ 760.901088][T24735] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #11: comm syz.0.9277: corrupted inode contents
[ 760.927686][T24735] EXT4-fs error (device loop0): ext4_truncate:4318: inode #11: comm syz.0.9277: mark_inode_dirty error
[ 760.990105][T24735] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[ 761.037882][T24735] EXT4-fs (loop0): 1 truncate cleaned up
[ 761.043815][T24735] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 761.134187][ T4282] ocfs2: Unmounting device (7,4) on (node local)
[ 761.160863][T24735] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.9277: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 761.409605][ T4276] EXT4-fs (loop0): unmounting filesystem.
[ 762.095824][T24782] loop0: detected capacity change from 0 to 764
[ 762.135567][T24785] loop3: detected capacity change from 0 to 128
[ 762.201425][T24785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 762.283463][T24785] ext4 filesystem being mounted at /1846/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 762.397056][T24785] EXT4-fs (loop3): resizing filesystem from 64 to 2 blocks
[ 762.437569][T24785] EXT4-fs warning (device loop3): ext4_resize_fs:2051: can't shrink FS - resize aborted
[ 762.580094][T24799] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 762.632498][ T4268] EXT4-fs (loop3): unmounting filesystem.
[ 762.678544][T24801] loop2: detected capacity change from 0 to 256
[ 762.816253][T24803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 763.221696][T24815] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.9315'.
[ 764.130467][ T36] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 764.342338][ T36] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[ 764.367671][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 764.397775][ T36] usb 5-1: config 0 has no interface number 0
[ 764.430488][ T36] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 764.461708][ T36] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 764.493133][ T36] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 764.528344][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 764.566352][ T36] usb 5-1: Product: syz
[ 764.590487][ T36] usb 5-1: Manufacturer: syz
[ 764.600651][ T36] usb 5-1: SerialNumber: syz
[ 764.626632][ T36] usb 5-1: config 0 descriptor??
[ 764.684469][T24854] ieee802154 phy0 wpan0: encryption failed: -22
[ 764.691524][T24852] overlayfs: missing 'lowerdir'
[ 764.970501][T24864] netlink: 'syz.5.9338': attribute type 1 has an invalid length.
[ 765.067948][ T36] usbtouchscreen: probe of 5-1:0.117 failed with error -71
[ 765.109199][ T36] usb 5-1: USB disconnect, device number 35
[ 765.221525][T24872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 765.228835][T24872] IPv6: NLM_F_CREATE should be set when creating new route
[ 765.236270][T24872] IPv6: NLM_F_CREATE should be set when creating new route
[ 765.427642][T24877] loop3: detected capacity change from 0 to 2048
[ 765.435979][T24878] loop0: detected capacity change from 0 to 256
[ 765.529973][T24877] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[ 765.567540][T24878] FAT-fs (loop0): Directory bread(block 64) failed
[ 765.619997][T24878] FAT-fs (loop0): Directory bread(block 65) failed
[ 765.646164][T24878] FAT-fs (loop0): Directory bread(block 66) failed
[ 765.717440][T24878] FAT-fs (loop0): Directory bread(block 67) failed
[ 765.760162][T24878] FAT-fs (loop0): Directory bread(block 68) failed
[ 765.773619][T24878] FAT-fs (loop0): Directory bread(block 69) failed
[ 765.791878][T24878] FAT-fs (loop0): Directory bread(block 70) failed
[ 765.839655][T24878] FAT-fs (loop0): Directory bread(block 71) failed
[ 765.873037][T24878] FAT-fs (loop0): Directory bread(block 72) failed
[ 765.879666][T24878] FAT-fs (loop0): Directory bread(block 73) failed
[ 766.420121][T24903] netlink: 'syz.4.9357': attribute type 13 has an invalid length.
[ 766.497915][T24908] netlink: 'syz.3.9359': attribute type 30 has an invalid length.
[ 766.680509][T24916] netlink: 'syz.5.9363': attribute type 1 has an invalid length.
[ 767.367927][T24943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9377'.
[ 767.930174][T24959] loop2: detected capacity change from 0 to 4096
[ 767.965340][T24959] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[ 768.022953][T24959] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 768.344289][T24982] overlayfs: empty lowerdir
[ 768.813553][T24996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9401'.
[ 769.252368][T24983] loop3: detected capacity change from 0 to 32768
[ 769.280677][ T36] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 769.298801][T24983] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[ 769.431413][T24983] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 769.470378][ T36] usb 6-1: Using ep0 maxpacket: 16
[ 769.483790][ T36] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[ 769.509668][T24983] (syz.3.9396,24983,1):ocfs2_read_blocks:239 ERROR: status = -12
[ 769.518670][ T36] usb 6-1: config 0 has no interface number 0
[ 769.536280][ T36] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 769.550408][T24983] (syz.3.9396,24983,1):ocfs2_xattr_block_find:2835 ERROR: status = -12
[ 769.566413][ T36] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 769.620830][ T36] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 769.650487][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 769.658559][ T36] usb 6-1: Product: syz
[ 769.670371][ T36] usb 6-1: Manufacturer: syz
[ 769.675043][ T36] usb 6-1: SerialNumber: syz
[ 769.691882][ T36] usb 6-1: config 0 descriptor??
[ 769.697503][T25001] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 769.730600][T25001] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 769.836797][ T4268] ocfs2: Unmounting device (7,3) on (node local)
[ 769.959621][T25001] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 770.010515][T25001] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 770.083573][T25029] netlink: 'syz.0.9417': attribute type 3 has an invalid length.
[ 770.130540][T25029] netlink: 'syz.0.9417': attribute type 4 has an invalid length.
[ 770.233420][ T36] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 770.260583][ T36] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[ 770.294935][ T36] asix: probe of 6-1:0.251 failed with error -5
[ 770.345573][ T36] usb 6-1: USB disconnect, device number 19
[ 770.955064][T25057] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9431'.
[ 771.000921][T25057] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9431'.
[ 771.240420][T15108] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 771.460865][T15108] usb 1-1: Using ep0 maxpacket: 16
[ 771.468169][T15108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 771.502717][T15108] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 771.520455][T15108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 771.538723][T15108] usb 1-1: Product: syz
[ 771.577452][T15108] usb 1-1: Manufacturer: syz
[ 771.582463][T15108] usb 1-1: SerialNumber: syz
[ 771.609712][T15108] usb 1-1: config 0 descriptor??
[ 771.844278][T25084] loop4: detected capacity change from 0 to 4096
[ 771.861762][T25084] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 771.908732][T15108] usb 1-1: USB disconnect, device number 47
[ 771.944467][T25092] netlink: 'syz.5.9449': attribute type 1 has an invalid length.
[ 771.974501][T25092] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9449'.
[ 772.025154][T25084] ntfs: volume version 3.1.
[ 772.054092][T25094] loop3: detected capacity change from 0 to 256
[ 772.160578][ T36] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 772.375507][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 772.392923][ T36] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[ 772.422756][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 772.469611][ T36] usb 3-1: config 0 descriptor??
[ 772.899517][ T36] ath6kl: Failed to read usb control message: -71
[ 772.912783][ T36] ath6kl: Unable to read the bmi data from the device: -71
[ 772.935381][ T36] ath6kl: Unable to recv target info: -71
[ 772.961650][ T36] ath6kl: Failed to init ath6kl core: -71
[ 773.048493][ T36] ath6kl_usb: probe of 3-1:0.0 failed with error -71
[ 773.061010][ T36] usb 3-1: USB disconnect, device number 36
[ 773.095733][T25126] ax25_connect(): syz.3.9465 uses autobind, please contact jreuter@yaina.de
[ 773.370141][T25128] loop0: detected capacity change from 0 to 4096
[ 773.459186][T25128] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[ 773.532043][T25128] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 773.618982][T25140] netlink: 'syz.4.9472': attribute type 6 has an invalid length.
[ 774.095076][T25145] nvme_fabrics: missing parameter 'transport=%s'
[ 774.112613][T25151] loop4: detected capacity change from 0 to 4096
[ 774.120406][T25145] nvme_fabrics: missing parameter 'nqn=%s'
[ 774.150644][ T36] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 774.229773][T25151] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[ 774.340589][ T36] usb 1-1: Using ep0 maxpacket: 32
[ 774.366130][ T36] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 774.397780][ T36] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 774.463134][ T36] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[ 774.481953][ T4282] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22.
[ 774.484819][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 774.493975][ T4282] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22.
[ 774.510393][ T36] usb 1-1: Product: syz
[ 774.514623][ T36] usb 1-1: Manufacturer: syz
[ 774.529499][ T36] usb 1-1: SerialNumber: syz
[ 774.808179][ T36] usb 1-1: Invalid number of CPorts: 0
[ 774.815026][ T36] es2_ap_driver: probe of 1-1:7.0 failed with error -22
[ 774.922474][T25175] netlink: 'syz.3.9488': attribute type 2 has an invalid length.
[ 774.950528][T25175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9488'.
[ 775.041603][ T36] usb 1-1: USB disconnect, device number 48
[ 775.420643][T25188] IPv6: Can't replace route, no match found
[ 776.083406][T25209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9505'.
[ 776.460654][T25223] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9511'.
[ 776.469764][T25223] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9511'.
[ 776.608619][T25228] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 776.640490][T15108] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 776.677970][T25231] device bond0 entered promiscuous mode
[ 776.694049][T25231] device bond_slave_0 entered promiscuous mode
[ 776.704350][T25231] device bond_slave_1 entered promiscuous mode
[ 776.844558][T15108] usb 3-1: Using ep0 maxpacket: 32
[ 776.861358][T15106] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[ 776.898741][T15108] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 776.913613][T15108] usb 3-1: config 56 has an invalid interface number: 216 but max is 0
[ 776.934035][T15108] usb 3-1: config 56 has no interface number 0
[ 776.945226][T15108] usb 3-1: config 56 interface 216 has no altsetting 0
[ 776.979930][T15108] usb 3-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b
[ 777.025528][T15108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 777.055082][T15108] usb 3-1: Product: syz
[ 777.059325][T15108] usb 3-1: Manufacturer: syz
[ 777.072197][T15106] usb 1-1: config 0 has an invalid interface number: 110 but max is 0
[ 777.087726][T15108] usb 3-1: SerialNumber: syz
[ 777.100541][T15106] usb 1-1: config 0 has no interface number 0
[ 777.106703][T15106] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 777.139923][T15106] usb 1-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 777.178063][T15106] usb 1-1: config 0 interface 110 has no altsetting 0
[ 777.207816][T15106] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[ 777.230583][T15106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 777.238692][T15106] usb 1-1: Product: syz
[ 777.244801][T15106] usb 1-1: Manufacturer: syz
[ 777.249492][T15106] usb 1-1: SerialNumber: syz
[ 777.262137][T15106] usb 1-1: config 0 descriptor??
[ 777.308764][T25244] loop4: detected capacity change from 0 to 4096
[ 777.345313][T15108] hub 3-1:56.216: bad descriptor, ignoring hub
[ 777.361132][T25244] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[ 777.370411][T15108] hub: probe of 3-1:56.216 failed with error -5
[ 777.378056][T15108] option 3-1:56.216: GSM modem (1-port) converter detected
[ 777.441281][T15108] usb 3-1: USB disconnect, device number 37
[ 777.449198][T15108] option 3-1:56.216: device disconnected
[ 777.486051][T15106] cdc_subset: probe of 1-1:0.110 failed with error -22
[ 777.527694][T25248] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9523'.
[ 777.714846][ T36] usb 1-1: USB disconnect, device number 49
[ 777.800460][ T26] audit: type=1326 audit(1770812101.340:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25253 comm="syz.4.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 777.856325][ T26] audit: type=1326 audit(1770812101.340:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25253 comm="syz.4.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 777.902808][ T26] audit: type=1326 audit(1770812101.400:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25253 comm="syz.4.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 777.983503][ T26] audit: type=1326 audit(1770812101.400:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25253 comm="syz.4.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 778.088163][ T26] audit: type=1326 audit(1770812101.400:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25253 comm="syz.4.9526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x7ffc0000
[ 778.149168][T25263] ALSA: mixer_oss: invalid OSS volume '~¢)–„VÄ]Qå'
[ 778.392457][T25275] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9536'.
[ 779.173860][T25295] loop0: detected capacity change from 0 to 256
[ 779.206496][T25295] exfat: Deprecated parameter 'namecase'
[ 779.238139][T25295] exfat: Deprecated parameter 'namecase'
[ 779.297387][T25295] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 779.348546][T25293] loop3: detected capacity change from 0 to 8192
[ 779.457299][T25293] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 779.511844][T25293] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[ 779.521785][T25293] REISERFS (device loop3): using ordered data mode
[ 779.528685][T25293] reiserfs: using flush barriers
[ 779.535732][T25293] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 779.553182][T25293] REISERFS (device loop3): checking transaction log (loop3)
[ 779.623357][T25293] REISERFS (device loop3): Using tea hash to sort names
[ 779.636234][T25293] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[ 779.886454][ T26] audit: type=1326 audit(1770812103.430:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.5.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4819bf79 code=0x7ffc0000
[ 779.958273][ T26] audit: type=1326 audit(1770812103.460:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.5.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4819bf79 code=0x7ffc0000
[ 780.089447][ T26] audit: type=1326 audit(1770812103.460:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.5.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4819bf79 code=0x7ffc0000
[ 780.200403][ T26] audit: type=1326 audit(1770812103.460:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.5.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f4b4819bf79 code=0x7ffc0000
[ 780.291207][ T26] audit: type=1326 audit(1770812103.460:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.5.9554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4819bf79 code=0x7ffc0000
[ 780.615978][T25335] netlink: 'syz.5.9565': attribute type 21 has an invalid length.
[ 780.954632][T25350] xt_socket: unknown flags 0x4c
[ 782.095254][T25395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9595'.
[ 782.137516][T25395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9595'.
[ 782.620596][T25416] netlink: 300 bytes leftover after parsing attributes in process `syz.4.9606'.
[ 782.770553][ T36] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 782.960525][ T36] usb 6-1: Using ep0 maxpacket: 16
[ 782.969818][ T36] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[ 783.009818][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 783.030055][ T36] usb 6-1: Product: syz
[ 783.043889][ T36] usb 6-1: Manufacturer: syz
[ 783.048560][ T36] usb 6-1: SerialNumber: syz
[ 783.099210][T25433] netlink: 'syz.3.9614': attribute type 2 has an invalid length.
[ 783.121548][ T36] usb 6-1: config 0 descriptor??
[ 783.146059][T25433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 783.369915][ T36] speedtch 6-1:0.0: speedtch_bind: data interface not found!
[ 783.401013][ T36] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 783.625946][ T4433] usb 6-1: USB disconnect, device number 20
[ 783.709136][T25448] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9622'.
[ 784.280640][T15108] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 784.465075][T15108] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 784.484784][T15108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 784.510832][T15108] usb 4-1: Product: syz
[ 784.525297][T15108] usb 4-1: Manufacturer: syz
[ 784.529978][T15108] usb 4-1: SerialNumber: syz
[ 784.574634][T15108] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 784.667569][T15108] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 785.112193][ T36] usb 4-1: USB disconnect, device number 45
[ 785.316154][T25491] loop2: detected capacity change from 0 to 8192
[ 785.379492][T25491] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 785.430411][T25491] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[ 785.445007][T25491] REISERFS (device loop2): using ordered data mode
[ 785.451756][T25491] reiserfs: using flush barriers
[ 785.482019][T25491] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 785.556888][T25507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9651'.
[ 785.566665][T25491] REISERFS (device loop2): checking transaction log (loop2)
[ 785.780722][T15108] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 785.796938][T15108] ath9k_htc: Failed to initialize the device
[ 785.824317][ T36] usb 4-1: ath9k_htc: USB layer deinitialized
[ 785.930446][T25491] REISERFS (device loop2): Using tea hash to sort names
[ 785.955905][T25491] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[ 786.568007][ T26] kauditd_printk_skb: 7 callbacks suppressed
[ 786.568023][ T26] audit: type=1326 audit(1770812110.110:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25528 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 786.706526][ T26] audit: type=1326 audit(1770812110.150:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25528 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 786.803811][ T26] audit: type=1326 audit(1770812110.150:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25528 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 786.887541][ T26] audit: type=1326 audit(1770812110.150:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25528 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 787.019883][ T26] audit: type=1326 audit(1770812110.150:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25528 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 787.118137][ T26] audit: type=1326 audit(1770812110.150:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25528 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 787.160195][T25510] loop0: detected capacity change from 0 to 32768
[ 787.195887][ T26] audit: type=1326 audit(1770812110.150:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25528 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 787.238951][ T26] audit: type=1326 audit(1770812110.150:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25528 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 787.281245][T25510] XFS (loop0): Mounting V5 Filesystem
[ 787.304163][T25551] loop2: detected capacity change from 0 to 64
[ 787.328655][ T26] audit: type=1326 audit(1770812110.150:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25528 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 787.440534][T25510] XFS (loop0): Ending clean mount
[ 787.465391][T25510] XFS (loop0): Quotacheck needed: Please wait.
[ 787.562589][T25560] loop4: detected capacity change from 0 to 512
[ 787.615773][T25510] XFS (loop0): Quotacheck: Done.
[ 787.633673][T25560] EXT4-fs: test_dummy_encryption requires encrypt feature
[ 787.826146][ T4276] XFS (loop0): Unmounting Filesystem
[ 788.440122][T25584] loop0: detected capacity change from 0 to 128
[ 789.290552][T25614] xt_hashlimit: size too large, truncated to 1048576
[ 789.297349][T25614] xt_hashlimit: max too large, truncated to 1048576
[ 789.518415][T25622] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[ 789.767212][ T26] audit: type=1326 audit(1770812113.310:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25634 comm="syz.2.9711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae19bf79 code=0x7ffc0000
[ 789.950366][T15108] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 790.045276][T25637] loop3: detected capacity change from 0 to 4096
[ 790.140469][T15108] usb 1-1: Using ep0 maxpacket: 8
[ 790.159497][T15108] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 790.194740][T15108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 790.215759][T15108] usb 1-1: Product: syz
[ 790.219994][T15108] usb 1-1: Manufacturer: syz
[ 790.259382][T15108] usb 1-1: SerialNumber: syz
[ 790.301629][T15108] usb 1-1: config 0 descriptor??
[ 790.328587][T15108] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 790.577004][T25647] loop3: detected capacity change from 0 to 4096
[ 790.638069][T25647] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[ 790.723978][T15108] gspca_sq930x: ucbus_write failed -71
[ 790.731596][T15108] sq930x: probe of 1-1:0.0 failed with error -71
[ 790.769072][T15108] usb 1-1: USB disconnect, device number 50
[ 791.770065][ T26] kauditd_printk_skb: 3 callbacks suppressed
[ 791.770082][ T26] audit: type=1326 audit(1770812115.310:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25678 comm="syz.5.9732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4819bf79 code=0x7ffc0000
[ 791.860724][ T26] audit: type=1326 audit(1770812115.360:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25678 comm="syz.5.9732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f4b4819bf79 code=0x7ffc0000
[ 792.011069][ T26] audit: type=1326 audit(1770812115.360:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25678 comm="syz.5.9732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4819bf79 code=0x7ffc0000
[ 792.036973][T25685] loop2: detected capacity change from 0 to 512
[ 792.115442][T25685] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 792.120245][ T26] audit: type=1326 audit(1770812115.360:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25678 comm="syz.5.9732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4819bf79 code=0x7ffc0000
[ 792.181707][T25685] EXT4-fs (loop2): 1 truncate cleaned up
[ 792.200477][T25685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 792.220786][T25665] loop4: detected capacity change from 0 to 32768
[ 792.324439][T25665] JBD2: Ignoring recovery information on journal
[ 792.502963][ T4280] EXT4-fs (loop2): unmounting filesystem.
[ 792.545174][T25665] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 792.695913][T25704] loop3: detected capacity change from 0 to 4096
[ 792.749144][T25704] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[ 792.870921][T25704] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 792.893053][ T4282] ocfs2: Unmounting device (7,4) on (node local)
[ 793.555829][T25731] netlink: 6 bytes leftover after parsing attributes in process `syz.5.9757'.
[ 793.797209][T25739] loop3: detected capacity change from 0 to 256
[ 793.875925][T25739] FAT-fs (loop3): Directory bread(block 64) failed
[ 793.910677][T25739] FAT-fs (loop3): Directory bread(block 65) failed
[ 793.927638][T25739] FAT-fs (loop3): Directory bread(block 66) failed
[ 793.947793][T25739] FAT-fs (loop3): Directory bread(block 67) failed
[ 793.970613][T25739] FAT-fs (loop3): Directory bread(block 68) failed
[ 793.977776][T25743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9763'.
[ 793.995722][T25739] FAT-fs (loop3): Directory bread(block 69) failed
[ 794.020593][T25739] FAT-fs (loop3): Directory bread(block 70) failed
[ 794.037547][T25739] FAT-fs (loop3): Directory bread(block 71) failed
[ 794.061028][T25739] FAT-fs (loop3): Directory bread(block 72) failed
[ 794.080517][T25739] FAT-fs (loop3): Directory bread(block 73) failed
[ 794.354806][T25722] loop0: detected capacity change from 0 to 32768
[ 794.784683][T25757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9770'.
[ 794.799719][T25737] loop2: detected capacity change from 0 to 32768
[ 794.879915][T25737] JBD2: Ignoring recovery information on journal
[ 794.983680][T25737] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 795.396539][ T4280] ocfs2: Unmounting device (7,2) on (node local)
[ 795.964294][T25800] loop0: detected capacity change from 0 to 64
[ 797.650126][T25851] overlayfs: conflicting options: userxattr,metacopy=on
[ 798.122659][T25872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9825'.
[ 798.186894][T25872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9825'.
[ 798.259636][ T26] audit: type=1326 audit(1770812121.800:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25874 comm="syz.3.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 798.340485][ T26] audit: type=1326 audit(1770812121.840:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25874 comm="syz.3.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 798.450372][ T26] audit: type=1326 audit(1770812121.840:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25874 comm="syz.3.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 798.530597][ T26] audit: type=1326 audit(1770812121.840:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25874 comm="syz.3.9827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 799.747646][T25919] loop4: detected capacity change from 0 to 4096
[ 799.805186][T25919] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[ 800.418593][T25942] loop4: detected capacity change from 0 to 8
[ 800.446155][T25943] netlink: 'syz.3.9859': attribute type 2 has an invalid length.
[ 800.510754][T25942] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 800.549333][T25942] SQUASHFS error: Failed to read block 0x1c0: -5
[ 800.579560][T25942] SQUASHFS error: Unable to read metadata cache entry [1be]
[ 801.232649][T25965] netlink: 'syz.2.9871': attribute type 6 has an invalid length.
[ 801.281071][T25965] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9871'.
[ 801.399199][T25971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9873'.
[ 802.573080][T26019] loop0: detected capacity change from 0 to 512
[ 802.692585][T26019] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.9897: inode has both inline data and extents flags
[ 802.716136][T26019] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.9897: couldn't read orphan inode 15 (err -117)
[ 802.730677][T26019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 802.864976][T26031] netlink: 'syz.3.9903': attribute type 13 has an invalid length.
[ 802.929387][ T4276] EXT4-fs (loop0): unmounting filesystem.
[ 803.411548][T26052] siw: device registration error -23
[ 803.643782][T26061] netlink: 'syz.3.9918': attribute type 1 has an invalid length.
[ 803.679340][T26064] netlink: 'syz.4.9917': attribute type 5 has an invalid length.
[ 803.885019][T26069] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9921'.
[ 805.072474][T26117] xt_policy: neither incoming nor outgoing policy selected
[ 805.775590][T26144] netlink: 'syz.0.9956': attribute type 27 has an invalid length.
[ 805.800755][T26144] netlink: 'syz.0.9956': attribute type 3 has an invalid length.
[ 805.808727][T26144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9956'.
[ 806.320432][ T4433] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[ 806.460147][T26172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9970'.
[ 806.516391][ T4433] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[ 806.537980][ T4433] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 806.577343][ T4433] usb 3-1: config 0 has no interface number 0
[ 806.607910][ T4433] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64
[ 806.652283][ T4433] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 806.707953][ T4433] usb 3-1: config 0 interface 52 has no altsetting 0
[ 806.747265][ T4433] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 806.776922][ T4433] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 806.817423][ T4433] usb 3-1: Manufacturer: syz
[ 806.828463][ T4433] usb 3-1: config 0 descriptor??
[ 806.871535][ T4433] hub 3-1:0.52: bad descriptor, ignoring hub
[ 806.877608][ T4433] hub: probe of 3-1:0.52 failed with error -5
[ 807.079752][ T4433] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input35
[ 807.430592][ T4433] usb 3-1: USB disconnect, device number 38
[ 808.241210][T26220] device dummy0 left promiscuous mode
[ 808.270200][T26220] bridge0: port 3(dummy0) entered disabled state
[ 808.496671][T26220] device bridge_slave_1 left promiscuous mode
[ 808.517236][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[ 808.523842][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[ 808.533228][T26220] bridge0: port 2(bridge_slave_1) entered disabled state
[ 808.544477][T26220] bridge0: port 1(bridge_slave_0) entered disabled state
[ 808.765376][T26236] netlink: 'syz.5.10002': attribute type 3 has an invalid length.
[ 808.774927][T26236] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.10002'.
[ 809.293568][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10010'.
[ 809.311406][T26253] loop4: detected capacity change from 0 to 128
[ 809.331338][T15106] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 809.374090][T26253] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 809.445909][T26253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 809.520531][T15106] usb 1-1: Using ep0 maxpacket: 32
[ 809.545598][T15106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 809.604126][T15106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 809.655009][T15106] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 809.708670][T15106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 809.738418][T15106] usb 1-1: config 0 descriptor??
[ 809.766994][T15106] hub 1-1:0.0: USB hub found
[ 809.969555][T15106] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 810.164354][T26278] loop3: detected capacity change from 0 to 64
[ 810.185002][T15106] usbhid 1-1:0.0: can't add hid device: -71
[ 810.200806][T15106] usbhid: probe of 1-1:0.0 failed with error -71
[ 810.275525][T15106] usb 1-1: USB disconnect, device number 51
[ 810.344853][T26282] loop4: detected capacity change from 0 to 164
[ 811.112442][T26308] loop2: detected capacity change from 0 to 16
[ 811.202298][T26308] erofs: (device loop2): mounted with root inode @ nid 36.
[ 811.240702][T26308] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[ 811.302981][T26308] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851]
[ 811.335904][T26316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10042'.
[ 811.370517][T26316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10042'.
[ 811.379681][T26308] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[ 811.407568][T26316] netlink: 'syz.4.10042': attribute type 1 has an invalid length.
[ 811.758557][T26327] loop4: detected capacity change from 0 to 2048
[ 811.804686][T26327] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 812.136185][T26342] netlink: 'syz.5.10056': attribute type 11 has an invalid length.
[ 812.187551][T26344] loop0: detected capacity change from 0 to 256
[ 812.276985][T26344] FAT-fs (loop0): Directory bread(block 64) failed
[ 812.330367][T26344] FAT-fs (loop0): Directory bread(block 65) failed
[ 812.337058][T26344] FAT-fs (loop0): Directory bread(block 66) failed
[ 812.389180][T26344] FAT-fs (loop0): Directory bread(block 67) failed
[ 812.407662][T26344] FAT-fs (loop0): Directory bread(block 68) failed
[ 812.426472][T26344] FAT-fs (loop0): Directory bread(block 69) failed
[ 812.440503][T26344] FAT-fs (loop0): Directory bread(block 70) failed
[ 812.471073][T26344] FAT-fs (loop0): Directory bread(block 71) failed
[ 812.510499][T26344] FAT-fs (loop0): Directory bread(block 72) failed
[ 812.517100][T26344] FAT-fs (loop0): Directory bread(block 73) failed
[ 813.127684][T26373] loop0: detected capacity change from 0 to 128
[ 813.199021][T26373] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 813.367520][ T4276] sysv_free_block: flc_count > flc_size
[ 813.373367][ T4276] sysv_free_block: flc_count > flc_size
[ 813.378957][ T4276] sysv_free_block: flc_count > flc_size
[ 813.410388][T26379] delete_channel: no stack
[ 813.440429][ T4276] sysv_free_block: flc_count > flc_size
[ 813.475522][ T4276] sysv_free_block: flc_count > flc_size
[ 813.500598][ T4276] sysv_free_block: flc_count > flc_size
[ 813.506249][ T4276] sysv_free_block: flc_count > flc_size
[ 813.530669][ T4276] sysv_free_block: flc_count > flc_size
[ 813.557883][ T4276] sysv_free_block: flc_count > flc_size
[ 813.581816][ T4276] sysv_free_block: flc_count > flc_size
[ 813.635079][ T4276] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 813.663401][T26358] loop4: detected capacity change from 0 to 32768
[ 813.707312][T26387] netlink: 193 bytes leftover after parsing attributes in process `syz.3.10080'.
[ 813.814636][T26358] JBD2: Ignoring recovery information on journal
[ 814.068816][T26358] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 814.117441][T26404] loop3: detected capacity change from 0 to 8
[ 814.221059][T26404] SQUASHFS error: Failed to read block 0x2d7: -5
[ 814.221084][T26404] SQUASHFS error: Unable to read metadata cache entry [2d5]
[ 814.343591][ T4282] ocfs2: Unmounting device (7,4) on (node local)
[ 815.029907][T26392] loop0: detected capacity change from 0 to 32768
[ 815.096503][T26422] loop3: detected capacity change from 0 to 4096
[ 815.135396][T26422] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[ 815.345606][T26422] ntfs3: loop3: failed to convert "c46c" to iso8859-4
[ 815.644247][T26438] netlink: 'syz.0.10104': attribute type 10 has an invalid length.
[ 815.670361][T26438] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10104'.
[ 815.735440][T26438] batman_adv: batadv0: Adding interface: virt_wifi0
[ 815.761139][T26438] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 815.843232][T26438] batman_adv: batadv0: Interface activated: virt_wifi0
[ 815.886165][T26440] netlink: 'syz.3.10103': attribute type 5 has an invalid length.
[ 815.969821][T26446] netdevsim netdevsim4: Direct firmware load for þ failed with error -2
[ 815.998707][T26446] netdevsim netdevsim4: Falling back to sysfs fallback for: þ
[ 816.241347][T26454] loop2: detected capacity change from 0 to 256
[ 817.415125][T26490] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10130'.
[ 818.138896][T26518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10143'.
[ 818.468952][T26530] loop2: detected capacity change from 0 to 2048
[ 818.478230][T26529] loop4: detected capacity change from 0 to 1764
[ 818.521493][T26530] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 818.605809][T26532] netlink: 100 bytes leftover after parsing attributes in process `syz.5.10150'.
[ 818.645775][T26532] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[ 818.792199][T26506] loop3: detected capacity change from 0 to 32768
[ 819.020415][T26538] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 819.119877][T26544] loop2: detected capacity change from 0 to 512
[ 819.170999][T26544] EXT4-fs (loop2): revision level too high, forcing read-only mode
[ 819.230821][T26544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[ 819.239930][T26544] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 819.268343][T26544] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.10156: iget: bad i_size value: 12154761577498
[ 819.350938][T26544] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.10156: couldn't read orphan inode 13 (err -117)
[ 819.390417][T26544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 819.455833][T26544] EXT4-fs (loop2): revision level too high, forcing read-only mode
[ 819.511516][T26544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[ 819.689611][ T4280] EXT4-fs (loop2): unmounting filesystem.
[ 819.709454][T26561] vivid-000: ================= START STATUS =================
[ 819.752124][T26561] vivid-000: Generate PTS: true
[ 819.775704][T26561] vivid-000: Generate SCR: true
[ 819.804358][T26561] tpg source WxH: 3840x2160 (R'G'B)
[ 819.835072][T26561] tpg field: 1
[ 819.860484][T26561] tpg crop: 3840x2160@0x0
[ 819.864930][T26561] tpg compose: 3840x2160@0x0
[ 819.869562][T26561] tpg colorspace: 6
[ 819.940655][T26561] tpg transfer function: 1/0
[ 819.945328][T26561] tpg quantization: 2/0
[ 819.990425][T26561] tpg RGB range: 0/2
[ 820.000478][T26561] vivid-000: ================== END STATUS ==================
[ 821.065738][T26607] netlink: 'syz.0.10183': attribute type 9 has an invalid length.
[ 821.098610][T26607] netlink: 399 bytes leftover after parsing attributes in process `syz.0.10183'.
[ 821.399587][T26618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10189'.
[ 821.428952][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10189'.
[ 821.642889][T26617] 8021q: adding VLAN 0 to HW filter on device bond1
[ 821.846086][T26633] loop4: detected capacity change from 0 to 4096
[ 821.864978][T26633] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[ 821.910693][T15106] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[ 822.112332][T15106] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[ 822.134362][T15106] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 822.170308][T15106] usb 4-1: config 0 has no interface number 0
[ 822.188296][T26643] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.10201'.
[ 822.197042][T15106] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64
[ 822.239877][T15106] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 822.290560][T15106] usb 4-1: config 0 interface 52 has no altsetting 0
[ 822.313320][T15106] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 822.350387][T15106] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 822.378925][T15106] usb 4-1: Manufacturer: syz
[ 822.391438][T15106] usb 4-1: config 0 descriptor??
[ 822.451978][T15106] hub 4-1:0.52: bad descriptor, ignoring hub
[ 822.513588][T15106] hub: probe of 4-1:0.52 failed with error -5
[ 822.548640][T26651] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 822.658495][T15106] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input36
[ 823.011421][T15106] usb 4-1: USB disconnect, device number 46
[ 823.162690][T26672] loop0: detected capacity change from 0 to 8
[ 823.232447][T26672] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 823.271383][T26672] SQUASHFS error: Failed to read block 0x91: -5
[ 823.277716][T26672] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 823.310329][T26672] SQUASHFS error: Unable to read inode 0x11f
[ 823.502703][T26681] binfmt_misc: register: failed to install interpreter file ./file0
[ 824.108775][T26702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10230'.
[ 825.292311][T26739] loop2: detected capacity change from 0 to 8
[ 825.330565][T26740] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 825.400706][T26739] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 825.408707][T26739] SQUASHFS error: Failed to read block 0x13e: -5
[ 825.468402][T26739] SQUASHFS error: Unable to read metadata cache entry [13c]
[ 825.488539][T26739] SQUASHFS error: Unable to read directory block [13c:26]
[ 826.241258][T26769] ieee802154 phy0 wpan0: encryption failed: -22
[ 826.579744][T26782] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10268'.
[ 827.326546][T26814] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 827.721072][T26824] xt_hashlimit: max too large, truncated to 1048576
[ 827.976689][T26834] sctp: [Deprecated]: syz.0.10293 (pid 26834) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 827.976689][T26834] Use struct sctp_sack_info instead
[ 828.410690][T26818] loop2: detected capacity change from 0 to 32768
[ 828.457272][ T26] audit: type=1326 audit(1770812152.000:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.4.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x50000
[ 828.515522][ T26] audit: type=1326 audit(1770812152.000:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.4.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x50000
[ 828.552743][ C0] vkms_vblank_simulate: vblank timer overrun
[ 828.611747][ T26] audit: type=1326 audit(1770812152.010:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.4.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x50000
[ 828.633970][ C0] vkms_vblank_simulate: vblank timer overrun
[ 828.722584][ T26] audit: type=1326 audit(1770812152.010:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.4.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x50000
[ 828.826021][ T26] audit: type=1326 audit(1770812152.010:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.4.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x50000
[ 828.848364][ C0] vkms_vblank_simulate: vblank timer overrun
[ 828.973885][ T26] audit: type=1326 audit(1770812152.010:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.4.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x50000
[ 829.084118][ T26] audit: type=1326 audit(1770812152.010:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.4.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x50000
[ 829.169652][ T26] audit: type=1326 audit(1770812152.010:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.4.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x50000
[ 829.275047][ T26] audit: type=1326 audit(1770812152.010:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.4.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x50000
[ 829.430353][ T26] audit: type=1326 audit(1770812152.020:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.4.10302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431739bf79 code=0x50000
[ 829.615809][T26877] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10313'.
[ 829.675931][T26877] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10313'.
[ 830.310542][T26906] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 831.820467][T26969] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10359'.
[ 831.829263][T26971] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[ 831.829646][T26969] netlink: 'syz.0.10359': attribute type 1 has an invalid length.
[ 831.871795][T26973] netlink: 'syz.5.10360': attribute type 7 has an invalid length.
[ 831.898030][T26969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10359'.
[ 832.170791][T26976] loop3: detected capacity change from 0 to 4096
[ 832.285309][T26986] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 832.407558][T26992] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10369'.
[ 833.056190][T27019] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10383'.
[ 833.066705][T27020] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2
[ 833.110346][ T4358] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[ 833.129157][T27020] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€
[ 833.309629][ T4358] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[ 833.328279][ T4358] usb 4-1: config 0 has no interface number 0
[ 833.339877][ T4358] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 833.368959][ T4358] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 833.393309][ T4358] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 833.412660][ T4358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 833.432878][ T4358] usb 4-1: Product: syz
[ 833.437112][ T4358] usb 4-1: Manufacturer: syz
[ 833.465620][ T4358] usb 4-1: SerialNumber: syz
[ 833.488862][ T4358] usb 4-1: config 0 descriptor??
[ 833.545034][ T4433] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 833.715410][ T4358] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[ 833.735780][ T4358] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[ 833.752138][ T4433] usb 1-1: config 7 has an invalid descriptor of length 185, skipping remainder of the config
[ 833.768635][ T4433] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2
[ 833.778133][ T4358] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[ 833.786426][ T4358] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[ 833.798544][ T4433] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84
[ 833.811916][ T4358] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 833.820128][ T4433] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 833.860582][ T4358] usb 4-1: USB disconnect, device number 47
[ 833.868879][ T4433] usb 1-1: Product: syz
[ 833.873788][ T4433] usb 1-1: SerialNumber: syz
[ 833.888992][ T4358] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 833.901676][ T4433] usb 1-1: bad CDC descriptors
[ 833.911259][ T4433] usb 1-1: bad CDC descriptors
[ 833.917130][ T4433] option 1-1:7.0: GSM modem (1-port) converter detected
[ 833.943372][ T4358] keyspan 4-1:0.133: device disconnected
[ 834.099465][ T4433] usb 1-1: USB disconnect, device number 52
[ 834.112621][ T4433] option 1-1:7.0: device disconnected
[ 834.125807][T27045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10395'.
[ 834.364793][T27051] loop4: detected capacity change from 0 to 64
[ 834.429050][T27051] MINIX-fs: mounting file system with errors, running fsck is recommended
[ 834.460879][T27055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10400'.
[ 834.658516][T27059] loop2: detected capacity change from 0 to 4096
[ 834.730008][T27059] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[ 834.852282][T27059] ntfs3: loop2: failed to convert "c46c" to cp863
[ 834.979922][T27070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10408'.
[ 835.301104][T27079] Cannot find set identified by id 65534 to match
[ 835.694026][T27091] (unnamed net_device) (uninitialized): option ad_select: invalid value (105)
[ 835.821547][T27065] loop4: detected capacity change from 0 to 32768
[ 836.496356][T27121] xt_HMARK: spi-set and port-set can't be combined
[ 836.690419][ T4358] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 836.827138][T27123] loop2: detected capacity change from 0 to 4096
[ 836.870611][ T4358] usb 5-1: Using ep0 maxpacket: 32
[ 836.878552][ T4358] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 836.913551][T27123] __ntfs_error: 28 callbacks suppressed
[ 836.913569][T27123] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk.
[ 836.920839][ T4358] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256
[ 836.970454][T27123] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk.
[ 837.032885][T27123] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 837.042728][ T4358] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[ 837.076709][ T4358] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 837.094772][T27123] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk.
[ 837.135889][T27123] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 837.141780][ T4358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 837.201469][T27123] ntfs: volume version 3.1.
[ 837.212192][T27123] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[ 837.235610][ T4358] usb 5-1: SerialNumber: syz
[ 837.263180][T27123] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows.
[ 837.282058][T27113] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 837.292407][ T4358] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[ 837.349825][T27123] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[ 837.379112][T27123] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[ 837.420377][T27123] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk.
[ 837.510642][ T4358] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[ 837.550704][ T4358] usb 5-1: USB disconnect, device number 36
[ 837.767002][T27151] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 838.239321][T27167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10456'.
[ 838.532145][T27147] loop3: detected capacity change from 0 to 32768
[ 838.586025][T27147] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[ 838.603878][T27147] JBD2: Ignoring recovery information on journal
[ 838.861447][T27147] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 839.102606][ T4268] ocfs2: Unmounting device (7,3) on (node local)
[ 839.283976][T27200] vivid-000: disconnect
[ 839.288666][T27199] vivid-000: reconnect
[ 839.483087][T27205] xt_recent: hitcount (134217728) is larger than allowed maximum (255)
[ 839.622483][T27210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10475'.
[ 839.663310][T27210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10475'.
[ 839.701022][T27210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10475'.
[ 839.760458][T27210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 839.928895][T27218] x_tables: duplicate underflow at hook 2
[ 840.145944][T27191] loop4: detected capacity change from 0 to 32768
[ 840.216273][T27191] ERROR: (device loop4): dbAlloc: unable to allocate blocks
[ 840.216273][T27191]
[ 840.240712][T27191] ERROR: (device loop4): remounting filesystem as read-only
[ 840.440456][ T4358] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 840.634092][ T4358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 840.635968][T27214] loop3: detected capacity change from 0 to 32768
[ 840.693997][ T4358] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 840.719276][T27214] ea_get: invalid extended attribute
[ 840.730447][ T4358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 840.759368][ T4358] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 840.780351][T27214] ffff888071f9b170: 04 00 00 00 ....
[ 840.832847][ T4358] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 840.870609][ T4358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 840.921382][ T4358] usb 3-1: config 0 descriptor??
[ 841.133335][ T4358] hdpvr 3-1:0.0: firmware version 0x8 dated
[ 841.344385][ T4358] hdpvr 3-1:0.0: device init failed
[ 841.348712][T27248] QAT: Stopping all acceleration devices.
[ 841.349711][ T4358] hdpvr: probe of 3-1:0.0 failed with error -12
[ 841.421088][ T4358] usb 3-1: USB disconnect, device number 39
[ 841.760371][ T4481] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 841.773814][T27258] netlink: 'syz.5.10499': attribute type 3 has an invalid length.
[ 841.941409][ T4481] usb 5-1: Using ep0 maxpacket: 16
[ 841.963903][ T4481] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 841.995549][ T4481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 842.021918][ T4481] usb 5-1: Product: syz
[ 842.036419][ T4481] usb 5-1: Manufacturer: syz
[ 842.050462][ T4481] usb 5-1: SerialNumber: syz
[ 842.068249][ T4481] r8152-cfgselector 5-1: config 0 descriptor??
[ 842.401077][ T4358] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 842.425313][T27282] device sit0 left promiscuous mode
[ 842.441956][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 842.449412][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 842.472349][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 842.479947][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 842.510875][ T4481] r8152-cfgselector 5-1: Unknown version 0x0000
[ 842.520622][ T4481] r8152-cfgselector 5-1: bad CDC descriptors
[ 842.536043][ T4481] r8152-cfgselector 5-1: Unknown version 0x0000
[ 842.558271][ T4481] r8152-cfgselector 5-1: USB disconnect, device number 37
[ 842.578416][T27282] device bridge_slave_0 left promiscuous mode
[ 842.600127][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 842.619221][ T4358] usb 4-1: Using ep0 maxpacket: 32
[ 842.635091][ T4358] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 842.662566][T27282] device netdevsim0 left promiscuous mode
[ 842.674311][ T4358] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 842.687003][T27282] device bridge1 left promiscuous mode
[ 842.692686][ T4358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 842.702918][T27282] device bridge4 left promiscuous mode
[ 842.709080][ T4358] usb 4-1: Product: syz
[ 842.714423][ T4358] usb 4-1: Manufacturer: syz
[ 842.719068][ T4358] usb 4-1: SerialNumber: syz
[ 842.727791][ T4358] usb 4-1: config 0 descriptor??
[ 842.757179][ T4358] cdc_ether 4-1:0.0: skipping garbage
[ 842.777566][ T4358] cdc_ether 4-1:0.0: skipping garbage
[ 842.799659][ T4358] usb 4-1: bad CDC descriptors
[ 842.809569][ T4358] usb 4-1: unsupported MDLM descriptors
[ 842.951269][ T4358] usb 4-1: USB disconnect, device number 48
[ 843.362448][T27296] loop2: detected capacity change from 0 to 4096
[ 843.390227][T27296] __ntfs_warning: 6 callbacks suppressed
[ 843.420359][T27296] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 843.519949][T27296] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[ 843.574235][T27296] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[ 843.611088][T27296] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk.
[ 843.660400][T27296] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk.
[ 843.690589][T27306] netlink: 'syz.3.10522': attribute type 21 has an invalid length.
[ 843.773622][T27296] ntfs: volume version 3.1.
[ 843.802928][T27296] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[ 843.879590][T27296] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[ 843.948852][T27296] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk.
[ 844.040614][T27296] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[ 844.126767][T27296] ntfs: (device loop2): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5.
[ 844.217738][T27316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10527'.
[ 844.498655][T27324] xt_hashlimit: size too large, truncated to 1048576
[ 844.531259][T27324] xt_hashlimit: overflow, try lower: 0/0
[ 844.798548][T27339] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10538'.
[ 844.835792][T27339] device netdevsim0 entered promiscuous mode
[ 845.059603][T27348] tmpfs: Bad value for 'mpol'
[ 845.370093][T27365] raw_sendmsg: syz.3.10551 forgot to set AF_INET. Fix it!
[ 846.217070][T27400] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 846.241405][T27401] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10568'.
[ 846.308478][T27401] device vlan0 entered promiscuous mode
[ 846.643306][T27416] netlink: 'syz.2.10575': attribute type 4 has an invalid length.
[ 846.940734][T27430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10583'.
[ 847.359423][T27444] netlink: 'syz.2.10590': attribute type 1 has an invalid length.
[ 848.741594][T27429] syz.5.10582 (27429): drop_caches: 2
[ 849.194027][T27500] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 849.419238][T27508] bridge4: the hash_elasticity option has been deprecated and is always 16
[ 849.738064][T27526] dlm: plock device version mismatch: kernel (1.2.0), user (1.512.4294901762)
[ 850.416208][T27552] netlink: 'syz.2.10643': attribute type 1 has an invalid length.
[ 850.437788][T27552] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10643'.
[ 851.203297][ T26] kauditd_printk_skb: 3 callbacks suppressed
[ 851.203332][ T26] audit: type=1326 audit(1770812174.750:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27581 comm="syz.3.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 851.253394][ T26] audit: type=1326 audit(1770812174.780:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27581 comm="syz.3.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 851.358519][ T26] audit: type=1326 audit(1770812174.780:489): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=27581 comm="syz.3.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 852.006026][T27580] loop2: detected capacity change from 0 to 32768
[ 852.066388][T27580] ERROR: (device loop2): diAllocBit: iag inconsistent
[ 852.066388][T27580]
[ 852.130048][T27580] ialloc: diAlloc returned -5!
[ 852.220442][ T4481] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 852.309755][T27613] device ip6tnl2 entered promiscuous mode
[ 852.377008][T27618] netlink: 'syz.2.10675': attribute type 21 has an invalid length.
[ 852.410492][ T4481] usb 4-1: Using ep0 maxpacket: 32
[ 852.416203][T27618] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10675'.
[ 852.427355][ T4481] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[ 852.456817][ T4481] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 852.468039][T27618] netlink: 'syz.2.10675': attribute type 1 has an invalid length.
[ 852.490431][ T4481] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 852.530467][ T4481] usb 4-1: config 1 has no interface number 0
[ 852.546880][ T4481] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 852.592904][ T4481] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024
[ 852.640458][ T4481] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 852.679746][ T4481] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 852.717575][ T4481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 852.759769][T27605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 852.791984][ T4481] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[ 853.013470][T27605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 853.044108][ T4481] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[ 853.185332][T27640] loop4: detected capacity change from 0 to 8
[ 853.317845][ T4481] usb 4-1: USB disconnect, device number 49
[ 853.335626][ T4481] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[ 853.458769][T27644] device sit0 left promiscuous mode
[ 853.499276][T27644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 853.516987][T27644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 853.524851][T27644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 853.535222][T27644] device veth0_to_bridge left promiscuous mode
[ 853.550720][T27644] device vlan0 left promiscuous mode
[ 853.558931][T27644] device wlan0 left promiscuous mode
[ 853.565462][T27644] device bridge1 left promiscuous mode
[ 853.577987][T27644] device veth3 left promiscuous mode
[ 853.648015][T27644] device bond1 left promiscuous mode
[ 853.680032][T27644] device bridge3 left promiscuous mode
[ 853.695983][T27644] device ip6tnl2 left promiscuous mode
[ 853.976755][T27660] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10696'.
[ 853.990207][T27658] loop4: detected capacity change from 0 to 1024
[ 854.064824][T27658] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #3: block 1: comm syz.4.10695: lblock 1 mapped to illegal pblock 1 (length 1)
[ 854.211784][T27658] Quota error (device loop4): write_blk: dquota write failed
[ 854.219265][T27658] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[ 854.254368][T27658] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.10695: Failed to acquire dquot type 0
[ 854.321054][T27658] EXT4-fs error (device loop4): ext4_free_blocks:6221: comm syz.4.10695: Freeing blocks not in datazone - block = 0, count = 4096
[ 854.370890][T27658] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.10695: Invalid inode bitmap blk 0 in block_group 0
[ 854.394320][T27658] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[ 854.403038][T17991] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1)
[ 854.415566][T27658] EXT4-fs (loop4): 1 orphan inode deleted
[ 854.434700][T27658] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 854.478968][T17991] Quota error (device loop4): remove_tree: Can't read quota data block 1
[ 854.496633][T17991] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:9: Failed to release dquot type 0
[ 854.565324][ T4282] EXT4-fs (loop4): unmounting filesystem.
[ 854.606707][ T26] audit: type=1326 audit(1770812178.150:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.3.10705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 854.700335][ T26] audit: type=1326 audit(1770812178.190:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.3.10705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 854.761585][ T26] audit: type=1326 audit(1770812178.190:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.3.10705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 854.874288][ T26] audit: type=1326 audit(1770812178.190:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27680 comm="syz.3.10705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f519bf79 code=0x7ffc0000
[ 854.925004][T27688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 854.957442][T27688] infiniband syz1: set active
[ 854.965718][T27688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 854.980590][T27688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 855.019244][T27688] device wlan0 left promiscuous mode
[ 855.035410][T27688] device bridge1 left promiscuous mode
[ 855.051654][T27688] device bond3 left promiscuous mode
[ 855.073786][T27688] device veth5 left promiscuous mode
[ 855.091492][T27688] device bridge3 left promiscuous mode
[ 855.109776][ T4358] vcan0 speed is unknown, defaulting to 1000
[ 855.193897][T27697] netlink: 'syz.0.10711': attribute type 16 has an invalid length.
[ 855.221740][T27697] netlink: 'syz.0.10711': attribute type 17 has an invalid length.
[ 855.276398][T27697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 855.317491][T27697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 855.343346][T27697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 855.366137][T27702] PKCS8: Unsupported PKCS#8 version
[ 855.367558][T27697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 855.857138][T27716] tmpfs: Bad value for 'mpol'
[ 855.957346][T27719] netlink: get zone limit has 4 unknown bytes
[ 856.201260][T27729] loop3: detected capacity change from 0 to 512
[ 856.268379][T27729] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 856.300470][T15108] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 856.308213][ T4597] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 856.311246][T27729] ext4 filesystem being mounted at /2136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 856.496270][T15108] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 856.510406][ T4597] usb 3-1: Using ep0 maxpacket: 8
[ 856.517378][ T4597] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 856.531207][T15108] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 856.550999][T15108] usb 1-1: Product: syz
[ 856.557844][ T4597] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[ 856.558899][ T4268] EXT4-fs (loop3): unmounting filesystem.
[ 856.577963][T15108] usb 1-1: SerialNumber: syz
[ 856.583017][ T4597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 856.594067][T15108] usb 1-1: config 0 descriptor??
[ 856.613318][ T4597] usb 3-1: Product: syz
[ 856.617794][ T4597] usb 3-1: Manufacturer: syz
[ 856.630283][ T4597] usb 3-1: SerialNumber: syz
[ 856.641315][ T4597] usb 3-1: config 0 descriptor??
[ 856.670396][ T4597] gspca_main: stk014-2.14.0 probing 05e1:0893
[ 856.676694][ T4597] usb 3-1: selecting invalid altsetting 1
[ 856.785746][T15106] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 856.807704][T15108] hso 1-1:0.0: Failed to find BULK IN ep
[ 857.000534][T15106] usb 5-1: Using ep0 maxpacket: 32
[ 857.012041][ T4597] usb 1-1: USB disconnect, device number 53
[ 857.019581][T15106] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 857.059789][T27746] loop3: detected capacity change from 0 to 1024
[ 857.081787][T15108] usb 3-1: USB disconnect, device number 40
[ 857.096021][T27746] EXT4-fs: Ignoring removed mblk_io_submit option
[ 857.102750][T15106] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 857.102794][T15106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 857.102816][T15106] usb 5-1: Product: syz
[ 857.102832][T15106] usb 5-1: Manufacturer: syz
[ 857.102849][T15106] usb 5-1: SerialNumber: syz
[ 857.151585][T27746] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 857.178870][T27746] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 857.193759][T15106] usb 5-1: config 0 descriptor??
[ 857.211185][T15106] cdc_ether 5-1:0.0: skipping garbage
[ 857.216627][T15106] cdc_ether 5-1:0.0: skipping garbage
[ 857.225660][T27746] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 857.234937][T15106] usb 5-1: bad CDC descriptors
[ 857.241781][T15106] usb 5-1: unsupported MDLM descriptors
[ 857.260158][T27746] EXT4-fs: Ignoring removed mblk_io_submit option
[ 857.285851][T27746] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[ 857.304909][T27746] EXT4-fs: Cannot change journaled quota options when quota turned on
[ 857.445173][T15108] usb 5-1: USB disconnect, device number 38
[ 857.486602][ T4268] EXT4-fs (loop3): unmounting filesystem.
[ 857.941047][T27765] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[ 857.954252][T27767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10746'.
[ 857.986526][T27765] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[ 858.010593][T27767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10746'.
[ 858.934586][T27773] loop4: detected capacity change from 0 to 32768
[ 858.965784][T27773] ERROR: (device loop4): diAllocBit: iag inconsistent
[ 858.965784][T27773]
[ 858.994655][T27773] ialloc: diAlloc returned -5!
[ 859.098366][T27805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10764'.
[ 859.170179][T27810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 859.196893][T27810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 859.217656][T27810] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 859.272796][T27810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 859.312611][T27810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 859.358278][T27814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10766'.
[ 859.382174][T27810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 859.388235][T27814] netlink: 332 bytes leftover after parsing attributes in process `syz.0.10766'.
[ 859.437732][T27810] device vlan0 left promiscuous mode
[ 860.048653][T27835] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 860.550579][T15106] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 860.760549][T15106] usb 5-1: Using ep0 maxpacket: 16
[ 860.768582][T15106] usb 5-1: config 0 has no interfaces?
[ 860.799818][T15106] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 860.836378][T15106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 860.854913][T15106] usb 5-1: Product: syz
[ 860.859155][T15106] usb 5-1: Manufacturer: syz
[ 860.893476][T15106] usb 5-1: SerialNumber: syz
[ 860.918961][T15106] r8152-cfgselector 5-1: config 0 descriptor??
[ 861.157406][T15106] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[ 861.308657][T27875] loop2: detected capacity change from 0 to 4096
[ 861.316029][T27875] NILFS: invalid option "cp=0x00aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa": too large checkpoint number
[ 861.367711][T15106] usb 5-1: USB disconnect, device number 39
[ 862.272005][ T26] audit: type=1400 audit(1770812185.820:494): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=27910 comm="syz.3.10817"
[ 863.310714][T27956] xt_TCPMSS: Only works on TCP SYN packets
[ 863.682307][T27974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10846'.
[ 863.736264][T27966] loop4: detected capacity change from 0 to 4096
[ 863.758794][T27966] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[ 863.927251][T27966] ntfs3: loop4: failed to convert "c46c" to cp862
[ 864.133127][T27987] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 864.749410][T28012] xt_TCPMSS: Only works on TCP SYN packets
[ 864.996053][T28025] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10871'.
[ 865.129870][T28027] netlink: 'syz.4.10872': attribute type 8 has an invalid length.
[ 865.177737][T28027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 865.450991][ T4358] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 865.667458][ T4358] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 865.695685][ T4358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 865.714632][T28044] loop3: detected capacity change from 0 to 4096
[ 865.725776][ T4358] usb 6-1: Product: syz
[ 865.736921][ T4358] usb 6-1: Manufacturer: syz
[ 865.741945][T28044] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[ 865.755668][ T4358] usb 6-1: SerialNumber: syz
[ 865.778601][ T4358] usb 6-1: config 0 descriptor??
[ 865.818654][T28044] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[ 865.937600][T28044] ntfs3: loop3: no free space to extend mft
[ 865.983290][T28055] loop2: detected capacity change from 0 to 128
[ 865.999508][ T4358] usb-storage 6-1:0.0: USB Mass Storage device detected
[ 866.057759][T28060] netlink: 'syz.0.10887': attribute type 21 has an invalid length.
[ 866.076421][T28060] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10887'.
[ 866.088127][T28060] netlink: 'syz.0.10887': attribute type 4 has an invalid length.
[ 866.096287][T28060] netlink: 'syz.0.10887': attribute type 5 has an invalid length.
[ 866.114752][T28060] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10887'.
[ 866.143155][T13175] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22.
[ 866.180597][ T4268] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[ 866.186924][ T4268] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 866.220028][T15106] usb 6-1: USB disconnect, device number 21
[ 866.230340][ T4268] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[ 866.236749][T17991] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22.
[ 866.266359][ T4268] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22.
[ 866.942354][T28087] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.10900'.
[ 866.955579][T28087] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[ 867.060616][ T4358] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 867.292240][ T4358] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 867.323198][ T4358] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[ 867.365071][ T4358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 867.399514][ T4358] usb 4-1: Product: syz
[ 867.420345][ T4358] usb 4-1: Manufacturer: syz
[ 867.425005][ T4358] usb 4-1: SerialNumber: syz
[ 867.451117][ T4358] usb 4-1: config 0 descriptor??
[ 867.611539][T28109] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 867.685246][ T4358] snd-usb-audio: probe of 4-1:0.0 failed with error -2
[ 867.838186][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 867.881920][ T4358] usb 4-1: USB disconnect, device number 50
[ 868.616387][T28150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10932'.
[ 868.894808][T28161] device ip6tnl3 entered promiscuous mode
[ 868.922710][T28163] loop4: detected capacity change from 0 to 512
[ 869.068280][T28163] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 869.150550][T28163] ext4 filesystem being mounted at /2163/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 869.388771][ T4282] EXT4-fs (loop4): unmounting filesystem.
[ 869.824393][T28202] nftables ruleset with unbound chain
[ 869.883268][T28204] device ip6tnl3 entered promiscuous mode
[ 869.943221][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[ 869.949592][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[ 870.178887][T28215] ipt_REJECT: ECHOREPLY no longer supported.
[ 870.587128][T28227] block device autoloading is deprecated and will be removed.
[ 870.855049][T28240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10974'.
[ 870.951373][T28237] loop2: detected capacity change from 0 to 4096
[ 870.961173][T28237] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[ 870.983427][T28245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10976'.
[ 871.418384][T28256] bridge0: port 1(bridge_slave_0) entered disabled state
[ 871.482333][T28256] bridge0: port 2(bridge_slave_1) entered disabled state
[ 871.831889][T28271] loop4: detected capacity change from 0 to 512
[ 871.855184][T28271] EXT4-fs: Ignoring removed oldalloc option
[ 871.936618][T28278] loop0: detected capacity change from 0 to 64
[ 871.956164][T28271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 872.169057][ T4282] EXT4-fs (loop4): unmounting filesystem.
[ 872.428052][ T93] block nbd0: Attempted send on invalid socket
[ 872.435133][ T93] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 872.519091][ T52] block nbd0: Attempted send on invalid socket
[ 872.525517][ T52] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 872.535039][T28293] Mount JFS Failure: -5
[ 872.555095][T28293] jfs_mount failed w/return code = -5
[ 872.744082][T28306] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™… EŸ8-ö¤ ™ ŠÇÅ–èEeÕ¬'
[ 873.234659][T28326] netlink: 'syz.2.11015': attribute type 32 has an invalid length.
[ 873.480652][T28334] tmpfs: Bad value for 'nr_inodes'
[ 874.078579][T28362] loop4: detected capacity change from 0 to 64
[ 874.157754][T28362] hfs: unable to locate alternate MDB
[ 874.166393][T28362] hfs: continuing without an alternate MDB
[ 874.345795][ T4349] hfs: new node 0 already hashed?
[ 874.376601][ T4349] ------------[ cut here ]------------
[ 874.382317][ T4349] WARNING: CPU: 1 PID: 4349 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400
[ 874.391517][ T4349] Modules linked in:
[ 874.395461][ T4349] CPU: 1 PID: 4349 Comm: kworker/u4:6 Not tainted syzkaller #0
[ 874.403139][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 874.413399][ T4349] Workqueue: writeback wb_workfn (flush-7:4)
[ 874.419450][ T4349] RIP: 0010:hfs_bnode_create+0x37a/0x400
[ 874.425359][ T4349] Code: aa a2 8a 89 ee e8 56 3b d6 07 e9 ab fd ff ff e8 4c 51 37 ff 48 89 df e8 04 8b eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 36 3b d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c
[ 874.445208][ T4349] RSP: 0018:ffffc90004246e80 EFLAGS: 00010246
[ 874.451503][ T4349] RAX: 000000000000001f RBX: ffff88803ee700e0 RCX: b6c99772ec422f00
[ 874.459601][ T4349] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 874.467745][ T4349] RBP: 0000000000000000 R08: ffffc90004246b87 R09: 1ffff92000848d70
[ 874.475850][ T4349] R10: dffffc0000000000 R11: fffff52000848d71 R12: 0000000000000000
[ 874.483949][ T4349] R13: ffff88803ee70000 R14: ffff88807e3d8f00 R15: dffffc0000000000
[ 874.492007][ T4349] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 874.501080][ T4349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 874.507709][ T4349] CR2: 00007f2aa4ff6000 CR3: 0000000039e43000 CR4: 00000000003506e0
[ 874.515795][ T4349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 874.523855][ T4349] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 874.532022][ T4349] Call Trace:
[ 874.535345][ T4349]
[ 874.538326][ T4349] hfs_bmap_alloc+0x53d/0x5d0
[ 874.543165][ T4349] ? hfs_bmap_reserve+0x420/0x420
[ 874.548260][ T4349] hfs_btree_inc_height+0xfd/0xac0
[ 874.553514][ T4349] ? hfs_brec_insert+0x6f6/0xbd0
[ 874.558521][ T4349] ? hfs_brec_insert+0xbd0/0xbd0
[ 874.563603][ T4349] ? do_raw_spin_unlock+0x11d/0x230
[ 874.568864][ T4349] hfs_brec_insert+0x744/0xbd0
[ 874.573768][ T4349] ? hfs_brec_keylen+0x350/0x350
[ 874.578778][ T4349] __hfs_ext_write_extent+0x2a1/0x470
[ 874.584307][ T4349] hfs_ext_write_extent+0x17b/0x200
[ 874.589576][ T4349] ? verify_lock_unused+0x140/0x140
[ 874.594916][ T4349] ? hfs_ext_keycmp+0x310/0x310
[ 874.599862][ T4349] ? writeback_sb_inodes+0x46b/0x1850
[ 874.605403][ T4349] hfs_write_inode+0xd8/0xa20
[ 874.610148][ T4349] ? hfs_inode_write_fork+0x1a0/0x1a0
[ 874.615647][ T4349] ? __writeback_single_inode+0x4ae/0x1160
[ 874.621600][ T4349] ? __lock_acquire+0x7d10/0x7d10
[ 874.626684][ T4349] ? do_raw_spin_lock+0x128/0x2f0
[ 874.631820][ T4349] ? __rwlock_init+0x140/0x140
[ 874.636649][ T4349] __writeback_single_inode+0x75b/0x1160
[ 874.642453][ T4349] writeback_sb_inodes+0xb30/0x1850
[ 874.647739][ T4349] ? queue_io+0x5a0/0x5a0
[ 874.652290][ T4349] ? rcu_is_watching+0x11/0xa0
[ 874.657147][ T4349] wb_writeback+0x482/0xd50
[ 874.661980][ T4349] ? percpu_ref_tryget+0x250/0x250
[ 874.667158][ T4349] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 874.673251][ T4349] ? _raw_spin_unlock_irq+0x1f/0x40
[ 874.678510][ T4349] wb_workfn+0x423/0xee0
[ 874.682907][ T4349] ? inode_wait_for_writeback+0x220/0x220
[ 874.688699][ T4349] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 874.694782][ T4349] ? read_lock_is_recursive+0x10/0x10
[ 874.700354][ T4349] ? _raw_spin_unlock_irq+0x1f/0x40
[ 874.705620][ T4349] ? process_one_work+0x7b0/0x1160
[ 874.710860][ T4349] process_one_work+0x8a2/0x1160
[ 874.715876][ T4349] ? worker_detach_from_pool+0x240/0x240
[ 874.721626][ T4349] ? _raw_spin_lock_irq+0xb7/0xf0
[ 874.726701][ T4349] ? _raw_spin_lock_irqsave+0x100/0x100
[ 874.732358][ T4349] ? kthread_data+0x4b/0xc0
[ 874.736934][ T4349] worker_thread+0xaa2/0x1270
[ 874.741892][ T4349] ? __kthread_parkme+0x162/0x1c0
[ 874.746986][ T4349] kthread+0x29d/0x330
[ 874.751223][ T4349] ? worker_clr_flags+0x1a0/0x1a0
[ 874.756303][ T4349] ? kthread_blkcg+0xd0/0xd0
[ 874.761011][ T4349] ret_from_fork+0x1f/0x30
[ 874.765497][ T4349]
[ 874.768557][ T4349] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 874.775864][ T4349] CPU: 1 PID: 4349 Comm: kworker/u4:6 Not tainted syzkaller #0
[ 874.783441][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 874.793530][ T4349] Workqueue: writeback wb_workfn (flush-7:4)
[ 874.799651][ T4349] Call Trace:
[ 874.802960][ T4349]
[ 874.805932][ T4349] dump_stack_lvl+0x188/0x24e
[ 874.810669][ T4349] ? memcpy+0x3c/0x60
[ 874.814687][ T4349] ? show_regs_print_info+0x12/0x12
[ 874.819956][ T4349] ? load_image+0x400/0x400
[ 874.824517][ T4349] panic+0x2e5/0x730
[ 874.828444][ T4349] ? bpf_jit_dump+0xd0/0xd0
[ 874.832978][ T4349] ? ret_from_fork+0x1f/0x30
[ 874.837601][ T4349] __warn+0x2f8/0x4f0
[ 874.841603][ T4349] ? hfs_bnode_create+0x37a/0x400
[ 874.846656][ T4349] ? hfs_bnode_create+0x37a/0x400
[ 874.851707][ T4349] report_bug+0x2ba/0x4f0
[ 874.856062][ T4349] ? hfs_bnode_create+0x37a/0x400
[ 874.861147][ T4349] handle_bug+0x3a/0x70
[ 874.865344][ T4349] exc_invalid_op+0x16/0x40
[ 874.869875][ T4349] asm_exc_invalid_op+0x16/0x20
[ 874.874749][ T4349] RIP: 0010:hfs_bnode_create+0x37a/0x400
[ 874.880411][ T4349] Code: aa a2 8a 89 ee e8 56 3b d6 07 e9 ab fd ff ff e8 4c 51 37 ff 48 89 df e8 04 8b eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 36 3b d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c
[ 874.900044][ T4349] RSP: 0018:ffffc90004246e80 EFLAGS: 00010246
[ 874.906132][ T4349] RAX: 000000000000001f RBX: ffff88803ee700e0 RCX: b6c99772ec422f00
[ 874.914158][ T4349] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 874.922150][ T4349] RBP: 0000000000000000 R08: ffffc90004246b87 R09: 1ffff92000848d70
[ 874.930227][ T4349] R10: dffffc0000000000 R11: fffff52000848d71 R12: 0000000000000000
[ 874.938219][ T4349] R13: ffff88803ee70000 R14: ffff88807e3d8f00 R15: dffffc0000000000
[ 874.946233][ T4349] hfs_bmap_alloc+0x53d/0x5d0
[ 874.950939][ T4349] ? hfs_bmap_reserve+0x420/0x420
[ 874.955998][ T4349] hfs_btree_inc_height+0xfd/0xac0
[ 874.961136][ T4349] ? hfs_brec_insert+0x6f6/0xbd0
[ 874.966103][ T4349] ? hfs_brec_insert+0xbd0/0xbd0
[ 874.971070][ T4349] ? do_raw_spin_unlock+0x11d/0x230
[ 874.976288][ T4349] hfs_brec_insert+0x744/0xbd0
[ 874.981085][ T4349] ? hfs_brec_keylen+0x350/0x350
[ 874.986137][ T4349] __hfs_ext_write_extent+0x2a1/0x470
[ 874.991545][ T4349] hfs_ext_write_extent+0x17b/0x200
[ 874.996769][ T4349] ? verify_lock_unused+0x140/0x140
[ 875.002000][ T4349] ? hfs_ext_keycmp+0x310/0x310
[ 875.006877][ T4349] ? writeback_sb_inodes+0x46b/0x1850
[ 875.012280][ T4349] hfs_write_inode+0xd8/0xa20
[ 875.017076][ T4349] ? hfs_inode_write_fork+0x1a0/0x1a0
[ 875.022488][ T4349] ? __writeback_single_inode+0x4ae/0x1160
[ 875.028339][ T4349] ? __lock_acquire+0x7d10/0x7d10
[ 875.033388][ T4349] ? do_raw_spin_lock+0x128/0x2f0
[ 875.038430][ T4349] ? __rwlock_init+0x140/0x140
[ 875.043220][ T4349] __writeback_single_inode+0x75b/0x1160
[ 875.048899][ T4349] writeback_sb_inodes+0xb30/0x1850
[ 875.054158][ T4349] ? queue_io+0x5a0/0x5a0
[ 875.058530][ T4349] ? rcu_is_watching+0x11/0xa0
[ 875.063343][ T4349] wb_writeback+0x482/0xd50
[ 875.067887][ T4349] ? percpu_ref_tryget+0x250/0x250
[ 875.073048][ T4349] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 875.079070][ T4349] ? _raw_spin_unlock_irq+0x1f/0x40
[ 875.084298][ T4349] wb_workfn+0x423/0xee0
[ 875.088576][ T4349] ? inode_wait_for_writeback+0x220/0x220
[ 875.094371][ T4349] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 875.100378][ T4349] ? read_lock_is_recursive+0x10/0x10
[ 875.105785][ T4349] ? _raw_spin_unlock_irq+0x1f/0x40
[ 875.111013][ T4349] ? process_one_work+0x7b0/0x1160
[ 875.116150][ T4349] process_one_work+0x8a2/0x1160
[ 875.121124][ T4349] ? worker_detach_from_pool+0x240/0x240
[ 875.126777][ T4349] ? _raw_spin_lock_irq+0xb7/0xf0
[ 875.131817][ T4349] ? _raw_spin_lock_irqsave+0x100/0x100
[ 875.137378][ T4349] ? kthread_data+0x4b/0xc0
[ 875.141911][ T4349] worker_thread+0xaa2/0x1270
[ 875.146631][ T4349] ? __kthread_parkme+0x162/0x1c0
[ 875.151685][ T4349] kthread+0x29d/0x330
[ 875.155800][ T4349] ? worker_clr_flags+0x1a0/0x1a0
[ 875.160845][ T4349] ? kthread_blkcg+0xd0/0xd0
[ 875.165466][ T4349] ret_from_fork+0x1f/0x30
[ 875.169918][ T4349]
[ 875.173531][ T4349] Kernel Offset: disabled
[ 875.177979][ T4349] Rebooting in 86400 seconds..