last executing test programs:

7m42.720995144s ago: executing program 0 (id=9358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030051797a310000000060000000060a010400000000000000000100fffd0900010073797a300000000008000b40000000003800048034000180090001007866726d0000000024000280050003000100000008000440000000060800014000000015080002"], 0xd4}}, 0x4000040)

7m42.498804193s ago: executing program 0 (id=9362):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}})

7m42.309618887s ago: executing program 0 (id=9366):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xd8, &(0x7f0000000200), &(0x7f0000000040)=0x4)

7m42.117825592s ago: executing program 0 (id=9369):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

7m41.565191695s ago: executing program 0 (id=9375):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x6)

7m40.821248302s ago: executing program 0 (id=9384):
r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x0, 0x1)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000580)={0x0, 0x5, 0x0, 0x1})

7m40.402603417s ago: executing program 32 (id=9384):
r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x0, 0x1)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000580)={0x0, 0x5, 0x0, 0x1})

2m27.174353393s ago: executing program 2 (id=13262):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000080)='&.{\x00\xa2\xf9\"\xd0xK\xeeun\xc2\xb6\x96v\x9bbyK\x98=\x89\xfe\xb5\xd0LX\x19\xc7\x91\xbbh\x1b)Y\xfad>\xa7o\xb8\x05\xe7\x98<\x8c\x93\x91\x91n\xb0\x84)\xd5\xa3\x80\xdb\x8fm\xd9\x9fv.<\xe2\xce\x0e\xa0\xba\xcf.\x94\xf5\x90c \x9f(\x8f\xc9\x80)b\xc9\x91<\xee8\xd1\xb0\xa1\xfa:Q\x04L\xb7\xe96\x97\a\xdd\xc3\xc0\xf2A\xe8\xcd\x02\xa9\x98\xfe8xe\xcc3\xd2\xb9\xf1\x89\xa7[\xd8;\xe5\rX1vo1\xf5b\xdd\xf6\x84E[m\xc4\x93dSe{\x18\xb5\x11\x1a\xa4I`\x17u\x97\x9f\x97\xc1\xf6\xf3\x8a\xc6\x9e\x0f\xcb\x01\x183\xd0H\xc2\b\xc2\x05\xdc.D/\xc7\xd3\x9d\x8a\xf06\xf2\xee\x12\xe1\x17\x1f\x00\x00\x00\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)='%\x00')

2m27.015351523s ago: executing program 2 (id=13265):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x3}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}]}, 0x48}}, 0x0)

2m26.867725082s ago: executing program 2 (id=13268):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x11, 0x48, 0x0, 0x68)

2m26.755176938s ago: executing program 2 (id=13269):
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x587, &(0x7f00000045c0)="$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")

2m26.55874177s ago: executing program 2 (id=13272):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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")
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

2m25.574074358s ago: executing program 2 (id=13284):
r0 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b5fa4fc5060000ffffff970386780df56e5be7070101080a4e7719b506a0977b", 0xffbf}], 0x1}, 0x0)

2m11.339821297s ago: executing program 33 (id=13284):
r0 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b5fa4fc5060000ffffff970386780df56e5be7070101080a4e7719b506a0977b", 0xffbf}], 0x1}, 0x0)

1.920994925s ago: executing program 1 (id=14909):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000880)="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", 0x3e7}], 0x1)

1.613443413s ago: executing program 1 (id=14914):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8902, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3d)

1.581732805s ago: executing program 4 (id=14915):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xfffffffffffffeb3, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0)

1.435154563s ago: executing program 4 (id=14917):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce)
ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000002580))

1.365157828s ago: executing program 1 (id=14919):
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2)
pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)="ec", 0x1}, {&(0x7f0000000380)="eaa039600a0d9fd087fefda37d82e5a384494ea5ed3d8f4c0d274257d42202f5bf294f4f5abef26f4872a41231fb735fdbaa0247580a92b2dcd41418b7f147d7cf538fb08c18114333c0de1dae94dac345cbfa0b975a5027163f492931007f906e1b1d8c74a77a40354a984e9edb9c7416a9afd1cbf12d59db5f1385a3b3dfeed03140f73894836eb68f2e5ad18d9651ac74aa2a5e369024bf99d5826a3ccd45c4495ba45ee9e03fc9da626577b8df9c5d20d8", 0xb3}, {&(0x7f0000000600)="1708f6744b717429411cbd8c88c7957cee21f365582263ca265627ba0a71cd1f33b62e70b0875680b701ffc45914173343d10699e2f5bd085535552876f4ed5dfe00a6c3268e0b0f1d9a4912d3c269f24bed1a77d28a0b3a10c1e455e461124cc5ddf56cfc8a5f67ac4874ca38f53774a8d5dd63b9d9a1dd208584fe2c930030578ee8926c704c714ffa0e25586de6ef71a672711511e73c46f19bd511d74213eb2ce37c2dae70af8a805c26320edffe", 0xb0}], 0x50a57923f0e8f719, 0xfffff, 0x0, 0x4)

1.266810494s ago: executing program 1 (id=14920):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0xa, 0x522, &(0x7f0000000c00)="$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")
rename(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.255878424s ago: executing program 4 (id=14921):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"/1071], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x947, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000e00)='/'}, 0x50)

1.240387215s ago: executing program 3 (id=14923):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0x40045017, 0x0)

1.080788775s ago: executing program 4 (id=14924):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x400000, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x4}})

1.005084639s ago: executing program 3 (id=14925):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)

897.224736ms ago: executing program 3 (id=14927):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x5, "504aa57f4f8d37386dce37ae7b09c7329b881ccd27113bceefb560cb277f7192", 0x2, 0x1})

794.468102ms ago: executing program 4 (id=14928):
syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x513, &(0x7f0000001780)="$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")
lchown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0)

782.443623ms ago: executing program 5 (id=14929):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x48}}, 0x4000)

737.091696ms ago: executing program 3 (id=14930):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

572.512905ms ago: executing program 5 (id=14931):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000e80)='ns/uts\x00')
setns(r0, 0x0)

547.627067ms ago: executing program 3 (id=14932):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x82442)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xffffffffffffffff, 0x102, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="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", 0x0, 0x80000001, 0x18023, 0x0, 0x0})

445.202833ms ago: executing program 5 (id=14933):
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001fc0), 0x200, 0x0)
ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000002000))

420.134334ms ago: executing program 5 (id=14934):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x11}}}], 0x58}, 0x20040000)

308.387801ms ago: executing program 1 (id=14935):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x0, 0x54485746, 0x0, @stepwise})

270.099564ms ago: executing program 5 (id=14936):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a00)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x5}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_auth={0x48, 0x1, {{'cryptd(sha256-ce)\x00'}}}]}, 0x138}}, 0x0)

265.385894ms ago: executing program 3 (id=14937):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0)

150.415011ms ago: executing program 4 (id=14938):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000880)="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", 0x3e7}], 0x1)

42.641507ms ago: executing program 1 (id=14939):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)

0s ago: executing program 5 (id=14940):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xd2, 0x8}, 0x48)
fcntl$setflags(r0, 0x2, 0x0)

kernel console output (not intermixed with test programs):

88] loop1: detected capacity change from 0 to 1024
[ 1469.569469][ T3490] netlink: 'syz.3.13351': attribute type 15 has an invalid length.
[ 1469.603004][ T3490] netlink: 25 bytes leftover after parsing attributes in process `syz.3.13351'.
[ 1469.805732][ T3498] netlink: 'syz.4.13355': attribute type 1 has an invalid length.
[ 1470.299298][ T3513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13362'.
[ 1470.601079][ T3521] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13366'.
[ 1470.619319][ T3521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13366'.
[ 1470.642682][ T3523] netlink: 'syz.3.13367': attribute type 1 has an invalid length.
[ 1470.699372][ T3523] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13367'.
[ 1470.721941][ T3523] nbd: must specify at least one socket
[ 1470.847168][ T3511] loop1: detected capacity change from 0 to 32768
[ 1470.899623][ T3511] jfs_strtoUCS: char2uni returned -22.
[ 1470.915511][ T3529] netlink: 'syz.3.13370': attribute type 10 has an invalid length.
[ 1470.923357][ T3511] charset = cp1251, char = 0x98
[ 1471.109089][   T28] audit: type=1326 audit(2000000528.650:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3531 comm="syz.1.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1471.165187][   T28] audit: type=1326 audit(2000000528.650:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3531 comm="syz.1.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1471.231338][   T28] audit: type=1326 audit(2000000528.650:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3531 comm="syz.1.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1471.265289][   T28] audit: type=1326 audit(2000000528.650:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3531 comm="syz.1.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1471.294783][   T28] audit: type=1326 audit(2000000528.660:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3531 comm="syz.1.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1472.381710][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1477.894050][ T3541] loop3: detected capacity change from 0 to 8192
[ 1478.115351][ T3541] FAT-fs (loop3): error, corrupted directory (invalid entries)
[ 1478.141744][ T3541] FAT-fs (loop3): Filesystem has been set read-only
[ 1478.177990][T24595] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1478.364780][T24595] usb 5-1: Using ep0 maxpacket: 32
[ 1478.402040][T24595] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[ 1478.410556][T24595] usb 5-1: config 0 has no interface number 0
[ 1478.441507][ T3558] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1478.462137][ T3558] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1478.472128][ T3558] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1478.479880][T24595] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1478.490710][T24595] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[ 1478.503165][ T3558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1478.512357][ T3558] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1478.517260][ T3564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1478.536061][ T3558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1478.543687][T24595] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[ 1478.574787][T24595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.598212][T24595] usb 5-1: Product: syz
[ 1478.613284][T24595] usb 5-1: Manufacturer: syz
[ 1478.619196][T24595] usb 5-1: SerialNumber: syz
[ 1478.631868][ T3557] lo speed is unknown, defaulting to 1000
[ 1478.639337][T24595] usb 5-1: config 0 descriptor??
[ 1478.645805][ T3551] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1478.663234][ T3551] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1478.720308][T24595] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 12:77:d5:2e:e2:b2
[ 1478.811648][ T3568] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[ 1478.969321][ T3573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13386'.
[ 1479.288496][ T3557] chnl_net:caif_netlink_parms(): no params data found
[ 1479.700782][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1479.740802][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1479.758198][ T3557] bridge_slave_0: entered allmulticast mode
[ 1479.769008][ T3557] bridge_slave_0: entered promiscuous mode
[ 1479.780538][ T3604] loop3: detected capacity change from 0 to 512
[ 1479.783116][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1479.807559][ T3604] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1479.810475][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1479.840400][ T3557] bridge_slave_1: entered allmulticast mode
[ 1479.853216][ T3557] bridge_slave_1: entered promiscuous mode
[ 1479.864577][ T3604] EXT4-fs: Ignoring removed bh option
[ 1479.890708][ T3604] EXT4-fs error (device loop3): mb_free_blocks:1954: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1479.937751][ T3604] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #11: comm syz.3.13396: corrupted inode contents
[ 1479.971227][ T3604] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #11: comm syz.3.13396: mark_inode_dirty error
[ 1479.988998][ T3557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1480.006431][ T3604] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.13396: invalid indirect mapped block 1 (level 1)
[ 1480.031782][ T3604] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #11: comm syz.3.13396: corrupted inode contents
[ 1480.040250][ T3557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1480.055649][ T3604] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[ 1480.090884][ T3604] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #11: comm syz.3.13396: corrupted inode contents
[ 1480.117861][ T3604] EXT4-fs error (device loop3): ext4_truncate:4294: inode #11: comm syz.3.13396: mark_inode_dirty error
[ 1480.156736][ T3604] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[ 1480.171202][ T3604] EXT4-fs (loop3): 1 truncate cleaned up
[ 1480.179958][ T3604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1480.198930][ T3557] team0: Port device team_slave_0 added
[ 1480.248358][ T3557] team0: Port device team_slave_1 added
[ 1480.285875][ T3604] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.13396: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 1480.345057][ T3557] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1480.381338][ T3557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1480.414452][ T3557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1480.422975][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1480.429919][ T3557] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1480.442993][ T3557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1480.470016][ T3557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1480.515597][ T3558] Bluetooth: hci4: command tx timeout
[ 1480.732544][ T3623] ieee802154 phy0 wpan0: encryption failed: -22
[ 1480.736269][ T3557] hsr_slave_0: entered promiscuous mode
[ 1480.769467][ T3557] hsr_slave_1: entered promiscuous mode
[ 1480.780278][T11670] usb 5-1: USB disconnect, device number 20
[ 1480.788512][T11670] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[ 1481.214901][ T3635] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[ 1481.329153][T26984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1481.710356][ T3652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13412'.
[ 1481.893903][ T3557] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1481.957186][ T3557] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1481.994772][ T3557] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1482.048906][ T3662] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1482.065848][ T3557] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1482.342864][ T3678] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 (while UP)
[ 1482.447462][ T3558] Bluetooth: hci4: command tx timeout
[ 1482.505743][ T3557] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1482.596883][ T3688] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13423'.
[ 1482.634282][ T3684] loop1: detected capacity change from 0 to 2048
[ 1482.682471][ T3691] loop4: detected capacity change from 0 to 8
[ 1482.745977][ T3684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1482.753689][ T3691] SQUASHFS error: Unable to read inode 0xa7
[ 1482.769204][ T3688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1482.803669][ T3684] ext4 filesystem being mounted at /3345/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1482.842615][ T3688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1482.867882][ T3688] bond0 (unregistering): Released all slaves
[ 1482.897146][ T3557] 8021q: adding VLAN 0 to HW filter on device team0
[ 1482.924021][ T3684] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.13421: bg 0: block 345: padding at end of block bitmap is not set
[ 1483.009559][T14027] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1483.017202][T14027] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1483.058166][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1483.075144][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1483.082484][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1483.292995][ T3557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1483.396713][ T3703] loop3: detected capacity change from 0 to 256
[ 1483.442506][ T3703] exfat: Deprecated parameter 'utf8'
[ 1483.478420][ T3703] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[ 1484.072726][ T3726] netlink: 'syz.1.13434': attribute type 39 has an invalid length.
[ 1484.162088][ T3729] 9pnet_fd: Insufficient options for proto=fd
[ 1484.385304][ T3558] Bluetooth: hci4: command tx timeout
[ 1484.408804][ T3557] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1485.261743][ T3765] netlink: 'syz.4.13449': attribute type 2 has an invalid length.
[ 1485.404161][ T3557] veth0_vlan: entered promiscuous mode
[ 1485.482301][ T3557] veth1_vlan: entered promiscuous mode
[ 1485.583813][ T3557] veth0_macvtap: entered promiscuous mode
[ 1485.628927][ T3557] veth1_macvtap: entered promiscuous mode
[ 1485.696395][ T3557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1485.716999][ T3557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1485.746060][ T3557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1485.765984][ T3557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1485.784081][ T3557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1485.811953][ T3557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1485.841445][ T3557] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1485.870672][ T3557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1485.899938][ T3557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1485.912984][ T3759] loop3: detected capacity change from 0 to 32768
[ 1485.920097][ T3557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1485.942037][ T3557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1485.978337][ T3557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1486.007243][ T3557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1486.021926][ T3759] (syz.3.13446,3759,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1486.051192][ T3557] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1486.091288][ T3759] (syz.3.13446,3759,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1486.130953][ T3557] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1486.158540][ T3557] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1486.168939][ T3557] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1486.178249][ T3557] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1486.190764][ T3759] JBD2: Ignoring recovery information on journal
[ 1486.325770][ T3558] Bluetooth: hci4: command tx timeout
[ 1486.342380][ T3759] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1486.477156][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1486.506339][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1486.559924][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 1486.559941][   T28] audit: type=1326 audit(2000000545.237:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3790 comm="syz.1.13460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1486.631803][T14027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1486.640710][   T28] audit: type=1326 audit(2000000545.237:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3790 comm="syz.1.13460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1486.650430][T14027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1486.698721][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1486.758066][   T28] audit: type=1326 audit(2000000545.279:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3790 comm="syz.1.13460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1486.846663][   T28] audit: type=1326 audit(2000000545.279:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3790 comm="syz.1.13460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1486.893958][ T5771] ocfs2: Unmounting device (7,3) on (node local)
[ 1486.931331][   T28] audit: type=1326 audit(2000000545.279:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3790 comm="syz.1.13460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1487.718202][ T3789] loop4: detected capacity change from 0 to 32768
[ 1487.718949][ T3812] loop5: detected capacity change from 0 to 2048
[ 1487.761815][ T3789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.13458 (3789)
[ 1487.843233][ T3812] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1487.873026][ T3789] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1487.924959][ T3789] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[ 1487.975138][ T3789] BTRFS info (device loop4): using free space tree
[ 1488.126881][ T3789] BTRFS info (device loop4): enabling ssd optimizations
[ 1488.161634][ T3789] BTRFS info (device loop4): auto enabling async discard
[ 1488.272407][ T5831] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1488.391124][T26898] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1488.487869][ T5831] usb 4-1: Using ep0 maxpacket: 16
[ 1488.508934][ T5831] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[ 1488.520342][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1488.552228][ T5831] usb 4-1: Product: syz
[ 1488.556490][ T5831] usb 4-1: Manufacturer: syz
[ 1488.589034][ T5831] usb 4-1: SerialNumber: syz
[ 1488.637655][ T5831] usb 4-1: config 0 descriptor??
[ 1488.894027][ T5831] speedtch 4-1:0.0: speedtch_bind: data interface not found!
[ 1488.916863][ T5831] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1489.161137][ T5831] usb 4-1: USB disconnect, device number 104
[ 1489.466108][ T3866] loop5: detected capacity change from 0 to 64
[ 1489.819798][ T3876] loop3: detected capacity change from 0 to 256
[ 1489.869020][ T3876] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[ 1489.950212][ T5833] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1490.029970][ T3884] loop5: detected capacity change from 0 to 256
[ 1490.135175][ T3884] FAT-fs (loop5): Directory bread(block 64) failed
[ 1490.154620][ T5833] usb 2-1: Using ep0 maxpacket: 32
[ 1490.165087][ T3884] FAT-fs (loop5): Directory bread(block 65) failed
[ 1490.171899][ T3884] FAT-fs (loop5): Directory bread(block 66) failed
[ 1490.196689][ T3884] FAT-fs (loop5): Directory bread(block 67) failed
[ 1490.205925][ T5833] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00
[ 1490.207350][ T3884] FAT-fs (loop5): Directory bread(block 68) failed
[ 1490.226083][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0
[ 1490.248238][ T3884] FAT-fs (loop5): Directory bread(block 69) failed
[ 1490.255325][ T5833] usb 2-1: Product: syz
[ 1490.263248][ T3884] FAT-fs (loop5): Directory bread(block 70) failed
[ 1490.287266][ T5833] usb 2-1: config 0 descriptor??
[ 1490.305118][ T3884] FAT-fs (loop5): Directory bread(block 71) failed
[ 1490.312592][ T3884] FAT-fs (loop5): Directory bread(block 72) failed
[ 1490.351344][ T3884] FAT-fs (loop5): Directory bread(block 73) failed
[ 1490.409344][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13499'.
[ 1490.439916][ T3890] netlink: 'syz.3.13499': attribute type 1 has an invalid length.
[ 1490.474018][ T3890] netlink: 'syz.3.13499': attribute type 2 has an invalid length.
[ 1490.491820][ T3890] netlink: 120 bytes leftover after parsing attributes in process `syz.3.13499'.
[ 1490.529609][ T5833] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input74
[ 1490.835709][T11670] usb 2-1: USB disconnect, device number 96
[ 1491.173150][ T3906] xt_hashlimit: max too large, truncated to 1048576
[ 1491.221299][ T3909] loop3: detected capacity change from 0 to 4096
[ 1491.284191][ T3912] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1491.475195][ T3909] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.'
[ 1491.514297][ T3909] Remounting filesystem read-only
[ 1492.075338][ T1080] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1492.464911][ T3951] hsr0: VLAN not yet supported
[ 1492.566710][    T8] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1492.783054][    T8] usb 2-1: Using ep0 maxpacket: 32
[ 1492.804082][    T8] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1492.818241][    T8] usb 2-1: config 7 has an invalid interface number: 187 but max is 0
[ 1492.832944][    T8] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1492.865865][    T8] usb 2-1: config 7 has no interface number 0
[ 1492.882396][    T8] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1492.913369][    T8] usb 2-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1492.966884][    T8] usb 2-1: config 7 interface 187 has no altsetting 0
[ 1492.996049][    T8] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[ 1493.024979][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1493.034179][ T3966] netlink: 'syz.5.13533': attribute type 1 has an invalid length.
[ 1493.053796][    T8] usb 2-1: Product: syz
[ 1493.059810][    T8] usb 2-1: Manufacturer: syz
[ 1493.064872][    T8] usb 2-1: SerialNumber: syz
[ 1493.070496][ T3966] netlink: 10916 bytes leftover after parsing attributes in process `syz.5.13533'.
[ 1493.294279][    T8] usb 2-1: Limiting number of CPorts to U8_MAX
[ 1493.318249][    T8] usb 2-1: Unknown endpoint type found, address 0x07
[ 1493.342446][    T8] usb 2-1: Not enough endpoints found in device, aborting!
[ 1493.540625][    T8] usb 2-1: USB disconnect, device number 97
[ 1493.799053][T24595] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1493.816729][ T3988] loop5: detected capacity change from 0 to 128
[ 1493.836824][ T3990] loop4: detected capacity change from 0 to 256
[ 1493.852239][ T3990] exfat: Deprecated parameter 'namecase'
[ 1493.882477][ T3990] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d)
[ 1493.985762][T24595] usb 4-1: Using ep0 maxpacket: 16
[ 1493.999334][T24595] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1494.032037][T24595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1494.088043][T24595] usb 4-1: Product: syz
[ 1494.102617][T24595] usb 4-1: Manufacturer: syz
[ 1494.115790][T24595] usb 4-1: SerialNumber: syz
[ 1494.134824][T24595] r8152-cfgselector 4-1: config 0 descriptor??
[ 1494.604291][T24595] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1494.629912][T24595] r8152-cfgselector 4-1: USB disconnect, device number 105
[ 1494.721068][ T4012] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13556'.
[ 1494.891410][ T4016] netlink: 'syz.5.13558': attribute type 12 has an invalid length.
[ 1496.064621][ T4050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13575'.
[ 1496.110947][ T4050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13575'.
[ 1496.143225][ T4026] loop5: detected capacity change from 0 to 32768
[ 1496.176604][ T4026] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[ 1496.456037][ T4062] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[ 1497.113877][ T5831] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1497.342031][ T5831] usb 4-1: Using ep0 maxpacket: 32
[ 1497.367521][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1497.390701][ T5831] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1497.406221][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.424640][ T5831] usb 4-1: Product: syz
[ 1497.428897][ T5831] usb 4-1: Manufacturer: syz
[ 1497.433572][ T5831] usb 4-1: SerialNumber: syz
[ 1497.444221][ T1080] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1497.459927][ T4068] loop4: detected capacity change from 0 to 32768
[ 1497.470558][ T5831] usb 4-1: config 0 descriptor??
[ 1497.516069][ T5831] usb 4-1: bad CDC descriptors
[ 1497.518364][ T4068] 
[ 1497.518364][ T4068]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1497.518364][ T4068] 
[ 1497.523166][ T5831] usb 4-1: unsupported MDLM descriptors
[ 1497.627683][ T4068] ERROR: (device loop4): dbAlloc: the hint is outside the map
[ 1497.627683][ T4068] 
[ 1497.801814][ T1088] read_mapping_page failed!
[ 1497.826321][ T4074] loop5: detected capacity change from 0 to 32768
[ 1497.840207][ T1088] ERROR: (device loop4): txCommit: 
[ 1497.840207][ T1088] 
[ 1497.857017][ T5831] usb 4-1: USB disconnect, device number 106
[ 1497.861555][ T1088] jfs_write_inode: jfs_commit_inode failed!
[ 1497.872007][T26898] 
[ 1497.872007][T26898]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1497.872007][T26898] 
[ 1497.902520][T26898] 
[ 1497.902520][T26898]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1497.902520][T26898] 
[ 1497.966432][ T4074] ERROR: (device loop5): dtSearch: DT_GETPAGE: dtree page corrupt
[ 1497.966432][ T4074] 
[ 1498.013498][ T4074] ERROR: (device loop5): remounting filesystem as read-only
[ 1498.044808][ T4074] jfs_lookup: dtSearch returned -5
[ 1498.832735][ T4106] ./file0: Can't lookup blockdev
[ 1498.985755][ T4107] loop1: detected capacity change from 0 to 4096
[ 1499.004578][ T4107] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[ 1499.016400][ T4110] netlink: 'syz.4.13604': attribute type 2 has an invalid length.
[ 1499.219684][ T4107] ntfs3: loop1: failed to convert "c46c" to iso8859-2
[ 1499.536086][ T4126] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551611)
[ 1499.557175][ T4126] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[ 1499.606288][ T4129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13613'.
[ 1499.629461][ T4129] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13613'.
[ 1499.638935][ T4131] overlayfs: workdir and upperdir must be separate subtrees
[ 1499.876539][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13618'.
[ 1499.904212][ T4140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13618'.
[ 1500.545257][ T4160] loop5: detected capacity change from 0 to 1024
[ 1500.619886][ T4160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1500.795992][ T4160] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.5.13629: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1
[ 1500.835647][ T4160] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem
[ 1500.867392][ T4160] EXT4-fs warning (device loop5): ext4_rename_delete:3778: inode #2: comm syz.5.13629: Deleting old file: nlink 1, error=-117
[ 1500.909639][ T4170] loop4: detected capacity change from 0 to 512
[ 1500.964244][ T4170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1501.032191][ T4156] loop1: detected capacity change from 0 to 32768
[ 1501.059267][ T4156] (syz.1.13627,4156,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1501.081231][ T4156] (syz.1.13627,4156,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1501.129834][ T3557] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1501.228198][ T4156] JBD2: Ignoring recovery information on journal
[ 1501.343767][ T4156] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1501.384291][T26898] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1501.724601][ T4187] netlink: 'syz.3.13638': attribute type 46 has an invalid length.
[ 1501.821140][ T5770] ocfs2: Unmounting device (7,1) on (node local)
[ 1501.911581][ T4192] netlink: 'syz.5.13641': attribute type 3 has an invalid length.
[ 1501.953741][ T4192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1502.803622][ T1080] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1503.084541][ T4226] loop1: detected capacity change from 0 to 256
[ 1503.180209][ T4226] FAT-fs (loop1): Directory bread(block 64) failed
[ 1503.213084][ T4226] FAT-fs (loop1): Directory bread(block 65) failed
[ 1503.250251][ T4226] FAT-fs (loop1): Directory bread(block 66) failed
[ 1503.259048][ T4226] FAT-fs (loop1): Directory bread(block 67) failed
[ 1503.286120][ T4226] FAT-fs (loop1): Directory bread(block 68) failed
[ 1503.294370][ T4226] FAT-fs (loop1): Directory bread(block 69) failed
[ 1503.311476][ T4226] FAT-fs (loop1): Directory bread(block 70) failed
[ 1503.332607][ T4226] FAT-fs (loop1): Directory bread(block 71) failed
[ 1503.352505][ T4226] FAT-fs (loop1): Directory bread(block 72) failed
[ 1503.359250][ T4226] FAT-fs (loop1): Directory bread(block 73) failed
[ 1503.444322][ T4210] loop4: detected capacity change from 0 to 32768
[ 1503.476988][ T4210] (syz.4.13649,4210,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1503.509952][ T4210] (syz.4.13649,4210,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1503.558393][ T4214] loop5: detected capacity change from 0 to 32768
[ 1503.598436][ T4210] JBD2: Ignoring recovery information on journal
[ 1503.658792][ T4214] (syz.5.13652,4214,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1503.698287][ T4210] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1503.716433][ T4214] (syz.5.13652,4214,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1503.758294][ T4214] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present!
[ 1503.902822][ T4214] JBD2: Ignoring recovery information on journal
[ 1504.091525][ T4214] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1504.284303][T26898] ocfs2: Unmounting device (7,4) on (node local)
[ 1504.472701][ T4250] netlink: 'syz.1.13668': attribute type 9 has an invalid length.
[ 1504.737133][ T3557] ocfs2: Unmounting device (7,5) on (node local)
[ 1504.935541][ T4258] loop1: detected capacity change from 0 to 128
[ 1505.097518][ T4260] loop4: detected capacity change from 0 to 2048
[ 1505.198477][ T4263] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1505.301875][ T4260] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12
[ 1505.334659][ T4260] Remounting filesystem read-only
[ 1505.957747][ T4283] netlink: 'syz.5.13684': attribute type 3 has an invalid length.
[ 1505.995650][ T4283] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.13684'.
[ 1506.217905][   T27] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1506.419709][   T27] usb 2-1: Using ep0 maxpacket: 16
[ 1506.431958][   T27] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1506.465460][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1506.486097][   T27] usb 2-1: Product: syz
[ 1506.490347][   T27] usb 2-1: Manufacturer: syz
[ 1506.514458][   T27] usb 2-1: SerialNumber: syz
[ 1506.540925][   T27] r8152-cfgselector 2-1: config 0 descriptor??
[ 1506.598048][ T4307] loop3: detected capacity change from 0 to 64
[ 1506.739862][   T28] audit: type=1326 audit(2000000566.888:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.5.13697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538859aeb9 code=0x7ffc0000
[ 1506.740112][   T28] audit: type=1326 audit(2000000566.888:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.5.13697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538859aeb9 code=0x7ffc0000
[ 1506.746129][   T28] audit: type=1326 audit(2000000566.898:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.5.13697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f538859aeb9 code=0x7ffc0000
[ 1506.748840][   T28] audit: type=1326 audit(2000000566.898:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.5.13697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538859aeb9 code=0x7ffc0000
[ 1506.749086][   T28] audit: type=1326 audit(2000000566.898:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.5.13697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538859aeb9 code=0x7ffc0000
[ 1506.971149][   T27] r8152-cfgselector 2-1: Unknown version 0x0000
[ 1507.008750][   T27] r8152-cfgselector 2-1: USB disconnect, device number 98
[ 1507.162580][ T4319] loop3: detected capacity change from 0 to 2048
[ 1507.206509][ T4322] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1507.332084][ T4319] syz.3.13701: attempt to access beyond end of device
[ 1507.332084][ T4319] loop3: rw=0, sector=2199023255622, nr_sectors = 2 limit=2048
[ 1507.363226][ T4319] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0)
[ 1507.432073][ T4322] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 1507.445155][ T4322] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 1507.471552][ T4322] Remounting filesystem read-only
[ 1507.478656][ T3791] NILFS (loop3): discard dirty page: offset=0, ino=6
[ 1507.495790][ T3791] NILFS (loop3): discard dirty block: blocknr=1099511627811, size=1024
[ 1507.528452][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1507.552160][ T3791] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[ 1507.572153][ T3791] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[ 1507.587965][T24595] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1507.590911][ T3791] NILFS (loop3): discard dirty page: offset=0, ino=2
[ 1507.603644][ T3791] NILFS (loop3): discard dirty block: blocknr=18, size=1024
[ 1507.611071][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1507.622586][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1507.623221][ T4329] loop4: detected capacity change from 0 to 4096
[ 1507.639776][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1507.668488][ T3791] NILFS (loop3): discard dirty page: offset=0, ino=3
[ 1507.692123][ T4329] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 1507.696713][ T3791] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[ 1507.709105][ T4329] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x4 as bad.  Run chkdsk.
[ 1507.727106][ T3791] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[ 1507.757545][ T4329] ntfs: (device loop4): load_and_init_attrdef(): Failed to initialize attribute definition table.
[ 1507.759664][ T3791] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[ 1507.775398][ T4329] ntfs: (device loop4): ntfs_fill_super(): Failed to load system files.
[ 1507.795316][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1507.804413][T24595] usb 6-1: Using ep0 maxpacket: 8
[ 1507.817536][T24595] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1507.826217][ T3791] NILFS (loop3): discard dirty page: offset=131072, ino=3
[ 1507.842535][T24595] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1507.873050][T24595] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1507.881619][T24595] usb 6-1: Product: syz
[ 1507.889094][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1507.910710][T24595] usb 6-1: Manufacturer: syz
[ 1507.912287][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1507.915354][T24595] usb 6-1: SerialNumber: syz
[ 1507.982366][ T3791] NILFS (loop3): discard dirty block: blocknr=46, size=1024
[ 1507.998238][T24595] usb 6-1: config 0 descriptor??
[ 1508.015769][T24595] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[ 1508.027172][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.066330][ T3791] NILFS (loop3): discard dirty page: offset=196608, ino=3
[ 1508.073703][ T4335] loop1: detected capacity change from 0 to 256
[ 1508.089246][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.102221][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.129291][ T3791] NILFS (loop3): discard dirty block: blocknr=49, size=1024
[ 1508.172773][ T1088] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1508.173402][ T4335] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1508.184341][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.244757][ T3791] NILFS (loop3): discard dirty page: offset=0, ino=5
[ 1508.262047][ T3791] NILFS (loop3): discard dirty block: blocknr=41, size=1024
[ 1508.271936][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.305098][    T8] usb 6-1: USB disconnect, device number 2
[ 1508.320526][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.376742][ T3791] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.407443][ T5771] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[ 1508.445258][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=12
[ 1508.453880][ T5771] NILFS (loop3): discard dirty block: blocknr=17, size=1024
[ 1508.476018][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.493924][ T3558] Bluetooth: hci3: Unknown advertising packet type: 0x7f
[ 1508.494031][ T3558] Bluetooth: hci3: Malformed LE Event: 0x0d
[ 1508.501470][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.517979][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.530212][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=4
[ 1508.548612][ T5771] NILFS (loop3): discard dirty block: blocknr=40, size=1024
[ 1508.569231][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.588738][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.598280][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1508.995938][ T4347] loop3: detected capacity change from 0 to 32768
[ 1509.023718][ T4347] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.13705 (4347)
[ 1509.118823][ T4347] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1509.138695][ T4347] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1509.152595][ T4347] BTRFS info (device loop3): enabling ssd optimizations
[ 1509.188366][ T4347] BTRFS info (device loop3): not using ssd optimizations
[ 1509.212832][ T4347] BTRFS info (device loop3): turning off barriers
[ 1509.243068][ T4347] BTRFS info (device loop3): using free space tree
[ 1509.753681][ T4382] loop4: detected capacity change from 0 to 22
[ 1509.801838][ T4382] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 1509.848700][ T4382] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1510.012883][ T5771] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1510.231305][ T4393] macvtap0: entered allmulticast mode
[ 1510.237138][ T4393] veth0_macvtap: entered allmulticast mode
[ 1510.660941][ T4406] ieee802154 phy0 wpan0: encryption failed: -90
[ 1510.880333][ T4410] tmpfs: Bad value for 'mpol'
[ 1511.162196][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1511.172609][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1511.275881][ T4424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13743'.
[ 1511.390862][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13744'.
[ 1511.757431][ T4432] loop3: detected capacity change from 0 to 8192
[ 1511.857174][ T4432] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1511.909675][ T4432] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1511.956163][ T4432] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1511.988405][ T4432] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1512.025577][ T4432] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1512.063303][ T4432] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1512.113934][ T4432] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1512.171471][ T4432] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1512.205962][ T4432] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1512.230152][ T4432] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1512.250902][ T4432] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1512.262945][T24595] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1512.275677][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13756'.
[ 1512.277894][   T28] audit: type=1800 audit(2000000002.886:345): pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13747" name="file2" dev="loop3" ino=1048727 res=0 errno=0
[ 1512.440145][T24595] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[ 1512.448435][T24595] usb 2-1: config 0 has no interface number 0
[ 1512.471190][T24595] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1512.505358][T24595] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1512.560752][T24595] usb 2-1: config 0 interface 255 has no altsetting 0
[ 1512.576730][T24595] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1512.614757][T24595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1512.656051][T24595] usb 2-1: config 0 descriptor??
[ 1512.675252][T24595] ums-realtek 2-1:0.255: USB Mass Storage device detected
[ 1512.932097][T24595] usb 2-1: USB disconnect, device number 99
[ 1512.945208][T27183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1513.263573][ T4475] loop4: detected capacity change from 0 to 4096
[ 1513.297357][ T4475] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[ 1513.369814][ T4475] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[ 1513.401423][ T4475] ntfs3: loop4: mft corrupted
[ 1513.406548][ T4475] ntfs3: loop4: Failed to load $Extend (-22).
[ 1513.442159][ T4475] ntfs3: loop4: Failed to initialize $Extend.
[ 1513.595946][ T4475] ntfs3: loop4: ino=1b, "file0" failed to parse mft record
[ 1513.619463][ T4475] ntfs3: loop4: ino=1b, "file0" attr_set_size
[ 1514.351383][   T27] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1514.537372][   T27] usb 6-1: Using ep0 maxpacket: 8
[ 1514.553722][   T27] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[ 1514.581171][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1514.614609][ T4519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13789'.
[ 1514.621673][   T27] usb 6-1: Product: syz
[ 1514.628349][   T27] usb 6-1: Manufacturer: syz
[ 1514.644503][   T27] usb 6-1: SerialNumber: syz
[ 1514.665946][   T27] usb 6-1: config 0 descriptor??
[ 1514.685974][   T27] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244)
[ 1515.098718][ T4534] loop1: detected capacity change from 0 to 512
[ 1515.120430][   T27] radio-usb-si4713: probe of 6-1:0.0 failed with error -71
[ 1515.154371][   T27] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1515.166901][ T4534] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1515.185489][   T27] usb 6-1: USB disconnect, device number 3
[ 1515.219166][ T4537] ieee802154 phy0 wpan0: encryption failed: -90
[ 1515.238009][ T4534] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[ 1515.282349][ T4534] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.13796: bg 0: block 248: padding at end of block bitmap is not set
[ 1515.321235][ T4534] Quota error (device loop1): write_blk: dquota write failed
[ 1515.329064][ T4534] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1515.349104][ T4534] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.13796: Failed to acquire dquot type 1
[ 1515.364632][ T4534] EXT4-fs (loop1): 1 truncate cleaned up
[ 1515.373302][ T4534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[ 1515.398625][ T4534] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.13796: deleted inode referenced: 12
[ 1515.518959][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[ 1515.572680][ T4544] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1516.082931][ T4560] loop4: detected capacity change from 0 to 64
[ 1516.146635][ T4566] kAFS: unable to lookup cell '/,'
[ 1516.232208][ T4560] hfs: inconsistency in B*Tree (1,0,1,0,3)
[ 1516.811802][   T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1516.975926][ T4590] netlink: 'syz.4.13823': attribute type 2 has an invalid length.
[ 1516.997834][   T27] usb 6-1: Using ep0 maxpacket: 8
[ 1517.015017][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1517.035001][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1517.044338][    T8] usb 2-1: new low-speed USB device number 100 using dummy_hcd
[ 1517.072246][   T27] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1517.091447][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1517.117386][   T27] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1517.144300][ T4595] loop3: detected capacity change from 0 to 128
[ 1517.154970][   T27] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1517.169096][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1517.187210][   T27] usb 6-1: config 0 descriptor??
[ 1517.194924][ T4574] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1517.284194][    T8] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1517.305778][    T8] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[ 1517.320541][    T8] usb 2-1: config 0 has no interface number 0
[ 1517.379929][    T8] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[ 1517.401809][    T8] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1517.434942][    T8] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1517.457078][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1517.489042][    T8] usb 2-1: config 0 descriptor??
[ 1517.691701][ T4604] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1517.713792][ T4604] overlayfs: missing 'lowerdir'
[ 1517.728376][ T1080] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1517.743466][ T3558] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[ 1517.752922][   T27] usb 6-1: USB disconnect, device number 4
[ 1517.976228][    T8] usb 2-1: USB disconnect, device number 100
[ 1518.398303][ T4622] lo: entered allmulticast mode
[ 1518.517486][   T27] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1518.705349][   T27] usb 4-1: config 1 has an invalid interface number: 213 but max is 0
[ 1518.724941][   T27] usb 4-1: config 1 has no interface number 0
[ 1518.731112][   T27] usb 4-1: config 1 interface 213 has no altsetting 0
[ 1518.766988][   T27] usb 4-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=2a.7a
[ 1518.797160][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1518.805503][   T27] usb 4-1: Product: syz
[ 1518.825104][   T27] usb 4-1: Manufacturer: 濦�닫鼮㴩횠茶瞤歜ง๡䳲敯𿌼
[ 1518.833793][   T27] usb 4-1: SerialNumber: syz
[ 1519.090185][   T27] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[ 1519.141015][   T27] snd-usb-audio: probe of 4-1:1.213 failed with error -2
[ 1519.161675][   T27] usb 4-1: USB disconnect, device number 107
[ 1519.176286][ T4630] loop5: detected capacity change from 0 to 32768
[ 1519.203477][ T3546] udevd[3546]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.213/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1519.205546][ T4630] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.13843 (4630)
[ 1519.338075][ T4630] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1519.365929][ T4630] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[ 1519.382752][ T4630] BTRFS info (device loop5): enabling ssd optimizations
[ 1519.420611][ T4630] BTRFS info (device loop5): not using ssd optimizations
[ 1519.449030][ T4630] BTRFS info (device loop5): turning off barriers
[ 1519.455547][ T4630] BTRFS info (device loop5): using free space tree
[ 1519.825140][ T4652] IPv6: Can't replace route, no match found
[ 1519.962563][ T3557] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1520.068101][ T4634] loop4: detected capacity change from 0 to 32768
[ 1520.170608][ T4634] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1520.435295][ T3546] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop5 scanned by udevd (3546)
[ 1520.438171][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1520.547921][ T4634] XFS (loop4): Ending clean mount
[ 1520.593264][ T4634] XFS (loop4): Quotacheck needed: Please wait.
[ 1520.732732][ T4677] loop1: detected capacity change from 0 to 256
[ 1520.865377][ T4677] FAT-fs (loop1): Directory bread(block 64) failed
[ 1520.892540][ T4677] FAT-fs (loop1): Directory bread(block 65) failed
[ 1520.913280][ T4677] FAT-fs (loop1): Directory bread(block 66) failed
[ 1520.939643][ T4677] FAT-fs (loop1): Directory bread(block 67) failed
[ 1520.945746][ T4634] XFS (loop4): Quotacheck: Done.
[ 1520.966738][ T4677] FAT-fs (loop1): Directory bread(block 68) failed
[ 1520.986641][ T4677] FAT-fs (loop1): Directory bread(block 69) failed
[ 1521.003126][ T4677] FAT-fs (loop1): Directory bread(block 70) failed
[ 1521.022398][ T4677] FAT-fs (loop1): Directory bread(block 71) failed
[ 1521.027939][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1521.032551][ T4677] FAT-fs (loop1): Directory bread(block 72) failed
[ 1521.061374][ T4677] FAT-fs (loop1): Directory bread(block 73) failed
[ 1521.192793][    T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1521.390624][    T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1521.410209][T26898] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1521.437420][    T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1521.449634][    T8] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1521.462993][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 1521.471161][    T8] usb 6-1: SerialNumber: syz
[ 1521.695356][    T8] usb 6-1: 0:2 : does not exist
[ 1521.742358][ T4687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13860'.
[ 1521.769541][    T8] usb 6-1: USB disconnect, device number 5
[ 1521.775776][ T4689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13859'.
[ 1521.776662][ T4687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13860'.
[ 1521.811865][ T3546] udevd[3546]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1522.434286][ T4702] SET target dimension over the limit!
[ 1522.576730][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13868'.
[ 1522.703710][ T5831] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1522.929414][ T5831] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 1522.949067][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1522.978269][ T5831] usb 4-1: Product: syz
[ 1522.991101][ T5831] usb 4-1: Manufacturer: syz
[ 1522.996040][ T5831] usb 4-1: SerialNumber: syz
[ 1523.018346][ T4699] loop1: detected capacity change from 0 to 32768
[ 1523.027870][ T4699] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.13865 (4699)
[ 1523.056869][ T5831] r8152-cfgselector 4-1: config 0 descriptor??
[ 1523.071290][ T4699] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1523.091439][ T3791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1523.101641][ T4699] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[ 1523.131697][ T4699] BTRFS info (device loop1): turning off barriers
[ 1523.138730][ T4699] BTRFS info (device loop1): enabling ssd optimizations
[ 1523.156054][ T4699] BTRFS info (device loop1): using spread ssd allocation scheme
[ 1523.189971][ T4699] BTRFS info (device loop1): enabling auto defrag
[ 1523.205645][ T4699] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1523.233247][ T4699] BTRFS info (device loop1): trying to use backup root at mount time
[ 1523.254831][ T4699] BTRFS info (device loop1): ignoring data csums
[ 1523.272066][ T4699] BTRFS info (device loop1): force zlib compression, level 3
[ 1523.289159][ T4699] BTRFS info (device loop1): using free space tree
[ 1523.358037][ T4713] loop5: detected capacity change from 0 to 4096
[ 1523.396312][ T4713] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[ 1523.404995][ T4713] UDF-fs: Scanning with blocksize 512 failed
[ 1523.437123][ T4713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1523.526489][ T5831] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1523.545794][ T5831] r8152-cfgselector 4-1: USB disconnect, device number 108
[ 1523.554087][ T4699] BTRFS error (device loop1: state MC): ignoredatacsums must be used with ro mount option
[ 1523.605401][ T4713] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[ 1523.713308][ T5770] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1524.154335][ T4711] loop4: detected capacity change from 0 to 32768
[ 1524.194853][ T4711] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[ 1524.477891][ T3546] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[ 1524.698362][ T4749] loop1: detected capacity change from 0 to 8
[ 1524.827273][ T4749] SQUASHFS error: Unable to read directory block [629:26]
[ 1524.921618][ T4747] loop3: detected capacity change from 0 to 4096
[ 1525.000951][ T4747] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1525.025835][ T4747] ntfs3: loop3: Failed to load $Extend (-22).
[ 1525.066151][ T4747] ntfs3: loop3: Failed to initialize $Extend.
[ 1525.361728][ T4762] loop1: detected capacity change from 0 to 164
[ 1525.855383][ T4778] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1526.029928][ T5831] usb 2-1: new full-speed USB device number 101 using dummy_hcd
[ 1526.256870][ T5831] usb 2-1: config 16 has an invalid interface number: 19 but max is 0
[ 1526.270205][ T4791] loop5: detected capacity change from 0 to 2048
[ 1526.271218][ T5831] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1526.317564][ T4791] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1526.327520][ T5831] usb 2-1: config 16 has no interface number 0
[ 1526.349493][ T5831] usb 2-1: config 16 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1526.380963][ T5831] usb 2-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee
[ 1526.440638][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1526.449035][ T5831] usb 2-1: Product: syz
[ 1526.486376][ T5831] usb 2-1: Manufacturer: syz
[ 1526.491058][ T5831] usb 2-1: SerialNumber: syz
[ 1526.826757][ T4805] binder: 4804:4805 ioctl 400c620e 200000000040 returned -22
[ 1526.977903][ T5831] usb 2-1: USB disconnect, device number 101
[ 1527.043846][ T4812] loop3: detected capacity change from 0 to 512
[ 1527.053508][ T3546] udevd[3546]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1527.159164][ T4812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1527.241107][ T4812] ext4 filesystem being mounted at /3556/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1527.313753][ T4812] EXT4-fs error (device loop3): ext4_xattr_block_find:1879: inode #12: comm syz.3.13911: corrupted xattr block 6: invalid header
[ 1527.469432][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1527.598772][   T28] audit: type=1326 audit(2000000019.322:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.5.13917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538859aeb9 code=0x7ffc0000
[ 1527.668947][   T28] audit: type=1326 audit(2000000019.355:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.5.13917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538859aeb9 code=0x7ffc0000
[ 1527.705745][   T28] audit: type=1326 audit(2000000019.387:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.5.13917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f538859aeb9 code=0x7ffc0000
[ 1527.799147][   T28] audit: type=1326 audit(2000000019.387:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.5.13917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538859aeb9 code=0x7ffc0000
[ 1527.844229][   T28] audit: type=1326 audit(2000000019.387:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4826 comm="syz.5.13917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538859aeb9 code=0x7ffc0000
[ 1528.101221][ T4845] loop4: detected capacity change from 0 to 256
[ 1528.170140][ T4846] loop1: detected capacity change from 0 to 2048
[ 1528.189632][ T4845] FAT-fs (loop4): Directory bread(block 64) failed
[ 1528.210366][ T4848] Cannot find set identified by id 0 to match
[ 1528.213640][ T4845] FAT-fs (loop4): Directory bread(block 65) failed
[ 1528.263727][ T4845] FAT-fs (loop4): Directory bread(block 66) failed
[ 1528.280723][ T4845] FAT-fs (loop4): Directory bread(block 67) failed
[ 1528.292834][ T4846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1528.307166][ T4845] FAT-fs (loop4): Directory bread(block 68) failed
[ 1528.311015][ T4851] xt_hashlimit: size too large, truncated to 1048576
[ 1528.321144][ T4851] xt_hashlimit: max too large, truncated to 1048576
[ 1528.332803][ T4845] FAT-fs (loop4): Directory bread(block 69) failed
[ 1528.340292][ T4845] FAT-fs (loop4): Directory bread(block 70) failed
[ 1528.410735][ T4845] FAT-fs (loop4): Directory bread(block 71) failed
[ 1528.444175][ T4845] FAT-fs (loop4): Directory bread(block 72) failed
[ 1528.451050][ T4845] FAT-fs (loop4): Directory bread(block 73) failed
[ 1528.457703][ T4856] netlink: 'syz.5.13931': attribute type 1 has an invalid length.
[ 1528.474243][T14027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1528.657882][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1529.268097][ T4879] loop1: detected capacity change from 0 to 512
[ 1529.322057][ T4879] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1529.352478][ T4879] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[ 1529.369893][ T4879] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.13941: attempt to clear invalid blocks 2 len 1
[ 1529.391388][ T4879] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 1529.412697][ T4879] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.13941: invalid indirect mapped block 1819239214 (level 0)
[ 1529.447490][ T4879] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.13941: invalid indirect mapped block 1819239214 (level 1)
[ 1529.464549][ T4879] EXT4-fs (loop1): 1 truncate cleaned up
[ 1529.472698][ T4879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1529.668437][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1530.555417][ T4922] loop3: detected capacity change from 0 to 256
[ 1530.668369][ T4927] binder: 4925:4927 ioctl c0306201 200000000380 returned -14
[ 1530.721272][ T4922] FAT-fs (loop3): Directory bread(block 64) failed
[ 1530.729851][ T4922] FAT-fs (loop3): Directory bread(block 65) failed
[ 1530.759703][ T4922] FAT-fs (loop3): Directory bread(block 66) failed
[ 1530.782992][ T4922] FAT-fs (loop3): Directory bread(block 67) failed
[ 1530.800266][ T4922] FAT-fs (loop3): Directory bread(block 68) failed
[ 1530.829990][ T4922] FAT-fs (loop3): Directory bread(block 69) failed
[ 1530.837103][ T4922] FAT-fs (loop3): Directory bread(block 70) failed
[ 1530.865507][ T4922] FAT-fs (loop3): Directory bread(block 71) failed
[ 1530.874220][ T4922] FAT-fs (loop3): Directory bread(block 72) failed
[ 1530.881252][ T4922] FAT-fs (loop3): Directory bread(block 73) failed
[ 1530.905239][    T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1531.031417][ T4922] syz.3.13962: attempt to access beyond end of device
[ 1531.031417][ T4922] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256
[ 1531.073943][ T4922] syz.3.13962: attempt to access beyond end of device
[ 1531.073943][ T4922] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256
[ 1531.097153][   T28] audit: type=1800 audit(2000000023.078:351): pid=4922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13962" name="file0" dev="loop3" ino=1048731 res=0 errno=0
[ 1531.135798][    T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1531.165064][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1531.190768][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1531.233097][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1531.250831][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1531.284354][    T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1531.320538][    T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1531.330789][    T8] usb 5-1: Product: syz
[ 1531.350646][    T8] usb 5-1: Manufacturer: syz
[ 1531.362818][ T4943] loop1: detected capacity change from 0 to 16
[ 1531.410988][    T8] cdc_wdm 5-1:1.0: skipping garbage
[ 1531.411999][ T4943] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1531.416249][    T8] cdc_wdm 5-1:1.0: skipping garbage
[ 1531.448600][    T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1531.456251][    T8] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1531.524162][ T4943] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86
[ 1531.575596][ T4943] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86
[ 1531.595837][   T28] audit: type=1800 audit(2000000023.614:352): pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13973" name="file1" dev="loop1" ino=86 res=0 errno=0
[ 1531.758615][ T4924] cdc_wdm 5-1:1.0: Error submitting int urb - -90
[ 1531.802800][   T27] usb 5-1: USB disconnect, device number 21
[ 1531.898221][ T4955] netlink: 'syz.5.13978': attribute type 7 has an invalid length.
[ 1531.929342][ T4955] netlink: 148 bytes leftover after parsing attributes in process `syz.5.13978'.
[ 1532.032636][ T4959] loop1: detected capacity change from 0 to 256
[ 1532.492039][ T4971] vlan0: entered promiscuous mode
[ 1532.519580][ T4974] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13988'.
[ 1532.554285][ T4975] SET target dimension over the limit!
[ 1533.828531][   T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1534.003916][ T4993] loop1: detected capacity change from 0 to 32768
[ 1534.079543][ T4993] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[ 1534.117670][ T4993] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1534.414876][ T4993] XFS (loop1): Ending clean mount
[ 1534.449470][ T4995] loop5: detected capacity change from 0 to 32768
[ 1534.525578][ T4995] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1534.565505][ T4995] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1534.573341][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1534.688649][ T4995] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[ 1534.700821][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1534.706227][ T5831] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1534.714418][ T5831] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1534.740070][ T5021] netlink: 'syz.4.14007': attribute type 21 has an invalid length.
[ 1534.763294][ T5021] netlink: 'syz.4.14007': attribute type 1 has an invalid length.
[ 1534.796132][ T5021] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14007'.
[ 1534.900176][ T5831] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 199ms
[ 1534.940901][ T5831] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1534.955229][ T4995] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1535.508313][ T5034] loop3: detected capacity change from 0 to 4096
[ 1535.570745][ T5034] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[ 1535.649894][ T5034] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[ 1535.917233][ T5045] loop1: detected capacity change from 0 to 1024
[ 1536.053399][ T5045] hfsplus: catalog name length corrupted
[ 1536.980224][ T5076] loop5: detected capacity change from 0 to 1024
[ 1537.243718][ T5092] kAFS: No cell specified
[ 1537.636073][ T5099] fuse: blksize only supported for fuseblk
[ 1538.048967][ T5118] loop4: detected capacity change from 0 to 256
[ 1538.546938][ T5129] loop3: detected capacity change from 0 to 8192
[ 1538.604337][ T5129] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1538.672844][ T5129] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[ 1538.739350][ T5129] REISERFS (device loop3): using journaled data mode
[ 1538.766479][ T5129] reiserfs: using flush barriers
[ 1538.827112][ T5129] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1538.883369][ T5129] REISERFS (device loop3): checking transaction log (loop3)
[ 1538.918137][ T5142] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1538.922183][ T5130] loop1: detected capacity change from 0 to 32768
[ 1538.927154][ T5129] REISERFS (device loop3): Using r5 hash to sort names
[ 1538.963011][ T5130] (syz.1.14052,5130,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1538.973022][ T5129] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[ 1539.013487][ T5130] (syz.1.14052,5130,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1539.051315][ T5129] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[ 1539.159451][ T5130] JBD2: Ignoring recovery information on journal
[ 1539.192113][T27183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1539.259765][ T5130] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1539.789897][ T5770] ocfs2: Unmounting device (7,1) on (node local)
[ 1539.893572][ T5152] loop3: detected capacity change from 0 to 4096
[ 1540.049277][ T5152] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[ 1540.068903][ T5144] loop5: detected capacity change from 0 to 32768
[ 1540.166316][ T5144] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1540.393309][ T5144] XFS (loop5): Ending clean mount
[ 1540.488361][ T5144] XFS (loop5): Quotacheck needed: Please wait.
[ 1540.688204][ T5144] XFS (loop5): Quotacheck: Done.
[ 1540.734260][ T5176] loop3: detected capacity change from 0 to 256
[ 1540.826233][ T3557] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1540.865901][ T5176] FAT-fs (loop3): Directory bread(block 64) failed
[ 1540.895583][ T5176] FAT-fs (loop3): Directory bread(block 65) failed
[ 1540.901687][ T5178] loop1: detected capacity change from 0 to 4096
[ 1540.923966][ T5176] FAT-fs (loop3): Directory bread(block 66) failed
[ 1540.985692][ T5176] FAT-fs (loop3): Directory bread(block 67) failed
[ 1541.000543][ T5181] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1541.011062][ T5176] FAT-fs (loop3): Directory bread(block 68) failed
[ 1541.036827][ T5176] FAT-fs (loop3): Directory bread(block 69) failed
[ 1541.049508][ T5176] FAT-fs (loop3): Directory bread(block 70) failed
[ 1541.073181][ T5176] FAT-fs (loop3): Directory bread(block 71) failed
[ 1541.080026][ T5176] FAT-fs (loop3): Directory bread(block 72) failed
[ 1541.126939][ T5176] FAT-fs (loop3): Directory bread(block 73) failed
[ 1541.370806][ T5185] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1541.586463][ T5188] netlink: 'syz.4.14076': attribute type 64 has an invalid length.
[ 1541.625311][ T5188] netlink: 'syz.4.14076': attribute type 4 has an invalid length.
[ 1541.660233][ T5188] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14076'.
[ 1541.987358][ T5199] netlink: zone id is out of range
[ 1542.483890][ T5217] ieee802154 phy0 wpan0: encryption failed: -22
[ 1542.508376][ T5831] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1542.715970][ T5831] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1542.759233][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.780642][ T5831] usb 5-1: config 0 descriptor??
[ 1542.938571][ T5229] xt_socket: unknown flags 0x58
[ 1543.032395][ T5831] [drm] vendor descriptor length:6 data:06 5f 01 ff 00 00 00 00 00 00 00
[ 1543.049824][ T5831] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1543.218445][ T5831] [drm:udl_init] *ERROR* Selecting channel failed
[ 1543.261340][ T5831] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[ 1543.291187][ T5831] [drm] Initialized udl on minor 2
[ 1543.328918][ T5831] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1543.356095][ T5831] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1543.383488][ T5833] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1543.400782][ T5831] usb 5-1: USB disconnect, device number 22
[ 1543.421916][ T5833] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1543.608411][   T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1543.822385][   T27] usb 6-1: Using ep0 maxpacket: 16
[ 1543.850085][   T27] usb 6-1: config 0 has an invalid interface number: 163 but max is 0
[ 1543.870184][   T27] usb 6-1: config 0 has no interface number 0
[ 1543.876463][   T27] usb 6-1: config 0 interface 163 has no altsetting 0
[ 1543.907860][   T27] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc
[ 1543.919696][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1543.929018][   T27] usb 6-1: Product: syz
[ 1543.933238][   T27] usb 6-1: Manufacturer: syz
[ 1543.938134][ T5833] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1543.946801][   T27] usb 6-1: SerialNumber: syz
[ 1543.964894][   T27] usb 6-1: config 0 descriptor??
[ 1543.972147][T14027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1543.996214][ T5259] loop4: detected capacity change from 0 to 1024
[ 1544.158574][ T5833] usb 2-1: Using ep0 maxpacket: 32
[ 1544.188946][ T5833] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1544.230016][ T5833] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1544.251393][ T5833] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1544.269955][ T5833] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1544.291177][ T5833] usb 2-1: Product: syz
[ 1544.295775][ T5833] usb 2-1: Manufacturer: syz
[ 1544.320447][ T5833] hub 2-1:4.0: USB hub found
[ 1544.452669][    T8] usb 6-1: USB disconnect, device number 6
[ 1544.464060][    T8] f81534a_ctrl 6-1:0.163: failed to set register 0x116: -19
[ 1544.483287][    T8] f81534a_ctrl 6-1:0.163: failed to enable ports: -19
[ 1544.522675][ T5833] hub 2-1:4.0: 1 port detected
[ 1544.690113][T24595] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[ 1544.702436][ T5833] hub 2-1:4.0: hub_hub_status failed (err = -71)
[ 1544.718180][ T5833] hub 2-1:4.0: config failed, can't get hub status (err -71)
[ 1544.789599][ T5833] usb 2-1: USB disconnect, device number 102
[ 1544.893005][T24595] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1544.901960][T24595] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1544.921067][T24595] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1544.940483][T24595] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1544.957934][T24595] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1544.976191][T24595] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1544.993197][T24595] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1545.025192][T24595] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1545.041875][T24595] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1545.062297][T24595] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1545.091675][T24595] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1545.107385][T24595] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1545.127718][T24595] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1545.146165][T24595] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1545.171478][ T5284] loop5: detected capacity change from 0 to 16
[ 1545.174247][T24595] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1545.202572][T24595] usb 5-1: string descriptor 0 read error: -22
[ 1545.218375][T24595] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1545.228558][ T5284] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1545.258537][T24595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1545.284811][T24595] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1545.299184][ T5284] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 25964 @ lcn 143 of nid 36
[ 1545.338173][ T5284] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[ 1545.379769][ T5284] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 25964 @ lcn 143 of nid 36
[ 1545.421079][ T5284] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[ 1545.474743][ T5284] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 71 of nid 36
[ 1545.624261][T24595] usb 5-1: USB disconnect, device number 23
[ 1545.686167][ T5280] loop3: detected capacity change from 0 to 32768
[ 1545.702469][ T5280] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.14120 (5280)
[ 1545.786843][ T5280] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1545.807919][ T5280] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1545.826764][ T5280] BTRFS info (device loop3): force zlib compression, level 3
[ 1545.844021][ T5280] BTRFS info (device loop3): turning on flush-on-commit
[ 1545.871613][ T5280] BTRFS info (device loop3): max_inline at 4096
[ 1545.893001][ T5280] BTRFS info (device loop3): using free space tree
[ 1546.059262][ T5280] BTRFS info (device loop3): enabling ssd optimizations
[ 1546.096572][ T5280] BTRFS info (device loop3): auto enabling async discard
[ 1546.335984][ T5771] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1546.337333][ T5314] loop4: detected capacity change from 0 to 128
[ 1546.365731][ T5316] loop1: detected capacity change from 0 to 8
[ 1546.514518][ T5316] cramfs: bad data blocksize 3222268820
[ 1546.565245][ T5316] cramfs: Error -3 while decompressing!
[ 1546.590981][ T5316] cramfs: ffffffff973f839c(16)->ffff88807532c000(4096)
[ 1546.628694][ T5316] cramfs: bad data blocksize 4165569313
[ 1546.634831][ T5316] cramfs: bad data blocksize 3825676623
[ 1546.651793][ T3546] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop3 scanned by udevd (3546)
[ 1546.659288][ T5290] loop5: detected capacity change from 0 to 32768
[ 1546.684193][ T5316] cramfs: bad data blocksize 4294480561
[ 1546.709358][ T5316] cramfs: bad data blocksize 1076736
[ 1546.759941][ T5316] cramfs: bad data blocksize 485460736
[ 1546.799720][ T5316] cramfs: bad data blocksize 3808479469
[ 1546.814435][ T5316] cramfs: bad data blocksize 3222268820
[ 1546.820370][   T28] audit: type=1800 audit(2000000039.944:353): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14130" name="file2" dev="loop1" ino=348 res=0 errno=0
[ 1546.933678][ T5290] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1546.942153][ T5325] ieee802154 phy0 wpan0: encryption failed: -22
[ 1547.128019][ T5290] XFS (loop5): Ending clean mount
[ 1547.188257][ T5290] XFS (loop5): Quotacheck needed: Please wait.
[ 1547.455868][ T5290] XFS (loop5): Quotacheck: Done.
[ 1547.609932][ T5341] loop3: detected capacity change from 0 to 512
[ 1547.681909][ T3557] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1547.768390][ T5341] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec118, mo2=0002]
[ 1547.777510][ T5341] System zones: 0-2, 18-18, 34-35
[ 1547.811238][ T5341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1547.839962][ T5341] ext4 filesystem being mounted at /3624/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1548.049986][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1548.278936][ T5356] ipt_ECN: cannot use operation on non-tcp rule
[ 1548.717931][ T5364] loop3: detected capacity change from 0 to 4096
[ 1548.757467][ T5364] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 1548.851118][ T5364] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[ 1548.851160][ T5364] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1548.851227][ T5364] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1548.862189][ T5364] ntfs: volume version 3.1.
[ 1548.956012][ T5374] loop1: detected capacity change from 0 to 1764
[ 1549.013322][ T5374] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1549.080506][ T5771] ntfs: (device loop3): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[ 1549.108385][ T5378] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.14155'.
[ 1549.302035][ T5382] netlink: 'syz.3.14156': attribute type 13 has an invalid length.
[ 1549.315760][ T5382] netlink: 'syz.3.14156': attribute type 12 has an invalid length.
[ 1549.333446][ T1088] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1549.385147][ T5384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14158'.
[ 1549.426834][ T5386] netlink: 9 bytes leftover after parsing attributes in process `syz.4.14159'.
[ 1549.462051][ T5386] 0·: renamed from hsr0 (while UP)
[ 1549.494660][ T5386] 0·: entered allmulticast mode
[ 1549.517389][ T5386] hsr_slave_0: entered allmulticast mode
[ 1549.525948][ T5386] hsr_slave_1: entered allmulticast mode
[ 1549.540629][ T5388] loop3: detected capacity change from 0 to 512
[ 1549.548521][ T5386] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[ 1549.568408][ T5388] EXT4-fs: Ignoring removed orlov option
[ 1549.596331][ T5388] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[ 1549.642260][ T5388] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.14160: corrupted in-inode xattr: e_value size too large
[ 1549.747509][ T5388] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.14160: couldn't read orphan inode 15 (err -117)
[ 1549.818020][ T5388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1550.045607][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1550.296229][ T5411] netlink: 'syz.3.14170': attribute type 9 has an invalid length.
[ 1550.328520][ T5411] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.14170'.
[ 1550.967373][ T5443] loop4: detected capacity change from 0 to 64
[ 1550.988934][ T5445] loop1: detected capacity change from 0 to 65
[ 1551.009227][ T5445] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[ 1551.680580][ T5468] netlink: 'syz.4.14194': attribute type 4 has an invalid length.
[ 1551.711855][ T5468] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14194'.
[ 1551.811481][ T5468] .`: renamed from bond0 (while UP)
[ 1551.823132][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14196'.
[ 1551.833233][ T5463] loop5: detected capacity change from 0 to 4096
[ 1552.318663][ T5487] loop1: detected capacity change from 0 to 256
[ 1552.527853][ T5490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14203'.
[ 1552.804826][ T5501] netlink: 'syz.3.14209': attribute type 4 has an invalid length.
[ 1552.826808][ T5501] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14209'.
[ 1553.143587][ T5833] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1553.300185][ T5517] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1553.340762][ T5833] usb 5-1: config 0 has an invalid interface number: 83 but max is 0
[ 1553.353496][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1553.379480][ T5833] usb 5-1: config 0 has no interface number 0
[ 1553.389281][ T5833] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[ 1553.399191][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.438162][ T5833] usb 5-1: config 0 descriptor??
[ 1553.476473][ T5833] ttusbir 5-1:0.83: cannot find expected altsetting
[ 1553.569150][ T5495] loop1: detected capacity change from 0 to 32768
[ 1553.619937][ T5495] (syz.1.14206,5495,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1553.643886][ T5495] (syz.1.14206,5495,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1553.684390][ T5526] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14220'.
[ 1553.707683][ T5526] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1553.731550][T11670] usb 5-1: USB disconnect, device number 24
[ 1553.802073][ T5495] JBD2: Ignoring recovery information on journal
[ 1553.975639][ T5495] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1554.113329][ T1080] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1554.367192][ T5770] ocfs2: Unmounting device (7,1) on (node local)
[ 1554.505497][ T5546] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1554.555302][ T5548] openvswitch: netlink: EtherType 0 is less than min 600
[ 1554.759656][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14233'.
[ 1554.769321][ T5554] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1554.783394][ T5554] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1555.400703][ T5579] loop3: detected capacity change from 0 to 16
[ 1555.437005][ T5579] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1555.445056][T24595] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1555.479948][ T5579] cifs: Unknown parameter 'cache_strategy'
[ 1555.639324][T24595] usb 5-1: Using ep0 maxpacket: 32
[ 1555.659466][T24595] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[ 1555.668229][T24595] usb 5-1: config 0 has no interface number 0
[ 1555.696455][T24595] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1555.740210][T24595] usb 5-1: config 0 interface 2 has no altsetting 0
[ 1555.766195][T24595] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[ 1555.781166][T24595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1555.807711][T24595] usb 5-1: Product: syz
[ 1555.844430][T24595] usb 5-1: Manufacturer: syz
[ 1555.858096][T24595] usb 5-1: SerialNumber: syz
[ 1555.873319][T24595] usb 5-1: config 0 descriptor??
[ 1556.121547][T24595] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[ 1556.364928][T24595] usb 5-1: USB disconnect, device number 25
[ 1556.484468][ T3552] udevd[3552]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1556.899166][ T5622] delete_channel: no stack
[ 1557.208503][ T5629] loop1: detected capacity change from 0 to 4096
[ 1557.244957][ T5629] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[ 1557.493114][ T5629] ntfs3: loop1: failed to convert "c46c" to koi8-r
[ 1557.619106][ T5642] netlink: 'syz.3.14270': attribute type 1 has an invalid length.
[ 1558.376321][ T5657] loop3: detected capacity change from 0 to 4096
[ 1558.458698][ T5657] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 1558.506123][ T5638] loop5: detected capacity change from 0 to 32768
[ 1558.585722][ T5657] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[ 1558.606061][   T23] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1558.819464][   T23] usb 2-1: Using ep0 maxpacket: 32
[ 1558.841133][   T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1558.874359][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1558.922226][   T23] usb 2-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1558.952079][   T23] usb 2-1: config 0 interface 0 has no altsetting 1
[ 1558.998308][   T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57
[ 1559.061988][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1559.070198][   T23] usb 2-1: Product: syz
[ 1559.093842][   T23] usb 2-1: Manufacturer: syz
[ 1559.104139][   T23] usb 2-1: SerialNumber: syz
[ 1559.141837][   T23] usb 2-1: config 0 descriptor??
[ 1559.473253][T14027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1559.532733][ T5683] netlink: 'syz.4.14290': attribute type 41 has an invalid length.
[ 1559.545430][ T5683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14290'.
[ 1559.677593][T11670] usb 2-1: USB disconnect, device number 103
[ 1560.289195][ T5709] loop5: detected capacity change from 0 to 1024
[ 1560.492313][T14027] hfsplus: b-tree write err: -5, ino 4
[ 1561.139654][T11670] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1561.140041][   T27] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1561.317097][T11670] usb 4-1: Using ep0 maxpacket: 16
[ 1561.337109][T11670] usb 4-1: config 0 has an invalid interface number: 223 but max is 0
[ 1561.355892][T11670] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.363814][   T27] usb 6-1: Using ep0 maxpacket: 32
[ 1561.375845][T11670] usb 4-1: config 0 has no interface number 0
[ 1561.391119][   T27] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[ 1561.392465][T11670] usb 4-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7
[ 1561.400572][   T27] usb 6-1: config 0 has no interface number 0
[ 1561.440924][T11670] usb 4-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1561.456305][   T27] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1561.472174][T11670] usb 4-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1561.475213][   T27] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1561.513572][   T27] usb 6-1: config 0 interface 85 has no altsetting 0
[ 1561.521528][T11670] usb 4-1: config 0 interface 223 has no altsetting 0
[ 1561.539032][T11670] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1561.539312][   T27] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1561.548930][T11670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1561.586022][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1561.608084][   T27] usb 6-1: Product: syz
[ 1561.612417][   T27] usb 6-1: Manufacturer: syz
[ 1561.612473][T11670] usb 4-1: Product: syz
[ 1561.635075][   T27] usb 6-1: SerialNumber: syz
[ 1561.641466][T11670] usb 4-1: Manufacturer: syz
[ 1561.654587][   T27] usb 6-1: config 0 descriptor??
[ 1561.664203][T11670] usb 4-1: SerialNumber: syz
[ 1561.674760][ T5751] netlink: 'syz.4.14324': attribute type 3 has an invalid length.
[ 1561.685767][T11670] usb 4-1: config 0 descriptor??
[ 1562.069918][   T27] appletouch 6-1:0.85: Failed to request geyser raw mode
[ 1562.088987][   T27] appletouch: probe of 6-1:0.85 failed with error -5
[ 1562.134571][   T27] usb 6-1: USB disconnect, device number 7
[ 1562.201308][ T5774] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1562.316808][T11670] usb 4-1: USB disconnect, device number 109
[ 1562.681976][ T5796] loop4: detected capacity change from 0 to 1024
[ 1562.889390][ T5804] bridge_slave_0: left promiscuous mode
[ 1562.942784][ T5804] vlan0: left promiscuous mode
[ 1562.970648][ T5804] veth0_macvtap: left promiscuous mode
[ 1563.020904][ T5804] bond1: left promiscuous mode
[ 1563.051722][ T5804] bridge2: left promiscuous mode
[ 1563.072499][ T5804] bond3: left promiscuous mode
[ 1563.096098][ T5804] geneve2: left promiscuous mode
[ 1563.116558][ T5804] bridge3: left promiscuous mode
[ 1563.134825][ T5804] bond4: left promiscuous mode
[ 1563.181278][   T27] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[ 1563.310087][ T5830] openvswitch: netlink: Message has 245 unknown bytes.
[ 1563.338787][ T5830] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1563.356942][ T5834] loop5: detected capacity change from 0 to 2048
[ 1563.381922][ T5834] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[ 1563.403158][ T5834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1563.420996][ T5836] loop3: detected capacity change from 0 to 16
[ 1563.470996][ T5836] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1563.536881][ T5838] loop1: detected capacity change from 0 to 8
[ 1563.544141][ T5838] MTD: Attempt to mount non-MTD device "/dev/loop1"
[ 1563.547067][ T5836] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1563.588870][ T5836] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1563.650789][ T5838] cramfs: Error -3 while decompressing!
[ 1563.657043][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[ 1563.681996][ T3862] udevd[3862]: incorrect cramfs checksum on /dev/loop1
[ 1563.689822][ T5838] cramfs: ffffffff973f42f8(16)->ffff88805300e000(4096)
[ 1563.718627][ T5838] cramfs: Error -3 while decompressing!
[ 1563.778110][ T5838] cramfs: ffffffff973f42f8(16)->ffff88805300e000(4096)
[ 1563.786467][   T28] audit: type=1800 audit(2000000058.140:354): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14349" name="file0" dev="loop1" ino=244 res=0 errno=0
[ 1563.840424][ T3550] udevd[3550]: incorrect cramfs checksum on /dev/loop1
[ 1563.915843][ T3546] udevd[3546]: incorrect cramfs checksum on /dev/loop1
[ 1564.020263][   T27] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[ 1564.849871][ T1088] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1564.990649][ T5865] loop5: detected capacity change from 0 to 16
[ 1565.020419][ T5865] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1565.136279][ T5850] loop1: detected capacity change from 0 to 32768
[ 1565.182295][ T5850] JBD2: Ignoring recovery information on journal
[ 1565.204734][ T5867] loop3: detected capacity change from 0 to 256
[ 1565.264794][ T5867] FAT-fs (loop3): Directory bread(block 1285) failed
[ 1565.280342][ T5850] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[ 1565.335480][ T5852] loop4: detected capacity change from 0 to 32768
[ 1565.353007][ T5867] FAT-fs (loop3): Directory bread(block 1286) failed
[ 1565.360060][ T5867] FAT-fs (loop3): Directory bread(block 1287) failed
[ 1565.400879][ T5867] FAT-fs (loop3): Directory bread(block 1288) failed
[ 1565.441945][ T5867] FAT-fs (loop3): Directory bread(block 1285) failed
[ 1565.455931][ T5867] FAT-fs (loop3): Directory bread(block 1286) failed
[ 1565.474129][ T5867] FAT-fs (loop3): Directory bread(block 1287) failed
[ 1565.474224][ T5852] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1565.490096][ T5867] FAT-fs (loop3): Directory bread(block 1288) failed
[ 1565.502057][ T5867] FAT-fs (loop3): FAT read failed (blocknr 1281)
[ 1565.606298][ T5770] ocfs2: Unmounting device (7,1) on (node local)
[ 1565.687787][ T5852] XFS (loop4): Ending clean mount
[ 1565.720267][ T5852] XFS (loop4): Quotacheck needed: Please wait.
[ 1565.847195][ T5886] netlink: 'syz.1.14364': attribute type 13 has an invalid length.
[ 1565.896385][ T5852] XFS (loop4): Quotacheck: Done.
[ 1566.045082][ T5889] netlink: 'syz.5.14368': attribute type 1 has an invalid length.
[ 1566.114888][ T5891] x_tables: duplicate underflow at hook 4
[ 1566.186000][T26898] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1566.335398][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14373'.
[ 1566.824101][ T5909] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14379'.
[ 1566.844591][ T5909] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14379'.
[ 1566.958090][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14382'.
[ 1567.892024][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14395'.
[ 1568.065244][ T5954] netlink: 7 bytes leftover after parsing attributes in process `syz.4.14398'.
[ 1568.082162][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14398'.
[ 1568.249064][   T27] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1568.408340][ T5964] loop4: detected capacity change from 0 to 64
[ 1568.448690][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1568.455262][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1568.464412][   T27] usb 6-1: too many configurations: 25, using maximum allowed: 8
[ 1568.545625][   T27] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[ 1568.551928][ T5966] loop1: detected capacity change from 0 to 4096
[ 1568.581988][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1568.601144][   T27] usb 6-1: config 0 descriptor??
[ 1568.617982][ T5970] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1568.621042][   T27] pwc: Creative Labs Webcam Pro Ex detected.
[ 1568.670377][   T27] pwc: Warning: more than 1 configuration available.
[ 1568.755347][ T5966] NILFS (loop1): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed
[ 1568.862334][   T27] pwc: Failed to set LED on/off time (-71)
[ 1568.880945][   T27] pwc: send_video_command error -71
[ 1568.899053][   T27] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1568.928288][   T27] Philips webcam: probe of 6-1:0.0 failed with error -71
[ 1568.977832][   T27] usb 6-1: USB disconnect, device number 8
[ 1569.598772][ T5971] loop3: detected capacity change from 0 to 32768
[ 1569.613403][ T5991] netlink: 'syz.1.14416': attribute type 1 has an invalid length.
[ 1569.735051][ T5971] ea_get: invalid extended attribute
[ 1569.754902][ T5971] ffff88804ec9bab0: 04 00 00 00                                      ....
[ 1569.794305][ T5995] loop5: detected capacity change from 0 to 16
[ 1569.861042][ T5995] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1570.086048][ T6001] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1570.105410][ T6001] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1570.139192][ T6001] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1570.212152][ T1080] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1570.274158][T24595] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[ 1570.420376][ T6009] loop1: detected capacity change from 0 to 1024
[ 1570.456961][ T6009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1570.483124][T24595] usb 5-1: config 8 has an invalid interface number: 223 but max is 0
[ 1570.486017][ T6009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1570.506265][T24595] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1570.526509][T24595] usb 5-1: config 8 has no interface number 0
[ 1570.532831][T24595] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 1570.544616][T24595] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1570.564088][T24595] usb 5-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d
[ 1570.583348][T24595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1570.592724][T24595] usb 5-1: Product: syz
[ 1570.597207][T24595] usb 5-1: Manufacturer: syz
[ 1570.603510][T24595] usb 5-1: SerialNumber: syz
[ 1570.830930][T24595] usb 5-1: USB disconnect, device number 26
[ 1570.873646][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1571.088724][ T6030] loop3: detected capacity change from 0 to 1024
[ 1571.200025][ T6030] hfsplus: invalid extended attribute record
[ 1571.340015][ T1080] hfsplus: b-tree write err: -5, ino 4
[ 1572.483866][ T6075] netlink: 14 bytes leftover after parsing attributes in process `syz.5.14456'.
[ 1572.957463][ T6089] loop3: detected capacity change from 0 to 4096
[ 1573.126876][ T5833] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1573.341172][ T5833] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[ 1573.359403][ T5833] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1573.398866][ T5833] usb 6-1: config 0 has no interface number 0
[ 1573.428183][ T5833] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[ 1573.439368][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1573.457739][ T5833] usb 6-1: Product: syz
[ 1573.465975][ T5833] usb 6-1: Manufacturer: syz
[ 1573.475148][ T5833] usb 6-1: SerialNumber: syz
[ 1573.495120][ T5833] usb 6-1: config 0 descriptor??
[ 1573.552258][ T6107] loop3: detected capacity change from 0 to 2048
[ 1573.723172][ T6107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 1573.881412][ T6107] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #12: comm syz.3.14472: corrupted in-inode xattr: e_value size too large
[ 1573.909176][ T5833] usb 6-1: Found UVC 0.00 device syz (046d:0823)
[ 1573.917104][ T5833] usb 6-1: No valid video chain found.
[ 1573.933190][ T5833] usb 6-1: USB disconnect, device number 9
[ 1574.064332][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[ 1574.831213][ T6147] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14489'.
[ 1574.852136][ T6149] loop3: detected capacity change from 0 to 256
[ 1574.855928][ T6144] loop1: detected capacity change from 0 to 4096
[ 1574.921741][ T6150] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1574.978330][ T6149] FAT-fs (loop3): Directory bread(block 64) failed
[ 1575.006124][ T3467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1575.019635][ T6149] FAT-fs (loop3): Directory bread(block 65) failed
[ 1575.026528][ T6149] FAT-fs (loop3): Directory bread(block 66) failed
[ 1575.040760][ T6144] NILFS error (device loop1): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[ 1575.060031][ T6152] loop4: detected capacity change from 0 to 256
[ 1575.083752][ T6149] FAT-fs (loop3): Directory bread(block 67) failed
[ 1575.096330][ T6144] Remounting filesystem read-only
[ 1575.102007][ T6149] FAT-fs (loop3): Directory bread(block 68) failed
[ 1575.109037][ T6149] FAT-fs (loop3): Directory bread(block 69) failed
[ 1575.124065][ T6149] FAT-fs (loop3): Directory bread(block 70) failed
[ 1575.131196][ T6149] FAT-fs (loop3): Directory bread(block 71) failed
[ 1575.137945][ T6149] FAT-fs (loop3): Directory bread(block 72) failed
[ 1575.181653][ T6149] FAT-fs (loop3): Directory bread(block 73) failed
[ 1575.186254][ T6152] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1575.341776][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14493'.
[ 1575.605995][ T6162] loop5: detected capacity change from 0 to 512
[ 1575.648364][ T6162] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[ 1575.686107][ T6162] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1575.930057][T27183] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[ 1576.214360][ T6182] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[ 1576.585028][ T6192] loop1: detected capacity change from 0 to 2048
[ 1576.653478][ T6199] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1576.742362][ T6192] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1
[ 1576.850174][ T6192] Remounting filesystem read-only
[ 1577.583761][ T6228] loop3: detected capacity change from 0 to 64
[ 1577.963573][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[ 1578.113571][ T6238] binder: 6237:6238 ioctl c00c6211 ffffffffffffffff returned -14
[ 1578.711012][ T6252] xt_CONNSECMARK: invalid mode: 0
[ 1579.048958][ T6230] loop5: detected capacity change from 0 to 40427
[ 1579.076901][ T6230] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288)
[ 1579.111901][ T6230] F2FS-fs (loop5): invalid crc value
[ 1579.137508][ T6230] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1579.324995][ T6230] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1579.444506][   T28] audit: type=1326 audit(2000000074.931:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.1.14546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1579.512776][ T6230] F2FS-fs (loop5): Try to recover all the superblocks, ret: 0
[ 1579.563286][   T28] audit: type=1326 audit(2000000074.931:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.1.14546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1579.663234][   T28] audit: type=1326 audit(2000000074.974:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.1.14546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1579.787096][   T28] audit: type=1326 audit(2000000074.974:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.1.14546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1579.860499][   T28] audit: type=1326 audit(2000000074.974:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.1.14546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d079aeb9 code=0x7ffc0000
[ 1579.890333][ T6281] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1580.361252][ T3791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1580.593206][ T6303] netlink: 136 bytes leftover after parsing attributes in process `syz.1.14563'.
[ 1580.629210][   T23] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1580.672870][ T6301] loop4: detected capacity change from 0 to 4096
[ 1580.695651][ T6301] ntfs3: loop4: ino=3, Correct links count -> 2.
[ 1580.834213][   T23] usb 4-1: Using ep0 maxpacket: 8
[ 1580.847589][   T23] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[ 1580.865870][   T23] usb 4-1: config 0 has no interface number 0
[ 1580.883600][   T23] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1580.895073][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1580.903909][   T23] usb 4-1: Product: syz
[ 1580.908217][   T23] usb 4-1: Manufacturer: syz
[ 1580.932892][   T23] usb 4-1: SerialNumber: syz
[ 1580.965887][   T23] usb 4-1: config 0 descriptor??
[ 1581.031221][   T27] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1581.057330][ T6313] loop1: detected capacity change from 0 to 1024
[ 1581.132673][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14567'.
[ 1581.249070][   T23] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[ 1581.256475][   T27] usb 6-1: Using ep0 maxpacket: 32
[ 1581.279151][   T27] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1581.291278][   T23] usb 4-1: No valid video chain found.
[ 1581.299277][   T27] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1581.327354][   T23] usb 4-1: USB disconnect, device number 110
[ 1581.366395][   T27] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[ 1581.404665][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1581.420514][   T27] usb 6-1: Product: syz
[ 1581.438215][   T27] usb 6-1: Manufacturer: syz
[ 1581.447297][   T27] usb 6-1: SerialNumber: syz
[ 1581.565074][ T3558] Bluetooth: hci2: unexpected event for opcode 0x1005
[ 1581.673559][   T27] usb 6-1: Not enough endpoints found in device, aborting!
[ 1581.748871][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1581.934170][   T27] usb 6-1: USB disconnect, device number 10
[ 1581.936727][ T6331] binder: 6330:6331 ioctl c018620c 0 returned -14
[ 1582.966186][ T6359] loop4: detected capacity change from 0 to 4096
[ 1583.010842][ T6359] ntfs3: loop4: ino=3, Correct links count -> 2.
[ 1583.016738][ T6361] netlink: 'syz.5.14591': attribute type 3 has an invalid length.
[ 1583.130823][ T6359] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[ 1583.449246][ T6369] x_tables: unsorted underflow at hook 2
[ 1583.594305][ T6373] QAT: failed to copy from user cfg_data.
[ 1583.675875][ T6375] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744071562067969)
[ 1583.705201][ T6375] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[ 1584.096777][ T6335] loop3: detected capacity change from 0 to 65536
[ 1584.151426][ T6335] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1584.261625][ T6372] loop4: detected capacity change from 0 to 32768
[ 1584.345372][ T6335] XFS (loop3): Ending clean mount
[ 1584.347165][ T6395] loop1: detected capacity change from 0 to 64
[ 1584.380279][ T6335] XFS (loop3): Quotacheck needed: Please wait.
[ 1584.579336][ T6335] XFS (loop3): Quotacheck: Done.
[ 1584.789253][ T5771] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1585.227829][ T6407] loop5: detected capacity change from 0 to 4096
[ 1585.254786][ T6407] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[ 1586.786044][ T6462] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14632'.
[ 1587.159772][ T6469] loop3: detected capacity change from 0 to 4096
[ 1587.169734][ T6469] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 1587.275838][T11670] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1587.352794][ T6469] ntfs3: loop3: failed to convert "c46c" to cp936
[ 1587.464206][T11670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1587.517447][T11670] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 1587.536376][T11670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1587.548973][T11670] usb 5-1: config 0 descriptor??
[ 1587.558580][T11670] smsusb:smsusb_probe: board id=8, interface number 0
[ 1587.573533][T11670] smsusb:smsusb_probe: Device initialized with return code -19
[ 1587.729170][ T6489] bridge1: entered promiscuous mode
[ 1587.750515][ T6489] bridge1: entered allmulticast mode
[ 1587.803615][T11670] usb 5-1: USB disconnect, device number 27
[ 1588.224492][ T6509] netlink: 'syz.1.14655': attribute type 1 has an invalid length.
[ 1588.380087][ T6511] loop5: detected capacity change from 0 to 4096
[ 1588.430626][ T6511] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1588.448212][ T6511] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1588.486491][ T6511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1588.500918][ T6517] usb usb8: usbfs: process 6517 (syz.4.14659) did not claim interface 0 before use
[ 1588.604370][ T3557] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1588.677007][ T6524] loop4: detected capacity change from 0 to 16
[ 1588.724013][ T6524] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1589.188445][ T6535] loop3: detected capacity change from 0 to 4096
[ 1589.219915][ T6535] ntfs3: loop3: ino=3, Correct links count -> 2.
[ 1589.299536][ T3467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1589.320471][ T6540] loop5: detected capacity change from 0 to 128
[ 1589.323975][ T6535] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1589.411164][ T6540] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1589.474429][ T6540] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1589.640079][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14672'.
[ 1589.649833][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14672'.
[ 1589.659482][ T6540] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 9 (only 1 groups)
[ 1589.813483][ T3557] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1589.900235][ T6552] netlink: 'syz.1.14676': attribute type 2 has an invalid length.
[ 1590.102661][ T6558] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1590.146495][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14679'.
[ 1590.178265][ T6560] netlink: 660 bytes leftover after parsing attributes in process `syz.1.14679'.
[ 1590.314095][ T6564] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14681'.
[ 1590.891760][ T6584] netlink: 'syz.5.14691': attribute type 3 has an invalid length.
[ 1591.154255][ T6591] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14694'.
[ 1591.825235][ T6580] loop1: detected capacity change from 0 to 32768
[ 1591.903317][ T6580] JBD2: Ignoring recovery information on journal
[ 1591.978931][ T6580] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1592.350952][ T5770] ocfs2: Unmounting device (7,1) on (node local)
[ 1592.987753][ T6644] (null): rxe_set_mtu: Set mtu to 1024
[ 1593.341697][ T6631] loop5: detected capacity change from 0 to 32768
[ 1593.480134][ T6654] loop1: detected capacity change from 0 to 256
[ 1593.507159][ T6654] exfat: Deprecated parameter 'namecase'
[ 1593.525321][ T6654] exfat: Deprecated parameter 'namecase'
[ 1593.574767][ T6654] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[ 1593.697400][ T6654] exFAT-fs (loop1): invalid start cluster (4278190088)
[ 1593.812188][ T6644] infiniband !yz!: set active
[ 1593.836111][ T6644] infiniband !yz!: added team_slave_0
[ 1594.130223][ T6644] RDS/IB: !yz!: added
[ 1594.173470][ T6644] smc: adding ib device !yz! with port count 1
[ 1594.180065][ T6644] smc:    ib device !yz! port 1 has pnetid 
[ 1594.218796][T16835] Bluetooth: hci4: command 0x0406 tx timeout
[ 1594.426725][ T6652] loop3: detected capacity change from 0 to 32768
[ 1594.682827][ T3791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1595.049874][ T6684] loop1: detected capacity change from 0 to 256
[ 1595.138664][ T6684] FAT-fs (loop1): Directory bread(block 64) failed
[ 1595.155560][ T6684] FAT-fs (loop1): Directory bread(block 65) failed
[ 1595.202641][ T6684] FAT-fs (loop1): Directory bread(block 66) failed
[ 1595.221595][ T6684] FAT-fs (loop1): Directory bread(block 67) failed
[ 1595.244048][ T6684] FAT-fs (loop1): Directory bread(block 68) failed
[ 1595.271106][ T6684] FAT-fs (loop1): Directory bread(block 69) failed
[ 1595.300486][ T6684] FAT-fs (loop1): Directory bread(block 70) failed
[ 1595.307603][ T6684] FAT-fs (loop1): Directory bread(block 71) failed
[ 1595.334737][ T6684] FAT-fs (loop1): Directory bread(block 72) failed
[ 1595.364707][ T6684] FAT-fs (loop1): Directory bread(block 73) failed
[ 1595.439106][ T6692] loop5: detected capacity change from 0 to 16
[ 1595.479307][ T6692] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1595.624969][ T6694] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 1595.661729][ T6694] overlayfs: missing 'lowerdir'
[ 1595.700221][ T6696] unsupported nlmsg_type 40
[ 1596.822931][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14758'.
[ 1598.040002][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14778'.
[ 1598.148120][ T6772] loop3: detected capacity change from 0 to 256
[ 1598.183630][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14780'.
[ 1598.238238][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14780'.
[ 1598.268144][ T6774] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14780'.
[ 1598.342931][ T6772] FAT-fs (loop3): Directory bread(block 64) failed
[ 1598.375553][ T6772] FAT-fs (loop3): Directory bread(block 65) failed
[ 1598.407117][ T6772] FAT-fs (loop3): Directory bread(block 66) failed
[ 1598.440488][ T6772] FAT-fs (loop3): Directory bread(block 67) failed
[ 1598.447599][ T6772] FAT-fs (loop3): Directory bread(block 68) failed
[ 1598.478472][ T6772] FAT-fs (loop3): Directory bread(block 69) failed
[ 1598.492412][ T6772] FAT-fs (loop3): Directory bread(block 70) failed
[ 1598.509329][ T6772] FAT-fs (loop3): Directory bread(block 71) failed
[ 1598.527045][ T6784] loop5: detected capacity change from 0 to 16
[ 1598.537152][ T6772] FAT-fs (loop3): Directory bread(block 72) failed
[ 1598.570377][ T6772] FAT-fs (loop3): Directory bread(block 73) failed
[ 1598.597932][ T6784] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1599.240311][ T6804] 9p: Unknown access argument `: -22
[ 1599.507623][ T6814] (null): rxe_set_mtu: Set mtu to 1024
[ 1599.519242][ T6816] loop5: detected capacity change from 0 to 164
[ 1599.535541][ T6814] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1600.041307][ T3791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1600.562446][ T6848] overlayfs: conflicting options: userxattr,redirect_dir=on
[ 1601.134752][ T6870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14828'.
[ 1601.331725][ T6876] loop4: detected capacity change from 0 to 512
[ 1601.379958][ T6876] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.14831: inode has both inline data and extents flags
[ 1601.400595][ T6876] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.14831: couldn't read orphan inode 15 (err -117)
[ 1601.503701][ T6876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1601.526469][ T6880] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1601.617159][ T6862] loop1: detected capacity change from 0 to 32768
[ 1601.665977][ T6862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.14824 (6862)
[ 1601.705440][ T6862] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1601.732796][ T6862] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1601.746312][T26898] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1601.773988][ T6862] BTRFS info (device loop1): using free space tree
[ 1601.906595][ T6897] loop4: detected capacity change from 0 to 256
[ 1602.085102][ T6862] BTRFS info (device loop1): enabling ssd optimizations
[ 1602.112865][ T6862] BTRFS info (device loop1): auto enabling async discard
[ 1602.356133][ T5770] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1602.594789][   T28] audit: type=1400 audit(2000000099.768:360): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=6915 comm="syz.3.14843"
[ 1602.700259][   T23] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 1602.928764][   T23] usb 6-1: config 0 has an invalid interface number: 52 but max is 0
[ 1602.941443][   T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1602.976003][   T23] usb 6-1: config 0 has no interface number 0
[ 1602.988036][   T23] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[ 1603.006409][   T23] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1603.023322][   T23] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1603.067344][   T23] usb 6-1: config 0 interface 52 has no altsetting 0
[ 1603.107064][   T23] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1603.163886][   T23] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[ 1603.191566][   T23] usb 6-1: Product: syz
[ 1603.206991][   T23] usb 6-1: Manufacturer: syz
[ 1603.211724][   T23] usb 6-1: SerialNumber: syz
[ 1603.270242][   T23] usb 6-1: config 0 descriptor??
[ 1603.484507][   T23] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 1603.520696][   T23] synaptics_usb: probe of 6-1:0.52 failed with error -5
[ 1603.770416][    T8] usb 6-1: USB disconnect, device number 11
[ 1603.891538][ T6928] loop1: detected capacity change from 0 to 32768
[ 1603.899183][ T6946] tmpfs: Bad value for 'nr_inodes'
[ 1603.921624][ T6928] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[ 1604.142928][ T3546] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[ 1604.266936][ T6956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14864'.
[ 1604.810590][T27183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1605.283925][ T6995] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[ 1605.531411][ T7001] loop3: detected capacity change from 0 to 512
[ 1605.561036][ T7001] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1605.612080][ T7001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1605.645630][ T7001] ext4 filesystem being mounted at /3806/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1605.832445][ T7001] EXT4-fs error (device loop3): ext4_xattr_block_list:766: inode #15: comm syz.3.14883: corrupted xattr block 32: bad e_name length
[ 1605.930126][ T7001] EXT4-fs (loop3): Remounting filesystem read-only
[ 1605.941398][ T7014] netlink: 'syz.1.14888': attribute type 1 has an invalid length.
[ 1606.045857][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1606.376470][ T7030] ksmbd: Unknown IPC event: 10, ignore.
[ 1606.494160][ T7032] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14897'.
[ 1606.589854][ T7038] netlink: 'syz.4.14900': attribute type 1 has an invalid length.
[ 1606.624477][ T7038] netlink: 'syz.4.14900': attribute type 2 has an invalid length.
[ 1607.499770][ T7070] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1607.920715][ T7082] loop1: detected capacity change from 0 to 512
[ 1608.028729][ T7082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 1608.054234][ T7082] ext4 filesystem being mounted at /3721/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1608.229252][ T7082] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[ 1608.292357][ T7082] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1608.353439][ T7082] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.14920: Failed to acquire dquot type 0
[ 1608.369094][ T7102] loop4: detected capacity change from 0 to 512
[ 1608.442932][ T7102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1608.567947][ T7102] ext4 filesystem being mounted at /1380/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1608.668437][ T7102] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.14928: corrupted xattr block 33: e_value out of bounds
[ 1608.695525][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 1608.855042][T26898] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1608.878718][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14937'.
[ 1608.901163][ T7118] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14937'.
[ 1608.917071][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14937'.
[ 1608.976582][ T7118] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14937'.
[ 1608.991815][   T29] INFO: task syz-executor:5767 blocked for more than 143 seconds.
[ 1609.000143][   T29]       Not tainted syzkaller #0
[ 1609.010144][ T7118] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14937'.
[ 1609.056725][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1609.092583][   T29] task:syz-executor    state:D stack:20944 pid:5767  ppid:1      flags:0x00004004
[ 1609.131699][   T29] Call Trace:
[ 1609.135067][   T29]  <TASK>
[ 1609.149788][   T29]  __schedule+0x1553/0x45a0
[ 1609.168596][   T29]  ? asan.module_dtor+0x20/0x20
[ 1609.173730][   T29]  ? mark_lock+0x94/0x320
[ 1609.198846][   T29]  ? lock_chain_count+0x20/0x20
[ 1609.212170][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1609.231596][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1609.247350][   T29]  schedule+0xbd/0x170
[ 1609.263274][   T29]  io_schedule+0x80/0xd0
[ 1609.267698][   T29]  folio_wait_bit_common+0x714/0xfa0
[ 1609.277652][   T29]  ? folio_wait_bit+0x30/0x30
[ 1609.305508][   T29]  ? filemap_get_entry+0x379/0x3f0
[ 1609.317587][   T29]  ? _compound_head+0x120/0x120
[ 1609.325278][   T29]  ? find_lock_entries+0xc3e/0xfe0
[ 1609.331230][   T29]  __filemap_get_folio+0xbc/0xbb0
[ 1609.336565][   T29]  truncate_inode_pages_range+0x46b/0xfb0
[ 1609.342557][   T29]  ? mapping_evict_folio+0x510/0x510
[ 1609.348025][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1609.353206][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1609.359308][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[ 1609.364784][   T29]  evict+0x4dd/0x8d0
[ 1609.368716][   T29]  ? proc_nr_inodes+0x230/0x230
[ 1609.373726][   T29]  ? do_raw_spin_unlock+0x121/0x230
[ 1609.379198][   T29]  ? do_raw_spin_unlock+0x121/0x230
[ 1609.384768][   T29]  evict_inodes+0x606/0x6a0
[ 1609.389284][   T29]  ? clear_inode+0x150/0x150
[ 1609.396613][   T29]  generic_shutdown_super+0x97/0x2b0
[ 1609.402158][   T29]  kill_block_super+0x44/0x90
[ 1609.407039][   T29]  deactivate_locked_super+0x97/0x100
[ 1609.412721][   T29]  cleanup_mnt+0x43b/0x4d0
[ 1609.417264][   T29]  task_work_run+0x1d4/0x260
[ 1609.422095][   T29]  ? task_work_cancel+0x220/0x220
[ 1609.427547][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1609.433396][   T29]  exit_to_user_mode_loop+0xe6/0x110
[ 1609.438823][   T29]  exit_to_user_mode_prepare+0xee/0x180
[ 1609.444499][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[ 1609.450062][   T29]  do_syscall_64+0x61/0xa0
[ 1609.454696][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1609.459918][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1609.464634][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1609.470930][   T29] RIP: 0033:0x7f802779c117
[ 1609.475391][   T29] RSP: 002b:00007ffd83e982a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1609.484014][   T29] RAX: 0000000000000000 RBX: 00007f802780471f RCX: 00007f802779c117
[ 1609.492074][   T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd83e98360
[ 1609.500235][   T29] RBP: 00007ffd83e98360 R08: 00007ffd83e99360 R09: 00000000ffffffff
[ 1609.508470][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd83e993f0
[ 1609.516539][   T29] R13: 00007f802780471f R14: 000000000016d032 R15: 00007ffd83e99430
[ 1609.525159][   T29]  </TASK>
[ 1609.528449][   T29] 
[ 1609.528449][   T29] Showing all locks held in the system:
[ 1609.536940][   T29] 1 lock held by khungtaskd/29:
[ 1609.541910][   T29]  #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 1609.552117][   T29] 2 locks held by getty/5527:
[ 1609.556905][   T29]  #0: ffff88814e2700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1609.566858][   T29]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[ 1609.577174][   T29] 1 lock held by syz-executor/5767:
[ 1609.582736][   T29]  #0: ffff88807c6f20e0 (&type->s_umount_key#78){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0
[ 1609.593132][   T29] 5 locks held by kworker/u4:0/14027:
[ 1609.598824][   T29] 
[ 1609.601185][   T29] =============================================
[ 1609.601185][   T29] 
[ 1609.609894][   T29] NMI backtrace for cpu 0
[ 1609.614251][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1609.621575][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1609.632087][   T29] Call Trace:
[ 1609.635388][   T29]  <TASK>
[ 1609.638323][   T29]  dump_stack_lvl+0x18c/0x250
[ 1609.643034][   T29]  ? preempt_count_add+0x91/0x1a0
[ 1609.648152][   T29]  ? show_regs_print_info+0x20/0x20
[ 1609.653371][   T29]  ? load_image+0x400/0x400
[ 1609.657881][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[ 1609.662938][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 1609.669219][   T29]  ? _printk+0xde/0x130
[ 1609.673401][   T29]  ? load_image+0x400/0x400
[ 1609.677919][   T29]  ? load_image+0x400/0x400
[ 1609.682425][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1609.688499][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 1609.694497][   T29]  watchdog+0xf3d/0xf80
[ 1609.698663][   T29]  ? watchdog+0x1e1/0xf80
[ 1609.703014][   T29]  kthread+0x2fa/0x390
[ 1609.707211][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1609.712539][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1609.717206][   T29]  ret_from_fork+0x48/0x80
[ 1609.721685][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1609.726307][   T29]  ret_from_fork_asm+0x11/0x20
[ 1609.731159][   T29]  </TASK>
[ 1609.735020][   T29] Sending NMI from CPU 0 to CPUs 1:
[ 1609.740503][    C1] NMI backtrace for cpu 1
[ 1609.740516][    C1] CPU: 1 PID: 3467 Comm: kworker/u4:8 Not tainted syzkaller #0
[ 1609.740532][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1609.740542][    C1] Workqueue: events_unbound cfg80211_wiphy_work
[ 1609.740570][    C1] RIP: 0010:preempt_count_sub+0x53/0x160
[ 1609.740594][    C1] Code: 62 e5 cf 15 00 75 25 65 8b 05 a1 36 a7 7e 89 c1 81 e1 ff ff ff 7f 39 cf 7f 25 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 <74> 53 65 8b 05 7c 36 a7 7e f7 df 65 01 3d 73 36 a7 7e 5b 5d c3 e8
[ 1609.740607][    C1] RSP: 0018:ffffc9000cb37140 EFLAGS: 00000202
[ 1609.740620][    C1] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000
[ 1609.740631][    C1] RDX: 0000000000000000 RSI: ffffc9000cb37f30 RDI: 0000000000000001
[ 1609.740641][    C1] RBP: ffffc9000cb37f30 R08: ffff88802dae8000 R09: 0000000000000003
[ 1609.740652][    C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000cb37228
[ 1609.740662][    C1] R13: dffffc0000000000 R14: ffffc9000cb37f58 R15: ffffc9000cb37238
[ 1609.740674][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1609.740688][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1609.740699][    C1] CR2: 00007f8c9a3e4198 CR3: 000000007d893000 CR4: 00000000003506e0
[ 1609.740715][    C1] Call Trace:
[ 1609.740721][    C1]  <TASK>
[ 1609.740728][    C1]  unwind_next_frame+0x1d07/0x2970
[ 1609.740750][    C1]  ? ret_from_fork+0x48/0x80
[ 1609.740768][    C1]  ? ret_from_fork+0x48/0x80
[ 1609.740784][    C1]  ? stack_trace_save+0x100/0x100
[ 1609.740810][    C1]  arch_stack_walk+0x144/0x190
[ 1609.740828][    C1]  ? ret_from_fork_asm+0x11/0x20
[ 1609.740850][    C1]  stack_trace_save+0xaa/0x100
[ 1609.740867][    C1]  ? stack_trace_snprint+0xf0/0xf0
[ 1609.740883][    C1]  ? mark_lock+0x94/0x320
[ 1609.740901][    C1]  ? __lock_acquire+0x1347/0x7d40
[ 1609.740925][    C1]  kasan_set_track+0x4e/0x70
[ 1609.740941][    C1]  ? kasan_set_track+0x4e/0x70
[ 1609.740955][    C1]  ? __kasan_kmalloc+0x8f/0xa0
[ 1609.740971][    C1]  ? __kmalloc+0xb4/0x230
[ 1609.740988][    C1]  ? ieee802_11_parse_elems_full+0xb9/0x20c0
[ 1609.741008][    C1]  ? ieee80211_ibss_rx_queued_mgmt+0x4b5/0x2c80
[ 1609.741029][    C1]  ? ieee80211_iface_work+0x717/0xc70
[ 1609.741049][    C1]  ? cfg80211_wiphy_work+0x225/0x260
[ 1609.741068][    C1]  ? process_scheduled_works+0xa5d/0x15d0
[ 1609.741085][    C1]  ? worker_thread+0xa55/0xfc0
[ 1609.741101][    C1]  ? kthread+0x2fa/0x390
[ 1609.741115][    C1]  ? ret_from_fork+0x48/0x80
[ 1609.741151][    C1]  ? ieee802_11_parse_elems_full+0xb9/0x20c0
[ 1609.741171][    C1]  __kasan_kmalloc+0x8f/0xa0
[ 1609.741187][    C1]  ? ieee802_11_parse_elems_full+0xb9/0x20c0
[ 1609.741205][    C1]  __kmalloc+0xb4/0x230
[ 1609.741225][    C1]  ieee802_11_parse_elems_full+0xb9/0x20c0
[ 1609.741246][    C1]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1609.741261][    C1]  ? mark_lock+0x94/0x320
[ 1609.741279][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1609.741297][    C1]  ? trace_contention_end+0x39/0xe0
[ 1609.741311][    C1]  ? __mutex_lock+0x315/0xcc0
[ 1609.741332][    C1]  ? __lock_acquire+0x1347/0x7d40
[ 1609.741350][    C1]  ? ieee80211_ibss_rx_queued_mgmt+0x121/0x2c80
[ 1609.741372][    C1]  ? mutex_lock_nested+0x20/0x20
[ 1609.741393][    C1]  ? ieee80211_queue_delayed_work+0x150/0x150
[ 1609.741418][    C1]  ieee80211_ibss_rx_queued_mgmt+0x4b5/0x2c80
[ 1609.741450][    C1]  ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0
[ 1609.741475][    C1]  ? mark_lock+0x94/0x320
[ 1609.741493][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1609.741512][    C1]  ? lock_chain_count+0x20/0x20
[ 1609.741526][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1609.741545][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 1609.741563][    C1]  ? skb_dequeue+0x124/0x160
[ 1609.741581][    C1]  ieee80211_iface_work+0x717/0xc70
[ 1609.741603][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1609.741621][    C1]  cfg80211_wiphy_work+0x225/0x260
[ 1609.741644][    C1]  ? process_scheduled_works+0x96f/0x15d0
[ 1609.741662][    C1]  process_scheduled_works+0xa5d/0x15d0
[ 1609.741692][    C1]  ? assign_work+0x430/0x430
[ 1609.741712][    C1]  ? assign_work+0x3d0/0x430
[ 1609.741732][    C1]  worker_thread+0xa55/0xfc0
[ 1609.741762][    C1]  kthread+0x2fa/0x390
[ 1609.741775][    C1]  ? pr_cont_work+0x560/0x560
[ 1609.741800][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1609.741814][    C1]  ret_from_fork+0x48/0x80
[ 1609.741831][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1609.741845][    C1]  ret_from_fork_asm+0x11/0x20
[ 1609.741870][    C1]  </TASK>
[ 1609.746787][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 1609.746802][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1609.746821][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1609.746832][   T29] Call Trace:
[ 1609.746839][   T29]  <TASK>
[ 1609.746846][   T29]  dump_stack_lvl+0x18c/0x250
[ 1609.746879][   T29]  ? show_regs_print_info+0x20/0x20
[ 1609.746904][   T29]  ? load_image+0x400/0x400
[ 1609.746936][   T29]  panic+0x2dc/0x730
[ 1609.746954][   T29]  ? schedule_preempt_disabled+0x20/0x20
[ 1609.746989][   T29]  ? bpf_jit_dump+0xd0/0xd0
[ 1609.747007][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[ 1609.747033][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 1609.747065][   T29]  watchdog+0xf7c/0xf80
[ 1609.747090][   T29]  ? watchdog+0x1e1/0xf80
[ 1609.747118][   T29]  kthread+0x2fa/0x390
[ 1609.747135][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1609.747157][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1609.747175][   T29]  ret_from_fork+0x48/0x80
[ 1609.747196][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1609.747215][   T29]  ret_from_fork_asm+0x11/0x20
[ 1609.747251][   T29]  </TASK>
[ 1609.751152][   T29] Kernel Offset: disabled
[ 1610.296685][   T29] Rebooting in 86400 seconds..