last executing test programs: 6m30.691256239s ago: executing program 1 (id=339): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x3010098, &(0x7f00000000c0), 0xfb, 0x1101, &(0x7f0000000600)="$eJzs2LFqFFEUBuD/zqyK1cpNPwS0UJBgWF8ghcI2ItZ2i5WdWyn7Nvo4kso+5AFSBOyVmXE1AQfBXRHl+2DZOf/MnXOnPDcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmyU3kxw0Sd1mTZKSdN3p8jxJt83vfGyblLx4tVw/ebN4uh4fS581Kf2qoa7Hd2td1EU9ro8PTu7V9dt3r9srLUu6nF1uVrefXez1U/re7cS9W3vtBAAAAP+WLzubX3/f1AD+x/oDAAAAv7Lf0wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3dTtRZOkJF13ujxP0v3dbQEAAAA7Kmnycv6zfDwG+OFhPs3LkL9/Piaf+yKP8mFc/2C6x5Qbv71vAAAA+N+UK/P4/cy+z+V9dphZjo7G+ttfLk6SdpjMrzu73KyG3+FmNT2TAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHxlBw4EAAAAAAT5Ww9yAQAAAAAAAAAAAAAAAMBHAQAA//+hmtMh") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) 6m29.380057636s ago: executing program 1 (id=346): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c0, &(0x7f0000000c40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc4) getdents64(r0, 0x0, 0x0) 6m28.47335549s ago: executing program 1 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000344000480240001800b000100736f636b657400001400028008000240000000030800014000000010d60001800a00010071756575650000000c00028008000440000000100900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 6m28.143155209s ago: executing program 1 (id=357): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp1251'}}, {@gid}, {@part={'part', 0x3d, 0xb8}}, {@nobarrier}, {@gid}, {@gid}, {@gid}]}, 0x44, 0x70c, &(0x7f00000027c0)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 6m27.648150268s ago: executing program 1 (id=360): unshare(0x20000400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000100)={0x0, 0x16, 0x0, 0x0}}, 0x10) 6m26.93475272s ago: executing program 1 (id=365): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x4, 0x10000, 0x10000004, 0x5, 0xcc7, 0xfff, 0x0, 0x3, 0x100, 0x2, 0x1, 0x1, 0x1, 0x4, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xfffffff8]}) 6m26.471278487s ago: executing program 32 (id=365): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x4, 0x10000, 0x10000004, 0x5, 0xcc7, 0xfff, 0x0, 0x3, 0x100, 0x2, 0x1, 0x1, 0x1, 0x4, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xfffffff8]}) 5m50.411173635s ago: executing program 4 (id=629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) 5m50.145560371s ago: executing program 4 (id=631): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000", @ANYRESHEX], 0x30}}, 0x0) 5m49.745873264s ago: executing program 4 (id=633): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"06df2e76", 0x8, 0x5, 0x2, 0x0, 0x5, '\x00', "ee7e432b", "8000", "39e654a0", ["e86621d9cc668c391f77c506", "3549ffffff3bf8ffff010800", "006a9cc1f000", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, 0x8, 0x1, "1efcffffffffffff00", 0x0, 0x0, 0x0, 0x27}) 5m49.229570865s ago: executing program 4 (id=636): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@nomblk_io_submit}, {@mblk_io_submit}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 5m48.240271813s ago: executing program 4 (id=645): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) 5m47.520241355s ago: executing program 4 (id=650): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000040)=0xd77ca50315b7ef2e) 5m47.032746134s ago: executing program 33 (id=650): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000040)=0xd77ca50315b7ef2e) 5m42.638375212s ago: executing program 3 (id=697): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080003000d000000", 0x24) 5m39.176311375s ago: executing program 3 (id=714): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x3c, r1, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) 5m38.951565798s ago: executing program 3 (id=717): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="08000000010000", 0x7) 5m38.641594327s ago: executing program 3 (id=718): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@nomblk_io_submit}, {@mblk_io_submit}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 5m37.616376037s ago: executing program 3 (id=723): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000004c0)='o', 0x1}], 0x1) 5m36.999729633s ago: executing program 3 (id=728): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x33d, &(0x7f0000000140)="$eJzs3E1rG0cYwPFHL5YlubZ0KC0tFA/tpb0IW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPPQVC7jkFcjA++mZI/AV8yS255JKbLoYcYkLIhn2zXm0rihw59v8HYUcz80gzmlF4dvFu/bfbfxXzZiqvVSUYVRIQETkRSUpQfAHvGHTKEWm2Ld+MPX/8xcLS8s+ZbHZmXqnZzOK3aaXUxOSDv/+Ned0ORuUouVI/Tj87+uTos/rrxT8LpiqYqlSuKk2tlp9WtVVDV+sFs5hSas7QNVNXhZKpV9z2stueN8obGzWlldbH4xsV3TSVVqqpol5T1bKqVmpK+0MrlFQqlVLjccEF7AWd1zJ9Rq8NeDS4JJVKRguJSKyjJbc7lAEBAIChas//g3ZK31f+LxNO/m93buT/e18eVsd+3Z84sGNX6geRbvn/d0/c92rJ/6Mi0k/+f1feIv/vzIhultzufP/5P66GyUhHVaDllZ3/x73fr2Pn970pp0D+DwAAAAAAAAAAAAAAAAAAAADAh+DEshKWZSX8o/+vcQuB9xrX0lnrPyoiUXv1Ldb/OltYWpaoc+OevcbG/5u5zZx79DocioghukxJQl45+8Fjl/07j5QtKQ+NLSf+pX0MOS2ZvBSc+GlJSLI93rJmf8rOTCuXF396m1K8OT4tCfm4e3y6Nd4e/9ZmLiJff9UUn5KEPFqTshiy7uzrRvx/00r9+Eu2LT7mfggAAAAAANdASqmAd/qcbD3/DTlP93F1a3efMpLJO5eJzrg+4J5fT3U9Pw8nPg8PefIAAAAAANwQZu2fomYYeuWcQkwu7tN/Idxb50hbzch5nUNNM+x1PBHnQobIu87rXo/fakvB/0OKlqaoV9nfePz5D2y9tptrgtJDVLh98JN2hWrtfPyRSFPNrY732fEmclrjXzaKnPE9y1zneILn7ISRge3nT+/cfzG4H8j3+/4OuLjzTr+fFW3fdU5h5LL/3wEAAADw/jWSfr/mh+bmwFAGBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADADXMpj/RrKwx7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBV8SYAAP//pnL5HQ==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) 5m36.401435639s ago: executing program 34 (id=728): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x33d, &(0x7f0000000140)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) 2m39.669990161s ago: executing program 0 (id=2265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m39.301256203s ago: executing program 0 (id=2269): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x20, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x800) 2m39.136331513s ago: executing program 0 (id=2270): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x18, 0x0, @fd, 0x6, {}, 0x5, 0x15}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 2m38.915461636s ago: executing program 0 (id=2273): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f00000000c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x45b, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2m38.164301099s ago: executing program 0 (id=2283): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1, 0x0, 0x0, 0x20000041}, 0x20000800) 2m36.879780215s ago: executing program 0 (id=2295): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 2m36.416461122s ago: executing program 35 (id=2295): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 1m3.028244607s ago: executing program 2 (id=3143): setreuid(0x0, 0xee01) r0 = msgget$private(0x0, 0x274) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0x0, 0x3, 0x7, 0x3, 0xffffffffffff7cd3, 0xff, 0x2, 0x8}) 1m2.807915101s ago: executing program 2 (id=3147): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001880)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@gid={'gid', 0x3d, 0xee01}}, {@errors_remount}, {@keep_last_dots}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0xd}}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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") chdir(&(0x7f0000000100)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) 1m2.284302151s ago: executing program 2 (id=3150): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) 1m2.057640175s ago: executing program 2 (id=3154): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 1m1.80009137s ago: executing program 2 (id=3158): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@quota}]}, 0x4, 0x9764, &(0x7f0000012f40)="$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") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x80a, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp437,fmask=00000000000000000000315,errors=remount-ro,umask=00000000000000000000177,errors=remount-ro,umask=00000000000000000001775,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703933362c666d61736b3d30303030303030303030303030303030303030303030312c005e78aae2dff810901336831a8ac30acbcd22a575ef96"], 0x5, 0x1516, &(0x7f00000037c0)="$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") statfs(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000440)=""/133) 1m1.486795778s ago: executing program 2 (id=3164): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@ceph_nfs_confh={0x10, 0x2, {0x8, 0x9}}, 0x0) 1m1.11461223s ago: executing program 36 (id=3164): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@ceph_nfs_confh={0x10, 0x2, {0x8, 0x9}}, 0x0) 6.156025829s ago: executing program 5 (id=3664): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[@ANYBLOB="02020c"], 0x0, 0x0, 0x0}, 0x0) 4.127404498s ago: executing program 5 (id=3686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000001c0)) 3.777885028s ago: executing program 5 (id=3690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r1, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 3.532330353s ago: executing program 5 (id=3694): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f00000095c0)='./file1\x00', 0x4, &(0x7f0000000000), 0x1, 0x976f, &(0x7f000001c440)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000040400000000000000100000000000000020"], 0x24, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000140)='./bus\x00', 0x94a00, 0x0, 0x0, 0x0, &(0x7f0000000000)) 3.525148463s ago: executing program 8 (id=3695): syz_usb_connect(0x5, 0x27, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203110902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x6, 0x11, 0x1, &(0x7f0000000080)="d7"}, {0x5, 0x4e01, 0x36, &(0x7f00000017c0)="166e2a32055dbea94d2028f1d68b71716589b27cd2b4eb72634a3e2356e600ea1eb98c2b876db8d684337b0caa6625e6bd6712cec64f"}, {0xf, 0x810, 0x0, 0x0}], 0x3}) 2.944310857s ago: executing program 9 (id=3699): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in6=@remote, 0x0, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffb}, {0x0, 0x5, 0x0, 0x400000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 2.324044754s ago: executing program 9 (id=3700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="318300000000000000001900000018000180140002"], 0x2c}}, 0x40010) 2.128086285s ago: executing program 7 (id=3701): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000000010001", 0x7) 2.097286567s ago: executing program 9 (id=3702): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) tee(r1, r0, 0x6, 0xd) 1.863813261s ago: executing program 5 (id=3704): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@usrquota}, {@nodiscard}, {@uid}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 1.842079392s ago: executing program 8 (id=3705): capset(&(0x7f0000000740)={0x19980330}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) 1.672114752s ago: executing program 9 (id=3706): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() tkill(r0, 0x11) 1.532378791s ago: executing program 6 (id=3707): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x400010, 0x1}}]}}]}, 0x44}}, 0x0) 1.482673853s ago: executing program 8 (id=3708): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private2, @mcast2, @rand_addr=' \x01\x00', 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x6, 0x0, 0x6, 0x500, 0x4000000000000009, 0x710202}) 1.344529031s ago: executing program 9 (id=3709): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 1.344392591s ago: executing program 7 (id=3710): timer_create(0x8, &(0x7f0000000340)={0x0, 0x39, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)=0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000580), &(0x7f00000005c0)) 1.215693039s ago: executing program 6 (id=3711): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0c0400c900e4"], 0xf) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 1.123672984s ago: executing program 7 (id=3712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4, 0x1, '?'}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.004343041s ago: executing program 8 (id=3713): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x16, 0x4, &(0x7f0000000880)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.004097441s ago: executing program 9 (id=3714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7854}, [@call={0x85, 0x0, 0x0, 0x4f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000240)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 823.957002ms ago: executing program 6 (id=3715): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x5, 0x0, 0x0, 0x0}) 808.993893ms ago: executing program 7 (id=3716): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) ftruncate(r0, 0x68561538) 712.432278ms ago: executing program 8 (id=3717): syz_clone3(&(0x7f0000000100)={0x27001600, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 628.855974ms ago: executing program 6 (id=3718): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) statfs(&(0x7f0000000600)='./file0\x00', &(0x7f0000000680)=""/65) 454.274503ms ago: executing program 7 (id=3719): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000000)) 94.346085ms ago: executing program 6 (id=3720): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) write(r0, &(0x7f0000000300)="08008edf773c8000a2817f78fc16191314d6386ae1092319aff0d700e39d63e704000000d90c10250014c0c2128414acdef46c56c75f1ad8555dbb8e419e1c808197789263811d35fb6358fee1ad1fd41e6ee80ce7aa75da76f37f8f15f3f2dad9fee89f3738ecbed178710cecab073a4fe82e70b2a376140622100786e3273da503274b409acabb4fbf4e764c644d1280289d0418d5341d57dc46336fdce4eb021f", 0xa2) 93.822615ms ago: executing program 5 (id=3721): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffff4, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x20}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2}, 0x94) 93.633885ms ago: executing program 7 (id=3722): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) write(r0, &(0x7f0000000400)="d9", 0x1) 46.933998ms ago: executing program 6 (id=3723): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x7, 0x200000bb}) 0s ago: executing program 8 (id=3724): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x4008af14, &(0x7f0000002000)) kernel console output (not intermixed with test programs): want any checks? You are crazy... [ 395.494112][T11998] hpfs: hpfs_map_sector(): read error [ 395.494131][T11998] hpfs: code page support is disabled [ 395.504521][T11998] hpfs: hpfs_map_4sectors(): unaligned read [ 395.504628][T11998] hpfs: hpfs_map_4sectors(): unaligned read [ 395.504641][T11998] hpfs: filesystem error: unable to find root dir [ 395.576008][T11950] XFS (loop7): Ending clean mount [ 395.875853][ T6499] XFS (loop7): Unmounting Filesystem [ 396.117376][ T7243] kernel write not supported for file /adsp1 (pid: 7243 comm: kworker/0:19) [ 396.407749][T12028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2628'. [ 396.500272][T12033] loop5: detected capacity change from 0 to 16 [ 396.545079][T12033] erofs: (device loop5): erofs_read_inode: unsupported i_format 16 of nid 36 [ 396.791691][T12038] loop6: detected capacity change from 0 to 164 [ 396.877660][T12041] loop2: detected capacity change from 0 to 512 [ 396.933152][T12041] EXT4-fs: Ignoring removed nobh option [ 396.961589][T12041] EXT4-fs (loop2): Test dummy encryption mode enabled [ 397.102808][T12041] EXT4-fs error (device loop2): __ext4_iget:5095: inode #11: block 1: comm syz.2.2633: invalid block [ 397.151375][T12041] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2633: couldn't read orphan inode 11 (err -117) [ 397.184261][T12041] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 397.474493][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 397.634952][ T7243] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 397.807011][T12070] delete_channel: no stack [ 397.812076][T12069] delete_channel: no stack [ 397.825080][ T7243] usb 9-1: Using ep0 maxpacket: 8 [ 397.832623][ T7243] usb 9-1: unable to get BOS descriptor or descriptor too short [ 397.862164][ T7243] usb 9-1: config index 0 descriptor too short (expected 51, got 18) [ 397.905514][ T7243] usb 9-1: config 4 has an invalid interface number: 30 but max is 0 [ 397.932096][ T7243] usb 9-1: config 4 has no interface number 0 [ 397.948824][ T7243] usb 9-1: config 4 interface 30 has no altsetting 0 [ 398.009657][ T7243] usb 9-1: string descriptor 0 read error: -22 [ 398.030198][ T7243] usb 9-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 398.060177][ T7243] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.112750][ T7243] dw2102: su3000_identify_state [ 398.131176][ T7243] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 398.151472][ T7243] dw2102: su3000_power_ctrl: 1, initialized 0 [ 398.171711][ T7243] dvb-usb: bulk message failed: -22 (2/0) [ 398.235803][ T7243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 398.289115][ T7243] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 398.304042][T12056] dw2102: i2c rd: len=112 is too big! [ 398.304042][T12056] [ 398.341912][ T7243] usb 9-1: media controller created [ 398.357931][ T7243] dvb-usb: bulk message failed: -22 (6/0) [ 398.384981][ T7243] dw2102: i2c transfer failed. [ 398.397730][ T7243] dvb-usb: bulk message failed: -22 (6/0) [ 398.423983][ T7243] dw2102: i2c transfer failed. [ 398.444258][ T7243] dvb-usb: bulk message failed: -22 (6/0) [ 398.484898][ T7243] dw2102: i2c transfer failed. [ 398.489856][ T7243] dvb-usb: bulk message failed: -22 (6/0) [ 398.524923][ T7243] dw2102: i2c transfer failed. [ 398.533514][ T7243] dvb-usb: bulk message failed: -22 (6/0) [ 398.553616][ T7243] dw2102: i2c transfer failed. [ 398.568819][ T7243] dvb-usb: bulk message failed: -22 (6/0) [ 398.597863][ T7243] dw2102: i2c transfer failed. [ 398.617012][ T7243] dvb-usb: MAC address: 02:02:02:02:02:02 [ 398.667498][ T7243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.682501][T12096] loop7: detected capacity change from 0 to 1024 [ 398.741074][ T7243] dvb-usb: bulk message failed: -22 (3/0) [ 398.769635][ T7243] dw2102: command 0x0e transfer failed. [ 398.787387][T12096] hfsplus: walked past end of dir [ 398.802743][ T7243] dvb-usb: bulk message failed: -22 (3/0) [ 398.823015][ T7243] dw2102: command 0x0e transfer failed. [ 399.103107][T12072] loop2: detected capacity change from 0 to 32768 [ 399.110685][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2656'. [ 399.155046][ T7243] dvb-usb: bulk message failed: -22 (3/0) [ 399.160904][ T7243] dw2102: command 0x0e transfer failed. [ 399.186571][ T7243] dvb-usb: bulk message failed: -22 (3/0) [ 399.192389][ T7243] dw2102: command 0x0e transfer failed. [ 399.205240][ T7243] dvb-usb: bulk message failed: -22 (1/0) [ 399.211562][ T7243] dw2102: command 0x51 transfer failed. [ 399.230221][ T7243] dvb-usb: bulk message failed: -22 (5/0) [ 399.236151][ T7243] dw2102: i2c probe for address 0x68 failed. [ 399.242184][ T7243] dvb-usb: bulk message failed: -22 (5/0) [ 399.248052][ T7243] dw2102: i2c probe for address 0x69 failed. [ 399.254144][ T7243] dvb-usb: bulk message failed: -22 (5/0) [ 399.260066][ T7243] dw2102: i2c probe for address 0x6a failed. [ 399.266346][ T7243] dw2102: probing for demodulator failed. Is the external power switched on? [ 399.275229][ T7243] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 399.305989][T12072] XFS (loop2): Mounting V5 Filesystem [ 399.543407][T12072] XFS (loop2): Ending clean mount [ 399.567660][T12072] XFS (loop2): Quotacheck needed: Please wait. [ 399.705065][ T7243] rc_core: IR keymap rc-tt-1500 not found [ 399.710890][ T7243] Registered IR keymap rc-empty [ 399.743557][ T7243] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 399.788389][ T7243] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input27 [ 399.818673][ T7243] dvb-usb: schedule remote query interval to 250 msecs. [ 399.848934][ T7243] dw2102: su3000_power_ctrl: 0, initialized 1 [ 399.871986][ T7243] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 399.940388][ T7243] usb 9-1: USB disconnect, device number 2 [ 399.958249][T12072] XFS (loop2): Quotacheck: Done. [ 400.074068][ T26] audit: type=1800 audit(2000000144.720:255): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2645" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 400.114597][ T7243] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 400.130398][T12134] loop6: detected capacity change from 0 to 512 [ 400.253386][T12134] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 546, start 22000003) [ 400.283538][ T4271] XFS (loop2): Unmounting Filesystem [ 400.313830][T12134] FAT-fs (loop6): Filesystem has been set read-only [ 400.405781][T12134] FAT-fs (loop6): error, invalid access to FAT (entry 0x22000003) [ 400.445069][ T129] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 400.646767][ T129] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 400.665221][ T129] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 400.706279][ T129] usb 6-1: config 220 has no interface number 2 [ 400.712664][ T129] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 400.780881][ T129] usb 6-1: config 220 interface 0 has no altsetting 0 [ 400.798078][ T129] usb 6-1: config 220 interface 76 has no altsetting 0 [ 400.808319][ T129] usb 6-1: config 220 interface 1 has no altsetting 0 [ 400.841844][ T129] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 400.859894][T12120] loop8: detected capacity change from 0 to 40427 [ 400.884091][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.909232][T12120] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x35f7 [ 400.918707][ T129] usb 6-1: Product: syz [ 400.922925][ T129] usb 6-1: Manufacturer: syz [ 400.968866][T12120] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x3ffff [ 400.977765][ T129] usb 6-1: SerialNumber: syz [ 401.020684][T12120] F2FS-fs (loop8): invalid crc value [ 401.041967][T12120] F2FS-fs (loop8): Found nat_bits in checkpoint [ 401.232024][T12120] F2FS-fs (loop8): Start checkpoint disabled! [ 401.240270][ T129] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 401.255386][ T129] usb 6-1: No valid video chain found. [ 401.281397][T12120] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 401.292686][ T129] usb 6-1: selecting invalid altsetting 0 [ 401.370277][ T129] usb 6-1: selecting invalid altsetting 0 [ 401.388681][ T129] usbtest: probe of 6-1:220.1 failed with error -22 [ 401.425438][ T129] usb 6-1: USB disconnect, device number 13 [ 401.836157][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2675'. [ 402.005853][ T26] audit: type=1326 audit(2000000146.660:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6319aeb9 code=0x7ffc0000 [ 402.084951][ T26] audit: type=1326 audit(2000000146.680:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ffa6319aeb9 code=0x7ffc0000 [ 402.154900][ T26] audit: type=1326 audit(2000000146.680:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6319aeb9 code=0x7ffc0000 [ 402.233939][ T26] audit: type=1326 audit(2000000146.680:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6319aeb9 code=0x7ffc0000 [ 402.273593][T12179] loop5: detected capacity change from 0 to 512 [ 402.333413][ T26] audit: type=1326 audit(2000000146.700:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7ffa6319aeb9 code=0x7ffc0000 [ 402.390337][T12179] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 402.475894][T12179] EXT4-fs (loop5): 1 truncate cleaned up [ 402.481651][T12179] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 402.504224][T12187] loop6: detected capacity change from 0 to 164 [ 402.511652][ T26] audit: type=1326 audit(2000000146.700:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6319aeb9 code=0x7ffc0000 [ 402.534410][ T26] audit: type=1326 audit(2000000146.700:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6319aeb9 code=0x7ffc0000 [ 402.608453][T11920] blk_print_req_error: 25 callbacks suppressed [ 402.608472][T11920] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 402.639674][ T5289] EXT4-fs (loop5): unmounting filesystem. [ 403.136250][T12207] rtc_cmos 00:00: Alarms can be up to one day in the future [ 404.067538][T12201] loop8: detected capacity change from 0 to 32768 [ 404.225595][T12236] loop5: detected capacity change from 0 to 2048 [ 404.314672][T12236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.382064][T12244] program syz.7.2704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.796083][T12258] loop8: detected capacity change from 0 to 256 [ 404.845445][T12258] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 404.860962][T12249] loop2: detected capacity change from 0 to 4096 [ 404.925949][T12249] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 405.304478][T12249] ntfs: (device loop2): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 405.389730][T12249] ntfs: volume version 3.1. [ 405.460726][T12249] ntfs: (device loop2): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 405.485045][T12249] ntfs: (device loop2): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 405.555744][T12249] ntfs: (device loop2): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 405.578840][T12272] loop7: detected capacity change from 0 to 512 [ 405.713059][T12272] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 405.900191][T12286] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz.7.2714: Directory block failed checksum [ 406.060755][T12292] loop5: detected capacity change from 0 to 256 [ 406.242218][T12292] FAT-fs (loop5): Directory bread(block 64) failed [ 406.271080][T12292] FAT-fs (loop5): Directory bread(block 65) failed [ 406.280106][ T6499] EXT4-fs (loop7): unmounting filesystem. [ 406.325216][T12292] FAT-fs (loop5): Directory bread(block 66) failed [ 406.331891][T12292] FAT-fs (loop5): Directory bread(block 67) failed [ 406.389691][T12292] FAT-fs (loop5): Directory bread(block 68) failed [ 406.427269][T12292] FAT-fs (loop5): Directory bread(block 69) failed [ 406.434000][T12292] FAT-fs (loop5): Directory bread(block 70) failed [ 406.497872][T12262] loop6: detected capacity change from 0 to 32768 [ 406.525427][T12292] FAT-fs (loop5): Directory bread(block 71) failed [ 406.575025][T12292] FAT-fs (loop5): Directory bread(block 72) failed [ 406.581685][T12292] FAT-fs (loop5): Directory bread(block 73) failed [ 406.699213][T12262] XFS (loop6): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 406.888096][T12318] loop8: detected capacity change from 0 to 1024 [ 406.896720][T12318] EXT4-fs: Ignoring removed nobh option [ 406.915090][T12318] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 406.927527][T12262] XFS (loop6): ro->rw transition prohibited on norecovery mount [ 407.120750][ T6258] XFS (loop6): Unmounting Filesystem [ 407.132374][T12318] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 407.490052][T11087] EXT4-fs (loop8): unmounting filesystem. [ 407.780163][T12338] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.2735'. [ 407.835319][T12338] netlink: zone id is out of range [ 407.882404][T12338] netlink: zone id is out of range [ 407.903699][T12338] netlink: zone id is out of range [ 407.926219][T12338] netlink: zone id is out of range [ 407.954707][T12338] netlink: zone id is out of range [ 407.984346][T12338] netlink: zone id is out of range [ 408.020916][T12338] netlink: zone id is out of range [ 409.274435][T12390] xt_policy: too many policy elements [ 409.462625][T12398] loop7: detected capacity change from 0 to 136 [ 409.800047][T12411] ptrace attach of ""[12412] was attempted by "./syz-executor exec"[12411] [ 410.779109][T12445] loop2: detected capacity change from 0 to 64 [ 410.864559][T12444] sp0: Synchronizing with TNC [ 410.890469][T12442] [U] è [ 411.772483][T12478] device hsr0 entered promiscuous mode [ 411.826790][T12478] device macsec1 entered promiscuous mode [ 412.311586][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2792'. [ 412.359037][T12498] device erspan0 entered promiscuous mode [ 412.406728][T12498] device erspan0 left promiscuous mode [ 412.549452][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2793'. [ 412.561247][T12471] loop2: detected capacity change from 0 to 32768 [ 412.594785][T12471] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2782 (12471) [ 412.647497][T12471] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 412.677457][T12471] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 412.706304][T12471] BTRFS info (device loop2): using free space tree [ 412.754315][T12507] loop6: detected capacity change from 0 to 256 [ 412.924495][T12514] loop8: detected capacity change from 0 to 128 [ 413.124995][T12471] BTRFS info (device loop2): enabling ssd optimizations [ 413.476455][ T4271] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 414.082238][T12551] xt_time: unknown flags 0xf4 [ 414.362261][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 415.601258][T12566] loop5: detected capacity change from 0 to 32768 [ 415.767867][T12604] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2824'. [ 416.061917][T12612] loop2: detected capacity change from 0 to 256 [ 416.096409][T12612] exfat: Deprecated parameter 'namecase' [ 416.102224][T12612] exfat: Deprecated parameter 'namecase' [ 416.128951][T12612] exfat: Deprecated parameter 'namecase' [ 416.209656][T12612] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x079995a4, utbl_chksum : 0xe619d30d) [ 416.305411][ T4330] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 416.530278][ T4330] usb 9-1: Using ep0 maxpacket: 16 [ 416.537671][ T4330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.598391][ T4330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.651103][ T4330] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.695895][ T4330] usb 9-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 416.720746][ T4330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.772971][T12630] loop2: detected capacity change from 0 to 512 [ 416.778345][ T4330] usb 9-1: config 0 descriptor?? [ 416.828135][T12630] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.834654][T12630] EXT4-fs: inline encryption not supported [ 416.895025][T12630] EXT4-fs (loop2): Test dummy encryption mode enabled [ 416.913018][T12630] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 416.987400][T12630] EXT4-fs (loop2): 1 truncate cleaned up [ 416.993200][T12630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 417.242052][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 417.248556][ T4330] apple 0003:05AC:027B.0020: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.8-1/input0 [ 417.467011][ T4330] usb 9-1: USB disconnect, device number 3 [ 417.510634][T12623] loop5: detected capacity change from 0 to 40427 [ 417.533538][T12623] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 417.581155][T12623] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 417.592692][T12640] fido_id[12640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 417.620974][T12623] F2FS-fs (loop5): invalid crc value [ 417.698149][T12623] F2FS-fs (loop5): Found nat_bits in checkpoint [ 417.829092][T12623] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 417.842026][T12623] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 418.237871][T12660] loop2: detected capacity change from 0 to 512 [ 418.260944][T12660] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 418.356855][T12660] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 418.378854][T12660] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2850: Corrupt directory, running e2fsck is recommended [ 418.418113][T12660] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 418.427492][T12660] EXT4-fs error (device loop2): ext4_iget_extra_inode:4756: inode #15: comm syz.2.2850: corrupted in-inode xattr [ 418.440549][T12660] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2850: couldn't read orphan inode 15 (err -117) [ 418.456136][T12660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 418.561825][T12660] EXT4-fs error (device loop2): __ext4_remount:6644: comm syz.2.2850: Abort forced by user [ 418.594640][T12660] EXT4-fs (loop2): Remounting filesystem read-only [ 418.601753][T12660] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 418.670546][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 419.645248][ T129] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 419.820052][ T26] audit: type=1326 audit(2000000164.470:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 419.847165][ T129] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.861846][ T129] usb 9-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 419.871138][ T26] audit: type=1326 audit(2000000164.510:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 419.871228][ T26] audit: type=1326 audit(2000000164.510:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 419.893511][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.906713][T12714] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2873'. [ 419.952004][T12714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2873'. [ 419.970384][ T26] audit: type=1326 audit(2000000164.510:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 419.975323][ T129] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.993270][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.995575][T12714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2873'. [ 420.019341][ T26] audit: type=1326 audit(2000000164.510:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 420.047096][ T26] audit: type=1326 audit(2000000164.510:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 420.097300][ T26] audit: type=1326 audit(2000000164.510:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 420.124977][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'. [ 420.138474][ T129] usb 9-1: config 0 descriptor?? [ 420.564373][ T129] logitech-djreceiver 0003:046D:C71F.0021: unbalanced collection at end of report description [ 420.599137][ T129] logitech-djreceiver 0003:046D:C71F.0021: logi_dj_probe: parse failed [ 420.617066][ T129] logitech-djreceiver: probe of 0003:046D:C71F.0021 failed with error -22 [ 420.807633][ T4589] usb 9-1: USB disconnect, device number 4 [ 420.860478][T12738] fuse: Unexpected value for 'default_permissions' [ 421.168411][T12746] loop5: detected capacity change from 0 to 4096 [ 421.205507][T12746] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 421.241787][T12753] loop7: detected capacity change from 0 to 512 [ 421.345871][T12746] ntfs3: loop5: failed to convert "c46c" to iso8859-14 [ 421.415005][ T4758] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 421.610662][ T4758] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 421.643009][ T4758] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 421.713562][ T4758] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 421.754540][ T4758] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 421.809516][ T4758] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 421.860951][ T4758] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 421.878526][T12763] loop7: detected capacity change from 0 to 64 [ 421.889158][ T4758] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 421.907570][ T4758] usb 3-1: Product: syz [ 421.911911][ T4758] usb 3-1: Manufacturer: syz [ 421.957715][ T4758] cdc_wdm 3-1:1.0: skipping garbage [ 421.963013][ T4758] cdc_wdm 3-1:1.0: skipping garbage [ 422.023196][ T4758] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 422.030697][ T4758] cdc_wdm 3-1:1.0: Unknown control protocol [ 422.229536][ T4589] usb 3-1: USB disconnect, device number 13 [ 422.241090][T12770] loop7: detected capacity change from 0 to 128 [ 422.278090][T12751] loop6: detected capacity change from 0 to 32768 [ 422.312098][T12770] VFS: Found a Xenix FS (block size = 512) on device loop7 [ 422.354010][T12751] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 422.449341][ T6258] ocfs2: Unmounting device (7,6) on (node local) [ 422.485582][ T6499] sysv_free_block: trying to free block not in datazone [ 422.495919][ T6499] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 423.041008][T12765] loop5: detected capacity change from 0 to 32768 [ 423.088933][T12788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2908'. [ 423.105207][T12765] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2898 (12765) [ 423.177881][T12765] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 423.243037][T12765] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 423.295981][T12765] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 423.374867][T12765] BTRFS info (device loop5): use zstd compression, level 3 [ 423.435071][T12765] BTRFS info (device loop5): using free space tree [ 423.792421][T12765] BTRFS info (device loop5): enabling ssd optimizations [ 423.841317][T12785] loop7: detected capacity change from 0 to 32768 [ 424.018479][ T26] audit: type=1326 audit(2000000168.670:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12826 comm="syz.8.2918" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93d4b9aeb9 code=0x0 [ 424.026453][T12785] XFS (loop7): Mounting V5 Filesystem [ 424.117561][ T5289] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 424.140532][T12785] XFS (loop7): Ending clean mount [ 424.179781][T12785] XFS (loop7): Quotacheck needed: Please wait. [ 424.299523][T12785] XFS (loop7): Quotacheck: Done. [ 424.388124][ T4735] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop5 scanned by udevd (4735) [ 424.729817][ T6499] XFS (loop7): Unmounting Filesystem [ 424.969689][T12796] loop2: detected capacity change from 0 to 40427 [ 424.999812][T12796] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 425.051731][T12796] F2FS-fs (loop2): invalid crc value [ 425.122279][T12796] F2FS-fs (loop2): Found nat_bits in checkpoint [ 425.380717][T12796] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 425.733867][ T4271] syz-executor: attempt to access beyond end of device [ 425.733867][ T4271] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 426.095058][ T5679] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 426.286862][ T5679] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 426.318346][ T5679] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 426.349209][ T5679] usb 9-1: config 0 interface 0 has no altsetting 0 [ 426.374417][ T5679] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 426.420509][ T5679] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=116 [ 426.455680][ T5679] usb 9-1: Product: syz [ 426.459929][ T5679] usb 9-1: Manufacturer: syz [ 426.490393][ T5679] usb 9-1: SerialNumber: syz [ 426.502759][ T5679] usb 9-1: config 0 descriptor?? [ 426.530766][ T5679] usb 9-1: selecting invalid altsetting 0 [ 426.832050][ T5680] usb 9-1: USB disconnect, device number 5 [ 427.077606][T12897] loop6: detected capacity change from 0 to 4096 [ 427.136506][T12897] ntfs: volume version 3.1. [ 427.153821][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.620609][ T5680] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 427.638334][T12887] loop2: detected capacity change from 0 to 40427 [ 427.681382][T12887] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 427.699840][T12887] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 427.737100][T12887] F2FS-fs (loop2): invalid crc value [ 427.789034][T12887] F2FS-fs (loop2): Found nat_bits in checkpoint [ 427.835057][ T5680] usb 6-1: Using ep0 maxpacket: 8 [ 427.842715][ T5680] usb 6-1: unable to get BOS descriptor or descriptor too short [ 427.885670][ T5680] usb 6-1: config index 0 descriptor too short (expected 51, got 18) [ 427.930222][ T5680] usb 6-1: config 4 has an invalid interface number: 30 but max is 0 [ 427.981557][ T5680] usb 6-1: config 4 has no interface number 0 [ 427.992397][T12921] loop7: detected capacity change from 0 to 8 [ 428.011738][T12887] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 428.020660][ T5680] usb 6-1: config 4 interface 30 has no altsetting 0 [ 428.028293][T12887] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 428.069669][ T5680] usb 6-1: string descriptor 0 read error: -22 [ 428.079754][T12923] loop6: detected capacity change from 0 to 1024 [ 428.096098][ T5680] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 428.132606][T12925] loop8: detected capacity change from 0 to 128 [ 428.142863][ T5680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.202486][T12925] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 428.215003][ T5680] dw2102: su3000_identify_state [ 428.219936][ T5680] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 428.244963][T12925] hpfs: filesystem error: improperly stopped [ 428.251146][T12925] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 428.268119][ T5680] dw2102: su3000_power_ctrl: 1, initialized 0 [ 428.304906][ T5680] dvb-usb: bulk message failed: -22 (2/0) [ 428.350691][T12925] hpfs: You really don't want any checks? You are crazy... [ 428.378400][ T5680] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 428.402106][T12905] dvb-usb: bulk message failed: -22 (3/0) [ 428.426287][T12925] hpfs: hpfs_map_sector(): read error [ 428.431851][T12925] hpfs: code page support is disabled [ 428.436388][ T5680] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 428.469732][T12905] dw2102: i2c transfer failed. [ 428.475350][ T5680] usb 6-1: media controller created [ 428.493580][T12925] hpfs: hpfs_map_4sectors(): unaligned read [ 428.529504][T12925] hpfs: hpfs_map_4sectors(): unaligned read [ 428.533068][ T5680] dvb-usb: bulk message failed: -22 (6/0) [ 428.553413][ T5680] dw2102: i2c transfer failed. [ 428.558824][T12925] hpfs: filesystem error: unable to find root dir [ 428.573721][ T5680] dvb-usb: bulk message failed: -22 (6/0) [ 428.601966][ T5680] dw2102: i2c transfer failed. [ 428.619439][ T5680] dvb-usb: bulk message failed: -22 (6/0) [ 428.629135][T12929] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 428.646518][ T5680] dw2102: i2c transfer failed. [ 428.684866][ T5680] dvb-usb: bulk message failed: -22 (6/0) [ 428.694595][T12929] tipc: Enabled bearer , priority 10 [ 428.732728][ T5680] dw2102: i2c transfer failed. [ 428.743292][ T5680] dvb-usb: bulk message failed: -22 (6/0) [ 428.769559][ T5680] dw2102: i2c transfer failed. [ 428.783914][ T5680] dvb-usb: bulk message failed: -22 (6/0) [ 428.800518][ T5680] dw2102: i2c transfer failed. [ 428.820837][ T5680] dvb-usb: MAC address: 02:02:02:02:02:02 [ 428.903452][ T5680] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 429.044004][ T5680] dvb-usb: bulk message failed: -22 (3/0) [ 429.060171][ T5680] dw2102: command 0x0e transfer failed. [ 429.085680][ T5680] dvb-usb: bulk message failed: -22 (3/0) [ 429.104985][ T5680] dw2102: command 0x0e transfer failed. [ 429.475191][ T5680] dvb-usb: bulk message failed: -22 (3/0) [ 429.481026][ T5680] dw2102: command 0x0e transfer failed. [ 429.504934][ T5680] dvb-usb: bulk message failed: -22 (3/0) [ 429.523690][ T5680] dw2102: command 0x0e transfer failed. [ 429.555334][ T5680] dvb-usb: bulk message failed: -22 (1/0) [ 429.561153][ T5680] dw2102: command 0x51 transfer failed. [ 429.587407][ T5680] dvb-usb: bulk message failed: -22 (5/0) [ 429.607656][ T5680] dw2102: i2c probe for address 0x68 failed. [ 429.613741][ T5680] dvb-usb: bulk message failed: -22 (5/0) [ 429.680891][ T5680] dw2102: i2c probe for address 0x69 failed. [ 429.694924][ T5680] dvb-usb: bulk message failed: -22 (5/0) [ 429.714908][ T5680] dw2102: i2c probe for address 0x6a failed. [ 429.755019][ T5680] dw2102: probing for demodulator failed. Is the external power switched on? [ 429.805769][ T5680] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 430.045187][ T5680] rc_core: IR keymap rc-tt-1500 not found [ 430.051013][ T5680] Registered IR keymap rc-empty [ 430.110117][ T5680] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 430.132503][T12939] loop7: detected capacity change from 0 to 32768 [ 430.147005][ T5680] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input29 [ 430.193192][ T5680] dvb-usb: schedule remote query interval to 250 msecs. [ 430.210759][ T5680] dw2102: su3000_power_ctrl: 0, initialized 1 [ 430.225541][ T5680] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 430.241322][ T5680] usb 6-1: USB disconnect, device number 14 [ 430.270462][T12939] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 430.313295][T12941] loop8: detected capacity change from 0 to 32768 [ 430.429115][ T5680] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 430.584481][ T6499] ocfs2: Unmounting device (7,7) on (node local) [ 431.065832][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2980'. [ 431.422410][T12994] loop6: detected capacity change from 0 to 256 [ 431.527581][T12994] FAT-fs (loop6): Directory bread(block 64) failed [ 431.544471][T12994] FAT-fs (loop6): Directory bread(block 65) failed [ 431.558773][T12994] FAT-fs (loop6): Directory bread(block 66) failed [ 431.586119][T12994] FAT-fs (loop6): Directory bread(block 67) failed [ 431.608172][T12994] FAT-fs (loop6): Directory bread(block 68) failed [ 431.625317][T12994] FAT-fs (loop6): Directory bread(block 69) failed [ 431.642271][T12994] FAT-fs (loop6): Directory bread(block 70) failed [ 431.649258][T12994] FAT-fs (loop6): Directory bread(block 71) failed [ 431.665276][T12994] FAT-fs (loop6): Directory bread(block 72) failed [ 431.677429][T12994] FAT-fs (loop6): Directory bread(block 73) failed [ 431.868562][T12982] loop8: detected capacity change from 0 to 32768 [ 431.890477][T12982] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 432.228158][ T4735] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 432.466421][T13020] loop2: detected capacity change from 0 to 1024 [ 432.503218][T13020] hfsplus: invalid secondary volume header [ 432.517101][T13020] hfsplus: unable to find HFS+ superblock [ 432.585533][ T129] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 432.745617][T13024] loop8: detected capacity change from 0 to 64 [ 432.780408][ T129] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 432.802391][ T129] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 432.813779][ T129] usb 7-1: config 0 interface 0 has no altsetting 0 [ 432.823306][ T129] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 432.825179][ T4330] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 432.841979][ T129] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=116 [ 432.852452][ T129] usb 7-1: Product: syz [ 432.856780][ T129] usb 7-1: Manufacturer: syz [ 432.865217][ T129] usb 7-1: SerialNumber: syz [ 432.887158][ T129] usb 7-1: config 0 descriptor?? [ 432.915368][ T129] usb 7-1: selecting invalid altsetting 0 [ 433.088935][ T4330] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 433.098863][T13014] loop5: detected capacity change from 0 to 40427 [ 433.105107][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.113819][ T4330] usb 3-1: Product: syz [ 433.137810][ T4330] usb 3-1: Manufacturer: syz [ 433.143418][T13014] F2FS-fs (loop5): invalid crc value [ 433.157474][ T4330] usb 3-1: SerialNumber: syz [ 433.166582][ T4758] usb 7-1: USB disconnect, device number 9 [ 433.190988][T13014] F2FS-fs (loop5): Found nat_bits in checkpoint [ 433.213652][ T4330] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 433.330763][ T4330] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 433.363666][T13014] F2FS-fs (loop5): Start checkpoint disabled! [ 433.395009][T13014] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 433.565544][T13020] random: crng reseeded on system resumption [ 433.586016][ T4379] kworker/u4:7: attempt to access beyond end of device [ 433.586016][ T4379] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 433.788260][T13026] loop8: detected capacity change from 0 to 32768 [ 433.890885][T13026] JBD2: Ignoring recovery information on journal [ 434.098964][T13026] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 434.118829][ T4758] usb 3-1: USB disconnect, device number 14 [ 434.314139][T11087] ocfs2: Unmounting device (7,8) on (node local) [ 434.395940][ T4330] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 434.410159][ T4330] ath9k_htc: Failed to initialize the device [ 434.447271][ T4758] usb 3-1: ath9k_htc: USB layer deinitialized [ 434.915321][ T5679] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 435.086854][T13058] device ip6gretap0 entered promiscuous mode [ 435.094064][T13058] device macsec1 entered promiscuous mode [ 435.125047][ T5679] usb 7-1: Using ep0 maxpacket: 16 [ 435.137796][T13058] device ip6gretap0 left promiscuous mode [ 435.142016][ T5679] usb 7-1: unable to get BOS descriptor or descriptor too short [ 435.176594][ T5679] usb 7-1: config 13 has an invalid interface number: 50 but max is 0 [ 435.195412][ T5679] usb 7-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 435.231512][ T5679] usb 7-1: config 13 has no interface number 0 [ 435.243938][ T5679] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 435.264757][ T5679] usb 7-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 435.294873][ T5679] usb 7-1: config 13 interface 50 has no altsetting 0 [ 435.315239][ T5679] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 435.334844][ T5679] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.342916][ T5679] usb 7-1: Product: syz [ 435.374192][ T5679] usb 7-1: Manufacturer: syz [ 435.378984][ T5679] usb 7-1: SerialNumber: syz [ 435.387898][T13044] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 435.589717][T13052] loop8: detected capacity change from 0 to 40427 [ 435.644279][T13062] loop2: detected capacity change from 0 to 4096 [ 435.651836][ T5679] usb 7-1: MIDIStreaming interface descriptor not found [ 435.677726][T13062] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 435.688234][T13052] F2FS-fs (loop8): Found nat_bits in checkpoint [ 435.729998][T13062] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 435.761199][T13062] ntfs3: loop2: Failed to load $Extend. [ 435.805490][ T5679] usb 7-1: USB disconnect, device number 10 [ 435.860952][T13052] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 435.931723][ T26] audit: type=1800 audit(2000000180.580:271): pid=13052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3016" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 436.070203][T11087] syz-executor: attempt to access beyond end of device [ 436.070203][T11087] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 436.238379][ T5547] udevd[5547]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.460238][T13076] netlink: 'syz.5.3024': attribute type 21 has an invalid length. [ 436.703261][T13082] loop5: detected capacity change from 0 to 64 [ 436.754261][T13082] syz.5.3029: attempt to access beyond end of device [ 436.754261][T13082] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 436.820385][T13082] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 436.908369][T13082] syz.5.3029: attempt to access beyond end of device [ 436.908369][T13082] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 436.960591][T13082] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 437.486051][T13106] loop2: detected capacity change from 0 to 2048 [ 437.585943][T13107] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 437.964244][T13118] loop2: detected capacity change from 0 to 1024 [ 438.196759][ T4342] hfsplus: b-tree write err: -5, ino 4 [ 438.373686][T13130] loop2: detected capacity change from 0 to 512 [ 438.492798][T13130] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 438.516459][T13130] ext4 filesystem being mounted at /638/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.791785][T13102] loop6: detected capacity change from 0 to 40427 [ 438.798832][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 438.825992][T13102] F2FS-fs (loop6): invalid crc value [ 438.861721][T13102] F2FS-fs (loop6): Found nat_bits in checkpoint [ 439.045070][ T5679] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 439.072421][T13102] F2FS-fs (loop6): Start checkpoint disabled! [ 439.134959][T13102] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 439.190467][T13150] loop2: detected capacity change from 0 to 4096 [ 439.229568][T13150] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 439.262812][ T5679] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 439.285314][T13150] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 439.294267][T13150] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 439.325009][ T5679] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 439.345406][ T5679] usb 6-1: config 0 interface 0 has no altsetting 0 [ 439.388489][T13150] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 439.404108][ T5679] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 439.434021][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=116 [ 439.463173][ T5679] usb 6-1: Product: syz [ 439.476922][ T5679] usb 6-1: Manufacturer: syz [ 439.491667][ T5679] usb 6-1: SerialNumber: syz [ 439.510025][T13150] ntfs: volume version 3.1. [ 439.524674][ T5679] usb 6-1: config 0 descriptor?? [ 439.541296][T13128] loop8: detected capacity change from 0 to 32768 [ 439.564452][ T5679] usb 6-1: selecting invalid altsetting 0 [ 439.658376][T13128] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 439.675853][ T46] kworker/u4:3: attempt to access beyond end of device [ 439.675853][ T46] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 439.699290][T13128] JBD2: Ignoring recovery information on journal [ 439.707550][T13150] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1255. You might want to try to use the mount option nls=utf8. [ 439.735187][T13150] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 439.822061][T13150] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1255. You might want to try to use the mount option nls=utf8. [ 439.848797][ T4589] usb 6-1: USB disconnect, device number 15 [ 439.934977][T13150] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 439.958688][T13128] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 440.076468][T13128] (syz.8.3048,13128,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 440.117127][T13128] (syz.8.3048,13128,1):ocfs2_group_extend:318 ERROR: status = -12 [ 440.149757][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.156336][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.353051][T11087] ocfs2: Unmounting device (7,8) on (node local) [ 441.016844][T13184] loop2: detected capacity change from 0 to 4096 [ 441.128073][T13184] ntfs: volume version 3.1. [ 441.281272][T13196] syz.8.3067 uses obsolete (PF_INET,SOCK_PACKET) [ 441.655205][T13207] loop7: detected capacity change from 0 to 512 [ 441.690942][T13205] loop2: detected capacity change from 0 to 2048 [ 441.774023][T13205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 441.827342][T13207] EXT4-fs (loop7): 1 truncate cleaned up [ 441.833072][T13207] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 442.127035][ T6499] EXT4-fs (loop7): unmounting filesystem. [ 442.876319][T13238] loop7: detected capacity change from 0 to 512 [ 442.963276][T13215] loop6: detected capacity change from 0 to 32768 [ 443.000205][T13238] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 443.065901][T13250] loop5: detected capacity change from 0 to 8 [ 443.073053][T13250] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 443.085025][T13246] EXT4-fs error (device loop7): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 443.169184][T13215] XFS (loop6): Mounting V5 Filesystem [ 443.175754][ T4378] udevd[4378]: incorrect cramfs checksum on /dev/loop5 [ 443.333060][ T6499] EXT4-fs (loop7): unmounting filesystem. [ 443.376750][T13261] netlink: 'syz.2.3089': attribute type 2 has an invalid length. [ 443.431129][T13215] XFS (loop6): Ending clean mount [ 443.448410][T13261] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3089'. [ 443.476937][T13215] XFS (loop6): Quotacheck needed: Please wait. [ 443.636134][T13215] XFS (loop6): Quotacheck: Done. [ 443.828831][ T6258] XFS (loop6): Unmounting Filesystem [ 444.735189][ T4330] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 444.957626][ T4330] usb 9-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.990111][ T4330] usb 9-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.007226][ T4330] usb 9-1: config 0 interface 0 has no altsetting 0 [ 445.014183][ T4330] usb 9-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 445.063404][ T4330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.096441][ T4330] usb 9-1: config 0 descriptor?? [ 445.313046][T13284] loop7: detected capacity change from 0 to 40427 [ 445.338902][T13284] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 445.369838][T13284] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 445.409898][T13284] F2FS-fs (loop7): invalid crc value [ 445.514055][T13284] F2FS-fs (loop7): Found nat_bits in checkpoint [ 445.519351][ T4330] a4tech 0003:09DA:000A.0022: item fetching failed at offset 0/3 [ 445.544688][ T4330] a4tech 0003:09DA:000A.0022: parse failed [ 445.564366][ T4330] a4tech: probe of 0003:09DA:000A.0022 failed with error -22 [ 445.636170][T13318] loop5: detected capacity change from 0 to 512 [ 445.668479][T13284] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 445.684914][T13284] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 445.721897][ T4330] usb 9-1: USB disconnect, device number 6 [ 445.812125][T13318] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 445.854214][T13318] ext4 filesystem being mounted at /557/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 446.060095][T13330] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 446.153561][ T5289] EXT4-fs (loop5): unmounting filesystem. [ 446.674129][T13342] loop5: detected capacity change from 0 to 256 [ 446.697575][T13342] exfat: Deprecated parameter 'utf8' [ 446.703085][T13342] exfat: Deprecated parameter 'namecase' [ 446.727005][T13342] exfat: Deprecated parameter 'utf8' [ 446.769644][T13342] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4b823b56, utbl_chksum : 0xe619d30d) [ 446.792530][T13348] loop7: detected capacity change from 0 to 512 [ 446.835660][T13348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 446.896995][T13348] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 446.925131][T13348] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.142679][ T6499] EXT4-fs (loop7): unmounting filesystem. [ 447.563831][T13371] loop8: detected capacity change from 0 to 256 [ 447.591058][T13371] FAT-fs (loop8): Directory bread(block 64) failed [ 447.615250][T13347] loop2: detected capacity change from 0 to 32768 [ 447.618921][T13371] FAT-fs (loop8): Directory bread(block 65) failed [ 447.652610][T13371] FAT-fs (loop8): Directory bread(block 66) failed [ 447.671974][T13371] FAT-fs (loop8): Directory bread(block 67) failed [ 447.695229][T13371] FAT-fs (loop8): Directory bread(block 68) failed [ 447.702050][T13371] FAT-fs (loop8): Directory bread(block 69) failed [ 447.708987][T13371] FAT-fs (loop8): Directory bread(block 70) failed [ 447.718008][T13371] FAT-fs (loop8): Directory bread(block 71) failed [ 447.728957][T13371] FAT-fs (loop8): Directory bread(block 72) failed [ 447.748825][T13347] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 447.793162][T13371] FAT-fs (loop8): Directory bread(block 73) failed [ 447.832472][T13347] (syz.2.3125,13347,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 447.835665][ T4323] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 448.072124][ T4271] (syz-executor,4271,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 448.094436][ T4323] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 448.109860][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 448.116345][ T4323] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.116378][ T4323] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 448.116408][ T4323] usb 7-1: config 0 interface 0 has no altsetting 0 [ 448.116444][ T4323] usb 7-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 448.116470][ T4323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.128699][ T4323] usb 7-1: config 0 descriptor?? [ 448.620475][ T4323] hid-alps 0003:044E:120C.0023: unbalanced collection at end of report description [ 448.652630][ T4323] hid-alps 0003:044E:120C.0023: parse failed [ 448.661174][ T4323] hid-alps: probe of 0003:044E:120C.0023 failed with error -22 [ 448.848035][T13399] loop5: detected capacity change from 0 to 8 [ 448.860936][ T4330] usb 7-1: USB disconnect, device number 11 [ 448.905883][T13399] SQUASHFS error: xz decompression failed, data probably corrupt [ 448.913921][T13399] SQUASHFS error: Failed to read block 0x108: -5 [ 448.933339][T13399] SQUASHFS error: Unable to read metadata cache entry [106] [ 448.953702][T13399] SQUASHFS error: Unable to read inode 0x11f [ 448.971241][T13401] loop2: detected capacity change from 0 to 256 [ 448.983622][T13401] exfat: Deprecated parameter 'namecase' [ 448.989058][T13403] loop8: detected capacity change from 0 to 256 [ 448.996862][T13401] exfat: Deprecated parameter 'namecase' [ 449.022522][T13403] FAT-fs (loop8): Directory bread(block 64) failed [ 449.035944][T13401] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 449.056020][T13403] FAT-fs (loop8): Directory bread(block 65) failed [ 449.081680][T13401] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 449.096998][T13403] FAT-fs (loop8): Directory bread(block 66) failed [ 449.103662][T13403] FAT-fs (loop8): Directory bread(block 67) failed [ 449.138499][T13403] FAT-fs (loop8): Directory bread(block 68) failed [ 449.162934][T13403] FAT-fs (loop8): Directory bread(block 69) failed [ 449.189368][T13403] FAT-fs (loop8): Directory bread(block 70) failed [ 449.234972][T13403] FAT-fs (loop8): Directory bread(block 71) failed [ 449.262195][T13403] FAT-fs (loop8): Directory bread(block 72) failed [ 449.284708][T13403] FAT-fs (loop8): Directory bread(block 73) failed [ 449.392507][T13407] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3150'. [ 450.232244][ T4295] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.289938][ T7243] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 450.500494][ T4295] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.505278][ T7243] usb 7-1: Using ep0 maxpacket: 16 [ 450.530974][ T7243] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 450.549711][ T7243] usb 7-1: config 0 has no interface number 0 [ 450.558737][ T7243] usb 7-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.576433][ T7243] usb 7-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.591533][ T7243] usb 7-1: config 0 interface 8 has no altsetting 0 [ 450.598766][ T7243] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 450.608498][ T7243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.630174][ T7243] usb 7-1: config 0 descriptor?? [ 450.667424][ T4295] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.792237][ T4295] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.066667][ T7243] uclogic 0003:5543:0522.0024: unknown main item tag 0x0 [ 451.073863][ T7243] uclogic 0003:5543:0522.0024: unknown main item tag 0x0 [ 451.115165][ T7243] uclogic 0003:5543:0522.0024: unknown main item tag 0x0 [ 451.164033][ T7243] uclogic 0003:5543:0522.0024: unknown main item tag 0x0 [ 451.200400][ T7243] uclogic 0003:5543:0522.0024: unknown main item tag 0x0 [ 451.218054][ T7243] uclogic 0003:5543:0522.0024: No inputs registered, leaving [ 451.264678][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.280231][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.289403][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.299185][ T7243] uclogic 0003:5543:0522.0024: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.6-1/input8 [ 451.315150][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.315176][T13447] netlink: 'syz.7.3170': attribute type 10 has an invalid length. [ 451.335220][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 451.344313][ T7243] usb 7-1: USB disconnect, device number 12 [ 451.346674][ T4269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 451.381388][T13450] loop8: detected capacity change from 0 to 256 [ 451.418955][T13450] exfat: Deprecated parameter 'namecase' [ 451.500909][T13450] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 451.540690][T13447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.600250][T13447] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 451.876014][T13455] fido_id[13455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 451.927371][T13451] netlink: 'syz.7.3170': attribute type 10 has an invalid length. [ 451.972860][T13451] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3170'. [ 452.018523][T13451] device batadv0 entered promiscuous mode [ 452.036419][T13451] bond0: (slave batadv0): Releasing backup interface [ 452.114324][T13451] bridge0: port 3(batadv0) entered blocking state [ 452.133704][T13451] bridge0: port 3(batadv0) entered disabled state [ 452.158962][T13462] tipc: Started in network mode [ 452.163979][T13462] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 452.173238][T13462] tipc: Enabled bearer , priority 18 [ 452.367754][ T7243] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 452.392549][T13470] loop7: detected capacity change from 0 to 512 [ 452.463033][T13470] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 452.479541][ T46] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 452.490110][ T46] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 452.517140][T13476] syz.8.3177 uses old SIOCAX25GETINFO [ 452.525701][T13470] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.596495][ T7243] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 452.626854][ T7243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.678414][ T7243] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 452.711372][ T7243] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 452.744979][ T7243] usb 7-1: Manufacturer: syz [ 452.762557][ T7243] usb 7-1: config 0 descriptor?? [ 452.927871][ T6499] EXT4-fs (loop7): unmounting filesystem. [ 453.225008][ T7243] rc_core: IR keymap rc-hauppauge not found [ 453.231052][ T7243] Registered IR keymap rc-empty [ 453.256123][ T7243] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 453.319641][ T7243] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input30 [ 453.368366][ T22] tipc: Node number set to 10463914 [ 453.378306][T13498] netlink: 'syz.7.3185': attribute type 5 has an invalid length. [ 453.401510][T13502] bond0: Unable to set down delay as MII monitoring is disabled [ 453.424993][ T4269] Bluetooth: hci2: command 0x0409 tx timeout [ 453.454464][T13501] rc rc0: two consecutive events of type space [ 453.662947][ T7243] usb 7-1: USB disconnect, device number 13 [ 453.694159][T13510] loop8: detected capacity change from 0 to 128 [ 453.763091][T13510] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 453.784508][T13446] chnl_net:caif_netlink_parms(): no params data found [ 454.377359][T13446] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.406203][T13446] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.414595][T13446] device bridge_slave_0 entered promiscuous mode [ 454.663072][T13446] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.680296][T13446] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.728750][T13446] device bridge_slave_1 entered promiscuous mode [ 454.814549][ T4295] device hsr_slave_0 left promiscuous mode [ 454.829777][ T4295] device hsr_slave_1 left promiscuous mode [ 454.886054][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.914760][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.972400][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.986392][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.035417][ T4295] device bridge_slave_1 left promiscuous mode [ 455.041762][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.092383][ T4295] device bridge_slave_0 left promiscuous mode [ 455.104473][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.282715][ T4295] device veth1_macvtap left promiscuous mode [ 455.338326][ T4295] device veth0_macvtap left promiscuous mode [ 455.344577][ T4295] device veth1_vlan left promiscuous mode [ 455.404987][ T4295] device veth0_vlan left promiscuous mode [ 455.506165][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 457.182678][T13589] loop7: detected capacity change from 0 to 2048 [ 457.209996][T13589] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 457.245087][T13590] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 457.585099][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 457.633010][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 457.733496][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 457.847356][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.948798][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.830590][ T4295] bond0 (unregistering): Released all slaves [ 458.992966][T13563] syz.6.3207 (13563) used obsolete PPPIOCDETACH ioctl [ 459.064307][T13446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.171040][T13446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.359709][T13446] team0: Port device team_slave_0 added [ 459.376801][T13615] loop5: detected capacity change from 0 to 1024 [ 459.387953][T13446] team0: Port device team_slave_1 added [ 459.463642][T13615] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 2: comm syz.5.3227: lblock 2 mapped to illegal pblock 2 (length 1) [ 459.546184][T13446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.553257][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.607562][T13615] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 459.634971][T13615] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 48: comm syz.5.3227: lblock 0 mapped to illegal pblock 48 (length 1) [ 459.664987][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 459.690197][T13446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.724487][T13615] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 459.754548][T13615] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.3227: Failed to acquire dquot type 0 [ 459.785600][T13446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.792734][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.826878][T13615] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 459.882243][T13615] EXT4-fs error (device loop5): ext4_evict_inode:279: inode #11: comm syz.5.3227: mark_inode_dirty error [ 459.913587][T13615] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 459.924647][T13625] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 459.932051][T13625] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 459.944867][T13446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.954611][T13615] EXT4-fs (loop5): 1 orphan inode deleted [ 459.962596][T13615] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 459.972175][ T11] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 459.996924][T13625] vhci_hcd vhci_hcd.0: Device attached [ 460.053052][ T11] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 460.090379][ T11] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 0 [ 460.215038][ T22] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 460.231911][T13446] device hsr_slave_0 entered promiscuous mode [ 460.248760][ T5289] EXT4-fs (loop5): unmounting filesystem. [ 460.286290][ T9] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 460.301485][T13446] device hsr_slave_1 entered promiscuous mode [ 460.318928][T13446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.338559][T13446] Cannot create hsr debugfs directory [ 460.354937][ T9] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 460.370994][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 460.418402][ T5289] EXT4-fs error (device loop5): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 460.454147][ T5289] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 460.500665][ T5289] EXT4-fs error (device loop5): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 460.610432][T13619] loop6: detected capacity change from 0 to 32768 [ 460.935277][T13614] loop8: detected capacity change from 0 to 40427 [ 460.958505][T13614] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 460.986349][T13614] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 461.031618][T13614] F2FS-fs (loop8): invalid crc value [ 461.049448][T13446] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 461.062862][T13614] F2FS-fs (loop8): Found nat_bits in checkpoint [ 461.081923][T13446] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 461.092132][T13446] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 461.122100][T13446] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 461.249945][T13614] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 461.257396][ T7243] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 461.272037][T13614] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 461.433415][T13446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.464574][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 461.465331][ T7243] usb 6-1: Using ep0 maxpacket: 32 [ 461.480064][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 461.489957][ T7243] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.512868][T13446] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.528667][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.536007][ T7243] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.549137][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.565597][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.572788][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.596091][ T7243] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 461.610161][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 461.644908][ T7243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.654215][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.664268][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.679752][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.687028][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.699684][ T7243] usb 6-1: config 0 descriptor?? [ 461.709336][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 461.775468][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.795974][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.838735][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.869175][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 461.890536][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.921396][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.941590][T13657] loop6: detected capacity change from 0 to 1024 [ 461.965310][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.974342][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.013336][T13446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.046292][T13446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 462.066007][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 462.076282][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.106619][T13657] hfsplus: bad catalog entry type [ 462.140219][ T7243] savu 0003:1E7D:2D5A.0025: bogus close delimiter [ 462.166083][ T7243] savu 0003:1E7D:2D5A.0025: item 0 4 2 10 parsing failed [ 462.194077][ T7243] savu 0003:1E7D:2D5A.0025: parse failed [ 462.219163][ T7243] savu: probe of 0003:1E7D:2D5A.0025 failed with error -22 [ 462.241103][ T9] hfsplus: b-tree write err: -5, ino 4 [ 462.352682][ T7243] usb 6-1: USB disconnect, device number 16 [ 462.740124][ T4589] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 462.820462][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 462.830950][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 462.868731][T13446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.925170][ T4589] usb 9-1: Using ep0 maxpacket: 32 [ 462.939293][ T4589] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.983921][ T4589] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.021305][T13626] vhci_hcd: connection reset by peer [ 463.035058][ T46] vhci_hcd: stop threads [ 463.043314][ T4589] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 463.074950][ T46] vhci_hcd: release socket [ 463.083162][ T4589] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 463.106461][ T46] vhci_hcd: disconnect device [ 463.123723][ T4589] usb 9-1: Product: syz [ 463.144042][ T4589] usb 9-1: Manufacturer: syz [ 463.174657][ T4589] hub 9-1:4.0: USB hub found [ 463.198989][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3239'. [ 463.271314][T13664] loop6: detected capacity change from 0 to 32768 [ 463.281238][T13681] device ip6gre1 entered promiscuous mode [ 463.312238][ T129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.355771][ T129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.380539][ T4589] hub 9-1:4.0: 2 ports detected [ 463.425837][ T7243] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.608612][T13664] XFS (loop6): Mounting V5 Filesystem [ 463.614083][ T4589] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 463.638807][ T4589] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 463.746174][ T4589] usb 9-1: USB disconnect, device number 7 [ 463.765108][T13702] loop5: detected capacity change from 0 to 64 [ 463.925207][ T4323] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.961839][T13664] XFS (loop6): Ending clean mount [ 463.995290][T13664] XFS (loop6): Quotacheck needed: Please wait. [ 464.294665][T13664] XFS (loop6): Quotacheck: Done. [ 464.385399][ T4589] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.434349][ T6258] XFS (loop6): Unmounting Filesystem [ 464.778247][T13724] loop7: detected capacity change from 0 to 2048 [ 464.831490][T13724] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.849200][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.872254][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.937426][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 465.011229][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.037048][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.062995][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.089906][T13446] device veth0_vlan entered promiscuous mode [ 465.136154][T13446] device veth1_vlan entered promiscuous mode [ 465.220099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 465.235426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 465.254151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 465.275634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 465.297323][T13446] device veth0_macvtap entered promiscuous mode [ 465.317212][T13733] device sit0 entered promiscuous mode [ 465.355310][ T22] vhci_hcd: vhci_device speed not set [ 465.368346][T13733] netlink: 'syz.7.3253': attribute type 1 has an invalid length. [ 465.395019][T13733] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3253'. [ 465.437347][T13446] device veth1_macvtap entered promiscuous mode [ 465.458899][T13714] loop5: detected capacity change from 0 to 32768 [ 465.598198][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.633697][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.660070][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.678820][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.712161][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.733567][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.752058][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.772816][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.849856][T13446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.859677][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 465.882506][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 465.901481][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.926033][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 466.007326][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.035658][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.081763][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.113314][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.182832][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.233532][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.270222][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.338087][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.419585][T13446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.446456][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 466.502176][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 466.550040][T13446] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.575570][T13446] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.584365][T13446] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.651189][T13446] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.689085][T13761] loop8: detected capacity change from 0 to 512 [ 466.702248][T13758] loop5: detected capacity change from 0 to 1024 [ 466.787336][T13761] EXT4-fs (loop8): orphan cleanup on readonly fs [ 466.901872][T13758] hfsplus: bad catalog entry type [ 466.925234][T13761] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3263: invalid indirect mapped block 28777 (level 2) [ 466.987161][T13761] EXT4-fs (loop8): 1 truncate cleaned up [ 466.992899][T13761] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 467.086777][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.115150][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.140727][T13761] EXT4-fs: Ignoring removed bh option [ 467.170620][T13761] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 467.198236][ T5435] hfsplus: b-tree write err: -5, ino 4 [ 467.218584][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 467.241874][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.256171][T13761] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 467.277352][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.345072][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 467.398744][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 467.506449][T11087] EXT4-fs (loop8): unmounting filesystem. [ 467.654946][ T4589] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 467.857793][ T4589] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.896992][ T4589] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.942851][ T4589] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 467.973728][T13788] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3271'. [ 467.985037][ T4589] usb 6-1: config 0 interface 0 has no altsetting 0 [ 468.000088][ T4589] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 468.019365][ T4589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.049845][ T4589] usb 6-1: config 0 descriptor?? [ 468.486250][ T4589] uclogic 0003:5543:0004.0026: unknown main item tag 0x0 [ 468.493409][ T4589] uclogic 0003:5543:0004.0026: unknown main item tag 0x0 [ 468.545310][ T4589] uclogic 0003:5543:0004.0026: unknown main item tag 0x0 [ 468.562703][ T4589] uclogic 0003:5543:0004.0026: unknown main item tag 0x0 [ 468.593080][ T4589] uclogic 0003:5543:0004.0026: unknown main item tag 0x0 [ 468.629420][ T4589] uclogic 0003:5543:0004.0026: No inputs registered, leaving [ 468.666300][ T4589] uclogic 0003:5543:0004.0026: hidraw0: USB HID v0.09 Device [HID 5543:0004] on usb-dummy_hcd.5-1/input0 [ 468.725115][ T4589] usb 6-1: USB disconnect, device number 17 [ 469.043205][T13814] fido_id[13814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 469.727168][T13837] loop9: detected capacity change from 0 to 512 [ 469.812210][T13837] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 469.903396][T13812] loop6: detected capacity change from 0 to 32768 [ 469.930123][T13837] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.047650][T13853] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3293'. [ 470.109181][T13837] EXT4-fs error (device loop9): ext4_group_add:1746: inode #7: comm syz.9.3288: iget: checksum invalid [ 470.151272][T13812] XFS (loop6): Mounting V5 Filesystem [ 470.244737][T13837] EXT4-fs warning (device loop9): ext4_group_add:1748: Error opening resize inode [ 470.266873][T13812] XFS (loop6): Ending clean mount [ 470.327613][T13812] XFS (loop6): Quotacheck needed: Please wait. [ 470.419807][T13867] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 470.419807][T13867] program syz.8.3297 not setting count and/or reply_len properly [ 470.466106][T13812] XFS (loop6): Quotacheck: Done. [ 470.505376][T13868] loop5: detected capacity change from 0 to 256 [ 470.556050][T13446] EXT4-fs (loop9): unmounting filesystem. [ 470.587930][T13868] FAT-fs (loop5): Directory bread(block 64) failed [ 470.641591][T13868] FAT-fs (loop5): Directory bread(block 65) failed [ 470.672078][T13868] FAT-fs (loop5): Directory bread(block 66) failed [ 470.732829][T13868] FAT-fs (loop5): Directory bread(block 67) failed [ 470.759781][T13868] FAT-fs (loop5): Directory bread(block 68) failed [ 470.803772][ T6258] XFS (loop6): Unmounting Filesystem [ 470.817227][T13868] FAT-fs (loop5): Directory bread(block 69) failed [ 470.824086][T13868] FAT-fs (loop5): Directory bread(block 70) failed [ 470.833731][T13868] FAT-fs (loop5): Directory bread(block 71) failed [ 470.892243][T13868] FAT-fs (loop5): Directory bread(block 72) failed [ 470.935915][T13868] FAT-fs (loop5): Directory bread(block 73) failed [ 471.505340][ T4269] Bluetooth: hci2: command 0x0405 tx timeout [ 471.740742][T13901] sp0: Synchronizing with TNC [ 471.754137][T13900] [U] è` [ 471.994975][T13910] loop6: detected capacity change from 0 to 512 [ 472.086166][T13910] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 472.163490][T13910] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.412476][ T6258] EXT4-fs (loop6): unmounting filesystem. [ 472.453793][T13926] nbd: must specify a device to reconfigure [ 474.253617][T13990] loop6: detected capacity change from 0 to 2048 [ 474.433754][T13990] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 474.491735][T14004] loop5: detected capacity change from 0 to 128 [ 474.508897][T14004] EXT4-fs (loop5): Test dummy encryption mode enabled [ 474.521399][T13996] loop8: detected capacity change from 0 to 4096 [ 474.565363][T13996] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 474.581180][T13996] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 4096) [ 474.612316][T14004] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 474.629649][ T6258] EXT4-fs (loop6): unmounting filesystem. [ 474.637128][T14004] ext4 filesystem being mounted at /615/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 474.722759][T14011] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 475.279981][T14004] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 475.345101][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 475.374631][T14027] loop8: detected capacity change from 0 to 512 [ 475.466010][T14027] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 475.537487][T14027] EXT4-fs (loop8): 1 truncate cleaned up [ 475.545155][T14027] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 475.608707][T14027] EXT4-fs error (device loop8): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.8.3351: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 475.678005][T14038] loop6: detected capacity change from 0 to 256 [ 475.696916][T14027] EXT4-fs error (device loop8) in ext4_delete_entry:2800: Corrupt filesystem [ 475.715429][ T5289] EXT4-fs (loop5): unmounting filesystem. [ 475.909247][T11087] EXT4-fs (loop8): unmounting filesystem. [ 476.331310][T14052] loop9: detected capacity change from 0 to 1764 [ 477.401501][T14053] loop5: detected capacity change from 0 to 32768 [ 477.431544][T14081] loop8: detected capacity change from 0 to 1024 [ 477.510726][T14047] loop6: detected capacity change from 0 to 40427 [ 477.585357][T14047] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 477.626178][T14047] F2FS-fs (loop6): invalid crc value [ 477.677440][T14047] F2FS-fs (loop6): Found nat_bits in checkpoint [ 477.770524][ T11] hfsplus: b-tree write err: -5, ino 4 [ 477.971405][T14047] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 478.359389][ T6258] syz-executor: attempt to access beyond end of device [ 478.359389][ T6258] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 478.380575][T14106] loop5: detected capacity change from 0 to 2048 [ 478.493235][T14115] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 478.610203][T14118] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 1970324836974592 [ 478.723103][T14118] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15) [ 478.793638][T14118] Remounting filesystem read-only [ 478.809249][T14118] NILFS (loop5): error -5 truncating bmap (ino=15) [ 478.826679][T14118] syz.5.3382: attempt to access beyond end of device [ 478.826679][T14118] loop5: rw=0, sector=2199023255622, nr_sectors = 2 limit=2048 [ 478.859525][T14118] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=0) [ 479.088435][ T5289] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 479.258228][T14131] loop5: detected capacity change from 0 to 2048 [ 479.313622][T14131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 479.770840][T14150] loop6: detected capacity change from 0 to 512 [ 479.900713][T14150] EXT4-fs (loop6): 1 truncate cleaned up [ 479.933153][T14150] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 480.232636][ T6258] EXT4-fs (loop6): unmounting filesystem. [ 480.422164][ T26] audit: type=1326 audit(2000000225.070:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14170 comm="syz.6.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 480.520282][ T26] audit: type=1326 audit(2000000225.090:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14170 comm="syz.6.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 480.560102][ T26] audit: type=1326 audit(2000000225.110:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14170 comm="syz.6.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 480.615145][T14173] sp0: Synchronizing with TNC [ 480.630605][ T26] audit: type=1326 audit(2000000225.110:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14170 comm="syz.6.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 480.664375][T14172] [U] è [ 480.699031][ T26] audit: type=1326 audit(2000000225.110:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14170 comm="syz.6.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 480.796411][ T26] audit: type=1326 audit(2000000225.110:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14170 comm="syz.6.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 480.888156][ T26] audit: type=1326 audit(2000000225.110:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14170 comm="syz.6.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 480.941250][ T26] audit: type=1326 audit(2000000225.110:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14170 comm="syz.6.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 481.036520][T14187] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3414'. [ 481.050569][T14184] loop8: detected capacity change from 0 to 2048 [ 481.060748][ T26] audit: type=1326 audit(2000000225.200:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14174 comm="syz.7.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f9aeb9 code=0x7ff00000 [ 481.067819][T14184] EXT4-fs: inline encryption not supported [ 481.114615][ T26] audit: type=1326 audit(2000000225.200:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14174 comm="syz.7.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f9aeb9 code=0x7ff00000 [ 481.192017][T14184] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 481.394718][T11087] EXT4-fs (loop8): unmounting filesystem. [ 481.673380][T14206] loop7: detected capacity change from 0 to 512 [ 481.697088][T14206] EXT4-fs: Conflicting test_dummy_encryption options [ 481.834684][T14210] loop8: detected capacity change from 0 to 2048 [ 481.863483][T14206] loop7: detected capacity change from 0 to 4096 [ 481.923179][T14210] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 481.995527][T14210] EXT4-fs error (device loop8): ext4_search_dir:1549: inode #12: block 9: comm syz.8.3424: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 482.019941][T14206] EXT4-fs (loop7): Test dummy encryption mode enabled [ 482.062846][T14206] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 482.127653][T14206] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 482.275854][T11087] EXT4-fs (loop8): unmounting filesystem. [ 482.386786][ T6499] EXT4-fs (loop7): unmounting filesystem. [ 482.679561][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3434'. [ 482.716969][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3434'. [ 482.775131][T14234] netlink: 'syz.9.3434': attribute type 6 has an invalid length. [ 483.101243][T14254] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 483.101243][T14254] The task syz.6.3441 (14254) triggered the difference, watch for misbehavior. [ 483.184886][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 483.233501][T14259] loop9: detected capacity change from 0 to 128 [ 483.244027][T14259] EXT4-fs (loop9): Test dummy encryption mode enabled [ 483.265015][T14259] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 483.274094][T14259] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 483.364468][T14267] loop7: detected capacity change from 0 to 256 [ 483.498784][T13446] EXT4-fs (loop9): unmounting filesystem. [ 484.116176][T14280] loop7: detected capacity change from 0 to 8192 [ 484.162143][T14280] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 484.191892][T14280] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 484.225970][T14280] REISERFS (device loop7): using ordered data mode [ 484.232551][T14280] reiserfs: using flush barriers [ 484.323380][T14280] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 484.353143][T14280] REISERFS (device loop7): checking transaction log (loop7) [ 484.389576][T14280] REISERFS (device loop7): Using r5 hash to sort names [ 484.409223][T14280] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 484.470794][T14280] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 484.627359][T14255] loop5: detected capacity change from 0 to 40427 [ 484.680392][T14277] loop8: detected capacity change from 0 to 32768 [ 484.698781][T14255] F2FS-fs (loop5): invalid crc value [ 484.727398][T14255] F2FS-fs (loop5): Found nat_bits in checkpoint [ 484.902190][T14281] loop9: detected capacity change from 0 to 32768 [ 484.992479][T14277] XFS (loop8): Mounting V5 Filesystem [ 485.014120][T14255] F2FS-fs (loop5): Start checkpoint disabled! [ 485.061307][T14281] jfs_lookup: dtSearch returned -5 [ 485.094171][T14255] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 485.111815][T14277] XFS (loop8): Ending clean mount [ 485.170821][T14277] XFS (loop8): Quotacheck needed: Please wait. [ 485.268200][T14277] XFS (loop8): Quotacheck: Done. [ 485.508894][T11087] XFS (loop8): Unmounting Filesystem [ 485.594232][ T4342] kworker/u4:6: attempt to access beyond end of device [ 485.594232][ T4342] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 485.762296][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 485.762311][ T26] audit: type=1326 audit(2000000230.410:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.7.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f9aeb9 code=0x7ffc0000 [ 485.874032][ T26] audit: type=1326 audit(2000000230.410:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.7.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f9aeb9 code=0x7ffc0000 [ 486.019786][ T26] audit: type=1326 audit(2000000230.490:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.7.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0777f9aeb9 code=0x7ffc0000 [ 486.122966][ T26] audit: type=1326 audit(2000000230.550:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.7.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f9aeb9 code=0x7ffc0000 [ 486.234847][ T26] audit: type=1326 audit(2000000230.550:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.7.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f9aeb9 code=0x7ffc0000 [ 486.345417][T14321] sp0: Synchronizing with TNC [ 486.904064][T14342] netlink: 47 bytes leftover after parsing attributes in process `syz.6.3473'. [ 486.932141][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3472'. [ 487.471923][T14363] loop9: detected capacity change from 0 to 256 [ 487.532569][T14363] exfat: Deprecated parameter 'namecase' [ 487.559789][T14363] exfat: Deprecated parameter 'namecase' [ 487.624726][T14363] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 487.651314][T14336] loop7: detected capacity change from 0 to 32768 [ 487.747107][T14336] [ 487.747107][T14336] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 487.747107][T14336] [ 487.886326][T14336] read_mapping_page failed! [ 487.892845][T14336] ERROR: (device loop7): txCommit: [ 487.892845][T14336] [ 488.003258][T14374] jfs_rmdir: dtDelete returned -2 [ 488.233099][ T5435] ERROR: (device loop7): diWrite: ixpxd invalid [ 488.233099][ T5435] [ 488.269835][ T5435] ERROR: (device loop7): txCommit: [ 488.269835][ T5435] [ 488.315124][ T5435] jfs_write_inode: jfs_commit_inode failed! [ 488.340034][ T6499] [ 488.340034][ T6499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 488.340034][ T6499] [ 488.367127][ T6499] [ 488.367127][ T6499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 488.367127][ T6499] [ 488.515478][ T26] audit: type=1326 audit(2000000233.170:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14390 comm="syz.6.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 488.631290][ T26] audit: type=1326 audit(2000000233.210:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14390 comm="syz.6.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 488.728802][ T26] audit: type=1326 audit(2000000233.220:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14390 comm="syz.6.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 488.831178][ T26] audit: type=1326 audit(2000000233.230:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14390 comm="syz.6.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 488.890036][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3497'. [ 488.935164][ T26] audit: type=1326 audit(2000000233.230:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14390 comm="syz.6.3493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f7f9d19aeb9 code=0x7ffc0000 [ 488.958309][ T4380] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 488.981152][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 489.049745][T14406] loop8: detected capacity change from 0 to 2048 [ 489.121870][T14406] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 489.162812][ T4380] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 489.205537][ T4380] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.225540][T14413] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 489.278693][ T4380] usb 10-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 489.318734][ T4380] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.375602][ T4380] usb 10-1: config 0 descriptor?? [ 489.818494][ T4380] apple 0003:05AC:029F.0027: unknown main item tag 0x2 [ 489.855480][ T4380] apple 0003:05AC:029F.0027: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.9-1/input0 [ 490.046633][ T4380] usb 10-1: USB disconnect, device number 2 [ 490.193204][T14427] fido_id[14427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 490.278990][T14434] ptrace attach of "./syz-executor exec"[5289] was attempted by ""[14434] [ 490.282358][T14412] loop6: detected capacity change from 0 to 32768 [ 490.427513][T14412] XFS (loop6): Mounting V5 Filesystem [ 490.532687][T14421] loop8: detected capacity change from 0 to 40427 [ 490.560080][T14421] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x3ffff [ 490.594091][T14421] F2FS-fs (loop8): invalid crc value [ 490.609491][T14421] F2FS-fs (loop8): Found nat_bits in checkpoint [ 490.637198][T14412] XFS (loop6): Ending clean mount [ 490.704966][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.854995][T14421] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 490.905518][ T6258] XFS (loop6): Unmounting Filesystem [ 491.321315][T14466] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3517'. [ 491.485645][T14470] netlink: 'syz.8.3515': attribute type 3 has an invalid length. [ 491.535051][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3518'. [ 491.543997][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3518'. [ 491.631393][T14472] netlink: 'syz.7.3518': attribute type 14 has an invalid length. [ 491.663669][T14472] netlink: 'syz.7.3518': attribute type 11 has an invalid length. [ 491.944202][T14481] loop9: detected capacity change from 0 to 256 [ 491.999918][T14481] exfat: Deprecated parameter 'namecase' [ 492.070538][T14481] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 492.100379][T14452] loop5: detected capacity change from 0 to 32768 [ 492.466818][T14490] loop6: detected capacity change from 0 to 1764 [ 492.622449][T14491] loop8: detected capacity change from 0 to 4096 [ 492.671306][T14491] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 493.065303][T11087] ntfs3: loop8: ntfs_sync_fs r=1a failed, -22. [ 493.072983][T11087] ntfs3: loop8: ntfs_evict_inode r=1a failed, -22. [ 493.100676][T11087] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 493.225060][ T5680] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 493.466536][ T5680] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 493.497351][ T5680] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 493.544940][ T5680] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.605041][ T5680] usb 6-1: config 0 interface 0 has no altsetting 0 [ 493.637298][ T5680] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 493.691073][ T5680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.739605][ T5680] usb 6-1: config 0 descriptor?? [ 493.765627][T14507] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 494.210670][ T5680] elecom 0003:056E:010D.0028: item fetching failed at offset 0/3 [ 494.236003][ T5680] elecom: probe of 0003:056E:010D.0028 failed with error -22 [ 494.419912][ T4255] usb 6-1: USB disconnect, device number 18 [ 495.050125][T14532] loop9: detected capacity change from 0 to 40427 [ 495.183738][T14532] F2FS-fs (loop9): Found nat_bits in checkpoint [ 495.274902][ T4255] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 495.348609][T14532] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 495.495115][ T4255] usb 7-1: Using ep0 maxpacket: 32 [ 495.503721][ T4255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.544604][ T4255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.588513][ T4255] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 495.643130][ T4255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.671216][ T4255] usb 7-1: config 0 descriptor?? [ 495.699816][T13446] syz-executor: attempt to access beyond end of device [ 495.699816][T13446] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 495.990686][T14602] devtmpfs: Too few inodes for current use [ 496.123948][ T4255] logitech 0003:046D:C29C.0029: unbalanced collection at end of report description [ 496.125464][T14606] sctp: [Deprecated]: syz.8.3566 (pid 14606) Use of int in maxseg socket option. [ 496.125464][T14606] Use struct sctp_assoc_value instead [ 496.170452][ T4255] logitech 0003:046D:C29C.0029: parse failed [ 496.194976][ T4255] logitech: probe of 0003:046D:C29C.0029 failed with error -22 [ 496.202313][T14608] loop5: detected capacity change from 0 to 256 [ 496.221832][T14608] exfat: Deprecated parameter 'utf8' [ 496.243705][T14608] exfat: Deprecated parameter 'namecase' [ 496.313793][T14608] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 496.354245][ T7243] usb 7-1: USB disconnect, device number 14 [ 496.544495][T14613] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 496.566910][T14613] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 496.658757][T14613] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 496.680351][T14613] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 496.705932][T14613] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 496.712500][T14613] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 496.750423][T14613] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 496.772230][T14613] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 497.355040][ T4255] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 497.557764][ T4255] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.576940][ T4255] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.596023][ T4255] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 497.616419][ T4255] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.645033][ T4255] usb 9-1: config 0 descriptor?? [ 497.685122][ T7243] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 497.876917][ T7243] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 497.894550][ T7243] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 497.906611][ T7243] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 497.938691][ T7243] usb 7-1: config 0 interface 0 has no altsetting 0 [ 497.963679][ T7243] usb 7-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 497.973346][ T7243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.996772][ T7243] usb 7-1: config 0 descriptor?? [ 498.005844][T14648] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 498.072481][ T4255] wacom 0003:056A:0331.002A: unknown main item tag 0x0 [ 498.091718][ T4255] wacom 0003:056A:0331.002A: unknown main item tag 0x0 [ 498.107851][ T4255] wacom 0003:056A:0331.002A: unknown main item tag 0x0 [ 498.116197][ T4255] wacom 0003:056A:0331.002A: unknown main item tag 0x0 [ 498.123213][ T4255] wacom 0003:056A:0331.002A: unknown main item tag 0x0 [ 498.147496][ T4255] wacom 0003:056A:0331.002A: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.8-1/input0 [ 498.308724][ T4255] usb 9-1: USB disconnect, device number 8 [ 498.368023][T14678] tipc: Started in network mode [ 498.373101][T14678] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 498.421350][T14678] tipc: Enabled bearer , priority 10 [ 498.442416][ T7243] uclogic 0003:5543:0003.002B: unknown main item tag 0x0 [ 498.466566][ T7243] uclogic 0003:5543:0003.002B: unknown main item tag 0x0 [ 498.497477][ T7243] uclogic 0003:5543:0003.002B: unknown main item tag 0x0 [ 498.512637][ T7243] uclogic 0003:5543:0003.002B: unknown main item tag 0x0 [ 498.528961][ T7243] uclogic 0003:5543:0003.002B: unknown main item tag 0x0 [ 498.545963][T14675] fido_id[14675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 498.546972][ T7243] uclogic 0003:5543:0003.002B: unknown main item tag 0x0 [ 498.632489][ T7243] uclogic 0003:5543:0003.002B: unknown main item tag 0x0 [ 498.658381][ T7243] uclogic 0003:5543:0003.002B: unknown main item tag 0x0 [ 498.674520][ T7243] uclogic 0003:5543:0003.002B: No inputs registered, leaving [ 498.714034][ T7243] uclogic 0003:5543:0003.002B: hidraw0: USB HID v0.04 Device [HID 5543:0003] on usb-dummy_hcd.6-1/input0 [ 498.787429][ T7243] usb 7-1: USB disconnect, device number 15 [ 499.132608][T14686] fido_id[14686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 499.156704][T14698] loop7: detected capacity change from 0 to 128 [ 499.199725][T14698] EXT4-fs (loop7): Test dummy encryption mode enabled [ 499.235776][T14698] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 499.265166][T14698] ext4 filesystem being mounted at /567/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 499.534945][ T7243] tipc: Node number set to 10005162 [ 499.559200][T14706] loop8: detected capacity change from 0 to 4096 [ 499.677018][T14706] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 499.939561][T14698] EXT4-fs (loop7): re-mounted. Quota mode: none. [ 500.083032][T11087] EXT4-fs (loop8): unmounting filesystem. [ 500.158143][ T6499] EXT4-fs (loop7): unmounting filesystem. [ 500.504913][ T22] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 500.696621][ T22] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 500.734834][ T22] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 500.743786][ T22] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 500.814872][ T22] usb 7-1: config 220 has no interface number 2 [ 500.821228][ T22] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 500.902716][ T22] usb 7-1: config 220 interface 0 has no altsetting 0 [ 500.924866][ T22] usb 7-1: config 220 interface 76 has no altsetting 0 [ 500.952141][ T22] usb 7-1: config 220 interface 1 has no altsetting 0 [ 500.964614][ T22] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 501.026154][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.065069][ T22] usb 7-1: Product: syz [ 501.069313][ T22] usb 7-1: Manufacturer: syz [ 501.073957][ T22] usb 7-1: SerialNumber: syz [ 501.336869][ T22] usb 7-1: selecting invalid altsetting 0 [ 501.358041][ T22] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 501.373442][ T22] usb 7-1: No valid video chain found. [ 501.411250][ T22] usb 7-1: selecting invalid altsetting 0 [ 501.417252][ T22] usbtest: probe of 7-1:220.1 failed with error -22 [ 501.440770][ T22] usb 7-1: USB disconnect, device number 16 [ 501.583557][T14779] loop9: detected capacity change from 0 to 1024 [ 501.596811][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.603175][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.609819][ T129] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 501.749994][ T9] hfsplus: b-tree write err: -5, ino 4 [ 501.794871][ T129] usb 9-1: Using ep0 maxpacket: 32 [ 501.802352][ T129] usb 9-1: unable to get BOS descriptor or descriptor too short [ 501.831695][ T129] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 501.860768][ T129] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 501.891518][ T129] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 501.917339][ T129] usb 9-1: config 128 has no interface number 0 [ 501.931120][T14770] loop7: detected capacity change from 0 to 32768 [ 501.945254][ T129] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 501.977297][ T129] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 502.028411][ T129] usb 9-1: config 128 interface 127 has no altsetting 0 [ 502.056634][ T129] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 502.097341][ T129] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.115171][ T129] usb 9-1: Product: syz [ 502.122152][ T129] usb 9-1: Manufacturer: syz [ 502.184880][ T129] usb 9-1: SerialNumber: syz [ 502.262018][T14788] loop6: detected capacity change from 0 to 1764 [ 502.335091][T14793] loop9: detected capacity change from 0 to 512 [ 502.365583][T14793] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 502.484740][T14793] EXT4-fs (loop9): 1 truncate cleaned up [ 502.504927][T14793] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 502.595567][ T129] usb 9-1: USB disconnect, device number 9 [ 502.870900][ T4735] udevd[4735]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.934222][T13446] EXT4-fs (loop9): unmounting filesystem. [ 503.311683][T14822] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3639'. [ 503.572266][T14834] tipc: Started in network mode [ 503.588815][ T129] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 503.591880][T14834] tipc: Node identity , cluster identity 4711 [ 503.801873][ T129] usb 7-1: unable to get BOS descriptor or descriptor too short [ 503.830212][ T129] usb 7-1: config 6 has an invalid interface number: 96 but max is 0 [ 503.870643][ T129] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 503.897008][ T129] usb 7-1: config 6 has no interface number 0 [ 503.906726][T14844] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3649'. [ 503.910352][T14842] smc: net device bond0 applied user defined pnetid SYZ0 [ 503.923615][ T129] usb 7-1: config 6 interface 96 has no altsetting 0 [ 503.936902][T14844] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3649'. [ 503.948079][ T129] usb 7-1: string descriptor 0 read error: -22 [ 503.963211][ T129] usb 7-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=4f.2b [ 503.989439][T14845] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3649'. [ 504.004874][ T129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.609786][ T129] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 504.697407][ T129] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 504.740031][ T129] dib0700: firmware download failed at 28 with -71 [ 504.785613][ T129] usb 7-1: USB disconnect, device number 17 [ 504.857299][T14870] loop5: detected capacity change from 0 to 512 [ 504.882850][T14872] loop9: detected capacity change from 0 to 256 [ 504.900950][T14870] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 504.927359][T14872] exfat: Deprecated parameter 'utf8' [ 504.968790][T14872] exfat: Deprecated parameter 'namecase' [ 505.051675][T14872] exfat: Deprecated parameter 'namecase' [ 505.052938][T14870] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3658: invalid indirect mapped block 4294967295 (level 1) [ 505.060323][T14872] exfat: Deprecated parameter 'utf8' [ 505.093167][T14872] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 505.135263][T14870] EXT4-fs (loop5): Remounting filesystem read-only [ 505.147836][T14870] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3658: invalid indirect mapped block 4294967295 (level 1) [ 505.163660][T14870] EXT4-fs (loop5): Remounting filesystem read-only [ 505.176144][T14870] EXT4-fs (loop5): 2 truncates cleaned up [ 505.181958][T14870] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 505.441824][ T5289] EXT4-fs (loop5): unmounting filesystem. [ 505.533563][T14887] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 505.533563][T14887] program syz.8.3662 not setting count and/or reply_len properly [ 505.592180][T14889] device ip6tnl1 entered promiscuous mode [ 505.673257][T14893] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3665'. [ 505.914997][ T22] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 505.993507][T14905] tipc: Started in network mode [ 506.019240][T14905] tipc: Node identity ac14140f, cluster identity 4711 [ 506.051641][T14905] tipc: New replicast peer: 255.255.255.83 [ 506.058890][T14905] tipc: Enabled bearer , priority 9 [ 506.107135][ T22] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 506.126331][ T22] usb 6-1: config 0 has no interface number 0 [ 506.132550][ T22] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 506.164228][ T22] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.195007][ T22] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 506.223729][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.254211][ T22] usb 6-1: config 0 descriptor?? [ 506.305992][ T129] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 506.494978][ T129] usb 7-1: Using ep0 maxpacket: 16 [ 506.505258][ T129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.538886][ T129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.552364][T14920] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3675'. [ 506.570411][ T129] usb 7-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 506.580318][ T129] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.607070][ T129] usb 7-1: config 0 descriptor?? [ 506.904004][ T22] uclogic 0003:28BD:0094.002C: failed retrieving string descriptor #100: -71 [ 506.925639][ T22] uclogic 0003:28BD:0094.002C: failed retrieving pen parameters: -71 [ 506.952894][ T22] uclogic 0003:28BD:0094.002C: pen probing failed: -71 [ 506.974659][ T22] uclogic 0003:28BD:0094.002C: failed probing parameters: -71 [ 507.000894][ T22] uclogic: probe of 0003:28BD:0094.002C failed with error -71 [ 507.026827][ T22] usb 6-1: USB disconnect, device number 19 [ 507.041796][ T129] nzxt-kraken2 0003:1E71:170E.002D: unbalanced delimiter at end of report description [ 507.057178][ T4380] tipc: Node number set to 2886997007 [ 507.062962][ T129] nzxt-kraken2 0003:1E71:170E.002D: hid parse failed with -22 [ 507.071782][ T129] nzxt-kraken2: probe of 0003:1E71:170E.002D failed with error -22 [ 507.172652][T14933] loop9: detected capacity change from 0 to 8192 [ 507.202341][T14933] loop9: p1 < > p3 < p5 > p4 [ 507.211557][T14933] loop9: partition table partially beyond EOD, truncated [ 507.224848][T14933] loop9: p1 start 4294967040 is beyond EOD, truncated [ 507.241027][ T129] usb 7-1: USB disconnect, device number 18 [ 507.270884][T14935] device syz_tun entered promiscuous mode [ 507.301073][T14935] device syz_tun left promiscuous mode [ 507.359316][T14937] No buffer was provided with the request [ 507.602049][ T4735] udevd[4735]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 507.615510][T11920] udevd[11920]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 507.621373][ T4378] udevd[4378]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 508.027877][T14958] loop9: detected capacity change from 0 to 1024 [ 508.485661][ T129] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 508.515016][ T4585] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 508.678048][T14962] loop5: detected capacity change from 0 to 32768 [ 508.686081][ T129] usb 9-1: too many configurations: 17, using maximum allowed: 8 [ 508.706594][ T4585] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.724429][ T4585] usb 7-1: config 0 has no interface number 0 [ 508.742555][T14966] loop7: detected capacity change from 0 to 40427 [ 508.751152][ T129] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 508.764861][ T4585] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 508.774003][ T129] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.782849][ T4585] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.791256][ T129] usb 9-1: Product: syz [ 508.795692][ T129] usb 9-1: Manufacturer: syz [ 508.800331][ T129] usb 9-1: SerialNumber: syz [ 508.805141][T14966] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 508.809958][ T4585] usb 7-1: config 0 descriptor?? [ 508.816707][T14962] XFS (loop5): Mounting V5 Filesystem [ 508.823900][ T4585] usb 7-1: selecting invalid altsetting 1 [ 508.831345][ T129] usb 9-1: config 0 descriptor?? [ 508.836668][ T4585] dvb_ttusb_budget: ttusb_init_controller: error [ 508.843741][ T4585] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 508.854464][ T129] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 508.863441][T14966] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 508.896010][ T129] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 508.906031][ T129] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 508.926210][ T129] usb 9-1: media controller created [ 508.949023][T14966] F2FS-fs (loop7): invalid crc value [ 508.962540][ T129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.981224][T14962] XFS (loop5): Ending clean mount [ 508.988514][T14981] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3699'. [ 509.043508][T14966] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 509.074413][ T129] DVB: Unable to find symbol mt352_attach() [ 509.089585][ T5680] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 [ 509.121481][ T5680] XFS (loop5): Unmount and run xfs_repair [ 509.138482][ T5680] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 509.190799][ T5680] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 509.213831][ T4585] DVB: Unable to find symbol cx22700_attach() [ 509.239005][ T5680] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 509.266604][ T129] DVB: Unable to find symbol nxt6000_attach() [ 509.272966][ T129] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 509.290304][T14966] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 509.294392][ T5680] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 509.307582][T14966] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 509.327464][ T129] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input34 [ 509.357971][ T5680] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 509.385537][ T129] dvb-usb: schedule remote query interval to 1000 msecs. [ 509.388028][ T5680] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 509.417747][ T129] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 509.454865][ T5680] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 509.471324][ T129] dvb-usb: bulk message failed: -22 (7/0) [ 509.488741][ T129] dvb-usb: bulk message failed: -22 (7/0) [ 509.504745][ T5680] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 509.514148][ T5680] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 509.526742][ T4585] DVB: Unable to find symbol tda10046_attach() [ 509.532946][ T4585] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 509.553097][ T129] usb 9-1: USB disconnect, device number 10 [ 509.586111][ T4585] usb 7-1: USB disconnect, device number 19 [ 509.608420][T14962] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74 [ 509.749839][ T6499] syz-executor: attempt to access beyond end of device [ 509.749839][ T6499] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 509.788389][ T5289] XFS (loop5): Unmounting Filesystem [ 509.812201][ T129] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 510.033646][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 510.033663][ T26] audit: type=1326 audit(2000000254.690:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14998 comm="syz.9.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc383f9aeb9 code=0x7ffc0000 [ 510.170294][ T26] audit: type=1326 audit(2000000254.740:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14998 comm="syz.9.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc383f9aeb9 code=0x7ffc0000 [ 510.292406][ T26] audit: type=1326 audit(2000000254.740:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14998 comm="syz.9.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc383f9aeb9 code=0x7ffc0000 [ 510.350334][ T26] audit: type=1326 audit(2000000254.740:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14998 comm="syz.9.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc383f9aeb9 code=0x7ffc0000 [ 510.505204][ T26] audit: type=1326 audit(2000000254.740:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14998 comm="syz.9.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fc383f9aeb9 code=0x7ffc0000 [ 510.625039][ T26] audit: type=1326 audit(2000000254.740:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14998 comm="syz.9.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc383f3c2d9 code=0x7ffc0000 [ 510.655272][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3712'. [ 510.723585][ T26] audit: type=1326 audit(2000000254.740:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14998 comm="syz.9.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc383f9aeb9 code=0x7ffc0000 [ 510.790270][ T26] audit: type=1326 audit(2000000254.740:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14998 comm="syz.9.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc383f9aeb9 code=0x7ffc0000 [ 511.030284][ T4281] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 511.039659][ T4281] Bluetooth: hci2: Injecting HCI hardware error event [ 511.048999][ T4269] Bluetooth: hci2: hardware error 0x00 [ 511.320513][T15019] loop5: detected capacity change from 0 to 32768 [ 511.386112][T15019] read_mapping_page failed! [ 511.395892][T15019] ERROR: (device loop5): txCommit: [ 511.395892][T15019] [ 511.427013][T15019] ERROR: (device loop5): remounting filesystem as read-only [ 511.561325][ T108] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 511.645970][ T108] ------------[ cut here ]------------ [ 511.651894][ T108] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 511.685108][T15034] [U] Ù [ 511.712972][ T108] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 511.719102][ T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 511.726321][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 511.736401][ T108] RIP: 0010:txUnlock+0xc87/0xcb0 [ 511.741380][ T108] Code: df eb 2c 07 0f 0b e8 48 41 8e fe 48 c7 c7 00 48 c6 8a 48 c7 c6 f9 43 c6 8a ba a4 03 00 00 48 c7 c1 e0 54 c6 8a e8 b9 eb 2c 07 <0f> 0b e8 22 41 8e fe 48 c7 c7 00 48 c6 8a 48 c7 c6 f9 43 c6 8a ba [ 511.761013][ T108] RSP: 0018:ffffc90002d47d28 EFLAGS: 00010246 [ 511.767098][ T108] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 912c9edbbcc7ef00 [ 511.775088][ T108] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 511.783072][ T108] RBP: ffffc900028ba090 R08: ffffc90002d47a27 R09: 1ffff920005a8f44 [ 511.791059][ T108] R10: dffffc0000000000 R11: fffff520005a8f45 R12: ffff888057b2b2e8 [ 511.799059][ T108] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888076e12694 [ 511.807050][ T108] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 511.815990][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.822578][ T108] CR2: 00007f7f9df4da08 CR3: 00000000656a7000 CR4: 00000000003506e0 [ 511.830922][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 511.838911][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 511.846895][ T108] Call Trace: [ 511.850189][ T108] [ 511.853132][ T108] ? lockdep_hardirqs_on+0x94/0x140 [ 511.858364][ T108] jfs_lazycommit+0x56a/0xa70 [ 511.863065][ T108] ? txFreelock+0x5a0/0x5a0 [ 511.867599][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 511.873507][ T108] ? do_task_dead+0xd0/0xd0 [ 511.878039][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 511.883951][ T108] ? __kthread_parkme+0x162/0x1c0 [ 511.889007][ T108] kthread+0x29d/0x330 [ 511.893092][ T108] ? txFreelock+0x5a0/0x5a0 [ 511.897608][ T108] ? kthread_blkcg+0xd0/0xd0 [ 511.902221][ T108] ret_from_fork+0x1f/0x30 [ 511.906661][ T108] [ 511.909708][ T108] Modules linked in: [ 511.945293][T15041] program syz.6.3723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.016938][ T108] ---[ end trace 0000000000000000 ]--- [ 512.022499][ T108] RIP: 0010:txUnlock+0xc87/0xcb0 [ 512.032439][ T108] Code: df eb 2c 07 0f 0b e8 48 41 8e fe 48 c7 c7 00 48 c6 8a 48 c7 c6 f9 43 c6 8a ba a4 03 00 00 48 c7 c1 e0 54 c6 8a e8 b9 eb 2c 07 <0f> 0b e8 22 41 8e fe 48 c7 c7 00 48 c6 8a 48 c7 c6 f9 43 c6 8a ba [ 512.055135][ T108] RSP: 0018:ffffc90002d47d28 EFLAGS: 00010246 [ 512.061437][ T108] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 912c9edbbcc7ef00 [ 512.069876][ T108] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 512.078303][ T108] RBP: ffffc900028ba090 R08: ffffc90002d47a27 R09: 1ffff920005a8f44 [ 512.086491][ T108] R10: dffffc0000000000 R11: fffff520005a8f45 R12: ffff888057b2b2e8 [ 512.094568][ T108] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888076e12694 [ 512.102847][ T108] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 512.112008][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.118853][ T108] CR2: 00007f7f9d3e0418 CR3: 000000002f6e5000 CR4: 00000000003506f0 [ 512.127115][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 512.135471][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 512.143529][ T108] Kernel panic - not syncing: Fatal exception [ 512.150193][ T108] Kernel Offset: disabled [ 512.154555][ T108] Rebooting in 86400 seconds..